aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* px5g-wolfssl: Fix permission of private keyHauke Mehrtens2023-11-082-17/+30
| | | | | | | | | | | | | | | | | | Store the private key with read and write permission for the user only and not with read permissions for everyone. This converts the write_file() function from fopen() to open() because open allows to specify the permission mask of the newly created file. It also adds and fixes some existing error handling. OpenSSL does this in the same way already. With this change it looks like this: root@OpenWrt:/# ls -al /etc/uhttpd.* -rw-r--r-- 1 root root 749 Nov 6 23:14 /etc/uhttpd.crt -rw------- 1 root root 121 Nov 6 23:14 /etc/uhttpd.key Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit 6aad5ab0992fefd88ce612bc0484e0115a004572)
* px5g-mbedtls: Fix permission of private keyHauke Mehrtens2023-11-082-10/+27
| | | | | | | | | | | | | | | | | | Store the private key with read and write permission for the user only and not with read permissions for everyone. This converts the write_file() function from fopen() to open() because open allows to specify the permission mask of the newly created file. It also adds and fixes some existing error handling. OpenSSL does this in the same way already. With this change it looks like this: root@OpenWrt:/# ls -al /etc/uhttpd.crt /etc/uhttpd.key -rw-r--r-- 1 root root 519 Nov 6 22:58 /etc/uhttpd.crt -rw------- 1 root root 121 Nov 6 22:58 /etc/uhttpd.key Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit 929c9a58c9a17a3ca8d2a3be0c5dc4ac98e848e2)
* hostapd: use rtnl to set up interfacesFelix Fietkau2023-11-083-5/+11
| | | | | | | In wpa_supplicant, set up wlan interfaces before adding them Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit c2a30b6e01aa756cd7d50c578ab4344c725ecc59)
* wifi: fix applying mesh parameters when wpa_supplicant is in useFelix Fietkau2023-11-083-26/+71
| | | | | | | | Apply them directly using nl80211 after setting up the interface. Use the same method in wdev.uc as well Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit 531314260d2e50e984e1671f88662b469dffb16e)
* netifd: update to the latest versionFelix Fietkau2023-11-081-3/+3
| | | | | | | | | | | | 383753dd65ae device/bridge: support passing extra vlans in the device_set_state call b6e75eafc1af device: send notifications for device events via ubus cab415c7aefd bridge: add auth-required bridge members with auth_status=0 if vlan is enabled 827a02f0343c bridge: add support for configuring vlans for auth=1,auth_status=false 40ed7363caf2 device: fix build error on 32 bit systems 516ab774cc16 system-linux: fix race condition on bringing up wireless devices Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit 41d7439af5a40a71a0deb2075fa133b61b0e478a)
* mediatek: add CMCC RAX3000M supportTianling Shen2023-11-079-2/+425
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Hardware specification: SoC: MediaTek MT7981B 2x A53 Flash: 64GB eMMC or 128 MB SPI-NAND RAM: 512MB Ethernet: 4x 10/100/1000 Mbps Switch: MediaTek MT7531AE WiFi: MediaTek MT7976C Button: Reset, Mesh Power: DC 12V 1A - UART: 3.3v, 115200n8 -------------------------- | Layout | | ----------------- | | 4 | GND TX VCC RX | <= | | ----------------- | -------------------------- Gain SSH access: 1. Login into web interface, and download the configuration. 2. Enter fakeroot, decompress the configuration: tar -zxf cfg_export_config_file.conf 3. Edit 'etc/config/dropbear', set 'enable' to '1'. 4. Edit 'etc/shadow', update (remove) root password: 'root::19523:0:99999:7:::' 5. Repack 'etc' directory: tar -zcf cfg_export_config_file.conf etc/ * If you find an error about 'etc/wireless/mediatek/DBDC_card0.dat', just ignore it. 6. Upload new configuration via web interface, now you can SSH to RAX3000M. Check stroage type: Check the label on the back of the device: "CH EC CMIIT ID: xxxx" is eMMC version "CH CMIIT ID: xxxx" is NAND version eMMC Flash instructions: 1. SSH to RAX3000M, and backup everything, especially 'factory' part. ('data' partition can be ignored, it's useless.) 