Daniel [Sun, 19 Mar 2017 16:00:37 +0000 (12:00 -0400)]
dnscrypt-proxy: Add custom resolver config support
This commit modifies the dnscrypt-proxy plugin's `dnscrypt-proxy.init`
script to allow specifying a custom dnscrypt resolver. Prior to this
commit users of the dnscrypt-proxy plugin are only able to choose from
a dnscrypt resolver that is present in the packaged `ResolversList` CSV
file.
To specify a custom resolver three new configuration parameters are
required[0]: `ProviderName`, `ProviderKey` and `ResolverAddress`.
The `dnscrypt-proxy.init` script now maps `providername`, `providerkey`,
and `resolveraddress` values (if present) from a `dnscrypt-proxy.config`
file into the generated DNSCrypt configuration file.
`PKG_RELEASE` is increased from 1 to 2 to reflect the new functionality.
Ansuel Smith [Sat, 18 Mar 2017 11:08:32 +0000 (12:08 +0100)]
cryptodev-linux: fix aria 2 spam message
cryptodev log by default unecessary debug message
With some app (like aria2) the syslog get spammed with lots of this message
cryptodev: aria2c[3231] (adjust_sg_array:106): reallocating from 32 to 512 pages
With this we disable logging of debug message as they are just for info purpose and they are not error at all.
Eric Luehrsen [Sat, 18 Mar 2017 02:45:47 +0000 (22:45 -0400)]
unbound: fix hotplug iface and ntp restarts
Unbound is configured to restart on hotplug/iface but this can result
in numerous restarts at boot. Unbound also has a restart for NTP.
This was observed to generate trouble and even with procd robustness
too many crashes might occur (rare). Unbound would not be running.
Give more care to /var/lib/unbound/root.key during restarts. Use procd
for iface restarts. Check pidof() to wait one more second for Unbound.
Florian Eckert [Fri, 17 Mar 2017 10:06:24 +0000 (11:06 +0100)]
net/mwan3: fix hotplug on ACTION ifdown
On dynamic interface proto (dhcp/pppoe) the hotplug will not execude (exit 9)
because the gateway is already released. The check will now only be made
on a ifup ACTION event.
Bruno Randolf [Wed, 15 Mar 2017 22:05:34 +0000 (22:05 +0000)]
horst: Fix build for LEDE
Fortified headers don't seem to like _GNU_SOURCE in this case,
but we can remove that define since it's not needed. Add a patch
for LEDE until a new horst version is released.
Eric Luehrsen [Sun, 5 Mar 2017 19:52:28 +0000 (14:52 -0500)]
unbound: bugfix init race condition invalid FQDN
options 'add_local_fqdn' and 'add_wan_fqdn' can be affected
by race conditions when they are at level 4. Interface name
may not be returned by network tools. The conf file has bad
record formats and Unbound just will not load. Detect this
and fall back to only the host FQDN (level 3).
squash: improve documentation wording and format codes.
python: split source packages away from compiled packages
Well, they're not yet compiled, but in the next commit
they should be.
People have been complaining [citation needed] to me
via email or via Github that Python's performance is crap
because it packages sources directly and they're not compiled.
And Python has to compile the sources on each run, and
on-the-fly.
Allowing compilation caching is also a no-no, because
I'll get complaints that the flash storage fills up
whenever a Python app runs.
So, to give the user a choice, the new de-facto packaging
for Python packages will be:
* ship compiled + [ preferably ] optimized files
* package sources separately
The problem is that this doubles the number of packages
in LEDE/OpenWrt, but build-times should not suffer a big
hit, since the compilation is done once, and the
install phase should not be too intensive.
Oh, and people don't need ship source packages if
they don't want to.
To do that, a packager needs to just call
`$(eval $(call BuildPackage,python-<package>-src))`
Stijn Tintel [Tue, 7 Mar 2017 12:41:01 +0000 (13:41 +0100)]
treewide: use name in define and eval lines
For consistency, use full name instead of $(PKG_NAME) in define and eval
lines for all packages.
I've seen reviews that asked to do this before, and I am asking the same
during reviews now. To avoid this in the future, fix this treewide so
when people use existing packages as example, we will not have to
request this change anymore.
This makes all packages consistent with both LEDE and OpenWrt base
repositories.
Dirk Brenken [Tue, 7 Mar 2017 07:40:54 +0000 (08:40 +0100)]
travelmate: update 0.4.2
* optimized connection handling -
removed needless timeouts & wireless commits
* set the pre-configured reload timeout to
a more conservative/realistic value of 30 seconds
* further logging tweaks
Stan Grishin [Fri, 17 Feb 2017 10:29:35 +0000 (02:29 -0800)]
vpnbypass: reworked output formatting and logic.
vpnbypass: No longer depends on hardcoded WAN interface name).
vpnbypass: Table ID, IPSET name and FW_MARK as well as FW_MASK can be defined in config file.
vpnbypass: Uses iptables, not ip rules for handling local IPs/ranges.
vpnbypass: More reliable creation/destruction of VPNBYPASS iptables chain.
vpnbypass: Updated Web UI enables/start and stops/disables service.
vpnbypass: Beautified output.