aboutsummaryrefslogtreecommitdiffstats
path: root/package
Commit message (Collapse)AuthorAgeFilesLines
...
* umdns: convert seccomp filter rules to OCI formatDaniel Golle2020-11-172-31/+42
| | | | | | | procd-seccomp switched to OCI-compliant seccomp parser instead of our (legacy, OpenWrt-specific) format. Convert ruleset to new format. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* procd: drop legacy seccomp support, switch to OCI parsersDaniel Golle2020-11-171-3/+3
| | | | | | | | d8f36f5 seccomp: specifying architectures is optional d352e6e seccomp: switch to new OCI compliant parser c110405 trace: switch to OCI seccomp JSON output Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* wireguard-tools: fix category/description in menuconfigAlberto Bursi2020-11-171-2/+11
| | | | | | | | | | | | | | | | | | | | | wireguard-tools is trying to import the menuconfig section from the wireguard package, but since it's not anymore in the same makefile this seems to fail and wireguard-tools ends up in "extra packages" category instead with other odds and ends. Same for the description, it's trying to import it from the wireguard package but it fails so it only shows the line written in this makefile. remove the broken imports and add manually the entries and description they were supposed to load Fixes: ea980fb9c6de ("wireguard: bump to 20191226") Signed-off-by: Alberto Bursi <bobafetthotmail@gmail.com> [fix trailing whitespaces, add Fixes] Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* kernel: remove mvsw61xx swconfig driverDENG Qingfang2020-11-161-14/+0
| | | | | | | All targets that used mvsw61xx have switched to upstream mv88e6xxx DSA driver, so it can be removed. Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
* odhcpd: update to latest git HEADHans Dedecker2020-11-151-4/+4
| | | | | | fb55e80 dhcpv6-ia : write statefile atomically Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* dropbear: update to 2.81Hans Dedecker2020-11-154-9/+7
| | | | | | | | Update dropbear to latest stable 2.81; for the changes see https://matt.ucc.asn.au/dropbear/CHANGES Refresh patches Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
* wireguard-tools: drop the dependency on ip-{tiny,full}Rui Salvaterra2020-11-141-1/+1
| | | | | | | | | | | | BusyBox ip already provides the required functionality and is enabled by default in OpenWrt. This patch drops the ip dependency and makes the BusyBox ip required dependencies explicit, allowing for a significant image size reduction. openwrt-ath79-generic-ubnt_nanostation-loco-m-squashfs-sysupgrade.bin size: 4588354 bytes (with ip-tiny) 4457282 bytes (with BusyBox ip) Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* libjson-c: enable rpath for host builds to fix errors on recent macOSFelix Fietkau2020-11-141-0/+5
| | | | | | Same approach as on libubox Signed-off-by: Felix Fietkau <nbd@nbd.name>
* iproute2: update to 5.9Hans Dedecker2020-11-143-6/+6
| | | | | | | | | Update iproute2 to latest stable 5.9; for the changes see https://lwn.net/Articles/834755/ Refresh patches Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> Acked-by: Hauke Mehrtens <hauke@huake-m.de>
* kernel: remove kmod-capiFelix Fietkau2020-11-131-20/+0
| | | | | | We don't package any driver that uses this module Signed-off-by: Felix Fietkau <nbd@nbd.name>
* netifd: update to the latest versionFelix Fietkau2020-11-131-3/+3
| | | | | | 4a41135750d9 system-linux: only overwrite dev->present state on check_state for simple devices Signed-off-by: Felix Fietkau <nbd@nbd.name>
* libnetfilter-log: Backport kernel header syncsBrett Mastbergen2020-11-123-1/+161
| | | | | | | | | | | | Backport upstream commits that sync the local kernel header copies in this library, with up to date copies. These updated headers ensure that libnetfilter-log users can use current kernel functionality such as requesting that conntrack information be appended to nflog events sent to userspace via the NFULNL_CFG_F_CONNTRACK flag. This functionality has been available since kernel version 4.4 Signed-off-by: Brett Mastbergen <bmastbergen@untangle.com>
* sunxi: add support for Libre Computer ALL-H3-CC H5Roman Kuzmitskii2020-11-121-1/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Specification: - CPU: Allwinner H5, Quad-core Cortex-A53 Up to 1GHz - DDR3 RAM: 2GB - Network: 10/100M Ethernet x 1 - IR: x1 (Receive) - USB (Host) Type-A x3 - USB (OTG) Type-A x1 - MicroSD Slot x 1 - eMMC Slot x1 - MicroUSB power input - GPIO 40pin header - UART 3pin header - Leds: - librecomputer:blue:status - librecomputer:green:pwr - Buttons: - uboot button (used to enter fel mode) - power button (can trigger power on) - Power Supply via MicroUSB or GPIO 5V/2A Installation: - Write the image to SD Card with dd - Boot from the SD Card Signed-off-by: Roman Kuzmitskii <damex.pp@icloud.com> [Fixed Signed-off-by] Signed-off-by: Petr Štetiar <ynezz@true.cz>
