Hauke Mehrtens [Thu, 5 Feb 2026 23:06:57 +0000 (00:06 +0100)]
owut: activate by default in buildbot
This will activate owut in buildbot builds for targets with large flash
by default. This will integrate it into most images by default.
The buildbots already build LuCI with luci-app-attendedsysupgrade. This
adds ucode-mod-uclient and owut to the image.
These are the package sizes for mips_24kc:
29270 bin/packages/mips_24kc/packages/owut-2026.01.13~2526d84b-r1.apk
5449 bin/packages/mips_24kc/base/ucode-mod-uclient-2026.01.31~931bbfeb-r1.apk
Dirk Brenken [Sun, 8 Feb 2026 09:25:55 +0000 (10:25 +0100)]
adblock: release 4.5.1
* Remote DNS Allow: this additional firewall feature lets selected client devices
temporarily bypass local DNS blocking and use an external, unfiltered DNS resolver.
* LuCI: new Firewall options for remote Access
* readme update
Daniel Golle [Thu, 5 Feb 2026 02:44:24 +0000 (02:44 +0000)]
libutp: update to 2024-11-16
transmission/libutp@490874c Merge pull request #17 from tearfur/malformed-logs
transmission/libutp@2d29ce9 Merge pull request #18 from tearfur/ftbfs-log
transmission/libutp@6c7ee3f Merge pull request #16 from brad0/openbsd_monotonic
transmission/libutp@1e7e6c6 fix: FTBFS when `UTP_DEBUG_LOGGING` is defined
transmission/libutp@eedd8b9 fix: malformed logs produced by `struct_utp_context::log()`
transmission/libutp@14d6f57 Use monotonic clock on OpenBSD
transmission/libutp@52645d6 chore: remove invalid assertion
transmission/libutp@4ed4d43 refactor: use std::unordered_map instead of bespoke utpHashTable
transmission/libutp@13545a9 fixup! chore: savepoint
transmission/libutp@d0f70e6 chore: add code comments for new code that needs it
transmission/libutp@b109597 chore: remove extra include string.h
transmission/libutp@13b5cb4 chore: remove unnecessary #include utp_hash.h
transmission/libutp@958758b copyediting: tab damage, constify
transmission/libutp@165a316 refactor: replace UTPSocketHT method with one more narrowly-scoped
transmission/libutp@9bbf6b3 perf: do not rebuild UTPSocketKey in LookupAdjacent
transmission/libutp@a271636 chore: savepoint
transmission/libutp@d339167 feat: make UTPSocketKey std::hash-friendly
transmission/libutp@1354618 refactor: use std::min(), std::max() instead of bespoke
transmission/libutp@7480820 chore: remove redundant explicit types when invoking std::min, std::max
transmission/libutp@3189aba chore: restore undefs
transmission/libutp@1849bd1 chore: make vsc happy
transmission/libutp@24c967b refactor: make explicit type for std::min, std::max
transmission/libutp@1862df0 refactor: make explicit type for std::min, std::max
transmission/libutp@8080115 refactor: use std::min(), std::max() instead of bespoke
transmission/libutp@2589200 refactor: use std::vector instead of bespoke Array class
transmission/libutp@09ef1be Fix build on *BSD (#10)
transmission/libutp@4d4a3ce fixup! refactor: use std::vector instead of bespoke Array class
transmission/libutp@1320d78 Merge branch 'post-3.4-transmission' into refactor/replace-bespoke-to-std-pt-1
transmission/libutp@8bdf5e8 Try to reduce the number of CI builds
transmission/libutp@4ec3c96 Merge branch 'post-3.4-transmission' into refactor/replace-bespoke-to-std-pt-1
transmission/libutp@5820d8e Bump minimum CMake version to 3.12 to match Transmission (#9)
transmission/libutp@d9d3754 refactor: use std::vector instead of bespoke Array class
transmission/libutp@9cb9f9c build: Require C11 (#5)
Daniel Golle [Thu, 5 Feb 2026 02:40:12 +0000 (02:40 +0000)]
libdeflate: update to 1.25
ebiggers/libdeflate@c8c56a2 (tag: v1.25) v1.25
ebiggers/libdeflate@095bcab cmake: make installed package relocatable
ebiggers/libdeflate@7b9232c ci.yml: Use windows-latest for windows-visualstudio-build-and-test
ebiggers/libdeflate@d65d5db Add link to SwiftDeflate wrapper
ebiggers/libdeflate@6bb4936 lib/x86: drop any mention of `evex512`
ebiggers/libdeflate@2a3762c lib/x86/cpu_features.h: drop evex512 on gcc-16
Georgi Valkov [Sun, 1 Feb 2026 01:07:13 +0000 (03:07 +0200)]
ustreamer: add package 6.51
With mjpg-streamer pending removal [1], it would be nice if we add
a compatible replacement which is under active development.
ustreamer offers a better performance, especially when the
camera supports MJPEG encoding in hardware.
The package already includes OpenWRT support files ./pkg/openwrt
but they needed heavy editing, so it is more efficient to copy
the scripts and configuration, instead of using patches.
