OpenVPN supports more hooks than just 'up' and 'down'. Especially
reacting to 'route-up' and 'route-pre-down' events could be important.
When routing table changes, it can make sense to adapt firewall, run
some tests or change even more routes. This change passes those events
to hotplug, so it is easy to react to them without changing
configuration files provided by VPN provider.

This has been sent to upstream, in the meantime, let's have it in house.

https://github.com/openwrt/packages/pull/21027

We prepared nice GSM configuration but it was still disabled by default,
so let's enable it.

Update to the latest kernel and drop two patches related to Omnia LEDs
as they were merged upstream.

This option of IPv6 Router Advertisements allows devices connected to
a IPv6-only network to discover IPv6 prefix of the NAT64 gateway.
Devices can use this information for instance to setup client translator
(CLAT) from IPv4 to IPv6 in 464XLAT (RFC 6877) scenario or to handle
IPv4 address literal on application level.

To enable PREF64 option, a new uci parameter ra_pref64 has to contain
the NAT64 prefix, including prefix length. Only lengths of 96, 64, 56,
48, 40 and 32 bits are supported. For example, to annonce the Well-Known
Prefix:

config dhcp 'lan'
        …
        option ra_pref64 '64:ff9b::/96'

SWCONFIG and AR8216_PHY are not needed with DSA. Legacy PTYs are also
not needed. Moreover AR8216_PHY causes a 16 second stall at boot time.

Backport qca8k regmap bulk read/write changes and fdb fixes and add a
kernel 5.15 specific workaround for Turris 1.x (which disables switch
internal PHY MDIO access over management ethernet, since it causes
conflicts with WAN PHY, resulting in unusable WAN).

This should fix the bug
  Micrel KSZ9031 Gigabit PHY mdio@ffe24520:07: phy_poll_reset failed: -110
on Turris 1.x with kernel 5.15.

This ports commit
  f4d949b40485 ("generic: 5.15: backport qca8k fixup for mgmt and mdio read/write")
from upstream OpenWRT. The commit backports 5 qca8k patches to
  target/linux/generic/backport-5.15

The patches are currently backported into
  target/linux/mpc85xx/patches-5.15
by our patch
  mpc85xx: add patches from OpenWrt to improve switch

So this basically renames and moves the patches into another directory.

Take the 8 backported Turris Omnia LED patches from
target/mvebu/patches-5.15 and move them to target/generic/backport-5.15
as they are in upstream OpenWRT.

Rename the patch to conform to the name generated by
  git format-patch

For details see the included patch serie or the github repo:
https://github.com/turris-cz/easycwmp

Last year we prepared U-Boot so that when the turris-omnia-mcu driver is
finally in kernel, U-Boot will, before loading kernel, fixup Omnia's
device-tree by injecting reset-gpios to PCIe nodes (for board revisions
32+).

Now that the device-tree contains the node with "cznic,turris-omnia-mcu"
compatible, U-Boot does exactly that. But the problem is that the
pci-mvebu driver with reset-gpios available fails to enumerate the
ath10k card WLE900VX.

Rename the compatible of the driver to "cznic,turris-omnia-ctrl" so that
U-Boot does not inject the reset-gpios for now.

On WAN side automatically request prefix delegation. On LAN side use
eui64 as static IPv6 identifier (::1 is an easy target) and assign also
fe80::1 to the interface as it is common IPv6 address for a default
gateway.

Marek Behun authored 1 year ago and Michal Hrusecky committed 1 year ago

Update Turris Omnia LED driver patches from upstream, and add pending
patches to support Turris Omnia MCU.

For details see the patch.

We need lighttpd-https-cert enabled in order to get lighttpd up and
running and we have updated default configuration of mwan3 to work with
automatically configured 4G/5G modems, so we shouldn't hesitate to
enable it as well.

Kernel 5.15 updated to version 5.15.135 and 5.10 updated to 5.10.198.

Autoreconf was dropped upstream, so we no longer need this patch.

Somebody again started updating same package as we in out-of-maintenance
branch of OpenWrt, so we need to rebase.

Upgrade openssl to latest version 1.1.1w and follow upstream OpenWrt 22.03 This
upgrade fixing CVE-2023-4807

Bump numpy to version 1.24.3 and added two patches.  First patch used for
setuptools and wheel pinned in pyproject.toml are older than the versions
available in the packages repo. (8d331953f34a1ed231cb24893c68606813c36824)
Second patch is for stops numpy from reading .numpy-site.cfg in the build
user's home directory. (3cee44d88837b5679a96f0155205ec15883d5aef)
Added openblas support. (5cafab68ff5bddf5470e7674bb0bf8d0415e8804)
Upgrade Cython to 0.29.32 (5b9a66cd7c437ab9d0c1e2b466739ec060f6e9d6)

Autoreconfiguring wget can result in broken setup with
GNULIBHEADERS_OVERRIDE_WINT_T not being set. This might be caused by
something being too old, haven't dug deep enough to find the root cause,
but for now using upstream generated configure and Makefile will help us
keep going.

When doing a release, it is nice to also tag a packages feed. It is
bothersome to do it manually, so let's do it automatically if possible.