Commit Graph

6365 Commits

Author SHA1 Message Date
lichao0223
97fee2843e
uugamebooster: Update to 2.9.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-30 01:05:21 +08:00
Jarao
724089c426
luci-app-unblockmusic: fix can't change provider in go version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-30 01:04:38 +08:00
AmadeusGhost
52470b2bd0 rockchip: add support for OrangePi R1 Plus
Hardware Specification:
  CPU: RockChip RK3328 (4 cores)
  RAM: 1GB DDR4
  Ethernet: 2x 1000 Base-T
  Flash: SPI-NOR 16 MB (mx25l12835f)
  LED: SYS, LAN, WAN
  MicroSD Slot x 1
  Button: Reset
  USB:1x 2.0
  Serial1: 13 Pin pin-header
  Serial2: 3 Pin debug port
  Type-C: for power input
  Power Supply: DC 5V/2A

Installation:
  Write the image to SD Card with dd.

Signed-off-by: AmadeusGhost <amadeus@jmu.edu.cn>
2021-03-29 23:29:18 +08:00
Felix Fietkau
ce47e231df mac80211: merge a few pending tx related fixes
Improve performance and fix potential mgmt tx hangs/warnings

Signed-off-by: Felix Fietkau <nbd@nbd.name>
2021-03-29 23:21:17 +08:00
Tianling Shen
c70c2b56a5
ntlf9t: move packages to packages feed
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-29 23:13:57 +08:00
Tianling Shen
08ca6f7816
Package ntlf9t: cleanup Makefiles
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-29 22:59:37 +08:00
John Doe
4e84824d42
Merge Mainline
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-29 18:08:36 +08:00
Lucian Cristian
c10101fc0c rockchip: add drm and lima gpu driver
Pack the drivers needed for enabling the drm and gpu driver
for rk3328 and rk3399. Fix: #304

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
[rebase commit, apply review recommendations]
Signed-off-by: AmadeusGhost <amadeus@immortalwrt.org>
2021-03-28 23:54:59 +08:00
Tianling Shen
a7b1bdaf67
qBittorrent: Update to 4.3.4.10
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-28 15:07:30 +08:00
Felix Fietkau
666852252d mt76: update to the latest version
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2021-03-27 11:22:43 +08:00
Eneas U de Queiroz
a361b749b7 openssl: bump to 1.1.1k
This version fixes 2 security vulnerabilities, among other changes:

 - CVE-2021-3450: problem with verifying a certificate chain when using
   the X509_V_FLAG_X509_STRICT flag.

 - CVE-2021-3449: OpenSSL TLS server may crash if sent a maliciously
   crafted renegotiation ClientHello message from a client.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2021-03-27 11:20:44 +08:00
xiaorouji
c08fecad10
luci-app-passwall: bump to 4-18
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-26 21:21:23 +08:00
AmadeusGhost
b9ae8b7c93 Merge Mainline 2021-03-26 20:28:03 +08:00
AmadeusGhost
1e603d80f2 openvpn-easy-rsa: remove duplicate package 2021-03-26 20:16:42 +08:00
AmadeusGhost
66ea9d183d ndpi-netfilter: remove outdated package 2021-03-26 20:15:10 +08:00
Tony Ambardar
166f2bd670 elfutils: enable building with MIPS16
Building with MIPS16 was disabled in 2013 due to an issue with GCC TLS:
https://dev.archive.openwrt.org/ticket/13572. But after the problematic
GCC version was retired, this change wasn't revisited.

Re-enable MIPS16 builds to reduce average elfutils library sizes ~10%.
This was compile-tested on malta/mips32be and malta/mips32le, and linked
with iproute2 for run-testing. Package sizes follow:

Library  MIPS16:=0  MIPS16:=1
-------  ---------  ---------
libelf1    43217      37492
libasm1    12481      11658
libdw1    229723     205793

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-26 20:00:31 +08:00
Daniel Golle
d81d24333a mwlwifi: add PKG_FLAGS:=nonshared
This should fix the problem of mwlwifi-firmware-* not being found
when using the ImageBuilder.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-25 23:28:47 +08:00
Daniel Golle
3118dbb833 ucode: fix PKG_MIRROR_HASH
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-25 23:28:22 +08:00
xiaorouji
8ffac602da
luci-app-passwall: sync with upstream source
Co-authored-by: badgv <45598380+badgv@users.noreply.github.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-24 00:52:40 +08:00
Tianling Shen
e02f8393eb
brcmfmac4366c0-firmware-vendor: move to firmware
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 22:55:32 +08:00
Tianling Shen
0a70e73dab
luci-app-turboacc: import from LuCI
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 22:53:17 +08:00
Tianling Shen
7ad4177396
luci-app-qos-gargoyle: import from core
This is only available for this branch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 18:25:01 +08:00
Tianling Shen
1a8c4210ee
Merge Mainline
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 18:11:53 +08:00
Tianling Shen
8704d4af19
ctcgfw: move LuCI apps to luci feed
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 17:55:48 +08:00
Tianling Shen
b335ab8032
baidupcs-web/iptvhelper: move to packages
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 17:51:26 +08:00
Tianling Shen
fbc552569f
treewide: move kernel pacakges from ctcgfw to kernel
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 17:46:58 +08:00
Tianling Shen
7b67123d7f
treewide: move some of ctcgfw packages from core to pacakges feed
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 17:29:33 +08:00
Tianling Shen
49e3204f02
Revert "treewide: add mirrors for GitHub Codeload"
This reverts commit 9796619efc.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 16:58:11 +08:00
Tianling Shen
66a13ba4b4
Revert "treewide: add mirrors for GitHub Archives"
This reverts commit 19980fd5b9.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 16:58:11 +08:00
Mauri Sandberg
40dbdcba8c packages: kernel: add gpio-nxp-74hc153
NXP 74HC153 is a GPIO expander. Its original source cide sits in ar71xx
architecture tree. It has been slightly modified to get GPIO pin
configuration from the device tree rather than a MACH file.

 Changes to the source file:
  - Remove struct nxp_74hc153_config
  - in nxp_74hc153_probe(), fetch GPIO configuration from device tree
  - allow GPIO framework decide the base number by passing -1 to it
  - remove support for kernel versions below 4.5.0
  - add OF device compatibility string

 Create a package for inclusion in image.

References: https://lore.kernel.org/linux-gpio/545111184.50061.1615922388276@ichabod.co-bxl/
Signed-off-by: Mauri Sandberg <sandberg@mailfence.com>
[added link to driver usptreaming work in progress]
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2021-03-23 11:26:20 +08:00
Jan Pavlinec
632b306c50 igmpproxy: remove package
Moved to packages repo because it was considered
non-essential for most router configurations.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
[shorten commit title]
Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
2021-03-23 11:22:21 +08:00
Florian Eckert
ea5c570a76 base-files: add logging for configuration import
Make sysupgrade backup import more verbose.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-03-23 11:19:00 +08:00
Tianling Shen
c1f500e1bd
Merge Mainline
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 09:29:58 +08:00
Tianling Shen
fa4d6e9e0b
Revert "Package ctcgfw: use package-immortalwrt.mk"
This reverts commit 36c9fc3bda.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 09:26:08 +08:00
Tianling Shen
cdb36b7846
iptables: remove dummy cgroup package
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-22 22:36:08 +08:00
Tianling Shen
46991afe7c
Merge Mainline
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-22 22:06:22 +08:00
Tianling Shen
36c9fc3bda
Package ctcgfw: use package-immortalwrt.mk
Moved all duplicate parts to a single .mk file

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-22 21:56:03 +08:00
Tianling Shen
ce3595a8ba
iptables: drop iptables-mod-cgroup
This was included in iptables-mod-extra already.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-22 21:40:48 +08:00
Tianling Shen
c12fc6205c
rockchip: nanopi-r4s: refresh latest patches accepted by upstream
Link: https://lore.kernel.org/r/20210319051627.814-2-cnsztl@gmail.com
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-22 19:55:38 +08:00
Tianling Shen
cf0bd81aff
netfilter: drop kmod-ipt-cgroup
This was included in ipt-extra already.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-22 17:05:47 +08:00
xiaorouji
1076688f9d
luci-app-passwall: sync with upstream source
Co-authored-by: lededev <30518126+lededev@users.noreply.github.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-22 16:53:28 +08:00
Tianling Shen
99870c306d
exFAT: add conflict mark
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-22 16:39:40 +08:00
Tianling Shen
4a7221f108
exFAT: use out-of-tree module for kernel 5.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-22 16:37:52 +08:00
Tony Ambardar
41d99a9800 kernel: robustify dependencies in kmod-sound-hda-core
Dependency tracking for kmod-sound-hda-core is fragile. Enabling some sound
codecs (Realtek, Conexant, Sigmatel) implicitly adds a kmod-ledtrig-audio
dependency, while an enabled kmod-ledtrig-audio can be picked up through
enabling others (e.g. kmod-sound-hda-intel), and the behaviour can change
across kernel versions.

As kmod-ledtrig-audio is under 2KB, make it an unconditional dependency.

Fixes: a374b8f190 ("kernel: 5.10: update sound modules")
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-21 23:37:36 +08:00
AmadeusGhost
1711018763 filebrowser: update to 2.13.0
Fix: #326
2021-03-20 12:30:22 +08:00
Philip Prindeville
d9053b1c6c libnfnetlink: quote $(FPIC) on command line
When $(FPIC) gets expanded on the command line (for instance
when setting environment variables for libtool, configure, or
make) we can't count on it not needing quoting (i.e. it could
contain multiple flags separated with spaces).

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-03-20 11:56:16 +08:00
Daniel Golle
a148529eae umdns: add syscalls needed on Aarch64
Now that ujail supports seccomp also on Aarch64, add missing syscall
'fstat' to the list of allowed syscalls.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-20 11:55:52 +08:00
Jo-Philipp Wich
058f5e44dd firewall4: introduce package
This commit introduces firewall4, an nftables based reimplementation of the
UCI iptables firewall.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2021-03-20 11:54:00 +08:00
Jo-Philipp Wich
a5e051407c ucode: introduce package
This commit introduces ucode, a tiny template processor utilizing a syntax
closely resembling ECMA Script for embedded script blocks.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2021-03-20 11:53:36 +08:00
Rosen Penev
7f435c23c2 kernel: add exfat again
With kernel 5.10, exfat is out of staging and in tree.

Added small hack to make it work with kernel 5.4 as well.

Added removed config options for 5.4 to generic config.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
[Set CONFIG_EXFAT_ config options to default values]
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2021-03-20 11:50:27 +08:00
Rosen Penev
8b52c6fdc7 package/exfat: remove
Now that kernel 5.10 is in tree, this can be removed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-03-20 11:48:13 +08:00
Tony Ambardar
7289665dad iproute2: separate tc into tiny and full variants
This change was investigated previously [1] but not deemed necessary. With
the recent addition [2] of modern BPF loader support, however, tc gained
dependencies on libelf and libbpf, with a larger installation footprint.

Similar to ip-tiny/ip-full, split tc into tc-full and tc-tiny variants,
where the latter excludes the eBPF loader, uses a smaller executable, and
avoids libelf and libbpf package dependencies. Both variants provide the
'tc' virtual package, with tc-tiny as the default.

The previous tc package included a loadable module for iptables actions.
Separate this out into a common package, tc-mod-iptables, which both
variants depend on. Some package sizes on mips_24kc:

Before:
  148343  tc_5.11.0-1_mips_24kc.ipk

After:
  144833  tc-full_5.11.0-2_mips_24kc.ipk
  138430  tc-tiny_5.11.0-2_mips_24kc.ipk  (and no libelf or libbpf)
    4115  tc-mod-iptables_5.11.0-2_mips_24kc.ipk

Also fix up some Makefile indentation.

