Commit Graph

30226 Commits

Author SHA1 Message Date
Stan Grishin
d3136095f8 Merge pull request #22864 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: better allow-listing
2023-12-11 03:40:49 -07:00
Stan Grishin
73b689f96e adblock-fast: better allow-listing
* improve allow-listing reliability by running sed from the script-file
  instead of the command-line
* fix user for smartdns files ownership

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 693287e961)
2023-12-11 00:58:27 +00:00
Stan Grishin
b1f6d75628 Merge pull request #22854 from stangri/openwrt-23.05-adblock-fast
adblock-fast: bugfix: block domains from config when not using block-lists
2023-12-10 13:54:50 -07:00
Tianling Shen
3cc9f0f754 upmpdcli: Update to 1.8.6
Removed upstreamed patch.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c438a16052)
2023-12-10 20:18:52 +08:00
Tianling Shen
7697be576b libupnpp: Update to 0.24.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8facff466b)
2023-12-10 20:18:52 +08:00
Tianling Shen
c95ff2e260 libnpupnp: Update to 5.1.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 24b4173030)
2023-12-10 20:18:52 +08:00
Rosen Penev
6d5cd9ad17 upmpdcli: update to 1.8.4
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 303b7b665c)
2023-12-10 20:18:52 +08:00
Rosen Penev
24eb6278d0 libupnpp: update to 0.24.0
Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f53100b69e)
2023-12-10 20:18:52 +08:00
Rosen Penev
10b5d353af libnpupnp: update to 5.1.1
Build with meson. Faster.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit 36360b7406)
2023-12-10 20:18:52 +08:00
Stan Grishin
341d817e2d adblock-fast: bugfix: block domains from config when not using block-lists
* remove empty lines from the combined list to allo optimization code
  to work properly

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 1914114ed3)
2023-12-10 02:51:57 +00:00
Hannu Nyman
0e789a6ab0 Merge pull request #22851 from hnyman/irqfix
[23.05] irqbalance: Fix log spam and correct meson version
2023-12-09 11:27:20 +02:00
Hannu Nyman
8b1531158b irqbalance: Fix log spam and correct meson version
Irqbalance 1.9.3 changed the handling of certain errors.
Specifically EINVAL, trying to set an invalid CPU core,
was changed to be a temporary error, causing log spam from
repeated balancing runs in some devices. See log and strace below.
Mark EINVAL as permanent.

Also correct the version in our own meson.build patch.

Log and strace:

Sat Dec  9 10:17:27 2023 daemon.warn irqbalance: Cannot change IRQ 48 affinity: Invalid argument

open("/proc/irq/48/smp_affinity", O_WRONLY|O_CREAT|O_TRUNC|O_LARGEFILE, 0666) = 6
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6ed9000
ioctl(6, TIOCGWINSZ, 0xbeb134e8)        = -1 ENOTTY (Not a tty)
writev(6, [{iov_base="00000001", iov_len=8}, {iov_base=NULL, iov_len=0}], 2) = -1 EINVAL (Invalid argument)
close(6)                                = 0
munmap(0xb6ed9000, 4096)                = 0
clock_gettime64(CLOCK_REALTIME, {tv_sec=1702109847, tv_nsec=340549081}) = 0
sendto(5, "<28>Dec  9 08:17:27 irqbalance: "..., 80, 0, NULL, 0) = 80
writev(1, [{iov_base="Cannot change IRQ 48 affinity: I"..., iov_len=47}, {iov_base="\n", iov_len=1}], 2Cannot change IRQ 48 affinity: Invalid argument
) = 48

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
2023-12-09 11:00:33 +02:00
Tianling Shen
ac9f4c118c dnsproxy: Update to 0.60.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 3a708afd04)
2023-12-09 00:58:52 +08:00
Tianling Shen
c4e2a69191 yq: Update to 4.40.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a18841e459)
2023-12-09 00:58:48 +08:00
Tianling Shen
711511144f rclone: Update to 1.65.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit ac17302410)
2023-12-09 00:58:45 +08:00
Tianling Shen
7d768e321e v2raya: update to 2.2.4.3
Switched back to tar.gz archive to avoid potential permission issue.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 255e244980)
2023-12-09 00:58:41 +08:00
Jeffery To
4fa89ac516 python-cryptography: Update to 41.0.7
41.0.6 included a fix for CVE-2023-49083 (loading certificates from a
PKCS#7 bundle could lead to a null-pointer-dereference and segfault).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 5f829ad162)
2023-12-08 22:44:26 +08:00
Jeffery To
672a209367 python-cryptography: Update to 41.0.5
This also adds a CPE ID for the package and updates the test.sh script
to use an assert.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit c4a223ed87)
2023-12-08 22:44:26 +08:00
Stan Grishin
49bc08ec1d Merge pull request #22840 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: bugfixes: getsize/resolver
2023-12-07 23:08:40 -07:00
Stan Grishin
af57f8dbfb adblock-fast: bugfixes: getsize/resolver
* do not use standalone grep-package dependent syntax to get the remote
  file size
* various bugfixes to prevent attempts to change/commit if dnsmasq/smartdns
  are not installed

