This version fixes path for mox_do_sign or in newer kernel versions as
do_sign, where it is now located in debugfs.

This package was a dependency for Foris, but Foris was removed in
develop branch already for Turris OS 6.0, this is a leftover, so drop
this.

Release notes:
https://www.knot-resolver.cz/2022-08-16-knot-resolver-5.5.2.html

set-turris-auth stores the password hash in the turris-auth uci section
which didn't exist unless /etc/config/turris-auth was created manually.

    %: set-turris-auth
    New password (input not printed!):
    New password again:
    Traceback (most recent call last):
      File "/usr/bin/set-turris-auth", line 33, in <module>
        sys.exit(load_entry_point('turris-auth==0.4.0', 'console_scripts', 'set-turris-auth')())
      File "/usr/lib/python3.9/site-packages/turris_auth/__main__.py", line 29, in main
      File "/usr/lib/python3.9/site-packages/turris_auth/password.py", line 13, in assign
      File "/usr/lib/python3.9/site-packages/euci/__init__.py", line 140, in set
    uci.UciException: Invalid argument

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

This is no longer necessary as all packages in Turris OS packages are
using Python3. This was dropped in OpenWrt packages repository in 21.02
version. [1]

Reference:
[1] https://github.com/openwrt/packages/commit/2210c4a60dd8fb6420f7bd3c6fe00ed0ae4c51be

It seems that we are not using simplejson in reForis anymore and we are
using Python's built-in json.

Reference:
https://github.com/openwrt/packages/pull/19182

Based on mox-a53-firmware package from e6c48f7e

Changelog:
- https://gitlab.nic.cz/turris/mox-boot-builder/-/releases/v2022.06.11

sha256sum for secure-firmware and secure-firmware-devel is the same:
db3c1df34d755911948c8c057d7a00862a3d68aeb1bd3b3270717f1881531199  secure-firmware.bin
db3c1df34d755911948c8c057d7a00862a3d68aeb1bd3b3270717f1881531199  secure-firmware-devel.bin

This fixes:
Makefile:1452: *** 'BL33=/foo/build/staging_dir/target-aarch64_cortex-a53_musl/root-mvebu/usr/share/mox/u-boot.bin' was specified, but '/foo/build/staging_dir/target-aarch64_cortex-a53_musl/root-mvebu/usr/share/mox/u-boot.bin' does not exist.  Stop.

Josef Schlehofer authored 2 years ago and Michal Vasilek committed 2 years ago

Some packages were failing like libreswan, because:
fatal error: unbound-event.h: No such file or directory
 #include <unbound-event.h> /* from unbound devel */
          ^~~~~~~~~~~~~~~~~
compilation terminated.

This should fix it. While at it, enable libpthread and ipset support for Unbound
as it is enabled in OpenWrt.

replaced by mox-a53-firmware in 72919fc3

For now, there is a bug in Chromium-based browsers
that fails on HTTPS + WSS connection for no reason:
https://bugs.chromium.org/p/chromium/issues/detail?id=1346579.

This fix will allow users to get through the onboarding wizard.

Fixed downloading firmware and image regeneration.

See https://gitlab.nic.cz/turris/turris-netboot/-/tags/v0.7.1

Mainly use sudo to get access to the wireless configuration even as an
ordinary user.

Release notes:
- https://gitlab.nic.cz/turris/turris-netboot/-/tags/v0.7.0

Updated copyright

uboot is now built directly from upstream, the package name is
mox-uboot-uboot and it's build only, so users can not install this
package. It's used to build a new package called mox-a53-firmware that
combines uboot with trusted firmware and provides the uboot-devel binary
like uboot-mox used to.

Changelog:
https://redmine.lighttpd.net/versions/68

- It fixes Ubi offset header

reForis Changelog:
* Add & update translations
* Fix client-relative session expiration
* NPM audit fix

Ok, it seems that it was happening also in the HBS (before my fix as it
does not get into release), thus we can be sure
that I did not break it, thus revert it once again.

This reverts commit 64045edc.

Even though, the previous solution fixes this output:
```
cmp: /boot/boot.scr: No such file or directory
cp: can't stat '/boot/boot.scr': No such file or directory
```

It seems there is some issue with infinite loop of symlinks
```
INFO:Executing postupdate hook: 10_kernel-install
//boot/zImage /tmp/tmp.NEAjjh/zImage differ: char 5, line 1
cmp: //boot/fdt: Symbolic link loop
cp: can't stat '//boot/fdt': Symbolic link loop
```

Because of that, revert it for now as we would like to release a new
version soon.

This reverts commit e68eda1d.

Fixes:
- CVE-2022-30698
- CVE-2022-30699

Release notes:
https://nlnetlabs.nl/projects/unbound/download/#unbound-1-16-2

HBK version of the same fix already applied to HBL. Original
description:

Make sure that sessions use relative time from browser, so you can setup
your router even if your router/browser has a wrong time. Big thanks and
the credits go to László Várady.

Make sure that sessions use relative time from browser, so you can setup
your router even if your router/browser has a wrong time. Big thanks and
the credits go to László Várady.

Josef Schlehofer authored 2 years ago and Michal Vasilek committed 2 years ago

The file boot.scr should be in boot folder and not in root,
because then it is not in the same way as it is done for Turris Omnia
and Turris MOX. I checked it with Turris OS 3.x release also, when
boot.scr was introduced for Turris 1.x routers and there is also in boot
folder.

Fixes the following output:
cmp: /boot/boot.scr: No such file or directory
cp: can't stat '/boot/boot.scr': No such file or directory

Fixes: 03c8a7c7 ("turris1x-btrfs: deploy
boot.scr and link the appropriate dtb name")

Remove backported patches, which was taken from this tagged release:

* Fixed case when updates were installed automatically, even though manual confirmation was required.
* Fix detection of delayed reboot and thus create complete notification for it.

Fixed:
- notifier: Add timezone to timestamp in email notification
(remove the patch, which backported the change)

This patch is already merged to user-notify repository, but until there
is tagged release, let's do it this way.

We provided two servers for reForis - flup and cgi. Unfortunately, no
one uses cgi and it is not documented how to use it. Let's drop it.