Eric Luehrsen [Sat, 11 Feb 2017 20:25:22 +0000 (15:25 -0500)]
unbound: improve robustness with dhcp scripts
When for example 'package/net/adblock' and DNSSEC vs NTP robustness
is enabled, significant restart thrashing can occur at boot up. DHCP
lease triggers may be occuring at the same time. Unbounds DNS-DHCP
may be incomplete until new DHCP solicit events. Solve this by
leaving a passive but complete host conf file during lease trigger.
Metafly [Fri, 10 Feb 2017 16:02:54 +0000 (17:02 +0100)]
chrony: set rtcsync config option
Else the system will always stay in UNSYNC state.
Even if there is no real RTC.
See chrony minimal config:
http://chrony.tuxfamily.org/faq.html#_what_is_the_minimum_recommended_configuration_for_an_ntp_client
Hannu Nyman [Tue, 7 Feb 2017 22:26:58 +0000 (00:26 +0200)]
irqbalance: add package
The purpose of irqbalance is to distribute hardware interrupts across
processors/cores on a multiprocessor/-core system in order to increase
performance.
This initial implementation of the package uses external glib2,
which is a large dependency.
Only the cmd-line tool is compiled and installed.
Hannu Nyman [Mon, 6 Feb 2017 14:40:43 +0000 (16:40 +0200)]
collectd: avoid libcap dependency
Buildbot revealed that Collectd 5.7.1 uses libcap to evaluate system
capabilities and display advice on some plugins (dns, iptables, exec,
ping, ceph, turbostat).
Disable the check in configure.ac in order to avoid a dependency
for libcap. (It is not that big, only 6 kB .ipk, but still avoid that.)
Hannu Nyman [Mon, 6 Feb 2017 09:28:58 +0000 (11:28 +0200)]
collectd: remove encryption feature from network plugin
Remove the encryption functionality from the network plugin.
It is a non-core functionality and causes a need for additional
dependency on the main program when enabled in 5.7.1.
Hannu Nyman [Thu, 26 Jan 2017 11:23:12 +0000 (13:23 +0200)]
collectd: update to 5.7.1
Update collectd to version 5.7.1
* replace 003-remove-werror.patch with configure option
* remove 200-fix-git-describe-error.patch that is now unnecessary
* reformat other patches due to whitespace changes
* add new plugins to the list as disabled
* correct download & homepage links
* add myself as the second maintainer
Eric Luehrsen [Mon, 6 Feb 2017 04:48:18 +0000 (23:48 -0500)]
Unbound: bug fix odhcpd and add auto adblock
Bug fix dhcp4_slaac6 option was adding to all IP6 routes.
Filtering was added to this process to only include addresses
served from "this dhcp interface."
adblock 2.3.0 file output is now detected and automatically
integrated into Unbound local-zones. adblock deposites its
block site zone-files into /var/lib/unbound. If this is not
desired, then disable adblock or reconfigure to avoid Unbound.
Likewise fix default configuration to use SOCK_DGRAM and not SOCK_STREAM
as we currently do.
Add sha256 digest.
Rather than have the users replace syslog-ng.conf (which lately is
changing fairly frequently) and have them miss an important fix or
improvement, instead have them localize /etc/custom-logs.conf and
ship that as an empty file.
Daniel Engberg [Mon, 16 Jan 2017 17:19:09 +0000 (18:19 +0100)]
minidlna: Update to latest upstream (2016-09-29)
Updated to latest commit upstream as the latest tagged version didn't get
a tarball release at all. Includes various fixes and also support for
never versions of ffmpeg.
Various improvements to package Makefile.
Source/Template: https://github.com/wongsyrone/packages-1/blob/c389dcdc020e1d199570f01f36b781a290aa5356/multimedia/minidlna/Makefile
Banglang Huang [Sun, 5 Feb 2017 13:36:50 +0000 (21:36 +0800)]
tree: add new package
Tree is a recursive directory listing command that produces a depth indented listing of files,
which is colorized ala dircolors if the LS_COLORS environment variable is set and output is to tty.
Tree has been ported and reported to work under the following operating systems:
Linux, FreeBSD, OS X, Solaris, HP/UX, Cygwin, HP Nonstop and OS/2.
root@lede:/# tree -L 1
.
├── bin
├── dev
├── etc
├── lib
├── mnt
├── overlay
├── proc
├── rom
├── root
├── sbin
├── sys
├── tmp
├── usr
├── var -> /tmp
└── www
Dirk Brenken [Sat, 4 Feb 2017 20:32:50 +0000 (21:32 +0100)]
adblock: release 2.3.0
* automatically selects dnsmasq or unbound as dns backend
* add the new 'adguard' source, a combined/quite effective block list
* remove needless dns backend restarts
* optimize adblock restart behavior
* optimize block list processing on inotify enabled filesystems
* better return code checking on block list download
* fix boot function/startup on Chaos Calmer
* fix a bug in blocklist removal function
* add more (optional) debug output
* move backup options to global config
* documentation update
Stan Grishin [Sat, 4 Feb 2017 13:25:10 +0000 (05:25 -0800)]
vpnbypass: HOTFIX no longer incorrectly stopping service/reliable start
fixed: stop function used to kill the hotplug file
fixed: despite ubus wait_for network.interface.wan and WAN-IF hotplug, sometimes we'd get no WAN ip on start
rng-tools: start rngd early enough to actually be useful
lighttpd starts at priority 50, but promptly calls getrandom() on
initialization (li_rand_reseed() and li_rand_device_bytes() from
server_init()). If /dev/urandom (which getrandom() uses by default)
doesn't have sufficient entropy, this will block.
Since Openwrt runs the startup scripts serially, this can block
initialization indefinitely. I've seen 15-20 minutes typically.
Seeding the pool early on can quickly built sufficient entropy to
complete booting without blocking.
lang/python-pcapy: Bumped version to 0.11.1 Signed-off-by: Andrew McConachie <redacted>
Compile tested: AMD64
Run tested: tested
Description: new release
Val Kulkov [Wed, 1 Feb 2017 05:25:57 +0000 (00:25 -0500)]
nginx: update to 1.10.3, add new module options
Update nginx to version 1.10.3.
Add new configuration options to enable the following optional
modules (disabled by default):
- http_auth_request_module
- http_v2_module
- http_realip_module
- http_secure_link_module
Stan Grishin [Mon, 23 Jan 2017 16:02:44 +0000 (08:02 -0800)]
vpnbypass: initial commit
Signed-off-by: Stan Grishin <redacted>
vpnbypass: fixed renamed option in stop_service
Signed-off-by: Stan Grishin <redacted>
vpnbypass: fixed typo in makefile, switch FW_MARK to 0x010000 to play nice with SQM/mwan (thanks Hannu)
Signed-off-by: Stan Grishin <redacted>
vpnbypass: proper masking in setting mark
Signed-off-by: Stan Grishin <redacted>
vpnbypass: separating luci-app-vpnbypass into different tree
Signed-off-by: Stan Grishin <redacted>
vpnbypass: fixed incorrect use of procd_add_reload_interface_trigger according to http://wiki.prplfoundation.org/wiki/Procd_reference