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 496d9b71ab)
2023-12-08 02:43:27 +00:00
Tianling Shen
d87550e02e Merge pull request #22808 from jefferyto/ci-fix-helper-openwrt-23.05
[openwrt-23.05] CI: Fix CI_HELPER
2023-12-08 02:58:27 +08:00
Jonas Jelonek
f93e3ce71e iperf3-mt: remove package
This package was intended to provide the experimental multithreading
support for iperf3. With the update to 3.16, multithreading is available
in mainline iperf3. Thus, remove this package.

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
(cherry picked from 4fb1bdc86c)
2023-12-08 02:26:10 +08:00
Jonas Jelonek
48f35252cf iperf3: update to 3.16
notable changes:
- multithreading support

changelog: https://github.com/esnet/iperf/releases/tag/3.16

Signed-off-by: Jonas Jelonek <jelonek.jonas@gmail.com>
(cherry picked from bdb6d2a37f)
2023-12-08 02:25:55 +08:00
Jeffery To
b6b105abe6 fail2ban: Fix compatibility with Python 3.11
This backports 2 commits from upstream[1]; the other 3 are not strictly
necessary. One of the patches has been updated to remove a change to a
regex that does not exist in 0.11.2.

[1]: https://github.com/fail2ban/fail2ban/pull/3267

Fixes: https://github.com/openwrt/packages/issues/22736

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 0d9cc4aed2)
2023-12-07 15:06:39 +08:00
Moritz Warning
c1a8eb0981 dhtd: udpate to 0.2.6
Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit 75d5ffd167)
2023-12-07 15:06:20 +08:00
Stan Grishin
a6fce67316 Merge pull request #22825 from stangri/openwrt-23.05-adblock-fast
[23.05] adblock-fast: add smartdns ipset/nftset support
2023-12-06 08:40:42 -07:00
Stan Grishin
473b173ffa adblock-fast: add smartdns ipset/nftset support
* bugfix: correct URL to config-update file
* bugfix: check if uci configs exist before chacking for changes
* add support for smartdns ipset-based blocking
* add support for smartfns nftset-based blocking
* disallow non-ascii symbols for smartdns blocking
* add check wherever fw4 restart is needed before calling
  procd_set_config_changed firewall
* improve clean-up code in resolver()
* improve case code for different resolver settings
* modify load_validate_config to allow smartdns.ipset and smartdns.nftset

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 28cd5ecf6e)
2023-12-06 10:24:30 +00:00
Thibaut VARÈNE
d83ed18f8d uspot: add package
uspot is an OpenWrt-native captive portal system.

It leverages existing OpenWrt tools such as uhttpd, dnsmasq, firewall4,
ucode, without needing any external kernel module.

It can achieve the maximum performance allowed by nftables (flow
offloading works).

Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
(cherry picked from commit e6e8e58ae0)
2023-12-05 19:05:27 +08:00
Ariel Xiong
d3ee258616 AriaNg: bump 1.3.2 to 1.3.6
Fix the problem that cannot create new task after clearing checksum option
    Other bug fix and user interface optimization

    Support overriding aria2 global settings with empty content when create new download task (#712)
    Other bug fix and user interface optimization

    Update Traditional Chinese translation (#705, thx @ChiaYen-Kan)
    Other bug fix and user interface optimization

    Add check-integrity to task settings tab (#693, thx @raytrap)
    Fix a spelling mistake (#696, thx @rusq)

     fix due to the index.html (1.3.6) cite these 2 png files. To keep the page looks fine without 404, added these 2 png files.

Signed-off-by: Ariel Xiong <ArielHeleneto@outlook.com>
(cherry picked from commit 904438be39)
2023-12-05 19:05:21 +08:00
Oskari Rauta
ec8fdad70e netbird: update to version 0.24.3
Changelog: https://github.com/netbirdio/netbird/releases/tag/v0.24.3

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 2dd3b1b177)
2023-12-05 19:04:39 +08:00
Oskari Rauta
b4a70180b9 aardvark-dns: update to version 1.9.0
Changelog:
 - update trust-dns to hickory
 - never report an error when the syslog init fails
 - dependency updates

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 88ed83a55b)
2023-12-05 19:04:33 +08:00
Oskari Rauta
d5f206830c netavark: update to version 1.9.0
Changes:
 - add firewalld-reload subcommand
 - bridge: force static mac on bridge interface
 - dependency updates
 - numerous fixes to test suite

