Javier Marcet [Thu, 4 Nov 2021 18:27:47 +0000 (19:27 +0100)]
docker-compose: Update to version 2.1.0
Docker Compose V2 is a major version bump release of Docker Compose.
It has been completely rewritten from scratch in Golang (V1 was in
Python).
Features:
- Added support for running the plugin as a standalone program. Like
docker-compose v1 would behave compute sha256 checksums while releasing
Bugfixes:
- Allow combination of --status and --services
- Fix build cache_from option
- Fix compose up on README.md
- Make --status a multi-flag
- No longer fail when inferred .env is a directory
Misc
- Stop ticker after use on ttyWriter
- Use uname -m for cross platform suffixes
- Add note about installing it system-wide
- Bump containerd 1.5.5
What's Changed
- Fix support for devices by @ndeloof in #8732
- Make command descriptions consistent by @mat007 in #8739
- Restore missing version commands by @Shikachuu in #8738
- Add step in README to install on linux by @Yopadd in #8755
- log --follow must stop when container get killed by @ndeloof in
#8726
- Fix index out of range on compose.buildContainerMountOptions by
@ulyssessouza in #8750
- Pass runtime option to containerCreate by @ndeloof in #8783
- Fix compose down --timeout/-t flag by @debdutdeb in #8788
- Fix network_mode "service:x" by @ulyssessouza in #8792
- Make service>build>dockerfile a simple filename by @ulyssessouza
in #8779
- Compose exec cannot process more than 32KB of data by @resios in
#8815
- Actually fix Compose exec cannot process more than 32KB of data by
@resios in #8816
- Fix project settings' options order by @ulyssessouza in #8819
- Update link to Docker Community Slack by @mat007 in #8824
- Add support for DOCKER_DEFAULT_PLATFORM by @ndeloof in #8848
- COMPOSE_COMPATIBILITY can be set by .env file by @ndeloof in #8847
- Add support for EnableIPv6 by @ndeloof in #8851
- Avoid test flakyness by ordering volumes before checking by
@ulyssessouza in #8858
- Update README.md: typographical edit of "About update..." by
@youssefeldakar in #8838
- Add support for classic builder by @ulyssessouza in #8818
- Fix typo: netwok -> network by @Mygao in #8789
- Bump compose-go to v1.0.5 by @ulyssessouza in #8870
This partially reverts ac5912e9cb7761b5153bc12343f1af8b224c1d29.
CMAKE_SKIP_RPATH=TRUE is set in include/cmake.mk, so the commit removed
this from some packages as it is the default anyway. But in
mjpg-streamer Makefile this was not set to "TRUE", but to "FALSE". So
this line shouldn't have been removed.
With this revert the runpath is back and modules can be loaded again
from "/usr/lib/mjpg-streamer":
Hannu Nyman [Mon, 8 Nov 2021 19:32:54 +0000 (21:32 +0200)]
nano: enable line numbers (from cmdline)
Enable showing line numbers, which makes it easier to find
the correct place in long files. Due to the "tiny" build,
the functionality is only available from cmdline with "-l"
option.
For example: nano -l /etc/banner
Key shortcut M-n is disabled due to "tiny".
See https://savannah.gnu.org/bugs/?61441 for explanation.
Also
* remove without-slang config option, deprecated in Dec 2020
* adopt AUTORELEASE
Oskari Rauta [Fri, 5 Nov 2021 03:34:58 +0000 (05:34 +0200)]
zerotier: update to 1.8.1
Release notes:
1.8.0
- Upgrade json.hpp dependency to version 3.10.2
- Check if DNS servers need to be applied on macOS
- Set MAC address before bringing up Linux TAP link
- Stop binding to temporary IPv6 addresses
- Fix for mistakenly using v6 source addresses for v4 routes on some platforms
- Fix for MacOS MTU capping issue on feth devices
- Implement a workaround for one potential source of a "coma" bug, which can occur if buggy NATs/routers stop allowing the service to communicate on a given port. ZeroTier now reassigns a new secondary port if it's offline for a while unless a secondary port is manually specified in local.conf. Working around crummy buggy routers is an ongoing effort.
- A completely rewritten desktop UI for Mac and Windows!