2. Write new GPT table: dd if=openwrt-mediatek-filogic-cmcc_rax3000m-emmc-gpt.bin of=/dev/mmcblk0 bs=512 seek=0 count=34 conv=fsync 3. Erase and write new BL2: echo 0 > /sys/block/mmcblk0boot0/force_ro dd if=/dev/zero of=/dev/mmcblk0boot0 bs=512 count=8192 conv=fsync dd if=openwrt-mediatek-filogic-cmcc_rax3000m-emmc-preloader.bin of=/dev/mmcblk0boot0 bs=512 conv=fsync 4. Erase and write new FIP: dd if=/dev/zero of=/dev/mmcblk0 bs=512 seek=13312 count=8192 conv=fsync dd if=openwrt-mediatek-filogic-cmcc_rax3000m-emmc-bl31-uboot.fip of=/dev/mmcblk0 bs=512 seek=13312 conv=fsync 5. Set static IP on your PC: IP 192.168.1.254, GW 192.168.1.1 6. Serve OpenWrt initramfs image using TFTP server. 7. Cut off the power and re-engage, wait for TFTP recovery to complete. 8. After OpenWrt has booted, perform sysupgrade. 9. Additionally, if you want to have eMMC recovery boot feature: (Don't worry! You will always have TFTP recovery boot feature.) dd if=openwrt-mediatek-filogic-cmcc_rax3000m-initramfs-recovery.itb of=/dev/mmcblk0p4 bs=512 conv=fsync NAND Flash instructions: 1. SSH to RAX3000M, and backup everything, especially 'Factory' part. 2. Erase and write new BL2: mtd erase BL2 mtd write openwrt-mediatek-filogic-cmcc_rax3000m-nand-preloader.bin BL2 3. Erase and write new FIP: mtd erase FIP mtd write openwrt-mediatek-filogic-cmcc_rax3000m-nand-bl31-uboot.fip FIP 4. Set static IP on your PC: IP 192.168.1.254, GW 192.168.1.1 5. Serve OpenWrt initramfs image using TFTP server. 6. Cut off the power and re-engage, wait for TFTP recovery to complete. 7. After OpenWrt has booted, erase UBI volumes: ubidetach -p /dev/mtd0 ubiformat -y /dev/mtd0 ubiattach -p /dev/mtd0 8. Create new ubootenv volumes: ubimkvol /dev/ubi0 -n 0 -N ubootenv -s 128KiB ubimkvol /dev/ubi0 -n 1 -N ubootenv2 -s 128KiB 9. Additionally, if you want to have NAND recovery boot feature: (Don't worry! You will always have TFTP recovery boot feature.) ubimkvol /dev/ubi0 -n 2 -N recovery -s 20MiB ubiupdatevol /dev/ubi0_2 openwrt-mediatek-filogic-cmcc_rax3000m-initramfs-recovery.itb 10. Perform sysupgrade. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit 423186d7d8b4f23aee91fca4f1774a195eba00d8) [rebased to 23.05] Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* uboot-mediatek: add support for CMCC RAX3000MTianling Shen2023-11-072-0/+723
| | | | | | | | The OEM U-Boot uses dual boot and signature verification which does not support by OpenWrt. So add a custom U-Boot build for OpenWrt. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit fddd735dd54ded7d26df156eaa8d1cc53e668efb)
* arm-trusted-firmware-mediatek: add emmc/spim-nand ddr4 build for mt7981Tianling Shen2023-11-071-0/+18
| | | | | | | They will be used on CMCC RAX3000M. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org> (cherry picked from commit 7d8ffe941dd06a5625f6608516a86938260b01fc)
* treewide: fix MERCUSYS brand spellingMikhail Zhilkin2023-11-074-4/+4
| | | | | | | | | | This commit fixes MERCUSYS brand spelling. The proper name is capitalized. Link: https://www.mercusys.com/ Link: https://github.com/torvalds/linux/blob/master/drivers/net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c#L7779 Signed-off-by: Mikhail Zhilkin <csharper2005@gmail.com> (cherry picked from commit 45a50a06fb3f39ea70936dd967a74e6e96f0cd89)
* mbedtls: Activate secp521r1 curve by defaultHauke Mehrtens2023-11-072-2/+2
