Commit Graph

4452 Commits

Author SHA1 Message Date
David Bauer
bffd263617 gluon-core: return boolean from preserve_channels
This method previously returned the string literal of the config key,
leading to checks evaluating to true even in case this option was
disabled.

Signed-off-by: David Bauer <mail@david-bauer.net>
2022-08-15 20:53:24 +02:00
David Bauer
64f75848da docs: update preserve_channels config key path 2022-08-15 20:53:24 +02:00
David Bauer
d9070eb41a gluon-core: provide migration for preserve_channels
The preserve_channels configuration option was moved to the gluon UCI
package without adding a proper migration.

Signed-off-by: David Bauer <mail@david-bauer.net>
2022-08-15 20:53:24 +02:00
Tom Herbers
e2064e36e3
docs: vpn: add fastd Supernode offloading recommendations
closes freifunk-gluon/gluon#2603

Co-authored-by: Martin Weinelt <martin@darmstadt.freifunk.net>
2022-08-15 15:20:02 +02:00
Tom Herbers
cbef4c299a
docs: vpn: fix titles and move fastd Supernode / Gateway Configuration 2022-08-15 15:12:27 +02:00
Tom Herbers
357aa96c91
ramips-mt7621: add support for Netgear WAX202 (#2589) 2022-08-13 14:36:44 +02:00
Tom Herbers
b85135467b
ramips-mt76x8: add support for Xiaomi Mi Router 4A (100M International Edition) (#2593) 2022-08-11 02:06:42 +02:00
David Bauer
50130c3832
gluon-core: increase ath10k peer limit (#2607)
Increase the peer limit for ath10k-ct from 32 to 96 STAs like it is set
for the non-ct firmware / driver. In order to make this work with the
memory constraints of the wireless platform, reduce the number of
concurrent vdevs to the maximum Gluon uses (4).

Closes #2604

Signed-off-by: David Bauer <mail@david-bauer.net>

Signed-off-by: David Bauer <mail@david-bauer.net>
2022-08-10 17:05:51 +02:00
David Bauer
03bfa36808
Merge pull request #2605 from herbetom/master-updates
modules: update to latest HEAD
2022-08-10 17:03:32 +02:00
lemoer
70951318bc
gluon-respondd: fix missing section "wifi" for request type "neighbours" (#2599)
The below mentioned commit introduced a regression, that the "wifi"
section of the request type "neighbours" was empty:

    ~# gluon-neighbour-info -d ::1 -r neighbours | ffh_pretty_json
    {
      "wifi": [
      ],
      ...
    }

After this commit, the section (correctly) looks like this:

    root@UFU-FWH-A272-Tresckowstr-GemR-vorne:~# gluon-neighbour-info -d ::1 -r neighbours | ffh_pretty_json
    {
      "wifi": {
        "ca:38:7e:42:5f:21": {
          "neighbours": {
            "fe:9f:4d:01:ea:e1": {
              "noise": -102,
              "inactive": 50,
              "signal": -84
            },
            "fe:df:b9:84:37:51": {
              "noise": -102,
              "inactive": 20,
              "signal": -73
            }
          }
        }
      },
      ...
    }

The issue was due to the fact, that the iteration over the (mesh) wifi interfaces
was broken. The code was assuming, that the section

    config interface 'mesh_radio0'
            option proto 'gluon_mesh'

in /etc/config/network contains an option "ifname", which it does not.
The ifname property is only stored in the corresponding section in
/etc/config/wireless:

    config wifi-iface 'mesh_radio0'
            option ifname 'mesh0'
            option network 'mesh_radio0'
            option mode 'mesh'
            ...

Therefore, we now iterate over wifi-ifaces in /etc/config/wireless, that
have the mode 'mesh' instead. This resolves the issue.

