Eric Fahlgren [Fri, 14 Mar 2025 16:54:54 +0000 (09:54 -0700)]
owut: update to 2025.03.14
Bug fixes:
efahl/owut@15d734237725 owut: fix incorrect log levels on list and blob commands
efahl/owut@3867b98d0ea1 owut: fix parsing of certain APK versions
Enhancements:
efahl/owut@52e7d44c99a3 owut: allow user to override 'package_changes'
https://github.com/openwrt/packages/issues/26078
As a result of the discussion in this thread, the node.js package was changed to hostpkg only. In addition, this fix uses the pre-built version distributed on nodejs.
The use of pre-build is based on the suggestion of @artynet.
The packages in the node module are successfully built, but the target node.js itself cannot be provided, so it cannot be used.
Yarn, which is used in packages for web front ends, etc., can be used without any problems.
Robert Marko [Wed, 12 Mar 2025 11:34:03 +0000 (12:34 +0100)]
ipmitool: disable FreeIPMI support
Now that we are building FreeIPMI library ipmitool will detect it
and since we are already passing --enable-intf-free it will build
support for FreeIPMI as well.
However, --enable-intf-free was previously no-op since it would just
fail to detect FreeIPMI and disable support for it but now it seems
that buildbots build FreeIPMI first and then ipmitool will fail with
missing dependency on FreeIPMI library.
Since FreeIPMI is quite big and previously ipmitool was built without
support for it anyway lets disable support for FreeIPMI in ipmitool and
if its required it can be made optional or as a package variant later.
Keith T. Garner [Wed, 12 Mar 2025 19:57:48 +0000 (14:57 -0500)]
dockerd: add docker-storage to init
Docker's backend storage driver can be configurable for certain
filesystems. The default is the overlay storage driver, but if you run
openwrt on a system with btrfs, this will allow you to override the
default configuration by settings the storage_driver in uci in dockerd's
global section. This value will be used in the created dockerd.json
file.
Dirk Brenken [Fri, 7 Mar 2025 12:25:54 +0000 (13:25 +0100)]
banIP: update 1.5.3-3
* fix a race condition in the process scheduler
* sync the banIP country file with ipdeny feed
* refine etag handling with country/asn feeds
* refine logging with country/asn feeds
* refine the banIP status output (incl. LuCI changes)
Tianling Shen [Thu, 6 Mar 2025 11:01:53 +0000 (19:01 +0800)]
golang: Update to 1.24.1
go1.24.1 (released 2025-03-04) includes security fixes to the net/http
package, as well as bug fixes to cgo, the compiler, the go command,
and the reflect, runtime, and syscall packages.
FreeIPMI provides in-band and out-of-band IPMI software based on the
IPMI v1.5/2.0 specification. The IPMI specification defines a set of
interfaces for platform management and is implemented by a number of
vendors for system management. The features of IPMI that most users
will be interested in are sensor monitoring, system event monitoring,
power control, and serial-over-LAN (SOL). The FreeIPMI tools and
libraries listed below should provide users with the ability to
access and utilize these and many other features. A number of useful
features for large HPC or cluster environments have also been
implemented into FreeIPMI.
Hannu Nyman [Wed, 5 Mar 2025 14:49:25 +0000 (16:49 +0200)]
node: mark BROKEN (to test impact on buildbot timeouts)
Mark node BROKEN to disable its build in buildbot in order
to test the impact on preventing frequent buildbot hangups.
It is suspected that node causes frequent build timeouts/hangups
on aarch/arm/i386/x86 builds: approx 1/3 of builds get timeouted.
Disable node for now to test the hypothesis.
Robert Marko [Wed, 5 Mar 2025 13:03:40 +0000 (14:03 +0100)]
nginx: actually download the specified git commit hash
Currently, we are using Download recipes to download the various modules,
however we are using then with PROTO:=git but SOURCE_VERSION is not set,
only VERSION variable so thus the dl_github_archive.py scripts gets called
with --version="" instead of being actually passed the desired commit hash
and thus actually the git head is fetched.
This explains why currently buildbots are failling with
nginx-mod-njs/104-endianness_fix.patch failling to apply since buildbots
are using prepackaged tarballs which are different than what we get when
manually building.
So, lets set SOURCE_VERSION to make sure we actually fetch the desired
git commit hash.
Nick Hainke [Mon, 3 Mar 2025 20:50:27 +0000 (21:50 +0100)]
dawn: update to 2025-03-03
Add "option tcp_ip '0.0.0.0'" to config.
Changelog: 62688e4 tcpsocket: add option to bind to specific ip be63ed4 ubus: actually deny association when no probe entry is found 6361df6 datastorage: fix debug message regarding client kick condition af593cc ci: fix and improve ci
Dirk Brenken [Mon, 3 Mar 2025 20:50:01 +0000 (21:50 +0100)]
adblock: release 4.2.7-1
* optimized uci config processing (list options)
* no longer set a hardcoded confdir in dhcp/dnsmasq config
* rework suspend/resume handling
* clean up download queue handling
* various small improvements & fixes
Hannu Nyman [Mon, 3 Mar 2025 15:15:11 +0000 (17:15 +0200)]
lang/node-* : Disable parallel builds for node packages
Disable parallel builds for node downstream packages, as the
buildbot is showing frequent timeout problems
for aarch644, arm, i386 and x86, and node & node packages
are the primary suspect.
