Commit Graph

6085 Commits

Author SHA1 Message Date
Paul Spooren
1d79ee3ba6
refpolicy: fix path to setfiles and checkpolicy
Directly set path via MAKE vars instead of defning TESTTOOLS. This way
setfiles, which is required by the ImageBuilder, ends up in /host/bin
while checkpolicy can stay in hostpkg/bin.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2020-09-30 19:27:03 +08:00
Daniel Golle
a71fc3e930 refpolicy: mark as architecture independent
Use PKGARCH:=all to declare this package to be free of any
architecture dependent code.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-29 11:34:49 +08:00
Daniel Golle
62f07912ed config: prepare for choice of SELinux policy
Only 'targeted' from refpolicy is supported for now.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-29 11:34:13 +08:00
Daniel Golle
3e9968f02b image.mk: evaluate /etc/selinux/config to choose SELinux policy
Instead of hardcoding 'targeted' policy, evaluate /etc/selinux/config
in rootfs to choose according to which policy files in the rootfs got
to be labeled.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-29 11:33:43 +08:00
Paul Spooren
8deac8a21f policycoreutils: install to host/bin not hostpkg
By installing policycoreutils to host/bin it is also available within
the ImageBuilder and SDK, allowing to correctly label both filesystems
and packages.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2020-09-29 11:33:10 +08:00
Paul Spooren
038a832abe imagebuilder: add missing libfakeroot files
The `libfakeroot` files are currently missing in the ImageBuilder. As
`fakeroot` is always built, copy those files unconditionally.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2020-09-29 11:29:57 +08:00
Daniel Golle
cb49fc7274 toolchain: nasm: update to 2.15.05
Compile-tested libx264 and ffmpeg with x86-asm, worked fine.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-29 11:24:49 +08:00
David Bauer
e49aad3296 ath10k-firmware: package Wave1 from linux-firmware
The firmware for Wave1 chips was updated to the latest release
10.2.4-1.0-00047 at the end of 2019 (commit 513d70cc50b).
Package firmware for these chips from linux-firmware.

This avoids downloading the ath10k-firmware repository.

Signed-off-by: David Bauer <mail@david-bauer.net>
2020-09-29 11:24:20 +08:00
AmadeusGhost
d7d9d6e504 ipq40xx: add support for Century WR142AC
This commit add support for the yyets_le router.

Hardware Highlights:

SoC:	  Qualcomm IPQ4019 717 MHz
RAM:	  512M NT5CC256M16ER-EK
Flash:    32M SPI NOR MX25L25635F
WIFI1:    2.4 GHz 2T2R integrated
WIFI2:    5 GHz 2T2R integrated
Ethernet: Qualcomm QCA8075 (4x LAN, 1x WAN)
USB:      1x 3.0
LEDS:     power, wlan2g, wlan5g, usb
Button:   Reset

Installation:
 Upload the firmware on the upgrade page of the stcok, and this will take a few minutes.

This commit also supports the addition of a 128M nand flash version,
just use the P&W R619AC's opboot to overwrite the original uboot.

Signed-off-by: AmadeusGhost <amadeus@jmu.edu.cn>
2020-09-28 15:54:24 +08:00
Eneas U de Queiroz
4f497dbca6 openssl: bump to 1.1.1h
This is a bug-fix release.  Patches were refreshed.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2020-09-28 15:00:32 +08:00
Chen Minqiang
a66bea8539 ramips: thunder_timecloud support sdcard 2020-09-28 11:35:13 +08:00
Piotr Dymacz
ddcf55718e target.mk: enable iwinfo by default with any wpad variant
There are currently several variants of 'wpad' package but the 'iwinfo'
is included by default only if 'wpad', 'wpad-{basic*,mini}' or 'nas'
packages are included in {DEVICE,DEFAULT}_PACKAGES. Use 'wpad-*'
pattern to include 'iwinfo' with any 'wpad' variant.

Signed-off-by: Piotr Dymacz <pepe2k@gmail.com>
2020-09-28 11:12:16 +08:00
Daniel Golle
bcf34aea00 libsepol: break out chkcon utility
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-28 11:10:44 +08:00
Daniel Golle
6c72d901ce policycoreutils: fix host utils rpath and bin directory
'setfiles' and others should be installed to $(STAGING_DIR_HOSTPKG)/bin
rather than $(...)/sbin which isn't in PATH.
Also using -Wl,-rpath to set library search location instead of setting
LD_LIBRARY_PATH when calling setfiles in image.mk.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-28 11:10:18 +08:00
Christian Lamparter
5cc4a3de81 ipq40xx: fix DTS warning in qcom-ipq4029-gl-s1300.dts
.dts:226.17-230.4: Warning (spi_bus_reg): /soc/spi@78b6000/spi@1:
	SPI bus unit address format error, expected "0"

Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
2020-09-26 11:38:40 +08:00
Christian Lamparter
df3e28c485 build: define PWM_SUPPORT arch feature flag
As the PWM has its own sub-system in the Linux kernel,
I think it should be handled in the same way as GPIO, RTC, PCI...