* kernel: add module support Solarflare network adapterTan Zien2020-11-121-0/+38
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | According to Solarflare user guide it is recommended to install lm-sensors and use the following command to obtain adapter health info $ sensors | grep sfc sfc pci 0400 sfc pci 0401 $ sensors sfc pci 0400 sfc pci 0400 Adapter: PCI adapter 1.2V supply: N/A 3.3V supply: +3.22 V (min = +3.00 V, max = +3.60 V) 12.0V supply: +12.14 V (min = +11.04 V, max = +12.96 V) 0.9V supply (ext. ADC): +1.03 V (min = +0.50 V, max = +1.10 V) (crit max = +1.15 V) 0.9V phase A supply: N/A PHY overcurrent: N/A ERROR: Can't get value of subfeature temp1_alarm: Can't read PHY temp.: N/A AOE FPGA temp.: +68.0°C (low = +0.0°C, high = +95.0°C) (crit = +105.0°C) Ambient temp.: +56.0°C (low = +0.0°C, high = +75.0°C) (crit = +85.0°C) Controller die (TDIODE) temp.: +77.0°C (low = +0.0°C, high = +95.0°C) (crit = +105.0°C) Board front temp.: +59.0°C (low = +0.0°C, high = +75.0°C) (crit = +85.0°C) Board back temp.: +62.0°C (low = +0.0°C, high = +75.0°C) (crit = +85.0°C) 1.2V supply current: N/A 0.9V phase A supply current: N/A 3.3V supply current: N/A 12V supply current: N/A Signed-off-by: Tan Zien <nabsdh9@gmail.com>
* netfilter: Add queue support for nftablesBrett Mastbergen2020-11-121-0/+12
| | | | | | | | | This change adds the configuration option to build and include the nft_queue kernel module, which allows traffic to be queued up to userspace from an nftables rule Tested-by: Sébastien Delafond sdelafond@gmail.com Signed-off-by: Brett Mastbergen <bmastbergen@untangle.com>
* rpcd: remove file when appliedHuangbin Zhan2020-11-122-5/+7
| | | | | | Make sure exit value of this script is zero. Or the file won't be deleted. Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
* ca-certificates: canonical the build dirJianhui Zhao2020-11-121-1/+7
| | | | | | | The previous build directory "build_dir/target-xx/work/" contaminated the entire build directory. Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
* busybox: Let procd respawn cronBruno Randolf2020-11-122-1/+2
| | | | | | | On some systems I see the issue that crond dies after a few days. Simply letting procd respawn the process is a simple safety-net. Signed-off-by: Bruno Randolf <br1@einfach.org>
* uboot-envtools: support Xiaomi Mi Router 3G v2/4A GigabitAntonis Kanouras2020-11-122-1/+3
| | | | | | | | | | | | Add support for the following devices: - Xiaomi Mi Wi-Fi Router 3G v2 - Xiaomi Mi Router 4A Gigabit Edition Signed-off-by: Antonis Kanouras <antonis@metadosis.eu> [add explicit case for 4A, bump PKG_RELEASE, improve commit title/message] Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
* layerscape: make restool depend on TARGET_layerscape_armv8_64bYangbo Lu2020-11-121-2/+2
| | | | | | | The restool is for Layerscape DPAA2 platforms which are ARMv8 platforms. Signed-off-by: Yangbo Lu <yangbo.lu@nxp.com>
* wireguard: bump to 1.0.20201112Jason A. Donenfeld2020-11-121-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | * noise: take lock when removing handshake entry from table This is a defense in depth patch backported from upstream to account for any future issues with list node lifecycles. * netns: check that route_me_harder packets use the right sk A test for an issue that goes back to before Linux's git history began. I've fixed this upstream, but it doesn't look possible to put it into the compat layer, as it's a core networking problem. But we still test for it in the netns test and warn on broken kernels. * qemu: drop build support for rhel 8.2 We now test 8.3+. * compat: SYM_FUNC_{START,END} were backported to 5.4 * qemu: bump default testing version The real motivation for this version bump: 5.4.76 made a change that broke our compat layer. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* libnl-tiny: update to the latest versionFelix Fietkau2020-11-121-3/+4
| | | | | | | 2584ebc642b2 libnl-tiny: install pkgconfig file c291088f631d unl: add support for connecting to rtnl Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mac80211: add minstrel fixes that fix mt76 issues in legacy modeFelix Fietkau2020-11-122-0/+122
