FreeIPMI provides in-band and out-of-band IPMI software based on the
IPMI v1.5/2.0 specification. The IPMI specification defines a set of
interfaces for platform management and is implemented by a number of
vendors for system management. The features of IPMI that most users
will be interested in are sensor monitoring, system event monitoring,
power control, and serial-over-LAN (SOL). The FreeIPMI tools and
libraries listed below should provide users with the ability to
access and utilize these and many other features. A number of useful
features for large HPC or cluster environments have also been
implemented into FreeIPMI.
Hannu Nyman [Wed, 5 Mar 2025 14:49:25 +0000 (16:49 +0200)]
node: mark BROKEN (to test impact on buildbot timeouts)
Mark node BROKEN to disable its build in buildbot in order
to test the impact on preventing frequent buildbot hangups.
It is suspected that node causes frequent build timeouts/hangups
on aarch/arm/i386/x86 builds: approx 1/3 of builds get timeouted.
Disable node for now to test the hypothesis.
Robert Marko [Wed, 5 Mar 2025 13:03:40 +0000 (14:03 +0100)]
nginx: actually download the specified git commit hash
Currently, we are using Download recipes to download the various modules,
however we are using then with PROTO:=git but SOURCE_VERSION is not set,
only VERSION variable so thus the dl_github_archive.py scripts gets called
with --version="" instead of being actually passed the desired commit hash
and thus actually the git head is fetched.
This explains why currently buildbots are failling with
nginx-mod-njs/104-endianness_fix.patch failling to apply since buildbots
are using prepackaged tarballs which are different than what we get when
manually building.
So, lets set SOURCE_VERSION to make sure we actually fetch the desired
git commit hash.
Nick Hainke [Mon, 3 Mar 2025 20:50:27 +0000 (21:50 +0100)]
dawn: update to 2025-03-03
Add "option tcp_ip '0.0.0.0'" to config.
Changelog: 62688e4 tcpsocket: add option to bind to specific ip be63ed4 ubus: actually deny association when no probe entry is found 6361df6 datastorage: fix debug message regarding client kick condition af593cc ci: fix and improve ci
Dirk Brenken [Mon, 3 Mar 2025 20:50:01 +0000 (21:50 +0100)]
adblock: release 4.2.7-1
* optimized uci config processing (list options)
* no longer set a hardcoded confdir in dhcp/dnsmasq config
* rework suspend/resume handling
* clean up download queue handling
* various small improvements & fixes
Hannu Nyman [Mon, 3 Mar 2025 15:15:11 +0000 (17:15 +0200)]
lang/node-* : Disable parallel builds for node packages
Disable parallel builds for node downstream packages, as the
buildbot is showing frequent timeout problems
for aarch644, arm, i386 and x86, and node & node packages
are the primary suspect.
Based on discussion in
https://github.com/openwrt/packages/issues/26078
Dirk Brenken [Fri, 28 Feb 2025 15:49:39 +0000 (16:49 +0100)]
banIP: release 1.5.3-1
* optimized uci config processing (list options)
* optimized icmp rules in pre-routing (thanks @brada)
* set inbound marker in pre-routing only if inbound logging is enabled (fixes #26044)
* fix cornercase in Set removal function
* print chain-, set- and rules-counter in the banIP status
* clean up logging und download queue handling
* update the readme
Florian Eckert [Wed, 19 Feb 2025 08:31:02 +0000 (09:31 +0100)]
gpsd: migrate option device to a list devices
More than one device can be added to the gpsd at startup. Currently the gpsd
service start script in OpenWrt treats this as an option with only one value.
To allow multiple devices to be specified, the uci 'option device' must be
removed and a new uci 'list devices' is added.
This change means that several devices can be specified at gpsd start with
the new uci 'list devices' configuration.
Running configurations in the field are migrated by a migration script.
Florian Eckert [Fri, 14 Feb 2025 12:10:06 +0000 (13:10 +0100)]
gpsd: add readonly option to uci
The 'readonly' option tells the GPSD that it is not allowed to write to the
GPS TTY, only reading the NMEA data stream is allowed. This option of the
GPSD must be set for my mobile radio device MV31, otherwise the GPSD can not
read the NMEA data stream on the GPS TTY because the GPSD blocks during
plugin probing.
gpsd:PROG: CORE: Probing "Garmin USB binary" driver...
gpsd:PROG: CORE: Probe not found "Garmin USB binary" driver...
gpsd:PROG: CORE: Probing "GeoStar" driver...
gpsd:PROG: Sent GeoStar packet id 0xc1
Florian Eckert [Thu, 30 Jan 2025 10:55:19 +0000 (11:55 +0100)]
gpsd: add hotplug handling
The 'gpsd' offers the possibility to call the script '/etc/gpsd/device-hook'
when a GPS source was added or removed via gpsdctl.
In addition to the '/etc/gpsd/device-hook' call an event is now triggered
too after the 'gpsd' has started. This allows scripts to configurre 'gpsd'
receivers.