[1] https://github.com/openwrt/openwrt/pull/1627#issuecomment-447619962
[2] b048a305a3 ("iproute2: update to 5.11.0")

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-20 11:41:41 +08:00
Tony Ambardar
3350edab7a kernel/modules: relocate teql hotplug from iproute2 to kmod-sched
The link equalizer sch_teql.ko of package kmod-sched relies on a hotplug
script historically included in iproute2's tc package. In previous
discussion [1], consensus was the hotplug script is best located together
with the module in kmod-sched, but this change was deferred at the time.

Relocate the hotplug script now. This change also simplifies adding a tc
variant for minimal size with reduced functionality.

[1] https://github.com/openwrt/openwrt/pull/1627#issuecomment-447923636

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-20 11:33:47 +08:00
Tony Ambardar
351dde455d iproute2: add missing limits.h includes
This patch has been submitted upstream to fix an error reported by a few
users. One instance seen using gcc 10.2.0, binutils 2.35.1 and musl 1.1.24:

bpf_glue.c: In function 'get_libbpf_version':
bpf_glue.c:46:11: error: 'PATH_MAX' undeclared (first use in this function);
did you mean 'AF_MAX'?
   46 |  char buf[PATH_MAX], *s;
      |           ^~~~~~~~
      |           AF_MAX

Reported-by: Rui Salvaterra <rsalvaterra@gmail.com>
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-20 11:33:14 +08:00
Tony Ambardar
3518d19efb kernel: 5.10: update sound modules
Update file paths for kmod-sound-hda-intel and reflect new dependency of
kmod-sound-hda-core on kmod-ledtrig-audio.

Reported-by: Javier Marcet <javier@marcet.info>
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-20 11:31:50 +08:00
Tony Ambardar
c34112f6e9 kernel: add kmod-ledtrig-audio
This allows LEDs to be controlled by audio drivers.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-20 11:31:29 +08:00
Tony Ambardar
c77415bd8b kernel: 5.10: add missing dependency in kmod-mdio-devres
Add conditional dependency on kmod-of-mdio due to mdio_devres.c code:
  #if IS_ENABLED(CONFIG_OF_MDIO)
  ...
  EXPORT_SYMBOL(devm_of_mdiobus_register);
  #endif /* CONFIG_OF_MDIO */

Fixes: 95a3741d17 ("kernel: support new mdio_devres.ko module in 5.10")
Reported-by: Rosen Penev <rosenp@gmail.com>
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-20 11:30:41 +08:00
Tony Ambardar
59a2f7face kernel: 5.10: update kmod-usb-net-smsc95xx
Add kmod-libphy dependency.

Signed-off-by: Javier Marcet <javier@marcet.info>
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-20 11:30:15 +08:00
Rosen Penev
c19bcc5be6 kexec-tools: update to 2.0.21
kdump was removed in 7acd257ae67b4ca94f8c23cb8bda0ee0709b9216

gdb can be used as an alternative.

Remove autoreconf. It's not needed as the configure files are already
generated.

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-03-20 11:27:50 +08:00
Rui Salvaterra
6a36b1c2e2 mac80211: rtl: update RTL8821AE PHY/RF parameters
Create a new directory for Realtek patches and backport the updated PHY and RF
parameters patch. Improves the connectivity in the 5 GHz band [1].

[1] https://patchwork.kernel.org/project/linux-wireless/patch/20210219052607.7323-1-pkshih@realtek.com/#23988567

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2021-03-20 11:25:24 +08:00
Russell Senior
90acdcbaf4 busybox: udhcpc, allow zero length dhcp options
This patch skips zero length DHCP options instead of failing.

Signed-off-by: Russell Senior <russell@personaltelco.net>
2021-03-20 11:24:35 +08:00
Eike Ritter
39886684e3 ppp: compile fix: unset FILTER variable in Makefile
If the environment variable FILTER is set before compilation,
compilation of the ppp-package will fail with the error message

Package ppp is missing dependencies for the following libraries:
libpcap.so.1

The reason is that the OpenWrt-patch for the Makefile only comments
out the line FILTER=y. Hence the pcap-library will be dynamically
linked if the environment variable FILTER is set elsewhere, which
causes compilation to fail. The fix consists on explicitly unsetting
the variable FILTER instead.

Signed-off-by: Eike Ritter <git@rittere.co.uk>
2021-03-20 11:19:03 +08:00
Tianling Shen
e541e2a0ca
Merge Mainline
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-19 18:01:27 +08:00
xiaorouji
fc6fc0d5fe
luci-app-passwall: initial support import vless link
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-19 17:56:59 +08:00
Saxon
e86fe8c7c9
luci-app-unblockmusic: remove outdated music provider
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-19 17:56:22 +08:00
dwj0
0584fcbed0
n2n_v2: add n2n auto-nat
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-19 17:55:39 +08:00
Beginner
4ad4a644ab
UnblockNeteaseMusic-Go: Update to 0.2.9
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-19 17:54:39 +08:00
jerrykuku
5be0b13e80
luci-theme-argonv3: fix bugs
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-19 17:52:28 +08:00
Mattraks
74d7e3d9a6
luci-app-ssr-plus: fix arguments for ss-rust
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-19 17:40:01 +08:00
Tianling Shen
bca6199163
Merge Mainline
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-19 17:31:52 +08:00
Tianling Shen
7c7830ac0b
tmate: remove upstreamed pacakge
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-19 17:24:30 +08:00
Tianling Shen
b2da0ad5fe
msgpack-c: remove upstreamed pacakge
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-19 17:24:18 +08:00
Felix Fietkau
bf001b775f build: use -nostdinc and -isystem in NOSTDINC_FLAGS for out-of-tree kernel modules
This resolves issues uncovered by musl updates

Signed-off-by: Felix Fietkau <nbd@nbd.name>
2021-03-18 23:33:25 +08:00
Felix Fietkau
06cf53900f mt76: update to the latest version
0b6c9a043f78 mt76: move de-amsdu buffer per-phy
48a905e23791 mt76: mt7615: fix CSA event format
fbef8bba038f mt76: mt7921: remove duplicated macros in mcu.h

Signed-off-by: Felix Fietkau <nbd@nbd.name>
2021-03-18 23:33:08 +08:00
Felix Fietkau
165b4b837f mt76: update to the latest version
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2021-03-18 23:32:10 +08:00
Felix Fietkau
6d87ebed58 mac80211: backport upstream patches for driver disconnect
Needed for an mt76 update

Signed-off-by: Felix Fietkau <nbd@nbd.name>
2021-03-18 23:31:44 +08:00
Daniel Golle
19acf4e272 uboot-mediatek: don't rely in 'lzma' cmdline
Use 'xz --format=lzma' instead.
Fixes build for mt7629.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-18 23:30:40 +08:00
Hauke Mehrtens
ab20619a72 mediatek: Fix writing U-Boot env on Buffalo WSR-2533DHP2
This fixes writing to the U-Boot environment by making the partition
writable and setting the correct flash sector size of 128K.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2021-03-18 23:27:46 +08:00
Daniel Golle
60a3471382 uboot-mediatek: fix default environment of bpi-r64 emmc
The emmc variant used the default environment of the sdmmc variant.
Fix that.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-18 23:27:10 +08:00
Daniel Golle
126ffcb500 uboot-mediatek: bpi-r64: make use of FIT configuration selection
Allow selecting either SATA or PCIE functionality using uImage.FIT
configurations and device-tree overlays.
By default, PCIE1 is selected (as it has been before this change).
To select SATA instead, you can do this now:

fw_setenv bootconf config-mt7622-bananapi-bpi-r64-sata

and reboot.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-18 23:24:59 +08:00
xiaorouji
7641c306fa
luci-app-passwall: bug fixes
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-18 16:18:16 +08:00
tty228
3a456a49c4
luci-app-serverchan: bump to 1.81
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-18 16:17:07 +08:00
maple's sky
b9aef3ef79
luci-app-jd-dailybonus: sync with upstream source
Co-authored-by: xujianjie1213 <35050408+xujianjie1213@users.noreply.github.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-18 16:16:24 +08:00
Beginner
37ecc03a58
v2ray-plugin: update to 4.36.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-18 12:04:14 +08:00
Álvaro Fernández Rojas
5548482ebb mtd: fix imagetag compilation
Commit b5b0796a13 added an uint32_t to mtd.h without including stdint, which
results in a compilation error for those files not including stdint.h.

In file included from imagetag.c:36:
mtd.h:15:8: error: unknown type name 'uint32_t'
 extern uint32_t opt_trxmagic;
        ^~~~~~~~
imagetag.c: In function 'trx_fixup':
imagetag.c:180:10: warning: unused variable 'res' [-Wunused-variable]
  ssize_t res;
          ^~~
imagetag.c:177:14: warning: unused variable 'scan' [-Wunused-variable]
  void *ptr, *scan;
              ^~~~
imagetag.c: In function 'trx_check':
imagetag.c:246:27: warning: initialization discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
     struct bcm_tag *tag = (const struct bcm_tag *) buf;
                           ^
make[3]: *** [<builtin>: imagetag.o] Error 1

Fixes: b5b0796a13 ("mtd: add option for TRX magic to fixtrx")
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2021-03-17 23:25:41 +08:00
Tianling Shen
3506b828ad
luci-app-ssr-plus: drop ipt2socks-alt from the dependencies
Signed-off-by: Tianling Shen <cnsztl@gmail.com>
2021-03-17 14:04:48 +08:00
maple's sky
dae84e580f
luci-app-jd-dailybonus: sync with upstream source
Co-authored-by: Mattraks <16359027+Mattraks@users.noreply.github.com>
Co-authored-by: jerrykuku <jerrykuku@qq.com>
Signed-off-by: Tianling Shen <cnsztl@gmail.com>
2021-03-17 13:52:21 +08:00
xiaorouji
1805a389a7
luci-app-passwall: sync with upstream source
Co-authored-by: badgv <45598380+badgv@users.noreply.github.com>
Signed-off-by: Tianling Shen <cnsztl@gmail.com>
2021-03-17 13:44:33 +08:00
Magnus Kroken
b05945c5d2 mbedtls: update to 2.16.10
This release of Mbed TLS provides bug fixes and minor enhancements. This
release includes fixes for security issues.

Security fixes:
* Fix a buffer overflow in mbedtls_mpi_sub_abs()
* Fix an errorneous estimation for an internal buffer in
mbedtls_pk_write_key_pem()
* Fix a stack buffer overflow with mbedtls_net_poll() and
mbedtls_net_recv_timeout()
* Guard against strong local side channel attack against base64 tables
by making access aceess to them use constant flow code

Full release announcement:
https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.10

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
2021-03-17 11:28:57 +08:00
Beginner
a91e7d85bb
v2ray: update to 4.36.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-16 23:55:44 +08:00
Beginner
733c6a079e
v2ray: update to 4.36.1 2021-03-16 19:51:29 +08:00
INAGAKI Hiroshi
d71e1cc0cc mediatek: add support for Buffalo WSR-2533DHP2
This adds support for the Buffalo WSR-2533DHP2.

The device uses the Broadcom TRX image format with a special magic. To
be able to boot the images or load them they have to be wrapped with
different headers depending how it is loaded.

There are multiple ways to install OpenWrt on this device.
Boot ramdisk from U-Boot
----------------------------
This will load the image and not write it into the flash.

