feed/packages.git
3 years agoMerge pull request #15511 from PowerDNS/unbound-htpps
Mirko Vogt [Sun, 25 Apr 2021 15:16:28 +0000 (17:16 +0200)]
Merge pull request #15511 from PowerDNS/unbound-htpps

unbound: fix typo in assist name of https-dns-proxy

3 years agounbound: fix typo in assist name of https-dns-proxy
Peter van Dijk [Sun, 25 Apr 2021 14:16:23 +0000 (16:16 +0200)]
unbound: fix typo in assist name of https-dns-proxy

I left the old version in, in case users have configs that already correct for this error.

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>
3 years agoMerge pull request #15507 from hswong3i/master-SQUID_enable-ssl-crtd
Rosen Penev [Sun, 25 Apr 2021 09:00:13 +0000 (02:00 -0700)]
Merge pull request #15507 from hswong3i/master-SQUID_enable-ssl-crtd

squid: Enable dynamic SSL certificate generation

3 years agoconntrack-tools: add a patch to fix endianness issue
Tao Gong [Tue, 20 Apr 2021 22:46:28 +0000 (22:46 +0000)]
conntrack-tools: add a patch to fix endianness issue

Signed-off-by: Tao Gong <gongtao0607@gmail.com>
3 years agosquid: Enable dynamic SSL certificate generation
Wong Hoi Sing Edison [Sun, 25 Apr 2021 02:38:14 +0000 (10:38 +0800)]
squid: Enable dynamic SSL certificate generation

Maintainer: @neheb / @BKPepe / @zhanhb
Compile tested: ipq806x, generic, netgear_r7800, master
Run tested: ipq806x, generic, netgear_r7800, openwrt-19.07

Description:

Squid now only support HTTPS proxy in TCP tunnel mode (e.g. `ssl_bump splice all`):

    https_port 3128 ssl-bump tls-cert=/etc/squid/squid.pem generate-host-certificates=on
    ssl_bump splice all

In order to operate in SSL Bump mode, we need to compile with `--enable-ssl-crtd` for following configuration:

    https_port 3128 ssl-bump tls-cert=/etc/squid/squid.pem generate-host-certificates=on
    sslcrtd_program /usr/lib/squid/security_file_certgen -s /car/cache/squid/ssl_db -M 4MB
    ssl_bump stare all
    ssl_bump bump all

This PR switch the `SQUID_enable-ssl-crtd` into `default y`, therefore default enable SSL Bump mode.

Signed-off-by: Wong Hoi Sing Edison <hswong3i@pantarei-design.com>
3 years agocoremark: bump to 2021-03-12
Aleksander Jan Bajkowski [Sun, 4 Apr 2021 20:16:03 +0000 (22:16 +0200)]
coremark: bump to 2021-03-12

Signed-off-by: Aleksander Jan Bajkowski <A.Bajkowski@stud.elka.pw.edu.pl>
3 years agoksmbd: update to 3.3.9
Rosen Penev [Sat, 24 Apr 2021 08:27:35 +0000 (01:27 -0700)]
ksmbd: update to 3.3.9

Signed-off-by: Rosen Penev <rosenp@gmail.com>
3 years agoksmbd-tools: update to 3.3.9
Rosen Penev [Sat, 24 Apr 2021 09:18:40 +0000 (02:18 -0700)]
ksmbd-tools: update to 3.3.9

Signed-off-by: Rosen Penev <rosenp@gmail.com>
3 years agouacme: add use_auto_staging
Leonardo Mörlein [Sun, 11 Apr 2021 23:30:48 +0000 (01:30 +0200)]
uacme: add use_auto_staging

Staging certificates have the advantage that their retry limits are loose.
Therefore they can be obtained quickly when automatic retries are used.
Unfortunately they can not be used for deployments because their CA is not
accepted by clients. Production certificates do not have this limitation, but
their retry limits are strict. For production certificates, automatic retries
can only be performed a few times per hour. This makes automatic obtainment of
certificates tenacious.

With use_auto_staging=1, the advantages of the two certificate types are
combined. Uacme will first obtain a staging certificate. When the staging
certificate is successfully obtained, uacme will switch and obtain a production
certificate. Since the staging certificate has already been successfully
obtained, we can ensure that the production certificate is successfully
obtained in the first attempt. This means that "retries" are performed on the
staging certificate and the production certificate is obtained in the first
attempt.

