GitLab

sha256 for firmware file:
- b423a8580ca62adf5b6ae7d10caa2c4b10aaaa7101acd58cf7b874cdacb6f541 secure-firmware-devel.bin

Fixes:
Makefile:32: WARNING: skipping initial-config -- package has no install section

This was simply a copy-paste error. The correct variable is device.

ca.pem is a CA certificate bundle and we are going to rotate Sentinel
Root CA to a production one. Also add comments to each certificate for
better orientation

The issue this fixes is that git reports same commit as being ancestor
of itself. It kind of makes sense but it breaks check if branch is based
on master or develop. In such case the common base between develop and
target branch and master and target branch is the same.

This changes the logic. Because git merge-base does effectively the
operation of 'less than or equal' we have to swap compare order and
negate the result. This way we get effectively the 'less than'
operation.

Fixes: turris-nor-update: Make it work again
("27ffdc9e")

Fix two conditions that were wrongly written and prevent script from
running and also remove debugging leftover that made every run dry-run.

This includes updates of translations from weblate.

This should contain the workaround for MOX reboot issue.

It is version two of workaround to solve reboot issue on some MOX
devices.

https://gitlab.nic.cz/turris/mox-boot-builder/-/releases/v2021.01.22

New packages should not be introduced in upstream for stable release, but it happened so.
Commit:
https://github.com/openwrt/packages/commit/01ab015a9afbdac1a0d77b0bf271e07dee59677d

Let's remove it and use the upstream variant, which is the same as ours
(version, and so on). The only difference is that they are using
codeload from GitHub.

* Improve Updater behavior
* Add & update translations
* Add hostname settings
* Add password confirmation
* Add env variables to Makefile
* Fix redirect to the original router's IP address
* Fix WAN 6in4 tunnel MTU range to 1480
* Fix public IPv4 input as not required in WAN6Form
* Drop versions of paho-mqtt & extras dependencies
* Other small improvements

On package installation the uci_default is run before service start.
As the last step in uci_default the Firewall is reloaded but rule inject
fails due to missing ipset.
In normal operation the sentinel-dynfw-client is started before firewall
but during installation this can't be done.

The solution is to just create ipset anytime we start firewall. This
makes it so rules is always added and it really doesn't matter who
creates the ipset. With this either sentinel-dynfw-client creates it or
firewall, which ever comes first.

Fixed
* environment variable `PKG_UPGRADE` were always set to `1` for package
  `postinst` script no matter if it was package upgrade or not.

Changed
* usage of `example.org` replaced with `application-test.turris.cz` in
  tests

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

OpenWrt 21.02 has its own branch in OpenWrt repositories and they are
preparing RC version, let's have package compiled and tested for this
version (known as snapshots as it was not released), which can be now found in HBD branch.

The initial-config uses jshn not jsonfilter. It is not the same thing.

Fixes:
Makefile:93: WARNING: skipping mox-generic-support -- package has no install section
inconsistent: Package mox-support requires package mox-generic-support that is not available.

Fix cleanup function

We are shipping different reset_button function in Turris Shield and
Turris MOX. We can not have it in one generic file as it leads to this
issue:

/etc/hotplug.d/button/mox_reset: mox-support (existing-file), mox-generic-support (new-file)

So, ship reset_button in specific support packages instead of generic
one.

Fixes: 26fba930 ("nor-update: Generalize
to work for all devices")

Release notes for 2.4:
* support importing factory image from https
* limit characters in description field

Release notes for 2.5:
* various small bug fixes
* support limiting snapshots comparison to specific path

Release notes for 2.6:
* fix factory image download
* add savepoint/commit functionality

Release notes for 2.6.1:
* fix rollback to non-existing snapshot
* add version command

Release notes for 2.6.2:
* fix factory download with md5sum as well

Rescue image: 3.5.1
U-Boot: 2019-07.1 - 6dd804d78fdcd775f6eeebe0aa0527d6761a115f

Based on build from following sources:

 * turris-build: c5b21dc93998ca2f45e57cb99ee7e3caeec5bc81
 * openwrt: 86aeac4fc98f42ac0ce7e0dcf1cb240e16b28f8f
 * feeds/turrispackages: d7fe57cf

We are using OpenWrt 19.07.7 in Turris OS 5.1.9, so let's use it in CI
as well. Previously, it was not available.

* Add CSS loader
* Add tabbing navigation
* Refactor page loading stages
* Handle special case with only one app

Changes:
- rebase fix-prefix patch
- drop fix-map-for-32bit-platforms patch which is part of 5.2.1