Commit Graph

5886 Commits

Author SHA1 Message Date
Ali MJ Al-Nasrawy
b0ff6bb8a6
mac80211: distance config: allow "auto" as a value
The user can now enable the ACK timeout estimation algorithm (dynack)
for drivers that support it.
It is also expected that the distance config accepts the same values as:
$ iw phyX set distance XXX

Signed-off-by: Ali MJ Al-Nasrawy <alimjalnasrawy@gmail.com>
(cherry picked from commit a8a1ef8568)
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-06-26 02:47:40 +08:00
Rui Salvaterra
89e77fb426 zram-swap: robustify mkswap/swapon/swapoff invocation
Instead of assuming /sbin contains the correct BusyBox symlinks, directly invoke
the busybox executable. The required utilities are guaranteed to be present,
since the zram-swap package selects them. Additionally, don't assume busybox
resides in /bin, rely on PATH to find it.

While at it, update the copyright year, use SPDX and switch to AUTORELEASE.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2021-06-25 23:40:56 +08:00
Paul Spooren
0a5e5ca336 base-files: fix /tmp/TZ when zoneinfo not installed
The zoneinfo packages are not installed per default so neither
/tmp/localtime nor /tmp/TZ is generated.

This patch mostly reverts the previous fix and instead incooperates a
solution suggested by Jo.

Fixes "base-files: fix zoneinfo support " 8af62ed

Signed-off-by: Paul Spooren <mail@aparcar.org>
2021-06-25 23:40:36 +08:00
Rosen Penev
b75e6ec413 base-files: fix zoneinfo support
The system init script currently sets /tmp/localinfo when zoneinfo is
populated. However, zoneinfo has spaces in it whereas the actual files
have _ instead of spaces. This made the if condition never return true.

Example failure when removing the if condition:

/tmp/localtime -> /usr/share/zoneinfo/America/Los Angeles

This file does not exist. America/Los_Angeles does.

Ran through shfmt -w -ci -bn -sr -s

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-06-24 23:07:42 +08:00
AmadeusGhost
28f8bfc08a mbedtls: refresh patches 2021-06-23 23:33:12 +08:00
Luiz Angelo Daros de Luca
87959bdcb7 base-files: bring up vlan interface too
Vlan subinterface was never brought up when using vlan-based preinit network.
Tested forcing ifname="" before preinit_ip() on a Tp-Link Archer C5v4.

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2021-06-23 23:19:25 +08:00
Aleksander Jan Bajkowski
c168074ccb kernel: crypto: limit crypto-hw-hifn-795x to devices with pci support
CONFIG_CRYPTO_DEV_HIFN_795X depends on PCI. This driver only makes sense on
devices with pci support.

Signed-off-by: Aleksander Jan Bajkowski <A.Bajkowski@stud.elka.pw.edu.pl>
2021-06-23 23:16:20 +08:00
Hauke Mehrtens
7b56be91d3 base-files: failsafe: Remove the VLAN modifier from interface name
Some interfaces have a VLAN modifier like :t in lan1:t, this modifier
should be removed from the interface before calling preinit_ip_config().

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2021-06-23 23:13:51 +08:00
Karel Kočí
efa57dd53a base-files: fix enabled for services with only STOP
There are services that have only STOP value set. They are executed only
on shutdown and it is common to use them for system cleanup. There is
one such service shipped directly with base-files, it is 'umount'. Those
work the same way as those with START but enabled does not report them
as enabled although it should have as they can be enabled and disabled
as any other service.

This also changes check from check for executable to check for symbolic
link. The implementation depends on those being links to service file
and it is much cleaner and direct to check for them being links.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
2021-06-23 23:13:35 +08:00
Tianling Shen
b1b7452f33
dnsmasq: cleanup IPv6 DNS redirect rule when stop running
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-06-22 18:45:52 +08:00
Tianling Shen
7535adf0d1
dnsmasq: support DNS redirect for IPv6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-06-22 17:33:45 +08:00
Karel Kočí
e2b9f61a63
ustream-ssl: variants conflict with each other
This adds conflicts between variants of libustream pacakge.
They provide the same file and thus it should not be possible to install
them side by side.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>
(cherry picked from commit 219e17a350)
2021-06-22 15:36:02 +08:00
Dirk Neukirchen
67e77ac373
grub2: update to 2.06
-300-CVE-2015-8370.patch is upstreamed with different code
(upstream id: 451d80e52d851432e109771bb8febafca7a5f1f2)

- fixup OpenWrts setup_root patch

compile tested: x86_64,i386
runtime tested: VM x86_64,VM i386

- booted fine
- grub-editenv worked

Signed-off-by: Dirk Neukirchen <plntyk.lede@plntyk.name>
(cherry picked from commit 2c9537e274)
2021-06-22 15:35:29 +08:00
Chris Blake
46fec74be8
kernel/modules: make sure igb loads at boot
Without loading the igb at boot, the recovery wouldn't have
network available. All network drivers should be loaded before
etc/board.d/02_network is called. Note that other network drivers
already have this set, such as tg3.

Fixes: 7e0e5110bc ("kernel: add igb kernel module")
Signed-off-by: Chris Blake <chrisrblake93@gmail.com>
(cherry picked from commit f1e41155c9)
2021-06-22 15:29:30 +08:00
Florian Eckert
d6bbe61e1b
uci: add uci_revert function
Add missing uci_revert shell function wrapper.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 92ac2a20eb)
2021-06-22 15:28:54 +08:00
Michael Yartys
f4e68f4691
ath10k-ct: fix typo in Makefile
Add forgotten colon to Makefile.

Signed-off-by: Michael Yartys <michael.yartys@protonmail.com>
(cherry picked from commit f0f1d68d52)
2021-06-22 15:27:46 +08:00
Perry Melange
cef5283d29
qos-scripts: add ifbN device before setting the link up
commit 50413e1ec8 replaced ifconfig
with ip.  In order to set a link state to up, the interface needs
to be added first.

Fixes: FS#3754

Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
[Add Fixes tag]
Signed-off-by: Baptiste Jonglez <git@bitsofnetworks.org>
(cherry picked from commit 23c3bab920)
2021-06-21 20:35:32 +08:00
Florian Eckert
0415d0fa6f
base-files: redirect kill ouptut for ash, telnetd and dropbear
If one of the programmes is not running, then we see the following
output in the logs.

`killall: telnetd: no process killed`

To ensure that the log is clean, redirect the output to /dev/null

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 40f533b73e)
2021-06-21 20:35:30 +08:00
Chuck Fan
a9289c8d07
base-files: upgrade: use zcat command provided by busybox
Calling `switch_to_ramfs()` will not copy the gzip executable
(/bin/gzip) to ramfs, but `/bin/zcat` will call `/bin/gzip` when
package gzip is installed, instead of the busybox-supplied zcat.
This will cause `zcat` to fail to find `gzip`, then cause the
sysupgrade to fail. Adding the `busybox` prefix here will solve
the problem.

Signed-off-by: Chuck Fan <fanck0605@qq.com>
(cherry picked from commit d374e2cdb4)
2021-06-21 20:35:30 +08:00
Sergey Ponomarev
db8bdf06f4
busybox: disable bzip2
bzip2 adds about 8kb of size. For tiny builds it's often disabled.
It's not directly used by stock OpenWrt programs.
Kernel images compressed with bzip2 are also not fully supported.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
[fix \ indention]
Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit bffee5ea19)
2021-06-21 20:35:30 +08:00
李国
ba5d6bc792
grub2: pass compilation parameters more accurately
In order for the grub2 boot-related code to compile normally, we have
made many adjustments to the compilation parameters. These adjustments
are not necessary for tools-related code. We apply these parameter
adjustments only to the boot-related code.

Signed-off-by: 李国 <uxgood.org@gmail.com>
(cherry picked from commit e4723755f2)
2021-06-21 20:35:30 +08:00
李国
81300f2e3b
grub2: make grub2 tools built in a separate variant
grub2 boot-related code and tools-related code may require different
compilation parameters. We split them into different variants for
compilation, so that we can accurately pass the required parameters and
avoid causing problems.

Signed-off-by: 李国 <uxgood.org@gmail.com>
(cherry picked from commit ca94104136)
2021-06-21 20:35:29 +08:00
李国
5821e9d4f6
grub2: make grub2-bios-setup as a separate package
The grub2 and grub2-efi packages should only contain boot-related code.
grub-bios-setup is the same as grub-editenv, they are both grub2 tools
and should be placed in a separate package.

Signed-off-by: 李国 <uxgood.org@gmail.com>
[use AUTORELEASE and update to SPDX]
Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 5876d6a62f)
2021-06-21 20:35:29 +08:00
lean
562227aa9b
urngd: fix busy loop in case of ioctl cause high cpu usage
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-06-21 20:35:29 +08:00
Rosen Penev
6229fcb233 treewide: remove PKG_INSTALL from CMake packages
It's already default with cmake.mk

Found with:

git grep PKG_INSTALL\: | cut -d ':' -f 1 | sort -u > ins
git grep cmake.mk | cut -d ':' -f 1 > cmake
comm -1 -2 ins cmake

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-06-20 23:19:53 +08:00
Rosen Penev
d3cf992386 treewide: remove BUILD_PARALLEL from CMake packages
It's already default. The only exception is mt76 which has Ninja
disabled.

Found with:

git grep BUILD_PARALLEL | cut -d ':' -f 1 | sort -u > par
git grep cmake.mk | cut -d ':' -f 1 > cmake
comm -1 -2 par cmake

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-06-20 23:19:45 +08:00
ElonH
546f8257d4
multimedia-input: missing deps
Target: ipq40xx

Package kmod-multimedia-input is missing dependencies for the following libraries:
input-core.ko

(cherry picked from commit 324306e10d)
2021-06-20 17:00:54 +08:00
Lucian Cristian
714dabcb63
kernel: video: add multimedia-input driver
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
[rebase commit, apply review recommendations]
Signed-off-by: AmadeusGhost <amadeus@immortalwrt.org>
[rebase commit, only apply generic part]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-06-20 17:00:13 +08:00
AmadeusGhost
dd6c90f37c rtl8812au-ac: update to latest git HEAD 2021-06-19 18:10:31 +08:00
Yousong Zhou
8710615589
base-files: upgrade: add get_image_dd()
This is mainly to handle stderr message "Broken pipe", "F+P records
in/out" by common pattern "xcat | dd .."

Ref: https://bugs.openwrt.org/index.php?do=details&task_id=3140
Reported-by: Philip Prindeville <philipp@redfish-solutions.com>
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Reviewed-By: Philip Prindeville <philipp@redfish-solutions.com>
(cherry picked from commit 50b870ee3c)
2021-06-17 20:13:46 +08:00
李国
9eddf65670
x86: generate EFI platform bootable images
Add EFI platform bootable images for x86 platforms. These images can
also boot from legacy BIOS platform.

EFI System Partition need to be fat12/fat16/fat32 (not need to load
filesystem drivers), so the first partition of EFI images are not ext4
filesystem any more.

GPT partition table has an alternate partition table, we did not
generate it. This may cause problems when use these images as qemu disk
(kernel can not find rootfs), we pad enough sectors will be ok.

Signed-off-by: 李国 <uxgood.org@gmail.com>
[part_magic_* refactoring, removed genisoimage checks]
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit a6b7c3e672)
2021-06-17 20:13:41 +08:00
Paul Spooren
a1dc0bafa9
x86: switch image generation to new code
This commit introduces few related changes which need to be done in
single commit to keep images buildable between git revisions. In result
it retains all previous image creation possibilities with slight name
change of generated images. Brief summary of the commit:

* Split up image generation recipe to smaller chunks to make it more
  generic and reusable.

* Make iso images x86 specific and drop their definition as root
  filesystem.

* Convert image creation process to generic code specified in image.mk.

* Make geode subtarget inherit features from the main target instead of
  redefining them.

* For subtargets create device definitions with basic packages set.

