Explicitly disable readline and tkinter modules for host-build.
Host-build will not build if these fail.
- readline isn't a hard requirement for host-python; some minor lack of
functionality would be felt, but nothing terrible
- tkinter is also disabled on the target; but for the host-python we
don't need it either
Dropped patch: 010-no-ncursesw.patch
- Since we're disabling readline in the host build
Drop setuptools from python3 - the only reason we kept it there, was
because it was required by pip; pip is still there and seems to install and
work fine without setuptools. There's also a separate setuptools package in
openwrt anyway:
https://github.com/openwrt/packages/tree/master/lang/python/python-setuptools
Also, Python no longer installs it:
https://github.com/python/cpython/issues/95299
Drop patch: 0001-Adjust-library-header-paths-for-cross-compilation.patch
- A lot of stuff has changed regarding cross-compilation; at this point
it's unclear what we need moving forward.
Drop patch: 006-do-not-add-multiarch-local-paths.patch
- setup.py went away, so no idea if this is needed anymore
Re-applied: 003-do-not-run-compileall.patch
Drop: 008-distutils-use-python-sysroot.patch
- Buildroot seems to have also dropped this; this patch is from them
Added: 09-don-t-run-profile-task-during-cross-build.patch
- For cross_compilation, running the profile-task will not work, it also
mentions this in a comment, but nobody dared to patch it yet (at least
in this release (3.13.9)
Re-applied: 026-openssl-feature-flags.patch
- This could have been dropped completely, but upstream decided to keep
scrypt on by default; for host-build this fails, because OpenWrt keeps
libressl
Drop patch: 100-gh-95855-Refactor-platform-triplet-detection-code-GH-107221.patch
- This was a backport; it probably should have been removed sooner
Akihiro Nagai [Fri, 7 Nov 2025 14:41:06 +0000 (23:41 +0900)]
cloudflared: fix argument order for tunnel command
Move all global options (--protocol, --loglevel, --logfile, --config,
--origincert, etc.) before the 'run' subcommand, and keep --token
after it to match the correct cloudflared CLI syntax.
,,_ -*> Snort++ <*-
o" )~ Version 3.9.7.0
'''' By Martin Roesch & The Snort Team
http://snort.org/contact#team
Copyright (C) 2014-2025 Cisco and/or its affiliates. All rights reserved.
Copyright (C) 1998-2013 Sourcefire, Inc., et al.
Using DAQ version 3.0.22
Using Vectorscan version 5.4.12 2025-11-02
Using libpcap version 1.10.5 (with TPACKET_V3)
Using LuaJIT version 2.1.0-beta3
Using LZMA version 5.8.1
Using OpenSSL 3.5.4 30 Sep 2025
Using PCRE2 version 10.46 2025-08-27
Using ZLIB version 1.3.1
2024-12-29 Nicola Di Lieto <redacted>
* Release 1.7.6
- Fix OpenSSL 3.x deprecated APIs
- Fix cross compilation
- uacme: Add environment variables
- uacme: Add support for ACME Renewal Information (ARI)
- uacme: Try obtaining new Reply-Nonce if server doesn't supply one
- uacme: Add hook environment variables
- uacme: Allow matching alternative chain by Authority Key Id
- Documentation update
- Add link to linode api hook
2024-01-28 Nicola Di Lieto <redacted>
* Release 1.7.5
- fix ualpn exit code in client mode
- fix build with autoconf version 2.71
- uacme: nsupdate.sh overhaul and DNAME redirection support
- add link to deSEC.io DNS integration
- minor documentation changes including copyright year
Akihiro Nagai [Wed, 5 Nov 2025 11:20:56 +0000 (20:20 +0900)]
cloudflared: improve init script for tunnel management
Resolved conflict between remotely-managed tunnel and locally-managed
tunnel configurations.
- Bumped PKG_RELEASE to 2
- Commented out 'config' and 'origincert' options in default
configuration file
- Preserved options as comments for user reference
This fixes varios bugs, e.g. memory leaks, segfaults and
other issues since 3.4.1.
For full changelog see:
https://pecl.php.net/package-changelog.php?package=xdebug&release=3.4.7
Alice H. [Fri, 19 Sep 2025 09:35:14 +0000 (10:35 +0100)]
earlyoom: add new package
earlyoom checks the amount of available memory and swap at an adaptive
rate for up to 10 times per second. When both available memory and swap
are below threshold, it'll send SIGTERM or SIGKILL to the process with
the highest oom_score. Details about oom_score can be obtained at
https://man7.org/linux/man-pages/man5/proc_pid_oom_score.5.html
Josef Schlehofer [Fri, 31 Oct 2025 12:01:26 +0000 (13:01 +0100)]
strongswan: add build dependency for python and explicitly use python3
Before:
checking for python... /myworkingdir/build/staging_dir/host/bin/python
checking for python version... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.
checking for python platform... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.
checking for GNU default python prefix... ${prefix}
checking for GNU default python exec_prefix... ${exec_prefix}
checking for python script directory (pythondir)... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.
checking for python extension module directory (pyexecdir)... xcode-select: Failed to locate 'python', requesting installation of command line developer tools.
