See NEWS file for details.

For details see respected patches, but long story short, this updates
Samba to the latest version making sure we have all the security
patches.

There are wrong flags passed to gcc during compilation for Turris 1.X.
Problem description bellow:

$ cat test.c
int main(int argc, char *argv[]) { printf("Hello World %lg\n",
atof(argv[1]) + atof(argv[2])); return 0; }

$ usr/bin/gcc test.c
/usr/bin/ld: Warning: /tmp/usr/bin/../lib/gcc/powerpc-openwrt-linux-muslspe/8.4.0/libgcc.a(adddf3.o)
uses double-precision hard float, a.out uses single-precision hard
float

$ usr/bin/gcc --help=target -Q | grep -E
'(-mcpu=|-mdouble-float|-mfloat-gprs=|-mtune=)'
-mcpu= 8540
-mdouble-float [disabled]
-mfloat-gprs= single
-mtune= 8540

The take out of this is that -mcpu and-mtune má byť 8548, and
-mdouble-float should be enabled and -mfloat-gprs should be double.

This should be fixed by passing `--with-cpu=8548 --enable-e500-double`
to configure script.

In newer kernels, vxlan module is found in different path, changing it
to the new path.

Fix copy & paste error in sentinel-proxy entry, now it is:
* sentinel-proxy: spread cert checks/renewals across 12-hour period

* lighttpd: fix lighttpd configuration on Turris Shield
* sentinel-proxy: fix lighttpd configuration on Turris Shield

Manually rebased:
	backport-5.15/346-v5.18-01-Revert-ata-ahci-mvebu-Make-SATA-PHY-optional-for-Arm.patch
	backport-5.15/603-v5.19-page_pool-Add-recycle-stats-to-page_pool_put_page_bu.patch
	pending-5.15/723-net-mt7531-ensure-all-MACs-are-powered-down-before-r.patch*

Removed upstreamed:
	backport-5.15/705-12-v6.0-net-dsa-mt7530-rework-mt753-01-_setup.patch[2]
	backport-5.15/703-10-v5.16-net-dsa-introduce-helpers-for-iterating-through-port.patch[4]

as of June 10th 2023, debian:stable points to Debian 12 which doesn't
have a python package, we don't need it since all supported Turris OS
versions only use Python 3

Michal Hrusecky authored 1 year ago and Michal Vasilek committed 1 year ago

D-Bus is a local only bus and thus it makes sense to enable it by
default when installed and it is a dependency of ModemManager which is
the easiest way to setup various LTE modems.

Michal Hrusecky authored 1 year ago and Michal Vasilek committed 1 year ago

Serial driver option is missing IDs for Neoway N75-EA, so adding it and
thus making this card work.

5.15.112 changed the mhi driver path

backport of https://github.com/openwrt/openwrt/commit/b2c0d9d01f02f58965eae7d14104423bb3510bd5

Michal Hrusecky authored 1 year ago and Michal Vasilek committed 1 year ago

We need this service enabled to preserve brightness across reboots.

lxc 4.0.12 dropped gpg support, so we have to drop it as well and rely
on TLS

Marek Behun authored 1 year ago and Michal Vasilek committed 1 year ago

Add a backport for Russell King's fix for the crash reported at
  https://forum.turris.cz/t/random-kernel-exceptions-on-hbl-tos-7-0/18865/12

remove two upstreamed patches and manually rebase one patch

* remove upstreamed 804-0001-net-Remove-WARN_ON_ONCE-sk-sk_forward_alloc-from-sk_.patch
* manually rebase 611-v5.12-net-ethernet-mediatek-support-setting-MTU.patch

maxminddb added a pkgconfig file recently which made bind detect a new
feature and failed when an unexpected dependency was detected by the openwrt
build system

https://github.com/openwrt/openwrt/commit/32621086c3b0c641609580bdf83d4c731caa7f5e
added some patches that only apply to OpenWrt 21.02's linux 5.10, this commit
rebases those patches for linux 5.15