| | | | | | | | Remove deferred sampling code which does not work well with rate tables + probing. Fix tx status handling if the first invalid rate idx is not set to -1 Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mac80211: backport the new tasklet APIFelix Fietkau2020-11-121-0/+35
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* netifd: update to the latest versionFelix Fietkau2020-11-121-3/+3
| | | | | | | | | | | | | 3023b0cc7352 bridge: add support for defining port member vlans via hotplug ops a3016c451248 vlan: add pass-through hotplug ops that pass the VLAN info to the bridge d59f3ddcbaf0 vlandev: add pass-through hotplug ops that pass the VLAN info to the bridge dd5e61153636 bridge: show vlans in device status a56e14afa612 bridge: preserve hotplug ports on vlan update if config is unchanged d1e8884f8911 bridge: fix use-after-free bug on bridge member free 3a2b21001c3c system-dummy: set present state only for simple devices ed11f0c0ffe4 bridge: only overwrite implicit vlan assignment if vlans are configured Signed-off-by: Felix Fietkau <nbd@nbd.name>
* dnsmasq: 'ipset' config sectionsAleksandr Mezin2020-11-112-1/+28
| | | | | | | | | | | | | | | | | | | | | | | Allow configuring ipsets with dedicated config sections: config ipset list name 'ss_rules_dst_forward' list name 'ss_rules6_dst_forward' list domain 't.me' list domain 'telegram.org' instead of current, rather inconvenient syntax: config dnsmasq ... list ipset '/t.me/telegram.org/ss_rules_dst_forward,ss_rules6_dst_forward' Current syntax will still continue to work though. With this change, a LuCI GUI for DNS ipsets should be easy to implement. Signed-off-by: Aleksandr Mezin <mezin.alexander@gmail.com> Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> [PKG_RELEASE increase]
* base-files: bump PKG_RELEASEYousong Zhou2020-11-111-1/+1
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* base-files: upgrade: stage2: use v for log linesYousong Zhou2020-11-111-7/+7
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* base-files: upgrade: fwtool.sh: rewording logsYousong Zhou2020-11-111-2/+2
| | | | | | | | | | The intent is to make it sound more like info level message, not some error like "404 not found". x86 target at the moment makes image with only signature but no metadata (ref commit f8141216 "x86: append metadata to combined images"). Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> Reviewed-By: Philip Prindeville <philipp@redfish-solutions.com>
* base-files: upgrade: fwtool.sh: use v for log linesYousong Zhou2020-11-111-13/+13
| | | | | | | | | This will have at least the following effects - Log lines will have common prefix - They will be output to stderr instead of stdout Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* base-files: upgrade: add get_image_dd()Yousong Zhou2020-11-111-0/+11
| | | | | | | | | | This is mainly to handle stderr message "Broken pipe", "F+P records in/out" by common pattern "xcat | dd .." Ref: https://bugs.openwrt.org/index.php?do=details&task_id=3140 Reported-by: Philip Prindeville <philipp@redfish-solutions.com> Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> Reviewed-By: Philip Prindeville <philipp@redfish-solutions.com>
* base-files: upgrade: use stdin redirection to replace cat commandYousong Zhou2020-11-111-1/+1
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* base-files: upgrade: add vn and variantsYousong Zhou2020-11-111-1/+13
| | | | | | | | | | | | To be used with in the following pattern vn "Remaining: " for p in $xx; do _vn "$p" done _v Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* base-files: upgrade: log with date prefixYousong Zhou2020-11-112-2/+2
| | | | | | And log to stderr Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* dnsmasq: explictly set ednspacket_max valueJan Pavlinec2020-11-092-1/+2
| | | | | | | This is related to DNS Flag Day 2020. It sets default ends buffer size value to 1232. Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* refpolicy: add variant that builds modular policyW. Michael Petullo2020-11-091-2/+33
| | | | | | | | | This adds a variant of refpolicy that builds the modular form of the policy. While this requires more memory on the target device, along with some tricks to deal with OpenWrt's volatile /var directory, it is useful for experiementing with SELinux policy. Signed-off-by: W. Michael Petullo <mike@flyn.org>
* uhttpd: use P-256 for certsPaul Spooren2020-11-091-2/+2
