Commit Graph

1271 Commits

Author SHA1 Message Date
Liangbin Lian
9e81eb178f Merge commit '859ff7a978aea150588e7e21a1333884ab85739f' into istoreos-24.10
# Conflicts:
#	package/libs/mbedtls/Makefile
#	package/libs/openssl/Makefile
2025-10-22 11:23:51 +08:00
Felix Fietkau
a790196993 ubus: update to Git HEAD (2025-10-17)
b462895d3157 lua: CMakeLists: drop redundant cmake_minimum_required
f247c18f8a55 examples: CMakeLists: drop redundant cmake_minimum_required
83a70399030d github: add CI build
d31effb4277b ubusd: Fix out of bounds access in event register message
d95837b1b143 ubusd: acl: compare uid/gid instead of user/group strings
b81257bb20dd ubusd: load extra group IDs for a client process
7d7b45fea05b add debian/ directory
aa4a7ee1d341 ubusd: fix more instances of missing length checks for patterns
60e04048a0e2 ubusd: fix ACL check for receiving events

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit 4b907e69ea)
2025-10-18 14:56:36 +02:00
Hauke Mehrtens
c8ccf4c6a7 ubus: update to Git HEAD (2025-10-04)
ad2768bbc166 lua: build: require CMake >= 3.10 due to dropped legacy support

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit b00fcf3614)
2025-10-18 14:56:36 +02:00
Christian Marangi
a46d2efad2 ubus: update to Git HEAD (2025-10-04)
2b69c9859946 examples: CMakeLists: update cmake minimum required version to 3.10

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 88fe81bb0c)
2025-10-18 14:56:36 +02:00
Liangbin Lian
2d19c7dbb3 Merge commit 'ef40cc6a4252998510232de913c3b5a163236f57' into istoreos-24.10
# Conflicts:
#	package/boot/uboot-rockchip/Makefile
#	package/kernel/r8125/patches/200-r8125-print-link-speed-and-duplex-mode.patch
#	package/libs/openssl/Makefile
2025-09-28 16:17:27 +08:00
Hauke Mehrtens
2a2f1573a7 rpcd: update to git openwrt-24.10 branch HEAD
8b320f9 ucode: adjust for new ext resource type
 e61d2be sys: use strstr() to detect installed packages
 bba9519 rpc-sys: packagelist: don't truncate input lines on read

The removed patch was applied upstream.

Link: https://github.com/openwrt/openwrt/pull/19919
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-09-01 23:20:26 +02:00
Fengyu Wu
bf0887bd42 ca-certificates: Update to 20250419
upstream changelog:

[ Alexander Kanavin ]
* update-ca-certificates: add a --sysroot option

[ Julien Cristau ]
* Update Mozilla certificate authority bundle to version 2.74.
  The following certificate authorities were added (+):
  + D-TRUST BR Root CA 2 2023
  + D-TRUST EV Root CA 2 2023
  The following certificate authorities were removed (-):
  - Entrust Root Certification Authority - G4
  - SecureSign RootCA11
  - Security Communication RootCA3
  - SwissSign Silver CA - G2

Signed-off-by: Fengyu Wu <saldry@proton.me>
Link: https://github.com/openwrt/openwrt/pull/19462
(cherry picked from commit 8bf023da76)
Link: https://github.com/openwrt/openwrt/pull/19839
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-08-24 15:30:57 +02:00
Felix Fietkau
b2116dbce4 rpcd: backport ucode fix
ucode: adjust for new ext resource type
ucv_resource_dataptr always returns null for resources with embedded data.

Fixes: https://github.com/openwrt/rpcd/issues/17
Fixes: https://github.com/openwrt/luci/issues/7878
Fixes: https://github.com/openwrt/openwrt/issues/19726
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2025-08-09 16:01:48 +02:00
Felix Fietkau
37233122a7 ubus: update to Git HEAD (2025-07-02)
27839f854a58 ubusd: make txq_len field signed
b35b2bc63e8e ubusd: treat EACCES on write like EAGAIN
713e9d19b2b6 ubusd: retry write on EINTR
8bb523ab20e0 ubusd: fix txq_len accounting
b1b783c74742 ubusd: add another tx attempt on enqueueing the first message for a client
5952b48e251c ubusd: do not call socket callback from ubus_msg_send

