Hannu Nyman [Sat, 9 Dec 2023 10:13:27 +0000 (12:13 +0200)]
irqbalance: Fix log spam and correct meson version
Irqbalance 1.9.3 changed the handling of certain errors.
Specifically EINVAL, trying to set an invalid CPU core,
was changed to be a temporary error, causing log spam from
repeated balancing runs in some devices. See log and strace below.
Mark EINVAL as permanent.
Also correct the version in our own meson.build patch.
Log and strace:
Sat Dec 9 10:17:27 2023 daemon.warn irqbalance: Cannot change IRQ 48 affinity: Invalid argument
Van Waholtz [Sat, 9 Dec 2023 06:05:01 +0000 (14:05 +0800)]
sing-box: update to 1.7.4
New features for v1.7.x:
1. Support excluding custom routes
2. `udp_disable_domain_unmapping` for inbound listen option
3. `HTTPUpgrade` transport
4. Migrate multiplex and UoT server to inbound and multiplexing support is no longer enabled by default and needs to be turned on explicitly in inbound options.
5. TCP Brutal support for multiplex
,,_ -*> Snort++ <*-
o" )~ Version 3.1.76.0
'''' By Martin Roesch & The Snort Team
http://snort.org/contact#team
Copyright (C) 2014-2023 Cisco and/or its affiliates. All rights reserved.
Copyright (C) 1998-2013 Sourcefire, Inc., et al.
Using DAQ version 3.0.13
Using LuaJIT version 2.1.0-beta3
Using OpenSSL 3.0.12 24 Oct 2023
Using libpcap version 1.10.4 (with TPACKET_V3)
Using PCRE version 8.45 2021-06-15
Using ZLIB version 1.3
Using Hyperscan version 5.4.2 2023-12-03
Stan Grishin [Fri, 8 Dec 2023 02:41:44 +0000 (02:41 +0000)]
adblock-fast: bugfixes: getsize/resolver
* do not use standalone grep-package dependent syntax to get the remote
file size
* various bugfixes to prevent attempts to change/commit if dnsmasq/smartdns
are not installed
Jeffery To [Mon, 4 Dec 2023 06:05:55 +0000 (14:05 +0800)]
python-platformdirs: Add new package
This also includes a test.sh script for the packages feed CI.
From the README:
When writing desktop application, finding the right location to store
user data and configuration varies per platform. Even for
single-platform apps, there may by plenty of nuances in figuring out the
right location.
This kind of thing is what the platformdirs package is for.
Stan Grishin [Wed, 6 Dec 2023 10:09:02 +0000 (10:09 +0000)]
adblock-fast: add smartdns ipset/nftset support
* bugfix: correct URL to config-update file
* bugfix: check if uci configs exist before chacking for changes
* add support for smartdns ipset-based blocking
* add support for smartfns nftset-based blocking
* disallow non-ascii symbols for smartdns blocking
* add check wherever fw4 restart is needed before calling
procd_set_config_changed firewall
* improve clean-up code in resolver()
* improve case code for different resolver settings
* modify load_validate_config to allow smartdns.ipset and smartdns.nftset
Stan Grishin [Tue, 5 Dec 2023 08:15:04 +0000 (08:15 +0000)]
adblock-fast: add support for smartdns
* add support for smartdns
* switch from using `uci` commands to `uci_` functions
* rename `_resolver_config` to `_dnsmasq_instance_config`
* introduce `_smartdns_instance_config`
* improve resolvers restart code on changes
* update load_validate_config to allow for smartdns option
Florian Eckert [Wed, 8 Nov 2023 12:18:35 +0000 (13:18 +0100)]
modemmanager: add possibilty for setting initial EPS bearer
If no GSM but only 4G is available and a special APN must be used, it
is necessary to set an inital EPS bearer beforehand. If this is not set,
then modem cannot log in and register in the mobile network.
The new option 'init_epsbearer' could be set to the following options.
* none: No init EPS bearer is used and the old one is deleted (default)
* default: Use init EPS bearer with the following config options
'iptype', 'allowedauth', 'password', 'user' and 'apn' as for the
connection bearer.
* custom: Other parameters are used that do not match those of the
default connection bearer. These have an 'init_' prefix and are named
in the same way as the default connection bearer config options.
Florian Eckert [Wed, 8 Nov 2023 12:08:05 +0000 (13:08 +0100)]
modemmanager: check modem state before establishing a connection
With this change the following modem 'state' are checked before a
connection attempt setup.
