GitLab

Latest changes in PaKon makes it separate web app independent of Foris.

The original check was that master can be pushed only with develop
branch. It is what we mostly want but there are cases when we do not
update develop and only master that are valid as well. The example of
such operation is merge of develop to master, which is always
fast-forward due to our workflow.

This halts push only if master commit is not ancestor of develop instead
of halting it always when develop is not being updated.

* dependencies will be automatically loaded when the module is
  installed, so we don't need to explicitly import them in lighttpd
  config files
* add missing dependencies to packages, this worked because on a normal
  TOS system, other packages with the required dependencies are
  installed, but could potentially break when the dependencies change
* remove lighttpd-mod-authn_file dependency since it's not used anywhere
* remove lighttpd-mod-auth dependency when the package already depends
  on lighttpd-mod-auth_pam

This makes backup scripts more accessible and also adds additional
features. The short list is:
* Inclusion of sysupgrade files (OpenWrt's way to mark files for backup)
* Optional inclusion of modified configuration files
* More strict inclusion for previously included files
* Protection against recovery from other major versions of OS

The last change is the most important as it is not just plain addition
but the incompatible change. This is intentional as the protection is
more desirable than the compatibility. The use of the scripts is same as
the previously but recovery of backup from different major OS version is
not allowed.

This reverts commit 14abc044.

This reverts Foris part as well. The reForis part was reverted in
33ab8eff.
It turns out that my assumption that both Foris and reForis behave the
same that lead to only partial revert was invalid and Foris as it seems
it all right. This matches the behavior of reForis.

The second patch is fix. This backports patch that fixes issues with
scripts terminating but not correctly closing all outputs results into
hang.

The first patch is a feature. The turris-build repository contains
second part of it and it is already merged. It is not desirable to
release new version of updater because of other changes thus backporting
only this patch is a good solution.

Similarly to ebc12ecdb66a9261ba3d5cd06e87588764ac53aea2c64bd4c226f13cc2bf77d4

The `--` there was originally intended to disable processing of options
and thus protect against situation where password starts with dash. It
turns out that python processes arguments in such a way that anything
after command specification is automatically considered as argument and
not as option for python interpreter.

This also sets it to explicitly call Python3 compared to python as that
might call Python 2 that is not in package's dependencies and thus the
code might break if it would be called with it.

In recent update to version 2.2, I forgot to remove patch, which was
backported to fix issues which happened on blue Turris, powerpc.

Fixes: b508118a ("sentinel-minipot:
update to version 2.2")

- Update copyright
- Since version 2.2, there are required two dependencies: logc and
logc-argp.

The previous tarball is no longer available and it was necessary to push
a new container due to recent GitLab wipe and create new files again.

The content is still the same.

Added:
- Scripts that use storage for Lighttpd temporally files

This reverts commit 14abc044.

The issue with reforis starting was that both reforis and lighttpd were
creating FCGI socket. Thus lighttpd created socket and send request to
it while reForis replaced that socket when it initialized and thus never
get the initial request. The removal of socket configuration solves the
issue and the patch added here is that fix.

Fixes: CVE-2021-33880

* Use color-scheme detection for theme
* Sync translations with Turris OS
* Improve cards transitions
* Fix headline in README

Changed:
* Increase persistent logs size to 100 MB in logrotate config
* Refactor srv init script
* Restart rainbow service instead of hardcoded set to white in srv init script

Fixed
* Handle missing /srv directory in srv init script
* Prevent to manipulate programmable LEDs on routers without rainbow command in srv init script

Going to /netdata resulted in CSS and JS not being loaded which made
netdata unusable.

* faster rendering of snapshots table
* unified management of temporary files
* used credentials file for samba

Fixed:
* networks: fix reading multiple interfaces of wan (e.g. bridge)
* wan: ipv6_address in 6in4 may contain prefix as well

* Add & update translations
* Replace `attack detection` by `threat detection`
* NPM audit fix

Term 'data collection' is no longer desired. We should replace it
wherever possible with terms like:
 - Turris Security
 - Turris Sentinel
 - Threat detection

Call cleanup of the database faster to allow smaller databases.

It is being generated, but the contract enforcing part was missing
altogether.

Note: reading and writing the *.md5 file is now done within a couple lines,
instead of being sprinkled across a few scripts.

Also, change URL in PKG_SOURCE_URL as the repository was moved

* support for remotes on Samba
* allow to keep remote snapshots forever