Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

acme: change from curl->wget dependency must be explicit to PACKAGE_wget #9456

Closed
pleasantone opened this issue Jul 11, 2019 · 8 comments · Fixed by #9941
Closed

acme: change from curl->wget dependency must be explicit to PACKAGE_wget #9456

pleasantone opened this issue Jul 11, 2019 · 8 comments · Fixed by #9941
Assignees

Comments

@pleasantone
Copy link

pleasantone commented Jul 11, 2019

Maintainer: @neheb
Environment: archer c7v2 ath79, master branch, after jun 5th
Description:

Unfortunately, the dependency change from curl->wget breaks some configurations.

The package uclient-fetch also provides wget for some architectures, by default, but the wget image that is included as part of uclient-fetch doesn't support the --headers command line.

We need to explicitly depend upon PACKAGE_wget somehow, if you want this.

Thu Jul 11 12:25:28 2019 daemon.info acme: Running ACME for xxx
Thu Jul 11 12:25:28 2019 daemon.err run-acme[31125]: acme: Running ACME for xxx
Thu Jul 11 12:25:28 2019 daemon.info acme: Found previous cert config. Issuing renew.
Thu Jul 11 12:25:28 2019 daemon.err run-acme[31125]: acme: Found previous cert config. Issuing renew.
Thu Jul 11 12:25:29 2019 daemon.info run-acme[31125]: Renew: 'xxx'
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: wget: unrecognized option: header
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: Usage: wget [options] <URL>
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: Options:
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: 	-4				Use IPv4 only
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: 	-6				Use IPv6 only
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: 	-q				Turn off status messages
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: 	-O <file>			Redirect output to file (use "-" for stdout)
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: 	-P <dir>			Set directory for output files
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: 	--user=<user>			HTTP authentication username
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: 	--password=<password>		HTTP authentication password
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: 	--user-agent|-U <str>		Set HTTP user agent
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: 	--post-data=STRING		use the POST method; send STRING as the data
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: 	--spider|-s			Spider mode - only check file existence
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: 	--timeout=N|-T N		Set connect/request timeout to N seconds
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: 	--proxy=on|off|-Y on|off	Enable/disable env var configured proxy
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]:
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: HTTPS options:
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: 	--ca-certificate=<cert>		Load CA certificates from file <cert>
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: 	--no-check-certificate		don't validate the server's certificate
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]:
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: Please refer to https://www.gnu.org/software/wget/manual/html_node/Exit-Status.html for error code: 1
Thu Jul 11 12:25:29 2019 daemon.err run-acme[31125]: Can not init api.
@neheb
Copy link
Contributor

neheb commented Jul 11, 2019

ping @yousong

uclient-fetch has PROVIDES:=wget but the full GNU wget is needed here. What's the solution?

@yousong
Copy link
Member

yousong commented Jul 12, 2019

It's still name collision. I prefer we change the abstract package name to something else like wgeter. That way opkg install wget will still match existing expectation and intuition. Coordinated multiple treewide changes are required to achieve this.

@pleasantone
Copy link
Author

pleasantone commented Jul 12, 2019 via email

@yousong
Copy link
Member

yousong commented Jul 12, 2019

I thought names in PROVIDES should be for minimum common. But I think you are right that we should let opkg know that wget and wget-nossl both provide wget-full, or gnu-wget. That fits in just well ;)

@neheb
Copy link
Contributor

neheb commented Jul 12, 2019

We could also change the package name to wget-ssl and add PROVIDES:=wget as well as change the dependency in acme.sh.

@yousong
Copy link
Member

yousong commented Jul 12, 2019

Changing package name has the undesirable effect that users may get lost and will need to search things like the internet, changelog to find out the new name use in opkg install xx.

@neheb
Copy link
Contributor

neheb commented Jul 18, 2019

Another option would be to implement the missing options. I have no idea what is needed.

@pleasantone
Copy link
Author

pleasantone commented Jul 19, 2019 via email

@yousong yousong self-assigned this Sep 9, 2019
yousong added a commit to yousong/packages that referenced this issue Sep 9, 2019
Fixes openwrt#9456

Ref: openwrt#9456
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
tripolar pushed a commit that referenced this issue Sep 9, 2019
Fixes #9456

Ref: #9456
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
yammut added a commit to yammut/packages that referenced this issue Sep 21, 2019
* net: remove ipsec-tools

As discussed in openwrt#7832, ipsec-tools is no longer suitable for inclusion in the
distribution.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

* ipsec-tools: remove

As discussed on GitHub[0] the package should be removed.

