The total size of a53-firmware partition is 1441792 bytes (0x160000).
The first 0x160000 bytes is BL1 and what remains is FIT.

On the absolute position 131184 (131072 + 112), there is offset, where
begins U-boot and on the position 131192 (131072 + 120), there you can
find the total size of U-boot.
(= Total size of partition - size BL1 - offset U-boot)

Reported-by: Pali Rohár <pali@kernel.org>
Co-authored-by: Pali Rohár <pali@kernel.org>

- Update copyright

This package is not present in OpenWrt master anymore as it is part of
core binary.

it's needed when running nextcloud_install:

    + sudo -u nobody php-cli ./occ maintenance:install ...
    An unhandled exception has been thrown:
    Error: Call to undefined function OC\filter_var() in /srv/www/nextcloud/lib/private/Setup.php:479

patch rebased on schnapps 2.10.1 to maintain compatibility
with foris-controller 5.0.0 that expects older JSON output format

Michal Hrusecky authored 3 years ago and Simon Borek committed 2 years ago

* support export to sdtout
* csv output is now supported for listing snapshots
* ability to disable encryption for particular export from cli
* basic test-suite

This package was required by Foris, but since Turris OS 6.0 Foris is
removed and it seems there are no other dependencies, so this can be
removed wihtout replacement. It was only host package. On the other
hand, we should have faster builds.

This version fixes path for mox_do_sign or in newer kernel versions as
do_sign, where it is now located in debugfs.

This package was a dependency for Foris, but Foris was removed in
develop branch already for Turris OS 6.0, this is a leftover, so drop
this.

Release notes:
https://www.knot-resolver.cz/2022-08-16-knot-resolver-5.5.2.html

set-turris-auth stores the password hash in the turris-auth uci section
which didn't exist unless /etc/config/turris-auth was created manually.

    %: set-turris-auth
    New password (input not printed!):
    New password again:
    Traceback (most recent call last):
      File "/usr/bin/set-turris-auth", line 33, in <module>
        sys.exit(load_entry_point('turris-auth==0.4.0', 'console_scripts', 'set-turris-auth')())
      File "/usr/lib/python3.9/site-packages/turris_auth/__main__.py", line 29, in main
      File "/usr/lib/python3.9/site-packages/turris_auth/password.py", line 13, in assign
      File "/usr/lib/python3.9/site-packages/euci/__init__.py", line 140, in set
    uci.UciException: Invalid argument

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>

This is no longer necessary as all packages in Turris OS packages are
using Python3. This was dropped in OpenWrt packages repository in 21.02
version. [1]

Reference:
[1] https://github.com/openwrt/packages/commit/2210c4a60dd8fb6420f7bd3c6fe00ed0ae4c51be

It seems that we are not using simplejson in reForis anymore and we are
using Python's built-in json.

Reference:
https://github.com/openwrt/packages/pull/19182

Based on mox-a53-firmware package from e6c48f7e

Changelog:
- https://gitlab.nic.cz/turris/mox-boot-builder/-/releases/v2022.06.11

sha256sum for secure-firmware and secure-firmware-devel is the same:
db3c1df34d755911948c8c057d7a00862a3d68aeb1bd3b3270717f1881531199  secure-firmware.bin
db3c1df34d755911948c8c057d7a00862a3d68aeb1bd3b3270717f1881531199  secure-firmware-devel.bin

This fixes:
Makefile:1452: *** 'BL33=/foo/build/staging_dir/target-aarch64_cortex-a53_musl/root-mvebu/usr/share/mox/u-boot.bin' was specified, but '/foo/build/staging_dir/target-aarch64_cortex-a53_musl/root-mvebu/usr/share/mox/u-boot.bin' does not exist.  Stop.

Josef Schlehofer authored 2 years ago and Michal Vasilek committed 2 years ago

Some packages were failing like libreswan, because:
fatal error: unbound-event.h: No such file or directory
 #include <unbound-event.h> /* from unbound devel */
          ^~~~~~~~~~~~~~~~~
compilation terminated.

This should fix it. While at it, enable libpthread and ipset support for Unbound
as it is enabled in OpenWrt.

replaced by mox-a53-firmware in 72919fc3

For now, there is a bug in Chromium-based browsers
that fails on HTTPS + WSS connection for no reason:
https://bugs.chromium.org/p/chromium/issues/detail?id=1346579.

This fix will allow users to get through the onboarding wizard.

Fixed downloading firmware and image regeneration.

See https://gitlab.nic.cz/turris/turris-netboot/-/tags/v0.7.1

Mainly use sudo to get access to the wireless configuration even as an
ordinary user.

Release notes:
- https://gitlab.nic.cz/turris/turris-netboot/-/tags/v0.7.0

Updated copyright

uboot is now built directly from upstream, the package name is
mox-uboot-uboot and it's build only, so users can not install this
package. It's used to build a new package called mox-a53-firmware that
combines uboot with trusted firmware and provides the uboot-devel binary
like uboot-mox used to.

Changelog:
https://redmine.lighttpd.net/versions/68

- It fixes Ubi offset header

reForis Changelog:
* Add & update translations
* Fix client-relative session expiration
* NPM audit fix

Ok, it seems that it was happening also in the HBS (before my fix as it
does not get into release), thus we can be sure
that I did not break it, thus revert it once again.

This reverts commit 64045edc.

Even though, the previous solution fixes this output:
```
cmp: /boot/boot.scr: No such file or directory
cp: can't stat '/boot/boot.scr': No such file or directory
```

It seems there is some issue with infinite loop of symlinks
```
INFO:Executing postupdate hook: 10_kernel-install
//boot/zImage /tmp/tmp.NEAjjh/zImage differ: char 5, line 1
cmp: //boot/fdt: Symbolic link loop
cp: can't stat '//boot/fdt': Symbolic link loop
```

Because of that, revert it for now as we would like to release a new
version soon.

This reverts commit e68eda1d.

Fixes:
- CVE-2022-30698
- CVE-2022-30699

Release notes:
https://nlnetlabs.nl/projects/unbound/download/#unbound-1-16-2