This patch introduces a specific feature flag "pwm" and the
"leds-pwm" kernel module as the first customer.

Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
2020-09-26 11:34:00 +08:00
Christian Lamparter
017ab13258 scripts: mkits.sh make it possible to specify fdt@#
Some bootloaders are really keen on just one special
fdt in a multi-image fit image. This is a problem, because
currently this is fixed to "fdt@1".

This patch introduces a new device variable:
DEVICE_FDT_NUM that allows to specify the right
fdt number.

If the value is absent "1" will be chosen.

Signed-off-by: Christian Lamparter <chunkeey@gmail.com>
2020-09-26 11:33:12 +08:00
Yousong Zhou
eccc14ce84 dnsmasq: fix handling ignore condition for dnssec
It should return false to indicate that the option should not be ignored

Fixes 064dc1e8 ("dnsmasq: abort when dnssec requested but not
available")

Reported-by: Sami Olmari <sami@olmari.fi>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
2020-09-25 17:32:55 +08:00
W. Michael Petullo
b913d1908a dnsmasq: support tftp_unique_root in /etc/config/dhcp
The TFTP server provided by dnsmasq supports serving a select boot image
based on the client's MAC or IP address. This allows an administrator
to activate this feature in /etc/config/dhcp. Here is an example
/etc/config/dhcp that configures dnsmasq with --tftp-unique-root=mac.

With this configuration, dnsmasq will serve
/usr/libexec/tftpboot/00-11-22-33-44-55/openwrt-initramfs-kernel.bin to
the client with MAC address 00:11:22:33:44:55.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
2020-09-25 17:31:15 +08:00
Hans Dedecker
ad8b64d197 vxlan: fix rsc config option
Fix route short circuit config option; fixes commit 036221ce5a

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2020-09-25 17:27:21 +08:00
Jo-Philipp Wich
759b1497ca
Revert "ramips: ethernet: fix to interrupt handling"
This reverts commit 7ac454014a.

The change reportedly causes regressions in ethernet performance.

Fixes: FS#3332
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2020-09-24 23:23:41 +08:00
小甲哥
911cb34aec update n2n 2.8 to latest commit 2020-09-24 11:34:54 +08:00
Hans Dedecker
d5a3329fba vxlan: add extra config options
Add config options:
  srcportmin/srcportmax : range of port numbers to use as  UDP source ports
                          to communicate to the remote VXLAN tunnel endpoint
  ageing                : lifetime in seconds of FDB entries learnt by the kernel
  maxaddress            : maximum number of FDB entries
  learning              : enable/disable entering unknown source link layer addresses
                          and IP addresses into the VXLAN device FDB.
  rsc                   : enable/disable route short circuit
  proxy                 : enable/disable ARP proxy
  l2miss                : enable/disable netlink LLADDR miss notifications
  l3miss                : enable/disable netlink IP ADDR miss notifications
  gbp                   : enable/disable the Group Policy extension

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2020-09-24 11:33:57 +08:00
Stijn Segers
318a03fe11 odhcpd: number UCI defaults script
UCI defaults scripts are supposed to be numbered, but odhcpd's lacked numbering, which
turned out to mess up my custom scripts numbered 9[0-9]_*. The idea is to have high number
(custom) scripts executed last. Jow confirmed numbering is the default case, not the
exception (thanks).

Signed-off-by: Stijn Segers <foss@volatilesystems.org>
2020-09-22 11:38:27 +08:00
Daniel Golle
82f429d24f policycoreutils: fix ALTERNATIVES install location
Fixes: 7817c831ef ("policycoreutils: break into smaller packages")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-22 11:38:06 +08:00
Daniel Golle
4823ae6bde policycoreutils: break into smaller packages
Instead of vaguely describing dependencies in the package description
actually split-up into individual packages, each with their
dependencies expressed accurately.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-22 11:37:37 +08:00
Daniel Golle
f0a16418a5 libselinux: split utility packages and add PKG_LICENSE
Split utility packages similar to coreutils in packages feed, adding
ALTERNATIVES for those which are also provided by busybox-selinux.
Also add missing license information.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2020-09-22 11:37:10 +08:00
CN_SZTL
eee90d3222
frp: fix HASH key 2020-09-21 22:15:23 +08:00
Saxon
0ac2954f4f frp: update to 0.34 2020-09-21 20:03:08 +08:00
Rui Salvaterra
8205dcaf77 zram-swap: explicitly use mkswap/swapon/swapoff from /sbin
The required BusyBox applets are enabled by default, so we can rely on them
being present in the system. This way, we make sure there are no conflicts
with less featured variants of these same applets which might also be
present in the system.

Fixes: 0bd7dfa3ed ("zram-swap: enable swap discard")

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
[wrap commit description]
Signed-off-by: David Bauer <mail@david-bauer.net>
2020-09-21 20:01:34 +08:00
Sungbo Eo
50a054a3a1 build: image: move IMAGE_SIZE to image.mk
IMAGE_SIZE is widely used in many targets. Declare it in the default template to
clean up redundant code. This also prevents deriving IMAGE_SIZE unintentionally
from the previously defined device.

