Commit Graph

5456 Commits

Author SHA1 Message Date
Tony Ambardar
2bca9fa86d bpftools: update to v5.11.16, simplify make
Update to the latest stable upstream version.

Drop unneeded make variables to remove redundant assignments seen during
invocation of package Makefile.

Also remove the following patch now included upstream:

  * 200-fix-install-param-order-on-macos.patch

Compile and run-tested on malta/mips32be, using bpftool directly and also
libbpf (linked with tc) to inspect and load simple eBPF programs.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-04-25 23:14:20 +08:00
Tony Ambardar
fbdf2805af bpftools: fix feature override for masking clang
Rename feature variable clang-bpf-global-var following upstream changes.
This restores the HAVE_CLANG feature override and should avoid rare build
errors where a recent host clang and BTF-enabled host kernel are present.

Fixes: 23be333401 ("bpftools: update to 5.10.10")
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-04-25 23:13:56 +08:00
Chen Minqiang
51588fbdc3 kernel: add kmod-ipvlan support
This kmod is similar to macvlan with the difference being that the
endpoints have the same mac address.

It is useful on cloud where only one mac address allowed on port,
where macvlan not works but ipvlan would.

One use case is where multiple IPs and gateways assign on one net port

Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
2021-04-22 23:16:35 +08:00
Tony Ambardar
7e1b5e281a iproute2: avoid unneeded compiles to speed building
Skip building Makefile targets that aren't packaged: tipc, dcb, ifstat,
rtacct, lnstat, and man. Also, only compile targets needed for the current
build variant i.e. don't compile 'tc' when building an 'ip' variant and
vice versa.

These changes reduce typical build times by over 30%:
  $ make package/iproute2/clean && time make -j8 package/iproute2/compile
  (old)
  ...
  real    2m24.985s
  user    3m12.537s
  sys     0m26.677s

  (new)
  ...
  real    1m36.945s
  user    2m8.734s
  sys     0m20.046s

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-04-22 23:15:31 +08:00
Mattraks
46661ede4b
luci-app-ssr-plus: bump to 183-11
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-21 15:52:11 +08:00
ricksuzade-maker
3afb47ed42
wireguard-tool: Update to 1.0.20210315
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-20 18:07:11 +08:00
ricksuzade-maker
a4986426be
wireguard: Update to 1.0.20210219
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-20 18:06:23 +08:00
EnnawYang
1497fcddf9
cypress-firmware: bump to v5.4.18-2021_0114
Ref: https://community.cypress.com/t5/Wi-Fi-Bluetooth-for-Linux/Cypress-Linux-WiFi-Driver-Release-FMAC-2021-01-14/m-p/268899
2021-04-19 17:00:03 +08:00
AmadeusGhost
d3e5668943 autocore-arm: add mt76 temperature for hiwifi c526a
Ref: c7f82146ef
2021-04-19 00:04:43 +08:00
DENG Qingfang
7558d7817f kernel/modules: move act_gact into kmod-sched-core
As the name suggests, act_gact has the generic actions such as dropping
and accepting packets, so move it into kmod-sched-core.

Signed-off-by: DENG Qingfang <dqfext@gmail.com>
2021-04-18 23:39:46 +08:00
bluskai
0d217b28ef
frp: Update to 0.36.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-18 22:27:50 +08:00
EnnawYang
c77613a4d6 cypress-firmware: bump to v5.4.18-2020_0925
Ref: https://community.cypress.com/t5/Resource-Library/Cypress-Linux-WiFi-Driver-Release-FMAC-2020-09-25/ta-p/251089
2021-04-18 18:28:19 +08:00
Álvaro Fernández Rojas
2e3f0517e1 cypress-firmware: add proper package conflicts
There are linux firmwares packages for 43362, 43430 and 43455 which shouldn't
be installed at the same time as Cypress firmwares.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2021-04-18 18:25:09 +08:00
Beginner
fb0fd5e2fa
v2ray-core: update to 4.38.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-17 21:23:27 +08:00
Tianling Shen
dc9a1187b9
luci-app-ssr-plus: move ss-rust hack to configuration
Finally fixed this...