Signed-off-by: Tomasz Maciej Nowak <tomek_n@o2.pl>
[rebased]
Signed-off-by: Paul Spooren <mail@aparcar.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-06-17 19:38:52 +08:00
Daniel Golle
2fece79e6e ugps: start also in case device is absent
Don't bail out from init script in case the GPS device is missing.
Some modems take time to come up, and some people may use things like
'kplex' to feed ugpsd. Hence it is better to always start ugpsd
unconditionally and let procd's respawn take care of retrying.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-06-15 23:14:06 +08:00
Tianling Shen
b8a3ca9c24
Revert "exfat: update to 5.12.3"
It was broken on kernel <= 4.19 at least, revert update and wait for fixes.

This reverts commit 4673ba070e.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-06-15 18:20:54 +08:00
Rosen Penev
4673ba070e exfat: update to 5.12.3
Major changes are:
    Avoid page allocation failure from upcase table allocation.
    Add support for FITRIM.
    Improve write perofmrance on dirsync mount.
    Improve lookup perofmrance.
    Fix a bug on discard mount.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-06-14 11:55:39 +08:00
Hauke Mehrtens
3b42596bc9 opkg: update to git HEAD
1bf042d libopkg: pkg_hash: print unresolved dependencies

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2021-06-14 11:44:47 +08:00
Hauke Mehrtens
73ddfb3eb8 opkg: Fix download over git
Set the PKG_SOURCE_URL using a lazy set to allow evaluating
$(PROJECT_GIT) later. Without this change PKG_SOURCE_URL is evaluated
immediately, before PROJECT_GIT is defined and the download over git is
not working.

Fixes: 6687a2483a ("opkg: use $(PROJECT_GIT), $(AUTORELEASE) and SPDX")
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2021-06-14 11:44:09 +08:00
Hannu Nyman
8124a5bbba treewide: mark selected packages nonshared
Mark uci, ubus, libubox, lua, libnl-tiny and libjson-c
as nonshared packages. This helps to keep coherent dependencies
if these ABI versioned packages are later updated.

Before this commit it is possible to get missing dependencies
in target-specific nonshared packages (like iwinfo) that depend
on these shared ABI versioned packages. If these are later updated
and rebuilt, only the new ABI version will be available for download,
while the target-specific packages in releases continue to depend on
the old ABI version.

After this commit the packages are built along the other nonshared
packages by the phase1 images buildbot and will be available at the
target/ download directories instead of packages/base dir. That will
help to keep a coherent set available.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2021-06-14 11:43:00 +08:00
Rosen Penev
a80b18a363 package: fix cmake packages build with ninja
+= is needed for CMAKE_OPTIONS.

mt76 needs Ninja disabled as the kernel stuff uses normal make.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-06-13 12:01:10 +08:00
Tianling Shen
0196b5587e
r8125: bump to 9.005.06
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 37284adecb)
2021-06-12 01:06:24 +08:00
Tomas Lara
e0a12935c1 linux-firmware: update to 20210511
Signed-off-by: Tomas Lara <tl849670@gmail.com>
[rebased; removed brcmfmac changes due to removed firmware]
Signed-off-by: David Bauer <mail@david-bauer.net>
2021-06-08 23:13:14 +08:00
Robert Marko
e752830d02 ethtool: update to version 5.12
Update ethtool to newly released 5.12 version.

Signed-off-by: Robert Marko <robimarko@gmail.com>
2021-06-08 23:12:38 +08:00
Daniel Golle
8f3585bef9 ugps: update to git HEAD
86ee86e nmea: parse $GPZDA sentences for date/time
 8e12414 nmea: parse $GPGLL sentences for position
 5e88403 ubus: display only available information

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-06-08 23:12:01 +08:00
Tianling Shen
5eeec57c5e
default-settings: update DISTNAME
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-06-08 00:45:46 +08:00
Hauke Mehrtens
7e10dc087d mac80211: Update to backports version 4.19.193-test1
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2021-06-07 00:05:04 +08:00
Josef Schlehofer
b0789e5156 linux-firmware: update to version 20210315 and trim down broadcom FW
In there linux-firmware repository located in kernel, there were removed old
broadcom firmware [1] as they seem to be likely vulnerable to KrØØk vulnerability
(CVE-2019-15126), because Cypress released new versions and superseded
by it.

In OpenWrt, there is Makefile for cypress-firmware, which already provides
the same named packages like it was in linux-firmware. For example, cypress-firmware-43455-sdio
provides brcmfmac-firmware-43455-sdio [2].

[1] https://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git/commit/?id=0f0aefd733f70beae4c0246edbd2c158d5ce974c

[2] eeda8652f1/package/firmware/cypress-firmware/Makefile (L124)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2021-06-06 23:57:49 +08:00
Kuan-Yi Li
0893a3d31b kernel: usb: add kmod-usb-gadget-ncm
Add kernel module package for USB Network Control Model (NCM) Gadget
support.

Signed-off-by: Kuan-Yi Li <kyli@abysm.org>
2021-06-06 23:47:28 +08:00
Adrian Schmutzler
07a664cae8 umbim: fix return value of proto_mbim_setup()
The variable name appears to be mistyped.

Suggested-by: Howard Chu <hyc@symas.com>
Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
2021-06-06 23:44:15 +08:00
Adrian Schmutzler
41db02f7b3 umbim: fix whitespace issues
Make leading whitespaces consistent and remove trailing one.

Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
2021-06-06 23:43:52 +08:00
Eneas U de Queiroz
79e743c464 kernel: add @IPV6 dependency to ipv6 modules
IPv6 modules should all depend on @IPV6, to avoid circular dependencies
problems, especially if they select a module that depends on IPV6 as
well.  In theory, if a package A depends on IPV6, any package doing
'select A' (DEPENDS+= A) should also depend on IPV6; otherwise selecting
A will fail.  Sometimes the build system is forgiving this, but
eventually, and unexpectedly, it may blow up on some other commit.

Alternatively one can conditionally add IPv6 dependencies only if
CONFIG_IPV6 is selected: (DEPENDS+= +IPV6:package6).

Fixes: https://github.com/immortalwrt/immortalwrt/issues/394

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2021-06-01 23:54:23 +08:00
Tianling Shen
e1936de99b
r8152: Update to 2.15
Compile-tested-on: ramips (k4.14), rockchip (k4.19), x86 (k4.9)
Runtime-tested-on: N/A

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-29 01:00:30 +08:00
Tianling Shen
be20146081
cypress-firmware: bump to v5.4.18-2021_0527
Ref: https://community.cypress.com/t5/Wi-Fi-Bluetooth-for-Linux/Cypress-Linux-WiFi-Driver-Release-FMAC-2021-05-27/td-p/277394

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-29 00:15:16 +08:00
Jo-Philipp Wich
a74bf26eec
ubox: fix init script validation of log_ip option
The underlying logread process uses usock() to handle remote connections
which is able to handle both hostnames and IP addresses.

Ref: https://github.com/openwrt/luci/issues/5077
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(backported from commit ec83fb9ced)
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-28 22:44:11 +08:00
Felix Fietkau
b4e859322f hostapd: support verbose build using V=sc
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2021-05-27 23:15:42 +08:00
Evgeny Kolesnikov
0fc349ffa7 kernel: fix AutoLoad parameter for uleds module
The name of the module is 'uleds', not 'leds-uleds'.

Signed-off-by: Evgeny Kolesnikov <evgenyz@gmail.com>
[improve commit title]
Signed-off-by: David Bauer <mail@david-bauer.net>
2021-05-27 23:15:06 +08:00
Nick Hainke
cc44ec8170
opkg: use $(PROJECT_GIT), $(AUTORELEASE) and SPDX
1) Use SPDX license headers to be machine readable.
2) Update copyright to 2021.
3) Use $(PROJECT_GIT) instead of manually specifying the git url.
4) Use $(AUTORELEASE) to automatically set the correct PKG_RELEASE.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2021-05-26 17:10:47 +08:00
Paul Spooren
76f606a07b
busybox: mention SRV support in help message
The SRV was added some time ago and should be mentioned in the short
help message to avoid confusion about missing features.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2021-05-26 17:10:11 +08:00
Hans Dedecker
90b2bd4068 nat46: fix memory leak
0d5860d fix memory leak in nat46_netdev_destroy().The netdev is forgotten to free in nat46_netdev_destroy function (#26)

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2021-05-24 23:35:58 +08:00
Hauke Mehrtens
acf1212cb8 treewide: Mark packages nonshared if they depend on @TARGET_
This marks all packages which depend on a target with @TARGET nonshared.
If they are not marked nonshared they would be build by the SDK build
and if this happens with a different SDK, then the SDK from the target
the package depends on, the package would not be added to the index.

This should fix the image builder for some of these packages.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2021-05-24 23:33:39 +08:00
Konstantin Demin
93b9800ef0 binutils: update to 2.35.2
Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
2021-05-23 23:21:46 +08:00
Ivan Pavlov
fc321e394a wolfssl: add support for OpenVPN
Support for wolfSSL has been upstreamed to the master OpenVPN branch
in f6dca235ae560597a0763f0c98fcc9130b80ccf4, so we can use wolfSSL
directly in OpenVPN. So no more needed differnt SSL engine for OpenVPN
in systems based on wolfSSL library
Compiled && tested on ramips/mt7620, ramips/mt7621

Signed-off-by: Ivan Pavlov <AuthorReflex@gmail.com>
2021-05-23 23:21:14 +08:00
Anderson McKinley
9d53cd5097 kernel: add kmod-input-leds
Adds support for LEDs on input devices. Useful for example on x86 laptops-
allows re-purposing num/caps/scroll lock LEDs.

Signed-off-by: Anderson McKinley <coyoso@tuta.io>
2021-05-23 23:20:51 +08:00
Tianling Shen
9e5ea394a7
default-settings: make chinese optimization parts optional
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-23 22:44:25 +08:00
Tianling Shen
c221fa3cea
r8152: enable multi-threads compilation
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-23 01:48:17 +08:00
David Bauer
5bc0b94e96
hostapd: wolfssl: add RNG to EC key
Since upstream commit 6467de5a8840 ("Randomize z ordinates in
scalar mult when timing resistant") WolfSSL requires a RNG for
the EC key when built hardened which is the default.

Set the RNG for the EC key to fix connections for OWE clients.

Signed-off-by: David Bauer <mail@david-bauer.net>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-22 19:16:15 +08:00
David Bauer
6b299c26b4
wolfssl: always export wc_ecc_set_rng
Since commit 6467de5a8840 ("Randomize z ordinates in scalar
mult when timing resistant") wolfssl requires a RNG for an EC
key when the hardened built option is selected.

wc_ecc_set_rng is only available when built hardened, so there
is no safe way to install the RNG to the key regardless whether
or not wolfssl is compiled hardened.

Always export wc_ecc_set_rng so tools such as hostapd can install
RNG regardless of the built settings for wolfssl.