1.8.1
- Fix an issue that could cause clobbering of MacOS IP route settings on restart.
- Added additional hardening against address impersonation on networks (also in 1.6.6).
- MacOS IPv6 no longer binds to temporary addresses as these can cause interruptions if they expire.
- Remove support for REALLY ancient 1.1.6 or earlier network controllers.
- Fix numerous UI issues from 1.8.0 (never fully released).
Oskari Rauta [Thu, 4 Nov 2021 22:19:15 +0000 (00:19 +0200)]
conmon: update to 2.0.30
bug fixes:
- Remove unreachable code path
- exit: report if the exit command was killed
- exit: fix race zombie reaper
- conn_sock: allow watchdog messages through the notify socket proxy
- seccomp: add support for seccomp notify
misc:
- Add seccomp to build dependency
included patch removes unnecessary dependency of libdl and also allows a succesfull build
disabled for arc where libseccomp does not seem to be available
Oskari Rauta [Thu, 4 Nov 2021 23:41:20 +0000 (01:41 +0200)]
crun: update to version 1.2
release notes:
0.20.1
- container: ignore error when resetting the SELinux label for the keyring.
0.21
- when compiled with krun, automatically use it if the current executable file is called "krun"
- cgroup: lookup pids controller as well when the memory controller is not available
- status: add fields for owner and created timestamp
- honor memory swappiness set to 0
1.0
- Fix symlink target mangling for tmpcopyup targets.
- Makefile.am: fix link error when using directly libcrun.
- cgroup: add support for setting memory.use_hierarchy on cgroup v1.
- linux: treat pidfd_open failures EINVAL as ESRCH.
- cgroup: chown the current container cgroup to root in the container.
1.1
- utils: retry openat2 on EAGAIN. If the openat2 syscall is interrupted, try again.
- criu: fix save of external descriptors. Now restored containers attach correctly their standard streams.
- criu: Add support for external PID namespace.
- container: Set primary process to 1 via LISTEN_PID by default if user configuration is missing.
- exec: refuse to exec in a paused container/cgroup.
- cgroup: use cgroup.kill when available. It is faster to kill a container through its cgroup as there is no need to recurse over the cgroup pids and terminate each one of them.
1.2
- criu: add support for external ipc, uts and time namespaces.
- exec: fix regression in 1.1 where containers are being wrongly reported as paused.
Martin Schneider [Wed, 29 Sep 2021 12:29:13 +0000 (20:29 +0800)]
dns-over-https: Add dns-over-https.
Client and server software to query DNS over HTTPS, using Google DNS-over-HTTPS protocol and IETF DNS-over-HTTPS (RFC 8484). https://github.com/m13253/dns-over-https
Remove the --install parameter when running aclocal. The --install
argument is used to copy third-party files to the first -I directory.
gnutls has -I m4 first, which would copy files to its local build
directory. However, openwrt prepends the staging dir m4 directory,
causing aclocal --install to copy an old definition of
ax_code_coverage.m4 into the staging dir.
If strace is built after gnutls, compilation will fail:
Makefile:9303: *** missing separator. Stop.
The version of ax_code_coverage.m4 that gets installed does not define
@CODE_COVERAGE_RULES@.
Removing the --install parameter in gnutls solves the issue.
ICU 70 released. It updates to Unicode 14, including new characters, scripts, emoji, and corresponding API constants. ICU 70 adds support for emoji properties of strings. It also updates to CLDR 40 locale data with many additions and corrections. ICU 70 also includes many other bug fixes and enhancements, especially for measurement unit formatting, and it can now be built and used with C++20 compilers.
This change will require minor modifications in php7 and php8.
Jonathan Pagel [Sun, 31 Oct 2021 16:43:25 +0000 (17:43 +0100)]
telegraf: Move config file to /etc/telegraf.conf because
/etc/config is the default uci folder. Also marking it as
configuration file prevents overwriting it on updates.
Michal Hrusecky [Thu, 28 Oct 2021 12:43:22 +0000 (14:43 +0200)]
afuse: Add new package
This commit add new package afuse into packages feed.
afuse is an automounting file system implemented in user-space using
FUSE. It implements the most basic functionality that can be expected by
an automounter; that is it manages a directory of virtual directories.