Based on discussion in
https://github.com/openwrt/packages/issues/26078
Dirk Brenken [Fri, 28 Feb 2025 15:49:39 +0000 (16:49 +0100)]
banIP: release 1.5.3-1
* optimized uci config processing (list options)
* optimized icmp rules in pre-routing (thanks @brada)
* set inbound marker in pre-routing only if inbound logging is enabled (fixes #26044)
* fix cornercase in Set removal function
* print chain-, set- and rules-counter in the banIP status
* clean up logging und download queue handling
* update the readme
Florian Eckert [Wed, 19 Feb 2025 08:31:02 +0000 (09:31 +0100)]
gpsd: migrate option device to a list devices
More than one device can be added to the gpsd at startup. Currently the gpsd
service start script in OpenWrt treats this as an option with only one value.
To allow multiple devices to be specified, the uci 'option device' must be
removed and a new uci 'list devices' is added.
This change means that several devices can be specified at gpsd start with
the new uci 'list devices' configuration.
Running configurations in the field are migrated by a migration script.
Florian Eckert [Fri, 14 Feb 2025 12:10:06 +0000 (13:10 +0100)]
gpsd: add readonly option to uci
The 'readonly' option tells the GPSD that it is not allowed to write to the
GPS TTY, only reading the NMEA data stream is allowed. This option of the
GPSD must be set for my mobile radio device MV31, otherwise the GPSD can not
read the NMEA data stream on the GPS TTY because the GPSD blocks during
plugin probing.
gpsd:PROG: CORE: Probing "Garmin USB binary" driver...
gpsd:PROG: CORE: Probe not found "Garmin USB binary" driver...
gpsd:PROG: CORE: Probing "GeoStar" driver...
gpsd:PROG: Sent GeoStar packet id 0xc1
Florian Eckert [Thu, 30 Jan 2025 10:55:19 +0000 (11:55 +0100)]
gpsd: add hotplug handling
The 'gpsd' offers the possibility to call the script '/etc/gpsd/device-hook'
when a GPS source was added or removed via gpsdctl.
In addition to the '/etc/gpsd/device-hook' call an event is now triggered
too after the 'gpsd' has started. This allows scripts to configurre 'gpsd'
receivers.
The following events are available for '/etc/hotplug.d/gpsd' scripts:
* ACTIVATE via '/etc/gpsd/device-hook'
* DEACTIVATE via '/etc/gpsd/device-hook'
* STARTED via '/etc/init.d/gpsd'
This change introduces an optional configuration
of the netifd integration in the ModemManager package.
When disabled, it removes the NETIFD dependency and
other unwanted components from the root filesystem
during the build phase.
Additionally, in the modemmanager.common the netifd-proto.sh
inclusion line can be savely removed as there is no usage
of it in its functions.
John Audia [Tue, 16 Jul 2024 19:23:36 +0000 (15:23 -0400)]
lxc: fix decompression of rootfs tarballs
Modified 025-remove-unsupported-option.patch to both remove
the bsdtar command as it ends in errors, see below, and to
circumvent an error when extracting to overlayfs[1].
Error when extracting rootfs tarball with bsdtar:
tar --absolute-names --numeric-owner '--xattrs-include=*' -xpJf /var/cache/lxc//download/archlinux/current/amd64//default/rootfs.tar.xz -C /mnt/data/lxc/test/rootfs
./usr/bin/newgidmap: Cannot restore extended attributes on this system: Illegal byte sequence
lxc-create: test: ../src/lxc/lxccontainer.c: create_run_template: 1589 Failed to create container from template
lxc-create: test: ../src/lxc/tools/lxc_create.c: lxc_create_main: 318 Failed to create container test
John Audia [Fri, 12 Jul 2024 17:57:10 +0000 (13:57 -0400)]
lxc: add gnu-tar as a depends to fix lxc-create
Add gnu-tar as a dependency for lxc-create which is needed to
properly extract the root file system tarball. Without it,
symlink target of /bin/tar is busybox and it lacks proper
support to extract with xattrs. The default gnu-tar is actually
built without this support as well, but it is able to extract
the rootfs tarballs with a warning not an error which is not the
case with busybox which ends in an error.
Additionally, two new patches have been added which remove checks for
options that OpenWrt currently does not package and can serve are
false positives for missing items from our kernel config, namely:
lxc-net and lxc-checkpoint
After applying this commit, below is the output showing that the kernel
config[1] should pass all tests for functionality:
% CONFIG=config ./lxc-checkconfig
LXC version 6.0.3
John Audia [Fri, 10 Jan 2025 02:48:25 +0000 (21:48 -0500)]
lxc: remove check for options we do not package
We do not package lxc-net or lxcfs so remove the lines within
lxc-checkconfig that looks forCONFIG_IP_NF_TARGET_MASQUERADE and
CONFIG_IP6_NF_TARGET_MASQUERADE which, as far as I know, is the only
part of lxc that needs them. Also remove the check for FUSE since we do
not pakcage lxcfs.
