Issue:
liblua.so.5.1.5 is missing libm.so.6 in its DT_NEEDED entries, this under-linking resulted in undefined 'sinh' symbols during unit tests.
Fix:
Add a patch (package/utils/lua/patches/055-honor-libs.patch) to ensure $(LIBS) is included when building liblua.so
Reference: PPW-1186, PCF-2425
Signed-off-by: Mabrouka <mabrouka.benbelgacem_ext@softathome.com>
Current PKG_MIRROR_HASH is wrong, but it went unnoticed, because the
tarball is being fetched from @OPENWRT project mirrors. Can be
reproduced with:
make package/ebtables/{download,check} FIXUP=1 DL_DIR=/tmp PKG_MIRROR_HASH=''
Signed-off-by: Petr Štetiar <ynezz@true.cz>
Link: https://github.com/openwrt/openwrt/pull/20322
Signed-off-by: Robert Marko <robimarko@gmail.com>
(cherry picked from commit 7d4edb21b62a84a3a9442263b3080c3d443e12f7)
(cherry picked from commit 0d3076aa19a0f5ebdaa63abb30864cebafbb16bf)
This reverts commit e26e856459.
From release 24.10 we always use wifi-scripts and netifd doesn't ship
netifd-wireless.sh anymore.
When wifi-scripts is selected, the netifd install fails as it can't find
the local script to remove.
To fix it, drop the workaround entirely.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Qualcomm ATH13.0CS needs the dependency on kmod-nf-conntrack to pass the build
of kmod-ipt-ipopt. Introduce a conditional dependency on kmod-nf-conntrack
for ipt-ipopt to ensure that the module is only included when
PACKAGE_kmod-nf-conntrack is enabled, preserving the default behavior.
Signed-off-by: Marvin Lu <marvin.lu@wnc.com.tw>
Qualcomm ATH13.0CS needs the dependency on kmod-pptp to pass the build
of kmod-nf-conntrack. Introduce a conditional dependency on kmod-pptp
for nf-conntrack to ensure that the module is only included when
PACKAGE_kmod-pptp is enabled, preserving the default behavior.
Signed-off-by: Marvin Lu <marvin.lu@wnc.com.tw>
Make it possible to use wifi-scripts for initial wireless
autoconfiguration without netifd as we can't have netifd enabled in the
system, since it would clash with prplWare stack.
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org>
Adapt mac80211.uc script to prpl0S default name and add guest interface
default config following prplOS mainline modification.
References: PCF-1428
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
This patch can be removed, since the change is now applied upstream and available in the version of procd we are using (7330fa55c5)
This reverts commit 4b03b1fbefe0a637ad0eba37be441163094f2144.
Signed-off-by: Matthias Franck <matthias.franck@softathome.com>
This patch was upstreamed and is now available in the currently used 20242.86 version of dropbear.
For this reason we can remove the patch from prplos.
Signed-off-by: Matthias Franck <matthias.franck@softathome.com>
A feed might provide the new wifi-scripts package that moved the wifi
script files to a dedicated package.
Add support for this by tweaking netifd package and check if
wifi-scripts is getting compiled. In such case, remove the netifd
file in favor of feed package.
Signed-off-by: John Crispin <john@phrozen.org>
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
A feed might provide the new wifi-scripts package that moved the wifi
script files to a dedicated package.
Add support for this by tweaking base-files package and check if
wifi-scripts is getting compiled. In such case, remove the base-files
file in favor of feed package.
Signed-off-by: John Crispin <john@phrozen.org>
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
[ this is V1 of the patch as a interim solution before V2 is submitted
upstream and eventually merged ]
For Multi-AP traffic separation requirement, wpa_supplicant parses
802.1Q Multi-AP sub-element and reports:
- VLAN ID of the AP it connects to.
- Multi-AP profile of the AP it connects to.
Closes: PCF-1538
Upstream-Status: Denied [https://patchwork.ozlabs.org/project/hostap/patch/DM4PR19MB6173508761EFFA0E7E366CD8A88E2@DM4PR19MB6173.namprd19.prod.outlook.com/#3434833]
Signed-off-by: Jurijs Soloveckis <jsoloveckis@maxlinear.com>
Signed-off-by: Igor Plesser <i.plesser@inango-systems.com>
Signed-off-by: Maarten De Decker <maarten.dedecker@mind.be>
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org>
We've 3 downstream patches for procd which were cherry-picking since 19.07
releases and this commit rebases them onto the procd from OpenWrt 24.10.