Fixes 0f1fa243f7
2022-08-09 22:24:44 +02:00
Tom Herbers
69e8b98ca1
modules: update packages
5343d6a09 yq: Update to 4.27.2
0fd2eb51a python-paho-mqtt: add missing dependency
cd36b6eb8 sslh: update to v1.22c Change notes: 	Updated Makefile package version and hash. 	Added libpcre2 dependency 	Removed USELIBPCRE make flag (no longer optional within sslh) 	Updated patch 001 to work with new sslh Makefile
1eb707605 luajit: patch: PPC/e500 SPE: use soft float instead of failing
b169fd026 libgpg-error: update to 1.45
8694f7f95 squashfs-tools: enable zstd compression by default
5c987e57d cryptsetup: fix library paths by calling autoreconf
79d1abd4c ffmpeg: update to 5.1
cec18eb0d chrony: Avoid building unused gnutls and ca dependencies
7727beb71 gensio: Avoid building unused python and libstdcpp dependecies
51ccd0761 gnutls: Avoid building unused gnutls dependency
bf519e9bc fail2ban: fix patch for python 3.10
3c5270c9d django: bump to version 4.0.6
8fdc92b86 rclone: update to 1.59.0
77afaaa47 nano: update to 6.4
2022-08-09 21:31:38 +02:00
Tom Herbers
af7c6b9b7c
modules: update openwrt
ca58b8b4fe ramips: Add Xiaomi Mi Router 4A 100M International
707ec48ab3 zlib: backport null dereference fix
5e0173de51 zlib: bump PKG_RELEASE after CVE fix
7561eab8e8 zlib: backport fix for heap-based buffer over-read (CVE-2022-37434)
1f9d603141 odhcpd: update to git HEAD
39ac29a68a uboot-mvebu: update to v2022.07
ec8b5cf0e6 realtek: Fix typo in Kconfig prompt
247ef07540 ramips: support fw_printenv for Netgear WAX202
62fff4e1e6 umdns: add missing syscall to seccomp filter
ecf0dc7055 ramips: Add support command fw_setsys for Xiaomi routers
bd9bb13012 ltq-vdsl-app: Fix counter overflow resulting in negative values
bd74c11155 kernel: silence refresh warning
dcb782792b x86: add missing Lex 3I380NX network detection
c2c32bdc80 lantiq: fix lan port 3+4 phy-mode settings for Fritzbox 3390
456d05d6d8 ipq40xx: fix RUTX10 Wi-Fi woes
daa73dc681 libmnl: fix build when bash is not located at /bin/bash
596efe1356 OpenWrt v22.03.0-rc6: revert to branch defaults
f1ff3fd95c OpenWrt v22.03.0-rc6: adjust config defaults
042d558536 mac80211: Update to version 5.15.58-1
c9cc3189ed wolfssl: fix math library build
535f4a5bff odhcp6c: update to latest git HEAD
5a7bcd6977 firewall3: update file hash
c5f0eab222 uboot-at91: fix build on buildbots
972b833e91 uboot-at91: update to linux4sam-2022.04
39810995fb at91bootstrap: update at91bootstrap v4 targets to v4.0.3
2022-08-09 21:31:36 +02:00
lemoer
6df0647301
gluon-mesh-batman-adv: add "gateway_tq" field to respondd statistics (#2596)
This new field reflects the TQ to the selected gateway.

Before this commit, if you had connectivity issues in a larger mesh,
it was a tedious task to understand which nodes are affected and which
are not. By providing this new value for each node, it becomes easier
to see which nodes are affected by the connectivity issues and which
are not.

The new field "gateway_tq" is located at the toplevel of the
statistics resource (next to "gateway" and "gateway_nexthop"):

    gluon-neighbour-info -d ::1 -r statistics
    {
        ...
        "gateway": "02:a1:71:04:09:10",
        "gateway_nexthop": "88:e6:40:20:90:10",
        "gateway_tq": 193,
        ...
    }
2022-08-09 21:09:28 +02:00
David Bauer
5600b87014
Merge pull request #2553 from ffgraz/mmfd
Move common firewall rules to respective packages
2022-08-09 20:43:14 +02:00
Tom Herbers
75ceb0d963
web-admin: ignore minor compat-version on upgrade (#2590)
This implements the same behavior as it is used in the autoupdater [1].

