GitLab

The new URL to our gitlab is now https://gitlab.nic.cz.
Our turris-build repository was moved to turris/os/build.

- Make more consistency in package description
Sometimes there was URL for home project, but sometimes it was not.
I included it in the all packages.

- In all Makefiles, I added URL to our webapps repository

- LuCI and Netdata's webapps were switched to new .json scheme

- As done in upstream repository (turris's webapps repository), we
include in Czech and English description dots.

Calling /usr/bin/php-cli -f /srv/www/nextcloud/cron.php
accidently creates empty config.php file.
This change postpones cron until nextcloud is properly
configured.

There should be no security issue in using pre-generated dhparam
compared to a new one. This makes it much faster.

This also removes reuse of old dhparam. It is now unnecessary
complication. The original idea was to speed up update but with dhparam
link that is no longer required.

This should check if file is already generated or it or if there is just
no server configured. These are two separate conditions when there is no
need to do migration. The first case is when migration is done and
second case is when there just nothing to migrate.

This should have minor impact. It only removes error:
  fix-dhparam-to-cagen/postinst: switch: CA 'openvpn' doesn't exist
This attempted to migration when there was no configuration. This is not
case when migration is required but not performed and thus there should
be no real issue we need to address.

This allows easier and faster setup of OpenVPN. It is just simply
possible to reuse pregenerated dhparam.

The dhparam file was generated using command:
openssl dhparam -out dhparam.pem 4096

Add fix subpackage that will run nor update on specific routers.

Split into a generic subpackage, package used by normal Omnias and
package used by CTI Omnias that sets the contract automatically.

Fixes:
root@turris:~# opkg remove sentinel-i_agree_with_eula
Removing package sentinel-i_agree_with_eula from root...
//usr/lib/opkg/info/sentinel-i_agree_with_eula.prerm: /usr/lib/opkg/info/sentinel-i_agree_with_eula.prerm-pkg: line 10: syntax error: unexpected end of file (expecting "fi")
You can force removal of packages with failed prerm scripts with the option:
	--force-remove
No packages removed.
Collected errors:
 * pkg_run_script: package "sentinel-i_agree_with_eula" prerm script returned status 2.
 * opkg_remove_pkg: not removing package "sentinel-i_agree_with_eula", prerm script failed

This only adds script to PATHs.

Update busybox to version 1.32.1 and bumping whole package version as
there were some changes, see previous commits.

Make sure we have enough entropy for ssh and https.

Specify explicitly that wget should timeout after three seconds and we
will go for another retry. Failing faster and retrying sooner.

We used to have two alternative names for medkit image. Currently we are
producing only one of them, so let's stick to that one during download
and speed up the cloud install.

Clean up a little bit variables carry over and carry over more
variables. Following variables are preserved:

* contract - contract router is under
* rescue_mode - default rescue mode
* boot_targets - order of devices to boot from, helpful when booting
                 from something other than eMMC

* Add & update translations
* Improve descriptions of actions in the UUID table
* Improve headings and help texts
* Hide DrivesOperations during operations on a drive
* Fix pendingMigrationAlert behavior
* NPM audit fix

Bump v0.3.0

* Add & update translations
* Improve headings and labels
* Fix NetMetr name in the sidebar navigation
* Fix displaying ping of -1 when ping is equal to 0
* Fix & update python dependencies
* NPM audit fix
* Other small UI improvements

Release notes:
* Add & update translations
* Improve Password Form
* Fix root password on Shield
* Fix cards on the Overview page
* Disable LAN mode in LAN Settings on Shield
* NPM audit fix
* Other small UI improvements

Fixed:
* add btrfs device scan
* support 'jbod' and 'raid0' in uci settings

Add nor-update as dependency since we split it to generic package and
shield-support depends on it as we need to have nor that respects
contracts.

Fixed
* error on transaction recovery created by updater before version 69.0.1
  about `upgraded_packages` being nil

Changed
* Package requests solver no longer tries to maximize number of selected
  requests but rahter follows strictly rules of requests priority
* `Install` requests with same priority as `Unistall` are resolved first
* `Install` and `Unistall` requests without condition as resolved before
  requests with condition given they have same priority specified.

Removed
* Error reported when request to install and unistall same package was
  specified

This was just invalid uci operations.

The rescue mode and our documentation specifies support for: ext4,
Btrfs, XFS and FAT32. It also makes sense to add exFAT as some of the
flash drives are already formated to this format.

We have to remove set -u because jshn.sh breaks with it.

This now configures all available Wi-Fi devices instead of just first
one. This should cover case when user has device that supports only one
specific band (2.4GHz for example) and the first Wi-Fi would be
configured to other band (such as 5GHz).
It also now reuses prepared configuration.

* Add TLS explanation
* Add & update translations
* Add DNS tests to the card on Overview
* Fix Guide on Turris Shield
* Fix unknown initial state for automatic updates
* Fix unknown initial state for WAN IPv4 settings
* Fix fuzzy translation messages in the English catalog
* Update session.samesite cookie
* NPM audit fix
* Other small improvements

sha256 for firmware file:
- b423a8580ca62adf5b6ae7d10caa2c4b10aaaa7101acd58cf7b874cdacb6f541 secure-firmware-devel.bin

Fixes:
Makefile:32: WARNING: skipping initial-config -- package has no install section

This was simply a copy-paste error. The correct variable is device.

ca.pem is a CA certificate bundle and we are going to rotate Sentinel
Root CA to a production one. Also add comments to each certificate for
better orientation

The issue this fixes is that git reports same commit as being ancestor
of itself. It kind of makes sense but it breaks check if branch is based
on master or develop. In such case the common base between develop and
target branch and master and target branch is the same.

This changes the logic. Because git merge-base does effectively the
operation of 'less than or equal' we have to swap compare order and
negate the result. This way we get effectively the 'less than'
operation.

Fixes: turris-nor-update: Make it work again
("27ffdc9e")