The following events are available for '/etc/hotplug.d/gpsd' scripts:
* ACTIVATE via '/etc/gpsd/device-hook'
* DEACTIVATE via '/etc/gpsd/device-hook'
* STARTED via '/etc/init.d/gpsd'
This change introduces an optional configuration
of the netifd integration in the ModemManager package.
When disabled, it removes the NETIFD dependency and
other unwanted components from the root filesystem
during the build phase.
Additionally, in the modemmanager.common the netifd-proto.sh
inclusion line can be savely removed as there is no usage
of it in its functions.
John Audia [Tue, 16 Jul 2024 19:23:36 +0000 (15:23 -0400)]
lxc: fix decompression of rootfs tarballs
Modified 025-remove-unsupported-option.patch to both remove
the bsdtar command as it ends in errors, see below, and to
circumvent an error when extracting to overlayfs[1].
Error when extracting rootfs tarball with bsdtar:
tar --absolute-names --numeric-owner '--xattrs-include=*' -xpJf /var/cache/lxc//download/archlinux/current/amd64//default/rootfs.tar.xz -C /mnt/data/lxc/test/rootfs
./usr/bin/newgidmap: Cannot restore extended attributes on this system: Illegal byte sequence
lxc-create: test: ../src/lxc/lxccontainer.c: create_run_template: 1589 Failed to create container from template
lxc-create: test: ../src/lxc/tools/lxc_create.c: lxc_create_main: 318 Failed to create container test
John Audia [Fri, 12 Jul 2024 17:57:10 +0000 (13:57 -0400)]
lxc: add gnu-tar as a depends to fix lxc-create
Add gnu-tar as a dependency for lxc-create which is needed to
properly extract the root file system tarball. Without it,
symlink target of /bin/tar is busybox and it lacks proper
support to extract with xattrs. The default gnu-tar is actually
built without this support as well, but it is able to extract
the rootfs tarballs with a warning not an error which is not the
case with busybox which ends in an error.
Additionally, two new patches have been added which remove checks for
options that OpenWrt currently does not package and can serve are
false positives for missing items from our kernel config, namely:
lxc-net and lxc-checkpoint
After applying this commit, below is the output showing that the kernel
config[1] should pass all tests for functionality:
% CONFIG=config ./lxc-checkconfig
LXC version 6.0.3
John Audia [Fri, 10 Jan 2025 02:48:25 +0000 (21:48 -0500)]
lxc: remove check for options we do not package
We do not package lxc-net or lxcfs so remove the lines within
lxc-checkconfig that looks forCONFIG_IP_NF_TARGET_MASQUERADE and
CONFIG_IP6_NF_TARGET_MASQUERADE which, as far as I know, is the only
part of lxc that needs them. Also remove the check for FUSE since we do
not pakcage lxcfs.
Without this commit, users will see these two as missing.
Dirk Brenken [Fri, 21 Feb 2025 21:08:45 +0000 (22:08 +0100)]
banIP: release 1.5.2-1
* add memory measurements:
- free memory in MB (MemAvailable from /proc/meminfo)
- script run max. used RAM in MB (VmHWM from /proc/$$/status)
* removed the obsolete (domain) lookup command in init script
* update the readme
Robert Marko [Thu, 20 Feb 2025 10:45:39 +0000 (11:45 +0100)]
libffi: drop autoreconf
Trying to compile libffi now that automake has been updated to 1.17 will
fail, however there is no reason for us to be calling autoreconf as libffi
release tarballs already contain the generated configure script.
So, drop the unnecessary autoreconf that seems to be leftover from the
previous 3.4.2 bump as we dont have any patches targeting configure.ac nor
libffi in general.
Fixes: openwrt/openwrt#18041 Signed-off-by: Robert Marko <redacted>
Philipp Schmitt [Tue, 18 Feb 2025 16:41:22 +0000 (17:41 +0100)]
mwan3: write `mwan3 use` error/debug messages to stderr instead of stdout
This redirects the debug output to stderr, allowing `mwan3 use` to be used in
scripts without polluting stdout.
Before:
mwan3 use wan curl -fsSL https://ifconfig.co/json | jq -er '.country_iso'
jq: parse error: Invalid numeric literal at line 1, column 8
curl: (23) Failure writing output to destination, passed 389 returned 0
After:
mwan3 use wan curl -fsSL https://ifconfig.co/json | jq -er '.country_iso'
Running 'curl -fsSL https://ifconfig.co/json' with DEVICE=eth2 SRCIP=192.168.0.1 FWMARK=0x3f00 FAMILY=ipv4
DE
John Audia [Wed, 19 Feb 2025 19:29:29 +0000 (14:29 -0500)]
libffi: update to 3.4.7
3.4.7 Feb-8-2024
Add static trampoline support for Linux on s390x.
Fix BTI support for ARM64.
Support pointer authentication for ARM64.
Fix ASAN compatibility.
Fix x86-64 calls with 6 GP registers and some SSE registers.
Miscellaneous fixes for ARC and Darwin ARM64.
Fix OpenRISC or1k and Solaris 10 builds.
Remove nios2 port.
