Update curl to the latest version 8.3.0, fixes CVE-2023-38039

Replaced by php8-mod-sodium.

In openwrt-21.02 php8 does not include sodium extensions, which are used by
some other packages. This is a backport from openwrt packages
repository.
Commit with the changes in openwrt: da7f305f0e3184900bb0643d2875361e4feb62d2

Updating Samba to the latest release fixing even some security issues.

For details see respected patches, but long story short, this updates
Samba to the latest version making sure we have all the security
patches.

lxc 4.0.12 dropped gpg support, so we have to drop it as well and rely
on TLS

maxminddb added a pkgconfig file recently which made bind detect a new
feature and failed when an unexpected dependency was detected by the openwrt
build system

Enable syncthing in /etc/config by default to make sure when we
enable the service, syncthing can run without having to manually
enable it in the config.

Users, by default, expect that the service will run automatically and that
they will configure it while the service is running to see what was changed
and what is the behavior of each function there. This change is going to enable
syncthing to run after installing it instead of tweaking the config manually
(in LuCI or by hand). This is somehow different than how OpenWrt does it. They
force users to configure the app before running. Once they are confident that
the configuration looks good, they enable it, which is also good behavior.
Still, we need to improve the user experience and somehow make it different as
we want that even non-IT guys/girls can configure what they need and install
what they need in our simplified interface called (re)Foris, where we provided
list of packages, which they can install and if it does not run by default, it
looks like something is wrong. For syncthing, we also provide
Transmission WebApp, the integration for Turris OS, which you can find on the
landing page and easily click on it and start configuring it.

Enable transmission in /etc/config by default to make sure when we
enable the service, transmission can run without having to manually
enable it in the config.

Users, by default, expect that the service will run automatically and that
they will configure it while the service is running to see what was changed
and what is the behavior of each function there. This change is going to enable
transmission to run after installing it instead of tweaking the config manually
(in LuCI or by hand). This is somehow different than how OpenWrt does it. They
force users to configure the app before running. Once they are confident that
the configuration looks good, they enable it, which is also good behavior.
Still, we need to improve the user experience and somehow make it different as
we want that even non-IT guys/girls can configure what they need and install
what they need in our simplified interface called (re)Foris, where we provided
list of packages, which they can install and if it does not run by default, it
looks like something is wrong. For transmission, we also provide
Transmission WebApp, the integration for Turris OS, which you can find on the
landing page and easily click on it and start configuring it.

This is WIP as I want to look at it further, because I want to look if
we can copy all the files in bin instead specifying all binaries by
hand, which would prevent this issue.

upstreamed

This config is adjusted from the lighttpd config in the php7 package,
they will be installed to the same location, but the php8 and php7 packages
conflict.

This is connected to
https://gitlab.nic.cz/turris/os/build/-/raw/b70855d09775ef2c83eb60f8e120097da753d903/patches/openwrt/to-upstream/0102-gcc-ppc-expect-sf-ld-suffix-even-with-spe-enabled.patch
("patches/openwrt: gcc 8.4.0: mpc85xx SPE: expect '-sf' `ld` suffix even
with SPE enabled")

It was decided that we should carry this files as they are not required
in OpenWrt.

Michal Hrusecky authored 2 years ago and Josef Schlehofer committed 2 years ago

Files in conf directory has to have extension .conf to be properly
loaded in lighttpd. Changing the extension fixes the problem and makes
php work again on hbl.

Fixes: packages@23f56994 ("lighttpd & turris-webapps: prepare to support upstream OpenWrt lighttpd pkg")

syncthing uses quic-go which warns about insufficient buffer size, so let's increase it:
failed to sufficiently increase receive buffer size (was: 176 kiB, wanted: 2048 kiB, got: 352 kiB). See https://github.com/lucas-clemente/quic-go/wiki/UDP-Receive-Buffer-Size for details.

It seems that with a newer version of squid, this is no longer necessary
as it compiles successfully without this patch.

Josef Schlehofer authored 2 years ago and Simon Borek committed 2 years ago

https://github.com/openwrt/packages/commit/a4a484fbca5c185456cf5ac26e6f47c03ca426e9
(cherry picked from commit c3cac7f4)

fixes libgpg-error build for Turris 1.x with SPE instructions enabled

enables luajit build after enabling SPE instructions on Turris 1.x

These patches were meant for TOS 5.4 and were not reverted properly in
the merge commit

Michal Vasilek authored 2 years ago and Josef Schlehofer committed 2 years ago

[27-Jul-2022 15:50:26] NOTICE: PHP message: PHP Warning:  PHP Startup: Unable to load dynamic library 'gd.so' (tried: /usr/lib/php/gd.so (Error relocating /usr/lib/php/gd.so: gdFontCacheShutdown: symbol not found), /usr/lib/php/gd.so.so (Error loading shared library /usr/lib/php/gd.so.so: No such file or directory)) in Unknown on line 0

libgd-full has freetype support enabled which is now required
for the php7-mod-gd package.