Notable changes:
While the init.d script can run in the background when no camera is
connected, it is more efficient to indicate no active instances.
A hotplug script is introduced to start and stop the service when
cameras are added or removed.
If the configured format or encoding are unsupported, a compatible
alternative is automatically selected, so I changed the default
configuration to use MJPEG encoding in hardware for better performance.
HACKS:
MAKE_FLAGS += WITH_SETPROCTITLE=0
is added to workaround the following linker error:
undefined reference to setproctitle_init
This symbol is defined in libbsd, however adding the build dependency
does not resolve the error, because -lbsd is added conditionally, only
when uname -s contains linux. This is unreliable and fails when
cross-compiling on a macOS host. An upstream fix is needed.
An alternative is to use
PKG_UNPACK=$(HOST_TAR) -C $(PKG_BUILD_DIR) --strip=2 -xf $(DL_DIR)/$(PKG_SOURCE)
however this modifies the directory structure, so patches would need
path editing to maintain upstream compatibility.
TODO:
luci-app-mjpg-streamer which is also pending removal [2] is able to
open the HTTP stream from ustreamer. It would be nice to create
luci-app-ustreamer based on that.
When selecting only a package of "no-configure" build variant, e.g.
CONFIG_PACKAGE_zabbix-frontend-server=y
but not any other zabbix package, then the build fails.
The sources are not extracted and the install fails finally with:
make[4]: Entering directory '/srv/openwrt/openwrt-2.git/build_dir/target-arm_arm926ej-s_musl_eabi/zabbix-no-configure/zabbix-7.0.22'
make[4]: *** No rule to make target 'install'. Stop.
make[4]: Leaving directory '/srv/openwrt.git/build_dir/target-arm_arm926ej-s_musl_eabi/zabbix-no-configure/zabbix-7.0.22'
make[3]: *** [Makefile:522: /srv/openwrt.git/build_dir/target-arm_arm926ej-s_musl_eabi/zabbix-no-configure/zabbix-7.0.22/.built] Error 2
This PR fixes this by always running the standard Prepare stage,
but skip the Install one when nothing needs to be compiled.
Stan Grishin [Fri, 30 Jan 2026 20:22:03 +0000 (20:22 +0000)]
pbr: update to 1.2.1-r87
Makefile:
* Remove installation of /usr/share/nftables.d/* files as they are no
longer needed
Init script:
* bugfixes/more mature netifd extensions support
* refactor of the nft_file function and global variables it uses
* the "main" atomic nft file now includes creation of pbr chains and jumps
from relevant fw4 chains to pbr chains
* more consistent use of "uplink" wording in the output and variable names
* implement resolver 'wait' call and use it before trying to resolve any
policy entries
* major overhaul of the split uplink case (IPv4-only wan and IPv6-only
wan6), should now create/use a single pbr_wan table for both legacy and
IPv6 routing and the same marking chain
* updates to IDs and text of some error messages (needs luci app update)
* major speed improvements for service stop
* unify the cleanup_* functions into a single cleanup function
* reject creating/additions to nft sets for src_address entries as dnsmasq
doesn't populate sets with local addresses
* minor bugfixes/code cleanups
* refactor processing of WG servers due to split uplink support (thanks
@egc112!)
* clearer (hopefully) argument names for process_interface calls
* small improvements to status_service
The error in the #24828 patch series left Kconfig recursive depedency
error on zabbix-frontend-server. We fix this by update the database
depedencies on zabbix-frontend-server. Now, you must select the PHP8
database module you want _before_ zabbix-frontend-server will be
visible in menuconfig.
This is not a big problem, because zabbix-frontend-server already
depends on having php8 slected before the frontend can be built.
Closes: #28458 Signed-off-by: Daniel F. Dickinson <redacted>
Due to package renaming the selection of database for the server and
proxy was missing from the Kconfig menu. This caused build failures for
proxy and server.
zabbix: fix compile skipped due to line continuation
Using line continuation (\\) in GNU Make \$(foreach ...) and
\$(call ...) resulted in the install section for many of the packages
not being defined. This resulted in 'skipping [package-name] no install
section' messages and no new package being generated.
We remove the line continuation from the parts foreach and call, in
ordeer to restore compilation and creation of packages.
George Sapkin [Mon, 2 Feb 2026 01:11:01 +0000 (03:11 +0200)]
golang: add option to skip building bootstrap
Introduce a new configuration option - GOLANG_BUILD_BOOTSTRAP - that
defaults to enabled:
- When enabled, build the local bootstrap instead of using an external
one for host Go. If GOLANG_EXTERNAL_BOOTSTRAP_ROOT is set, skip the
initial 1.4 step.
- When disabled, let Go auto-detect the toolchain or use the toolchain
specified in GOLANG_EXTERNAL_BOOTSTRAP_ROOT to skip building the
bootstrap and build host Go using that toolchain directly. Configured
toolchain must be compatible with the current version of Go.
HOST_BUILD_DEPENDS cannot be conditional, so some Makefile juggling is
needed.
Put menu config under bootstrap only.
Remove unnecessary package-related flags from host-only bootstrap.