| | | | | | | | | | | | | | | | | | Activate the secp521r1 ecliptic curve by default. This curve is allowed by the CA/Browser forum, see https://cabforum.org/wp-content/uploads/CA-Browser-Forum-BR-v2.0.1-redlined.pdf#page=110 This increases the size of libmbedtls12_2.28.5-1_aarch64_generic.ipk by about 400 bytes: Without: 252,696 libmbedtls12_2.28.5-1_aarch64_generic.ipk With: 253,088 libmbedtls12_2.28.5-2_aarch64_generic.ipk Fixes: #13774 Acked-by: Koen Vandeputte <koen.vandeputte@citymesh.com> Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit 3c17cdbc369d89ff6a7911c3acff2e493778f6c1)
* image: fix image generation within ImageBuilderPetr Štetiar2023-11-061-0/+2
| | | | | | | | | | | | | | | Changes introduced in commit d604a07225c5 ("build: add CycloneDX SBOM JSON support") broke ImageBuilder: Cannot open '/openwrt-imagebuilder-ath79-generic.Linux-x86_64/tmp/.packageinfo': No such file or directory So lets fix it by wrapping the BOM generation behind condition of IB feature check. Fixes: #13881 Fixes: d604a07225c5 ("build: add CycloneDX SBOM JSON support") Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit c4259a658673cc1a02ed17bfa8e94de17de00ad2)
* libnl: add support for cliKoen Vandeputte2023-11-051-1/+18
| | | | | | | | | | | Some packages (like wavemon >= 0.9.4) depend on libnl-cli. Add support for this part of the lib. libnl-cli itself depends on libnl-genl and libnl-nf. On MIPS, this component adds 81kB. Signed-off-by: Koen Vandeputte <koen.vandeputte@citymesh.com> (punctuation correction and reorganisation of commit message) Signed-off-by: Nick Hainke <vincent@systemli.org> (cherry picked from commit 4bdd1c1a135b5c816a01055f3cc9fc158bbc840a)
* mediatek: add label-mac for GL.iNet GL-MT3000David Bauer2023-11-041-0/+1
| | | | | | | The MAC-address of gmac0 matches the one printed on the bottom label. Signed-off-by: David Bauer <mail@david-bauer.net> (cherry picked from commit ae500e62e2938e112ae1fc6aa7389e8c7b784b13)
* odhcpd: Bump to latest commitsKevin Darbyshire-Bryant2023-11-031-3/+3
| | | | | | | | d8118f6 config: make sure timer is not on the timeouts list before freeing 4bbc6e7 add hostsfile output in addition to statefile Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk> (cherry picked from commit 0221b860321ca2dd2bdc6339c01aa9adb3ddb34e)
* uboot-mediatek: fix global pll clock override on mtk_spimNicolò Veronese2023-11-031-0/+47
| | | | | | | | | | | | | With patch 101-03-spi-mtk_spim-get-spi-clk-rate-only-once.patch a new system to calculate the SPI clocks has been added. Unfortunately, the do_div macro overrides the global priv->pll_clk_rate field. This will cause to have a reduced clock rate on each subsequent SPI call. Signed-off-by: Valerio 'ftp21' Mancini <ftp21@ftp21.eu> Signed-off-by: Nicolò Veronese <nicveronese@gmail.com> (cherry picked from commit 8849ccb9957e69d85c93ad4b58400573a181ad18)
* build: fix pkg-config detection when inside of a nix-shellSandro Jäckel2023-11-021-1/+1
| | | | | | | | | | | The output of command_all when inside a nix-shell looks like the below where /usr does not match: ➜ scripts/command_all.sh pkg-config /nix/store/ifr6srqgpvygd5vp14748d109ri31isv-pkg-config-wrapper-0.29.2/bin/pkg-config Signed-off-by: Sandro Jäckel <sandro.jaeckel@gmail.com> (cherry picked from commit 86ca7199dfb132042ce3110acef23d74f4ef14a7)
* ci: add workflow for automated GitHub releasePetr Štetiar2023-11-021-0/+24
| | | | | | | | | | | | | | | | | | Implement a GitHub Actions workflow for automated project releases. The workflow triggers on Git tags, ensuring that a GitHub release is created whenever a new tag is pushed. That new release is going to be created in draft and pre-release mode and needs to be manually promoted to the proper release, once its decided, that its good enough and prepared. This is a start of a streamlined and consistent release process for GitHub, reducing manual intervention. Acked-by: Christian Marangi <ansuelsmth@gmail.com> Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit 280d9dd75874ef4c4e2407366eda987cda8efd25)
* hostapd: fix broken WPS on broadcom-wl and ath11kPetr Štetiar2023-11-021-0/+62
