Stijn Tintel [Tue, 1 Aug 2017 00:49:42 +0000 (02:49 +0200)]
strongswan: remove checks for UCI config
In commit 36e073d8201fe7cf133ef3eea41f8855c3344c71, some checks were
added to see if the UCI config file exists and if there are any peers
configured in it. Due to these checks, if /etc/config/ipsec exists, but
contains no enabled peers, strongswan will not be started. This is not
ideal, as a user might want to experiment with the UCI config while
keeping existing connections in /etc/ipsec.conf operational.
strongswan: split scepclient into separate package
We currently include the SCEP client in strongswan-utils, which is a
dependency of the strongswan-default meta-package. As it's generally not
recommended to generate keys on embedded devices due to lack of entropy,
move the SCEP client to a separate package, and only depend on it in the
strongswan-full meta-package.
We currently include the PKI tool in strongswan-utils, which is a
dependency of the strongswan-default meta-package. As it's generally not
recommended to generate keys on embedded devices due to lack of entropy,
move the PKI tool to a separate package, and only depend on it in the
strongswan-full meta-package.
Daniel Engberg [Mon, 7 Aug 2017 12:03:22 +0000 (14:03 +0200)]
libs/faad2: Update to 2.8.1
* Switch back to upstream repo
* Follow the same configuration style as ffmpeg and mpg123 for using float vs
fixed point codepaths.
* Remove unneeded cpp variables (musl provides C99 math library)
Daniel Engberg [Mon, 7 Aug 2017 10:22:17 +0000 (12:22 +0200)]
net/nmap: Update to 7.60
* Update nmap-suite to 7.60
* Use PKG_HASH as PKG_MD5SUM is deprecated
* Switch download URL to HTTPS
* Add zlib as dependency and link libpcre dynamically
dnscrypt-proxy: start from procd interface trigger, not in init
* Start dnscrypt-proxy from procd interface trigger rather than
immediately in init, to fix a possible race condition during boot and
get rid of rc.local restarts. You can restrict trigger interface(s) by
'procd_trigger' in new global config section.
Daniel Engberg [Mon, 7 Aug 2017 03:57:28 +0000 (05:57 +0200)]
utils/gptfdisk: Remove from tree
linux-utils (fdisk) provides the functionality I need and I have no interest
in maintaining this package as it more or less overlaps the functionality
of the previously mentioned alternative.
ejurgensen [Fri, 4 Aug 2017 21:42:29 +0000 (23:42 +0200)]
forked-daapd: Fix build error and use xz distribution method (ref pr #4628)
The release .tar.xz includes the gperf and antlr generated files, so the patch
is no longer required. The build error was from the patch being outdated.
Dirk Brenken [Fri, 4 Aug 2017 09:01:15 +0000 (11:01 +0200)]
adblock: update 2.8.5
* add preliminary kresd dns backend support for turris devices,
see readme (experimental / untested!)
* use tld compression for overall list, too
* cosmetics
Marcin Jurkowski [Tue, 25 Jul 2017 17:34:40 +0000 (19:34 +0200)]
mwan3: support various interface tracking methods
Adds support for interface tracking using either ping, arping or
httping. This allows to track interface status on networks with filtered
ICMP traffic or simply to monitor data link layer etc.
To facilitate binding to a specified interface its IP address is passed
as a new mwan3track parameter. It's currently required by httping
and possibly by other tools that may be added in the future.
Sebastian Kemper [Sun, 30 Jul 2017 15:41:07 +0000 (17:41 +0200)]
libs/speex and libs/speexdsp: fix configure params
- Remove ogg params from speex configure as it doesn't know about them.
- Remove --enable-sse=no from both speex and speexdsp. The configure
scripts do actually not add items to our CFLAGS like previously
assumed.
- When --disable-float-api is used VBR needs to be disabled as well, as
VBR has not been implemented with fixed-point math in speex (yet). So
add --disable-vbr when --disable-float-api is used.
- In speexdsp 1.2rc2 optimizations for NEON were added. Unfortunately
the ASM does not work for 64bit ARM. So force NEON optimizations off
when compiling for AARCH64.
Sebastian Kemper [Sun, 30 Jul 2017 08:08:52 +0000 (10:08 +0200)]
libs/speex: version bump and refactoring
- speexdsp has been broken out of the speex package by upstream. The
released versions of both aren't aligned (speex is at 1.2.0, speexdsp
at 1.2rc3). Break out speexdsp into its own Makefile accordingly.
- Don't disable VBR anymore as it has its applications (i.e. can be used
with freeswitch-stable).
- Prevent build system from changing our CFLAGS (--enable-sse=no).
- Make integer mode depend on SOFT_FLOAT symbol so it doesn't get
enabled on devices with FPUs.
- Use PKG_INSTALL and remove custom Build/Compile as there is no need
for this.
0.9.1
backend:
* load procd reload trigger only in 'manual' mode
* documentation update
frontend:
* further optimized Station Overview & Scan page,
especially for mobile devices
* add a "Rescan" button in manual mode on overview page
* XHTML fixes
This commit introduces nlbwmon, the lightweight NetLink BandWidth Montor.
The nlbwmon daemon gathers per-host traffic statistics by querying netlink
accounting data. Due to this approach, the executable is very small and does
not rely on libpcap and CPU intensive raw sockets to monitor traffic.
Besides raw per-host traffic counters, nlbwmon also support rudimentary
traffic classification by observing IP protocols and used port numbers.
Gathered accounting data is stored into a series of database files which
are regularily committed to persistent storage.
Refresh, commit and accounting intervals are freely configurable as well
as the layer7 protocol mapping rules and observed source subnets.
This package also bundles a cli client which can be used to dump the
gathered traffic data as JSON, CSV or plaintext data. A pull request to
add a graphical LuCI frontend for nlbwmon is pending.
softethervpn: Pass down CFLAGS, CPPFLAGS and LDFLAGS
The softethervpn does not actually supported CCFLAGS, or other standard
variables, so we need to override CC to include all of those to fix
build errors with external toolchains.
In case a toolchain happens to be built with OpenMP, sox's configure
script would be picking that, but we would not be depending on libgomp
and would fail creating the package.
Since internal OpenWrt/LEDE toolchains don't enable OpenMP by default,
let's just do that here as well.