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit aa3abde67e)
2023-12-05 19:04:30 +08:00
Oskari Rauta
d88bf3d530 podman: update to version 4.8.0
Changelog: https://github.com/containers/podman/releases

I also updated containers.conf - it has gotten quite a many new
options. I added crun to depends, every other distribution
seems to ship it with podman, and after all it is a default
OCI Container Runtime for podman anyway and has a super low
footprint, so shouldn't be a problem for anyone running
containers, after all you need some storage for that anyway.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 9ab2b8a04d)
2023-12-05 19:04:26 +08:00
Oskari Rauta
21a5a426aa crun: update to version 1.12
Changelog: https://github.com/containers/crun/releases

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit ff51a0b495)
2023-12-05 19:04:14 +08:00
Jeffery To
ee67963716 CI: Fix CI_HELPER
Commit 18d3c529fa caused CI_HELPER to be
set to "''" (two single quotes), leading to an error when test.sh tries
to source $CI_HELPER.

CI_HELPER is not set anywhere else and not passed into the container
environment, so there is no need to test if it has a value.

This fixes the value of CI_HELPER.

Fixes: 18d3c529fa ("github-ci: error on any shell errors")

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 562f5df67f)
2023-12-03 22:37:53 +08:00
Hirokazu MORIKAWA
fc4a85721e node: bump to v18.19.0
Notable Changes
* npm updated to v10
* ESM and customization hook changes
* New node:module API register for module customization hooks; new initialize hook
* import.meta.resolve unflagged
* --experimental-default-type flag to flip module defaults

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
2023-12-03 14:59:49 +08:00
Felix Matouschek
78d47e2a58 postfix: Fix enabling PCRE support
After the change from PCRE to PCRE2 when enabling POSTFIX_PCRE the
resulting postfix build no longer reports pcre as an available module.
(postfconf -m). This is caused by using the wrong syntax for the
HAS_PCRE build flag (HAS_PCRE2 vs HAS_PCRE=2). This fixes the build flag
to use the correct syntax.

Signed-off-by: Felix Matouschek <felix@matouschek.org>
2023-12-03 08:56:33 +02:00
Stan Grishin
641d7f4398 Merge pull request #22773 from stangri/openwrt-23.05-ngtcp2
[23.05] ngtcp2: update to 1.1.0
2023-12-01 12:56:05 -07:00
Stan Grishin
12f34a8bdd Merge pull request #22771 from stangri/openwrt-23.05-nghttp3
[23.05] nghttp3: update to 1.1.0
2023-12-01 12:55:54 -07:00
Moritz Warning
2fd96090af dhtd: update to 0.2.5
Signed-off-by: Moritz Warning <moritzwarning@web.de>
(cherry picked from commit fd1892ef06)
2023-12-01 11:20:12 -08:00
Tianling Shen
78305d7bcf xray-core: Update to 1.8.6
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c0704be027)
2023-11-30 13:07:04 +08:00
Darryl Sokoloski
eee27741d2 netifyd: Updated to v4.4.7
Release notes: https://gitlab.com/netify.ai/public/netify-agent/-/releases/v4.4.7

Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>
(cherry picked from commit 41c9155a80)
2023-11-30 13:04:17 +08:00
Oskari Rauta
03d07dc77d external-protocol: rename and update cni-protocol
cni-protocol can be used for both cni and netavark
and also for many other things, such as vpn's that
lack customized protocol supports for openwrt as a
general externally managed protocol, so it was due
to rename it.

I also added one extra option, search domain, which
is optional and updated scripts retrieving ip address
and routing information.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit a0d7e40494)
2023-11-30 00:04:12 +08:00
Tianling Shen
dba4aa8e0b v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit e766690d13)
2023-11-30 00:04:05 +08:00
Tianling Shen
133b0774d1 v2ray-geodata: Update to latest version
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 03a69f84bc)
2023-11-30 00:04:02 +08:00
Tianling Shen
5645e18801 v2ray-core: Update to 5.12.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 11913a72cc)
2023-11-30 00:03:45 +08:00
Tianling Shen
a537029596 yq: Update to 4.40.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 5fc95dce02)
2023-11-30 00:03:42 +08:00
Tianling Shen
c2ba6ea6f7 dnsproxy: Update to 0.59.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit a678f58912)
2023-11-30 00:03:39 +08:00
Stan Grishin
8dffb5132a ngtcp2: update to 1.1.0
* Changelog: https://github.com/ngtcp2/ngtcp2/releases/tag/v1.1.0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 05cf7cff10)
2023-11-27 17:47:06 +00:00
Stan Grishin
dc358fb4e1 nghttp3: update to 1.1.0
* Changelog: https://github.com/ngtcp2/nghttp3/releases/tag/v1.1.0

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 353bdb9cf0)
2023-11-27 17:44:54 +00:00