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org>
Lxc automatically mounts sys and proc in the rootfs of the container. When an unprivileged container is created however, the sys and proc of the host should be mounted with option relatime. The procd of openwrt mounts these with option noatime. As a result, an unprivileged container cannot start.
remounting them allows starting of the containers:
mount -t sys sys -o remount,rw,nosuid,nodev,noexec,relatime /sys
mount -t proc proc -o remount,rw,nosuid,nodev,noexec,relatime /proc
The patch modifies procd to do this correctly from the start.
Issue: LCMFT-338 for unprivileged lxc containers, proc and sys should be mounted with relatime
Signed-off-by: Matthias FRANCK <matthias.franck@softathome.com>
When the DHCPv6 client sends a DHCPv6 Solicit with both IA_NA and IA_PD
options, and if the server replies with a status code = NoAddrsAvailable
in the IA_NA option, then currently the DHCPv6 client sends a new
Solicit with only the IA_PD option despite the fact that a prefix was
sent by the server in the previous Advertise.
This behavior is described in
https://datatracker.ietf.org/doc/html/rfc7550#section-4.2
The client must handle the case of a server that does not offer both
valid IA_NA and IA_PD options when both are requested, according to RFC
7550. It should not send a new Solicit, but a Request. The client should
however ignore the Advertise message if none of the IA_NA and IA_PD
options are offered by the server.
References: PCF-1390
Signed-off-by: Matthias FRANCK <matthias.franck@softathome.com>
Netifd is not longer responsible for configuring the gateway. The TR181 components took over this task.
Signed-off-by: Matthias FRANCK <matthias.franck@softathome.com>
- Remove syslog-ng config option that creates a logrotate conf. This
option was causing a duplicate config error in syslog.
- Remove the script from base-files that adds logrotate cron job.
- Add logrotate package. It was selected by the removed config options
before.
- Adapt logrotate test to include separated logs
Signed-off-by: Yüce Kürüm <yuce.kurum@mind.be>
Signed-off-by: Yüce Kürüm <yuce.kurum_ext@softathome.com>
(cherry picked from commit c13ed76075b78604eb21213e1842465cea35f3ea)
We've 3 downstream patches for procd which were cherry-picked from 22.03
release and this commit rebases them onto the procd from OpenWrt 23.05.
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org>
Mount systemd cgroup virtual controller at boot, so they can be used to
run systemd based containers.
Signed-off-by: Matthias FRANCK <matthias.franck_ext@softathome.com>
(cherry picked from commit 69ec728452918e6679b1de74a954c00df0d7c96e)
Set clone_children flag in cpuset, so it inherits the configured defaults of the parent.
Signed-off-by: Matthias FRANCK <matthias.franck_ext@softathome.com>
(cherry picked from commit 58da6b91b3208438d561638618abb2703c230d0b)
Properly mount cgroups in a root tmpfs where every controller is mounted
in a seperate subdirectory, recommended by the kernel documentation of
cgroupsv1.
Signed-off-by: Matthias FRANCK <matthias.franck_ext@softathome.com>
(cherry picked from commit af84ad24a6acd355ec39c8355eccb02e47b3bec6)
We've now prplOS version available, so lets make it available in build
artifacts as well.
References: PCF-691
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 8cf5efccf9ec8cdb5b1e9baad6f14b2dbf40e8a8)
According to TR181, setting the RSEnable parameter to false should result in no router solicitation messages to be sent from the interface. This seems not the case, the messages are always seen regardless of the parameter value.
To solve this patch odhcp6c to not automatically sends Router Sollicitations as well.
This patch should be properly reworked to make it upstreamable. This progress is tracked in PCF-950
(cherry picked from commit 0f87c3f5a34f85c24e33c174a3baf26df1773056)
Dropbear currently only supports binding on IP addresses and not on
interface bounding. Problem with the IPv4 address binding is that
dropbear needs to restart each time you get a new IP address, breaking
current connections.
Upstream-Status: Merged [https://github.com/mkj/dropbear/pull/229]
Signed-off-by: Diederik De Coninck <diederik.deconinck_ext@softathome.com>
Signed-off-by: Matthias FRANCK <matthias.franck_ext@softathome.com>
Signed-off-by: Petr Štetiar <ynezz@true.cz> [patch refresh]
(cherry picked from commit cf92a90cc7f0f660048366c12fdde870b0c41850)
To translate the logical interface name (e.g. lan) to the physical name (e.g. br-lan)
- first odhcpd will look in /etc/config/dhcp for dhcp.lan.ifname or dhcp.lan.networkid
- then, if compiled with WITH_UBUS, odhcpd will look at /etc/config/network and the interface name is overruled even if not found
This patch should be upstreamed. This is tracked in PCF-951.