This is for example required to allow the manual installation of
firmware upgrades via the config mode on devices which where migrated
from swconfig to DSA. Otherwise the image will always be invalid.

[1] b804281664
2022-08-09 20:16:33 +02:00
Matthias Schiffer
20eea9b9ca
gluon-mesh-vpn-fastd: fix respondd segfault under load (#2594)
When running "fastd -v" fails, line may be NULL, causing a segfault in
strncmp.
2022-08-09 20:09:31 +02:00
Tom Herbers
33779ccd96
gluon-core: enable bridge port isolation for br-mesh_other interfaces 2022-08-09 10:51:55 +02:00
David Bauer
fa123e56d4
Merge pull request #2591 from herbetom/master-updates
modules: update to latest HEAD
2022-08-05 02:17:09 +02:00
Tom Herbers
b38e590268
modules: update packages
d385ac504 curl: switch default SSL to mbedTLS
910a8a075 telegraf: Update to version 1.23.3
ce619701b knot: update to 3.1.8
93d53a56d dockerd: Update to v20.10.17
17758cf81 docker: Update to v20.10.17
90bbda1b5 libnetwork: Update to f6ccccb for Docker v20.10.17
0f2e46afe containerd: Update to v1.6.6 for Docker v20.10.17
f238e8f7c runc: Update to v1.1.2 for Docker v20.10.17
c85111226 dawn: update to 2022-07-24
944a896e5 dawn: update to 2022-07-22
0902a5fc0 usteer: update to latest HEAD
71db92ef6 usteer: bump to git HEAD
c90aaa1ec dawn: update to 2022-07-21
9552a30bc mutt: add PKG_CONFIG_DEPENDS
ffe306981 opusfile: add autoreconf
10a6452b8 golang: Update to 1.18.4
fb7206356 libextractor: fix iconv handling
7d74fbf37 glib2: disable fortify source
756a3243d wifidog: fix compilation with more recent wolfssl
ef545e031 curl: fix compilation with wolfSSL
fdd16fefa yq: Update to 4.26.1
b0118aab5 xray-core: Update to 1.5.9
d9c09bb40 dawn: update to 2022-07-18
f4eb0c359 mpd: add missing AUDIO_SUPPORT in CONFIG_DEPENDS
ff0dd2d12 mpd-full: remove partial BUILD_PATENTED on ffmpeg
c1732453f postfix: fix download failure
97ebbd014 travelmate: update 2.0.9-2
86408bf66 dawn: update to 2022-07-16
09d9d6093 watchcat: add support to run a script
afd77fd6c watchcat: add IP version selection support; fix bug with unlockbands
8829c4025 libuwsc: fix compiltation with wolfSSL
e1090a022 pdns: update to 4.6.3
a3f25a711 pdns-recursor: update to 4.7.1
71bd1a8a5 telegraf: Update to version 1.23.2
fe38196a7 telegraf: Update to version 1.23.1
859f7319a dnslookup: Update to 1.7.1
e34230521 cloudflared: Update to 2022.7.1
0ac8154bc xr_usb_serial_common: bump to 2022-03-30
cdf76bc38 fio: update to 3.29
298786838 libarchive: fix ext2fs build race error condition
be959ca32 nebula: update to 1.6.0
81cd7959f node: July 7th 2022 Security Releases
d2a2c005d nsutils: Update to latest version, switch to cmake
241a7198a nsutils: bump to new release
953e29f06 python-cryptography: Fix failing build
2022-07-31 13:49:54 +02:00
Tom Herbers
2fd9b8aa19
modules: update openwrt
8b6b73d0e8 wolfssl: make shared again
7ca89e1187 kernel: bump 5.10 to 5.10.134
1db4f5cba3 x86: update defconfig for 5.10.133
762703d397 kernel: bump 5.10 to 5.10.133
aedcbaae37 kernel: bump 5.10 to 5.10.132
a409bd7705 octeon: add SUPPORTED_DEVICES to er/erlite
e0d3dc5de1 uboot-bcm4908: include SoC in output files
066547b974 bcm4908: build bootfs image per-SoC
506432a783 lantiq: fix network port GPIO settings for Fritzbox 3390
ee27a2b706 ipq806x: Archer VR2600: fix switch ports numbering
f2c12b8940 layerscape: update PKG_HASH / PKG_MIRROR_HASH