In summary, this feature enables fast obtaining of production certificates when
automatic retries are used.

By default, this feature is set to use_auto_staging=0, which means that
uacme will behave as before by default.

Signed-off-by: Leonardo Mörlein <git@irrelefant.net>
3 years agouacme: do not override production state dir variable
Leonardo Mörlein [Sun, 11 Apr 2021 23:30:39 +0000 (01:30 +0200)]
uacme: do not override production state dir variable

With this commit, issue_cert() can be called multiple times alternating
between staging and production certificates within a script.

Before this commit, the production state dir was stored in $STATE_DIR.
But in the case of $use_staging=1, this variable was overwritten in
issue_cert() with $STAGING_STATE_DIR. This made it impossible to call
issue_cert() with $use_staging=0 afterwards. Now the production state
dir is stored in $PRODUCTION_STATE_DIR. This way it is not overridden
anymore and issue_cert() can be called multiple times alternating with
production and staging.

Signed-off-by: Leonardo Mörlein <git@irrelefant.net>
3 years agoMerge pull request #15466 from cotequeiroz/mutt
Rosen Penev [Sat, 24 Apr 2021 08:16:24 +0000 (01:16 -0700)]
Merge pull request #15466 from cotequeiroz/mutt

mutt: don't use host mailpath definition

3 years agofwknop: Remove unnecessary get_bool() function.
Oldřich Jedlička [Sat, 9 Jan 2021 20:41:40 +0000 (21:41 +0100)]
fwknop: Remove unnecessary get_bool() function.

The get_bool() functionality was already merged to lib/functions.sh, so
it is redundant in the init script. Remove it.

Signed-off-by: Oldřich Jedlička <oldium.pro@gmail.com>
3 years agogummiboot: add new package
Oskari Rauta [Wed, 21 Apr 2021 00:58:42 +0000 (03:58 +0300)]
gummiboot: add new package

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
3 years agognu-efi: add new package
Oskari Rauta [Wed, 21 Apr 2021 00:54:18 +0000 (03:54 +0300)]
gnu-efi: add new package

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
3 years agoMerge pull request #15505 from gstrauss/lighttpd-1.4.59-2
Rosen Penev [Sat, 24 Apr 2021 08:04:44 +0000 (01:04 -0700)]
Merge pull request #15505 from gstrauss/lighttpd-1.4.59-2

lighttpd: patches from upstream

3 years agolighttpd: patches from upstream
Glenn Strauss [Fri, 23 Apr 2021 23:06:27 +0000 (19:06 -0400)]
lighttpd: patches from upstream

- ignore Content-Length from backend if 101 Switching Protocols
- close HTTP/2 connection after bad password
- skip cert chain build for self-issued certs
- meson zstd fix
- ls-hpack upstream update
- discard some HTTP/2 DATA frames received after response

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
3 years agoMerge pull request #15503 from dibdot/banip
Dirk Brenken [Fri, 23 Apr 2021 15:40:59 +0000 (17:40 +0200)]
Merge pull request #15503 from dibdot/banip

banip: fix housekeeping

3 years agobanip: fix housekeeping
Dirk Brenken [Fri, 23 Apr 2021 13:03:53 +0000 (15:03 +0200)]
banip: fix housekeeping

* fix whitelist housekeeping if you switch between normal- and
  'whitelist only' mode

Signed-off-by: Dirk Brenken <dev@brenken.org>
3 years agoMerge pull request #15488 from Ansuel/improve-atlas
Josef Schlehofer [Fri, 23 Apr 2021 12:49:16 +0000 (14:49 +0200)]
Merge pull request #15488 from Ansuel/improve-atlas

atlas-sw-probe: improve key creation

3 years agoatlas-sw-probe: improve key creation
Ansuel Smith [Thu, 22 Apr 2021 23:58:41 +0000 (01:58 +0200)]
atlas-sw-probe: improve key creation

- Exit start if a probe_key is not present
- Add create_key command to generate a private_key based on the provided username in the atlas config.
- Add registration instruction in /etc/atlas
- Rework script to save probe_key on sysupgrade (the key are now adviced to be placed in the /etc/atlas dir and a link is used to make them accessible in the atlas-sw-scripts etc dir)

Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
3 years agoMerge pull request #15493 from dibdot/banIP
Dirk Brenken [Thu, 22 Apr 2021 03:46:43 +0000 (05:46 +0200)]
Merge pull request #15493 from dibdot/banIP

banip: update to 0.7.7

3 years agognunet: update to v0.14.1
Daniel Golle [Wed, 21 Apr 2021 23:00:08 +0000 (00:00 +0100)]
gnunet: update to v0.14.1

 * lots of fixes for many subsystems
 * new messenger group chat service
 * 'abd' temporarily removed due to upstream issue

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
3 years agoMerge pull request #15494 from mstorchak/tmux
Rosen Penev [Wed, 21 Apr 2021 23:47:25 +0000 (16:47 -0700)]
Merge pull request #15494 from mstorchak/tmux

tmux: update to 3.2

3 years agoMerge pull request #15495 from mkrkn/master
Rosen Penev [Wed, 21 Apr 2021 23:47:00 +0000 (16:47 -0700)]
Merge pull request #15495 from mkrkn/master

openvpn: update to 2.5.2

3 years agoopenvpn: update to 2.5.2
Magnus Kroken [Wed, 21 Apr 2021 20:45:03 +0000 (22:45 +0200)]
openvpn: update to 2.5.2

Fixes two related security vulnerabilities (CVE-2020-15078) which
under very specific circumstances allow tricking a server using delayed
authentication (plugin or management) into returning a PUSH_REPLY before
the AUTH_FAILED message, which can possibly be used to gather
information about a VPN setup. In combination with "--auth-gen-token" or
a user-specific token auth solution it can be possible to get access to
a VPN with an otherwise-invalid account.

OpenVPN 2.5.2 also includes other bug fixes and improvements.

Add CI build test script.

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
3 years agotmux: update to 3.2
Maxim Storchak [Wed, 21 Apr 2021 21:05:36 +0000 (00:05 +0300)]
tmux: update to 3.2

- switch to $(AUTORELEASE)
- change dependency from libevent2 to libevent2-core

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
3 years agobanip: update to 0.7.7
Dirk Brenken [Wed, 21 Apr 2021 19:00:52 +0000 (21:00 +0200)]
banip: update to 0.7.7

* add a "whitelist only" mode, this option allows to restrict Internet
  access from/to a small number of secure websites/IPs, and block access
  from/to the rest of the Internet.

Signed-off-by: Dirk Brenken <dev@brenken.org>
3 years agouvol: improve autopart and lvm scripts, fix F2FS volumes
Daniel Golle [Wed, 21 Apr 2021 16:08:17 +0000 (17:08 +0100)]
uvol: improve autopart and lvm scripts, fix F2FS volumes

Use sfdisk to get GPT partition by name as partition names are not
known by the kernel if added via partx.
Make sure physical volume names are unique, if possible correlate
with the disks serial number and/or card's cid.
mkf2fs apparently returns 134 even in case format succeeded, so don't
fail in that case (this fixes rw volumes large enough for F2FS to be
selected by the lvm scripts of uvol).

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
3 years agonode: Resolve ICU conflict
Hirokazu MORIKAWA [Wed, 21 Apr 2021 02:24:44 +0000 (11:24 +0900)]
node: Resolve ICU conflict

Resolve conflicts between OpenWrt's ICU package and the ICU shipped with node.js.

https://github.com/openwrt/packages/issues/15437

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
3 years agodockerd: Updated to 20.10.6
Gerard Ryan [Wed, 21 Apr 2021 11:04:48 +0000 (21:04 +1000)]
dockerd: Updated to 20.10.6

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
3 years agodocker: Updated to 20.10.6
Gerard Ryan [Wed, 21 Apr 2021 11:04:21 +0000 (21:04 +1000)]
docker: Updated to 20.10.6

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
3 years agolibnetwork: Updated to 2021-01-26 for docker 20.10.6
Gerard Ryan [Wed, 21 Apr 2021 11:01:36 +0000 (21:01 +1000)]
libnetwork: Updated to 2021-01-26 for docker 20.10.6

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
3 years agocontainerd: Updated to 1.4.4 for docker 20.10.6
Gerard Ryan [Wed, 21 Apr 2021 11:00:07 +0000 (21:00 +1000)]
containerd: Updated to 1.4.4 for docker 20.10.6