Signed-off-by: Matthias FRANCK <matthias.franck_ext@softathome.com>
(cherry picked from commit be95bc06b69d27e53528edc99898fc80c6362ac0)
For now services and hosts are not linked, umdns need to be modified to allow that link witch is required by tr181
This patch should be upstreamed, this progress is tracked in PCF-952.
Signed-off-by: Matthias FRANCK <matthias.franck_ext@softathome.com>
(cherry picked from commit 637e7e319dcace9c5411b407f2a967b4ff6cce33)
Currently two IPv6 related tests ipv6_app_114 (FTP) and ipv6_app_124
(TFTP) fails due to disabled automatic conntrack helper, so fix it by
enabling it explicitly.
Fixes: PCF-840
References: PCF-671
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 4b76442e50b28ce19de1278c3d3451eaede7aa48)
(cherry picked from commit 1d6070b9acbe731273fcf3534e97fec7adc11a38)
I've just discovered broken networking on x86/64 QEMU target due to
changes introduced in commit 484946872ee6 ("base-files: board.d: add
guest bridge to default network config"), where guest bridge touches
network configuration and thanks to that x86/64 QEMU is not getting
default network configuration applied, which creates incomplete network
configuration. So fix it by moving guest bridge configuration past
default network configuration.
Fixes: 484946872ee6 ("base-files: board.d: add guest bridge to default network config")
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit f8d96184e88c2eb226682a6c72b98eabaa0caf3d)
(cherry picked from commit 8e6657045d00cfa45ddbcc380389a37c8094b2b5)
Backport cron job setup from commit fb0a7d7bcc84 ("profiles: prpl: fix
various issues in syslog-ng and tr069-manager").
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 2a93b4289725466a1bab6b815afcf3ed7c93a0c4)
With the recent addition of several kernel module dependencies needed by
tr181-qos manager we've started experiencing issues with command prompt
detection in labgrid's shelldriver component.
It's likely related to longer kernel module loading times, which is then
having impact on delayed and longer kernel messages output on serial
console, thus interleaving labgrid command markers with kernel messages
and causing command prompt detection unreliable.
Current serial console loglevel is set to debug log level (KERN_DEBUG=7)
which makes kernel output very verbose and in some corner cases it's
causing interleaving of messages on serial console which makes currently
controlling of the DUT via labgrid framework very unreliable.
Fixing this properly via PCF-617 upstream in the labgrid framework is
going to take some time, so as a temporary workaround we're going to
decrease default kernel log level to warning (KERN_WARNING=4) which
limits kernel log output to the serial console a lot. Those kernel log
messages are not lost, they're still available in syslog's messages log
file.
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit c57924854a129013bc8ba646b6953bf65baae255)
(cherry picked from commit fdf99433f1503da01dac50f3c3f7670e0f441738)
It was decided to rename project name from prplWrt to prplOS, so change
default hostname to prplOS as well.
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit c7f349bb00021f768f660d3de0b36f08f4d36c96)
(cherry picked from commit d26279279e70fc4316172ba3b0a9bc87d82ca844)
Project was renamed in 8/2021 so let's update the welcome banner as well.
Closes PCF-639
Signed-off-by: Olaf Wachendorf <olaf.wachendorf@maxlinear.com>
(cherry picked from commit a03b397f687d95415433d09caa28695e40059414)
(cherry picked from commit 24a271688f57bc16f9b2936ad54891bba10b6ddf)
It was decided, that prplOS should ship with guest bridge in default
config.
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit 484946872ee642fe0edff433857cad19c34d165b)
(cherry picked from commit 9c3661be648ed133a717f97d8ec0e94a4382d0f7)
cdrouter_firewall_508: Verify outbound packets are not forwarded if the
source address is not a prefix of the interior network
This test ensures that the random martian address assigned to the LAN
client in step 2 is outside of lanIp/lanMask, does not match any static
routes configured with staticRouteLanNetwork and is not within any of
the following reserved IP ranges: 0.0.0.0/8,
127.0.0.0/8, 169.254.0.0/16, 192.88.99.0/24, 224.0.0.0/4,
240.0.0.0/4, 255.255.255.255/32.
Make the test pass by setting `rp_filter` to strict mode. Strict mode as
defined in RFC3704 Strict Reverse Path Each incoming packet is tested
against the FIB and if the interface is not the best reverse path the
packet check will fail. By default failed packets are discarded.