1. Stop boot menu with "space" key
2. Select "System Load Linux to SDRAM via TFTP."
3. Load this image:
   openwrt-mediatek-mt7622-buffalo_wsr-2533dhp2-initramfs-kernel.bin
4. The system boots the image

Write to flash from U-Boot
-----------------------------
This will load the image over tftp and directly write it into the flash.

1. Stop boot menu with "space" key
2. Select "System Load Linux Kernel then write to Flash via TFTP."
3. Load this image:
   openwrt-mediatek-mt7622-buffalo_wsr-2533dhp2-squashfs-factory-uboot.bin
4. The system writes this image into the flash and boots into it.

Write to flash from Web UI
-----------------------------
This will load the image over over the Web UI and write it into the flash

1. Open the Web UI
2. Go to "管理" -> "ファームウェア更新"
3. Select "ローカルファイル指定" and click "更新実行"
4. Load this image:
   openwrt-mediatek-mt7622-buffalo_wsr-2533dhp2-squashfs-factory.bin
5. The system writes this image into the flash and boots into it.

Specifications
-------------------
* SoC:       MT7622 (4x4 2.4 GHz Wifi)
* Wifi:      MT7615 (4x4 5 GHz Wifi)
* Flash:     Winbond W29N01HZ 128MB SLC NAND
* RAM        256MB
* Ethernet:  Realtek RTL8367S (5 x 1GBit/s, SoC via 2.5GBit/s)

Co-Developed-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: INAGAKI Hiroshi <musashino.open@gmail.com>
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2021-03-16 11:21:32 +08:00
INAGAKI Hiroshi
3354895999 mtd: add option for TRX magic to fixtrx
Buffalo uses the TRX header with a different magic and even changes this
magic with different devices. This change allows to specify the header
to use as a command line argument.

This is needed for the Buffalo WSR-2533DHP2 based on mt7622.

Co-Developed-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: INAGAKI Hiroshi <musashino.open@gmail.com>
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2021-03-16 11:17:41 +08:00
Rosen Penev
29b028f40c gettext-full: disable nameless locale define
It seems some packages like transmission and json-glib fail with it
enabled.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-03-16 11:12:46 +08:00
Dominick Grift
d7567389d5 selinux-policy: update to version v0.8
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2021-03-16 11:12:13 +08:00
Tianling Shen
1934e98da6
Merge Mainline
Signed-off-by: Tianling Shen <cnsztl@gmail.com>
2021-03-15 17:51:31 +08:00
Tianling Shen
0a1c53222e
shadowsocks-rust: drop UPX support
Signed-off-by: Tianling Shen <cnsztl@gmail.com>
2021-03-15 16:47:42 +08:00
Tianling Shen
19980fd5b9
treewide: add mirrors for GitHub Archives
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-15 15:01:44 +08:00
Tianling Shen
9796619efc
treewide: add mirrors for GitHub Codeload
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-15 14:17:10 +08:00
Beginner
72becfbf30
xray-plugin: update to 1.4.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-15 12:11:36 +08:00
Daniel Golle
e56c3816bf uboot-mediatek: also install production image to eMMC
Make installation to eMMC more convenient on the BPi-R64 by also
copying the production image (if valid) from SD Card to eMMC.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-15 11:37:36 +08:00
Daniel Golle
0b98c616fa uboot-mediatek: select matching U-Boot for board
Instead of building all U-Boot variants by default, build only those
needed by the selected board(s).

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-15 11:36:37 +08:00
Tony Ambardar
9b6ec4b9fb kernel: support new mdio_devres.ko module in 5.10
Add kmod-mdio-devres package and kernel config symbol, and update related
kmod-r8169 and kmod-ixgbe package dependencies.

Build tested module dependencies on x86/64 with CONFIG_ALL_KMODS=y.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-15 11:33:11 +08:00
Hauke Mehrtens
acb48a75e2 realtek: Add ZyXEL GS1900-8
The ZyXEL GS1900-8 is a 8 port switch without any PoE functionality or
SFP ports, but otherwise similar to the other GS1900 switches.

Specifications
--------------
* Device:    ZyXEL GS1900-8 v1.2
* SoC:       Realtek RTL8380M 500 MHz MIPS 4KEc
* Flash:     Macronix MX25L12835F 16 MiB
* RAM:       Nanya NT5TU128M8GE-AC 128 MiB DDR2 SDRAM
* Ethernet:  8x 10/100/1000 Mbit
* LEDs:      1 PWR LED (green, not configurable)
             1 SYS LED (green, configurable)
             8 ethernet port status LEDs (green, SoC controlled)
* Buttons:   1 on-off glide switch at the back (not configurable)
             1 reset button at the right side, behind the air-vent
               (not configurable)
             1 reset button on front panel (configurable)
* Power      12V 1A barrel connector
* UART:      1 serial header (JP2) with populated standard pin connector on
             the left side of the PCB, towards the back. Pins are labelled:
             + VCC (3.3V)
             + TX (really RX)
             + RX (really TX)
             + GND
             the labelling is done from the usb2serial connector's point of
             view, so RX/ TX are mixed up.

Serial connection parameters for both devices: 115200 8N1.

Installation
------------
Instructions are identical to those for the GS1900-10HP and GS1900-8HP.

* Configure your client with a static 192.168.1.x IP (e.g. 192.168.1.10).
* Set up a TFTP server on your client and make it serve the initramfs
  image.
* Connect serial, power up the switch, interrupt U-boot by hitting the
  space bar, and enable the network:
  > rtk network on
* Since the GS1900-10HP is a dual-partition device, you want to keep the
  OEM firmware on the backup partition for the time being. OpenWrt can
  only boot off the first partition anyway (hardcoded in the DTS). To
  make sure we are manipulating the first partition, issue the following
  commands:
  > setsys bootpartition 0
  > savesys
* Download the image onto the device and boot from it:
  > tftpboot 0x84f00000 192.168.1.10:openwrt-realtek-generic-zyxel_gs1900-8-initramfs-kernel.bin
  > bootm
* Once OpenWrt has booted, scp the sysupgrade image to /tmp and flash it:
  > sysupgrade /tmp/openwrt-realtek-generic-zyxel_gs1900-8-squashfs-sysupgrade.bin

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2021-03-15 11:30:59 +08:00
Beginner
2df8719886
v2ray-plugin: update to 4.36.0 2021-03-15 00:48:41 +08:00
Beginner
f56a3dce91
v2ray: update to 4.36.0 2021-03-15 00:47:59 +08:00
Tianling Shen
6c186eafb0
Merge Mainline
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-14 23:47:44 +08:00
Tianling Shen
51f8dfa498
luci-app-ssr-plus: only selete ss-rust for armv8 devices
ss-libev on x86_64 is good enough.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-14 23:45:15 +08:00
xiaorouji
3ccae98761
luci-app-passwall: bump to 4-17
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-14 23:14:54 +08:00
Tianling Shen
0bc42819ae
luci-app-ssr-plus: fix typo err of binname
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-14 18:59:46 +08:00
Tony Ambardar
fb6c76bbdf elfutils: remove host build from target package
Commit f4da28c301 ("elfutils: Add host build") supplied a libelf host
library to fix a glib2 host build error, but this need was later removed
by b6212c8769 ("glib2: don't use libelf during host build").

More importantly, there are already two sources for libelf host libraries:
OpenWRT build prerequisites [1] and tools/libelf. A third is not needed.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-14 11:26:25 +08:00
Hannu Nyman
56947b7bde busybox: backport fixes for 1.33.0
Backport two fixes for 1.33.0
* history file storing
* traceroute command option parsing

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2021-03-14 11:26:05 +08:00
Daniel Golle
ffad4fa8b0 uboot-mediatek: import fix for AHCI and enable SATA
Import patch form Frank Wunderlich <frank-w@public-files.de> to fix
build of MediaTek AHCI SATA driver.
Enable that driver on Bananapi BPi-R64.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-14 11:24:14 +08:00
Alin Nastac
6112051eb4 xfrm: simplify the check for necessary kernel support
[ -d /sys/module/xfrm_interface ] is enough to check if
CONFIG_XFRM_INTERFACE support was enabled in kernel.

Signed-off-by: Alin Nastac <alin.nastac@technicolor.com>
2021-03-14 11:23:18 +08:00
Alin Nastac
2613a9fe8b vti: use alternative way to check if kernel support is enabled
When necessary support is built in kernel, vti protocol support is
not enabled in netifd.

Signed-off-by: Alin Nastac <alin.nastac@technicolor.com>
2021-03-14 11:22:54 +08:00
Alin Nastac
8f76805abd gre: use alternative way to check if kernel support is enabled
When necessary support is built in kernel, gre protocol support is
not enabled in netifd.

Signed-off-by: Alin Nastac <alin.nastac@gmail.com>
2021-03-14 11:22:29 +08:00
Daniel Golle
3a566cb738 uboot-mediatek: fix build on Mac OS X
Copy patch added to uboot-sunxi by commit 3cc57ba462
("uboot-sunxi: add missing type __u64") also to uboot-mediatek.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-14 11:20:22 +08:00
Tianling Shen
e72037019b
luci-app-ssr-plus: fix bugs
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-13 16:22:14 +08:00
Tianling Shen
3bba3457d7
Revert "shadowsocks-rust: fix hash key for aarch64 binary"
This reverts commit 3c61869695.

Signed-off-by: Tianling Shen <cnsztl@gmail.com>
2021-03-13 11:31:23 +08:00
Mattraks
98bfcbc7ce
luci-app-ssr-plus: allow customized ss plugins
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-13 02:44:54 +08:00
michael
40d16e6b20
uugamebooster: update to 2.7.8
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-13 01:24:56 +08:00
vernesong
352abf6536
OpenClash: Update to v0.42.03-beta
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-13 00:48:52 +08:00
xiaorouji
e43c7b33c4
luci-app-passwall: sync with upstream source
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-13 00:44:11 +08:00
Tianling Shen
902a3f2055
luci-app-ssr-plus: fix dependencies
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-13 00:33:13 +08:00
Tianling Shen
e967518d70
luci-app-ssr-plus: add support for shadowsocks-rust
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-13 00:28:54 +08:00
Tianling Shen
fbbdf92ffb
Merge Mainline
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-12 23:28:32 +08:00
Tianling Shen
50e0d8e11e
cdnspeedtest: Update to 1.4.9
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-12 23:27:04 +08:00
jerrykuku
918c80e7b0 luci-app-argon-config: bump to v0.9 2021-03-12 12:11:18 +08:00
jerrykuku
54e9e5a6c1 luci-theme-argonv3: update to 1.7.2 2021-03-12 12:08:16 +08:00
Daniel Golle
3a83df88ac uboot-mediatek: update configs for MT7622 devies
* make sure USB 2.0 works (useful for UEFI-booting eg. memtest86)
 * include more useful U-Boot config options on BPi-R64.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-12 12:02:04 +08:00
Daniel Golle
cfb2940432 uboot-mediatek: update to 2021.04-rc3 with MediaTek's patches
MediaTek published their current U-Boot patchset on github:
https://github.com/mtk-openwrt/u-boot/commits/mtksoc

Import the platform patches from there (`00-mtk-*.patch`), arrange,
them nicely, drop no longer needed local patches and rebase on top of
U-Boot 2021.04-rc3.

Tested and works well on Linksys E8450 (snand-1ddr) as well as
Bananapi BPi-R64 (sdmmc-2ddr, emmc-2ddr).

