Dillon Dixon [Sun, 27 Oct 2024 22:22:56 +0000 (15:22 -0700)]
ddns-scripts: porkbun bugfix for subdomain on A/AAAA record
If the "name" parameter is not provided, then updates to a subdomain
A/AAAA record result in the subdomain being removed from the record.
This change always provides the "name" parameter to correct that behavior.
Stan Grishin [Thu, 24 Oct 2024 20:12:35 +0000 (20:12 +0000)]
pbr: update to 1.1.7-29
Changes from @stangri
* remove unneeded `\n` escapes
* cosmetic improvements to make code more consistent
* remove duplicate uci_get_device()
* add more output on start/stop
* remove wan up detection on boot/start
* address Tor policies errors
* prevent interface_routing() failures for downed interfaces
Changes from @bigsmile74:
* improve is_integer()
* improve is_domain()
* improve filter_options()
* imrove is_ipv4() so that is_ipv4_netmask() can be retired
* improve is_phys_dev so that is_phys_dev_quick() can be retired
* add the dhcp.lan.force=0 warning
When compiled with GnuTLS external functions can be used to calculate
hashes. Enable them to reduce the library binary size (by disabling
internal code for hash calculations).
Note: libmicrohttpd 1.0.0 or later required
libgcrypt was used by early GnuTLS 2.x versions. For GnuTLS versions
without ability to automatically initialise libgcrypt, MHD was able to
initialise libgcrypt. However, it is not required for a long time.
If 'poll()' function is disabled, then in thread-per-connection mode
'select()' is used. This is much less efficient.
'epoll' is not used in thread-per-connection mode as it would require
additional epoll FD per every connection.
Bump micropython to 1.23.0. This is done to fix support for MbedTLS 3.0
Lots changed between 1.21 and 1.23 for the library side.
Mainly the barkeley-db library was moved to micropython own fork and the
cdef patch required lots of changes. (we have to manually include a copy
of cdef.h as it was dropped by them)
Also a new patch is required to mute some compilarion error that are
false-positive. (variable not initialized but that are ALWAYS
initialized)
Also refresh the extmod patch with new files included.
Since ruby 3.3.0, yjit was converted into rust code. During build, ruby will try try to use the whatever rustc is available in $PATH, including the one provided by the OS. Variations in that rustc can generate something between a perfect funcional build with yjit enabled and a broken build like this (from github actions):
Francesco Benini [Sat, 19 Oct 2024 23:31:11 +0000 (01:31 +0200)]
keepalived: fix dnsmasq reload
When "set_reload_if_sync" is set, the service is reloaded when the
configuration changes. For dnsmasq this means that the service, if
stopped, is started, and we don't want this in the backup node.
Francesco Benini [Sat, 19 Oct 2024 23:19:23 +0000 (01:19 +0200)]
keepalived: fix ambigiuos functions in hotplug.sh
When "set_reload_if_sync" is not set in the hotplug script, the service
is not expected to reload. That is not true because even if not set, the
value is set to the default 1 (reload active) or equals the parameter
set when "keepalived_hotplug" is called.
The default behavior should be:
- Reload if set_reload_if_sync is called
- NOT reload if set_reload_if_sync is NOT called
A similar fix is ported to "set_update_target".
Francesco Benini [Sat, 19 Oct 2024 22:36:07 +0000 (00:36 +0200)]
keepalived: add option to override service running check
Some init.d scripts like firewall and sqm do not return the actual state
of the service if called with "running" parameter. This result in the
init script called with "start" parameter and the service may not load
the new configuration. Firewall init script is one of this
An option is added in order to skip the "running" check for the service.
Add support for NJS module. Various patch are required to make this
module correctly compile with the required library mainly related on
detecting config flags.
Disable additional entry in feature test probably added in new version
of Nginx and never notice. Also declare "no" instead of empty value for
cc test.
Martin Schiller [Thu, 17 Oct 2024 08:36:07 +0000 (10:36 +0200)]
rp-pppoe: update to 4.0
This fixes compatibility with ppp-2.5.0 and newer.
We also need to change the PKG_SOURCE_URL since the previous URL is no
longer working and automated downloads from the project homepage are
not desired due to bandwidth restrictions. Have a look at the project
homepage [1] for details.