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
3 years agoMerge pull request #15471 from TDT-AG/pr/20200420-stunnel
Florian Eckert [Wed, 21 Apr 2021 06:45:36 +0000 (08:45 +0200)]
Merge pull request #15471 from TDT-AG/pr/20200420-stunnel

stunnel: update to 5.59

3 years agoMerge pull request #15483 from oskarirauta/feature_mtools
Rosen Penev [Wed, 21 Apr 2021 00:31:14 +0000 (17:31 -0700)]
Merge pull request #15483 from oskarirauta/feature_mtools

mtools: add new package

3 years agoMerge pull request #15449 from SibrenVasse/master
Rosen Penev [Wed, 21 Apr 2021 00:30:37 +0000 (17:30 -0700)]
Merge pull request #15449 from SibrenVasse/master

openssh: update to 8.6p1

3 years agoMerge pull request #15476 from rs/nextdns-1.32.0-master
Rosen Penev [Wed, 21 Apr 2021 00:29:34 +0000 (17:29 -0700)]
Merge pull request #15476 from rs/nextdns-1.32.0-master

nextdns: Update to version 1.32.0

3 years agoMerge pull request #15480 from oskarirauta/podman-311
Rosen Penev [Wed, 21 Apr 2021 00:28:50 +0000 (17:28 -0700)]
Merge pull request #15480 from oskarirauta/podman-311

podman: update to 3.1.1

3 years agopodman: update to 3.1.1
Oskari Rauta [Tue, 20 Apr 2021 21:18:27 +0000 (00:18 +0300)]
podman: update to 3.1.1

 - Add support for AppArmor
 - Gracefully stop containers and pods on shutdown

I found out that If you change location of containers to persistent storage instead of tmpfs, starting them will fail unless they have been stopped. If this is the case that reboot has occurred before pods and containers have been stopped, they cannot be started, they have to be removed and re-created. Change in initscript tries to avoid that. Even if containers are running at tmpfs, this won't hurt. Still, if something happens and system hangs/reboots/etc, script won't save you from that. It's just a attempt to make things better.
I also enabled AppArmor support for future possibilities.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
3 years agomtools: add new package
Oskari Rauta [Wed, 21 Apr 2021 00:19:14 +0000 (03:19 +0300)]
mtools: add new package

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
3 years agoMerge pull request #15473 from ClaymorePT/boost_1.76.0
Rosen Penev [Tue, 20 Apr 2021 22:15:55 +0000 (15:15 -0700)]
Merge pull request #15473 from ClaymorePT/boost_1.76.0

boost: Bump to version 1.76.0

3 years agocni-plugins-nft: add new package
Oskari Rauta [Tue, 20 Apr 2021 23:26:53 +0000 (02:26 +0300)]
cni-plugins-nft: add new package

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
3 years agoboost: Bump to version 1.76.0
Carlos Miguel Ferreira [Tue, 20 Apr 2021 12:55:57 +0000 (13:55 +0100)]
boost: Bump to version 1.76.0

This commit updates boost to version 1.76.0

There are no new libraries in this version

More info about Boost 1.76.0 can be found at the usual place [1].

Note: This package update includes a fix merged to Boost.Fiber in [2]
which did not make into this version but it will be present in the next
one. For now, the patch is needed, but it will be removed in version
1.77.0

[1]: https://www.boost.org/users/history/version_1_76_0.html
[2]: https://github.com/boostorg/fiber/pull/276

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>
3 years agogenerate-ipv6-address: fix PIC compilation
Rosen Penev [Tue, 20 Apr 2021 01:28:14 +0000 (18:28 -0700)]
generate-ipv6-address: fix PIC compilation

This is a single C file. Don't bother using the Makefile.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
3 years agonextdns: Update to version 1.32.0
Olivier Poitrey [Tue, 20 Apr 2021 15:08:38 +0000 (15:08 +0000)]
nextdns: Update to version 1.32.0

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
3 years agoMerge pull request #15472 from sartura/uci2-update
Luka Perkov [Tue, 20 Apr 2021 13:50:01 +0000 (15:50 +0200)]
Merge pull request #15472 from sartura/uci2-update

uci2: update revision

3 years agoopenssh: update to 8.6p1
Sibren Vasse [Mon, 19 Apr 2021 13:35:48 +0000 (15:35 +0200)]
openssh: update to 8.6p1