[0]: openwrt#7832

> The package is effectively orphaned upstream and has been for some
  time. Given the security-sensitive nature of the package, an active
  maintainer community is essential for safe usage. Racoon's lack of
  support for IKEv2, despite it being stable for a long time, and the
  availability of next-generation tunneling systems such as wireguard,
  also would seem to limit its future value. Setkey's functionality
  has been subsumed by 'ip xfrm'.

> If you disagree that ipsec-tools should be removed from OpenWRT,
  please say so now. If there are still use cases for it that are
  not met by other IKE implmenentations that would be good to
  know. But more importantly, I think you'll need to convince us
  that ipsec-tools is actually safe to operate on today's Internet
  given its current state of development.

Signed-off-by: Paul Spooren <mail@aparcar.org>

* opennhrp: remove

The package requires ipsec-tools which will be removed from packages.git

Signed-off-by: Paul Spooren <mail@aparcar.org>

* exfat-nofuse: drop BUILD_PATENTED

Microsoft has published technical specification for exFAT [1]
and the driver has been added to Linux staging tree [2].

It's now safe to drop BUILD_PATENTED label.

[1] https://docs.microsoft.com/windows/win32/fileio/exfat-specification
[2] http://lkml.iu.edu/hypermail/linux/kernel/1908.3/04254.html

Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>

* youtube-dl: Update to version 2019.9.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

* python-voluptuous: Update to version 0.11.7

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

* python-voluptuous-serialize: Update to version 2.2.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

* python-yaml: Update to version 5.1.2

PKG_NAME should match the name of the folder

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

* python-slugify: Update to version 3.0.3

Change indentation in dependencies and as well in description

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

* python-sqlalchemy: Update to version 1.3.7

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

* lighttpd: Update to version 1.4.54

Fixes CVE-2019-11072

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

* lighttpd: Makefile polishing

- Correct SPDX License Identifier
- Move MAINTAINER, SUBMENU to more appropriate place
- Use HTTPS in URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

* syslog-ng: Update to version 3.23.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

* syslog-ng: Add GPL license for plugins

- Correct SPDX License Identifier
- Move DEPENDS under URL

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

* ap51-flash: upgrade package to latest release 2019.0

* improved Zyxel firmware detection
* introduced optional MAC address filtering
* added support for:

  - Plasma Cloud PA300
  - Plasma Cloud PA1200
  - Plasma Cloud PA2200

Signed-off-by: Sven Eckelmann <sven@narfation.org>

* python-sentry-sdk: Update to version 0.11.2

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

* classpath: Add jamvm/host build dependency

This is needed for compilation. A Java compiler is also needed but that
must be handled elsewhere.

Fixed up license information.

URLs to HTTPS.

Other Makefile cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* measurement-kit: Fix compilation with uClibc-ng

nextafter is not included in std with uClibc-ng. Don't use the std version

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* haveged: update to 1.9.6

Update haveged to 1.9.6

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

* patch: rename CVE-2019-13638 patch to mollify uscan

Signed-off-by: Russell Senior <russell@personaltelco.net>

* apinger: Fix PKG_SOURCE_VERSION

Too short

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* alsa-utils: Update to 1.1.9

Added license information.

Added PKG_BUILD_PARALLEL for faster compilation.

Change URLs to HTTPS.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* mosh: add package

Maintainer: Jakub Tymejczyk <jakub@tymejczyk.pl>
Compile tested: ramips, Xiaomi Router 3G, fc54256
Run tested: ramips, Xiaomi Router 3G, 0f54d96

Description:
Mosh is "Remote terminal application that allows roaming, supports
intermittent connectivity, and provides intelligent local echo and line
editing of user keystrokes".