| | | | | | | | | | | | | | | | | | | | | Upgrading wpa_supplicant from 2.9 to 2.10 breaks broadcom-wl/ath11k based adapters. The reason for it is hostapd tries to install additional IEs for scanning while the driver does not support this. The kernel indicates the maximum number of bytes for additional scan IEs using the NL80211_ATTR_MAX_SCAN_IE_LEN attribute. Save this value and only add additional scan IEs in case the driver can accommodate these additional IEs. Bug: http://lists.infradead.org/pipermail/hostap/2022-January/040178.html Bug-Debian: https://bugs.debian.org/1004524 Bug-ArchLinux: https://bugs.archlinux.org/task/73495 Upstream-Status: Changes Requested [https://patchwork.ozlabs.org/project/hostap/patch/20220130192200.10883-1-mail@david-bauer.net] Reported-by: Étienne Morice <neon.emorice@mail.com> Tested-by: Étienne Morice <neon.emorice@mail.com> Signed-off-by: David Bauer <mail@david-bauer.net> Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit 6dca88aa4acd60229147628cb920d05a1136666d)
* build: add CycloneDX SBOM JSON supportPetr Štetiar2023-11-025-8/+240
| | | | | | | | | | | | | | CycloneDX is an open source standard developed by the OWASP foundation. It supports a wide range of development ecosystems, a comprehensive set of use cases, and focuses on automation, ease of adoption, and progressive enhancement of SBOMs (Software Bill Of Materials) throughout build pipelines. So lets add support for CycloneDX SBOM for packages and images manifests. Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit d604a07225c5c82b942cd3374cc113ad676a2519)
* package-dumpinfo,metadata: add ABI version information to package indexPetr Štetiar2023-11-022-0/+2
| | | | | | | | | | There is no standard for ABI versioning, so its not possible to find out from `libext2fs2`, `libiwinfo20230701` or `libss2` package names if thats just package name or package name with ABI version included. To help with the decision, lets make ABI version aviable in package index. Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit 649655f427932fe79b96a41f883c8054b1806191)
* package-metadata: add CPE information to JSON package manifestsPetr Štetiar2023-11-022-0/+2
| | | | | | | | | | | Common Platform Enumeration (CPE) is a structured naming scheme for information technology systems, software, and packages. In order for the information to be processed further, it should also be available in JSON package manifests. Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit 8562c65ff8aae3899cdb190319709500b7651492)
* package-dumpinfo: add CPE information to package indexPetr Štetiar2023-11-021-0/+1
| | | | | | | | | | | Common Platform Enumeration (CPE) is a structured naming scheme for information technology systems, software, and packages. In order for the information to be processed further, it should also be available in package index files. Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit 33b3fea70245068030ef64b6d7c5b344d08ba9d8)
* firewall4: update to the latest versionFelix Fietkau2023-11-021-3/+3
| | | | | | | | | | 23a434d0d15d tests: fix expected test output 840ccdeeabce fw4: avoid emitting invalid rule jump targets 20da9933fd7e fw4: fix another instance of invalid rule jump targets 598d9fbb5179 fw4: remove special cases around hw flow offloading Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit 7049ea9e95b0aec461f585523b773e68db3ae304)
* ucode: update to latest Git HEADJo-Philipp Wich2023-11-021-3/+3
| | | | | | | | | | | cfb24ea build: avoid redefining _FORTIFY_SOURCE 448c763 lib: enforce consistent `index()` behavior with empty needle argument cdc0203 nl80211: fix maybe uninitialized variable a69b5c8 vm: fix unused result warning ea046bd build: enable source fortification by default Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit 262554f12cbcc4e3bea2440ce1e696ce8791e732)