Signed-off-by: Sibren Vasse <github@sibrenvasse.nl>
3 years agouci2: update revision
Jakov Petrina [Tue, 20 Apr 2021 08:08:19 +0000 (10:08 +0200)]
uci2: update revision

Signed-off-by: Jakov Petrina <jakov.petrina@sartura.hr>
3 years agostunnel: update to 5.59
Florian Eckert [Mon, 19 Apr 2021 14:45:19 +0000 (16:45 +0200)]
stunnel: update to 5.59

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
3 years agoMerge pull request #15343 from accwebs/feature/udp-broadcast-relay-redux
Rosen Penev [Tue, 20 Apr 2021 04:24:46 +0000 (21:24 -0700)]
Merge pull request #15343 from accwebs/feature/udp-broadcast-relay-redux

udp-broadcast-relay-redux: Add package

3 years agoudp-broadcast-relay-redux: Add package
Aaron Curley [Sun, 4 Apr 2021 19:24:07 +0000 (12:24 -0700)]
udp-broadcast-relay-redux: Add package

This commit is largely based on the work from Daniel Dickinson in
PR #2096 which was never merged. I tweaked it in a number of ways.
All bugs with this package are mine, not his.

Signed-off-by: Aaron Curley <accwebs@gmail.com>
3 years agoMerge pull request #15443 from ryzhovau/libtalloc_pyhton3_dep
Rosen Penev [Tue, 20 Apr 2021 01:59:54 +0000 (18:59 -0700)]
Merge pull request #15443 from ryzhovau/libtalloc_pyhton3_dep

libtalloc: add Python3/host dependency

3 years agoMerge pull request #15469 from rs/nextdns-1.12.5-master
Rosen Penev [Tue, 20 Apr 2021 01:59:29 +0000 (18:59 -0700)]
Merge pull request #15469 from rs/nextdns-1.12.5-master

nextdns: Update to version 1.12.5

3 years agonextdns: Update to version 1.12.5
Olivier Poitrey [Tue, 20 Apr 2021 01:38:39 +0000 (01:38 +0000)]
nextdns: Update to version 1.12.5

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
3 years agoMerge pull request #15460 from rs/nextdns-1.12.3-master
Rosen Penev [Tue, 20 Apr 2021 00:47:37 +0000 (17:47 -0700)]
Merge pull request #15460 from rs/nextdns-1.12.3-master

nextdns: Update to version 1.12.3

3 years agomutt: don't use host mailpath definition
Eneas U de Queiroz [Mon, 19 Apr 2021 21:28:58 +0000 (18:28 -0300)]
mutt: don't use host mailpath definition

Use configure --with-mailpath=/var/mail instead of letting it guess the
value base on the host path.  If configure can't find it, the package
will fail to build.  The path was taken from the current bot build.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
3 years agonextdns: Update to version 1.12.3
Olivier Poitrey [Mon, 19 Apr 2021 23:23:41 +0000 (23:23 +0000)]
nextdns: Update to version 1.12.3

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
3 years agoMerge pull request #15457 from rs/nextdns-1.31.3-master
Rosen Penev [Mon, 19 Apr 2021 23:08:27 +0000 (16:08 -0700)]
Merge pull request #15457 from rs/nextdns-1.31.3-master

nextdns: Update to version 1.31.3

3 years agonextdns: Update to version 1.31.3
Olivier Poitrey [Mon, 19 Apr 2021 22:50:28 +0000 (22:50 +0000)]
nextdns: Update to version 1.31.3

Signed-off-by: Olivier Poitrey <rs@nextdns.io>
3 years agoMerge pull request #15436 from pprindeville/strongswan-gencerts-change-sysconfdir
Philip Prindeville [Sun, 18 Apr 2021 23:32:22 +0000 (17:32 -0600)]
Merge pull request #15436 from pprindeville/strongswan-gencerts-change-sysconfdir

strongswan: change name of config base directory

3 years agoMerge pull request #15445 from turris-cz/psmisc-killall-alternatives
Josef Schlehofer [Sun, 18 Apr 2021 17:50:38 +0000 (19:50 +0200)]
Merge pull request #15445 from turris-cz/psmisc-killall-alternatives

psmisc: move killall to /usr/libexec and add ALTERNATIVES

3 years agoirqbalance: upgrade to version 1.8.0
Hannu Nyman [Sun, 18 Apr 2021 15:26:43 +0000 (18:26 +0300)]
irqbalance: upgrade to version 1.8.0

Upgrade irqbalance to version 1.8.0

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
3 years agopsmisc: move killall to /usr/libexec and add ALTERNATIVES
Josef Schlehofer [Sun, 18 Apr 2021 11:59:30 +0000 (13:59 +0200)]
psmisc: move killall to /usr/libexec and add ALTERNATIVES

Currently, this package can not be installed while using standard path
of busybox, because binary killall wants to be installed on the same
location as busybox.