Signed-off-by: David Bauer <mail@david-bauer.net>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-22 17:12:07 +08:00
Chen Minqiang
d06a10fcd7 busybox: nslookup applet link with resolv if use glibc
This fixed b36b8b6929
("busybox: remove nslookup_lede/openwrt.patch")

It is likely dropped by mistake, this add back the changes

Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
2021-05-22 17:06:29 +08:00
Dirk Neukirchen
d2d4fe2cbe grub2: disable liblzma dependency
Florian Ekert reported:

"I have build a fresh master branch recently, Since your last change [1]
on grub2, I have now a new dependency on liblzma for the install package
grub2-editenv.

root@st-dev-07 /usr/lib # ldd /root/grub-editenv
       /lib/ld-musl-x86_64.so.1 (0x7f684b088000)
       liblzma.so.5 => /usr/lib/liblzma.so.5 (0x7f684b06d000)
       libgcc_s.so.1 => /lib/libgcc_s.so.1 (0x7f684b059000)
       libc.so => /lib/ld-musl-x86_64.so.1 (0x7f684b088000)

This was not the case before your update.

root@st-dev-07 /usr/sbin # ldd /usr/sbin/grub-editenv
       /lib/ld-musl-x86_64.so.1 (0x7fd970176000)
       libgcc_s.so.1 => /lib/libgcc_s.so.1 (0x7fd970162000)
       libc.so => /lib/ld-musl-x86_64.so.1 (0x7fd970176000)

My build complains that it cannot satisfy the runtime package dependency
for grub2-editenv.

install -d -m0755 /home/feckert/workspace/openwrt/LDM-master-x86_64/build/openwrt/build_dir/target-x86_64_musl/linux-x86_64/grub-pc/grub-2.06~rc1/ipkg-x86_64/grub2-editenv/usr/sbin
install -m0755 /home/feckert/workspace/openwrt/LDM-master-x86_64/build/openwrt/build_dir/target-x86_64_musl/linux-x86_64/grub-pc/grub-2.06~rc1/grub-editenv /home/feckert/workspace/openwrt/LDM-master-x86_64/build/openwrt/build_dir/target-x86_64_musl/linux-x86_64/grub-pc/grub-2.06~rc1/ipkg-x86_64/grub2-editenv/usr/sbin/
find /home/feckert/workspace/openwrt/LDM-master-x86_64/build/openwrt/build_dir/target-x86_64_musl/linux-x86_64/grub-pc/grub-2.06~rc1/ipkg-x86_64/grub2-editenv -name 'CVS' -o -name '.svn' -o -name '.#*' -o -name '*~'| xargs -r rm -rf
Package grub2-editenv is missing dependencies for the following libraries:
liblzma.so.5
make[2]: *** [Makefile:166: /home/feckert/workspace/openwrt/LDM-master-x86_64/build/openwrt/bin/APOS/feckert/master/master-Maggie-455-ga5edc0e8e/x86_64/targets/x86/64/packages/grub2-editenv_2.06~rc1-1_x86_64.ipk] Error 1
make[2]: Leaving directory '/home/feckert/workspace/openwrt/LDM-master-x86_64/build/openwrt/package/boot/grub2'
time: package/boot/grub2/pc/compile#78.64#9.79#83.88
   ERROR: package/boot/grub2 failed to build (build variant: pc).
make[1]: *** [package/Makefile:116: package/boot/grub2/compile] Error 1
make[1]: Leaving directory '/home/feckert/workspace/openwrt/LDM-master-x86_64/build/openwrt'
make: *** [/home/feckert/workspace/openwrt/LDM-master-x86_64/build/openwrt/include/toplevel.mk:230: package/boot/grub2/compile] Error 2

If I add the following changes to the package all works as expected.

<snip>
-  DEPENDS:=@TARGET_x86
+  DEPENDS:=@TARGET_x86 +liblzma
  VARIANT:=pc
endef

This is a hotfix but I dont´t think this is the final solution, because lzma is provided by the package xz.
And This is maintained in the package feed [not the core]"

Dirk stated & offered his patch to disable liblzma and thus resolve the
'out of core dependency' problem:

"LZMA is used in mkimage.c
disabling it prints
Without liblzma (no support for XZ-compressed mips images) (explicitly disabled)
(see configure.ac)

liblzma is autodetected so this issue was present but hidden somehow

[unsure: grep/image generation does not use grub with that option]
OpenWrt does not use that feature currently

[!] some scripts and examples use --compression=xz or -C xz and those will break

grub has an internal xzlib for different "lzma" functionality
(ext. LIBLZMA from XZ (GRUB_COMPRESSION_XZ) vs. GRUB_COMPRESSION_LZMA)"

Hopefully fixes e74d81ece2 and doesn't
break anything else.

Signed-off-by: Dirk Neukirchen <plntyk.lede@plntyk.name>
[include Florian's description of how problem 1st encountered]
[bump package release]
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2021-05-22 17:05:50 +08:00
Tianling Shen
4958940a43
wireguard-tools: bump to 1.0.20210424
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-21 01:33:33 +08:00
Tianling Shen
5683b6cde9
wireguard: bump to 1.0.20210424
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-21 01:31:39 +08:00
Philip Prindeville
4109228554 busybox: preserve crontabs
/etc/syslog.conf is used by sysklogd, and /etc/crontabs is used
by crond, both features of busybox.  Given this, ownership for
these files should be bound to busybox, especially if one day
there's a way to do an in-place opkg update of busybox.

There's also the busybox provided syslogd which uses this file
if CONFIG_BUSYBOX_FEATURE_SYSLOGD_CFG is set.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-05-19 23:28:58 +08:00
Nick Hainke
ebeb7355f7 busybox: remove nslookup_lede/openwrt.patch
The nslookup_lede/openwrt applet was introduced in de5b8e5. It was
introduced because:

  Add a new LEDE nslookup applet which is compatible with musl libc
  and providing more features like ability to specify query type.

  In contrast to busybox' builtin nslookup applet, this variant does
  not rely on libc resolver internals but uses explicit send logic
  and the libresolv primitives to parse received DNS responses.

In busybox this applet is added in 0dd3be8. In particular, this commit
introduces the variable NSLOOKUP_BIG. We set the default to true and
so nothing changes.

Signed-off-by: Nick Hainke <vincent@systemli.org>
2021-05-19 23:24:29 +08:00
Paul Spooren
7488eea635 busybox: show reproducible timestamp
On login busybox shows a timestamp per default contianing the build
date. Since the build date isn't reproducible per default this behaviour
was disabled by default via 34df4d40 "busybox: disable timestamp in
version".

This commit modifies busybox so that the printed timestamp reproducible
using SOURCE_DATE_EPOCH and therefore shouldn't be disabled anymore.

Before:

    BusyBox v1.33.1 () built-in shell (ash)

After:

    BusyBox v1.33.1 (2021-05-13 09:34:34 UTC) built-in shell (ash)

Signed-off-by: Paul Spooren <mail@aparcar.org>
2021-05-19 23:24:04 +08:00
Paul Spooren
583739d220 busybox: use $(AUTORELEASE) and SPDX
use AUTORELEASE since BusyBox is often updaten and PKG_RELEASE is not
consistently bumped. Also use SPDX license headers to be machine
readable and bump the copyright year to 2021.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2021-05-19 23:23:40 +08:00
Stijn Tintel
0f17c0b485 grub2: bump to 2.06-rc1
When building GRUB with binutils 2.35.2 or later, an error occurs due to
a section .note.gnu.property that is placed at an offset such that
objcopy needs to pad the img file with zeros. This in turn causes the
following error: "error: Decompressor is too big.".

The fix accepted by upstream patches a python script that isn't executed
at all when building GRUB with OpenWrt buildroot. There's another patch
that patches the files generated by that python script directly, but by
including it we would deviate further from upstream. Instead of doing
that, simply bump to the latest release candidate.

As one of the fixes for the CVEs causes grub to crash on some x86
hardware using legacy BIOS when compiled with -O2, filter -O2 and
-O3 out of TARGET_CFLAGS.

Fixes the following CVEs:
- CVE-2020-14372
- CVE-2020-25632
- CVE-2020-25647
- CVE-2020-27749
- CVE-2020-27779
- CVE-2021-3418
- CVE-2021-20225
- CVE-2021-20233

Runtime-tested on x86/64.

Fixes: FS#3790

Suggested-by: Dirk Neukirchen <plntyk.lede@plntyk.name>
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Acked-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2021-05-16 23:23:44 +08:00
Stijn Tintel
0efea4cc37 umdns: bump to git HEAD
777a0b service: fix compilation with GCC 10

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
2021-05-16 23:15:10 +08:00
Tianling Shen
b9aa06e432
package lean: move to LuCI feeds
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-14 23:12:28 +08:00
Tianling Shen
ec4c3d0a75
package lean: move to packages
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-14 23:02:16 +08:00
Tianling Shen
f57645200f
luci-app-ssr-plus: improve description
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-14 18:49:34 +08:00
Bob zhang
cb22ff8ea2
luci-app-ttyd auto fit iframe height
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-14 17:44:30 +08:00
Leonardo Mörlein
2a821d862c
build: introduce $(MKHASH)
Before this commit, it was assumed that mkhash is in the PATH. While
this was fine for the normal build workflow, this led to some issues if

    make TOPDIR="$(pwd)" -C "$pkgdir" compile

was called manually. In most of the cases, I just saw warnings like this:

    make: Entering directory '/home/.../package/gluon-status-page'
    bash: line 1: mkhash: command not found
    bash: line 1: mkhash: command not found
    bash: line 1: mkhash: command not found
    bash: line 1: mkhash: command not found
    bash: line 1: mkhash: command not found
    bash: line 1: mkhash: command not found
    bash: line 1: mkhash: command not found
    bash: line 1: mkhash: command not found
    [...]

While these were only warnings and the package still compiled sucessfully,
I also observed that some package even fail to build because of this.

After applying this commit, the variable $(MKHASH) is introduced. This
variable points to $(STAGING_DIR_HOST)/bin/mkhash, which is always the
correct path.

Signed-off-by: Leonardo Mörlein <me@irrelefant.net>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-13 22:49:42 +08:00
Nick Hainke
423f86bc29
busybox: update to 1.33.1
Remove backports:
- 001-backport1330fix-ash-make-strdup-copy.patch
- 002-backport1330fix-traceroute.patch
- 005-backport-CVE-2021-28831.patch

Remove upstreamed:
- 010-fix-wrong-variable.patch

Signed-off-by: Nick Hainke <vincent@systemli.org>
[don't use $(AUTORELEASE) for now]
Signed-off-by: Paul Spooren <mail@aparcar.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-13 22:43:03 +08:00
Perry Melange
a2b78a50b6 busybox: add SRV support to nslookup_lede.c patch
Add support for querying and parsing SRV DNS records to nslookup_lede.c

This patch is based on http://lists.busybox.net/pipermail/busybox/2019-June/087359.html

Signed-off-by: Perry Melange <isprotejesvalkata@gmail.com>
[reword subject, bump PKG_RELEASE]
Signed-off-by: Paul Spooren <mail@aparcar.org>
2021-05-12 23:28:04 +08:00
Jo-Philipp Wich
5ef4117f4c base-files: shinit: properly handle dashes in service names
Fixes: FS#3801
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2021-05-12 23:27:43 +08:00
Alexander Egorenkov
aecd3a3c05 build: fix opkg install step for large package selection
When the list of packages to be installed in a built image exceeds a certain
number, then 'opkg install' executed for target '$(curdir)/install' in
package/Makefile fails with: /usr/bin/env: Argument list too long.

On Linux, the length of a command-line parameter is limited by
MAX_ARG_STRLEN to max 128 kB.

* https://elixir.bootlin.com/linux/latest/source/include/uapi/linux/binfmts.h#L15
* https://www.in-ulm.de/~mascheck/various/argmax/

To solve the problem, store the package list being passed to 'opkg install'
in a temporary file and use the shell command substitution to pass the
content of the file to 'opkg install'. This guarantees that the length of
the command-line parameters passed to the bash shell is short.

The following bash script demonstrates the problem:
----------------------------------------------------------------------------
count=${1:-1000}

FILES=""
a_file="/home/egorenar/Repositories/openwrt-rel/bin/targets/alpine/generic/packages/base-files_1414-r16464+19-e887049fbb_arm_cortex-a15_neon-vfpv4.ipk"

for i in $(seq 1 $count); do
	FILES="$FILES $a_file"
done

env bash -c "echo $FILES >/dev/null"
echo "$FILES" | wc -c
----------------------------------------------------------------------------

Test run:
----------------------------------------------------------------------------
$ ./test.sh 916
130989
$ ./test.sh 917
./test.sh: line 14: /bin/env: Argument list too long
131132
----------------------------------------------------------------------------

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
[reword commit subject]
Signed-off-by: Paul Spooren <mail@aparcar.org>
2021-05-12 23:27:23 +08:00
Keith T. Garner
470cb5d931 kernel: add kmod-leds-uleds
The allows userspace LEDs to be created and controlled. This can be useful
for testing triggers and can also be used to implement virtual LEDs.