| | | | | | | | | | | | The uhttpd package takes care of creating self-signed certificates if px5g is installed. This improves the security of router management as it encrypts the LuCI connection. The EC P-256 curve is faster than RSA which which improves the user experience on embedded devices. EC P-256 is support for as old devices as Android 4.4. Signed-off-by: Paul Spooren <mail@aparcar.org>
* hostapd: add a hostapd-basic-wolfssl variantRui Salvaterra2020-11-081-0/+13
| | | | | | | | | | | | If only AP mode is needed, this is currently the most space-efficient way to provide support for WPA{2,3}-PSK, 802.11w and 802.11r. openwrt-ath79-generic-ubnt_nanostation-loco-m-squashfs-sysupgrade.bin sizes: 4719426 bytes (with wpad-basic-wolfssl) 4457282 bytes (with hostapd-basic-wolfssl) Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
* procd: bump to git HEADDaniel Golle2020-11-071-3/+3
| | | | | | b0de894 jail: fix capabilities Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* procd: bump to git HEADDaniel Golle2020-11-051-3/+3
| | | | | | | | | | | | 2f381fe jail: guard boolean blobmsg attributes 602b8fa jail: add option for pidfile bba6de7 jail: handle mount propagation flags 6963d50 jail: relax seccomp unknown syscall handling e1fcfdc jail: add support for absolute root path in OCI spec 257f29b jail: don't fail if maskedPath cannot be found 75f2374 uxc: mimic runc cmdline by using getopt_long Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* gdb: fix building with NLS enabledDaniel Golle2020-11-051-2/+4
| | | | | | | Building gdb failed with CONFIG_BUILD_NLS enabled. Use nls.mk and add the necessary dependencies for libintl and libiconv. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* mac80211: ath9k: enable OEM cards support on x86Rafał Dzięgiel2020-11-041-0/+1
| | | | | | | | | | | A lot of devices running OpenWrt x86 arch (32 or 64 bit) are either "home-made routers" or devices that use PC class OEM components. This commit enables OEM cards support on those devices by default. Signed-off-by: Rafał Dzięgiel <rafostar.github@gmail.com> [reformat commit message] Signed-off-by: David Bauer <mail@david-bauer.net>
* mediatek: update uboot to latest patchset provided by MTKJohn Crispin2020-11-047-717/+7
| | | | | | MTK sent us their latest version of the staging uboot. Lets merge the patches. Signed-off-by: John Crispin <john@phrozen.org>
* base-files: add board.d support for bridge deviceJohn Crispin2020-11-043-3/+38
| | | | | | | | | Latest netifd allows us to setup network bridges with implicit vlan tagging. For this to work, we need to setup several additional uci sections. This feature is particularly usefull for DSA tupe devices. Add board.d and uci-defaults support for generating the sections. Signed-off-by: John Crispin <john@phrozen.org>
* opkg: clean up and fix performance regressionDaniel Golle2020-11-031-3/+3
| | | | | | | da9746a libopkg: clean up handling of unresolved dependencies Signed-off-by: Daniel Golle <daniel@makrotopia.org> Signed-off-by: Paul Spooren <mail@aparcar.org>
* opkg: fix yet another dependency resolution bugDaniel Golle2020-11-021-3/+3
| | | | | | | | | | The previous fix of a fix caused yet another problem leading to `opkg show-upgradable` ending up in an infinite loop. Fix that. Fixes: 4a2b1ff7fb ("opkg: fix dependency resolution") Reported-by: Huangbin Zhan <zhanhb88@gmail.com> Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* opkg: fix dependency resolutionDaniel Golle2020-11-021-3/+3
| | | | | | | | | | | | The previous commit broke opkg in a way that it would no longer include dependencies when installing a package, effectively leading to broken images and unusable systems. Fix that by making sure dependencies are still going to be checked. Also reduce size of struct abstract_pkg as suggested by @jow- while at it. Fixes: 1445d333aa ("opkg: bump to git HEAD") Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* zram-swap: use new extra_command wrapperFlorian Eckert2020-11-022-4/+3
| | | | | | Use new `extra_command` wrapper to fix the alignement. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* dropbear: use new extra_command wrapperFlorian Eckert2020-11-022-3/+3
| | | | | | Use new `extra_command` wrapper to fix the alignement. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* ltq-vdsl-app: use new extra_command wrapperFlorian Eckert2020-11-022-4/+3
| | | | | | Use new `extra_command` wrapper to fix the alignement. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
generated by cgit v1.2.3 (git 2.25.1) at 2025-02-01 12:50:25 +0000