Project's site: https://mosh.org

Makefile and patch taken from: https://github.com/mchwalisz/mosh-openwrt
updated by me

Signed-off-by: Jakub Tymejczyk <jakub@tymejczyk.pl>
(Makefile cleanup and size optimizations)
Signed-off-by: Rosen Penev <rosenp@gmail.com>

* python-mysql: rename to python-mysqlclient & bump to version 1.4.4

The package on PyPi is named `mysqlclient`.
This should have been named `python-mysqlclient` from the start.
There is a `mysql` package on PyPi already but that's a different
code/package.

Doing this should avoid any future confusion.
There is no good time to do this rename; at least 19.07 has been branched
already and this can go into the next release [in a year or so].

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

* python-pyasn1: Update to 0.4.7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

* mxml: update to 3.1

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

* zerotier: update to release 1.4.4

Also allow path to local.conf to be set and enable linker optimisations
to save a few bytes.

Signed-off-by: Moritz Warning <moritzwarning@web.de>

* alsa-libs: Update to 1.1.9

Fixed license information.

Removed older unnecessary stuff.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* forked-daapd: update to 26.5

Signed-off-by: Espen Jürgensen <espenjurgensen+openwrt@gmail.com>

* bonnie++: Size optimizations

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libdouble-conversion: Size optimizations

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* softethervpn: Add missing OpenSSL header

Fixes compilation without OpenSSL deprecated APIs as well as
-Werror=implicit-function-declaration.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libmstch: Remove boost dependency

Added patches that convert Boost functionality to C++17.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* usbip: disable ASLR PIE

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

* samba4: remove double quotes for renice

The double quote thells the shell that the list returned from `pidof` is a
single argument, therefore, `renice` will cry about a malformed input.
With this commit, `renice` will be applied correctly to all the returned PIDs
from `pidof`.

The output of `renice` for the quoted list is as follows:
`renice: invalid number '6592 6587 6586 6574'`
`renice` does not show and does apply the nice value if the list is unquoted.

Signed-off-by: Oever González <notengobattery@gmail.com>
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

* samba4: update to version 4.9.13 (security fix)

Fixes CVE-2019-10197

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

* fastd: fix init script for multiple VPN instances

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

* libuwifi: fix dev installation

The ccan needs config.h file. This commit fixes the includes
and copies the config.h file to the correct position.

Signed-off-by: Nick Hainke <vincent@systemli.org>

* ulogd2: Backport upstream patches

IPFIX support was requested.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* golang: Update to 1.13

Signed-off-by: Xingwang Liao <kuoruan@gmail.com>

* vala: Update to 0.46.0

Switched to using the configure script instead of using make directly.

Added HOST__BUILD_PARALLEL for faster compilation.

Removed target build. It's completely unused.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* adblock: update 3.8.5

* use raw procd interface trigger as last resort, if the
  adblock config is not available during startup
* fix selective subdomain whitelisting for dnsmasq
* fix a kresd restart issue with 'DNS File Reset'
* fix a suspend/resume cornercase
* disable the tld compression, if the number of blocked domains
  is greater than 'adb_maxtld' (default: 100000)
* made the fw portlist configurable (default '53 853 5353')
* preliminary support for inotify-like autoload features
  of dns backends like kresd in future Turris OS. If 'adb_dnsinotify'
  is set to 'true', all adblock related restarts and the
  'DNS File Reset' will be disabled

Signed-off-by: Dirk Brenken <dev@brenken.org>

* nss: update to 3.46

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

* ulogd2: Build IPFIX module

add ulogd_output_IPFIX.so to ulogd-mod-extra

Signed-off-by: Sebastian Fleer <dev@dwurp.de>

* lcdringer: Depend on vala/host instead

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* lcdgrilo: Depend on vala/host instead

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* pulseaudio: Add glib2/host dependency

This was implicit with glib2 but got removed with
170ef79

Fixed license tag to newer SPDX.

Removed PKG_BUILD_DIR as that is now default with upstream's
e545fac

Minor reorganization for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* softethervpn: Fix openssl header patch

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* php7: update to 7.2.22

While at, update the SPDX license id to most recent format.

Compile and run tested on mxs platform.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

* php7-pecl-dio: update SPDX id to most recent format

Also the source package contains a LICENSE file, so
we can refer to it.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

* php7-pecl-http: update to 3.2.1

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

* php7-pecl-redis: update to 5.0.2

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

* php7-pecl-libevent: update to latest commit

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

* Revert "libmstch: Remove boost dependency"

This reverts commit cb78291.

