Skip to content
Snippets Groups Projects
  1. Oct 02, 2020
    • Martin Matějek's avatar
      dde0814a
    • Jan Pavlinec's avatar
      knot-resolver: add option to compile kresd with dnstap support · 5a5aa58c
      Jan Pavlinec authored
      Note:
      Reorder dependencies and remove luasec and luasocket because
      they are no longer required.
      5a5aa58c
    • Josef Schlehofer's avatar
      reforis: bump PKG_RELEASE · 5df4e56c
      Josef Schlehofer authored
      We need to build new reForis package and its language files
      5df4e56c
    • Josef Schlehofer's avatar
      reforis-shield: remove translations · 29a96a52
      Josef Schlehofer authored
      Right now, reForis is a little bit ahead and has different versions of
      dependencies and if you have a full build, there are issues that
      static files are not present in reforis package and languages packages
      does not have forisjs.mo.
      
      If you dont have forisjs.mo, you end up with not working reForis.
      It crashes with:
      
      AttributeError: 'NullTranslations' object has no attribute 'json_catalog'
            args = ("'NullTranslations' object has no attribute 'json_catalog'",)
            with_traceback = <built-in method with_traceback of AttributeError object>
      
      However, if you build locally reforis and copy those packages on the
      router, it works flawlessly.
      
      The issue right now is that reforis and reforis-shield are using the
      same shared package languages and they could be different. We decided to remove
      translations from reForis Shield. There was also possibility to
      have separate language files for reForis, but it should not be
      necessary.
      29a96a52
  2. Oct 01, 2020
  3. Sep 30, 2020
  4. Sep 29, 2020
  5. Sep 27, 2020
  6. Sep 25, 2020
    • Karel Koci's avatar
      uriparser: try to fix usage in HBD · 80ebf73f
      Karel Koci authored
      For some reason this fixes usage of liburiparser in HBD. It probably
      relies on prefix variable tampering or something and because
      liburiparser was inserting full paths instead of composing them from
      prefix it created issue of mixed includes.
      80ebf73f
    • Karel Koci's avatar
      e736f47a
    • Karel Koci's avatar
      tos3to4: add SSH daemon config migration · 23f08031
      Karel Koci authored
      In Turris OS 3.x there was UCI config and integration for sshd. Now
      there is just standard config. Simple fix is to move original generated
      one to appropriate location.
      
      This move only happens if configuration of sshd in UCI is not the
      default one. The second check is if target file exists and that is just
      to make sure but it should always be there.
      
      Thanks to David Hopfmueller for pointing this out.
      23f08031
  7. Sep 24, 2020
    • Karel Koci's avatar
    • Karel Koci's avatar
      sentinel-firewall: redirect should append instead of insert · daf07151
      Karel Koci authored
      The reason for append is to not overrule rules configured in Luci.
      
      There can potentially be some drop rule as well and that was one of the
      original reasons why insert was used instead of append but until such
      case is discovered this should be enough.
      daf07151
    • Karel Koci's avatar
    • Karel Koci's avatar
      sentinel-firewall: reorder firewall config on start · 465ba822
      Karel Koci authored
      This checks and reorders sentinel-firewall config on firewall start.
      This is not ideal as this reorder is not applied in firewall run when
      reorder happens and there seems to be no reliable way to request
      firewall reload from firewall script itself (would cause firewall
      nesting with unknown results).
      
      We also does not have to reorder in uci-defaults as new config sections
      are always appended so they are the last one, making that operation
      useless code.
      465ba822
    • Karel Koci's avatar
      sentinel-firewall: remove any preserved rules · 30ba26e5
      Karel Koci authored
      This removes any preserved rules from firewall. Firewall3 removes any
      rules in chains and tables it manages but others ignores. This is
      considered as feature (as some lists survive reload) but for our use
      case it is not ideal as scripts just insert rules in appropriate
      location. Instead removing all rules we previously added and were
      preserved is better option in this case.
      
      There is one exception and those are our rules that are terminations for
      chains created by us. We are not removing those chains and so we do not
      want to remove those  rules as well. We prevent that by using slightly
      different comment. We do not add additional commentary and drop colon.
      Because of missing colon this rule is not matched and is not removed.
      For termination rule additional comment about source is not necessary so
      we are not loosing anything.
      30ba26e5
  8. Sep 23, 2020
  9. Sep 22, 2020
    • Karel Koci's avatar
      switch-branch: remove system reinstall on switch · b11f29af
      Karel Koci authored
      With introduction of link signatures for packages updater can now detect
      changes in link dependencies and reinstall package without relying on
      package bumps. Thanks to that we no longer have to reinstall all
      packages when switching between unsafe branches as link signature is
      going to change and updater is going to reinstall affected packages
      without need to reinstall all packages.
      
      This also allows easy to simulate update between no just stable branches
      but also between unstable ones (usable for testing of updates to future
      major or minor release).
      b11f29af
  10. Sep 21, 2020