Michal Hrusecky authored 3 years ago and Karel Koci committed 3 years ago

Split into a generic subpackage, package used by normal Omnias and
package used by CTI Omnias that sets the contract automatically.

Fixes:
root@turris:~# opkg remove sentinel-i_agree_with_eula
Removing package sentinel-i_agree_with_eula from root...
//usr/lib/opkg/info/sentinel-i_agree_with_eula.prerm: /usr/lib/opkg/info/sentinel-i_agree_with_eula.prerm-pkg: line 10: syntax error: unexpected end of file (expecting "fi")
You can force removal of packages with failed prerm scripts with the option:
	--force-remove
No packages removed.
Collected errors:
 * pkg_run_script: package "sentinel-i_agree_with_eula" prerm script returned status 2.
 * opkg_remove_pkg: not removing package "sentinel-i_agree_with_eula", prerm script failed

This only adds script to PATHs.

Michal Hrusecky authored 4 years ago and Karel Koci committed 3 years ago

Update busybox to version 1.32.1 and bumping whole package version as
there were some changes, see previous commits.

Michal Hrusecky authored 4 years ago and Karel Koci committed 3 years ago

Make sure we have enough entropy for ssh and https.

Michal Hrusecky authored 4 years ago and Karel Koci committed 3 years ago

Specify explicitly that wget should timeout after three seconds and we
will go for another retry. Failing faster and retrying sooner.

Michal Hrusecky authored 4 years ago and Karel Koci committed 3 years ago

We used to have two alternative names for medkit image. Currently we are
producing only one of them, so let's stick to that one during download
and speed up the cloud install.

Michal Hrusecky authored 4 years ago and Karel Koci committed 3 years ago

Clean up a little bit variables carry over and carry over more
variables. Following variables are preserved:

* contract - contract router is under
* rescue_mode - default rescue mode
* boot_targets - order of devices to boot from, helpful when booting
                 from something other than eMMC

* Add & update translations
* Improve descriptions of actions in the UUID table
* Improve headings and help texts
* Hide DrivesOperations during operations on a drive
* Fix pendingMigrationAlert behavior
* NPM audit fix

Bump v0.3.0

* Add & update translations
* Improve headings and labels
* Fix NetMetr name in the sidebar navigation
* Fix displaying ping of -1 when ping is equal to 0
* Fix & update python dependencies
* NPM audit fix
* Other small UI improvements

Release notes:
* Add & update translations
* Improve Password Form
* Fix root password on Shield
* Fix cards on the Overview page
* Disable LAN mode in LAN Settings on Shield
* NPM audit fix
* Other small UI improvements

Fixed:
* add btrfs device scan
* support 'jbod' and 'raid0' in uci settings

Add nor-update as dependency since we split it to generic package and
shield-support depends on it as we need to have nor that respects
contracts.

Fixed
* error on transaction recovery created by updater before version 69.0.1
  about `upgraded_packages` being nil

Changed
* Package requests solver no longer tries to maximize number of selected
  requests but rahter follows strictly rules of requests priority
* `Install` requests with same priority as `Unistall` are resolved first
* `Install` and `Unistall` requests without condition as resolved before
  requests with condition given they have same priority specified.

Removed
* Error reported when request to install and unistall same package was
  specified

This was just invalid uci operations.

The rescue mode and our documentation specifies support for: ext4,
Btrfs, XFS and FAT32. It also makes sense to add exFAT as some of the
flash drives are already formated to this format.

We have to remove set -u because jshn.sh breaks with it.

This now configures all available Wi-Fi devices instead of just first
one. This should cover case when user has device that supports only one
specific band (2.4GHz for example) and the first Wi-Fi would be
configured to other band (such as 5GHz).
It also now reuses prepared configuration.

Aleksandr Gumroian authored 3 years ago and Jan Pavlinec committed 3 years ago

* Add TLS explanation
* Add & update translations
* Add DNS tests to the card on Overview
* Fix Guide on Turris Shield
* Fix unknown initial state for automatic updates
* Fix unknown initial state for WAN IPv4 settings
* Fix fuzzy translation messages in the English catalog
* Update session.samesite cookie
* NPM audit fix
* Other small improvements

sha256 for firmware file:
- b423a8580ca62adf5b6ae7d10caa2c4b10aaaa7101acd58cf7b874cdacb6f541 secure-firmware-devel.bin

Fixes:
Makefile:32: WARNING: skipping initial-config -- package has no install section

This was simply a copy-paste error. The correct variable is device.

Vojtech Myslivec authored 4 years ago and Karel Koci committed 3 years ago

ca.pem is a CA certificate bundle and we are going to rotate Sentinel
Root CA to a production one. Also add comments to each certificate for
better orientation

The issue this fixes is that git reports same commit as being ancestor
of itself. It kind of makes sense but it breaks check if branch is based
on master or develop. In such case the common base between develop and
target branch and master and target branch is the same.

This changes the logic. Because git merge-base does effectively the
operation of 'less than or equal' we have to swap compare order and
negate the result. This way we get effectively the 'less than'
operation.

Fixes: turris-nor-update: Make it work again
("27ffdc9e")

Michal Hrusecky authored 3 years ago and Karel Koci committed 3 years ago

Fix two conditions that were wrongly written and prevent script from
running and also remove debugging leftover that made every run dry-run.

This includes updates of translations from weblate.

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

This should contain the workaround for MOX reboot issue.

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

It is version two of workaround to solve reboot issue on some MOX
devices.

https://gitlab.nic.cz/turris/mox-boot-builder/-/releases/v2021.01.22

New packages should not be introduced in upstream for stable release, but it happened so.
Commit:
https://github.com/openwrt/packages/commit/01ab015a9afbdac1a0d77b0bf271e07dee59677d

Let's remove it and use the upstream variant, which is the same as ours
(version, and so on). The only difference is that they are using
codeload from GitHub.

* Improve Updater behavior
* Add & update translations
* Add hostname settings
* Add password confirmation
* Add env variables to Makefile
* Fix redirect to the original router's IP address
* Fix WAN 6in4 tunnel MTU range to 1480
* Fix public IPv4 input as not required in WAN6Form
* Drop versions of paho-mqtt & extras dependencies
* Other small improvements

On package installation the uci_default is run before service start.
As the last step in uci_default the Firewall is reloaded but rule inject
fails due to missing ipset.
In normal operation the sentinel-dynfw-client is started before firewall
but during installation this can't be done.

The solution is to just create ipset anytime we start firewall. This
makes it so rules is always added and it really doesn't matter who
creates the ipset. With this either sentinel-dynfw-client creates it or
firewall, which ever comes first.

Fixed
* environment variable `PKG_UPGRADE` were always set to `1` for package
  `postinst` script no matter if it was package upgrade or not.

Changed
* usage of `example.org` replaced with `application-test.turris.cz` in
  tests