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-12 12:01:28 +08:00
Daniel Golle
08cf9d97d5 arm-trusted-firmware-mediatek: update to 2021-03-10
Most prominently this adds changes which allow replacing the binary-
only 'bromimage' tool by U-Boot's 'mkimage' (see previous commit).
This fixes build on non-Linux and/or non-x86 platforms.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-12 12:01:06 +08:00
Daniel Golle
b90872914c tools: mkimage: add patches for 64-bit MediaTek BootROM
Add patches for mkimage to allow using it instead of the binary-only
'bromimage' tool to generate bl2 for MT7622.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-12 12:00:34 +08:00
Daniel Golle
109c08604d
opkg: update to git HEAD
d71856a pkg: pass-through ABIVersion to status file

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-11 23:10:42 +08:00
Tianling Shen
3c61869695
shadowsocks-rust: fix hash key for aarch64 binary
Let's "thank" GitHub CDN.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-11 17:53:36 +08:00
Tianling Shen
4698803206
qBittorrent-Enhanced-Edition: Update to 4.3.3.10
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-11 16:47:55 +08:00
Tianling Shen
f3686b9af1
qt5: Update to 5.15.2
Removed upstreamed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-11 16:46:23 +08:00
Tianling Shen
99a9f78ee3
treewide: adjust tencent mirror
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-11 14:57:01 +08:00
Tianling Shen
ed07042b97
shadowsocks-rust: add new package
shadowsocks-rust is shadowsocks written in rust, with high performance
for AES AEAD ciphers (while much lower for non-ones).

However with the lack of rust toolchain, by now we can only download
pre-compiled binaries for quick setup and this Makefile needs to be
rewritten when rust toolchain is up.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-10 23:02:05 +08:00
Tianling Shen
be7048c373
shadowsocksr-libev: rewrite Makefile
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-10 17:15:56 +08:00
bobo liu
a999af1ec8
luci-app-frpc: add config field of user
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-10 10:43:07 +08:00
Tianling Shen
eee03e63b0
Merge Mainline
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-10 02:54:10 +08:00
Tianling Shen
676f92f839
mbedtls: fix typo error
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-10 02:53:22 +08:00
Daniel Golle
4f7ac637df arm-trusted-firmware-mediatek: fix typo SPI-SNAND -> SPI-NAND
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-09 12:13:57 +08:00
Dominick Grift
aa96436548 checkpolicy: update to version 3.2
521e6a2f libsepol/cil: fix signed overflow caused by using (1 << 31) - 1
42ae834a libsepol,checkpolicy: optimize storage of filename transitions

Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2021-03-09 12:12:55 +08:00
Dominick Grift
9da9632de9 secilc: update to version 3.2
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2021-03-09 12:12:28 +08:00
Dominick Grift
ffddfdf704 policycoreutils: update to version 3.2
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2021-03-09 12:11:54 +08:00
Dominick Grift
d402be60d8 libsemanage: update to version 3.2
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2021-03-09 12:09:53 +08:00
Dominick Grift
240acb1b00 libselinux: update to version 3.2
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2021-03-09 12:09:26 +08:00
Dominick Grift
94d3a98da6 libsepol: update to version 3.2
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2021-03-09 12:08:57 +08:00
Beginner
dd9f1eeb8f
v2ray-plugin: update to 4.35.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-08 20:52:50 +08:00
Tianling Shen
8f96a896fe
include/target: move specific cflags to own Makefile
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-08 20:18:52 +08:00
Tianling Shen
9bd1268ad6
mbedtls: fix dependencies of arch
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-08 19:58:38 +08:00
zxlhhyccc
3cde6e15e8
naiveproxy: refresh dependencies
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-08 14:46:03 +08:00
Tianling Shen
d0af50427c
OpenClash: sync with upstream source
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-08 13:06:49 +08:00
Derry
76c3c51046
OpenAppFilter: bump to 5.0.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-08 12:34:15 +08:00
AmadeusGhost
741458f444 luci-theme-edge: update to 2.5 2021-03-08 12:08:46 +08:00
Georgi Valkov
dec2a01ea4 bpftools: fix param order for install on macOS
Fix: bpftools 5.11.2 does not compile on macOS, because the -m option
was placed between src and dst. Corrected by moving -m 644 before src.

Signed-off-by: Georgi Valkov <gvalkov@abv.bg>
2021-03-08 12:03:57 +08:00
Tony Ambardar
bbeb4950a0 bpftools: fix libbpf pkgconfig file
The pkgconfig file hardcodes a host library directory which cannot be
overridden by OpenWrt during builds. Use SED to fix this and potential
include directory problems, as is done with several other packages.

This fixes a strange issue intermittently seen building iproute2 on the
oxnas target:

iptables modules directory: /usr/lib/iptables
libc has setns: yes
SELinux support: no
libbpf support: no
	libbpf version 0.3.0 is too low, please update it to at least 0.1.0
	LIBBPF_FORCE=on set, but couldn't find a usable libbpf

Fixes: 2f0d672088 ("bpftools: add utility and library packages
supporting eBPF usage")
Reported-by: Russell Senior <russell@personaltelco.net>
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-08 12:03:31 +08:00
AmadeusGhost
c536e20c61 rockchip/image: update note for pine64-bin
Signed-off-by: AmadeusGhost <amadeus@immortalwrt.org>
2021-03-08 12:00:17 +08:00
Tianling Shen
4d5114f6e4
arm-trusted-firmware-rk3328: drop incorrect copyright
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 23:02:06 +08:00
Tianling Shen
bd6bea74ca
v2ray: Update to 4.35.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 23:00:34 +08:00
Tianling Shen
f47b7449c0
Merge Mainline
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 21:01:37 +08:00
Tianling Shen
4d7d6034d2
mbedtls: hidden ARMv8 Crypto Extensions option for broadcom devices
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 20:46:08 +08:00
Tianling Shen
4b8c9b83f3
uboot-rockchip: fix build with rkbin
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 19:45:25 +08:00
AmadeusGhost
effa994f43
uboot-rockchip: add support for building with rockchip ddrloader
Referred to http://opensource.rock-chips.com/wiki_Boot_option#Boot_flow.

Signed-off-by: AmadeusGhost <amadeus@immortalwrt.org>
[fixed format issue]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 17:05:22 +08:00
AmadeusGhost
b326964007
arm-trusted-firmware-rk3328: add new package
This introduces rockchip ddrloader firmware, which allows
users to control the memory frequency runtime.

Signed-off-by: AmadeusGhost <amadeus@immortalwrt.org>
[fixed binary output and format issues]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 17:05:22 +08:00
QiuSimons
a1836ccb53
mbedtls: Implements AES and GCM with ARMv8 Crypto Extensions
A compact patch that provides AES and GCM implementations that utilize the
ARMv8 Crypto Extensions. The config flag is MBEDTLS_ARMV8CE_AES_C, which
is disabled by default as we don't do runtime checking for the feature.
The new implementation lives in armv8ce_aes.c.

Provides similar functionality to https://github.com/ARMmbed/mbedtls/pull/432
Thanks to Barry O'Rourke and others for that contribtion.

Tested on a Cortex A53 device and QEMU. On a midrange phone the real AES-GCM
throughput increases about 4x, while raw AES speed is up to 10x faster.

[updated Makefile to enable this function, adjusted commit message]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 16:36:02 +08:00
Tianling Shen
691dbcb8ac
naiveproxy: bump to 89.0.4389.72-1
Removed upstreamed patches, refreshed all dependencies.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 15:12:56 +08:00
Tianling Shen
490fd504c6
luci-app-turboacc: enable BBR for kernel 4.9 by default
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 14:38:44 +08:00
Adrian Schmutzler
7b99ec636d
treewide: make AddDepends/usb-serial selective
Make packages depending on usb-serial selective, so we do not have
to add kmod-usb-serial manually for every device.

Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 11:50:15 +08:00
Tianling Shen
2ec58a906c
Merge Official Source
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 11:41:06 +08:00
Tianling Shen
05fcf3e7df
luci-app-appfilter: update file permission
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 11:39:54 +08:00
Derry
f6a45d9963
luci-app-appfilter: fix upload file err
Fixes: destan19/OpenAppFilter#97

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 11:37:13 +08:00
Daniel Golle
5d6655dc6f kernel: fix kmod-usb3 on platforms without PCI
Partially restore the wild-card matching for kmod-usb3 modules to fix
build on platforms without PCI which otherwise file, as seen on
buildbot:

ERROR: module '[...]/linux-5.4.102/drivers/usb/host/xhci-pci.ko' is missing.
modules/usb.mk:1675: recipe for target '[...]/kmod-usb3_5.4.102-1_mips_mips32.ipk' failed

Fixes: 7bda2e9aba ("kernel: fix kmod-usb3 dependencies")
Fixes: be23f9818a ("apm821xx: add support for kernel 5.10")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-06 18:06:27 +08:00
Tianling Shen
b348be7e9c
OpenAppFilter: bump to 5.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-06 13:36:24 +08:00
Tianling Shen
473b7f26de
luci-app-appfilter: bump to 5.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-06 13:30:02 +08:00
xiaorouji
8effe063ff
luci-app-passwall: bump to 4-16
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-06 13:22:49 +08:00
Lienol
573fee98c8
pingos: update nginx to 1.19.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-06 13:21:42 +08:00
Tianling Shen
e0fbd0e1e1
luci-app-ssr-plus: bump to 183-8
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-06 13:14:21 +08:00
Daniel Golle
479c4a85c4 arm-trusted-firmware-mediatek: prune now uneeded declarations
Remove unneeded delcarations form package Makefile now that everything
comes from github.com/mtk-openwrt upstream.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-06 12:31:44 +08:00
Daniel Golle
5c01e4859c arm-trusted-firmware-mediatek: don't select DDR3_FLYBY for 1ddr
DDR3_FLYBY has accidentally been set also for the 1-chip variant which
lead to broken, unbootable images. Fix that.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-06 12:31:23 +08:00
Ilya Lipnitskiy
fab91a8793 kernel: fix kmod-usb3 dependencies
Adding CONFIG_USB_XHCI_PCI_RENESAS to KCONFIG made it so it was set
for all targets that included kmod-usb3, not just the intended
apm821xx/nand. xhci-pci has a dependency on xhci-pci-renesas if
CONFIG_USB_XHCI_PCI_RENESAS is set, breaking kmod-usb3 builds on
Linux 5.10 on all other targets.

Rework the dependencies by breaking out xhci-hcd, xhci-mtk, and
xhci-pci-renesas into new hidden kernel modules and setting kmod-usb3
dependencies properly.

Tested by building mt7621 and apm821xx/nand with kmod-usb3 on Linux 5.10

Fixes: be23f981 ("apm821xx: add support for kernel 5.10")
Cc: Christian Lamparter <chunkeey@gmail.com>
Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
2021-03-06 12:31:01 +08:00
Tianling Shen
3a64d244aa
brcmfmac4366c0-firmware-vendor: drop useless INSTALL_DIR
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-06 12:29:18 +08:00
Christian Lamparter
0db612c80d apm821xx: add support for kernel 5.10 for testing
This patch copies over refreshed patches from 5.4.

 - dropped crypto patches (they got upstreamed)

 - dropped renesas USB 3 firmware loader (they got upstreamed)

 - NAND now needs extra device-properties for ECC settings.

Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
2021-03-06 12:22:37 +08:00
Daniel Golle
10e5f4e4ec uboot-mediatek: improve BPi-R64 support
* allow MAC address from U-Boot env to be inhertied
 * allow eMMC installation to succeed also without recovery present
   on the SD Card.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-06 12:22:05 +08:00
Daniel Golle
71ad0525e3 arm-trusted-firmware-mediatek: update to ATF 2.4 (2021-02-25)
All necessary blobs are now contained in the upstream repository, no
more wild replacing of blobs needed.
This new version also contains new storage drivers for (SPI-)NAND which
already comes with support for FM35Q1GA, so that patch can be dropped
as well.
Tested on:
 * Bananapi BPi-R64
   - sdmmc-2ddr
   - emmc-2ddr
 * Linksys E8450
   - snand-1ddr

All works fine (booting Bananapi BPi-R64 from SD Card does NOT require
a signed image, so patch arm-trusted-firmware-mediatek to allow doing
that).