Signed-off-by: Keith T. Garner <kgarner@kgarner.com>
[squash fixup commit and improve option wording]
Signed-off-by: Paul Spooren <mail@aparcar.org>
2021-05-12 23:26:38 +08:00
Tianling Shen
3bfeca67fb
luci-app-cpufreq: fix tweak for ipq40xx/ipq806x
Reported-by: AmadeusGhost <amadeus@immortalwrt.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-12 21:26:55 +08:00
Tianling Shen
192721fc51
luci-app-cpufreq: add tweak for sunxi/cortexa53
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-12 04:18:20 +08:00
Tianling Shen
48afed7aef
luci-proto-bonding: remove useless files
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-11 22:31:03 +08:00
selboo
14b8674b49
vsftpd-alt: fix ftp banner doesn't work with LuCI
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-10 03:13:04 +08:00
Tianling Shen
f34b6af4e5
luci-app-cpufreq: increase boot order
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-10 02:57:49 +08:00
Tianling Shen
4ee39f0bf2
shadowsocksr-libev: reorder patches
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-10 02:39:29 +08:00
Tianling Shen
930cf44a05
luci-app-ssr-plus: remove naiveproxy from default dependencies
Only a few people use this.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-10 02:29:58 +08:00
Tianling Shen
eeb32ddee5
luci-app-ssr-plus: update dependencies
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-10 02:22:16 +08:00
Tianling Shen
d6c9ef9ae1
shadowsocksr-libev: add support for read listening mode from config
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-10 02:16:47 +08:00
Tianling Shen
0c4a35392b
luci-app-cpufreq: enable uci silent mode
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-09 21:56:25 +08:00
Tianling Shen
ff599c9d56
luci-app-cpufreq: add default tweak for firstboot
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-09 21:50:22 +08:00
Tianling Shen
6a3f101bc0
kernel: sysctl: increase max conns limit to 65536
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-09 20:01:58 +08:00
Thomas Richard
942f1d2aed uqmi: fix network registration loop
With some debug in qmi.sh using following patch, some errors are visible
in the registration step
@@ -29,6 +29,7 @@ proto_qmi_init_config() {
 }

 proto_qmi_setup() {
+       set -x
        local interface="$1"
        local dataformat connstat plmn_mode mcc mnc
        local device apn auth username password pincode delay modes pdptype
@@ -224,6 +225,8 @@ proto_qmi_setup() {
                fi
        done

+       registration=$(uqmi -s -d "$device" --get-serving-system)
+
        [ -n "$modes" ] && uqmi -s -d "$device" --set-network-modes "$modes" > /dev/null 2>&1

        echo "Starting network $interface"

During the boot of the system, modem could not start automatically its
network registration.
netifd: wan (9235): + echo 'Waiting for network registration'
netifd: wan (9235): Waiting for network registration
netifd: wan (9235): + local 'registration_timeout=0'
netifd: wan (9235): + uqmi -s -d /dev/cdc-wdm1 --get-serving-system
netifd: wan (9235): + grep '"searching"'
netifd: wan (9235): + uqmi -s -d /dev/cdc-wdm1 --get-serving-system
netifd: wan (9235): + registration='{"registration":"not_registered","plmn_mcc":208,"plmn_mnc":20,"plmn_description":"","roaming":true}'
netifd: wan (9235): + '[' -n  ]
netifd: wan (9235): + echo 'Starting network wan'

As the while loop checks only "searching" pattern, uqmi.sh script quits
searching loop and continues whereas the modem is not registered

Other issue, after X seconds modem stops searching.
netifd: wan (9213): + uqmi -s -d /dev/cdc-wdm0 --get-serving-system
netifd: wan (9213): + grep '"searching"'
netifd: wan (9213): + '[' -e /dev/cdc-wdm0 ]
netifd: wan (9213): + '[' 3 -lt 0 -o 0 '=' 0 ]
netifd: wan (9213): + let registration_timeout++
netifd: wan (9213): + sleep 1
netifd: wan (9213): + uqmi -s -d /dev/cdc-wdm0 --get-serving-system
netifd: wan (9213): + grep '"searching"'
netifd: wan (9213): + uqmi -s -d /dev/cdc-wdm0 --get-serving-system
netifd: wan (9213): + registration='{"registration":"not_registered"}'
netifd: wan (9213): + '[' -n  ]
netifd: wan (9213): + echo 'Starting network wan'
netifd: wan (9213): Starting network wan

If registration_timeout is not expired, registration can be restarted

Signed-off-by: Thomas Richard <thomas.richard@kontron.com>
Tested-by: Florian Eckert <fe@dev.tdt.de>
2021-05-09 00:37:14 +08:00
Tianling Shen
ed8b277f27 Revert "kernel: video: add multimedia-input driver"
However, this commit still has some issues.
2021-05-09 00:33:56 +08:00
Tianling Shen
fe01c9e9e5
Merge branch '1806-mt76-updates' into openwrt-18.06-dev
Compile-tested-on: ramips
Runtime-tested-on: mt7621 newifi-d2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-07 20:04:02 +08:00
Lucian Cristian
dabe73bc08
kernel: video: add multimedia-input driver
Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>
[rebase commit, apply review recommendations]
Signed-off-by: AmadeusGhost <amadeus@immortalwrt.org>
[rebase commit, only apply generic part]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-07 18:44:41 +08:00
David Bauer
72ff571876
mt76: update to the latest version
5c768de mt76: mt76x0: disable GTK offloading

Signed-off-by: David Bauer <mail@david-bauer.net>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-07 18:36:35 +08:00
David Bauer
6680b7efac
mt76: update to the latest version
4ba1709 mt76: mt7603: add additional EEPROM chip ID

Signed-off-by: David Bauer <mail@david-bauer.net>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-07 18:36:31 +08:00
Mattraks
4690eb0097
luci-app-ssr-plus: add vless gRPC support
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-07 17:32:48 +08:00
Tianling Shen
b1723be7bf
luci-app-ssr-plus: add basic ss server support
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
Co-authored-by: Mattraks <mattraks@gmail.com>
2021-05-07 17:16:27 +08:00
Tianling Shen
0aaa145e34
qt: add missing dependencies
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-05 22:27:36 +08:00
AmadeusGhost
d887cecd15 dnsmasq: refresh patches 2021-05-05 21:08:03 +08:00
Alan Swanson
37590aa02a dnsmasq: Update to version 2.85
Fixes issue with merged DNS requests in 2.83/2.84 not being
retried on the firsts failed request causing lookup failures.

Also fixes the following security problem in dnsmasq:
* CVE-2021-3448:
  If specifiying the source address or interface to be used
  when contacting upstream name servers such as:
  server=8.8.8.8@1.2.3.4, server=8.8.8.8@1.2.3.4#66 and
  server=8.8.8.8@eth0 then all would use the same socket
  bound to the explicitly configured port. Now only
  server=8.8.8.8@1.2.3.4#66 will use the explicitly
  configured port and the others random source ports.

Remove upstreamed patches and update remaining patch.

Signed-off-by: Alan Swanson <reiver@improbability.net>
[refreshed old runtime support patch]
Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2021-05-05 21:05:57 +08:00
Hauke Mehrtens
842d799bb4
mac80211: Update to backports version 4.19.189-1
The removed patches were applied upstream.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-05 16:29:30 +08:00
lean
669bb7ac30
luci-app-kodexplorer: fix libxml dependence
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-05 16:25:45 +08:00
Hauke Mehrtens
0107a192d5
ltq-dsl-base: Make package nonshared to fix image builder
This package depends on the lantiq target and is only build for that
target. A normal package would be build by the SDK builder probably
under a different target and then this package will not be selected.
Mark it as nonshared to build it when the lantiq target gets build.

Fixes: FS#3773, FS#3774
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-05 16:25:18 +08:00
Hauke Mehrtens
71e1901781 busybox: backport fix for CVE-2021-28831
This backports a fix for the low priority CVE-2021-28831:
  decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit
  on the huft_build result pointer, with a resultant invalid free or
  segmentation fault, via malformed gzip data.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2021-05-05 12:00:30 +08:00
Álvaro Fernández Rojas
cf553d1b84
bcm27xx-gpu-fw: update to latest version
This is needed to add support for CM4 and RPI 400.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-05 01:18:01 +08:00
Tianling Shen
9433ca3567
luci-app-ssr-plus: drop ss stream-cipher support
They're totally unsafe, and deprecated in new designs.
All of your data encrypted in these way could be replayed and decrypted.

For details, see:
https://shadowsocks.org/assets/whitepaper.pdf
https://phuker.github.io/shadowsocks-active-probing.html
https://github.com/edwardz246003/shadowsocks

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-05 01:12:38 +08:00
lean
795397e7dd
luci-app-kodexplorer: fix php7-mod-dom support
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-04 22:22:02 +08:00
kuma
a47038d83f
luci-app-ssr-plus: bug fixes
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-03 17:18:46 +08:00
Tianling Shen
f75fc2554f
luci-app-ssr-plus: correct protocol place for ss
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-03 15:45:26 +08:00
greekstreet
703b0e04f6
luci-app-ssr-plus: make it compatible with procps-ng-ps
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-05-03 15:44:14 +08:00
AmadeusGhost
705dd55888 sunxi: nanopi-r1s-h5: remove non-existent usb node
(cherry picked from commit b8ec046701)
Signed-off-by: AmadeusGhost <amadeus@jmu.edu.cn>
2021-05-02 23:22:02 +08:00
Vieno Hakkerinen
6d369ccdb7 kernel: netdev: add qlcnic
Add driver for QLogic QLE8240 and QLE8242 Converged Ethernet devices.

Signed-off-by: Vieno Hakkerinen <vieno@hakkerinen.eu>
2021-05-01 11:35:58 +08:00
AmadeusGhost
4177c3c85d r8168: switch to use git source
There's no reason to keep the src here.
2021-04-28 23:51:49 +08:00
AmadeusGhost
594fc11cfc rtl8189es: update to latest git HEAD 2021-04-28 23:50:30 +08:00
Tianling Shen
9cceb412d7
v2ray: remove package
This is replaced by v2ray-core.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-27 20:52:14 +08:00
Beginner
b69b82b70c
v2ray-core: update to 4.38.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-27 00:17:25 +08:00
Tianling Shen
d391739dcd
UnblockNeteaseMusic-Go: Update to 0.2.10
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-26 23:36:11 +08:00
Mattraks
e30252cace
luci-app-ssr-plus: allow run socks5 server independently
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-26 17:38:59 +08:00
SuLingGG
1c61d2946d cypress-firmware:remove outdate firmwares
Lists:
 cypress-firmware-4359-pcie
 cypress-firmware-4359-sdio
 cypress-firmware-89459-pcie
2021-04-25 23:18:21 +08:00
João Henriques
fe67fade15 dnsmasq: add ignore hosts dir to dnsmasq init script
When running multiple instances of dnsmasq, for example one being for the lan
and another for a guest network, it might not be desirable to have the same dns names
configured in both networks

Signed-off-by: João Henriques <joaoh88@gmail.com>
2021-04-25 23:15:49 +08:00
Hans Dedecker
f752caf745 nat46: update to git HEAD
9df230a Zero checksum handling  (#25)
7688102 skip generating a UDP4 csum if the UDP6 csum is 0 and zero_csum_pass is set
4a9e4b1 zero csum: avoid calling the checksum adjustment function if udp csum is zero
2de14c5 add a module argument to skip checksum adjust for UDP if checksum is zero

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2021-04-25 23:15:01 +08:00
Tony Ambardar
2bca9fa86d bpftools: update to v5.11.16, simplify make
Update to the latest stable upstream version.

Drop unneeded make variables to remove redundant assignments seen during
invocation of package Makefile.

Also remove the following patch now included upstream:

  * 200-fix-install-param-order-on-macos.patch

Compile and run-tested on malta/mips32be, using bpftool directly and also
libbpf (linked with tc) to inspect and load simple eBPF programs.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-04-25 23:14:20 +08:00
Tony Ambardar
fbdf2805af bpftools: fix feature override for masking clang
Rename feature variable clang-bpf-global-var following upstream changes.
This restores the HAVE_CLANG feature override and should avoid rare build
errors where a recent host clang and BTF-enabled host kernel are present.

Fixes: 23be333401 ("bpftools: update to 5.10.10")
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-04-25 23:13:56 +08:00
Chen Minqiang
51588fbdc3 kernel: add kmod-ipvlan support
This kmod is similar to macvlan with the difference being that the
endpoints have the same mac address.

It is useful on cloud where only one mac address allowed on port,
where macvlan not works but ipvlan would.