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit 90cd8640bd)
(cherry picked from commit d9cd67b542)
2025-07-17 10:45:15 +02:00
Liangbin Lian
768fc8a806 Merge commit '5ff7149a08df0a5f408ceb48c1b0ca2a40b49b3e' into istoreos-24.10
* commit '5ff7149a08df0a5f408ceb48c1b0ca2a40b49b3e': (142 commits)
  OpenWrt v24.10.2: revert to branch defaults
  OpenWrt v24.10.2: adjust config defaults
  ramips: mt7621: include uboot-envtools in some missed devices
  ipq806x: fix Extreme Networks AP3935 LAN/WAN ports
  ipq806x: fix Extreme Networks AP3935 LAN LED order
  kernel: Fix IPv6 UDP fragmentation regression
  wifi-scripts: add missing mesh_nolearn
  hostapd: fix generating own neighbor report for dynamically added/changed interfaces
  hostapd: fix dealing with mac address changes for the primary BSS
  perf: disable slang support
  mediatek: filogic: add support for Cudy WR3000E v1
  mediatek: Create common DTSI for WR3000H and WR3000S
  mediatek: filogic: fix 2.5G phy compatible for WR3000H
  mediatek: filogic: Cudy WR3000H: Fix SUPPORTED_DEVICES
  mediatek: filogic: Add support for cudy wr3000h
  tools/expat: bump to 2.7.1 to fix several CVEs
  tools/patch: bump version to v2.8
  strace: Update to version 6.12
  arm-trusted-firmware-stm32: bump to v2.10.17
  include/trusted-firmware-a.mk: support LTS releases
  ...

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>

# Conflicts:
#	package/kernel/r8101/Makefile
#	package/kernel/r8125/Makefile
#	package/kernel/r8126/Makefile
#	package/kernel/r8127/Makefile
#	package/kernel/r8168/Makefile
2025-07-02 17:41:21 +08:00
Felix Fietkau
2f27d0fefa ubus: update to Git HEAD (2025-05-16)
88e6325092bf libubus: flush all pending requests on connection loss

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit 707a89bc26)
2025-06-12 14:33:54 +02:00
Liangbin Lian
7729950b76 package/ubox: kmodloader: fix built-in modules not populating dependencies
Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
2025-05-20 20:22:31 +08:00
Liangbin Lian
64ff5bf336 package/rpcd: mark as hold 2025-05-20 20:21:14 +08:00
Liangbin Lian
67e44084fb package/uci: mark as hold 2025-05-20 20:20:58 +08:00
Liangbin Lian
cbb3b549e7 Merge commit '6271b14140609bfb7480c231ff57ce4e68b2744d' into istoreos-24.10 2025-05-19 17:23:46 +08:00
Liangbin Lian
5d544db3f7 package/fstools: block: use NTFS mount helper if exists 2025-04-21 12:38:10 +08:00
Hannu Nyman
0425664679 ca-certificates: Update to 20241223
Update ca-certificates to version 20241223

  * Update Mozilla certificate authority bundle to version 2.70.
    The following certificate authorities were added (+):
    + Telekom Security TLS ECC Root 2020
    + Telekom Security TLS RSA Root 2023
    + FIRMAPROFESIONAL CA ROOT-A WEB
    + TWCA CYBER Root CA
    + SecureSign Root CA12
    + SecureSign Root CA14
    + SecureSign Root CA15
    The following certificate authorities were removed (-):
    - Security Communication Root CA (closes: #1063093)

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Link: https://github.com/openwrt/openwrt/pull/18468
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit c79572210f)
2025-04-13 18:38:32 +02:00
Liangbin Lian
680b2710ee package/uci: refresh patch 2025-04-11 20:17:30 +08:00
Liangbin Lian
56fb0073fb package/zram-swap: support enabled flag 2025-04-10 15:27:39 +08:00
Liangbin Lian
3919b07625 package/rpcd: recovery from a failed uci commit
If uci commit failed, recovery uci, then return a error.

Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit 46ac9ad595fd492d2477e45bcbe9f4bebc13e013)
2025-04-10 15:27:39 +08:00
Liangbin Lian
438a677508 package/uci: prevent writing empty configuration files when disk is full
Signed-off-by: Liangbin Lian <jjm2473@gmail.com>
(cherry picked from commit 2408c5fdeead2d77529a6306a5d1b5a6c2fcf663)
2025-04-10 15:27:39 +08:00
Liangbin Lian
c7fb82b572 opkg: selects curl
fix "opkg: use curl as downloader"
2025-04-10 15:27:39 +08:00
Liangbin Lian
ba9a67bb02 package/fstools: fstab essential mount point hook 2025-04-10 15:27:39 +08:00
Liangbin Lian
8e0b836b38 package/fstools: fstab supports waiting essential mount point on boot 2025-04-10 15:27:39 +08:00
Liangbin Lian
ac4b254c25 opkg: use curl as downloader 2025-04-10 15:27:38 +08:00
Liangbin Lian
031d4e160b istoreos: use dedicated overlay partition and support sandbox 2025-04-10 15:14:28 +08:00
Qiyuan Zhang
082608fd2b mtd: check the return value of malloc and pread
Check the return value of malloc and pread in case they fail.