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-06 12:21:18 +08:00
Daniel Golle
71eb88a414 arm-trusted-firmware-mediatek: add patch for Fidelix SPI NAND
The Linksys E8450 aka. Belkin RT3200 comes with a rather fresh brand
of SPI NAND storage. Add support for it to the nandx driver in
arm-trusted-firmware-mediatek, so we can boot from that chip.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-06 12:21:07 +08:00
AmadeusGhost
f86cbf3de2
v2ray-plugin: refresh project url
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-06 12:20:32 +08:00
Rafał Miłecki
1f27ed87cc bcm63xx-cfe: update to the latest master
d035016 tp-link: rename to tplink to match DT vendor prefix

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2021-03-06 12:18:40 +08:00
Rui Salvaterra
1cc87ce8e5 kernel/modules: fix CDC NCM dependencies
CDC NCM support only depends on CDC Ethernet with Linux 5.10. Fix thusly.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2021-03-06 12:18:20 +08:00
Florian Eckert
b71caca51e rssileds: use new application led trigger backend
This will use the new application led trigger backend. For now this is
the only package that uses leds trigger in user space to configure the
kernel led triggers.

The callback script only emmits a message for now, so that this LED is now
managed by the rssileds service. Until now a generic warning was emitted that
this LED trigger is not supported. But that is not true.

-> Skipping trigger 'rssileds' for led '<name>' due to missing kernel module

I think this callback should be changed in the future to restart the
service.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-03-06 12:14:40 +08:00
Florian Eckert
3a4de9de25 base-files: add new application led trigger backend
For now we have only kernel LED trigger support. With this change it is now
possible to use application triggers.

If we configure a LED with a non kernel trigger, then we check on every
restart and boot of the LED service if we have this trigger as an application
in "/usr/libexec/led-trigger". If this file with the name is found, then we
execute this to init the LED.

Possible use cases are:

- Start/Stop/Restart an application led trigger service for this led
- Init a LED that is configured by a hotplug script (VPN tunnel established)

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-03-06 12:14:18 +08:00
Rafał Miłecki
b994baa951 bcm63xx-cfe: update to the latest master
3fb6f1c tp-link: c2300-v1: add cferam file
79f9578 sercomm: vox-2.5: add cferam file

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2021-03-06 12:08:43 +08:00
Tianling Shen
72629fa2e7
v2ray: Update to 4.35.0, mark as BROKEN
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-05 18:50:40 +08:00
Tianling Shen
549efa5b1e
xray-plugin: Update to 1.3.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-05 16:47:29 +08:00
Tianling Shen
8075e6c3c0
v2ray-plugin: Update to 4.35.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-05 16:42:27 +08:00
Daniel Golle
6ccf0c4fe7 arm-trusted-firmware-mediatek: don't try to install absent files
Don't try to install files which no longer exist
Since {e,sd}mmc are now produced by ptgen they have been removed.

Fixes: 5a3562cd1d ("arm-trusted-firmware-mediatek: remove {e,sd}mmc headers")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-05 12:08:22 +08:00
AmadeusGhost
2afa61dd64 simple-torrent: update to 1.2.14 2021-03-04 18:05:14 +08:00
AmadeusGhost
b031c8ddf4 GoQuiet: fix build with golang 1.16 2021-03-04 18:02:41 +08:00
Tianling Shen
468e819a32
gowebdav: bump to v0.0.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-04 12:56:07 +08:00
AmadeusGhost
69367bbe70 gowebdav: fix build with golang 1.16 2021-03-04 12:39:49 +08:00
Tianling Shen
ddc247b45e
Merge Mainline
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-03 18:08:50 +08:00
AmadeusGhost
8dfc71dc03 tinymembench: add package 2021-03-03 18:05:24 +08:00
Tianling Shen
357b817277
baidupcs-web: rename patch dir
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-03 14:13:38 +08:00
Tianling Shen
7dfa051ec6
r81xx: do not build for kernel 5.10
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-03 13:25:11 +08:00
Tianling Shen
b8786367a0
r8125: bump PKG_VERSION
Fixes: 400288d50f ("r8125: bump to 9.005.01")

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-03 12:34:55 +08:00
Daniel Golle
ad2936d4df sysupgrade-nand: allow limiting rootfs_data by setting env variable
Check if firmware environment variable 'rootfs_data_max' exists and is
set to a numerical value greater than 0. If so, limit rootfs_data
volume to that size instead of using the maximum available size.

This is useful on devices with lots of flash where users may want to
have eg. a volume for persistent logs and statistics or for external
applications/containers. Persistence on rootfs overlay is limited by
the size of memory available during the sysugprade process as that
data needs to be copied to RAM while the volume is being recreated
during sysupgrade. Hence it is unsuitable for keeping larger amounts
of data accross upgrade which makes additional volume(s) for
application data desirable.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-03 12:28:52 +08:00
Daniel Golle
a7fa015ed6 arm-trusted-firmware-mediatek: remove {e,sd}mmc headers
Turned out those are simply MBR with active boot partition. And not
needed at all on emmc. Remove them as ptgen can now generate hybrid
MBR sufficient to boot MT7622 from SD Card.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-03 12:09:13 +08:00
Daniel Golle
04722cef6f
uboot-mediatek: bpi-r64: make sure eMMC installation runs only once
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-02 22:30:27 +08:00
Daniel Golle
ca8e1514ee
uboot-mediatek: bpi-r64: fix eMMC installation menu label
Change boot menu label for eMMC installation to tell what it does now.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-02 22:28:32 +08:00
Daniel Golle
3f6018d94b
mediatek: mt7622: bpi-r64: simplify eMMC install procedure
Write everything needed for eMMC install into the gaps between
partitions on SD card. In that way, installation to eMMC only needs
the SD card, no additional files need to be loaded via TFTP any more.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-02 22:28:18 +08:00
Daniel Golle
ab28d07c3b
treewide: fix spelling 'seperate' -> 'separate'
This popular spelling mistake was also introduced by myself lately.
Fix it everywhere.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-02 22:26:41 +08:00
Daniel Golle
36c74de2f5
image: add support for building FIT image with filesystem
Allow for single (external-data) FIT image to hold kernel, dtb and
squashfs. In that way, the bootloader verifies the system integrity
including the rootfs, because what's the point of checking that the
hash of the kernel is correct if it won't boot in case of squashfs
being corrupted? Better allow bootloader to check everything needed
to make it at least up to failsafe mode. As a positive side effect
this change also makes the sysupgrade process on nand potentially
much easier as it is now.
In short: mkimage has a parameter '-E' which allows generating FIT
images with 'external' data rather than embedding the data into the
device-tree blob itself. In this way, the FIT structure itself remains
small and can be parsed easily (rather than having to page around
megabytes of image content). This patch makes use of that and adds
support for adding sub-images of type 'filesystem' which are used to
store the squashfs. Now U-Boot can verify the whole OS and the new
partition parsers added in the Linux kernel can detect the filesystem
sub-images, create partitions for them, and select the active rootfs
volume based on the configuration in FIT (passing configuration via
device tree could be implemented easily at a later stage).

This new FIT partition parser works for NOR flash (on top of mtdblock),
NAND flash (on top of ubiblock) as well as classic block devices
(ie. eMMC, SDcard, SATA, NVME, ...).
It could even be used to mount such FIT images via `losetup -P` on a
user PC if this patch gets included in Linux upstream one day ;)

Signed-off-by: John Crispin <john@phrozen.org>
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-02 22:17:37 +08:00
Daniel Golle
74a9d2bcc1
uboot-mediatek: rework support for Bananapi BPi-R64 board
Provide U-Boot variants for SD-card as well as eMMC boot, so we can
generate whole-disk images for the device.
While at it, rename 'mt7622' to 'mt7622-rfb1' to make it less confusing
now that more boards are being added.

Thanks to Frank Wunderlich (@frank-w) for making that nice SVG image
explaining the MMC boot process[1] and for providing the necessary
binary header blobs.

[1]: https://github.com/frank-w/BPI-R64-ATF
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-02 22:12:09 +08:00
Daniel Golle
18f733a0ea
uboot-mediatek: add support for Linksys E8450
Build U-Boot for the Linksys E8450 in order to have support for UBI.
The loader has a default environment with scripts handling the reset
button as well as fall-back to recovery firmware. If the loader comes
up without a valid environment found in UBI, it will automatically
make sure UBI is formatted and create a new environment and proceed
to load recovery firmware (either from UBI or via TFTP if recovery is
corrupted or unavailable).

If the button is held down during power-on, the yellow status LED
turns on and the bootloader environment is reset to factory defaults.
If the button is released at this point, the recovery firmware (if
existing) is loaded from UBI and booted.
If the button is continously held down even beyond the point that
the yellow LED turned on, the loader will try to load the recovery
firmware via TFTP from server 192.168.1.254, write it to UBI and
boot.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-02 22:12:04 +08:00
Tianling Shen
9a30cf122a
Merge Mainline
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-02 18:19:46 +08:00
Stefan Lippers-Hollmann
641694bfba hostapd: P2P: Fix a corner case in peer addition based on PD Request
p2p_add_device() may remove the oldest entry if there is no room in the
peer table for a new peer. This would result in any pointer to that
removed entry becoming stale. A corner case with an invalid PD Request
frame could result in such a case ending up using (read+write) freed
memory. This could only by triggered when the peer table has reached its
maximum size and the PD Request frame is received from the P2P Device
Address of the oldest remaining entry and the frame has incorrect P2P
Device Address in the payload.

Fix this by fetching the dev pointer again after having called
p2p_add_device() so that the stale pointer cannot be used.

This fixes the following security vulnerabilities/bugs:

- CVE-2021-27803 - A vulnerability was discovered in how p2p/p2p_pd.c
  in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision
  discovery requests. It could result in denial of service or other
  impact (potentially execution of arbitrary code), for an attacker
  within radio range.

Fixes: 17bef1e97a50 ("P2P: Add peer entry based on Provision Discovery Request")
Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
Signed-off-by: Stefan Lippers-Hollmann <s.l-h@gmx.de>
2021-03-02 12:21:04 +08:00
Georgi Valkov
f3608491bc uboot-sunxi: add missing type __u64
Non Linux systems e.g. macOS lack the __u64 type and produce build errors:
In file included from tools/aisimage.c:9:
In file included from include/image.h:19:
In file included from ./arch/arm/include/asm/byteorder.h:29:
In file included from include/linux/byteorder/little_endian.h:13:
include/linux/types.h:146:9: error: unknown type name '__u64'; did you mean '__s64'?
typedef __u64 __bitwise __le64;

Resolved by declaring __u64 in include/linux/types.h
Build tested on macOS and Ubuntu.

Signed-off-by: Georgi Valkov <gvalkov@abv.bg>
2021-03-02 12:17:59 +08:00
Rui Salvaterra
b786ab6817 kernel/zram: remove obsolete symbol
Zsmalloc page table mappings are dead and gone [1]. Drop the respective kconfig
symbol.