bddfd3f7ed sdk: add spidev-test to the bundle of userspace sources
396dc89ee7 realtek: correct egress frame port verification
f8a44c22d4 realtek: correct egress frame priority assignment
4da0b5a786 realtek: fix egress L2 learning on rtl839x
8614b8eb5f realtek: fix egress port mask on rtl839x
c240fed242 ramips: add support for Netgear WAX202
d5858c6d97 image: add support for Netgear encrypted image
a1068f77c9 wolfssl: Do not activate HW acceleration on armvirt by default
dbe19b1041 libpcap: fix PKG_CONFIG_DEPENDS for rpcapd
a12eb71c88 wolfssl: WOLFSSL_HAS_WPAS requires WOLFSSL_HAS_DH
41fa086e6f kernel: Refresh kernel patches
aa237757e0 kernel: bump 5.10 to 5.10.131
a51f54b41d kernel: bump 5.10 to 5.10.130
f14122f8e6 kernel: bump 5.10 to 5.10.129
73ef008ea6 kernel: bump 5.10 to 5.10.128
cb9a69807e firewall3: bump to latest git HEAD
8ccd657629 mt7622: remove 300 MHz from dts
606fc4cd81 bcm4908: use upstream-accepted watchdog patches
7eda42a3f3 bcm4908: backport latest DT patches
187f5147d3 kernel: update leds-bcm63138 driver
f1fc90e5a1 kernel: backport LEDs driver for BCMBCA devices
a8001815a6 opkg: update to 2022-02-24
479890083d firmware: intel-microcode: update to 20220510
c5ee4b7863 openssl: bump to 1.1.1q
ade7c6db1e wolfssl: bump to 5.4.0
409534860f ath79: bsap18x0: pad rootfs image
1be4cad669 ath79: ja76pf2: use nvmem cells to specify MAC addresses
94530067ad ath79: move image check for devices with RedBoot
8e09f9ffc3 ath79: switch some RedBoot based devices to OKLI loader
01b8cd3200 rockchip: reliably distribute net interrupts
4fb05e45df wolfssl: re-enable AES-NI by default for x86_64
ec9f82fa18 mac80211: fix AQL issue with multicast traffic
945b13e369 realtek: build sane factory images for DGS-1210 models
3fbf45bd09 realtek: build factory images for all DGS-1210 models
128575d0fd realtek: rename u-boot-env2 to board-name
9081098273 scripts: fix CAMEO tag generator
87e58a43ea realtek: build DGS-1210 images with CAMEO tag
b151362d19 scripts: add CAMEO tag generator
72466aaeb9 realtek: add DGS-1210-28 factory image
b2876e6a3a scripts: add cameo image header generator
8b4169f1c9 bcm53xx: use -falign-functions=32 for kernel compilation
e291e49da3 bcm53xx: enable & setup packet steering
5359a8ca38 bcm53xx: disable GRO by default at kernel level
027f7b18b9 bcm53xx: revert bgmac back to the old limited max frame size
bd826dc9f9 kernel: drop patch adding hardcoded kernel compilation flags
da7c57b086 kernel: support setting extra CFLAGS for kernel compilation
614a420084 kernel: use KCFLAGS for passing EXTRA_OPTIMIZATION flags
2022-07-31 13:49:45 +02:00
Lukas Meyer
0acbbaa3cd
ramips-mt7620: add support for Xiaomi Mi Router 3G v2 (#2587) 2022-07-21 19:40:38 +02:00
Andreas Ziegler
534d92efa6
Merge pull request #2582 from AiyionPrime/ath79-migrate-WNR2200
ath79-generic: migrate wnr2200 and add similar variant
2022-07-18 22:14:10 +02:00
Andreas Ziegler
2d763e4008
Merge pull request #2581 from AiyionPrime/ath79-migrate-re450
ath79-generic: (re)add RE450 v1
ath79-generic: (re)add RE355 v1
2022-07-18 22:13:16 +02:00
J. Burfeind
08cbee99f9
ath79-generic: (re)add wzr-hp-g300nh-s (#2551)
Note: Buffalo has introduced hardware changes without bumping the
revision number. 19.07 did not support the rb-variant so there's no need
to implement a migration for the rb-variant.
Every g300nh supported by Gluon should either be the s-variant or
been flashed wrongly.

