- Aug 05, 2023
-
-
Rob White authored
Maintainer: Rob White rob@blue-wave.net Compile tested: All Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64, on 21.02, 22.03 and snapshot. Description: mesh11sd (2.0.0) This release contains new functionality. Autonomous portal mode is introduced. This simplifies the rollout of meshnodes allowing a common configuration to be used on all nodes. Remote administration is introduced, allowing files to be copied and terminal sessions to be opened on established meshnodes, identifying remote nodes by mac address. * Add - Update config file [bluewavenet] * Add - implementation of remote copy [bluewavenet] * Add - implementation of remote connect [bluewavenet] * Add - Autonomous portal mode [bluewavenet] -- Rob White dot@blue-wave.net Mon, 31 Jul 2023 16:59:52 +0000 Signed-off-by:Rob White <rob@blue-wave.net>
-
- Jul 31, 2023
-
-
Rob White authored
Reinstate CONFLICTS:=nodogsplash Signed-off-by: -
Rob White authored
Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 23.05, 22.03 Description: opennds (10.1.2) Security Advisory. This version contains fixes for multiple potential security vulnerabilities Credit - Stanislav Dashevskyi - standash.github.io [standash] It also contains some minor bug fixes * Fix - Generate unique sha256 faskey if not set in config - CVE-2023-38324 [bluewavenet] * Fix - NULL pointer dereference if user_agent is NULL - CVE-2023-38320, CVE-2023-38322 [bluewavenet] * Fix - NULL pointer dereference if authdir is called with an incomplete or missing query string - CVE-2023-38313, CVE-2023-38314, CVE-2023-38315 [bluewavenet] * Fix - remove deprecated and non-functioning unescape callback - CVE-2023-38316 [bluewavenet] * Fix - prevent potential recursive dependency and detect if conflicting package is installed [bluewavenet] Signed-off-by:
-
- Jul 29, 2023
-
-
Moritz Warning authored
OpenNDS lists nodogsplash a conflict as well. This causes a circular reference that is not allowed. Signed-off-by:Moritz Warning <moritzwarning@web.de>
-
Nick Hainke authored
Announcement: https://alioth-lists.debian.net/pipermail/babel-users/2023-July/004125.html Remove upstreamed patch: - 100-local-make-local_kind-function-accessible.patch Refresh patch: - 600-add-ubus.patch Signed-off-by:
Nick Hainke <vincent@systemli.org>
-
- Jul 23, 2023
-
-
Moritz Warning authored
Signed-off-by:
-
- Jul 22, 2023
-
-
Marek Küthe authored
Closes https://github.com/openwrt/routing/issues/994 Signed-off-by:
Marek Küthe <m.k@mk16.de>
-
- Jul 21, 2023
-
-
Josef Schlehofer authored
bird1: Remove, as EOL has been reached
-
-
- Jul 19, 2023
-
-
Nick Hainke authored
Announcement: https://alioth-lists.debian.net/pipermail/babel-users/2023-July/004100.html Babeld removed diversity routing [0], so we need to adjust ubus bindings. Further. we need to add a patch that makes local_kind accessible again: "100-local-make-local_kind-function-accessible.patch" Refresh patches: - 600-add-ubus.patch [0] - https://github.com/jech/babeld/commit/a0816083356e5d33fb71e0e30d92aa3bf335d7ea Signed-off-by:
-
- Jul 15, 2023
-
-
Rob White authored
Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 23.05, 22.03 opennds (10.1.1) * This version contains some minor bug fixes and documentation updates * Fix - send only contents of buffer, not entire buffer when serving page511 [bluewavenet] * Fix - Set fas_remotefqdn to gw_fqdn when overriding FAS settings [bluewavenet] * Fix - use absolute path for css and images in ThemeSpec [bluewavenet] * Fix - revert to old option names without underscores [bluewavenet] * Fix - FAS URL when fas_remotefqdn is not set [bluewavenet] Signed-off-by:
-
- Jun 30, 2023
-
-
Bradford Zhang authored
Signed-off-by:Bradford Zhang <zyc@zyc.name>
-
- Jun 26, 2023
-
-
Tianling Shen authored
- armvirt target has been renamed to armsr (Arm SystemReady) [1]. - armsr-armv8 has been switched to aarch64_generic architecture [2]. 1. https://github.com/openwrt/openwrt/commit/40b02a230167626def69389452f19b7109aaeac1 2. https://github.com/openwrt/openwrt/commit/e0f06ddc23b2503a1791ae7e97b02e2647e8a70d Signed-off-by:
Tianling Shen <cnsztl@immortalwrt.org>
-
Jeffery To authored
Signed-off-by:Jeffery To <jeffery.to@gmail.com>
-
Jeffery To authored
Signed-off-by: -
Christian Marangi authored
Add concurrency rules to skip redundant build to skip extra build test on force push on pull request. Signed-off-by:Christian Marangi <ansuelsmth@gmail.com>
-
Jeffery To authored