* ucode: fix build on macosFelix Fietkau2023-11-021-1/+11
| | | | | | | | Remove ABI version, since its format is not accepted by the linker. Enable rpath to avoid clash with system libraries Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit 5eb8a21ba5fe5e87c03f0361d1db989189be9c6d)
* ucode: update to latest Git HEADJo-Philipp Wich2023-11-021-145/+66
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Introduces signal handling facilities - Fixes potentially incorrect object equality tests - Introduces debug library - Introduces log library - ABI version bump due to changed VM structure layout - Revised packaging Changelog: 07c0317 jsdoc: switch to own custom theme 6ca08b0 jsdoc: properly handle indented documentation blocks 2a67f22 lib: add/improve documentation for require(), loadfile(), loadstring() 9993ccb uci: fix potential memory leaks in `configs()` f56394f ci: re-trigger workflows on pull request pushes 1c18993 lib: various documentation fixes d25dcb1 uci: add module documentation 4a8ece2 docs: use CSS and local JavaScript fixups to improve formatting 8f21cfa lib: introduce log library 8a3aefe build: auto-enable module depending on present libraries 6a01adc build: convert CMakeLists.txt into lowercase 8700665 ci: don't skip pull request workflows for `master` branch 0184d23 include: fix execvpe compat function on macOS 8b23884 uloop: rename environ variable to avoid clashing with system macro on macOS 7c209d7 types: ensure double serializatiion with decimal places d150425 rtnl: update the link attr TODOs d394174 rtnl: add IFLA_TARGET_NETNSID for operating in other namespaces 1227733 lib: fix documented return value for `splice()` c9982de docs: add struct module documentation 7dde493 docs: add missing headline to debug module documentation 8f852ea types: improve comparison reliability of binary strings 6940c28 lib: introduce debug library be07107 treewide: consolidate platform specific code in platform.c 2593270 uloop: interrupt on VM signals 97a5292 lib: add `signal()` stdlib function 1dbbb6a main: enable signal dispatching in the standalone cli interpreter 1623245 types: treat signal handler array as GC root 29b1c0d vm: introduce basic signal handling infrastructure 093684d fs: explicitly compare isatty() result 4f4f38f types: don't rely on implicit type conversion in ucv_compare() 4bee0ef docs: disable GitHub Jekyll post processing 5efb7a0 docs: further rework 33bc7bf docs: fix markup quirks 9d5e420 docs: add information about memory management and operator precedence f1190ef docs: various improvements f0cc841 fs: use `fseeko()` and `ftello()` cba0c3c fs: complete function documentation coverage f9260f7 github: drop superfluous CNAME file c85bc74 Create CNAME 5309294 lib: add JSDoc documentation b0f2f90 fs: add JSDoc documentation fe086da math: add JSDoc documentation 70f9348 docs: add initial JSDoc infrastructure 24f1a56 source: fix source offset accounting 9df9160 lexer: don't count EOF token as newline b9d8f06 ci: switch to official openwrt/gh-action-sdk Signed-off-by: Jo-Philipp Wich <jo@mein.io> (cherry picked from commit eacc885816fb46bf4054b0c3dd2cd1513322ad09)
* bcm53xx: add the latest fix version of brcm_nvramRafał Miłecki2023-11-021-0/+256
| | | | | | | It was just sent for upstream. Signed-off-by: Rafał Miłecki <rafal@milecki.pl> (cherry picked from commit 943bd3c9f6244c928cd168302d638a6a218fd4e6)
* kernel: fix mtd/NVMEM regression affecting U-Boot env NVMEM driverRafał Miłecki2023-11-025-4/+52
| | | | | | | Fixes: 20736013e910 ("kernel: backport nvmem v6.6 fixes and v6.7 changes") Fixes: https://github.com/openwrt/openwrt/issues/13831 Signed-off-by: Rafał Miłecki <rafal@milecki.pl> (cherry picked from commit c997634c017294cb38cf6f9a0112860c7e736a53)
* kernel: backport nvmem v6.6 fixes and v6.7 changesRafał Miłecki2023-11-028-1/+606