Gone due to
commit 45c84a117b ("ar71xx: drop target")
2022-07-18 22:11:49 +02:00
Andreas Ziegler
8448dd2dc5
Merge pull request #2523 from AiyionPrime/ath79-migrate-wndr3700v4
ath79-nand: migrate wndr3700v4
2022-07-18 02:31:41 +02:00
aiyion.prime
5deb3aaeff ath79-nand: (re)add WNDR3700v4
Gone due to
commit 45c84a117b ("ar71xx: drop target")
2022-07-17 14:41:13 +02:00
aiyion.prime
76d382772a ath79-nand: add GL.iNet section title 2022-07-17 14:38:54 +02:00
aiyion.prime
ab999b1666 ath79-generic: (re)add RE355 v1
Gone due to
commit 45c84a117b ("ar71xx: drop target")
2022-07-16 12:30:35 +02:00
aiyion.prime
af4129198d ath79-generic: (re)add RE450 v1
Gone due to
commit 45c84a117b ("ar71xx: drop target")
2022-07-16 12:30:30 +02:00
Andreas Ziegler
ac24b707ed
Merge pull request #2583 from T-X/pr-alfa-network-ap121f
ath79-generic: (re)add support for ALFA Network AP121F
2022-07-11 00:05:54 +02:00
Linus Lüssing
4cbd748e52 ath79-generic: (re)add support for ALFA Network AP121F
Gone due to
commit 45c84a1 ("ar71xx: drop target")

Note that it was wrongly marked as device class tiny in
commit 7fd7116e2a ("targets: add device-class flags") in the past,
the device has 64MB RAM and not 32MB.

Also, the device has no "led-running" assigned in DTS. The device has
three LEDs: "green:vpn", "green:lan" and "green:wlan". The first LED,
"green:vpn", has a "V" icon and was used to show the VPN connection
status in the vendor firmware. This LED will be used via the newly
added "led-boot" fallback in gluon-setup-mode. But will be unused
during normal operation due to the unassigned "led-running" in DTS.

Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>
2022-07-10 23:23:39 +02:00
aiyion.prime
26b5764c74 gluon-setup-mode: add fallback led-boot as status
for devices in targets that do no implement `get_status_led` in /etc/diag.sh
and do not have an led-running in their dts
2022-07-10 23:22:11 +02:00
J. Burfeind
11905af169
ath79-generic: (re)add support for UniFi AC Mesh Pro (#2462)
Gone due to
commit 45c84a117b ("ar71xx: drop target")
2022-07-10 23:10:07 +02:00
aiyion.prime
844f1a8665 ath79-generic: add WNR2200-16M
The CN/RU variant of the device has the same hardware
as the EU already supported, but contains a 16M flash chip.
2022-07-10 21:47:54 +02:00
aiyion.prime
b12ea4169a ath79-generic: (re)add WNR2200-8M
Gone due to
commit 45c84a117b ("ar71xx: drop target")

ar71xx only supported the 8M variant
2022-07-10 21:47:48 +02:00
Steffen Förster
0cd7af9b52
ath79-generic: add AVM FRITZ!WLAN Repeater 300E support (#2406)
Specifications:
* SoC: AR7242 (Virian 400MHz)
* RAM: 64 MB DDR (W9751G6JB-25)
* Flash: 16MB SPI flash (S25FL129PIF)
* WiFi: AR9382 (2.4/5GHz) + 2x SE2595L
* LAN: 1x1000M (PEF7071V)