[1] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-5.4.y&id=69dc72f058c9b98f9b66bed184cfab7c2e9f49b0

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2021-03-02 12:17:09 +08:00
Ronny Kotzschmar
f77211ebfd uboot-envtools: adjust compile patch to version v2021.01
with u-boot v2020.07 some variables have been renamed so this patch needs to be adjusted
otherwise at least with macOS as build system there are build errors

Signed-off-by: Ronny Kotzschmar <ro.ok@me.com>
2021-03-02 12:16:22 +08:00
Mathias Kresin
ab6ab9697f lantiq: ltq-tapi: disable KPI and QOS
The QOS feature depends on KPI2UDP which was removed from the tree with
commit a95775e4b2 ("drop unmaintained packages") in 2012.

Since QOS was the last user of the KPI, the feature can be disabled by
default.

Signed-off-by: Mathias Kresin <dev@kresin.me>
2021-03-02 12:15:16 +08:00
Mathias Kresin
786e7386e0 ltq-vdsl-app: fix -Wundef warnings
The following warnings are shown during build:

/usr/include/vdsl/cmv_message_format.h:33:6: warning: "MEI_SUPPORT_DEBUG_STREAMS" is not defined, evaluates to 0 [-Wundef]
 #if (MEI_SUPPORT_DEBUG_STREAMS == 1)
      ^~~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/vdsl/drv_mei_cpe_interface.h:2256:6: warning: "MEI_SUPPORT_OPTIMIZED_FW_DL" is not defined, evaluates to 0 [-Wundef]
 #if (MEI_SUPPORT_OPTIMIZED_FW_DL == 1)
      ^~~~~~~~~~~~~~~~~~~~~~~~~~~

The headers are provided by the MEI driver, but the defines are never
set by the vdsl app. While the struct with the
MEI_SUPPORT_OPTIMIZED_FW_DL conditional isn't used by the vdsl app,
however CMV_USED_PAYLOAD_8BIT_SIZE which value depends on
MEI_SUPPORT_DEBUG_STREAMS is.

Since the MEI driver doesn't provide an autogenerated header with
compile flags, the flags are hardcoded for the vdsl app.

Set them for the MEI driver as well, to indicate a relation to the
values used for the vdsl app and to be not surprised by a changed
default in case the MEI driver gets updated. Use the current default
values defined in the MEI driver.

Signed-off-by: Mathias Kresin <dev@kresin.me>
2021-03-02 12:14:54 +08:00
Donald Hoskins
18044bb097 libunwind: Add MIPS64 dep check
libunwind dependency check does not allow for MIPS64 arch.  Add MIPS64 awareness.

libunwind seems to support MIPS64 without issues, it was limited by the dep arch
check in the Makefile.

Used to compile Suricata6/Rust locally without issue.

Signed-off-by: Donald Hoskins <grommish@gmail.com>
2021-03-02 12:04:21 +08:00
Daniel Golle
b21d60f57c base-files: add support for restoring config from tmpfs
Instead of only relying in /sysupgrade.tgz being present in rootfs to
restore configuration, also grab /tmp/sysupgrade.tar which may have
magically gotten there during preinit...

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-02 12:02:13 +08:00
Tianling Shen
bab1bee9b3
treewide: replace old domain with new one
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 22:13:00 +08:00
Tianling Shen
0984e354d3
brook: bump to 20210214
Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 22:08:12 +08:00
AmadeusGhost
2a15075c22
baidupcs-web: add missing rice dependency
Fix: #291
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 22:08:12 +08:00
AmadeusGhost
974bb763d8
baidupcs-web: fix build with golang 1.16
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 22:08:11 +08:00
Tianling Shen
8a8796fedb
luci-app-docker(man): add missing dependencies
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 20:27:05 +08:00
jerrykuku
969712261d
luci-app-jd-dailybonus: sync with upstream source
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 20:22:50 +08:00
vernesong
cb50478daf
OpenClash: bump to v0.42.02-beta
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 20:21:51 +08:00
xiaorouji
ef4c6d32ef
luci-app-passwall: sync with upstream source
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 20:19:55 +08:00
jerrykuku
5afff93976
luci-app-vssr: bump to latest git HEAD
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 20:16:25 +08:00
Beginner-Go
8e34b03718
luci-app-vssr: use xray-plugin instead v2ray-plugin
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 20:15:38 +08:00
xiaoqingfeng
fc1ee90f12
luci-theme-infinityfreedom: adjust style for luci-app-softethervpn
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 20:11:13 +08:00
Tianling Shen
c8ba0e3586
luci-app-unblockneteasemusic: sync with upstream source
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 20:08:39 +08:00
Tony Ambardar
f296b74a46 bpftools: update to latest stable 5.11.2
Compile and run-tested on malta/mip32be, using bpftool directly and also
libbpf (linked with tc) to inspect and load simple eBPF programs.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-01 18:16:29 +08:00
Tony Ambardar
062d6c465d iproute2: update to 5.11.0
The latest iproute2 version brings various improvements and fixes:
https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/log/?qt=range&q=v5.10.0..v5.11.0

In particular, ip and tc now use libbpf as the standard way to load BPF
programs, rather than the old, limited custom loader. This allows more
consistent and featureful BPF program handling e.g. support for global
initialized variables.

Also fix a longstanding problem with iproute2 builds where unneeded DSO
dependencies are added to most utilities, bloating their installation
footprint. From research and testing, explicitly using a "--as-needed"
linker flag avoids the issue. Update accordingly and drop extra package
dependencies from Makefile.

Additional build and packaging updates include:

  - install missing development header to iproute2/bpf_elf.h
  - propagate OpenWrt verbose flag during build
  - update and refresh patches

Compile and run tested: QEMU/malta-mips32be on kernels 5.4 & 5.10.

All iproute2 packages were built and installed to the test image. Some
regression testing using ip-full and tc was successfully performed to
exercise several kmods, tc modules, and simple BPF programs.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-01 18:16:16 +08:00
Jan Pavlinec
391e7e4693 igmpproxy: update to version 0.3
Changes:
- Remove custom Build/Compile because it's no longer needed
- Remove std=gnu99 which is added automaticaly by igmpproxy if needed
- Remove -Dlog from CFLAGS because igmpproxy doesn't have log function

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-03-01 12:15:44 +08:00
Rosen Penev
f6452fe7a0 libpcap: update to 1.10.0
Simplify cmake option handling by putting everything in blocks.

Add openssl patch as there's no easy way to disable.

Rebase the skip manpages patch.

Remove the monitor mode patch as it no longer applies.

Remove flex patch as normal Makefile is no longer used.

Remove USB path patch. While it is deprecated, the codepath is never
taken. /sys/bus/usb/devices is checked before hand. If it exists, the
function does stuff and returns. Additionally, this path is used
elsewhere in the code.

Refresh other patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-03-01 12:13:45 +08:00
Alexey Dobrovolsky
753ca8b1d3 busybox: sysntpd: option to bind server to iface
NTPD in busybox has option -I to bind server to IFACE.
However, capabilities of the busybox are limited, the -I option cannot be
repeated and only one interface can be effectively specified in it.
This option is currently not configurable via UCI.
The patch adds an interface option to the system config, ntp section.
Also sort options for uci_load_validate alphabetically.

Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
2021-03-01 12:12:48 +08:00
Daniel Golle
2b77adcdbe selinux-policy: update to version 0.7
a857b45 resolv/locale: eventually this should be more efficient
 11ed281 some more optimization
 764a475 add redundant calls to file.search_conffile_dirs()
 7d4558e fs: treat devtmpfs that same as tmpfs
 81b677e adds irqbalance skeleton
 5506244 irqbalance rules
 cc96cd8 adds usbutil and gtpfdisk skels
 01e2a55 some fsck, gptfdisk, mkfs and usbutil rules
 d6d1e7d usbutil: output to terminal
 da576fa fsck, gptfdisk and usbutil rules
 09b39e9 unbound
 241a029 hotplugcall: allow dac_read_search (is a subset of dac_override)
 af0fe90 adds label for tcsh
 160f79e adds tcpdump
 6d02b96 adds coreutil execfile for busybox alternatives
 ac54884 coreutilexecfile: these are known to require privileges, so exclude
 8cb3b66 adds chrootexecfile
 6d329d3 this saves 9KiB and its a bit more robust
 88e2425 move addpart/delpart/partx to gptfdisk.cil
 261012d ntphotplug: reads ubox data files
 0473ace various
 740e820 work through to genfs_seclabel_symlinks loose ends (Linux 5.10)
 bef21f5 TODO adds a note about how I dont need to upgrade to polver 33 from 31
 cb2e5a3 ubus uses ntpdhotplug fd, and some genfs_seclabel_symlink changes
 07df9b9 luci, rpcd and wpad (mainly genfs_selabel related but not all)
 8d86cab genfs_seclabel loose ends for blockmount, hotplugcall, irqbalance, zram-swap
 b8156cd adds a note about how i forgot to target blockd
 6e82ab8 adds blockd and related
 254ff43 Makefile: exclude blockd from mintesttgt
 4dc6bc2 pppd update related and unbound-odhcp rules

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-01 12:10:41 +08:00
Ilya Lipnitskiy
86415dfc07 kernel: no chacha-mips.ko on mips32 r1 targets
CHACHA_MIPS depends on CPU_MIPS32_R2. Therefore,
kmod-crypto-lib-chacha20 should not contain chacha-mips.ko on MIPS32 R1
targets. Enforce that in the target-specific definition.

Fixes bcm47xx, bcm63xx, lantiq/ase, ath25 builds.

Fixes: 06351f1 ("kernel: migrate wireguard into the kernel tree")
Cc: Jason A. Donenfeld <Jason@zx2c4.com>
Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
Reviewed-by: Jason A. Donenfeld <Jason@zx2c4.com>
2021-02-27 18:05:19 +08:00
Ilya Lipnitskiy
65ec34d7d5 wireguard-tools: depend on kmod-wireguard
To the vast majority of the users, wireguard-tools are not useful
without the underlying kernel module. The cornercase of only generating
keys and not using the secure tunnel is something that won't be done on
an embedded OpenWrt system often. On the other hand, maintaining a
separate meta-package only for this use case introduces extra
complexity. WireGuard changes for Linux 5.10 remove the meta-package.
So let's make wireguard-tools depend on kmod-wireguard
to make WireGuard easier to use without having to install multiple
packages.

Fixes: ea980fb9 ("wireguard: bump to 20191226")
Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
2021-02-27 12:35:45 +08:00
Ilya Lipnitskiy
382ec3d304 wireguard-tools: depend on kmod-wireguard
To the vast majority of the users, wireguard-tools are not useful
without the underlying kernel module. The cornercase of only generating
keys and not using the secure tunnel is something that won't be done on
an embedded OpenWrt system often. On the other hand, maintaining a
separate meta-package only for this use case introduces extra
complexity. WireGuard changes for Linux 5.10 remove the meta-package.
So let's make wireguard-tools depend on kmod-wireguard
to make WireGuard easier to use without having to install multiple
packages.

Fixes: ea980fb9 ("wireguard: bump to 20191226")
Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
2021-02-27 12:19:44 +08:00
Ilya Lipnitskiy
f481afed17 kernel: fix kmod-wireguard package fields
Use NETWORK_SUPPORT_MENU like all other modules in netsupport.mk. Drop
SECTION and CATEGORY fields as they are set by default and to match
other packages in netsupport.mk. Use better TITLE for kmod-wireguard
(taken from upstream drivers/net/Kconfig).

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
2021-02-27 12:19:21 +08:00
Jason A. Donenfeld
861b3d9823 wireguard-tools: bump to 1.0.20210223
Simple version bump with accumulated fixes.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2021-02-27 12:18:37 +08:00
Ilya Lipnitskiy
7e6aa9faf0 kernel: migrate wireguard into the kernel tree
On Linux 5.4, build WireGuard from backports. Linux 5.10 contains
wireguard in-tree.