Since the RFC-1918 in-addr.arpa empty zones are automatically created,
they will exist, but we can't use modzone on them because that's not
how things work.
zabbix: deduplicate and reorganize package defines
In preparation for further changes, deduplicate package definitions,
and reorganize them. At the same time make use of provides to ensure
both existing names are preserved, and that it is possible to be
specific about the variant of the package one wants.
Also, condense the package conffiles, install, postinst, etc handling.
This is more maintainable (less copy and paste and less to modify).
zabbix: drop unwanted file and wrong BUILD_VARIANT
cspell.json was accidentally include in a previous commit, so remove it.
VARIANT is to be used in package definitions, and BUILD_VARIANT
for checking which VARIANT is currently being built. BUILD_VARIANT was
incorrectly used in a package definition, so we fix that.
bind: backport patch replace automatic empty zones
The RFC-1918 zones are automatically synthesized locally by bind
to avoid forwarding queries about them to root nameservers. As
a result, we can't easily replace them with rndc addzone on the
fly. We need this for DHCP integration.
Rosen Penev [Fri, 30 Jan 2026 04:55:29 +0000 (20:55 -0800)]
faad2: update to 2.11.2
Remove no longer used CONFIGURE_ARGS since the conversion to CMake.
Remove patented stuff. Red Hat Legal seems to have approved its
inclusion into Fedora without any flags disabling SBR. If it's good
enough for Red Hat it's good enough for OpenWrt.
Stan Grishin [Wed, 28 Jan 2026 00:19:37 +0000 (00:19 +0000)]
adblock-fast: update to 1.2.1-3
* add an option dnsmasq_validity_check to enable removal of invalid
domains from the final dnsmasq files
* renamed option sanity_check to dnsmasq_sanity_check
* better names for Format Filters and Parse Filters variables
Georgi Valkov [Wed, 28 Jan 2026 18:21:28 +0000 (20:21 +0200)]
libimobiledevice: fix dependency on libtatsu
libtatsu is a dependency only for libimobiledevice-utils
the library itself does not use it during build, and is a
core component for iPhone tethering, while the utils are optional
move the dependency to the utils, to reduce the build size:
libtatsu depends on libcurl, which is compiled with a TLS library,
so users of prebuilt packages are forced to install both
OpenSSL and mbed TLS. This patch removes the unnecessary dependency.
Fixes: https://github.com/openwrt/packages/issues/28427 Signed-off-by: Georgi Valkov <redacted>
Error if shebang to host python interpreter would exceed 127 characters
(124 characters plus shebang and newline). This is used to alert user
when python-installer would fail to correctly set a Python program's
shebang line.
Closes: https://github.com/openwrt/packages/issues/28310 Signed-off-by: Daniel F. Dickinson <redacted>
George Sapkin [Wed, 21 Jan 2026 00:53:04 +0000 (02:53 +0200)]
golang: add generic package definition
Move version definition to a helper file so multiple versions can be
easily defined using it.
Variables HOST_GO_VARS, PKG_GO_ASMFLAGS, PKG_GO_GCFLAGS,
PKG_GO_INSTALL_ARGS, PKG_GO_LDFLAGS, PKG_GO_VARS, and
PKG_GO_ZBOOTSTRAP_MODS are defined using conditional variable
assignment and can be overridden for each go version.
Eugenio Pérez [Sun, 25 Jan 2026 15:20:32 +0000 (17:20 +0200)]
domoticz: fix chown call
Busybox's chown stops reading the username at the dot, so only user was
changed and the group remained as root. Properly use ':' instead of '.'
as the delimeter.
Fixes: a98239c "domoticz: update to 3.9571 and clean up FHS handling" Signed-off-by: Eugenio Pérez <redacted>
[add PKG_RELEASE bump, modify commit message, add Fixes line] Signed-off-by: Hannu Nyman <redacted>
Hannu Nyman [Sun, 25 Jan 2026 10:56:01 +0000 (12:56 +0200)]
irqbalance: update to version 1.9.5
Update to version 1.9.5
* Use upstream meson.build file, as they now support meson
* patch it locally to continue using static glib linking
* Disable numa, systemd and thermal functions via meson options
* Resurrect the patch to silence repetitive EINVAL warnings.
(patch was used with 1.9.3, but was not needed with 1.9.4)
Related discussion in upstream issue 336 and 349
Michal Kazior [Thu, 4 Sep 2025 17:18:47 +0000 (17:18 +0000)]
lxc: fix meson.build on esoteric host systems
When building lxc's meson.build tries to infer
something for the target system out of the host
build OS. This isn't reproducible and can actually
fail on some OS' like NixOS.
The failure looked like this, early in the
building stage of lxc:
> ../../../../build_dir/target-aarch64_cortex-a53_musl/lxc-6.0.5/meson.build:166:8: ERROR: Problem encountered: "distrosysconfdir" is not set
The /etc/default seems to be something that is
derived on most host systems, so use that as the
explicit config.
This fixes building lxc on NixOS and similar.
This also makes the build more pure and
reproducible. Before this commit building the same
set of checkouts, same config would yield
different lxc artifacts on RedHat and Ubuntu.
It was probably harmless though.
This also removes inactive maintainer from the
Makefile.