Fixes:
Makefile:32: WARNING: skipping initial-config -- package has no install section

This was simply a copy-paste error. The correct variable is device.

reForis now support device modes, so we no longer need to ship separate
version of reForis Shield.

Vojtech Myslivec authored 4 years ago and Karel Koci committed 3 years ago

ca.pem is a CA certificate bundle and we are going to rotate Sentinel
Root CA to a production one. Also add comments to each certificate for
better orientation

The issue this fixes is that git reports same commit as being ancestor
of itself. It kind of makes sense but it breaks check if branch is based
on master or develop. In such case the common base between develop and
target branch and master and target branch is the same.

This changes the logic. Because git merge-base does effectively the
operation of 'less than or equal' we have to swap compare order and
negate the result. This way we get effectively the 'less than'
operation.

Fixes: turris-nor-update: Make it work again
("27ffdc9e")

Michal Hrusecky authored 3 years ago and Karel Koci committed 3 years ago

Fix two conditions that were wrongly written and prevent script from
running and also remove debugging leftover that made every run dry-run.

This includes updates of translations from weblate.

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

This should contain the workaround for MOX reboot issue.

Michal Hrusecky authored 4 years ago and Karel Koci committed 4 years ago

It is version two of workaround to solve reboot issue on some MOX
devices.

https://gitlab.nic.cz/turris/mox-boot-builder/-/releases/v2021.01.22

Remove upstreamed patch

New packages should not be introduced in upstream for stable release, but it happened so.
Commit:
https://github.com/openwrt/packages/commit/01ab015a9afbdac1a0d77b0bf271e07dee59677d

Let's remove it and use the upstream variant, which is the same as ours
(version, and so on). The only difference is that they are using
codeload from GitHub.

* Improve Updater behavior
* Add & update translations
* Add hostname settings
* Add password confirmation
* Add env variables to Makefile
* Fix redirect to the original router's IP address
* Fix WAN 6in4 tunnel MTU range to 1480
* Fix public IPv4 input as not required in WAN6Form
* Drop versions of paho-mqtt & extras dependencies
* Other small improvements

On package installation the uci_default is run before service start.
As the last step in uci_default the Firewall is reloaded but rule inject
fails due to missing ipset.
In normal operation the sentinel-dynfw-client is started before firewall
but during installation this can't be done.

The solution is to just create ipset anytime we start firewall. This
makes it so rules is always added and it really doesn't matter who
creates the ipset. With this either sentinel-dynfw-client creates it or
firewall, which ever comes first.

Fixed
* environment variable `PKG_UPGRADE` were always set to `1` for package
  `postinst` script no matter if it was package upgrade or not.

Changed
* usage of `example.org` replaced with `application-test.turris.cz` in
  tests

Drop weak cipher list is probably not backward compatible.

Also move common configuration to global scope and fix whitespaces
to match lighttpd config style.

Co-authored-by: Vojtech Myslivec <vojtech.myslivec@nic.cz>

Co-authored-by: Vojtech Myslivec <vojtech.myslivec@nic.cz>

While updating this version in distribution, we forgot to remove patch,
which was taken from master branch of repository.

Fixes: e16810e6 ("foris-controller-sentinel-module: update to version 0.2")

Added:
* Configure sentinel modules and minipots

Changed:
* Migrate CHANGELOG to Keep a Changelog style

Fixed:
* Fix reload having no effect