After:
checking for python version... 3.11
checking for python platform... darwin
checking for GNU default python prefix... ${prefix}
checking for GNU default python exec_prefix... ${exec_prefix}
checking for python script directory (pythondir)... ${PYTHON_PREFIX}/lib/python3.11/site-packages
checking for python extension module directory (pyexecdir)... ${PYTHON_EXEC_PREFIX}/lib/python3.11/site-packages
Josef Schlehofer [Tue, 21 Oct 2025 23:50:30 +0000 (01:50 +0200)]
python-calver: update to version 2025.10.20
Fixes:
SetuptoolsDeprecationWarning: License classifiers are deprecated.
!!
********************************************************************************
Please consider removing the following classifiers in favor of a SPDX license expression:
License :: OSI Approved :: Apache Software License
See https://packaging.python.org/en/latest/guides/writing-pyproject-toml/#license for details.
********************************************************************************
Josef Schlehofer [Tue, 21 Oct 2025 22:05:35 +0000 (00:05 +0200)]
python-cython: update to version 3.1.5
Fixes:
Traceback (most recent call last):
File "<frozen runpy>", line 198, in _run_module_as_main
File "<frozen runpy>", line 88, in _run_code
File "/turris/build/staging_dir/hostpkg/lib/python3.11/site-packages/installer/__main__.py", line 98, in <module>
_main(sys.argv[1:], "python -m installer")
File "/turris/build/staging_dir/hostpkg/lib/python3.11/site-packages/installer/__main__.py", line 86, in _main
with WheelFile.open(args.wheel) as source:
File "/turris/build/staging_dir/hostpkg/lib/python3.11/contextlib.py", line 137, in __enter__
return next(self.gen)
^^^^^^^^^^^^^^
File "/turris/build/staging_dir/hostpkg/lib/python3.11/site-packages/installer/sources.py", line 162, in open
with zipfile.ZipFile(path) as f:
^^^^^^^^^^^^^^^^^^^^^
File "/turris/build/staging_dir/hostpkg/lib/python3.11/zipfile.py", line 1311, in __init__
self.fp = io.open(file, filemode)
^^^^^^^^^^^^^^^^^^^^^^^
FileNotFoundError: [Errno 2] No such file or directory: '/turris/build/build_dir/hostpkg/pypi/Cython-3.0.10//openwrt-build/Cython-3.0.10-*.whl'
Patch:
- 0001-Adjust-library-header-paths-for-cross-compilation.patch
comes from buildroot [1], but they removed it as they switched to Python 3.12,
however Python 3.11 still supports distutils, but it is marked as deprecated [2]
and it will be gone in 3.12. So, don't rebase it this time as this patch does not apply
anymore due to this commit [3] and sooner switch to more up-to-date Python3 version.
Josef Schlehofer [Thu, 30 Oct 2025 09:04:23 +0000 (10:04 +0100)]
umurmur: Use example config and add own init script
Files such as config file and init script related to OpenWrt
were removed in upstream [1]. Config file was same as umurmur.conf.example,
thus use it and init script, we need to ship our own. Add a simple one.
With "-DBUILD_WITH_AVAHI=OFF" the "libavahi-client" dependency is not
needed anymore. Instead, the "libexpat" dependency needs to be specified
explicitly.
snapserver has a built-in webserver which is able to host a web player:
snapweb. [1]
It is accessible at http://snapserver:1780/ but with enabled "doc_root"
setting and with missing directory the browser shows an empty page
with a message: "The resource '/' was not found."
Fix this with disabling the "doc_root" setting in "/etc/snapserver.conf"
This "doc_root" was enabled and set to "/usr/share/snapserver/snapweb"
in upstream commit fcbe40585875 ("Install snapweb") [2], back in 2020
and released in v0.21.0 of Snapcast.
This was reported in an upstream discussion by Robert Muth. [3]
Libivykis, an asynchronous I/O readiness notification library.
This library is required by syslog-ng and potentially other packages
that need event-driven I/O handling.
John Audia [Tue, 15 Jul 2025 09:00:41 +0000 (05:00 -0400)]
avahi: fix implementation of avahi user
All avahi subpackages should run the daemon as a dedicated user insteead
of as the nobody user. This is helpful in troubleshooting and better for
security and to help avoid resource conflicts.
Martin Schiller [Tue, 7 Oct 2025 05:38:14 +0000 (07:38 +0200)]
xl2tpd: add UCI support
This adds UCI support for xl2tpd. To maintain backward compatibility, I
have introduced the config option “use_legacy_config,” which is enabled
by default.
If you want to use the UCI config, you must disable or delete this
option.
John Audia [Sat, 25 Oct 2025 12:02:47 +0000 (08:02 -0400)]
nfs-kernel-server: disable kerberos and ldap
Some targets are failing due likely to build order issues suggested by
Daniel[1] so disable these two options for the v4 package.
Example:
make[4]: Leaving directory '/builder/shared-workdir/build/sdk/build_dir/target-aarch64_cortex-a53_musl/nfs-utils-2.8.4'
Package nfs-kernel-server-v4 is missing dependencies for the following libraries:
libgssapi_krb5.so.2
libldap.so.2
Peiying Huang [Tue, 12 Aug 2025 06:12:00 +0000 (14:12 +0800)]
postgresql: fix fails to start on mounted data directories
This commit resolves a bug where the PostgreSQL service failed to start
during the boot process when its data directory ($pgdata) was on a
partition mounted via `/etc/fstab`.
Because the filesystem is already mounted, no hotplug event is ever
triggered, and the PostgreSQL service mistakenly waits for an event
that will never happen.
This fix adds a check to ensure the script does not skip starting the
service if the data directory is on a mount point.