To install via EVA bootloader, a FTP connection need to be
established to 192.168.178.1 within the first seconds after power on:

  ftp> quote USER adam2
  ftp> quote PASS adam2
  ftp> binary
  ftp> debug
  ftp> passive
  ftp> quote MEDIA FLSH
  ftp> put lede-ar71xx-generic-fritz300e-squashfs-sysupgrade.bin mtd1
2022-07-08 21:13:18 +02:00
Matthias Schiffer
e53e4440ae
gluon-core: always store primary MAC address in lowercase hex digits (#2579)
Depending on the source of the primary MAC address, uppercase digits
would be used on some devices. Convert the address to lowercase for
consistency.

We only change the case for newly configured nodes to avoid changing the
node ID and derives MAC addresses for existing installations.
2022-07-08 20:55:24 +02:00
David Bauer
001316724b
Merge pull request #2578 from blocktrron/upstream-master-updates
modules: update to latest HEAD
2022-07-08 20:54:47 +02:00
David Bauer
842df426bf ramips-mt7622: rename Ubiquiti UniFi 6 LR
The Ubiquiti UniFi 6 LR now has a v2 with a different LED setup, thus
the previous model was added a v1 suffix.

Signed-off-by: David Bauer <mail@david-bauer.net>
2022-07-07 21:40:05 +02:00
David Bauer
a9fff111bd treewide: rename ip6tables-legacy
The ip6tables-legacy metapackage was renamed to ip6ables-zz-legacy.
2022-07-07 19:06:14 +02:00
Maciej Krüger
242a2dccd5
gluon-mesh-layer3-common: add node_prefix6 to check_site 2022-07-07 13:54:08 +02:00
Maciej Krüger
c3af0aca96
gluon-mesh-layer3-common: add radvd from babel 2022-07-07 13:54:05 +02:00
Maciej Krüger
b5f36c7e00
gluon-mesh-layer3-common: add ip6 from babel 2022-07-07 13:52:25 +02:00
Maciej Krüger
b59eb548b5
gluon-mesh-babel: use layer3 common 2022-07-07 13:52:25 +02:00
Maciej Krüger
85d61f12bd
gluon-mesh-babel: remove common fw rules 2022-07-07 13:52:25 +02:00
Maciej Krüger
0cf6fade94
gluon-mmfd: add firewall rules 2022-07-07 13:52:25 +02:00
Maciej Krüger
583dc69961
gluon-l3roamd: add firewall rules 2022-07-07 13:52:25 +02:00
Maciej Krüger
ef7ef09af8
gluon-mesh-layer3-common: add package 2022-07-07 13:52:24 +02:00
David Bauer
317fd91080 modules: update routing
69afa34 bird2: bump to version 2.0.10
2022-07-07 12:49:06 +02:00
David Bauer
88b2f240a2 modules: update packages
1123b9dae travelmate: update 2.0.9
a686f7975 xtables-addons: update to 3.21
d50620e22 xtables-addons: update to 3.20
9b1569377 xtables-addons: add PKG_LICENSE_FILES and use SPDX
1c4e8a14e xtables-addons: fix various warning in lua patch
4a5633b6b xtables-addons: update to 3.19
736996ecb Revert "gcc: update 11 minor version"
d45c8f4c0 collectd: Fix various issues with lantiq dsl metrics.
6e49bec96 unbound: update to 1.16.0
f93755c93 yt-dlp: add package
e846059b1 youtube-dl: drop package
ed2234c1e glib2: replace intl patch with upstream solution
45f10a3be glib2: update libintl handling
19d957cfc glib2: update to 2.70.5
e1598040f openwisp-monitoring: added 0.1.1
dcc80b42c openwisp-config: update to 1.0.1
95acc51cd yq: Update to 4.25.3
3743870bc acme: switch from iptables to nft
d845c3dc3 travelmate: update 2.0.8-3
5651f6a3e gcc: update 11 minor version
d713c4b4d gcc: depend on libzstd
e32d33a2a gcc: update to allow compiling different versions
90e5bfd4f gcc: change maintainer
2022-07-07 12:49:05 +02:00