Currently, the package run-test phase will fail for PRs that only add/update host-only packages, as no target packages (*.ipk) are built. This checks if any target packages are built before attempting the run-tests. Signed-off-by: -
Jeffery To authored
Signed-off-by: -
Van Waholtz authored
Signed-off-by:Van Waholtz <brvphoenix@gmail.com>
-
Gerard Ryan authored
Some packages variants have conflicting dependencies with the base packages and the CI test will fail to install before anything can be done by the packages to setup the system for install. This change adds a pre-test.sh that runs before the install so things like the default libustream variant can be swapped out as shown in the updated cache-domains. Signed-off-by:Gerard Ryan <G.M0N3Y.2503@gmail.com>
-
Jeffery To authored
To test each package, the CI-built target package (ipk) file is installed, but currently the target package's dependencies are installed from the standard opkg feeds. There are cases when the CI-built target packages should be installed/tested together: * If a pull request contains several new packages that depend on each other, the test step will fail as the new dependencies cannot be found in the current packages feed. * If a pull request upgrades a source package that builds several target packages that depend on each other, the test step may fail due to the version/ABI mismatch between a newer target package and the older dependencies installed from the packages feed. This sets up a local feed for the CI-built packages so that dependencies are also installed from the same set of packages. Signed-off-by: -
Jeffery To authored
836b4e1c734f9705bfd8db0da0c04214c2647932 added --force-removal-of-dependent-packages but it does not do what the commit message says it does. When package A depends on package B (package B is a dependency of package A; package A is a dependent of package B), trying to remove package B while package A is installed will result in an error. Adding --force-removal-of-dependent-packages in this case will cause the removal of package B and package A (package B's dependent). But in the case of the CI testing step, it is package A that is being installed and removed. Removing package A with --force-removal-of-dependent-packages will not cause package B (package A's dependency) to be removed. This adds --autoremove to actually remove the package's dependencies. This also ignores any errors returned by opkg remove as --autoremove can sometimes falsely return an error[1]. [1]: https://github.com/openwrt/openwrt/issues/12241 Fixes: 836b4e1c734f ("github-ci: add --force-removal-of-dependent-packages") Signed-off-by:
-
Tianling Shen authored
Removed arc_archs - archs38 was marked as source-only [1]. Renamed powerpc_8540 to powerpc_8548 [2]. 1. https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=c01641bcc7236d2e2de3ea65444b0cf2898df351 2. https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=2cad88b99fdae9766de84e6c1cb56f111eb53748 Signed-off-by:
-
Paul Spooren authored
If it doesn't exists, don't confuse the contributors. Signed-off-by:Paul Spooren <mail@aparcar.org>
-
Paul Spooren authored
Autorelease causes some issues like heavy bandwidth usage as well as non-deterministic package releases whenever someone doesn't use the full git log. With this comment all modified packages are checked and if they use the autorelease feature, kindly comment to the user to change that. Signed-off-by:
Paul Spooren <paul.spooren@rhebo.com> [ move check to separate workflow to handle ci limitation ] Signed-off-by:
-
- Jun 23, 2023
-
-
Rob White authored
Maintainer: Rob White rob@blue-wave.net Compile tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64 Run tested: arm_cortex-a7_neon-vfpv4, mipsel_24kc, x86-64; on snapshot, 23.05, 22.03 opennds (10.1.0) This version is a major upgrade including full migration to nftables and native uci configuration support even for generic Linux distributions. It also includes a significant refactoring of inbuilt memory management, improving long term reliability, fixing several memory leaks, buffer overflows and several edge case crashes. * Add - support for included custom binauth script [bluewavenet] * Add - emit a useful stderr message if auth_restore fails [bluewavenet] * Add - procd respawn threshold, respawn timeout and respawn retry parameters [bluewavenet] * Add - user friendly commandline message if already running [bluewavenet] * Fix - Enabling of Data volume quotas [bluewavenet] * Fix - use get_list_from_config instead of get_option_from_config [bluewavenet] * Fix - compiler warning - unused variable [bluewavenet] * Fix - remove