One use case is where multiple IPs and gateways assign on one net port

Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
2021-04-22 23:16:35 +08:00
Tony Ambardar
7e1b5e281a iproute2: avoid unneeded compiles to speed building
Skip building Makefile targets that aren't packaged: tipc, dcb, ifstat,
rtacct, lnstat, and man. Also, only compile targets needed for the current
build variant i.e. don't compile 'tc' when building an 'ip' variant and
vice versa.

These changes reduce typical build times by over 30%:
  $ make package/iproute2/clean && time make -j8 package/iproute2/compile
  (old)
  ...
  real    2m24.985s
  user    3m12.537s
  sys     0m26.677s

  (new)
  ...
  real    1m36.945s
  user    2m8.734s
  sys     0m20.046s

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-04-22 23:15:31 +08:00
Mattraks
46661ede4b
luci-app-ssr-plus: bump to 183-11
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-21 15:52:11 +08:00
ricksuzade-maker
3afb47ed42
wireguard-tool: Update to 1.0.20210315
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-20 18:07:11 +08:00
ricksuzade-maker
a4986426be
wireguard: Update to 1.0.20210219
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-20 18:06:23 +08:00
EnnawYang
1497fcddf9
cypress-firmware: bump to v5.4.18-2021_0114
Ref: https://community.cypress.com/t5/Wi-Fi-Bluetooth-for-Linux/Cypress-Linux-WiFi-Driver-Release-FMAC-2021-01-14/m-p/268899
2021-04-19 17:00:03 +08:00
AmadeusGhost
d3e5668943 autocore-arm: add mt76 temperature for hiwifi c526a
Ref: c7f82146ef
2021-04-19 00:04:43 +08:00
DENG Qingfang
7558d7817f kernel/modules: move act_gact into kmod-sched-core
As the name suggests, act_gact has the generic actions such as dropping
and accepting packets, so move it into kmod-sched-core.

Signed-off-by: DENG Qingfang <dqfext@gmail.com>
2021-04-18 23:39:46 +08:00
bluskai
0d217b28ef
frp: Update to 0.36.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-18 22:27:50 +08:00
EnnawYang
c77613a4d6 cypress-firmware: bump to v5.4.18-2020_0925
Ref: https://community.cypress.com/t5/Resource-Library/Cypress-Linux-WiFi-Driver-Release-FMAC-2020-09-25/ta-p/251089
2021-04-18 18:28:19 +08:00
Álvaro Fernández Rojas
2e3f0517e1 cypress-firmware: add proper package conflicts
There are linux firmwares packages for 43362, 43430 and 43455 which shouldn't
be installed at the same time as Cypress firmwares.

Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2021-04-18 18:25:09 +08:00
Beginner
fb0fd5e2fa
v2ray-core: update to 4.38.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-17 21:23:27 +08:00
Tianling Shen
dc9a1187b9
luci-app-ssr-plus: move ss-rust hack to configuration
Finally fixed this...

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-17 00:59:37 +08:00
badgv
1687ea5cfc
dnsforwarder: fix dnsmasq configuration modification logic
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-17 00:03:22 +08:00
Rosen Penev
01b72fdea1 libsemanage: fix pkgconfig paths
The pkgconfig file currently points to host paths.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-04-15 23:18:53 +08:00
Koen Vandeputte
a3f306c549 mac80211: backport upstream fixes
Refreshed all patches.
Includes all fixes up to 4.19.184

Signed-off-by: Koen Vandeputte <koen.vandeputte@citymesh.com>
2021-04-14 23:15:26 +08:00
Hauke Mehrtens
662a7b3aa5 mac80211: Remove 357-mac80211-optimize-skb-resizing.patch
This patch was adapted to apply on top of some stable changes, but we
are not sure if this is working correctly. Felix suggested to remove
this patch for now.

Fixes: 0a59e2a76e ("mac80211: Update to version 4.19.161-1")
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2021-04-14 23:15:08 +08:00
Rafał Miłecki
bf1bbe4a0b kernel: limit crypto-hw-ccp to the x86
CRYPTO_DEV_CCP depends on X86 or ARM64
CRYPTO_DEV_CCP_DD depends on CPU_SUP_AMD or ARM64

Compiling this driver makes sense for x86 mainly. If one day support for
ARM64 board with AMD Secure Processor gets added this package may be
updated.

Trying to build this package on bcm4908 was causing:
ERROR: module 'build_dir/target-aarch64_cortex-a53_musl/linux-bcm4908_generic/linux-5.4.110/drivers/crypto/ccp/ccp-crypto.ko' is missing.

Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2021-04-14 23:12:05 +08:00
Rafał Miłecki
9d03842e2c kernel: crypto: format "crypto-hw-ccp" dependencies
Use multiples lines for better readability and sort lines.

Suggested-by: Stijn Tintel <stijn@linux-ipv6.be>
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
2021-04-14 23:11:15 +08:00
Tianling Shen
c4436cbb56
luci-app-ssr-plus: re-append protocol arg for ss-rust
Fixes: 4fdf4ff65a ("luci-app-ssr-plus: move shadowsocks UDP argument to configuration")

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-13 14:05:38 +08:00
Beginner
ad2021a174
v2ray-core: update to 4.37.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-12 23:46:09 +08:00
Hauke Mehrtens
b0f4576423
valgrind: Fix compile problem with MIPS soft float
valgrind does not compile any more when using a GCC 10 for MIPS with
soft float. Just remove the parts which are generating assembler which
would not work.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-12 20:21:28 +08:00
Tianling Shen
4fdf4ff65a
luci-app-ssr-plus: move shadowsocks UDP argument to configuration
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-12 20:17:59 +08:00
swxk
5e528d43fc
luci-app-ssr-plus: fix netflix shunt bug
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-12 19:36:16 +08:00
Daniel Golle
b7237dd61a umdns: add missing syscalls to seccomp filter
Looks like 'openat', 'pipe2' and 'ppoll' are now needed, possibly due
to changes on libraries used by umdns now using slightly different
calls.

Found using
/etc/init.d/umdns trace
now use umdns, ie. cover all ubus call etc., then
/etc/init.d/umdns stop
find list of syscalls traced in /tmp/umdns.*.json

Fixes: FS#3355 ("UMDNS: does not start on master with seccomp")
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-04-11 23:23:25 +08:00
Mattraks
821d4bba4d
luci-app-ssr-plus: Update uTLS fingerprints
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-11 02:15:53 +08:00
Tianling Shen
f703f8937c
lienol: move LuCI apps to luci feed
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-10 14:37:37 +08:00
Tianling Shen
6214af00d0
lienol: move packages to packages feed
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-10 14:26:35 +08:00
lichao0223
cc2d67aa77
uugamebooster: Update to 2.10.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-10 13:47:27 +08:00
Beginner
6fa070f11a
v2ray-core: update to 4.37.2 2021-04-09 23:29:46 +08:00
AmadeusGhost
d6dd580d60 rtl8812au-ac: update to latest git HEAD 2021-04-08 23:29:30 +08:00
Eason
552d33e65c
luci-app-zerotier: fix iptables bug
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-06 20:52:30 +08:00
Stijn Tintel
949e9a6101
lldpd: further size reductions
Size difference on mips_4kec:
Before: 120196
After:  120006

Closes https://github.com/openwrt/openwrt/pull/3823

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Suggested-by: Lucian Cristian <lucian.cristian@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-06 20:50:24 +08:00
Stijn Tintel
b737530a49
lldpd: enable LTO
Size difference on mips_4kec:
W/o LTO: 139674
W/ LTO:  120196

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Suggested-by: Lucian Cristian <lucian.cristian@gmail.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-06 20:50:20 +08:00
Stijn Tintel
69a15b59c5
lldpd: bump to 1.0.9
Contains fixes related to CVE-2020-27827.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-06 20:50:05 +08:00
Stijn Tintel
b7f06252e3
lldpd: add libcap dependency
Now that libcap is in OpenWrt base, we can drop our custom patch to
disable libcap support and have lldpd depend on it instead. This will
allow the monitor process to drop its privileges instead of running as
root, improving security.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-06 20:49:59 +08:00
Stijn Tintel
d992dfb22a
libcap: bump to 2.48
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Acked-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-06 20:49:52 +08:00
Stijn Tintel
01601a0bf6
libcap: drop invalid copyright header
Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Acked-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-06 20:49:43 +08:00
Stijn Tintel
2bf1f6771d
libcap: import from packages feed
Having libcap in OpenWrt base allows us to enable libcap support in
other packages in base.

In lldpd, this would allow the monitor process to drop its privileges
instead of running as root, improving security. It will also allow us to
drop our patch to disable libcap.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
Acked-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-06 20:49:35 +08:00
Beginner
b740d4c1f7
v2ray-core: update to 4.37.1 2021-04-06 10:09:57 +08:00
Tianling Shen
282666dd83
uugamebooster: keep config when upgrade
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-04 20:38:52 +08:00
Rui Salvaterra
8bdc2362e8 zram-swap: bail out early if the kernel doesn't support swap
Since KERNEL_SWAP is only enabled by default for !SMALL_FLASH targets, we need
to check if the current kernel supports swap before trying to configure
zram-swap, as opkg can't check for kernel dependencies.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2021-04-04 12:18:54 +08:00
Rui Salvaterra
2515f96050 zram-swap: clean up the makefile
Break dependencies into separate lines, to improve the readability. Trim
trailing whitespace.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>
2021-04-04 12:18:35 +08:00
Alexander Egorenkov
2c898cfb59 base-files: fix status display command
If service() is called w/o parameter then the status display for services
with multiple instances is incorrect. E.g. samba4 or wpad have 2 instances.

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>
2021-04-04 12:10:30 +08:00
Tony Ambardar
c5ad183dde iproute2: fix libbpf detection with NLS enabled
Upstream iproute2 detects libbpf using a one-line $CC test-compile, which
normally ignores LDFLAGS. With NLS enabled however, LDFLAGS includes an
"rpath-link" linker option needed to resolve libintl.so. Its absence
causes both the compile and libbpf detection to fail:

  ld: warning: libintl.so.8, needed by libbpf.so, not found (try using
      -rpath or -rpath-link)
  ld: libelf.so.1: undefined reference to `libintl_dgettext'
  collect2: error: ld returned 1 exit status

Fix this by directly including $LDFLAGS in the test-compile command.

Reported-by: Ian Cooper <iancooper@hotmail.com>
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-04-04 12:09:59 +08:00
Tony Ambardar
c6bce19b09 binutils: fix libbfd missing DSO dependency if NLS enabled
The libbfd package definition uses $(ICONV_DEPENDS) and $(INTL_DEPENDS)
but links against neither, leading to libbfd detection failures in other
packages (e.g. bpftools) and on-target relocation problems with libintl.so:

  root@OpenWrt:/# ldd /usr/lib/libbfd.so
        ldd (0x77db6000)
        libc.so => ldd (0x77db6000)
        libgcc_s.so.1 => /lib/libgcc_s.so.1 (0x77c6d000)
  Error relocating /usr/lib/libbfd.so: libintl_dgettext: symbol not found

Add NLS-conditional linking of "libintl" to fix this. Also remove libbfd
package dependency $(ICONV_DEPENDS) which is not used during building or
linking.

Tested with QEMU on malta/be32, after building all packages from binutils,
bpftools and iproute2, using different libc options musl and glibc.

Fixes: 08e8175696 ("binutils: use nls.mk to fix libbfd link errors in
other packages")
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-04-04 12:09:37 +08:00
Tony Ambardar
54a9b2e5ab bpftools: drop unneeded libintl linking for NLS
There is no direct linking of libintl from bpftools, only secondary linking
through libelf, so remove "-lintl" from TARGET_LDFLAGS.