John Audia [Tue, 18 Feb 2025 17:57:33 +0000 (12:57 -0500)]
openssh: bump to 9.9p2
Updated and removed upstreamed patch.
Highlights relating to security:
* Fix CVE-2025-26465 - ssh(1) in OpenSSH versions 6.8p1 to 9.9p1
(inclusive) contained a logic error that allowed an on-path
attacker (a.k.a MITM) to impersonate any server when the
VerifyHostKeyDNS option is enabled. This option is off by default.
* Fix CVE-2025-26466 - sshd(8) in OpenSSH versions 9.5p1 to 9.9p1
(inclusive) is vulnerable to a memory/CPU denial-of-service related
to the handling of SSH2_MSG_PING packets. This condition may be
mitigated using the existing PerSourcePenalties feature.
Both vulnerabilities were discovered and demonstrated to be exploitable
by the Qualys Security Advisory team. We thank them for their detailed
review of OpenSSH.
Full release notes: https://www.openssh.com/txt/release-9.9p2
Stan Grishin [Tue, 18 Feb 2025 00:13:29 +0000 (00:13 +0000)]
https-dns-proxy: bugfixes
* No more `/sbin/uci: Invalid argument output` when set to not update
dnsmasq instances (thanks @tmcqueen-materials for investigation!)
* Do not wait for interface.up on boot, hopefully this resolves the
boot-up start for everyone
Dirk Brenken [Mon, 17 Feb 2025 20:58:24 +0000 (21:58 +0100)]
adblock: release 4.2.5-1
* removed needless subshell calls
* add memory measurements:
- size of the final blocklist in MB
- free memory in MB (MemAvailable from /proc/meminfo)
- script max. used RAM (VmHWM from /proc/$$/status)
* optimized restart logic
* cosmetics
Ryan Keane [Sun, 22 Dec 2024 14:12:04 +0000 (06:12 -0800)]
adguardhome: Update init files
Move working directory from `/var/adguardhome` to
`/var/lib/adguardhome`, according to Linux FHS.
Add option to store PID file, defaulting to `/run/adguardhome.pid`.
Til Kaiser [Sat, 8 Feb 2025 11:01:32 +0000 (12:01 +0100)]
mstflint: update to 4.31.0
This commit updates the mstflint package to the
latest 4.31.0 release.
It also includes patches to fix some build errors
that have been merged into their development branch [1]
but are not inside the current release version.
Dirk Brenken [Fri, 14 Feb 2025 06:26:14 +0000 (07:26 +0100)]
adblock: update 4.2.4-2
* properly handle forced DNS ports <> 53,
no longer make bogus local redirects, reject them instead (fixed #25897)
* support the jail mode for smartdns
* cosmetics
Dirk Brenken [Thu, 13 Feb 2025 20:47:39 +0000 (21:47 +0100)]
banIP: release 1.5.1-1
* optimized the f_nftload function
* reduced the prerouting priority to -175
* optimized the output of the f_survey function
* removed a needless fw4 call/check
* no longer skips regular blocklist feeds in "allowlist only" mode
* optimized init checks
* turris feed: enable IPv6 parsing, too (prvided by @curbengh)
* update the readme
Florian Eckert [Tue, 4 Feb 2025 12:01:53 +0000 (13:01 +0100)]
keepalived: add new uci section config interface_up_down_delays
If an interface that is being used (or tracked) by a VRRP instance goes to
down state, the VRRP instance(s) will, by default, immediately transition to
FAULT state, and when all relevant interfaces are back up again the VRRP
instance(s) will immediately transition to BACKUP state.
This can cause problems if interfaces are bouncing, and so delays can be
specified between the interface state change and the transition to
FAULT/BACKUP state. If the interface returns to its original state before
the delay expires, no associated VRRP instance state transition will occur.
New uci section 'interface_up_down_delay':
config interface_up_down_delays
option device <device>
option down_delay <number in seconds>
option up_delay <number in seconds>
Stan Grishin [Wed, 12 Feb 2025 03:57:26 +0000 (03:57 +0000)]
pbr: update to 1.1.8-10
* Improve verbose output on start
* Allow to not create ip rule for WG server
* Improve boot up start (take 2)
* Improve verbose output when setting triggers
* Override DNS hijack with DNS policies from pbr
Stan Grishin [Mon, 10 Feb 2025 21:18:24 +0000 (21:18 +0000)]
https-dns-proxy: bugfix: start on boot
* bugfix: working start on boot when interfaces are up
(thanks @tmcqueen-materials and @b1ackbeat)
* improvement: better output when setting triggers on start
Florian Eckert [Tue, 4 Feb 2025 11:36:51 +0000 (12:36 +0100)]
modemmanager: do not disable modem on reconnect
If the modem loses the connection, an attempt is made to re-establish the
connection via the report-down script.
Until now, the modem was disabled when the modem processed the teardown of
the modemmanager protohandler. The immediate up events of netifd renables
the modem right away. This takes time, which is not necessary.
This commit changes the behavior so that the modem is not disabled when
the modemmanager is disconnected via the report-down script.
git.99rst.org / openwrt-packages.git / log