redundant function call ipsetconf [bluewavenet] * Fix - walledgarden for both nftset and ipset on OpenWrt [bluewavenet] * Add - more meaningful output if attempt is made to restart when already running [bluewavenet] * Fix - resolve gatewayfqdn after startup [bluewavenet] * Fix - Choose forground or background running according to commandline arguments [bluewavenet] * Fix - remove superfluous debug message [bluewavenet] * Fix - replace sleep with procd_set_param term_timeout [bluewavenet] * Fix - make option enabled default to enabled [bluewavenet] * Fix - report authmon pid instead of opennds pid from authmon [bluewavenet] * Fix - ensure correct pid obtained for opennds [bluewavenet] * Add - StartLimitIntervalSec and StartLimitBurst to systemd service script [bluewavenet] * Fix - refactor remote downloads [bluewavenet] * Fix - suppress error message on ipset test failure [bluewavenet] * Fix - send non-syslog debug information to stdout by default [bluewavenet] * Add - C function to check heartbeat watchdog [bluewavenet] * Fix - Update generic Linux makefile [bluewavenet] * Fix - remove redundant ruleset struct definition [bluewavenet] * Fix - potential buffer overflow issue during config stage [bluewavenet] * Fix - remove unnecessary calls to free() in page 404 processing [bluewavenet] * Fix - remove redundant code from fw_iptables [bluewavenet] * Add - updates to binauth_log script [bluewavenet] * Add - updates for service startup, systemd and procd [bluewavenet] * Add - refactoring of commandline processing [bluewavenet] * Fix - remove debugging message [bluewavenet] * Fix - typo in client ruleset [bluewavenet] * Add - Refactor to use uci config directly even for Generic Linux [bluewavenet] * Add - Parsing for multi item lists with spaces in items [bluewavenet] * Add - use common library call get_option_fom_config [bluewavenet] * Add - support for direct use of uci format config file - string and integer parameters [bluewavenet] * Fix - Remove deprecated syslog_facility config setting [bluewavenet] * Add - thread busy message to ndsctl [bluewavenet] * Add - refactor configure_log_location [bluewavenet] * Fix - suppress LOG_NOTICE message when getting mac of interface [bluewavenet] * Fix - ndsctl error message [bluewavenet] * Fix - get_client_interface for levels 2 and 3 [bluewavenet] * Add - use common library write_log function [bluewavenet] * Add - Refactor memory management [bluewavenet] * Fix - fix and refactor upload rate limiting rules [bluewavenet] * Fix - Change a debug message from err to info [bluewavenet] * Add - refine common buffer sizes [bluewavenet] * Add - use initialised heap memory for redirect_to_splashpage [bluewavenet] * Add - user message to themespec [bluewavenet] * Add - auth_restore support ie reauth clients after a restart by default. [bluewavenet] * Add - Library call to preemptively re-auth clients after a restart or crash [bluewavenet] * Add - BinAuth, write an authenticated clients list [bluewavenet] * Add - library call "check_heartbeat" [bluewavenet] * Fix - Tidy up redundant code [bluewavenet] * Fix - change warning message to debug message when iw not installed [bluewavenet] * Add - library call to log to syslog [bluewavenet] * Fix - use initialised heap memory for client list entries [bluewavenet] * Fix - ignore legacy ipset firewall rule [bluewavenet] * Fix - refactor memory management for MHD calls - use heap memory for buffers etc [bluewavenet] * Fix - missing free causing memory leak [bluewavenet] * Fix - predefine and initialise buffer for send_redirect_temp [bluewavenet] * Add - support protocol "all" in firewall ruleset [bluewavenet] * Add - pre-allocation of initialised buffers [bluewavenet] * Fix - prevent buffer overrun on removing client [bluewavenet] * Add - update MHD connection timeout and connection limit [bluewavenet] * Add - chain ndsDLR for dynamic client download rate limiting rules [bluewavenet] * Add - Use Internal Polling Thread / Thread Per Connection in MHD [bluewavenet] * Add - some new default values [bluewavenet] * Fix - remove some redundant code and fix some compiler warnings [bluewavenet] * Fix - remove redundant library command string [bluewavenet] * Fix - Tidy up redundant iptables code [bluewavenet] * Add - convert trusted client support to nftables [bluewavenet] * Add - refer to nftables [bluewavenet] * Add - move code for generating authentication mark string to initial setup [bluewavenet] * Add - full nftset support with ipset import where required [bluewavenet] * Add - nftset support library calls [bluewavenet] * Add - ipset_to_nftset library call [bluewavenet] * Add - support for nftables version of append_ruleset and nftables_compile [bluewavenet] * Fix - buffer overflow in page_511 generation [bluewavenet] * Add - more nftables migration including rate quotas [bluewavenet] * Fix - change GatewayInterface to lower case [bluewavenet] * Add - upload and download limiting client flags for future use [bluewavenet] * add - lib calls "pad_string" and "replace_client_rule" [bluewavenet] * Add - further nftables migration [bluewavenet] * Fix - correctly parse options from legacy conf file [bluewavenet] * Fix - some compiler warnings and set min iptables version [bluewavenet] * Add - Generic Linux configure walledgarden [bluewavenet] * Add - Implementation of nftsets for walledgarden [bluewavenet] * Add - migration to nftables, next phase. [bluewavenet] * Add - library function delete_client_rule [bluewavenet] * Fix - remove duplicate definition [bluewavenet] * Add - First stage migration to nftables [bluewavenet] Signed-off-by:
-
- Jun 13, 2023
-
-
Nick Hainke authored
Update to latest version. Remove upstreamed patch: - 100-rename-avl-to-olsrd_avl.patch Signed-off-by:
-
- Jun 11, 2023
-
-
Patrick Grimm authored
Maintainer: patrick@lunatiki.de @stargieg Compile tested: mips_24kc, arm_cortex-a9_vfpv3-d16, i386_pentium4, x86_64, i386_pentium-mmx, mipsel_24kc Run tested: Firefox, Safari Description: add html table for all LAN prefixes instead of a list with the one/first prefix Signed-off-by:Patrick Grimm <patrick@lunatiki.de>
-
Maciej Krüger authored
Signed-off-by:Maciej Krüger <mkg20001@gmail.com>
-
- May 27, 2023
-
-
Simon Wunderlich authored
batman-adv: update packages to version 2023.1
-
Sven Eckelmann authored
OpenWrt master is no longer providing any kernels older than 5.15. Just drop the compat-hacks/patches for older kernels to make it easier to maintain the package. Signed-off-by:Sven Eckelmann <sven@narfation.org>
-
Sven Eckelmann authored
* (no changes) Signed-off-by: -
Sven Eckelmann authored
* Synchronize with kernel headers Signed-off-by: -
Sven Eckelmann authored
* support latest kernels (4.14 - 6.4) * drop single unicast transfer optimization for unsnoopable IP addresses * prepare infrastructure for multicast packets with multiple unicast destination addresses Signed-off-by:
-
- May 21, 2023
-
-
William Fleurant authored
-
- May 16, 2023
-
-
Josef Schlehofer authored
Since this file was taken from packages repository, it tries to compile packages from that repository as fallback if changes are not detected. Let's change these packages to some, which are present in this repository, so they will be compiled as test. Signed-off-by:Josef Schlehofer <pepe.schlehofer@gmail.com>
-
Alois Klink authored
Enable `errexit` and `nounset` [POSIX shell options][1] in `.github/workflows/entrypoint.sh` so that the script fails if any command within the script fails. [1]: https://pubs.opengroup.org/onlinepubs/9699919799//utilities/V3_chap02.html#set Reported-by:
Marius Dinu <m95d+git@psihoexpert.ro> Fixes: https://github.com/openwrt/packages/issues/19953 Signed-off-by:
Alois Klink <alois@aloisklink.com>
-
- May 15, 2023
-
-
Bradford Zhang authored
Signed-off-by:
-
- Apr 27, 2023
-
-
Nick Hainke authored
OpenWrt/packages removed AUTORELEASE treewide. Remove it also in the routing feed. This is just copied from [0] with modification to the sed cmd because it was not working for the routing feed: The following temporary change was made to the core: diff --git a/rules.mk b/rules.mk index 57d7995d4fa8..f16367de87a8 100644 --- a/rules.mk +++ b/rules.mk @@ -429,7 +429,7 @@ endef abi_version_str = $(subst -,,$(subst _,,$(subst .,,$(1)))) COMMITCOUNT = $(if $(DUMP),0,$(call commitcount)) -AUTORELEASE = $(if $(DUMP),0,$(call commitcount,1)) +AUTORELEASE = $(if $(DUMP),0,$(shell sed -i "s/\$$(AUTORELEASE)/$(call commitcount,1)/" $(CURDIR)/Makefile)) all: FORCE: ; And this command used to fix affected packages: for i in $(cd feeds/routing; git grep -l PKG_RELEASE:=.*AUTORELEASE | \ sed 's/\/Makefile$//';); do make package/$i/download done [0] - https://github.com/openwrt/packages/commit/0c10c224be81f9221dabfab449855ab6718d2a0c Signed-off-by:
-
- Apr 18, 2023
-
-
Caleb James DeLisle authored
Maintainer: @wfleurant Compile tested: builds for x86_64 Run tested: Build only testing Description: same build error seen on my machine as seen in #958 Whereas #961 removes the compiler warning, this fixes the underlying problem in the code. Signed-off-by:Caleb James DeLisle <cjd@cjdns.fr>
-