Fixes: 5582fbd613 ("bpftools: support NLS, fix ppc build and update to 5.8.9")
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-04-04 12:09:18 +08:00
lllrrr2
6c146b7ef3
trojan-go: Update to 0.8.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-04 10:25:46 +08:00
Beginner
cda641ce13
v2ray: update to 4.37.0 2021-04-03 10:18:26 +08:00
Jo-Philipp Wich
1cc103bdd2 firewall4: update to latest Git HEAD
29fba84 tests: expand testing
6bf82a8 fw4.uc: fix family test functions
25b2c7d fw4.uc: fix parsing boolean "0" values
694d428 rule.uc: fix redundant whitespace in rules without target
7f69fbb ruleset.uc: reduce empty lines in output
8f8e42c fw4.uc: gracefully handle missing defaults section
25287af treewide: remove ucode module preloading
802b685 fw4.uc: remove upvalue caching

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2021-04-01 23:21:02 +08:00
Jo-Philipp Wich
11d5b1444b ucode: update to latest Git HEAD
973cc6c compiler: actually expand block scope fix to for/while alt syntax
97bf297 compiler: ensure that alternative if/for/while syntax has own block scope
f0e2a64 tests: add missing test case for fixed switch codegen

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2021-04-01 23:20:36 +08:00
Hans Dedecker
ec709c35a4 firewall: update to latest git HEAD
a4355a6 firewall3: clean up the flow table detection logic
edd0dc5 firewall3: create a common helper to find strings in files

Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2021-04-01 23:20:12 +08:00
dwj0
6c54c00b15
luci-app-n2n_v2: add n2n supernode ports and rules
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-04-01 18:07:03 +08:00
Tianling Shen
3e63e4724f
phicomm-k3screenctrl: move to packages feed
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-31 23:56:27 +08:00
Tianling Shen
6c5b7ba578
open-app-filter: move to pacakges feed
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-31 23:55:40 +08:00
xiaorouji
c04d124589
luci-app-passwall: bump to 4-19
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-31 23:26:40 +08:00
Tianling Shen
d70ee37f48
ntlf9t: move all LuCI apps to luci feed
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-31 23:10:38 +08:00
Tianling Shen
6f85331c74
luci-app-kodexplorer: fix dependencies
Renamed `nginx` to `nginx-ssl`.

Fixes: #335

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-30 23:45:08 +08:00
Paul Spooren
1a4e8bc3f1 ncurses: add screen-256color terminfo
The terminfo is required by the popular terminal multiplexer screen and
tmux, offer it by default as the size impact is minimal with 885 Bytes.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2021-03-30 23:13:57 +08:00
Paul Spooren
231e4dfe4d ncurses: split long line of supported terminfo
The terminfo files were all in one row which is terrible to read.
Split them over multiple lines to improve readability.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2021-03-30 23:13:32 +08:00
Jo-Philipp Wich
a1adf0b141 ucode: update to latest Git HEAD
aa9621d compiler: rework switch statement code generation
b5f0de1 vm: add trace mode instruction dump output fixes
0341d64 vm: fix another for-loop memory leak
00d9419 vm: fix further memory leaks in trace mode
20a3763 vm: fix loop variable memory leak in NEXTK/NEXTKV instruction
9a6ef2b lib: prevent use-after-free after uc_shift()
03f1324 object: free prototype object when registering existing ressource type
b3d758b compiler: fix for/break miscompilation
86e3970 lib: fix value refcount of uc_unshift() return value
fe464ea run_tests.sh: allow passing tests to run as arguments
091ae1b compiler: fix another try/catch miscompilation
fcedb19 lib: fix passing uninitialized memory to sigprocmask()
0d0357d vm: fix leaking source context strings in trace mode
7a41fb3 lib: use execvp() in system()

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2021-03-30 23:10:08 +08:00
Tony Ambardar
c72855895d firewall3: update to latest git HEAD
This includes several improvements and fixes:

  61db17e rules: fix device and chain usage for DSCP/MARK targets
  7b844f4 zone: avoid duplicates in devices list
  c2c72c6 firewall3: remove last remaining sprintf()
  12f6f14 iptables: fix serializing multiple weekdays
  00f27ab firewall3: fix duplicate defaults section detection
  e8f2d8f ipsets: allow blank/commented lines with loadfile
  8c2f9fa fw3: zones: limit zone names to 11 bytes
  78d52a2 options: fix parsing of boolean attributes

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-30 23:09:45 +08:00
Tianling Shen
6e0750dcce
autocore-x86: fix link to project
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-30 03:47:47 +08:00
Tianling Shen
20ce1ca321
autocore: add link to project
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-30 01:08:55 +08:00
klever1988
cb9b44834b
luci-app-xlnetacc: update to 1.0.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-30 01:05:46 +08:00
lichao0223
97fee2843e
uugamebooster: Update to 2.9.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-30 01:05:21 +08:00
Jarao
724089c426
luci-app-unblockmusic: fix can't change provider in go version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-30 01:04:38 +08:00
Tianling Shen
c70c2b56a5
ntlf9t: move packages to packages feed
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-29 23:13:57 +08:00
Tianling Shen
08ca6f7816
Package ntlf9t: cleanup Makefiles
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-29 22:59:37 +08:00
Tianling Shen
a7b1bdaf67
qBittorrent: Update to 4.3.4.10
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-28 15:07:30 +08:00
Eneas U de Queiroz
a361b749b7 openssl: bump to 1.1.1k
This version fixes 2 security vulnerabilities, among other changes:

 - CVE-2021-3450: problem with verifying a certificate chain when using
   the X509_V_FLAG_X509_STRICT flag.

 - CVE-2021-3449: OpenSSL TLS server may crash if sent a maliciously
   crafted renegotiation ClientHello message from a client.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2021-03-27 11:20:44 +08:00
xiaorouji
c08fecad10
luci-app-passwall: bump to 4-18
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-26 21:21:23 +08:00
AmadeusGhost
1e603d80f2 openvpn-easy-rsa: remove duplicate package 2021-03-26 20:16:42 +08:00
AmadeusGhost
66ea9d183d ndpi-netfilter: remove outdated package 2021-03-26 20:15:10 +08:00
Tony Ambardar
166f2bd670 elfutils: enable building with MIPS16
Building with MIPS16 was disabled in 2013 due to an issue with GCC TLS:
https://dev.archive.openwrt.org/ticket/13572. But after the problematic
GCC version was retired, this change wasn't revisited.

Re-enable MIPS16 builds to reduce average elfutils library sizes ~10%.
This was compile-tested on malta/mips32be and malta/mips32le, and linked
with iproute2 for run-testing. Package sizes follow:

Library  MIPS16:=0  MIPS16:=1
-------  ---------  ---------
libelf1    43217      37492
libasm1    12481      11658
libdw1    229723     205793

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-26 20:00:31 +08:00
Daniel Golle
d81d24333a mwlwifi: add PKG_FLAGS:=nonshared
This should fix the problem of mwlwifi-firmware-* not being found
when using the ImageBuilder.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-25 23:28:47 +08:00
Daniel Golle
3118dbb833 ucode: fix PKG_MIRROR_HASH
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-25 23:28:22 +08:00
xiaorouji
8ffac602da
luci-app-passwall: sync with upstream source
Co-authored-by: badgv <45598380+badgv@users.noreply.github.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-24 00:52:40 +08:00
Tianling Shen
e02f8393eb
brcmfmac4366c0-firmware-vendor: move to firmware
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 22:55:32 +08:00
Tianling Shen
0a70e73dab
luci-app-turboacc: import from LuCI
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 22:53:17 +08:00
Tianling Shen
7ad4177396
luci-app-qos-gargoyle: import from core
This is only available for this branch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 18:25:01 +08:00
Tianling Shen
8704d4af19
ctcgfw: move LuCI apps to luci feed
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 17:55:48 +08:00
Tianling Shen
b335ab8032
baidupcs-web/iptvhelper: move to packages
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 17:51:26 +08:00
Tianling Shen
fbc552569f
treewide: move kernel pacakges from ctcgfw to kernel
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 17:46:58 +08:00
Tianling Shen
7b67123d7f
treewide: move some of ctcgfw packages from core to pacakges feed
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 17:29:33 +08:00
Tianling Shen
49e3204f02
Revert "treewide: add mirrors for GitHub Codeload"
This reverts commit 9796619efc.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 16:58:11 +08:00
Tianling Shen
66a13ba4b4
Revert "treewide: add mirrors for GitHub Archives"
This reverts commit 19980fd5b9.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 16:58:11 +08:00
Mauri Sandberg
40dbdcba8c packages: kernel: add gpio-nxp-74hc153
NXP 74HC153 is a GPIO expander. Its original source cide sits in ar71xx
architecture tree. It has been slightly modified to get GPIO pin
configuration from the device tree rather than a MACH file.

 Changes to the source file:
  - Remove struct nxp_74hc153_config
  - in nxp_74hc153_probe(), fetch GPIO configuration from device tree
  - allow GPIO framework decide the base number by passing -1 to it
  - remove support for kernel versions below 4.5.0
  - add OF device compatibility string

 Create a package for inclusion in image.

References: https://lore.kernel.org/linux-gpio/545111184.50061.1615922388276@ichabod.co-bxl/
Signed-off-by: Mauri Sandberg <sandberg@mailfence.com>
[added link to driver usptreaming work in progress]
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2021-03-23 11:26:20 +08:00
Jan Pavlinec
632b306c50 igmpproxy: remove package
Moved to packages repo because it was considered
non-essential for most router configurations.

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
[shorten commit title]
Signed-off-by: Adrian Schmutzler <freifunk@adrianschmutzler.de>
2021-03-23 11:22:21 +08:00
Florian Eckert
ea5c570a76 base-files: add logging for configuration import
Make sysupgrade backup import more verbose.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-03-23 11:19:00 +08:00
Tianling Shen
fa4d6e9e0b
Revert "Package ctcgfw: use package-immortalwrt.mk"
This reverts commit 36c9fc3bda.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-23 09:26:08 +08:00
Tianling Shen
cdb36b7846
iptables: remove dummy cgroup package
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-22 22:36:08 +08:00
Tianling Shen
36c9fc3bda
Package ctcgfw: use package-immortalwrt.mk
Moved all duplicate parts to a single .mk file

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-22 21:56:03 +08:00
Tianling Shen
ce3595a8ba
iptables: drop iptables-mod-cgroup
This was included in iptables-mod-extra already.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-22 21:40:48 +08:00
Tianling Shen
cf0bd81aff
netfilter: drop kmod-ipt-cgroup
This was included in ipt-extra already.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-22 17:05:47 +08:00
xiaorouji
1076688f9d
luci-app-passwall: sync with upstream source
Co-authored-by: lededev <30518126+lededev@users.noreply.github.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-22 16:53:28 +08:00
AmadeusGhost
1711018763 filebrowser: update to 2.13.0
Fix: #326
2021-03-20 12:30:22 +08:00
Philip Prindeville
d9053b1c6c libnfnetlink: quote $(FPIC) on command line
When $(FPIC) gets expanded on the command line (for instance
when setting environment variables for libtool, configure, or
make) we can't count on it not needing quoting (i.e. it could
contain multiple flags separated with spaces).

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
2021-03-20 11:56:16 +08:00
Daniel Golle
a148529eae umdns: add syscalls needed on Aarch64
Now that ujail supports seccomp also on Aarch64, add missing syscall
'fstat' to the list of allowed syscalls.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-20 11:55:52 +08:00
Jo-Philipp Wich
058f5e44dd firewall4: introduce package
This commit introduces firewall4, an nftables based reimplementation of the
UCI iptables firewall.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2021-03-20 11:54:00 +08:00
Jo-Philipp Wich
a5e051407c ucode: introduce package
This commit introduces ucode, a tiny template processor utilizing a syntax
closely resembling ECMA Script for embedded script blocks.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2021-03-20 11:53:36 +08:00
Tony Ambardar
7289665dad iproute2: separate tc into tiny and full variants
This change was investigated previously [1] but not deemed necessary. With
the recent addition [2] of modern BPF loader support, however, tc gained
dependencies on libelf and libbpf, with a larger installation footprint.

Similar to ip-tiny/ip-full, split tc into tc-full and tc-tiny variants,
where the latter excludes the eBPF loader, uses a smaller executable, and
avoids libelf and libbpf package dependencies. Both variants provide the
'tc' virtual package, with tc-tiny as the default.