Signed-off-by: Qiyuan Zhang <zhang.github@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/16070
(cherry picked from commit 3f014543cd4bd099dc089cbb9b9b2d7b0db8a021)
Signed-off-by: Rafal Boni <rafal.boni@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/17889
Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-02-16 13:03:23 +01:00
Qiyuan Zhang
ab9f1011ac mtd: fix resetbc on nand w/ min I/O size > 2048
Fix a bug in linksys_bootcount.c that resetbc  won't work on nand
with min I/O size> 2048.

Check the boot-log entry's intergrity with checksum.

Signed-off-by: Qiyuan Zhang <zhang.github@outlook.com>
Link: https://github.com/openwrt/openwrt/pull/16070
(cherry picked from commit 62da99e6d506f3517f50c1efd61e1911df507ae3)
Signed-off-by: Rafal Boni <rafal.boni@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/17889
Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-02-16 13:03:23 +01:00
Felix Fietkau
f9df8a90c8 uci: update to Git HEAD (2025-01-20)
047b2efc1348 CMakeLists.txt: bump minimum cmake version
16ff0badbde7 CMakeLists: add support for including ABIVERSION in the library version number

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit e046f8c318)
2025-01-20 22:17:51 +01:00
Felix Fietkau
6d3fdebe3c uci: update to Git HEAD (2025-01-17)
fb3c2343b17b add support for an override config directory

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit 44c877f197)
2025-01-17 12:05:18 +01:00
Christian Marangi
c7716f363e uci: update to Git HEAD (2024-11-26)
10f7996ec294 file: Ignore config file with '.' in name

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 3929ef4c21)
2025-01-17 12:05:14 +01:00
Hauke Mehrtens
43e1b47d70 procd: update to Git HEAD (2024-12-22)
42d3937 jail/seccomp: add support for loongarch64

Link: https://github.com/openwrt/openwrt/pull/17335
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit f69fc4c413)
2025-01-03 21:54:03 +01:00
Felix Fietkau
efebdf077c ubus: update to Git HEAD (2025-01-02)
d996988ae55b libubus: close file descriptor after sending it from a request
afa57cce0aff libubus: add support for using channels

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit f0df6e3a4a)
2025-01-03 12:07:07 +01:00
Robert Marko
184d1c93cb config: rename SECCOMP to USE_SECCOMP
It seems that we have some kind of a symbol name conflict which causes
CONFIG_SECCOMP to always be read as y.

Unfortunatelly, I could not figure out what is causing this, but simply
renaming SECCOMP to USE_SECCOMP seems to properly work and leaves the
symbol unset unless arch dependencies are satisfied.

This fixes qoriq and others that dont support seccomp from failing due
to procd-seccomp package being selected to get included but it cannot be
built for them:
ERROR: unable to select packages:
  procd-seccomp (no such package):
    required by: base-files-1637~52b6c92479[procd-seccomp]

Fixes: 4c65359af4 ("build: fix including busybox, procd and apk/opkg in imagebuilder")
Link: https://github.com/openwrt/openwrt/pull/17048
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit a48ec449cc)
2025-01-03 11:18:56 +01:00
Felix Fietkau
f97e729f8c build: fix including busybox, procd and apk/opkg in imagebuilder
Since the image builder pulls package lists from metadata directly,
add procd and busybox as depdendencies to base-files.
As for the package manager itself, since it can be disabled it needs
to be added directly in the image builder makefile

Fixes: 44598c233d ("build: remove broken dependency of metadata on toplevel .config variables")
Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit 4c65359af4)
2025-01-03 11:11:19 +01:00
Felix Fietkau
83afb428b0 build: remove broken dependency of metadata on toplevel .config variables
Instead of relying on .config symbols for metadata, alter the DEFAULT
variable of affected packages. Fixes enabling opkg vs apk among others.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit 44598c233d)
2025-01-03 11:10:12 +01:00
Felix Fietkau
6642ee73bc procd: add support for reload triggers on data change
This can be useful to reload the firewall when procd firewall data changes