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-17 00:59:37 +08:00
badgv
1687ea5cfc
dnsforwarder: fix dnsmasq configuration modification logic
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-17 00:03:22 +08:00
Rosen Penev
01b72fdea1 libsemanage: fix pkgconfig paths
The pkgconfig file currently points to host paths.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-15 23:18:53 +08:00
Koen Vandeputte
a3f306c549 mac80211: backport upstream fixes
Refreshed all patches.
Includes all fixes up to 4.19.184

Signed-off-by: Koen Vandeputte <koen.vandeputte@citymesh.com>
2021-04-14 23:15:26 +08:00
Hauke Mehrtens
662a7b3aa5 mac80211: Remove 357-mac80211-optimize-skb-resizing.patch
This patch was adapted to apply on top of some stable changes, but we
are not sure if this is working correctly. Felix suggested to remove
this patch for now.

Fixes: 0a59e2a76e ("mac80211: Update to version 4.19.161-1")
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2021-04-14 23:15:08 +08:00
Rafał Miłecki
bf1bbe4a0b kernel: limit crypto-hw-ccp to the x86
CRYPTO_DEV_CCP depends on X86 or ARM64
CRYPTO_DEV_CCP_DD depends on CPU_SUP_AMD or ARM64

Compiling this driver makes sense for x86 mainly. If one day support for
ARM64 board with AMD Secure Processor gets added this package may be
updated.

Trying to build this package on bcm4908 was causing:
ERROR: module 'build_dir/target-aarch64_cortex-a53_musl/linux-bcm4908_generic/linux-5.4.110/drivers/crypto/ccp/ccp-crypto.ko' is missing.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2021-04-14 23:12:05 +08:00
Rafał Miłecki
9d03842e2c kernel: crypto: format "crypto-hw-ccp" dependencies
Use multiples lines for better readability and sort lines.

Suggested-by: Stijn Tintel <stijn@linux-ipv6.be>
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2021-04-14 23:11:15 +08:00
Tianling Shen
c4436cbb56
luci-app-ssr-plus: re-append protocol arg for ss-rust
Fixes: 4fdf4ff65a ("luci-app-ssr-plus: move shadowsocks UDP argument to configuration")

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-13 14:05:38 +08:00
Beginner
ad2021a174
v2ray-core: update to 4.37.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-12 23:46:09 +08:00
Hauke Mehrtens
b0f4576423
valgrind: Fix compile problem with MIPS soft float
valgrind does not compile any more when using a GCC 10 for MIPS with
soft float. Just remove the parts which are generating assembler which
would not work.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-12 20:21:28 +08:00
Tianling Shen
4fdf4ff65a
luci-app-ssr-plus: move shadowsocks UDP argument to configuration
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-12 20:17:59 +08:00
swxk
5e528d43fc
luci-app-ssr-plus: fix netflix shunt bug
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-12 19:36:16 +08:00
Daniel Golle
b7237dd61a umdns: add missing syscalls to seccomp filter
Looks like 'openat', 'pipe2' and 'ppoll' are now needed, possibly due
to changes on libraries used by umdns now using slightly different
calls.

Found using
/etc/init.d/umdns trace
now use umdns, ie. cover all ubus call etc., then
/etc/init.d/umdns stop
find list of syscalls traced in /tmp/umdns.*.json

Fixes: FS#3355 ("UMDNS: does not start on master with seccomp")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-04-11 23:23:25 +08:00
Mattraks
821d4bba4d
luci-app-ssr-plus: Update uTLS fingerprints
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-11 02:15:53 +08:00
Tianling Shen
f703f8937c
lienol: move LuCI apps to luci feed
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-10 14:37:37 +08:00
Tianling Shen
6214af00d0
lienol: move packages to packages feed
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-10 14:26:35 +08:00
lichao0223
cc2d67aa77
uugamebooster: Update to 2.10.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-10 13:47:27 +08:00
Beginner
6fa070f11a
v2ray-core: update to 4.37.2 2021-04-09 23:29:46 +08:00
AmadeusGhost
d6dd580d60 rtl8812au-ac: update to latest git HEAD 2021-04-08 23:29:30 +08:00
Eason
552d33e65c
luci-app-zerotier: fix iptables bug
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-06 20:52:30 +08:00
Stijn Tintel
949e9a6101
lldpd: further size reductions
Size difference on mips_4kec:
Before: 120196
After:  120006

Closes https://github.com/openwrt/openwrt/pull/3823

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Suggested-by: Lucian Cristian <lucian.cristian@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-06 20:50:24 +08:00
Stijn Tintel
b737530a49
lldpd: enable LTO
Size difference on mips_4kec:
W/o LTO: 139674
W/ LTO:  120196