The previous tc package included a loadable module for iptables actions.
Separate this out into a common package, tc-mod-iptables, which both
variants depend on. Some package sizes on mips_24kc:

Before:
  148343  tc_5.11.0-1_mips_24kc.ipk

After:
  144833  tc-full_5.11.0-2_mips_24kc.ipk
  138430  tc-tiny_5.11.0-2_mips_24kc.ipk  (and no libelf or libbpf)
    4115  tc-mod-iptables_5.11.0-2_mips_24kc.ipk

Also fix up some Makefile indentation.

[1] https://github.com/openwrt/openwrt/pull/1627#issuecomment-447619962
[2] b048a305a3 ("iproute2: update to 5.11.0")

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-20 11:41:41 +08:00
Tony Ambardar
3350edab7a kernel/modules: relocate teql hotplug from iproute2 to kmod-sched
The link equalizer sch_teql.ko of package kmod-sched relies on a hotplug
script historically included in iproute2's tc package. In previous
discussion [1], consensus was the hotplug script is best located together
with the module in kmod-sched, but this change was deferred at the time.

Relocate the hotplug script now. This change also simplifies adding a tc
variant for minimal size with reduced functionality.

[1] https://github.com/openwrt/openwrt/pull/1627#issuecomment-447923636

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-20 11:33:47 +08:00
Tony Ambardar
351dde455d iproute2: add missing limits.h includes
This patch has been submitted upstream to fix an error reported by a few
users. One instance seen using gcc 10.2.0, binutils 2.35.1 and musl 1.1.24:

bpf_glue.c: In function 'get_libbpf_version':
bpf_glue.c:46:11: error: 'PATH_MAX' undeclared (first use in this function);
did you mean 'AF_MAX'?
   46 |  char buf[PATH_MAX], *s;
      |           ^~~~~~~~
      |           AF_MAX

Reported-by: Rui Salvaterra <rsalvaterra@gmail.com>
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-20 11:33:14 +08:00
Russell Senior
90acdcbaf4 busybox: udhcpc, allow zero length dhcp options
This patch skips zero length DHCP options instead of failing.

Signed-off-by: Russell Senior <russell@personaltelco.net>
2021-03-20 11:24:35 +08:00
Eike Ritter
39886684e3 ppp: compile fix: unset FILTER variable in Makefile
If the environment variable FILTER is set before compilation,
compilation of the ppp-package will fail with the error message

Package ppp is missing dependencies for the following libraries:
libpcap.so.1

The reason is that the OpenWrt-patch for the Makefile only comments
out the line FILTER=y. Hence the pcap-library will be dynamically
linked if the environment variable FILTER is set elsewhere, which
causes compilation to fail. The fix consists on explicitly unsetting
the variable FILTER instead.

Signed-off-by: Eike Ritter <git@rittere.co.uk>
2021-03-20 11:19:03 +08:00
xiaorouji
fc6fc0d5fe
luci-app-passwall: initial support import vless link
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-19 17:56:59 +08:00
Saxon
e86fe8c7c9
luci-app-unblockmusic: remove outdated music provider
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-19 17:56:22 +08:00
dwj0
0584fcbed0
n2n_v2: add n2n auto-nat
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-19 17:55:39 +08:00
Beginner
4ad4a644ab
UnblockNeteaseMusic-Go: Update to 0.2.9
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-19 17:54:39 +08:00
jerrykuku
5be0b13e80
luci-theme-argonv3: fix bugs
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-19 17:52:28 +08:00
Mattraks
74d7e3d9a6
luci-app-ssr-plus: fix arguments for ss-rust
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-19 17:40:01 +08:00
Tianling Shen
7c7830ac0b
tmate: remove upstreamed pacakge
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-19 17:24:30 +08:00
Tianling Shen
b2da0ad5fe
msgpack-c: remove upstreamed pacakge
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-19 17:24:18 +08:00
xiaorouji
7641c306fa
luci-app-passwall: bug fixes
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-18 16:18:16 +08:00
tty228
3a456a49c4
luci-app-serverchan: bump to 1.81
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-18 16:17:07 +08:00
maple's sky
b9aef3ef79
luci-app-jd-dailybonus: sync with upstream source
Co-authored-by: xujianjie1213 <35050408+xujianjie1213@users.noreply.github.com>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-18 16:16:24 +08:00
Beginner
37ecc03a58
v2ray-plugin: update to 4.36.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-18 12:04:14 +08:00
Álvaro Fernández Rojas
5548482ebb mtd: fix imagetag compilation
Commit b5b0796a13 added an uint32_t to mtd.h without including stdint, which
results in a compilation error for those files not including stdint.h.

In file included from imagetag.c:36:
mtd.h:15:8: error: unknown type name 'uint32_t'
 extern uint32_t opt_trxmagic;
        ^~~~~~~~
imagetag.c: In function 'trx_fixup':
imagetag.c:180:10: warning: unused variable 'res' [-Wunused-variable]
  ssize_t res;
          ^~~
imagetag.c:177:14: warning: unused variable 'scan' [-Wunused-variable]
  void *ptr, *scan;
              ^~~~
imagetag.c: In function 'trx_check':
imagetag.c:246:27: warning: initialization discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
     struct bcm_tag *tag = (const struct bcm_tag *) buf;
                           ^
make[3]: *** [<builtin>: imagetag.o] Error 1

Fixes: b5b0796a13 ("mtd: add option for TRX magic to fixtrx")
Signed-off-by: Álvaro Fernández Rojas <noltari@gmail.com>
2021-03-17 23:25:41 +08:00
Tianling Shen
3506b828ad
luci-app-ssr-plus: drop ipt2socks-alt from the dependencies
Signed-off-by: Tianling Shen <cnsztl@gmail.com>
2021-03-17 14:04:48 +08:00
maple's sky
dae84e580f
luci-app-jd-dailybonus: sync with upstream source
Co-authored-by: Mattraks <16359027+Mattraks@users.noreply.github.com>
Co-authored-by: jerrykuku <jerrykuku@qq.com>
Signed-off-by: Tianling Shen <cnsztl@gmail.com>
2021-03-17 13:52:21 +08:00
xiaorouji
1805a389a7
luci-app-passwall: sync with upstream source
Co-authored-by: badgv <45598380+badgv@users.noreply.github.com>
Signed-off-by: Tianling Shen <cnsztl@gmail.com>
2021-03-17 13:44:33 +08:00
Magnus Kroken
b05945c5d2 mbedtls: update to 2.16.10
This release of Mbed TLS provides bug fixes and minor enhancements. This
release includes fixes for security issues.

Security fixes:
* Fix a buffer overflow in mbedtls_mpi_sub_abs()
* Fix an errorneous estimation for an internal buffer in
mbedtls_pk_write_key_pem()
* Fix a stack buffer overflow with mbedtls_net_poll() and
mbedtls_net_recv_timeout()
* Guard against strong local side channel attack against base64 tables
by making access aceess to them use constant flow code

Full release announcement:
https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.10

Signed-off-by: Magnus Kroken <mkroken@gmail.com>
2021-03-17 11:28:57 +08:00
Beginner
a91e7d85bb
v2ray: update to 4.36.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-16 23:55:44 +08:00
Beginner
733c6a079e
v2ray: update to 4.36.1 2021-03-16 19:51:29 +08:00
INAGAKI Hiroshi
3354895999 mtd: add option for TRX magic to fixtrx
Buffalo uses the TRX header with a different magic and even changes this
magic with different devices. This change allows to specify the header
to use as a command line argument.

This is needed for the Buffalo WSR-2533DHP2 based on mt7622.

Co-Developed-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: INAGAKI Hiroshi <musashino.open@gmail.com>
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2021-03-16 11:17:41 +08:00
Rosen Penev
29b028f40c gettext-full: disable nameless locale define
It seems some packages like transmission and json-glib fail with it
enabled.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-03-16 11:12:46 +08:00
Dominick Grift
d7567389d5 selinux-policy: update to version v0.8
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2021-03-16 11:12:13 +08:00
Tianling Shen
0a1c53222e
shadowsocks-rust: drop UPX support
Signed-off-by: Tianling Shen <cnsztl@gmail.com>
2021-03-15 16:47:42 +08:00
Tianling Shen
19980fd5b9
treewide: add mirrors for GitHub Archives
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-15 15:01:44 +08:00
Tianling Shen
9796619efc
treewide: add mirrors for GitHub Codeload
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-15 14:17:10 +08:00
Beginner
72becfbf30
xray-plugin: update to 1.4.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-15 12:11:36 +08:00
Beginner
2df8719886
v2ray-plugin: update to 4.36.0 2021-03-15 00:48:41 +08:00
Beginner
f56a3dce91
v2ray: update to 4.36.0 2021-03-15 00:47:59 +08:00
Tianling Shen
51f8dfa498
luci-app-ssr-plus: only selete ss-rust for armv8 devices
ss-libev on x86_64 is good enough.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-14 23:45:15 +08:00
xiaorouji
3ccae98761
luci-app-passwall: bump to 4-17
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-14 23:14:54 +08:00
Tianling Shen
0bc42819ae
luci-app-ssr-plus: fix typo err of binname
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-14 18:59:46 +08:00
Tony Ambardar
fb6c76bbdf elfutils: remove host build from target package
Commit f4da28c301 ("elfutils: Add host build") supplied a libelf host
library to fix a glib2 host build error, but this need was later removed
by b6212c8769 ("glib2: don't use libelf during host build").

More importantly, there are already two sources for libelf host libraries:
OpenWRT build prerequisites [1] and tools/libelf. A third is not needed.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-14 11:26:25 +08:00
Hannu Nyman
56947b7bde busybox: backport fixes for 1.33.0
Backport two fixes for 1.33.0
* history file storing
* traceroute command option parsing

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2021-03-14 11:26:05 +08:00
Alin Nastac
6112051eb4 xfrm: simplify the check for necessary kernel support
[ -d /sys/module/xfrm_interface ] is enough to check if
CONFIG_XFRM_INTERFACE support was enabled in kernel.

Signed-off-by: Alin Nastac <alin.nastac@technicolor.com>
2021-03-14 11:23:18 +08:00
Alin Nastac
2613a9fe8b vti: use alternative way to check if kernel support is enabled
When necessary support is built in kernel, vti protocol support is
not enabled in netifd.

Signed-off-by: Alin Nastac <alin.nastac@technicolor.com>
2021-03-14 11:22:54 +08:00
Alin Nastac
8f76805abd gre: use alternative way to check if kernel support is enabled
When necessary support is built in kernel, gre protocol support is
not enabled in netifd.

Signed-off-by: Alin Nastac <alin.nastac@gmail.com>
2021-03-14 11:22:29 +08:00
Tianling Shen
e72037019b
luci-app-ssr-plus: fix bugs
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-13 16:22:14 +08:00
Tianling Shen
3bba3457d7
Revert "shadowsocks-rust: fix hash key for aarch64 binary"
This reverts commit 3c61869695.

Signed-off-by: Tianling Shen <cnsztl@gmail.com>
2021-03-13 11:31:23 +08:00
Mattraks
98bfcbc7ce
luci-app-ssr-plus: allow customized ss plugins
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-13 02:44:54 +08:00
michael
40d16e6b20
uugamebooster: update to 2.7.8
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-13 01:24:56 +08:00
vernesong
352abf6536
OpenClash: Update to v0.42.03-beta
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-13 00:48:52 +08:00
xiaorouji
e43c7b33c4
luci-app-passwall: sync with upstream source
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-13 00:44:11 +08:00
Tianling Shen
902a3f2055
luci-app-ssr-plus: fix dependencies
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-13 00:33:13 +08:00
Tianling Shen
e967518d70
luci-app-ssr-plus: add support for shadowsocks-rust
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-13 00:28:54 +08:00
Tianling Shen
50e0d8e11e
cdnspeedtest: Update to 1.4.9
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-12 23:27:04 +08:00
jerrykuku
918c80e7b0 luci-app-argon-config: bump to v0.9 2021-03-12 12:11:18 +08:00
jerrykuku
54e9e5a6c1 luci-theme-argonv3: update to 1.7.2 2021-03-12 12:08:16 +08:00
Daniel Golle
109c08604d
opkg: update to git HEAD
d71856a pkg: pass-through ABIVersion to status file

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-11 23:10:42 +08:00
Tianling Shen
3c61869695
shadowsocks-rust: fix hash key for aarch64 binary
Let's "thank" GitHub CDN.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-11 17:53:36 +08:00
Tianling Shen
4698803206
qBittorrent-Enhanced-Edition: Update to 4.3.3.10
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-11 16:47:55 +08:00
Tianling Shen
f3686b9af1
qt5: Update to 5.15.2
Removed upstreamed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-11 16:46:23 +08:00
Tianling Shen
99a9f78ee3
treewide: adjust tencent mirror
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-11 14:57:01 +08:00
Tianling Shen
ed07042b97
shadowsocks-rust: add new package
shadowsocks-rust is shadowsocks written in rust, with high performance
for AES AEAD ciphers (while much lower for non-ones).