Collision:
• /usr/bin/killall: busybox (new-file), psmisc (existing-file)

Many of these binaries, which provides alternatives were moved to
folder /usr/libexec like wget, sed, findutils, less.
So I moved killall to /usr/libexec and others leave in touch and added
ALTERNATIVES for it, because preinstall script is no longer necessary.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
3 years agolibtalloc: add Python3/host dependency
Alexander Ryzhov [Sun, 18 Apr 2021 10:57:14 +0000 (13:57 +0300)]
libtalloc: add Python3/host dependency
Otherwise, Package/Configure won't find distutils module from python3/host

Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
3 years agouvol: emmit ubus events and bring up volumes on boot
Daniel Golle [Sat, 17 Apr 2021 18:16:18 +0000 (19:16 +0100)]
uvol: emmit ubus events and bring up volumes on boot

Emmit ubus events when volumes come up/down.
Make sure volume state is always well defined by introducing
additional state 'write-prepare' (wp) during mkfs.
Add init scripts to bring up volumes at boot.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
3 years agoMerge pull request #15440 from 1715173329/yq
Rosen Penev [Sat, 17 Apr 2021 22:40:34 +0000 (15:40 -0700)]
Merge pull request #15440 from 1715173329/yq

yq: Update to 4.7.0

3 years agoyq: Update to 4.7.0
Tianling Shen [Sat, 17 Apr 2021 19:17:10 +0000 (03:17 +0800)]
yq: Update to 4.7.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
3 years agoMerge pull request #15439 from dibdot/adblock
Dirk Brenken [Sat, 17 Apr 2021 15:25:40 +0000 (17:25 +0200)]
Merge pull request #15439 from dibdot/adblock

adblock: update to 4.1.1

3 years agoadblock: update to 4.1.1
Dirk Brenken [Sat, 17 Apr 2021 07:41:17 +0000 (09:41 +0200)]
adblock: update to 4.1.1

* support the RPZ trigger 'RPZ-CLIENT-IP' to always allow/block certain
  clients based on their IP (currently only supported by bind!)
* avoid promiscuous mode in tcpdump setup for adblock reporting
* speed up dns report preparation
* support dns report mailing (/etc/init.d/adblock report mail)
* fix bind autodetection
* update LuCI-frontend (separate PR)
* update readme

Signed-off-by: Dirk Brenken <dev@brenken.org>
3 years agoMerge pull request #14656 from stintel/miniupnpd
Rosen Penev [Sat, 17 Apr 2021 01:24:36 +0000 (18:24 -0700)]
Merge pull request #14656 from stintel/miniupnpd

miniupnpd: introduce IGDv1 variant

3 years agoMerge pull request #15328 from ja-pa/atlas-probe-v2
Rosen Penev [Sat, 17 Apr 2021 01:23:17 +0000 (18:23 -0700)]
Merge pull request #15328 from ja-pa/atlas-probe-v2

atlas-sw-probe: add new package

3 years agoMerge pull request #15435 from cotequeiroz/atheepmgr
Rosen Penev [Sat, 17 Apr 2021 01:17:05 +0000 (18:17 -0700)]
Merge pull request #15435 from cotequeiroz/atheepmgr

atheepmgr: avoid libpciaccess dependency

3 years agostrongswan: change name of config base directory
Philip Prindeville [Thu, 15 Apr 2021 23:55:55 +0000 (17:55 -0600)]
strongswan: change name of config base directory

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
3 years agoMerge pull request #15431 from pprindeville/strongswan-add-gencerts
Philip Prindeville [Thu, 15 Apr 2021 23:44:19 +0000 (17:44 -0600)]
Merge pull request #15431 from pprindeville/strongswan-add-gencerts

strongswan: add certificate generation utility

3 years agoatheepmgr: avoid libpciaccess dependency
Eneas U de Queiroz [Thu, 15 Apr 2021 20:03:35 +0000 (17:03 -0300)]
atheepmgr: avoid libpciaccess dependency