While at it, remove duplicate KERNEL_SIZE declaration.

Signed-off-by: Sungbo Eo <mans0n@gorani.run>
2020-09-21 20:00:35 +08:00
CN_SZTL
6d4aca144e
Revert "naiveproxy: add RAM detection"
This reverts commit 926ae71c08.
2020-09-20 22:16:58 +08:00
CN_SZTL
926ae71c08
naiveproxy: add RAM detection 2020-09-20 13:04:31 +08:00
CN_SZTL
0b9582ed05
OpenClash: sync with upstream source 2020-09-20 13:03:25 +08:00
CN_SZTL
3aa74838a8
subconverter: bump to latest git HEAD 2020-09-20 12:51:08 +08:00
CN_SZTL
b6c347ed2a
luci-app-passwall: bump to 3.9-61 2020-09-20 00:12:26 +08:00
CN_SZTL
86bbf94fed
subconverter: bump to 0.6.4 2020-09-19 23:18:55 +08:00
CN_SZTL
17ae6020e0
luci-app-turboacc: drop deprecated function in view 2020-09-19 22:47:02 +08:00
CN_SZTL
70444f3628
luci-app-unblockmusic: add a new function from go version 2020-09-19 20:27:18 +08:00
CN_SZTL
b68e1961d1
luci-app-unblockmusic: drop outdated cloud servers 2020-09-19 20:21:29 +08:00
CN_SZTL
07cb2d989b
luci-app-turboacc: move to ctcgfw 2020-09-19 19:41:29 +08:00
Chen Minqiang
46c05bf04b
ramips: youku_yk-l2 add support sdcard 2020-09-19 19:15:19 +08:00
LGA1150
5f8fe9cb85
shadowsocksr: size optimization 2020-09-19 19:09:11 +08:00
LGA1150
3d3e7a0db8
luci-app-vlmcsd: do not expose port to WAN 2020-09-19 19:03:33 +08:00
Kevin Darbyshire-Bryant
6eadef4bc9
umdns: fix compiling using gcc 10
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2020-09-19 18:59:23 +08:00
CN_SZTL
d87baa434b
AdGuardHome: disable UPX compression by default
Someone reports resources missing with UPX compression
enabled, so set it to 'N' by default.

Fixes: TG/186415.
2020-09-19 18:54:55 +08:00
Tony Ambardar
ceca8c05e2 bpftools: support NLS, fix ppc build and update to 5.8.9
With global NLS support enabled (CONFIG_BUILD_NLS), the linked libelf.so
and libbfd.so libraries will depend on libintl.so. Import the nls.mk helper
to set library prefixes and flags accordingly, and also conditionally add
"-lintl" as link-time library.

Fix a build error on ppc due to a EDEADLOCK redefinition in errno.h.

Use upstream stable kernel 5.8.9, and fix overriding of feature detection
to only allow/hide detected features. Also refresh existing patches.

Fixes: 2f0d672088 ("bpftools: add utility and library packages supporting
eBPF usage")

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2020-09-19 11:32:39 +08:00
Tan Zien
f5070aaac4 firmware: intel-microcode: update to 20200616
Signed-off-by: Tan Zien <nabsdh9@gmail.com>
2020-09-19 11:31:57 +08:00
Tan Zien
df73af20b2 firmware: amd64-microcode: update to 20191218
amd64-microcode (3.20191218.1)

  * New microcode update packages from AMD upstream:
    + Removed Microcode updates (known to cause issues):
      sig 0x00830f10, patch id 0x08301025, 2019-07-11
  * README: update for new release

amd64-microcode (3.20191021.1)

  * New microcode update packages from AMD upstream:
    + New Microcodes:
      sig 0x00830f10, patch id 0x08301025, 2019-07-11
    + Updated Microcodes:
      sig 0x00800f12, patch id 0x08001250, 2019-04-16
      sig 0x00800f82, patch id 0x0800820d, 2019-04-16

amd64-microcode (3.20181128.1)

  * New microcode update packages from AMD upstream:
    + New Microcodes:
      sig 0x00800f82, patch id 0x0800820b, 2018-06-20

Signed-off-by: Tan Zien <nabsdh9@gmail.com>
2020-09-19 11:31:02 +08:00
Aleksander Jan Bajkowski
5fdc54eac5 kernel: drop kmod-bmp085, kmod-bmp085-i2c and kmod-bmp085-spi
CONFIG_BMP085* is replaced by CONFIG_BMP280 since 4.9[1] and this package is empty.
OpenWRT also has kmod-iio-bmp280* package and we can drop old packages.

1. [ misc: retire the old BMP085 driver ]
(832c8232dd (diff-5000d544d790c669405eb2a6775e5981))

Signed-off-by: Aleksander Jan Bajkowski <A.Bajkowski@stud.elka.pw.edu.pl>
2020-09-19 11:26:22 +08:00