Fixes: 9fde67a1
("sentinel-i_agree_with_eula: New package to agree with eula")

Added
* Argument `--renew` that automatically receives latest version of server
  certificate on client startup
* Argument `--cert-url` to specify URL used to get server's certificate
  when `--renew` is used

This also moves startup to be more in line with firewall and network.
Dynamic firewall should start as soon as it makes sense and that is
right after we have firewall configured (S19) and network set up (S20).
That makes start with S25 good option. We also stop it way later before
all network components are being stopped.

Fixed
    * Crash caused by wrong default logrotate config file location

Fixed
* Warning about cycles for packages providing and at the same time
  conflicting with some other package
* Configure script now checks if uthash is available

Add autorun section in updater uci config if it was missing.

Fixed
* Crash when syslog-ng was restarted by Nikola and log was send to it by
  Nikola

Changed
* Executable renamed from `nikola` to `sentinel-nikola`
* Python package renamed from `nikola` to `sentinel_nikola`
* Cron now runs shell script that checks if EULA was approved as well as
  if Nikola is enabled before running it.
* Syslog-ng now filters packets with DROP fate as well as REJECT

In 1bb8e96d this was added to Mox. The
same thing makes sense for other boards as well as it is clear that
these support packages have same problem (they occasionally fail to
build).

Marek Behun authored 4 years ago and Karel Koci committed 4 years ago

When u-boot-omnia is build by OpenWRT, it fails to build SPL from old
U-Boot sources because of internal environment settings. This should fix
the issue.

Fixes https://gitlab.nic.cz/turris/turris-os-packages/-/issues/646

Use case for this package is either someone that doesn't have WebUI and
want to collect data or routers in special setups like contracts. It is
easy to influence package selection for contracted routers, but much
harder to influence uci settings.

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

To make sure reForis can detect enabled Sentinel

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

Previous branch was work in progress and patch on top, so it was moving
target. Freezed certain point in history, added a patch and created a
separate branch to have something static to point to.

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

We are experiencing some weird issues on build servers and it is likelly
due to big paralelism. It is hard to debug and impossible to debug on
typical workstation, but trying to influence the scheduling and avoid
conflicts by adding dependency on kernel.

Fixed
* Telnet getting stuck with specific control sequence being received

It should have been in scl directory as include directory on its own is
not automatically included.

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

Add as a patch firewall integration of VPN client. It is currently being
discussed in the following merge request:

turris/foris-controller/foris-controller-openvpn_client-module!7

This is just a temporally patch to include it before we get all the code
style polishing done and new version will be released. Afterwards patch
will be dropped.

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

Automatically selects non-conflictin network prefix on LAN network.

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

Temporally package - just copy of reForis one with one additional patch.
To be deleted once we integrate shield autodetection into reforis and
bump the reforis to new design.

Both support packages can't be installed. This ensures that only one of
them is.

This also reorders stuff around to be more consistent (to have same
order of packages trough file).

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

Split package into various subpackages, mainly to have versioning
correct - only dtb is version by kernel version, rest don't need to be
updated all the time. To add shield support package that contains only
shield specific stuff I also split out generic MOX stuff like button
handling and nor content into separate package.