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit 49d92d3e93)
2024-12-17 22:00:37 +01:00
Felix Fietkau
f760f74209 procd: do not overwrite service data by default
Allows a running servie to manage its own data if untouched by the init script

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit 8c5826b140)
2024-12-17 22:00:37 +01:00
Felix Fietkau
5dca1d6a41 procd: update to Git HEAD (2024-12-17)
2e206dbe77ec service: add support for triggers on service/instance data changes
735b48728fca service: remove leftover lines from previous commit
32469644a029 service: allow incremental changes to service properties
fd01fb852302 service: fix double free bug when dealing with data

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit 3d900bd055)
2024-12-17 22:00:37 +01:00
John Crispin
e109caeec4 procd: update to latest HEAD
e2f05de state: set_stdio: chdir back to / in case of failure
30542c9 inittab: Disable implicit controlling TTY.

Signed-off-by: John Crispin <john@phrozen.org>
(cherry picked from commit 2bcc49aef9)
2024-12-17 22:00:37 +01:00
Petr Štetiar
17bdccb4a5
apk: mark package as broken to hide it by default
During the last OpenWrt developer meeting 2024-11-26 it was decided,
that 24.10 will be the last release using opkg package manager and thus
apk won't be supported, so make it explicit and mark apk package manager
as broken.

References: https://openwrt.org/meetings/20241126#release_2410
Link: https://github.com/openwrt/openwrt/pull/17097
Signed-off-by: Petr Štetiar <ynezz@true.cz>
2024-11-28 18:49:43 +00:00
Daniel Golle
0de3c201b1 procd: update to git HEAD
7330fa5 initd: mount /sys and /proc with MS_RELATIME

Fixes mounting /proc in unpriviledged user namespace.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 1e8505ac4e)
2024-11-26 12:23:06 +00:00
Christian Marangi
a82b097635
procd: update to Git HEAD (2024-11-06)
109fa41b2321 system: fix description value from os-release

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
(cherry picked from commit 09a8b4920c)
2024-11-06 10:39:42 +01:00
Robert Marko
4ec95518de nu801: Mark as nonshared to build in step 1
Mark the package as nonshared to build it in the target specific build
step 1 of the build bots instead of the architecture generic build step 2.

In the build step 2 it may be left out if we build it using a different
target.

Fixes: #16857
Link: https://github.com/openwrt/openwrt/pull/16859
Signed-off-by: Robert Marko <robimarko@gmail.com>
2024-11-05 10:58:37 +01:00
Kuan-Yi Li
92fd12e7fd
openwrt-keyring: fix missing 24.10 usign key by installing it
@KA2107 reported that opkg is not able to verify the artifact signatures
produced by buildbot using the usign 24.10 release keys. So lets fix it
by actually adding the 24.10 usign key with d310c6f2833e97f7 fingerprint
into the openwrt-keyring package.

Fixes: #16850
Reported-by: @KA2107
Fixes: a535cfc09e ("openwrt-keyring: add OpenWrt 24.10 release build usign key")
References: 2d03f27f0f ("openwrt-keyring: make opkg use 22.03 usign key")
Signed-off-by: Kuan-Yi Li <kyli@abysm.org>
Signed-off-by: Petr Štetiar <ynezz@true.cz> [commit description]
2024-11-04 09:23:40 +00:00
Petr Štetiar
07e5dd4c4f
openwrt-keyring: add OpenWrt 24.10 release build usign key
fbae29d730f8 usign: add OpenWrt 24.10 release build public key

Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit a535cfc09e)
2024-11-01 06:32:51 +00:00
Christian Marangi
0d96ed1894
apk: switch to wget url backend for HOST tool
Switch APK to wget url backend for HOST tool to handle a problem with
libressl.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2024-10-29 00:07:54 +01:00
Christian Marangi
f59cbe55d1
apk: add patch adding support for ARM Big-Endian arch
Add patch adding support for ARM Big-Endian arch like Intel XScale
IXP4xx SoC.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2024-10-29 00:07:53 +01:00
Christian Marangi
f72879dd60
apk: bump to latest HEAD 2024-10-28
Bump APK to latest HEAD 2024-10-28.

- Minor fixed to index inherit
- Fixup to adb_w_copy

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2024-10-29 00:07:51 +01:00
Hauke Mehrtens
b97cb7b905 ubus: update to Git HEAD (2024-10-20)
65bb027 CMakeLists.txt: bump minimum cmake version
252a9b0 libubus: Make UBUS_* macros work cleanly in C++

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2024-10-20 23:59:51 +02:00