test.sh is pretty basic and will not fail if one of the plugin fails,
which is fine as most plugins will fail in CI anyway.
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
lua-cjson depends on liblua, so add missing lua dependency.
modemmanager-rpcd has no version, so add a simple test, and skip version check.
Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
- Add DEFAULT_VARIANT to "avahi-daemon" and "libavahi" virtual packages;
set to "dbus" variant because it is more compatible.
When some package depends on one of these virtual packages an arbitrarily
variant it is selected. This avoids that.
- Add conflicts in order to avoid mixing packages with different variants
(when defining a DEFAULT_VARIANT the conflicts definition should be on
that side of the dependency to avoid recursive dependencies).
- Avoid building unused "dbus" dependency.
Fixes: ASU sysupgrade problem with avahi packages https://forum.openwrt.org/t/luci-attended-sysupgrade-support-thread/230552/137
Fixes: https://github.com/openwrt/packages/commit/9bc03b9d9971c2f1e146f7c2d287d1fc16e776f0
Signed-off-by: Mario Andrés Pérez <mapb_@outlook.com>
Bump from the 0.9-rc4 pre-release to 0.9-rc5. Update PKG_VERSION,
PKG_SOURCE, PKG_SOURCE_URL, PKG_BUILD_DIR and PKG_HASH accordingly.
The two carried patches (010-pkgconfig, 020-no-po-subdir) still apply
unchanged, and test-version.sh already normalises the underscore in the
apk version (0.9_rc5) back to the upstream 0.9-rc5 string.
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
/etc/logrotate.d/ needs slash in conffiles to indicate it's
a directory and not a flat file.
Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
The custom options are designed to carry only scalar options to be
added to the connector line.
This fixes a security issue when newlines are included in custom options
which can be used to add yet another, arbitrary connector lines.
See https://github.com/openwrt/packages/security/advisories/GHSA-w6q2-vr4f-49x3
Signed-off-by: Michael Heimpold <mhei@heimpold.de>
Generic version checks were introduced in actions-shared-workflows,
making these individual test.sh files obsolete.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
The nftables rule in acme-common partially works, but it races against the
acme.sh and uacme client. While the client is performing the renew the rule
is being deleted because the client is run in the background. This change
moves the rule management to the hook instead. While duplicate rules could
be created, the benefits outway the potential costs. It is unknown how many
installations issue/renew multiple certificates.
Signed-off-by: Michael A Cassaniti <michael@cassaniti.id.au>
While at it, we synchronized .github/formalities.json with the current
default settings of the webhook bot.
Since the bot is shared across all OpenWrt repositories, the stale PR
cleanup is disabled by default at the repository level. Because this
repository wants to use stale triage, we explicitly enable it here.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Update the Continuous Integration section to reflect the current state:
- Update the list of runtime-tested architectures (add i386_pentium-mmx
and mips_24kc, remove outdated i386_pentium4)
- Document the generic test suite (executable, version, hardcoded path,
strip, linked library, and SONAME checks)
- Add documentation for test-version.sh (version check override) and
pre-test.sh (pre-test setup) scripts alongside the existing test.sh
- Document available environment variables (PKG_NAME, PKG_VERSION,
CI_HELPERS) for test scripts
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Add a nat_traffic collector for prometheus-node-exporter-ucode,
ported from the equivalent Lua collector in prometheus-node-exporter-lua.
Reads /proc/net/nf_conntrack and exports per-(src, dst) pair byte
totals (both directions summed) as node_nat_traffic gauge metrics.
Also includes a ucode-based unit test with a fixture file that can be
run locally with: ucode test/nat_traffic.uc
Signed-off-by: Ricard Nacher <ricard.nacher@midokura.com>
The scripts were a mess. Attempting even a simple update caused many
Copilot complaints. So we rewrite the scripts to be cleaner and
resolve the issues found by automated code review (such as Copilot).
Made extensive use of Qwen3.6-27B, LATE, and llama.ccp for local AI
code reviews during development.
In the process we deduplicate the nut-server and nut-monitor
initscripts and split them into several files, for easier automatic
and human review.
Incorporates and supersedes: #28308
Should supersede #21014Closes: #28298
Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
Apparently the CI wants to 'see' the version not just get a return code,
so emit the version when we have one.
Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
Extra quotes were being interpreted literally, preventing proper
ups driver stop and/or reload.
Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
Add previously missed migration script (uci-defaults) for changes
to nut-monitor initscript.
Created with the help of iterative code reviews by
Qwen3.6-27B (LLM model) running on llama.cpp (local LLM server),
controlled by LATE.
Signed-off-by: Daniel F. Dickinson <dfdpublic@wildtechgarden.ca>
Maintainer: me
Compile tested: x86_64, Dell EMC Edge620, OpenWrt 25.12.4
Run tested: x86_64, Dell EMC Edge620, OpenWrt 25.12.4
Description:
Update to version 1.2.2-18
- Update PKG_RELEASE to 18.
files/etc/init.d/pbr:
- Update package compatibility level to 26.
- Improve IPv4 gateway detection for various scenarios (e.g., netifd,
point-to-point links).
- Add pbr_get_ipaddr4 function to retrieve an interface's IPv4 address.
- Improve IPv6 gateway detection, including link-local router discovery
and point-to-point link handling.
- Add pbr_get_ipaddr6 function to retrieve an interface's IPv6 address.
- Introduce `is_punycode` helper for domain validation, recognizing
internationalized domain names.
- Expand `is_domain` to include `is_punycode` for comprehensive domain
matching.
- Add `warningInterfaceRoutingUnknownGateway` text for improved error
messages.
- Enhance `nftset` dnsmasq element addition logic to properly handle
existing entries and append new specifications for dual-stack.
- Flush IPv4 and IPv6 routes from custom tables during cleanup to ensure
proper state reset.
- Optimize `dns_policy_process` to only record the first IPv4 and IPv6
DNS servers to avoid issues with multi-value `src_addr` in family
mismatch checks.
- Refine IPv4 routing (`interface_routing`) for strict enforcement and
point-to-point links.
- Refine IPv6 routing (`interface_routing`) for strict enforcement and
point-to-point links.
- Adjust display of gateway information (`dispGw4`, `dispGw6`) to show
IP address if no gateway is found.
- Ensure `json_add_gateway` uses `dispGw4` and `dispGw6` for consistent
output.
- Move `process_interface` calls for `reset_globals` and
`enumerate_interface` earlier in `start_service` for consistent
trigger registration.
- Add logic to skip IPv6 interface reload if the gateway is unchanged to
prevent unnecessary restarts.
- Standardize `service_triggers` to always register all triggers,
ensuring robust recovery from WAN-down states.
Signed-off-by: Stan Grishin <stangri@melmac.ca>
Keep the default restart timing based on the moment the recovery action
is triggered.
The optional reset_failure_timer path still starts a fresh failure window
after the recovery action finishes. This makes the two timing modes
explicit.
Signed-off-by: Dharmik Parmar <dharmikparmar2004@yahoo.com>
None of the ddns-scripts executables or scripts report the package version when
run, which causes the generic version probe to fail.
Add a test-version.sh to skip the version check for ddns-scripts and all of
its subpackages.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
The giflib-utils executables (gif2rgb, gifbuild, gifclrmp, giffix,
giftext, giftool) do not report the package version when run, which
causes the generic version probe to fail.
Add a test-version.sh to skip the version check for the giflib and
giflib-utils packages.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
None of the uspot executables (radius-client, uspot, uspot-das) expose
the package version via --version or --help flags. This causes the
generic CI tests to fail with "No executables in the package provided
version".
Add a test-version.sh to skip the version probe for the uspot,
uspotfilter and uspot-www subpackages.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
- Change trigger back to pull_request to ensure it runs correctly on fork PRs
- Add a wait-for-formalities job that polls the GITHUB_TOKEN for FormalityCheck status
- Execute the feeds package test build only when the formalities check succeeds
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
The kea-ctrl-agent utility was deprecated in Kea 3.0 and removed in 3.2.
Adopt test.sh to not use the removed command and its config/password
stubs.
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Philip A. Prindeville
Tianling Shen
Etienne Champetier
Mario Andrés Pérez
Alexandru Ardelean
dependabot[bot]
Michael Heimpold
Christian Lachner
Josef Schlehofer
Michael A Cassaniti
Rui Salvaterra
Ivan Pavlov
Javier Marcet
Dirk Brenken
Hannu Nyman
Ricard Nacher
Mikhail Gusarov
Mieczyslaw Nalewaj
Daniel F. Dickinson
Stan Grishin
Juanyong Dong
Dharmik Parmar
Niklas Thorild
Thibaut VARÈNE