Fixes: f64bedbe ("turris-defaults: add
package")

All resolvers logs (unbound/kresd) will end in /var/log/resolver file
until package resolver-debug is  uninstalled

This provides some of the defaults for Turris routers trough means other
than patch.

It seems that this is not by default installed and there are no
dependency in turris-os-packages either in turris-build repository.
Let's remove it without providing any replacement.

We are using libsass package for Foris (the old one, I don't mean
reForis) and this package is required just as host package, this is done in upstream differently by using folder host-pip-requirements.

We don't need to have a separate package in our distribution for it. Package would not be provided by upstream or anything else.

Fewer packages, shorter build time and not wasting computing sources.

Add nor-update as dependency since we split it to generic package and
shield-support depends on it as we need to have nor that respects
contracts.

Fixed
* error on transaction recovery created by updater before version 69.0.1
  about `upgraded_packages` being nil

Changed
* Package requests solver no longer tries to maximize number of selected
  requests but rahter follows strictly rules of requests priority
* `Install` requests with same priority as `Unistall` are resolved first
* `Install` and `Unistall` requests without condition as resolved before
  requests with condition given they have same priority specified.

Removed
* Error reported when request to install and unistall same package was
  specified

This was just invalid uci operations.

The rescue mode and our documentation specifies support for: ext4,
Btrfs, XFS and FAT32. It also makes sense to add exFAT as some of the
flash drives are already formated to this format.

We have to remove set -u because jshn.sh breaks with it.

This now configures all available Wi-Fi devices instead of just first
one. This should cover case when user has device that supports only one
specific band (2.4GHz for example) and the first Wi-Fi would be
configured to other band (such as 5GHz).
It also now reuses prepared configuration.

Aleksandr Gumroian authored 3 years ago and Jan Pavlinec committed 3 years ago

* Add TLS explanation
* Add & update translations
* Add DNS tests to the card on Overview
* Fix Guide on Turris Shield
* Fix unknown initial state for automatic updates
* Fix unknown initial state for WAN IPv4 settings
* Fix fuzzy translation messages in the English catalog
* Update session.samesite cookie
* NPM audit fix
* Other small improvements

Martin Matějek authored 4 years ago and Jan Pavlinec committed 3 years ago

Flask-session does not look maintained anymore, thus we use our own copy
bundled with reforis.

sha256 for firmware file:
- b423a8580ca62adf5b6ae7d10caa2c4b10aaaa7101acd58cf7b874cdacb6f541 secure-firmware-devel.bin

Fixes:
Makefile:32: WARNING: skipping initial-config -- package has no install section

This was simply a copy-paste error. The correct variable is device.

reForis now support device modes, so we no longer need to ship separate
version of reForis Shield.

Vojtech Myslivec authored 4 years ago and Karel Koci committed 3 years ago

ca.pem is a CA certificate bundle and we are going to rotate Sentinel
Root CA to a production one. Also add comments to each certificate for
better orientation

The issue this fixes is that git reports same commit as being ancestor
of itself. It kind of makes sense but it breaks check if branch is based
on master or develop. In such case the common base between develop and
target branch and master and target branch is the same.

This changes the logic. Because git merge-base does effectively the
operation of 'less than or equal' we have to swap compare order and
negate the result. This way we get effectively the 'less than'
operation.