| | | | | Signed-off-by: Rafał Miłecki <rafal@milecki.pl> (cherry picked from commit b5956700702b5649ec70bfa0d115af5b439ce6d1)
* kernel: backport v6.6 nvmem changesRafał Miłecki2023-11-0221-1/+790
| | | | | Signed-off-by: Rafał Miłecki <rafal@milecki.pl> (cherry picked from commit 52c365f055f62eb820cc42b0a1cfd037c68b01d0)
* kernel: nvmem: fix "fixed-layout" & support "mac-base"Rafał Miłecki2023-11-022-0/+133
| | | | | | | | | DT binding for MAC cells in fixed layout was upstream approved and accepted. Add support for it. This can replace quite some of our downstream hacks. Signed-off-by: Rafał Miłecki <rafal@milecki.pl> (cherry picked from commit 61f674df4f0ce2b1c53b0b7f6b0c1d03d99838c0)
* urngd: update to version 2023-11-01Hauke Mehrtens2023-11-011-3/+3
| | | | | | | | | Fix compilation with glibc 44365eb Deactivate _FORTIFY_SOURCE in jitterentropy-base.c Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit d62726b1e44f785d543e4625b19ca1f628adda6c)
* uboot-mediatek: fix determine the size of an uImage.FIT using 'imsz' or 'imszb'.Jianhui Zhao2023-10-311-7/+5
| | | | | | | | It must read the entire image for previous code of 'imsz' or 'imszb'. Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com> Suggested-by: Chuanhong Guo <gch981213@gmail.com> (cherry picked from commit 3bbc1d5fba1d700917138334a48c16bafdf48de9)
* mediatek: add build for MT7981 RFBDaniel Golle2023-10-317-1/+377
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add build for the MTK3943 reference board for MT7981B+MT7976C. **Hardware specification:** - SoC: MediaTek MT7981B 2x A53 - Flash: various options - RAM: 256MB DDR3 - Ethernet: 4 x 10/100/1000 Mbps via MT7531AE switch EITHER 1 x 10/100/1000 Mbps built-in PHY OR 1 x 10/100/1000/2500 Mbps MaxLinear GPY211C - Switch: MediaTek MT7531AE - WiFi: MediaTek MT7976C - Button: RST, WPS **Flash instructions for SPIM-NAND:** - write *mt7981-rfb-spim-nand-preloader.bin to 'BL2' partition - write *mt7981-rfb-spim-nand-bl31-uboot.fip to 'FIP' partition - erase 'ubi' partition - reset board - create ubootenv and ubootenv2 UBI volumes in U-Boot - edit environment and set bootcmd, e.g. setenv bootconf 'config-1#mt7981-rfb-spim-nand#mt7981-rfb-mxl-2p5g-phy-eth1' setenv bootcmd 'ubi read $loadaddr fit; bootm $loadaddr#$bootconf' - load initramfs image via TFTP: setenv serverip 192.168.1.254 setenv ipaddr 192.168.1.1 setenv bootfile openwrt-mediatek-filogic-mediatek_mt7981-rfb-initramfs.itb saveenv ; saveenv tftpboot bootm $loadaddr#$bootconf - Now use sysupgrade to write OpenWrt firmware to flash. SNFI-NAND, SPIM-NOR and eMMC all work very similar, a bootable SD card image is also being generated. However, as the board I've been provided only comes with SPIM-NAND all other boot media are untested. Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit ce7209bd21661e3daa4a7f2f58dafdff990da19f)
* uboot-mediatek: add build for mt7981 rfbDaniel Golle2023-10-314-0/+808
| | | | | | | | Improve and package builds for various boot media configurations of the MediaTek MT7981 reference board. Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit 8428bed15d9b5a71a634c7f5639de31a09795bec)
* arm-trusted-firmware-mediatek: fix copy&paste error in MakefileDaniel Golle2023-10-311-2/+2
| | | | | | | | | | When adding builds for MT7981 the related Makefile sections for MT7986 have apparently been copied, but in one instance the rename from 7986 to 7981 has been omitted. Fix that now. Fixes: 602cb4f325 ("arm-trusted-firmware-mediatek: add build for MT7981 DDR3") Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit be6e257fe6a248425fd390e9a2037a8432e644ea)
* kernel: serial: 8250_mtk: track busclk state to avoid bus errorDaniel Golle2023-10-311-0/+61