Add in-kernel crypto libraries required by WireGuard along with
arch-specific optimizations.

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
2021-02-27 12:17:29 +08:00
David Bauer
faf18cc0c6 download: add mirror alias for Debian
Add an alias for Debian packages and download them from the Debian
mirror redirector.

Signed-off-by: David Bauer <mail@david-bauer.net>
2021-02-27 12:11:33 +08:00
Lech Perczak
b6f9315ebc ramips: add support for ZTE MF283+
ZTE MF283+ is a dual-antenna LTE category 4 router, based on Ralink
RT3352 SoC, and built-in ZTE P685M PCIe MiniCard LTE modem.

Hardware highlighs:
- CPU: MIPS24KEc at 400MHz,
- RAM: 64MB DDR2,
- Flash: 16MB SPI,
- Ethernet: 4 10/100M port switch with VLAN support,
- Wireless: Dual-stream 802.11n (RT2860), with two internal antennas,
- WWAN: Built-in ZTE P685M modem, with two internal antennas and two
  switching SMA connectors for external antennas,
- FXS: Single ATA, with two connectors marked PHONE1 and PHONE2,
  internally wired in parallel by 0-Ohm resistors, handled entirely by
  internal WWAN modem.
- USB: internal miniPCIe slot for modem,
  unpopulated USB A connector on PCB.
- SIM slot for the WWAN modem.
- UART connector for the console (unpopulated) at 3.3V,
  pinout: 1: VCC, 2: TXD, 3: RXD, 4: GND,
  settings: 57600-8-N-1.
- LEDs: Power (fixed), WLAN, WWAN (RGB),
  phone (bicolor, controlled by modem), Signal,
  4 link/act LEDs for LAN1-4.
- Buttons: WPS, reset.

Installation:
As the modem is, for most of the time, provided by carriers, there is no
possibility to flash through web interface, only built-in FOTA update
and TFTP recovery are supported.

There are two installation methods:
(1) Using serial console and initramfs-kernel - recommended, as it
allows you to back up original firmware, or
(2) Using TFTP recovery - does not require disassembly.

(1) Using serial console:
To install OpenWrt, one needs to disassemble the
router and flash it via TFTP by using serial console:
- Locate unpopulated 4-pin header on the top of the board, near buttons.
- Connect UART adapter to the connector. Use 3.3V voltage level only,
  omit VCC connection. Pin 1 (VCC) is marked by square pad.
- Put your initramfs-kernel image in TFTP server directory.
- Power-up the device.
- Press "1" to load initramfs image to RAM.
- Enter IP address chosen for the device (defaults to 192.168.0.1).
- Enter TFTP server IP address (defaults to 192.168.0.22).
- Enter image filename as put inside TFTP server - something short,
  like firmware.bin is recommended.
- Hit enter to load the image. U-boot will store above values in
  persistent environment for next installation.
- If you ever might want to return to vendor firmware,
  BACK UP CONTENTS OF YOUR FLASH NOW.
  For this router, commonly used by mobile networks,
  plain vendor images are not officially available.
  To do so, copy contents of each /dev/mtd[0-3], "firmware" - mtd3 being the
  most important, and copy them over network to your PC. But in case
  anything goes wrong, PLEASE do back up ALL OF THEM.
- From under OpenWrt just booted, load the sysupgrade image to tmpfs,
  and execute sysupgrade.

(2) Using TFTP recovery
- Set your host IP to 192.168.0.22 - for example using:
sudo ip addr add 192.168.0.22/24 dev <interface>
- Set up a TFTP server on your machine
- Put the sysupgrade image in TFTP server root named as 'root_uImage'
  (no quotes), for example using tftpd:
  cp openwrt-ramips-rt305x-zte_mf283plus-squashfs-sysupgrade.bin /srv/tftp/root_uImage
- Power on the router holding BOTH Reset and WPS buttons held for around
  5 seconds, until after WWAN and Signal LEDs blink.
- Wait for OpenWrt to start booting up, this should take around a
  minute.

Return to original firmware:
Here, again there are two possibilities are possible, just like for
installation:
(1) Using initramfs-kernel image and serial console
(2) Using TFTP recovery

(1) Using initramfs-kernel image and serial console
- Boot OpenWrt initramfs-kernel image via TFTP the same as for
  installation.
- Copy over the backed up "firmware.bin" image of "mtd3" to /tmp/
- Use "mtd write /tmp/firmware.bin /dev/mtd3", where firmware.bin is
  your backup taken before OpenWrt installation, and /dev/mtd3 is the
  "firmware" partition.

(2) Using TFTP recovery
- Follow the same steps as for installation, but replacing 'root_uImage'
  with firmware backup you took during installation, or by vendor
  firmware obtained elsewhere.

A few quirks of the device, noted from my instance:
- Wired and wireless MAC addresses written in flash are the same,
  despite being in separate locations.
- Power LED is hardwired to 3.3V, so there is no status LED per se, and
  WLAN LED is controlled by WLAN driver, so I had to hijack 3G/4G LED
  for status - original firmware also does this in bootup.
- FXS subsystem and its LED is controlled by the
  modem, so it work independently of OpenWrt.
  Tested to work even before OpenWrt booted.
  I managed to open up modem's shell via ADB,
  and found from its kernel logs, that FXS and its LED is indeed controlled
  by modem.
- While finding LEDs, I had no GPL source drop from ZTE, so I had to probe for
  each and every one of them manually, so this might not be complete -
  it looks like bicolor LED is used for FXS, possibly to support
  dual-ported variant in other device sharing the PCB.
- Flash performance is very low, despite enabling 50MHz clock and fast
  read command, due to using 4k sectors throughout the target. I decided
  to keep it at the moment, to avoid breaking existing devices - I
  identified one potentially affected, should this be limited to under
  4MB of Flash. The difference between sysupgrade durations is whopping
  3min vs 8min, so this is worth pursuing.

In vendor firmware, WWAN LED behaviour is as follows, citing the manual:
- red - no registration,
- green - 3G,
- blue - 4G.
Blinking indicates activity, so netdev trigger mapped from wwan0 to blue:wwan
looks reasonable at the moment, for full replacement, a script similar to
"rssileds" would need to be developed.

Behaviour of "Signal LED" in vendor firmware is as follows:
- Off - no signal,
- Blinking - poor coverage
- Solid - good coverage.

A few more details on the built-in LTE modem:
Modem is not fully supported upstream in Linux - only two CDC ports
(DIAG and one for QMI) probe. I sent patches upstream to add required device
IDs for full support.
The mapping of USB functions is as follows:
- CDC (QCDM) - dedicated to comunicating with proprietary Qualcomm tools.
- CDC (PCUI) - not supported by upstream 'option' driver yet. Patch
  submitted upstream.
- CDC (Modem) - Exactly the same as above
- QMI - A patch is sent upstream to add device ID, with that in place,
  uqmi did connect successfully, once I selected correct PDP context
  type for my SIM (IPv4-only, not default IPv4v6).
- ADB - self-explanatory, one can access the ADB shell with a device ID
  added to 51-android.rules like so:

SUBSYSTEM!="usb", GOTO="android_usb_rules_end"
LABEL="android_usb_rules_begin"
SUBSYSTEM=="usb", ATTR{idVendor}=="19d2", ATTR{idProduct}=="1275", ENV{adb_user}="yes"
ENV{adb_user}=="yes", MODE="0660", GROUP="plugdev", TAG+="uaccess"
LABEL="android_usb_rules_end"

While not really needed in OpenWrt, it might come useful if one decides to
move the modem to their PC to hack it further, insides seem to be pretty
interesting. ADB also works well from within OpenWrt without that. O
course it isn't needed for normal operation, so I left it out of
DEVICE_PACKAGES.

Signed-off-by: Lech Perczak <lech.perczak@gmail.com>
[remove kmod-usb-ledtrig-usbport, take merged upstream patches]
Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
2021-02-27 12:06:37 +08:00
ElonH
691ef679e4 openwrt-dnsforwarder: removed 2021-02-25 21:27:33 +08:00
ElonH
8d64ccd806
openwrt-dnsforwarder: removed 2021-02-25 21:22:40 +08:00
AmadeusGhost
40ae41824c Merge Mainline 2021-02-25 12:25:05 +08:00
Álvaro Fernández Rojas
981322ad15 cypress-firmware: fix PKG_SOURCE_URL
Download link has been moved.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2021-02-25 12:09:43 +08:00
David Bauer
5489589800 rtl8812au-ct: fix PKG_MIRROR_HASH
Signed-off-by: David Bauer <mail@david-bauer.net>
2021-02-25 12:07:00 +08:00
Daniel Golle
76c4d9c754 arm-trusted-firmware-mediatek: correct location of PKG_LICENSE
As PKG_LICENSE is originally set by include/trusted-firmware-a.mk it
can only be appended after that. Hence move that line below the
include to actually make sense.
(cosmetical change, already slipped into openwrt-21.02 branch)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-02-25 12:05:01 +08:00
Adrian Schmutzler
2f28ec208c imx-bootlets: refresh patches
Tidy this up a little.

Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
2021-02-25 12:02:55 +08:00
Adrian Schmutzler
f1b4206dc5 zlib: properly split patches
This package had two patches (with two headers etc.) in one file,
which would have quilt merging them during a refresh.

Separate these patches into two files, as the original intent seems
to be having them separate.

Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
2021-02-25 12:01:45 +08:00
garypang13
1f430bbe56 luci-app-kodexplorer: fix missing work directory 2021-02-24 12:32:36 +08:00
Rosen Penev
4bf2ea6c49 pcre: disable C++ bindings
Nothing uses them. Allows to simplify the Makefile.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-02-24 12:26:13 +08:00
Stijn Segers
ebb64dcaf2 uboot-envtools: add support for ZyXEL GS-1900-8HP v1 and v2
This adds the necessary nuts and bolts for the uboot settings for both the ZyXEL GS1900-8HP v1 and v2.

Signed-off-by: Stijn Segers <foss@volatilesystems.org>
2021-02-24 12:24:25 +08:00
Eneas U de Queiroz
20e328abab openssl: always build with GOST engine support
The packages feed has a proposed package for a GOST engine, which needs
support from the main openssl library.  It is a default option in
OpenSSL.  All that needs to be done here is to not disable it.

Package increases by a net 1-byte, so it is not really really worth
keeping this optional.

This commit also includes a commented-out example engine configuration
in openssl.cnf, as it is done for other available engines.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2021-02-24 12:23:33 +08:00
Eneas U de Queiroz
783000b956 wolfssl: bump to v4.7.0-stable
Biggest fix for this version is CVE-2021-3336, which has already been
applied here.  There are a couple of low severity security bug fixes as
well.

Three patches are no longer needed, and were removed; the one remaining
was refreshed.

This tool shows no ABI changes:
https://abi-laboratory.pro/index.php?view=objects_report&l=wolfssl&v1=4.6.0&v2=4.7.0

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2021-02-24 12:23:07 +08:00
Ilya Lipnitskiy
b2d463dc5b wireguard: don't build on Linux 5.10
There are efforts underway to bring wireguard in-tree for Linux 5.4 and
to have a common build infrastructure for both 5.4 and 5.10 for
kmod-wireguard[0]. Until then, restrict kmod-wireguard to build only on
Linux 5.4, because the wireguard-compat package will not build on Linux
5.10.

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
2021-02-24 12:19:41 +08:00
Ilya Lipnitskiy
dc66dea36f kernel: 5.10: fix kmod build failures
Modify existing modules to reflect their new location in Linux 5.10. Add
missing dependenices.