Without this commit, users will see these two as missing.
Dirk Brenken [Fri, 21 Feb 2025 21:08:45 +0000 (22:08 +0100)]
banIP: release 1.5.2-1
* add memory measurements:
- free memory in MB (MemAvailable from /proc/meminfo)
- script run max. used RAM in MB (VmHWM from /proc/$$/status)
* removed the obsolete (domain) lookup command in init script
* update the readme
Robert Marko [Thu, 20 Feb 2025 10:45:39 +0000 (11:45 +0100)]
libffi: drop autoreconf
Trying to compile libffi now that automake has been updated to 1.17 will
fail, however there is no reason for us to be calling autoreconf as libffi
release tarballs already contain the generated configure script.
So, drop the unnecessary autoreconf that seems to be leftover from the
previous 3.4.2 bump as we dont have any patches targeting configure.ac nor
libffi in general.
Fixes: openwrt/openwrt#18041 Signed-off-by: Robert Marko <redacted>
Philipp Schmitt [Tue, 18 Feb 2025 16:41:22 +0000 (17:41 +0100)]
mwan3: write `mwan3 use` error/debug messages to stderr instead of stdout
This redirects the debug output to stderr, allowing `mwan3 use` to be used in
scripts without polluting stdout.
Before:
mwan3 use wan curl -fsSL https://ifconfig.co/json | jq -er '.country_iso'
jq: parse error: Invalid numeric literal at line 1, column 8
curl: (23) Failure writing output to destination, passed 389 returned 0
After:
mwan3 use wan curl -fsSL https://ifconfig.co/json | jq -er '.country_iso'
Running 'curl -fsSL https://ifconfig.co/json' with DEVICE=eth2 SRCIP=192.168.0.1 FWMARK=0x3f00 FAMILY=ipv4
DE
John Audia [Wed, 19 Feb 2025 19:29:29 +0000 (14:29 -0500)]
libffi: update to 3.4.7
3.4.7 Feb-8-2024
Add static trampoline support for Linux on s390x.
Fix BTI support for ARM64.
Support pointer authentication for ARM64.
Fix ASAN compatibility.
Fix x86-64 calls with 6 GP registers and some SSE registers.
Miscellaneous fixes for ARC and Darwin ARM64.
Fix OpenRISC or1k and Solaris 10 builds.
Remove nios2 port.
John Audia [Tue, 18 Feb 2025 17:57:33 +0000 (12:57 -0500)]
openssh: bump to 9.9p2
Updated and removed upstreamed patch.
Highlights relating to security:
* Fix CVE-2025-26465 - ssh(1) in OpenSSH versions 6.8p1 to 9.9p1
(inclusive) contained a logic error that allowed an on-path
attacker (a.k.a MITM) to impersonate any server when the
VerifyHostKeyDNS option is enabled. This option is off by default.
* Fix CVE-2025-26466 - sshd(8) in OpenSSH versions 9.5p1 to 9.9p1
(inclusive) is vulnerable to a memory/CPU denial-of-service related
to the handling of SSH2_MSG_PING packets. This condition may be
mitigated using the existing PerSourcePenalties feature.
Both vulnerabilities were discovered and demonstrated to be exploitable
by the Qualys Security Advisory team. We thank them for their detailed
review of OpenSSH.
Full release notes: https://www.openssh.com/txt/release-9.9p2
Stan Grishin [Tue, 18 Feb 2025 00:13:29 +0000 (00:13 +0000)]
https-dns-proxy: bugfixes
* No more `/sbin/uci: Invalid argument output` when set to not update
dnsmasq instances (thanks @tmcqueen-materials for investigation!)
* Do not wait for interface.up on boot, hopefully this resolves the
boot-up start for everyone
Dirk Brenken [Mon, 17 Feb 2025 20:58:24 +0000 (21:58 +0100)]
adblock: release 4.2.5-1
* removed needless subshell calls
* add memory measurements:
- size of the final blocklist in MB
- free memory in MB (MemAvailable from /proc/meminfo)
- script max. used RAM (VmHWM from /proc/$$/status)
* optimized restart logic
* cosmetics
Ryan Keane [Sun, 22 Dec 2024 14:12:04 +0000 (06:12 -0800)]
adguardhome: Update init files
Move working directory from `/var/adguardhome` to
`/var/lib/adguardhome`, according to Linux FHS.
Add option to store PID file, defaulting to `/run/adguardhome.pid`.
Til Kaiser [Sat, 8 Feb 2025 11:01:32 +0000 (12:01 +0100)]
mstflint: update to 4.31.0
This commit updates the mstflint package to the
latest 4.31.0 release.
It also includes patches to fix some build errors
that have been merged into their development branch [1]
but are not inside the current release version.
git.99rst.org / openwrt-packages.git / log