Also add forgotten shebang

(cherry picked from commit 4e9b69a9)

(cherry picked from commit f2fb4e9c)

Functions provided in sentinel.sh depends on OpenWrt functions.sh. When
this script (sentinel.sh) is sourced and functions called (e.g. in
nikola crontab), it ends up on error as `config_load` and others are not
found.

(cherry picked from commit b2157001)

Note:
remove-btn command is now called after install to fix wrong use of postrm

* fix reading of 802.11ac HT & VHT modes
* web: Add 'shield' guide profile (proper release without patch)
* dns: more robust reading of custom DNS resolvers

Foris.conf was removed by 6ed9c585.
Installing it is not possible.

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

It is needed by some backend calls even from purelly reForis
installation, so let's move it there.

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

Reason is to include more fixes that happened lately.

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

Some old rescue images created boot.scr symlink pointing to
boot-btrfs.scr after medkit, not to boot.scr, so bettter be safe and
create a symlink.

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

Indentation broke the script therefore we didn't get the prefilled
entries.

Fixes: 9fde67a1
("sentinel-i_agree_with_eula: New package to agree with eula")

Added
* Argument `--renew` that automatically receives latest version of server
  certificate on client startup
* Argument `--cert-url` to specify URL used to get server's certificate
  when `--renew` is used

This also moves startup to be more in line with firewall and network.
Dynamic firewall should start as soon as it makes sense and that is
right after we have firewall configured (S19) and network set up (S20).
That makes start with S25 good option. We also stop it way later before
all network components are being stopped.

Fixed
    * Crash caused by wrong default logrotate config file location

Fixed
* Warning about cycles for packages providing and at the same time
  conflicting with some other package
* Configure script now checks if uthash is available

Add autorun section in updater uci config if it was missing.

Fixed
* Crash when syslog-ng was restarted by Nikola and log was send to it by
  Nikola

Changed
* Executable renamed from `nikola` to `sentinel-nikola`
* Python package renamed from `nikola` to `sentinel_nikola`
* Cron now runs shell script that checks if EULA was approved as well as
  if Nikola is enabled before running it.
* Syslog-ng now filters packets with DROP fate as well as REJECT

In 1bb8e96d this was added to Mox. The
same thing makes sense for other boards as well as it is clear that
these support packages have same problem (they occasionally fail to
build).

Marek Behun authored 4 years ago and Karel Koci committed 4 years ago

When u-boot-omnia is build by OpenWRT, it fails to build SPL from old
U-Boot sources because of internal environment settings. This should fix
the issue.

Fixes https://gitlab.nic.cz/turris/turris-os-packages/-/issues/646

Use case for this package is either someone that doesn't have WebUI and
want to collect data or routers in special setups like contracts. It is
easy to influence package selection for contracted routers, but much
harder to influence uci settings.

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

To make sure reForis can detect enabled Sentinel

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

Previous branch was work in progress and patch on top, so it was moving
target. Freezed certain point in history, added a patch and created a
separate branch to have something static to point to.

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

We are experiencing some weird issues on build servers and it is likelly
due to big paralelism. It is hard to debug and impossible to debug on
typical workstation, but trying to influence the scheduling and avoid
conflicts by adding dependency on kernel.

Fixed
* Telnet getting stuck with specific control sequence being received

It should have been in scl directory as include directory on its own is
not automatically included.