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
[enable CRYPTO_USER_API_ENABLE_OBSOLETE; add kmod-crypto-hash dependency
to usb-net-rtl8152]
Signed-off-by: David Bauer <mail@david-bauer.net>
2021-02-24 12:19:13 +08:00
Ilya Lipnitskiy
ad1465050b kernel: 5.10: fix rtl8812au-ct build
Pull in upstream:
c8d243936f
1e9689c89f

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
2021-02-24 12:18:38 +08:00
Daniel Golle
63239badb6 arm-trusted-firmware-mediatek: use @OPENWRT mirror for blobs
Now that mirrors have picked it up, switch to using the @OPENWRT
mirror instead of hosting those files on Github.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-02-24 12:18:16 +08:00
Daniel Golle
8fa0a10f68 arm-trusted-firmware-mediatek: bring back package
* use binary provided by MediaTek to work-around 'bromimage' issue
 * refactor Makefile
 * add mt7622 1c variants (using binaries provided by MTK)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-02-24 12:12:40 +08:00
Álvaro Fernández Rojas
464ccfdfc9 bcm63xx-cferam: select for bmips target
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2021-02-23 12:08:21 +08:00
Álvaro Fernández Rojas
b4adb9f7d3 mtd: fixtrx: support CFE imagetag on bmips target
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2021-02-23 12:07:48 +08:00
Georgi Valkov
73cb5543a7 libusb: Fix parsing of descriptors for multi-configuration devices
Prerequisite patch:
Correct a typo in the Changelog and clean up a stray file

Fix changes in libusb which introduced a regression:
Commit e2be556bd2 ("linux_usbfs: Parse config descriptors during device
initialization") introduced a regression for devices with multiple
configurations. The logic that verifies the reported length of the
configuration descriptors failed to count the length of the
configuration descriptor itself and would truncate the actual length by
9 bytes, leading to a parsing error for subsequent descriptors.

Signed-off-by: Georgi Valkov <gvalkov@abv.bg>
2021-02-22 12:02:39 +08:00
xiaorouji
ede10e4196
luci-app-passwall: typo err fixes
Signed-off-by: CN_SZTL <cnsztl@project-openwrt.eu.org>
2021-02-22 02:30:19 +08:00
vernesong
d8be0e6aee
OpenClash: bump to v0.42.01-beta
Signed-off-by: CN_SZTL <cnsztl@project-openwrt.eu.org>
2021-02-22 02:25:50 +08:00
CN_SZTL
d799ed3ce5
nps: fix installing binary for each package
Signed-off-by: CN_SZTL <cnsztl@project-openwrt.eu.org>
2021-02-21 18:12:38 +08:00
AmadeusGhost
17bb437c66 baidupcs-web: update to 3.7.3 2021-02-21 18:06:45 +08:00
AmadeusGhost
08dee8337e rtl8821cu: disable default cflags for arm again 2021-02-21 18:05:06 +08:00
CN_SZTL
dfd0342804
Merge Mainline
Signed-off-by: CN_SZTL <cnsztl@project-openwrt.eu.org>
2021-02-21 15:57:16 +08:00
CN_SZTL
bbab272407
luci-app-passwall: drop non-exsit option for Trojan-Go sharelink
Referred from https://p4gefau1t.github.io/trojan-go/developer/url/, `tls`,
`allowInsecure` and `mux` are not exsited on the sharelink of Trojan-Go.

Reported-by: DuckSoft <realducksoft@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>
2021-02-21 15:54:21 +08:00
xiaorouji
d4ff724ded
luci-app-passwall: sync with upstream source
Signed-off-by: CN_SZTL <cnsztl@project-openwrt.eu.org>
2021-02-21 15:53:54 +08:00
CN_SZTL
a3eb950cdd
openssl: use https for download urls
Signed-off-by: CN_SZTL <cnsztl@project-openwrt.eu.org>
2021-02-21 15:49:33 +08:00
Adrian Schmutzler
2250345d51 tfa-layerscape: build fiptool again
The ls-ddr-phy package needs fiptool options that are not
available via the version from arm-trusted-firmware-tools.
This breaks build for layerscape with the recently added LX2160a:

  create: unrecognized option '--ddr-immem-udimm-1d'

Use the tfa-layerscape variant again for now, but rename it to
fiptool-layerscape to indicate that it's a specific variant.

This reverts 84bc7d31e0 ("tfa-layerscape: don't build fiptool").

Fixes: f59d7aab2a ("layerscape: add ddr-phy package")

Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
2021-02-21 12:09:07 +08:00
Andreas Eberlein
280aa06a33 x86: add led driver for PC Engines APU1
This driver adds the LED support for the PC Engines APU1.
This integrates the Linux kernel driver and includes a patch to support
 newer firmware versions. Also the default LED configuration is updated
 to use the correct devices.

Signed-off-by: Andreas Eberlein <foodeas@aeberlein.de>
2021-02-21 12:06:55 +08:00
Christian Lamparter
01eae6502e wolfssl: fix Ed25519 typo in config prompt
Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
2021-02-21 12:05:11 +08:00
Raphaël Mélotte
11d0d358c2 hostapd: backport ignoring 4addr mode enabling error
This is a backport of the upstream commit 58bbbb598144 ("nl80211: Ignore
4addr mode enabling error if it was already enabled") which fixes same
issue as in the current fix contained in '130-wpa_supplicant-multi_ap_roam.patch',
but in a different way:

 nl80211_set_4addr_mode() could fail when trying to enable 4addr mode on
 an interface that is in a bridge and has 4addr mode already enabled.
 This operation would not have been necessary in the first place and this
 failure results in disconnecting, e.g., when roaming from one backhaul
 BSS to another BSS with Multi AP.

 Avoid this issue by ignoring the nl80211 command failure in the case
 where 4addr mode is being enabled while it has already been enabled.

Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>
[bump PKG_RELEASE, more verbose commit description]
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2021-02-20 18:15:27 +08:00
AmadeusGhost
f663a1d756 rtl_wifi: fix build after mac80211 update to 5.8 2021-02-20 18:13:36 +08:00
AmadeusGhost
3576fb8313 treewide: sync all related packages with mac80211 2021-02-20 18:01:21 +08:00
AmadeusGhost
cc5be40bab mac80211: bump to 5.10.16-1 2021-02-20 18:00:04 +08:00
David Bauer
e60f938959 openssl: update package sources
OpenSSL downloads itself are distributed using Akamai CDN, so use these
sources as the highest priority.

Remove a stale mirror which seems to be offline for a longer time
already.

Add fallbacks to the old release path also for the mirrors.

Signed-off-by: David Bauer <mail@david-bauer.net>
2021-02-20 12:32:06 +08:00
Yangbo Lu
7a4c1283f9 layerscape: add LX2160ARDB (Rev2.0 silicon) board support
The QorIQ LX2160A reference design board provides a comprehensive platform
that enables design and evaluation of the LX2160A processor.

- Enables network intelligence with the next generation Datapath (DPPA2)
  which provides differentiated offload and a rich set of IO, including
  10GE, 25GE, 40GE, and PCIe Gen4

- Delivers unprecedented efficiency and new virtualized networks

- Supports designs in 5G packet processing, network function
  virtualization, storage controller, white box switching, network
  interface cards, and mobile edge computing

- Supports all three LX2 family members (16-core LX2160A; 12-core LX2120A;
  and 8-core LX2080A)

Signed-off-by: Yangbo Lu <yangbo.lu@nxp.com>
[use AUTORELEASE, add dtb to firmware part]
Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
2021-02-20 12:22:42 +08:00
Yangbo Lu
af9035b934 layerscape: add ddr-phy package
Add ddr-phy package for layerscape. Currently only LX2160ARDB
requires the package.

Signed-off-by: Yangbo Lu <yangbo.lu@nxp.com>
Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
2021-02-20 12:21:48 +08:00
Yangbo Lu
5c28db25da layerscape: add FRWY-LS1046A board support
The LS1046A Freeway board (FRWY) is a high-performance computing,
evaluation, and development platform that supports the QorIQ
LS1046A architecture processor capable of support more than 32,000
CoreMark performance. The FRWY-LS1046A board supports the QorIQ
LS1046A processor, onboard DDR4 memory, multiple Gigabit Ethernet,
USB3.0 and M2_Type_E interfaces for Wi-Fi.

The FRWY-LS1046A-TP includes the Coral Tensor Flow Processing Unit
that offloads AI/ML inferencing from the CPU to provide significant
boost for AI/ML applications. The FRWY-LS1046A-TP includes one M.2
TPU module and more modules can easily be added including USB
versions of the module to scale the AI/ML performance.

Signed-off-by: Yangbo Lu <yangbo.lu@nxp.com>
[rebase, use AUTORELEASE, fix sorting, add dtb to firmware part]
Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
2021-02-20 12:20:58 +08:00
Chuck
3d194b80c0
autocore: optimize the performance of obtaining CPU usage
Preformance Test (on NanoPi R2s, repeat 1000 times):

old command

cpu_usage=$(expr 100 - $(cat /tmp/top_tmp | grep 'CPU:' | awk -F '%' '{print$4}' | awk -F ' ' '{print$2}'))

```
real    0m 14.25s
user    0m 7.96s
sys     0m 20.33s
```

new command

cpu_usage=$(cat /tmp/top_tmp | awk '/^CPU/ { printf("%d%%", 100 - $8) }')

```
real    0m 6.91s
user    0m 4.29s
sys     0m 6.06s
```

Signed-off-by: Chuck <fanck0605@qq.com>
[adjusted for our own tree]
Signed-off-by: CN_SZTL <cnsztl@project-openwrt.eu.org>
2021-02-20 00:21:43 +08:00
Chuck
1e53f0d4f3
autocore: optimize the performance of obtaining CPU temperature
Preformance Test (on NanoPi R2s, repeat 1000 times):

old command:

temp="$(awk "BEGIN{printf (\"%.1f\n\",$(cat /sys/class/thermal/thermal_zone0/temp)/1000) }")°C"

```
real    0m 9.20s
user    0m 3.29s
sys     0m 6.24s
```

new command:

temp="$(awk '{ printf("%.1f °C", $0 / 1000) }' /sys/class/thermal/thermal_zone0/temp)"

```
real    0m 5.57s
user    0m 1.78s
sys     0m 3.97s
```

Signed-off-by: Chuck <fanck0605@qq.com>
[adjusted for our own tree]
Signed-off-by: CN_SZTL <cnsztl@project-openwrt.eu.org>
2021-02-20 00:05:06 +08:00
fliaping
dfd087d2a1
ddns-scripts_dnspod: fix updating records for dual-stack domain
Signed-off-by: CN_SZTL <cnsztl@project-openwrt.eu.org>
2021-02-19 23:42:39 +08:00
AmadeusGhost
b6d96714b7 rtl8821cu: fix build on x86 platform
Fix: #286
2021-02-19 23:40:20 +08:00
CN_SZTL
7bc843e539
xray-plugin: add new package
Signed-off-by: CN_SZTL <cnsztl@project-openwrt.eu.org>
2021-02-19 20:02:06 +08:00
Álvaro Fernández Rojas
c960750fdf cypress-firmware: fix PKG_SOURCE_URL
Download link has been moved.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2021-02-19 18:30:42 +08:00
xiaorouji
914c99c143
luci-app-passwall: sync with upstream source
Signed-off-by: CN_SZTL <cnsztl@project-openwrt.eu.org>
2021-02-19 17:25:46 +08:00
xiaorouji
06a7f6a904
luci: drop local DNS option
Let the local DNS directly use dnsmasq upstream

Signed-off-by: CN_SZTL <cnsztl@project-openwrt.eu.org>
2021-02-19 17:24:34 +08:00