* failed: Stop connection attempt because of sim-missing
* locked: Stop connection attempt if no pincode is set
Add experimental PCRE2 support patch as PCRE is EOL and won't receive
any new updates anymore.
Since PCRE2 API changed, also snort plugins API changed and require some
tweka for any user downstream that compile custom plugins. The examples
are all updated and conversion patch contains additional info on the
changes required to the plugins.
Plugins needs to be compiled and require updates anyway so there isn't a
problem with user trying to load incompatible plugins.
Jonas Jelonek [Fri, 1 Dec 2023 21:41:35 +0000 (22:41 +0100)]
iperf3-mt: remove package
This package was intended to provide the experimental multithreading
support for iperf3. With the update to 3.16, multithreading is available
in mainline iperf3. Thus, remove this package.
John Audia [Wed, 22 Nov 2023 11:18:01 +0000 (06:18 -0500)]
snort3: update to 3.1.75.0
Upstream bump
,,_ -*> Snort++ <*-
o" )~ Version 3.1.75.0
'''' By Martin Roesch & The Snort Team
http://snort.org/contact#team
Copyright (C) 2014-2023 Cisco and/or its affiliates. All rights reserved.
Copyright (C) 1998-2013 Sourcefire, Inc., et al.
Using DAQ version 3.0.13
Using LuaJIT version 2.1.0-beta3
Using OpenSSL 3.0.12 24 Oct 2023
Using libpcap version 1.10.4 (with TPACKET_V3)
Using PCRE version 8.45 2021-06-15
Using ZLIB version 1.3
Using Hyperscan version 5.4.2 2023-11-20
Felix Matouschek [Mon, 27 Nov 2023 10:12:03 +0000 (11:12 +0100)]
postfix: Fix enabling PCRE support
After the change from PCRE to PCRE2 when enabling POSTFIX_PCRE the
resulting postfix build no longer reports pcre as an available module.
(postfconf -m). This is caused by using the wrong syntax for the
HAS_PCRE build flag (HAS_PCRE2 vs HAS_PCRE=2). This fixes the build flag
to use the correct syntax.
Jeffery To [Tue, 28 Nov 2023 05:12:05 +0000 (13:12 +0800)]
CI: Fix CI_HELPER
Commit 18d3c529fa4ab8dafcf6c147cf3cb55792d8ca10 caused CI_HELPER to be
set to "''" (two single quotes), leading to an error when test.sh tries
to source $CI_HELPER.
CI_HELPER is not set anywhere else and not passed into the container
environment, so there is no need to test if it has a value.
This fixes the value of CI_HELPER.
Fixes: 18d3c529fa4a ("github-ci: error on any shell errors") Signed-off-by: Jeffery To <redacted>
I also updated containers.conf - it has gotten quite a many new
options. I added crun to depends, every other distribution
seems to ship it with podman, and after all it is a default
OCI Container Runtime for podman anyway and has a super low
footprint, so shouldn't be a problem for anyone running
containers, after all you need some storage for that anyway.
Jeffery To [Fri, 24 Nov 2023 07:21:26 +0000 (15:21 +0800)]
fail2ban: Fix compatibility with Python 3.11
This backports 2 commits from upstream[1]; the other 3 are not strictly
necessary. One of the patches has been updated to remove a change to a
regex that does not exist in 0.11.2.
Notable Changes
* --experimental-default-type flag to flip module defaults
* Detect ESM syntax in ambiguous JavaScript
* New flush option in file system functions
* Experimental WebSocket client
* vm: fix V8 compilation cache support for vm.Script
Jeffery To [Fri, 13 Oct 2023 18:30:53 +0000 (02:30 +0800)]
python-jsonschema-specifications: Add new package
From the README:
JSON support files from the JSON Schema Specifications (metaschemas,
vocabularies, etc.), packaged for runtime access from Python as a
referencing-based Schema Registry.
Oskari Rauta [Sun, 19 Nov 2023 03:19:23 +0000 (05:19 +0200)]
external-protocol: rename and update cni-protocol
cni-protocol can be used for both cni and netavark
and also for many other things, such as vpn's that
lack customized protocol supports for openwrt as a
general externally managed protocol, so it was due
to rename it.
I also added one extra option, search domain, which
is optional and updated scripts retrieving ip address
and routing information.