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Suggested-by: Lucian Cristian <lucian.cristian@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-06 20:50:20 +08:00
Stijn Tintel
69a15b59c5
lldpd: bump to 1.0.9
Contains fixes related to CVE-2020-27827.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-06 20:50:05 +08:00
Stijn Tintel
b7f06252e3
lldpd: add libcap dependency
Now that libcap is in OpenWrt base, we can drop our custom patch to
disable libcap support and have lldpd depend on it instead. This will
allow the monitor process to drop its privileges instead of running as
root, improving security.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-06 20:49:59 +08:00
Stijn Tintel
d992dfb22a
libcap: bump to 2.48
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Acked-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-06 20:49:52 +08:00
Stijn Tintel
01601a0bf6
libcap: drop invalid copyright header
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Acked-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-06 20:49:43 +08:00
Stijn Tintel
2bf1f6771d
libcap: import from packages feed
Having libcap in OpenWrt base allows us to enable libcap support in
other packages in base.

In lldpd, this would allow the monitor process to drop its privileges
instead of running as root, improving security. It will also allow us to
drop our patch to disable libcap.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Acked-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-06 20:49:35 +08:00
Beginner
b740d4c1f7
v2ray-core: update to 4.37.1 2021-04-06 10:09:57 +08:00
Tianling Shen
282666dd83
uugamebooster: keep config when upgrade
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-04 20:38:52 +08:00
Rui Salvaterra
8bdc2362e8 zram-swap: bail out early if the kernel doesn't support swap
Since KERNEL_SWAP is only enabled by default for !SMALL_FLASH targets, we need
to check if the current kernel supports swap before trying to configure
zram-swap, as opkg can't check for kernel dependencies.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2021-04-04 12:18:54 +08:00
Rui Salvaterra
2515f96050 zram-swap: clean up the makefile
Break dependencies into separate lines, to improve the readability. Trim
trailing whitespace.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2021-04-04 12:18:35 +08:00
Alexander Egorenkov
2c898cfb59 base-files: fix status display command
If service() is called w/o parameter then the status display for services
with multiple instances is incorrect. E.g. samba4 or wpad have 2 instances.

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
2021-04-04 12:10:30 +08:00
Tony Ambardar
c5ad183dde iproute2: fix libbpf detection with NLS enabled
Upstream iproute2 detects libbpf using a one-line $CC test-compile, which
normally ignores LDFLAGS. With NLS enabled however, LDFLAGS includes an
"rpath-link" linker option needed to resolve libintl.so. Its absence
causes both the compile and libbpf detection to fail:

  ld: warning: libintl.so.8, needed by libbpf.so, not found (try using
      -rpath or -rpath-link)
  ld: libelf.so.1: undefined reference to `libintl_dgettext'
  collect2: error: ld returned 1 exit status

Fix this by directly including $LDFLAGS in the test-compile command.

Reported-by: Ian Cooper <iancooper@hotmail.com>
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-04-04 12:09:59 +08:00
Tony Ambardar
c6bce19b09 binutils: fix libbfd missing DSO dependency if NLS enabled
The libbfd package definition uses $(ICONV_DEPENDS) and $(INTL_DEPENDS)
but links against neither, leading to libbfd detection failures in other
packages (e.g. bpftools) and on-target relocation problems with libintl.so:

  root@OpenWrt:/# ldd /usr/lib/libbfd.so
        ldd (0x77db6000)
        libc.so => ldd (0x77db6000)
        libgcc_s.so.1 => /lib/libgcc_s.so.1 (0x77c6d000)
  Error relocating /usr/lib/libbfd.so: libintl_dgettext: symbol not found

Add NLS-conditional linking of "libintl" to fix this. Also remove libbfd
package dependency $(ICONV_DEPENDS) which is not used during building or
linking.

Tested with QEMU on malta/be32, after building all packages from binutils,
bpftools and iproute2, using different libc options musl and glibc.

Fixes: 08e8175696 ("binutils: use nls.mk to fix libbfd link errors in
other packages")
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-04-04 12:09:37 +08:00
Tony Ambardar
54a9b2e5ab bpftools: drop unneeded libintl linking for NLS
There is no direct linking of libintl from bpftools, only secondary linking
through libelf, so remove "-lintl" from TARGET_LDFLAGS.

Fixes: 5582fbd613 ("bpftools: support NLS, fix ppc build and update to 5.8.9")
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-04-04 12:09:18 +08:00
lllrrr2
6c146b7ef3
trojan-go: Update to 0.8.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-04 10:25:46 +08:00