If one of these virtual directories is accessed and is not already
automounted, afuse will attempt to mount a filesystem onto that
directory. If the mount succeeds the requested access proceeds as
normal, otherwise it will fail with an error.
* CVE-2021-25219: The "lame-ttl" option is now forcibly set to 0. This
effectively disables the lame server cache, as it could previously be
abused by an attacker to significantly degrade resolver performance.
* CVE-2021-25218: An assertion failure occurred when named attempted
to send a UDP packet that exceeded the MTU size, if Response Rate
Limiting (RRL) was enabled.
Reload the service when interfaces flap; note that libcap support
is required to open new sockets on interfaces coming up during
a reload, otherwise a full restart would be needed.
Jan Hoffmann [Wed, 27 Oct 2021 21:55:28 +0000 (23:55 +0200)]
vnstat2: add hotplug script for adding interfaces
If an interface doesn't exist yet when vnStat is started, it won't be
monitored, as only existing interfaces can be added to the database via
the vnstat command.
This adds a hotplug script which adds any configured interfaces to the
vnStat database when it goes up.
Jan Hoffmann [Thu, 21 Oct 2021 21:38:58 +0000 (23:38 +0200)]
vnstat2: fix all interfaces being monitored when none are configured
By default, vnstatd adds all available interfaces on startup when its
database is empty. The --noadd option prevents this, but it breaks
import of legacy databases, and causes vnstatd to exit immediately
after startup, which breaks reloading.
This changes the init script to add the --noadd option when no legacy
databases need to be imported, and patches vnstatd to keep running
even when no interfaces are configured.
Nick Hainke [Mon, 25 Oct 2021 07:36:56 +0000 (09:36 +0200)]
gpsd: update to 3.23.1
3.23.1: 2021-09-21
Improve ubx cycle detection.
Add quirks for Jackson Labs nonstandard NMEA
Change STATUS_NO_FIX to STATUS_UNK to avoid confusion with fix mode.
Change STATUS_FIX to STATUS_GPS to avoid confusion with fix mode.
Change STATUS_DGPS_FIX to STATUS_DGPS to avoid confusion with fix mode.
Split SOURCE_ACM from SOURCE_USB. ACM has no speeds.
Add speeds 1 mbps, 1.152 mbps, 1.5 mbps, and higher. When libc supports them.
Improve autobaud.
Add new u-blox M10 messages.
Fix u-blox M6, M7 initialization issues.
Various ubxtool and gpxlogger updates.
Add mtk3301_speed_switcher()
No API changes, except for STATUS_* as above.
No ABI changes.
Fallback to "python3" if "python" not found.
This has been replaced with the "trust-anchors" keyword, per
section 8.21.1 New Features of the Bind 9 Administrator Reference
Manual:
• In order to clarify the configuration of DNSSEC keys, the trusted-keys and managed-keys statements have been deprecated, and the new trust-anchors statement should now be used for both types of key.
When used with the keyword initial-key, trust-anchors has the same behavior as managed-keys, i.e., it configures a trust anchor that is to be maintained via RFC 5011.
When used with the new keyword static-key, trust-anchors has the same behavior as trusted-keys, i.e., it configures a permanent trust anchor that will not automatically be updated. (This usage is not recommended for the root key.) [GL #6]
Sebastian Kemper [Sun, 24 Oct 2021 13:36:22 +0000 (15:36 +0200)]
apache: fixup apxs
apxs is used to get information about the apache installation when
building external modules. Currently there are issues:
1.
./staging_dir/target-mips_24kc_musl/usr/bin/apxs -q TARGET
apache2
apxs:Error: ./staging_dir/target-mips_24kc_musl/home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/bin/apr-1-config not found!.
This error is fixed by sed script #2.
2.
./staging_dir/target-mips_24kc_musl/usr/bin/apxs -q TARGET
cannot open ./staging_dir/target-mips_24kc_musl/home/sk/tmp/openwrt/staging_dir/target-mips_24kc_musl/usr/share/apache2/build/config_vars.mk: No such file or directory at ./staging_dir/target-mips_24kc_musl/usr/bin/apxs line 213.
git.99rst.org / openwrt-packages.git / log