| | | | | | | | | UARTs not used as boot console are currently broken on some MediaTek targets due to register access depending on the bus clock being enabled. Add patch to make sure this dependency is always met. Signed-off-by: Daniel Golle <daniel@makrotopia.org> (cherry picked from commit 9f62abbb60b849c710cc7e40498d661827e8f852)
* hostapd: fix OWE association with mbedtlsDavid Bauer2023-10-312-1/+92
| | | | | | | | | | | | | | | | | The code for hostapd-mbedtls did not work when used for OWE association. When handling association requests, the buffer offsets and length assumptions were incorrect, leading to never calculating the y point, thus denying association. Also when crafting the association response, the buffer contained the trailing key-type. Fix up both issues to adhere to the specification and make hostapd-mbedtls work with the OWE security type. Signed-off-by: David Bauer <mail@david-bauer.net> (cherry picked from commit 39341f422f895a37b405b753c3630b1bdc9b8c6e)
* ramips: enable wireless LEDs activity blinking for TP-Link EC330-G5u v1Mikhail Zhilkin2023-10-311-2/+2
| | | | | | | | This commit enables wireless LEDs activity blinking for TP-Link EC330-G5u v1 router. Signed-off-by: Mikhail Zhilkin <csharper2005@gmail.com> (cherry picked from commit 7666940efea27c7d16bb0e329bb5dd7117fb5807)
* hostapd: do not trim trailing whitespace, except for newlineFelix Fietkau2023-10-311-2/+2
| | | | | | | Fixes adding SSID or key with trailing whitespace Signed-off-by: Felix Fietkau <nbd@nbd.name> (cherry picked from commit a2d8226c4f45555f49542d6f047b70d44f23f7ec)
* ath79: increase the rfkill debounce interval for TP-Link Archer C7 v2Shiji Yang2023-10-311-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Due to circuit issue or silicon defect, sometimes the WiFi switch button of the Archer C7 v2 can be accidentally triggered multiple times in one second. This will cause WiFi to be unexpectedly shut down and trigger 'irq 23: nobody cared'[1] warning. Increasing the key debounce interval to 1000 ms can fix this issue. This patch also add the missing rfkill key label. [1] Warning Log: ``` [87765.218511] irq 23: nobody cared (try booting with the "irqpoll" option) [87765.225331] CPU: 0 PID: 317 Comm: irq/23-keys Not tainted 5.15.118 #0 ... [87765.486246] handlers: [87765.488543] [<85257547>] 0x800c29a0 threaded [<5c6328a2>] 0x80ffe0b8 [gpio_button_hotplug@4cf73d00+0x1a00] [87765.498364] Disabling IRQ #23 ``` Fixes: https://github.com/openwrt/openwrt/issues/13010 Fixes: https://github.com/openwrt/openwrt/issues/12167 Fixes: https://github.com/openwrt/openwrt/issues/11191 Fixes: https://github.com/openwrt/openwrt/issues/7835 Tested-by: Hans Hasert Signed-off-by: Shiji Yang <yangshiji66@qq.com> (cherry picked from commit e32f70e7066c3110694851eced3301f50019693b)
* ramips: fix Gigabit Ethernet port of the HiWiFi HC5861Shiji Yang2023-10-312-2/+6
| | | | | | | | | HiWiFi HC5861 has a GbE port which connected to the RTL8211E PHY chip. This patch adds the missing Realtek PHY driver package and sets the correct external PHYs base address to make it work again. Signed-off-by: Shiji Yang <yangshiji66@qq.com> (cherry picked from commit f025135f16e2b3e9398cfd87585d055a1ca31975)
* iptables: opt-out of lto usageAnari Jalakas2023-10-311-1/+1
| | | | | | | | | | | | This fixes building with USE_LTO enabled. <artificial>:(.text+0xc22): relocation R_MIPS16_26 against `libxt_DNAT_init' cannot be used when making a shared object; recompile with -fPIC ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: non-dynamic relocations refer to dynamic symbol printf ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: failed to set dynamic section sizes: bad value collect2: error: ld returned 1 exit status Signed-off-by: Anari Jalakas <anari.jalakas@gmail.com> (cherry picked from commit 5dbdf3bb3af27993977aaaa72dca07d9251c1919)
* lua: opt-out of lto usageAnari Jalakas2023-10-311-0/+2
