dropbear.init behaviours:
Interface: For each interface, collect all its IPs,
up to 10 endpoints total, and add `-p <addr:port>` for
each; if no interface was given, fall back to a plain
`-p <port>` (listen on all interfaces and IPs). It binds
to addresses, not the device. It collects all IPv4, and
all IPv6 - ULA, but not LL - and binds to those. Ex:
dropbear ... -p 192.168.1.1:22 -p 192.168.1.2:22 -p 192.168.1.3:22 ...
DirectInterface: A single logical interface name; the
first one is used (if multiple are given via `list`).
Runs dropbear with `-l <device> -p <port>`, i.e., it binds
directly to the layer 2 network device rather than
specific IPs. Ex:
dropbear ... -l br-lan -p 22 ...
Closes openwrt/packages#25555
Closes#7484
Signed-off-by: Paul Donald <newtwen+github@gmail.com>
When downloading a key, try to get the filename of the key. opkg expects it to
match the key fingerprint when verifying .sig files. apk not so.
Try to save the public key file with the name from the provided URL, so it is
not named "key_blah" which won't match its fingerprint.
The alternative would be to call usign with the public key file as input, and
then rename it to its fingerprint. This is only necessary for opkg which is on
the way out.
If the public key file at the remote resource is not named according to its
fingerprint, that's on the repo owner.
Signed-off-by: Paul Donald <newtwen+github@gmail.com>
Simplifies adding third-party repos. Functions on both 24.10 (opkg) and
main (apk). Based loosely on sshkey management.
Signed-off-by: Paul Donald <newtwen+github@gmail.com>
Many devices have LEDs to signal a specific link speed.
They are incorrectly displayed in LUCI when they are defined.
This commit adds the missing speed and duplex triggers.
Signed-off-by: Aleksander Jan Bajkowski <olek2@wp.pl>
Add "Disabled" with value 9 as a choice for cron log level.
9 actually exceeds the highest built-in value 8, but can be
used to quieten the logging in cases where there are e.g. cron
jobs running each minute, which would create log spam.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Busybox crond only uses level 5, 7 and 8. (And 7 and 8 only differ
on one error regarding finding a crontab without user.)
For simplicity, just provide 5 and 7 as alternatives in LuCI.
Show level 7 as the default and as the first offered choice.
Add missing semicolons to the file.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Often restart is not what is necessary, and can trigger longer outages.
Reload is often sufficient, especially for things like rpcd.
Signed-off-by: Paul Donald <newtwen+github@gmail.com>
The previous change did not work as intended for
partitions with _ in the name. I.e "0:qsee_1".
It would output an error "Invalid characters in filename".
So fix this by matching and replacing any
character except for a-z and 0-9 with "-".
Example "0:qsee_1" = I.e "0-qsee-1".
Signed-off-by: Kristian Skramstad <kristian+github@83.no>
When you download a partition, the name is hostname+mtdX.bin
and that can be confusing if you go back and try to remember
what mtdX was if you have 10+ partitions.
So let us add the partition name to the filename like:
hostname.mtdX.boot.bin
hostname.mtdX.firmware.bin
Note: If there is a better, easier and simpler way to do the
same thing, please let me know.
Signed-off-by: Kristian Skramstad <kristian+github@83.no>
Add support for switching the ssh service on and off via LuCI.
This is already possible in the uci section of dropbear.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Drop the bogus `enabled_fsck` option which seems to be an automatic Lua->JS
conversion artifact.
Fixes: #6837
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Drop not used setInitAction ubus luci method permission from
luci-mod-system-uhttpd and luci-mod-system-ssh. They are not used in the
related js files and should be removed as the related js doesn't
use/require them.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Convert startup.js and system.js to use the generic ubus rc method to
handle /etc/init.d/ scripts for enable/disable/start/restart/reload/stop
operation.
Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
[ reword commit description, convert system.js ]
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Allow adding ecdsa-sk and ed25519-sk SSH keys in LuCI
These key types can be generated via the -t flag in ssh-keygen and are
supported in recent versions of dropbear. As ssh-keygen ignores the -b
flag when generating ecdsa-sk and ed25519-sk keys, the curve field in
the objects returned by the decode function is set to fixed strings for
both ecdsa-sk and ed25519-sk public key strings. This is in contrast to
ecdsa keys for which various curves can be provided (e.g., NIST P-256,
NIST P-384, and NIST P-521).
Signed-off-by: Eric McDonald <ericmcdonald@protonmail.com>
Ensure to not display public key comments verbatim in order to prevent
injection of markup.
Reported-by: Eric McDonald <ericmcdonald@protonmail.com>
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
UCI option `interface` for sysntpd server was introduced in
OpenWrt commit 4da60500ebd2. NTP server binds to the specified interface,
or if unspecified, to all.
This patch adds selection widget to LuCI.
Signed-off-by: Alexey Dobrovolsky <dobrovolskiy.alexey@gmail.com>
In this case the cbi description div will not be generated and when
switching to another trigger later, attempts to change the description
div contents will fail.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
In this case the cbi description div will not be generated and when
switching to another trigger later, attempts to change the description
div contents will fail.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
Also convert ES6 to ES5 syntax while we're at it.
Fixes: #5476
Fixes: 5b42cd5b46 ("luci-mod-system: move default option from defaul-on trigger to none trigger")
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Paul Donald
Andy Chiang
Aleksander Jan Bajkowski
Hannu Nyman
Sergey Ponomarev
Josh Correia
Christian Svensson
Kristian Skramstad
Florian Eckert
Jo-Philipp Wich
Christian Marangi
Rafał Miłecki
Paul Dee
Eric McDonald
Alexey Dobrovolsky