However with the lack of rust toolchain, by now we can only download
pre-compiled binaries for quick setup and this Makefile needs to be
rewritten when rust toolchain is up.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-10 23:02:05 +08:00
Tianling Shen
be7048c373
shadowsocksr-libev: rewrite Makefile
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-10 17:15:56 +08:00
bobo liu
a999af1ec8
luci-app-frpc: add config field of user
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-10 10:43:07 +08:00
Tianling Shen
676f92f839
mbedtls: fix typo error
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-10 02:53:22 +08:00
Dominick Grift
aa96436548 checkpolicy: update to version 3.2
521e6a2f libsepol/cil: fix signed overflow caused by using (1 << 31) - 1
42ae834a libsepol,checkpolicy: optimize storage of filename transitions

Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2021-03-09 12:12:55 +08:00
Dominick Grift
9da9632de9 secilc: update to version 3.2
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2021-03-09 12:12:28 +08:00
Dominick Grift
ffddfdf704 policycoreutils: update to version 3.2
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2021-03-09 12:11:54 +08:00
Dominick Grift
d402be60d8 libsemanage: update to version 3.2
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2021-03-09 12:09:53 +08:00
Dominick Grift
240acb1b00 libselinux: update to version 3.2
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2021-03-09 12:09:26 +08:00
Dominick Grift
94d3a98da6 libsepol: update to version 3.2
Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
2021-03-09 12:08:57 +08:00
Beginner
dd9f1eeb8f
v2ray-plugin: update to 4.35.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-08 20:52:50 +08:00
Tianling Shen
8f96a896fe
include/target: move specific cflags to own Makefile
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-08 20:18:52 +08:00
zxlhhyccc
3cde6e15e8
naiveproxy: refresh dependencies
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-08 14:46:03 +08:00
Tianling Shen
d0af50427c
OpenClash: sync with upstream source
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-08 13:06:49 +08:00
Derry
76c3c51046
OpenAppFilter: bump to 5.0.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-08 12:34:15 +08:00
AmadeusGhost
741458f444 luci-theme-edge: update to 2.5 2021-03-08 12:08:46 +08:00
Georgi Valkov
dec2a01ea4 bpftools: fix param order for install on macOS
Fix: bpftools 5.11.2 does not compile on macOS, because the -m option
was placed between src and dst. Corrected by moving -m 644 before src.

Signed-off-by: Georgi Valkov <gvalkov@abv.bg>
2021-03-08 12:03:57 +08:00
Tony Ambardar
bbeb4950a0 bpftools: fix libbpf pkgconfig file
The pkgconfig file hardcodes a host library directory which cannot be
overridden by OpenWrt during builds. Use SED to fix this and potential
include directory problems, as is done with several other packages.

This fixes a strange issue intermittently seen building iproute2 on the
oxnas target:

iptables modules directory: /usr/lib/iptables
libc has setns: yes
SELinux support: no
libbpf support: no
	libbpf version 0.3.0 is too low, please update it to at least 0.1.0
	LIBBPF_FORCE=on set, but couldn't find a usable libbpf

Fixes: 2f0d672088 ("bpftools: add utility and library packages
supporting eBPF usage")
Reported-by: Russell Senior <russell@personaltelco.net>
Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-08 12:03:31 +08:00
Tianling Shen
bd6bea74ca
v2ray: Update to 4.35.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 23:00:34 +08:00
Tianling Shen
4d7d6034d2
mbedtls: hidden ARMv8 Crypto Extensions option for broadcom devices
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 20:46:08 +08:00
QiuSimons
a1836ccb53
mbedtls: Implements AES and GCM with ARMv8 Crypto Extensions
A compact patch that provides AES and GCM implementations that utilize the
ARMv8 Crypto Extensions. The config flag is MBEDTLS_ARMV8CE_AES_C, which
is disabled by default as we don't do runtime checking for the feature.
The new implementation lives in armv8ce_aes.c.

Provides similar functionality to https://github.com/ARMmbed/mbedtls/pull/432
Thanks to Barry O'Rourke and others for that contribtion.

Tested on a Cortex A53 device and QEMU. On a midrange phone the real AES-GCM
throughput increases about 4x, while raw AES speed is up to 10x faster.

[updated Makefile to enable this function, adjusted commit message]
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 16:36:02 +08:00
Tianling Shen
691dbcb8ac
naiveproxy: bump to 89.0.4389.72-1
Removed upstreamed patches, refreshed all dependencies.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 15:12:56 +08:00
Tianling Shen
490fd504c6
luci-app-turboacc: enable BBR for kernel 4.9 by default
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 14:38:44 +08:00
Tianling Shen
05fcf3e7df
luci-app-appfilter: update file permission
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 11:39:54 +08:00
Derry
f6a45d9963
luci-app-appfilter: fix upload file err
Fixes: destan19/OpenAppFilter#97

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-07 11:37:13 +08:00
Tianling Shen
b348be7e9c
OpenAppFilter: bump to 5.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-06 13:36:24 +08:00
Tianling Shen
473b7f26de
luci-app-appfilter: bump to 5.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-06 13:30:02 +08:00
xiaorouji
8effe063ff
luci-app-passwall: bump to 4-16
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-06 13:22:49 +08:00
Lienol
573fee98c8
pingos: update nginx to 1.19.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-06 13:21:42 +08:00
Tianling Shen
e0fbd0e1e1
luci-app-ssr-plus: bump to 183-8
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-06 13:14:21 +08:00
Tianling Shen
3a64d244aa
brcmfmac4366c0-firmware-vendor: drop useless INSTALL_DIR
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-06 12:29:18 +08:00
AmadeusGhost
f86cbf3de2
v2ray-plugin: refresh project url
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-06 12:20:32 +08:00
Florian Eckert
b71caca51e rssileds: use new application led trigger backend
This will use the new application led trigger backend. For now this is
the only package that uses leds trigger in user space to configure the
kernel led triggers.

The callback script only emmits a message for now, so that this LED is now
managed by the rssileds service. Until now a generic warning was emitted that
this LED trigger is not supported. But that is not true.

-> Skipping trigger 'rssileds' for led '<name>' due to missing kernel module

I think this callback should be changed in the future to restart the
service.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-03-06 12:14:40 +08:00
Florian Eckert
3a4de9de25 base-files: add new application led trigger backend
For now we have only kernel LED trigger support. With this change it is now
possible to use application triggers.

If we configure a LED with a non kernel trigger, then we check on every
restart and boot of the LED service if we have this trigger as an application
in "/usr/libexec/led-trigger". If this file with the name is found, then we
execute this to init the LED.

Possible use cases are:

- Start/Stop/Restart an application led trigger service for this led
- Init a LED that is configured by a hotplug script (VPN tunnel established)

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2021-03-06 12:14:18 +08:00
Tianling Shen
72629fa2e7
v2ray: Update to 4.35.0, mark as BROKEN
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-05 18:50:40 +08:00
Tianling Shen
549efa5b1e
xray-plugin: Update to 1.3.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-05 16:47:29 +08:00
Tianling Shen
8075e6c3c0
v2ray-plugin: Update to 4.35.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-05 16:42:27 +08:00
AmadeusGhost
2afa61dd64 simple-torrent: update to 1.2.14 2021-03-04 18:05:14 +08:00
AmadeusGhost
b031c8ddf4 GoQuiet: fix build with golang 1.16 2021-03-04 18:02:41 +08:00
Tianling Shen
468e819a32
gowebdav: bump to v0.0.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-04 12:56:07 +08:00
AmadeusGhost
69367bbe70 gowebdav: fix build with golang 1.16 2021-03-04 12:39:49 +08:00
AmadeusGhost
8dfc71dc03 tinymembench: add package 2021-03-03 18:05:24 +08:00
Tianling Shen
357b817277
baidupcs-web: rename patch dir
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-03 14:13:38 +08:00
Tianling Shen
b8786367a0
r8125: bump PKG_VERSION
Fixes: 400288d50f ("r8125: bump to 9.005.01")

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-03 12:34:55 +08:00
Donald Hoskins
18044bb097 libunwind: Add MIPS64 dep check
libunwind dependency check does not allow for MIPS64 arch.  Add MIPS64 awareness.

libunwind seems to support MIPS64 without issues, it was limited by the dep arch
check in the Makefile.

Used to compile Suricata6/Rust locally without issue.

Signed-off-by: Donald Hoskins <grommish@gmail.com>
2021-03-02 12:04:21 +08:00
Daniel Golle
b21d60f57c base-files: add support for restoring config from tmpfs
Instead of only relying in /sysupgrade.tgz being present in rootfs to
restore configuration, also grab /tmp/sysupgrade.tar which may have
magically gotten there during preinit...

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2021-03-02 12:02:13 +08:00
Tianling Shen
bab1bee9b3
treewide: replace old domain with new one
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 22:13:00 +08:00
Tianling Shen
0984e354d3
brook: bump to 20210214
Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 22:08:12 +08:00
AmadeusGhost
2a15075c22
baidupcs-web: add missing rice dependency
Fix: #291
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 22:08:12 +08:00
AmadeusGhost
974bb763d8
baidupcs-web: fix build with golang 1.16
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 22:08:11 +08:00
Tianling Shen
8a8796fedb
luci-app-docker(man): add missing dependencies
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 20:27:05 +08:00
jerrykuku
969712261d
luci-app-jd-dailybonus: sync with upstream source
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 20:22:50 +08:00
vernesong
cb50478daf
OpenClash: bump to v0.42.02-beta
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 20:21:51 +08:00
xiaorouji
ef4c6d32ef
luci-app-passwall: sync with upstream source
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 20:19:55 +08:00
jerrykuku
5afff93976
luci-app-vssr: bump to latest git HEAD
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 20:16:25 +08:00
Beginner-Go
8e34b03718
luci-app-vssr: use xray-plugin instead v2ray-plugin
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 20:15:38 +08:00
xiaoqingfeng
fc1ee90f12
luci-theme-infinityfreedom: adjust style for luci-app-softethervpn
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 20:11:13 +08:00
Tianling Shen
c8ba0e3586
luci-app-unblockneteasemusic: sync with upstream source
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2021-03-01 20:08:39 +08:00
Tony Ambardar
f296b74a46 bpftools: update to latest stable 5.11.2
Compile and run-tested on malta/mip32be, using bpftool directly and also
libbpf (linked with tc) to inspect and load simple eBPF programs.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-01 18:16:29 +08:00
Tony Ambardar
062d6c465d iproute2: update to 5.11.0
The latest iproute2 version brings various improvements and fixes:
https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/log/?qt=range&q=v5.10.0..v5.11.0

In particular, ip and tc now use libbpf as the standard way to load BPF
programs, rather than the old, limited custom loader. This allows more
consistent and featureful BPF program handling e.g. support for global
initialized variables.

Also fix a longstanding problem with iproute2 builds where unneeded DSO
dependencies are added to most utilities, bloating their installation
footprint. From research and testing, explicitly using a "--as-needed"
linker flag avoids the issue. Update accordingly and drop extra package
dependencies from Makefile.

Additional build and packaging updates include:

  - install missing development header to iproute2/bpf_elf.h
  - propagate OpenWrt verbose flag during build
  - update and refresh patches

Compile and run tested: QEMU/malta-mips32be on kernels 5.4 & 5.10.

All iproute2 packages were built and installed to the test image. Some
regression testing using ip-full and tc was successfully performed to
exercise several kmods, tc modules, and simple BPF programs.

Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
2021-03-01 18:16:16 +08:00