HAVE_LIBPCIACCESS that is currently passed through MAKE_VARS to disable
building with libpciaccess can't be set through the environment.
Instead, use CONFIG_CON_PCI, which can be passed through the environment
and will disable libpciaccess.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
3 years agostrongswan: add certificate generation utility
Philip Prindeville [Thu, 15 Apr 2021 00:16:25 +0000 (18:16 -0600)]
strongswan: add certificate generation utility

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
3 years agoMerge pull request #15357 from BKPepe/netdata
Josef Schlehofer [Thu, 15 Apr 2021 17:06:53 +0000 (19:06 +0200)]
Merge pull request #15357 from BKPepe/netdata

netdata: update to version 1.30.0

3 years agoMerge pull request #15432 from turris-cz/clamav-add-libiconv-dependency
Josef Schlehofer [Thu, 15 Apr 2021 15:11:28 +0000 (17:11 +0200)]
Merge pull request #15432 from turris-cz/clamav-add-libiconv-dependency

clamav: add libiconv dependencies when build with NLS

3 years agoclamav: add libiconv dependencies when build with NLS
Josef Schlehofer [Wed, 14 Apr 2021 23:02:34 +0000 (01:02 +0200)]
clamav: add libiconv dependencies when build with NLS

NLS means Native Language Support and when you have it enabled (it is
not default), clamav can not be compiled as it shows following error:

Package clamav is missing dependencies for the following libraries:
libiconv.so.2

Also, it is required that package libiconv-full is compiled first/before
than clamav and then try to compile clamav.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
3 years agoMerge pull request #15430 from pprindeville/strongswan-add-ipsec-warning
Philip Prindeville [Thu, 15 Apr 2021 07:31:25 +0000 (01:31 -0600)]
Merge pull request #15430 from pprindeville/strongswan-add-ipsec-warning

strongswan: add deprecation warning to ipsec script

3 years agoopenvpn-easy-rsa: add missing configfile
Luiz Angelo Daros de Luca [Mon, 12 Apr 2021 21:09:52 +0000 (18:09 -0300)]
openvpn-easy-rsa: add missing configfile

/etc/profile.d/50-openvpn-easy-rsa.sh was not listed as configfile
and changes were lost during upgrades.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
3 years agoMerge pull request #15421 from ja-pa/onionshare-v2
Rosen Penev [Thu, 15 Apr 2021 02:10:01 +0000 (19:10 -0700)]
Merge pull request #15421 from ja-pa/onionshare-v2

onionshare-cli: add new package

3 years agongircd: update to 26.1
Rosen Penev [Wed, 14 Apr 2021 03:30:53 +0000 (20:30 -0700)]
ngircd: update to 26.1

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
3 years agostm32flash: update to 0.6
Rosen Penev [Mon, 12 Apr 2021 05:40:31 +0000 (22:40 -0700)]
stm32flash: update to 0.6

Switch to AUTORELEASE for simplicity.

Use autotools build.

Remove upstream patch.

Minor cleanups for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
3 years agoyubico-pam: update to 2.27
Rosen Penev [Mon, 12 Apr 2021 07:07:52 +0000 (00:07 -0700)]
yubico-pam: update to 2.27

Switch to AUTORELEASE for simplicity.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
3 years agouvol: make volume creation atomic
Daniel Golle [Thu, 15 Apr 2021 01:51:11 +0000 (02:51 +0100)]
uvol: make volume creation atomic

Make sure filesystem is ready when volume becomes available.
Use 'write-once' as initial state for read-only volumes, only allow
writing to volumes in that state and transision to 'read-only' once
write has completed.
Also fix a typo which prevented 'list' command from working with LVM.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
3 years agoocserv: don't build with libseccomp on ARC
Eneas U de Queiroz [Tue, 13 Apr 2021 11:25:55 +0000 (08:25 -0300)]
ocserv: don't build with libseccomp on ARC

libseccomp can't be built on ARC, so we must disable the option here as
well.  A different fix was first proposed by @zxlhhyccc in #15377.

