Francesco Benini [Sat, 19 Oct 2024 23:31:11 +0000 (01:31 +0200)]
keepalived: fix dnsmasq reload
When "set_reload_if_sync" is set, the service is reloaded when the
configuration changes. For dnsmasq this means that the service, if
stopped, is started, and we don't want this in the backup node.
Francesco Benini [Sat, 19 Oct 2024 23:19:23 +0000 (01:19 +0200)]
keepalived: fix ambigiuos functions in hotplug.sh
When "set_reload_if_sync" is not set in the hotplug script, the service
is not expected to reload. That is not true because even if not set, the
value is set to the default 1 (reload active) or equals the parameter
set when "keepalived_hotplug" is called.
The default behavior should be:
- Reload if set_reload_if_sync is called
- NOT reload if set_reload_if_sync is NOT called
A similar fix is ported to "set_update_target".
Francesco Benini [Sat, 19 Oct 2024 22:36:07 +0000 (00:36 +0200)]
keepalived: add option to override service running check
Some init.d scripts like firewall and sqm do not return the actual state
of the service if called with "running" parameter. This result in the
init script called with "start" parameter and the service may not load
the new configuration. Firewall init script is one of this
An option is added in order to skip the "running" check for the service.
Add support for NJS module. Various patch are required to make this
module correctly compile with the required library mainly related on
detecting config flags.
Disable additional entry in feature test probably added in new version
of Nginx and never notice. Also declare "no" instead of empty value for
cc test.
Martin Schiller [Thu, 17 Oct 2024 08:36:07 +0000 (10:36 +0200)]
rp-pppoe: update to 4.0
This fixes compatibility with ppp-2.5.0 and newer.
We also need to change the PKG_SOURCE_URL since the previous URL is no
longer working and automated downloads from the project homepage are
not desired due to bandwidth restrictions. Have a look at the project
homepage [1] for details.
Signed-off-by: Martin Schiller <redacted>
[1] https://dianne.skoll.ca/projects/rp-pppoe/
This new check in the proto modemanager prevents the SIM card from being
blocked and therefore PUK is not required. If the PIN is entered incorrectly
in the 'uci' configuration, it makes no sense to try this several times
until the PUK is required. Should it nevertheless happen that the PUK
is required, then this will logged.
modemmanager: add missing interface argument to function modemmanager_check_state
The variable interface is used in the sub-function 'modemmanager_check_state'.
However, this is not an argument of the function and so the global value
is used. Addding the variable as an function call argument fixes this.
Robert Marko [Mon, 14 Oct 2024 18:28:20 +0000 (20:28 +0200)]
libmaxminddb: fixup lib and include dirs in pkg-config
libmaxminddb has switched to using CMAKE_INSTALL_PREFIX,
CMAKE_INSTALL_LIBDIR and CMAKE_INSTALL_INCLUDEDIR for generating the
pkg-config in upstream commit [1] and thus broke pkg-config file
generation in openwrt.
It would generate:
prefix=/usr
exec_prefix=/usr
libdir=lib
includedir=include
Obviously libdir and includedirs are incorrect for OpenWrt and this
would then cause pdns compilation to fail if geoip backend was enabled
since it uses pkg-config to get the required flags and passing just
lib for LDFLAGS would cause libtool to error out since that path is not
valid.
So, lets use SED magic to replace libdir and includedir with the correct
paths, so now pkg-config looks like:
prefix=/usr
exec_prefix=/usr
libdir=${exec_prefix}/lib
includedir=${prefix}/include
S. Brusch [Sat, 12 Oct 2024 11:22:01 +0000 (11:22 +0000)]
crowdsec-firewall-bouncer: updated nftables rules
Signed-off-by: S. Brusch <redacted>
Maintainer: Kerma Gérald <redacted>
Run tested: mediatek/filogic, BPI-R3, Openwrt 23.05.5
Description:
updated the initd script creating the nftables rules for the bouncer
to adapt and support the crowdsec-firewall-bouncer's (from 0.0.30)
new internal rule creation mechanism.
Dirk Brenken [Fri, 11 Oct 2024 17:46:16 +0000 (19:46 +0200)]
banIP: update to 1.0.0-8
* supports comments (introduced with a #), for MAC addresses
in the allow and block list, e.g. 26:5e:a0:6a:9c:da # Test
* added hagezi threat ip feed
* added an adguard logterm to the readme
* removed the broken talos feed
I've used wrong type in qemu guest agent patch, found by: @curtdept
Fixes https://github.com/vooon/openwrt-packages/commit/d9da6e792a25e8b34c271d4c3752c7185c77878d#r147673510
Jen Wolf [Wed, 2 Oct 2024 20:01:03 +0000 (20:01 +0000)]
mtools: update to 4.0.45
mtools: update to 4.0.45
no change log
https://www.gnu.org/software/mtools/manual/mtools.html
Compile tested: Model ASUS RT-AC88U
Architecture ARMv7 Processor rev 0 (v7l)
BCM53xx / arm_cortex-a9.
Kernel Version 6.6.53
main branch
Run tested: Using GCC 14.2.0 and binutils 2.43.1
Notable Changes
Experimental Network Inspection Support in Node.js
Exposes X509_V_FLAG_PARTIAL_CHAIN to tls.createSecureContext
New option for vm.createContext() to create a context with a freezable globalThis
Stan Grishin [Sun, 6 Oct 2024 22:59:17 +0000 (22:59 +0000)]
pbr: update to 1.1.7-21
* switch to dstnat chain from dstnat_lan chain for dns & tor policies (thanks @egc112)
* re-introduce procd_lan_interface for better LAN detection
* improve is_domain function
* introduce health-check for requried fw4 chains
* bugfix: avoid double counters for dns policies
* bugfix: remove faulty counters for tor policies
* rename interface_process to process_interface for better code readability
* overhaul pbr.user.aws script for a much better performance and more compact
(gzipped) storage of the ranges json locally (thanks @bigsmile74)
Remove GPL-2.0+ and GPL-3.0+ from PKG_LICENSE as GNU GPLv2+ and GPLv3+
are only used for the build system as stated in [1]:
The build system contains public domain files, and files that
are under GNU GPLv2+ or GNU GPLv3+. None of these files end up
in the binaries being built.
Moreover, add 0BSD which is used since version 5.6.0 [2]
CONTRIBUTING.md: remove incorrect info about `PKG_VERSION`
The documentation stated that `PKG_VERSION` is the OpenWrt version
and therefore includes the `PKG_RELEASE`, but this statement
was incorrect and has been removed to avoid confusion.
This is the fourteenth patch release in the 1.1.z release branch of
runc. It includes a fix for a low severity security issue
(CVE-2024-45310) as well as some minor build-related fixes (including Go
1.23 support).
Fix CVE-2024-45310, a low-severity attack that allowed
maliciously configured containers to create empty files and directories on
the host.
Add support for Go 1.23.
Revert "allow overriding VERSION value in Makefile" and add EXTRA_VERSION.
rootfs: consolidate mountpoint creation logic.
Added GOARM64 and GORISCV64 in golang-build.sh.
Drop deprecated GOROOT_FINAL in GoCompiler/Default/Make.
Updated environment vars in golang-values.mk for GOARM64 and GORISCV64.
Refined host build in golang/Makefile for openbsd_riscv64.
git.99rst.org / openwrt-packages.git / log