Current recommended practice in RFC3704 is to enable strict mode to
prevent IP spoofing from DDos attacks. If using asymmetric routing or
other complicated routing, then loose mode is recommended.
References: PCF-548
References: https://tools.ietf.org/html/rfc3704
References: https://www.kernel.org/doc/Documentation/networking/ip-sysctl.txt
Signed-off-by: Petr Štetiar <ynezz@true.cz>
(cherry picked from commit b9ad7cbf75a4a99b22ef0906d8a76d7b71a8df97)
(cherry picked from commit 4a593e72e3b4751074311f1d1f3607b13d5d9128)
6953f19 wireless-regdb: Update regulatory info for Indonesia (ID) for 2025
2e8214e wireless-regdb: Permit 320 MHz bandwidth in 6 GHz band for GB
a94f685 wireless-regdb: Update regulatory info for Egypt (EG) for 2024
7628ce2 wireless-regdb: Update regulatory rules for Brazil (BR) on 6GHz
4411b39 wireless-regdb: Update regulatory info for Vietnam (VN) for 2025
490f136 wireless-regdb: Update regulatory info for Estonia (EE) for 2024
c56c663 wireless-regdb: update regulatory rules for Paraguay (PY) on 6 GHz for 2025
5a8ced5 wireless-regdb: Update regulatory info for CEPT countries for 6GHz listed by WiFi Alliance
5fd8ee3 wireless-regdb: update regulatory rules for Bosnia and Herzegovina (BA) for 6 GHz
e05260a wireless-regdb: update regulatory database based on preceding changes
Link: https://github.com/openwrt/openwrt/pull/19474
(cherry picked from commit 7fe06b7f56d95703a0cfb4c0e54dc8a6731dc70c)
Link: https://github.com/openwrt/openwrt/pull/19538
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Currently the system boots up, but is unusable because pressing enter
does not provide login with error:
login: can't get SID for root
This is happenning, because login.c passes the Linux username directly
to get_default_context(), while libselinux expects an SELinux user
identity, causing the call to fail for users without a matching SELinux
name (e.g., root) and aborting login on SELinux-enabled systems.
Fixes: #19075
Upstream-Status: Submitted [https://lists.busybox.net/pipermail/busybox/2025-April/091407.html]
Signed-off-by: Petr Štetiar <ynezz@true.cz>
Link: https://github.com/openwrt/openwrt/pull/19080
(cherry picked from commit 5809bfaaacca1d10c2e77bd073065d1d3b77527e)
Link: https://github.com/openwrt/openwrt/pull/19542
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Correctly load the list of basic_rates from UCI. basic-rates shall be
stored as a option-list. The current code did not retrieve this list
correctly.
wpa_supplicant uses a different config option to set basic-rates
when operating in mesh-mode.
Use the correct config key and calculation for mesh-interfaces.
Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit a854d833eabdbc3b42065927c136d75b981a1021)
Fixes misaligned allocations for ext resources
Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit 6c22e8ef538926cec829dcb98f04c0347e621b7f)
5d10084ea885 lib-ucode.c: add #define _GNU_SOURCE
a95364b41d52 udebug-cli: fix terminating uloop
c00eb9b685a8 ucode: use FILE handle for pcap output
4265167cb6e8 ucode: add error reporting to pcap_write
4a908ee731a6 udebug-cli: stop event loop on write failure
6e04f4187231 ucode: use ucv_resource_create_ex for remote rings
c297f04e1852 ucode: drop use ucv_resource_create
f207d37a1055 ucode: add support for specifying ring format
98683a94bcdd ucode: support appending array data, similar to socket.send()
a7ecd483ed38 ucode: allow calling udebug.init() multiple times
d4a4c788c416 ucode: fix allocation size of local ring meta
184706abaf50 ucode: add timestamp argument to foreach()
8442c948c193 ucode: add function for getting ring information
f4958a4c591a ucode: add const entries for enum udebug_format
14d4fec36993 udebug-cli: add logstream command
6ed8536142bb ucode: fix entries/size confusion
Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit 7b0ce213e9b678522dae49bac7b20681a123f019)
Add uboot-envtools support for Gateworks venice boards based on i.MX8M
SoC's (imx_cortexa53) which boot from and store their U-Boot env on
eMMC boot0 hardware partition.
Signed-off-by: Tim Harvey <tharvey@gateworks.com>
Link: https://github.com/openwrt/openwrt/pull/19347
(cherry picked from commit 29f7c0ef977f03c32ebc5031cc1cda75b6fa2268)
Link: https://github.com/openwrt/openwrt/pull/19437
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