| | | | | | | | | | | | This fixes building with USE_LTO enabled. <artificial>:(.text+0xcc8): relocation R_MIPS16_26 against `luaL_argerror' cannot be used when making a shared object; recompile with -fPIC ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: non-dynamic relocations refer to dynamic symbol strcpy ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: failed to set dynamic section sizes: bad value collect2: error: ld returned 1 exit status Signed-off-by: Anari Jalakas <anari.jalakas@gmail.com> (cherry picked from commit 246b97b607e316d6acae66a23fcdf6d12c02a786)
* libsepol: opt-out of lto usageAnari Jalakas2023-10-311-0/+2
| | | | | | | | | | | | This fixes building with USE_LTO enabled. <artificial>:(.text+0x4194): relocation R_MIPS16_26 against `cil_printf.lto_priv.0' cannot be used when making a shared object; recompile with -fPIC ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: non-dynamic relocations refer to dynamic symbol memcmp ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: failed to set dynamic section sizes: bad value collect2: error: ld returned 1 exit status Signed-off-by: Anari Jalakas <anari.jalakas@gmail.com> (cherry picked from commit 1925a183a3f25d2db1f10addc85ed894df14c210)
* libselinux: opt-out of lto usageAnari Jalakas2023-10-311-0/+2
| | | | | | | | | | | | This fixes building with USE_LTO enabled: <artificial>:(.text.exit+0x6e): relocation R_MIPS16_26 against `pthread_key_delete' cannot be used when making a shared object; recompile with -fPIC ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: non-dynamic relocations refer to dynamic symbol stpcpy ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: failed to set dynamic section sizes: bad value collect2: error: ld returned 1 exit status Signed-off-by: Anari Jalakas <anari.jalakas@gmail.com> (cherry picked from commit 2a33d26d2110a9332e343a1deb32c9eee486c0db)
* iwinfo: opt-out of lto usageAnari Jalakas2023-10-311-0/+2
| | | | | | | | | | | | This fixes building with USE_LTO enabled. <artificial>:(.text+0x400c): relocation R_MIPS16_26 against `iwinfo_close' cannot be used when making a shared object; recompile with -fPIC ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: non-dynamic relocations refer to dynamic symbol strcpy ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: failed to set dynamic section sizes: bad value collect2: error: ld returned 1 exit status Signed-off-by: Anari Jalakas <anari.jalakas@gmail.com> (cherry picked from commit fbacc5ae52ec8fbe89b3a47850b4d6f62d4c4bf5)
* build: hide kmod-zram config unless enabledRani Hod2023-10-311-9/+11
| | | | | | | | | | Currently the zram default compressor choice is displayed whether or not zram is activated. Since the default choice is lzo-rle, this adds a false dependency on kmod-lib-lzo. With this patch, the choice options appear only when activating zram. Signed-off-by: Rani Hod <rani.hod@gmail.com> (cherry picked from commit 62ada26de28e6c43a957b8f186ead1f45e6a5623)
* qualcommax: only build initramfs if CONFIG_TARGET_ROOTFS_INITRAMFS is setFlorian Maurer2023-10-311-1/+3
| | | | | | | This makes it possible to build the ipq807x netgear-wax218 without initramfs - which is required for downstream projects (gluon) Signed-off-by: Florian Maurer <f.maurer@outlook.de> (cherry picked from commit b3d2008f92f15ff776ad6c4f6d113b0cda1bd2d0)
* uboot-mediatek: Sync phy-mode for Xiaomi Redmi Router AX6000Furong Xu2023-10-311-2/+2
| | | | | | | | | | | | Commit 572ea6807053 ("uboot-mediatek: add patches for MT7988 and builds for RFB") renamed HSGMII to 2500basex, but forgot to update the dts of Redmi Router AX6000, makes the network unusable. This patch makes the network usable again. Fixes: #13724 Fixes: 572ea6807053 ("uboot-mediatek: add patches for MT7988 and builds for RFB") Signed-off-by: Furong Xu <xfr@outlook.com> (cherry picked from commit 03987d2d11c4954e3e8afa3d44ba6213e774c742)