Fixes: #15313
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
3 years agodocker-compose: Update to version 1.29.1
Javier Marcet [Wed, 14 Apr 2021 18:06:40 +0000 (18:06 +0000)]
docker-compose: Update to version 1.29.1

Bugs:

- Fix for invalid handler warning on Windows builds

- Fix config hash to trigger container recreation on IPC mode updates

- Fix conversion map for placement.max_replicas_per_node

- Remove extra scan suggestion on build

Signed-off-by: Javier Marcet <javier@marcet.info>
3 years agolibupnp: restore building tools
Alexander Egorenkov [Wed, 14 Apr 2021 17:15:35 +0000 (19:15 +0200)]
libupnp: restore building tools

This enables tools again which has been disabled in commit
498506af9 ("libupnp: update to 1.14.5"). Disabling tools leads to the
header upnptools.h not being installed into /usr/include. But e.g. mpd-full
depends on this header.

Fixes: 498506af9 ("libupnp: update to 1.14.5")
Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
3 years agonetdata: update to version 1.30.1
Josef Schlehofer [Wed, 14 Apr 2021 22:39:03 +0000 (00:39 +0200)]
netdata: update to version 1.30.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
3 years agoluv: update to 1.40.0-0
Rosen Penev [Wed, 14 Apr 2021 03:13:47 +0000 (20:13 -0700)]
luv: update to 1.40.0-0

Simplify CMake section.

Fix pkgconfig paths.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
3 years agostrongswan: add deprecation warning to ipsec script
Philip Prindeville [Wed, 14 Apr 2021 18:27:07 +0000 (12:27 -0600)]
strongswan: add deprecation warning to ipsec script

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
3 years agofdm: don't use host headers
Alexander Ryzhov [Wed, 14 Apr 2021 07:45:13 +0000 (10:45 +0300)]
fdm: don't use host headers

Signed-off-by: Alexander Ryzhov <github@ryzhov-al.ru>
3 years agopython-greenlet: support MIPS architecture
Alexandru Ardelean [Mon, 12 Apr 2021 06:43:35 +0000 (09:43 +0300)]
python-greenlet: support MIPS architecture

Fixes: https://github.com/openwrt/packages/issues/15370
This is inspired from:
   https://github.com/wlanslovenija/firmware-packages-opkg/blob/330bc94dccd16a3e92ac2fdde08c81a598e12f94/lang/python-greenlet/Makefile

The `PKG_USE_MIPS16:=0` is not taken into consideration when building
Python modules. That's because the sysconfig is used.

This is only an issue with greenlet (on MIPS) so far.

One option is to do `PKG_USE_MIPS16:=0` in the core Python package.
But, since we know that the `wlanslovenija` group has successfully used
greenlet on MIPS with this construct, we might as well adopt it until GCC10
becomes the main compiler.

As noted here:
  https://github.com/openwrt/packages/issues/15370#issuecomment-817015484
GCC10 doesn't have this problem.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
3 years agolibupnp: update to 1.14.5
Rosen Penev [Wed, 14 Apr 2021 02:57:44 +0000 (19:57 -0700)]
libupnp: update to 1.14.5

Switch to compiling with CMake. Faster.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
3 years agoumpdcli: update to 1.5.11
Rosen Penev [Wed, 14 Apr 2021 03:25:48 +0000 (20:25 -0700)]
umpdcli: update to 1.5.11

Signed-off-by: Rosen Penev <rosenp@gmail.com>
3 years agolibupnpp: update to 0.21.0
Rosen Penev [Wed, 14 Apr 2021 03:21:45 +0000 (20:21 -0700)]
libupnpp: update to 0.21.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>
3 years agopulseaudio: fix compilation without doxygen
Rosen Penev [Wed, 14 Apr 2021 04:34:35 +0000 (21:34 -0700)]
pulseaudio: fix compilation without doxygen

Meson update makes this error now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
3 years agoMerge pull request #15406 from pprindeville/strongswan-add-chacha20poly1305
Philip Prindeville [Wed, 14 Apr 2021 03:48:04 +0000 (21:48 -0600)]
Merge pull request #15406 from pprindeville/strongswan-add-chacha20poly1305

strongswan: handle chacha20poly1305 as AEAD

3 years agoonionshare-cli: add new package
Jan Pavlinec [Wed, 7 Apr 2021 10:14:08 +0000 (12:14 +0200)]
onionshare-cli: add new package

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>