GitLab

Fix working with remote snapshots.

Fixes: CVE-2021-2166 and CVE-2021-2154

Fixed:
* incorrect configure_nextcloud call to backend

This fixes warning on Nextcloud with message:
[appstoreFetcher] Warning: GuzzleHttp\Exception\InvalidArgumentException: IDN conversion failed

More detailed bug report:

 0. /srv/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Client.php line 220
    GuzzleHttp\_idn_uri_convert(GuzzleHttp\Psr7\Uri {}, 0)
 1. /srv/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Client.php line 155
    GuzzleHttp\Client->buildUri(GuzzleHttp\Psr7\Uri {}, {verify: "/srv/w ... }})
 2. /srv/www/nextcloud/3rdparty/guzzlehttp/guzzle/src/Client.php line 183
    GuzzleHttp\Client->requestAsync("get", "https://apps.ne ... n", {verify: "/srv/w ... }})
 3. /srv/www/nextcloud/lib/private/Http/Client/Client.php line 228
    GuzzleHttp\Client->request("get", "https://apps.ne ... n", {verify: "/srv/w ... e})

And so on

I decided to switch from gzip into identity while using curl. This is
one row patch, which should not be upstreamed to NextCloud. Because
NextCloud developers said that it is unsual to have NextCloud on
OpenWrt. In the patch description there are linked issues.

In the future, we should enable gzip by default in curl.

Changed
* Error generated from Lua when URI is being finished now includes error
  message from downloader if it was download failure.

This should help solve failed cases of resolving after running the updater.

This should help solve failed cases of resolving after running the updater.

*  Add support for longer tokens
*  Use Switch instead of Checkbox for HaaS proxy

Added:
* initial Turris 1.x support

Changed:
* refactoring

Removed:
* drop TOS 3.x compatibility

While running make package/updater-ng/{download,check}, it says:
WARNING: PKG_MIRROR_HASH does not match updater-ng-69.1.2.tar.xz hash 715844fed9eb5545ecd9f15893f5b5e6a62857bcf394f66e9e4183bd7b7c9adf

This fixes it.

Fixes: b445c6f5 ("updater-ng: update to version 69.1.2")

Recent changes = add URLs for Netdata, DynFW, HaaS, ...

Since Turris OS 5.2, we created articles for Honeypot as a Service and
Netdata, so add the LInk for it as well.

I see that WireGuard has URL link for OpenWrt documentation, so expand
it further when it was possible for printserver and statistics

Fixed:
* allow haas token length up to 48 characters

Fixed
- Immediate reboot not being performed when combined with replan that actually
  performs some changes in the system

This fix is required for migration to work properly.

This pulls in unnecessary dependencies we have to deal with in
migration. We actually do not need localrepo for tos3to4-early as we are
not using it nor files it provides. We simply flush it manually so there
is no need in having it as a dependency.

Note:
This fixes issue when users disable IPv6 or IPv4
on outgoing interface and wants to have IPv6 and IPv4
still available on local network.
Because of that do-ipv6 and do-ipv4 is no longer used for
net_ipv4 and net_ipv6 settings.
Co-authored-by: Karel Koci <karel.koci@nic.cz>
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Added
* Testing proxy - moved from Minipots repository
* CHANGELOG

Changed
* Complete code refactoring - replace `zpoller` by `zloop`

There is case when the file can already exists. The idea was to not
overwrite it but it is possible that it is left after us. Failing to run
this fix results in OpenVPN server being broken.

* Add translations
* Update Foris JS library to v0.1.2
* NPM audit fix

In the past, we added OpenVPN client into reForis, and I noticed that
OpenVPN clients card is missing in Overview, and it required to install
the appropriate (in this case OpenVPN) package list, and once it was
installed, I can confirm that it also includes a client too.

* Add Alert if no Wi-Fi cards are connected
* Add CustomizationContext to the Main component
* Add CustomizationContext to the Guide component
* Refactor customization check on Password page
* Refactor customization check on LAN page
* Get rid of error message on redirect to login page
* Fix displaying of Turris Shield name in About
* Fix Guide on Turris 1.x
* Update Foris JS library to v5.1.12
* NPM Audit fix
* Other small improvements

The new URL to our gitlab is now https://gitlab.nic.cz.
Our turris-build repository was moved to turris/os/build.

- Make more consistency in package description
Sometimes there was URL for home project, but sometimes it was not.
I included it in the all packages.

- In all Makefiles, I added URL to our webapps repository

- LuCI and Netdata's webapps were switched to new .json scheme

- As done in upstream repository (turris's webapps repository), we
include in Czech and English description dots.

Calling /usr/bin/php-cli -f /srv/www/nextcloud/cron.php
accidently creates empty config.php file.
This change postpones cron until nextcloud is properly
configured.

There should be no security issue in using pre-generated dhparam
compared to a new one. This makes it much faster.

This also removes reuse of old dhparam. It is now unnecessary
complication. The original idea was to speed up update but with dhparam
link that is no longer required.

This should check if file is already generated or it or if there is just
no server configured. These are two separate conditions when there is no
need to do migration. The first case is when migration is done and
second case is when there just nothing to migrate.

This should have minor impact. It only removes error:
  fix-dhparam-to-cagen/postinst: switch: CA 'openvpn' doesn't exist
This attempted to migration when there was no configuration. This is not
case when migration is required but not performed and thus there should
be no real issue we need to address.

This allows easier and faster setup of OpenVPN. It is just simply
possible to reuse pregenerated dhparam.

The dhparam file was generated using command:
openssl dhparam -out dhparam.pem 4096

Add fix subpackage that will run nor update on specific routers.

Split into a generic subpackage, package used by normal Omnias and
package used by CTI Omnias that sets the contract automatically.

Fixes:
root@turris:~# opkg remove sentinel-i_agree_with_eula
Removing package sentinel-i_agree_with_eula from root...
//usr/lib/opkg/info/sentinel-i_agree_with_eula.prerm: /usr/lib/opkg/info/sentinel-i_agree_with_eula.prerm-pkg: line 10: syntax error: unexpected end of file (expecting "fi")
You can force removal of packages with failed prerm scripts with the option:
	--force-remove
No packages removed.
Collected errors:
 * pkg_run_script: package "sentinel-i_agree_with_eula" prerm script returned status 2.
 * opkg_remove_pkg: not removing package "sentinel-i_agree_with_eula", prerm script failed

This only adds script to PATHs.