Signed-off-by: Martin Schiller <redacted>
[1] https://dianne.skoll.ca/projects/rp-pppoe/
This new check in the proto modemanager prevents the SIM card from being
blocked and therefore PUK is not required. If the PIN is entered incorrectly
in the 'uci' configuration, it makes no sense to try this several times
until the PUK is required. Should it nevertheless happen that the PUK
is required, then this will logged.
modemmanager: add missing interface argument to function modemmanager_check_state
The variable interface is used in the sub-function 'modemmanager_check_state'.
However, this is not an argument of the function and so the global value
is used. Addding the variable as an function call argument fixes this.
Robert Marko [Mon, 14 Oct 2024 18:28:20 +0000 (20:28 +0200)]
libmaxminddb: fixup lib and include dirs in pkg-config
libmaxminddb has switched to using CMAKE_INSTALL_PREFIX,
CMAKE_INSTALL_LIBDIR and CMAKE_INSTALL_INCLUDEDIR for generating the
pkg-config in upstream commit [1] and thus broke pkg-config file
generation in openwrt.
It would generate:
prefix=/usr
exec_prefix=/usr
libdir=lib
includedir=include
Obviously libdir and includedirs are incorrect for OpenWrt and this
would then cause pdns compilation to fail if geoip backend was enabled
since it uses pkg-config to get the required flags and passing just
lib for LDFLAGS would cause libtool to error out since that path is not
valid.
So, lets use SED magic to replace libdir and includedir with the correct
paths, so now pkg-config looks like:
prefix=/usr
exec_prefix=/usr
libdir=${exec_prefix}/lib
includedir=${prefix}/include
S. Brusch [Sat, 12 Oct 2024 11:22:01 +0000 (11:22 +0000)]
crowdsec-firewall-bouncer: updated nftables rules
Signed-off-by: S. Brusch <redacted>
Maintainer: Kerma Gérald <redacted>
Run tested: mediatek/filogic, BPI-R3, Openwrt 23.05.5
Description:
updated the initd script creating the nftables rules for the bouncer
to adapt and support the crowdsec-firewall-bouncer's (from 0.0.30)
new internal rule creation mechanism.
Dirk Brenken [Fri, 11 Oct 2024 17:46:16 +0000 (19:46 +0200)]
banIP: update to 1.0.0-8
* supports comments (introduced with a #), for MAC addresses
in the allow and block list, e.g. 26:5e:a0:6a:9c:da # Test
* added hagezi threat ip feed
* added an adguard logterm to the readme
* removed the broken talos feed
I've used wrong type in qemu guest agent patch, found by: @curtdept
Fixes https://github.com/vooon/openwrt-packages/commit/d9da6e792a25e8b34c271d4c3752c7185c77878d#r147673510
Jen Wolf [Wed, 2 Oct 2024 20:01:03 +0000 (20:01 +0000)]
mtools: update to 4.0.45
mtools: update to 4.0.45
no change log
https://www.gnu.org/software/mtools/manual/mtools.html
Compile tested: Model ASUS RT-AC88U
Architecture ARMv7 Processor rev 0 (v7l)
BCM53xx / arm_cortex-a9.
Kernel Version 6.6.53
main branch
Run tested: Using GCC 14.2.0 and binutils 2.43.1
Notable Changes
Experimental Network Inspection Support in Node.js
Exposes X509_V_FLAG_PARTIAL_CHAIN to tls.createSecureContext
New option for vm.createContext() to create a context with a freezable globalThis
Stan Grishin [Sun, 6 Oct 2024 22:59:17 +0000 (22:59 +0000)]
pbr: update to 1.1.7-21
* switch to dstnat chain from dstnat_lan chain for dns & tor policies (thanks @egc112)
* re-introduce procd_lan_interface for better LAN detection
* improve is_domain function
* introduce health-check for requried fw4 chains
* bugfix: avoid double counters for dns policies
* bugfix: remove faulty counters for tor policies
* rename interface_process to process_interface for better code readability
* overhaul pbr.user.aws script for a much better performance and more compact
(gzipped) storage of the ranges json locally (thanks @bigsmile74)
git.99rst.org / openwrt-packages.git / log