The buildbots have GCC6. GCC7 is needed for C++17.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* zerotier: change license to BSL 1.1

Business Source License.

Signed-off-by: Moritz Warning <moritzwarning@web.de>

* zerotier: make sure the /var/lib exists

Signed-off-by: Moritz Warning <moritzwarning@web.de>

* glib2: don't use libelf during host build

Since commit d3f86c9 tools/libelf
installs a pkgconfig file, which in turn is picked up during the glib2
host build. On the build bots the same occurs, although it so happens
that (sometimes?) libelf.h is not found and the host build fails. This
may be a timing issue specific to the build bots, as the header is in
fact installed by tools/libelf and I can't reproduce this here on my own
computer.

In any case, libelf (if detected) is only used by gresource. gresource
can be used without it. gresource is not used by OpenWrt's build system
(also not in openwrt/packages). So adding "--disable-libelf" to the host
configure args is not detrimental in any way and works around the issue
described above.

Resolves openwrt#9927

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

* wget: provides gnu-wget

So that packages like acme requiring features from it can depend on it
explicitly, not the more basic "wget" which is also provided by
"uclient-fetch"

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

* acme: depends on gnu-wget

Fixes openwrt#9456

Ref: openwrt#9456
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

* unrar: Update to 5.8.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* netifyd: Updated to v2.92.

Signed-off-by: Darryl Sokoloski <darryl@sokoloski.ca>

* libfolly: Update to 2019.09.02

Several optimizations to reduce size. ~35KB. Mostly because of LTO.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* banip: update 0.2.0

* remove 'http-only' mode, all sources are now fetched from https sites
* the backup mode is now mandatory ('/tmp' is the default backup
  directory), always create and re-use backups if available.
  To force a re-download take the 'reload' action.
* support 'sshd' in addition to 'dropbear' for logfile parsing
  to detect break-in events
* always update the black-/whitelist with logfile parsing results
  in 'refresh' mode (no new downloads)
* rework the return code handling
* tweak procd trigger
* various small fixes
* (s)hellsheck cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>

* libfizz: Update to 2019.09.09.00

Several size optimizations. ~76KB savings.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libsigcxx: Remove

It's no longer needed with libtorrent. No other package depends on it.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libtorrent: Switch to static library.

libtorrent is only used by rtorrent. Switch to a static library to save
space.

Removed libsigc++ dependency. It seems it's not needed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* rtorrent: Switch to using static libtorrent

rtorrent is the only user of libtorrent. Statically link to save space.

Added usleep patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libwangle: Update to 2019.09.02

Several size optimizations. Savings of ~68KB.

Remove shared build. libwangle is only used by fbthrift. Just use the
static version.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* treewide: Change .*GPL.*+ licenses to SPDX compatible identifier

The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL
licenses. But a lot of packages did use a different, non-SPDX style with a
"+" at the end instead of "-or-later".

Signed-off-by: Sven Eckelmann <sven@narfation.org>

* dovecot: Update to version 2.3.7.2

Fix CVE-2019-11500

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

* boost: Package Version Update (1.71.0) + bugfixes

This commit updates Boost to version 1.71.0 and disables Boost.Context
 for arc and mips64 architectures, since either jump_fcontext or
 getcontext are undefined for those architectures.

It also fixes a bug were Boost.Fiber was not properly disabled for
mips32 and mips64 architectures.

Boost.Coroutine2 option was removed since it was redundant. By selecting
the Coroutine package, Coroutine2 is also installed.

Boost.Fiber has been disabled for target brcm47xx_generic and brcm47xx_legacy
due to misssing opcode support from instruction set.

Boost 1.71.0 brings a new header-only library
 - Boost.Variant2 [1]
   -> A never-valueless, strong guarantee implementation of
      std::variant, from Peter Dimov.

More info about Boost 1.71.0 can be found at the usual place [2].

[1]: https://www.boost.org/doc/libs/1_71_0/libs/variant2/doc/html/variant2.html
[2]: https://www.boost.org/users/history/version_1_71_0.html

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>

* banip: update 0.2.1

* fix for openwrt#9954

Signed-off-by: Dirk Brenken <dev@brenken.org>

* php7-pecl-krb5: fix PKG_LICENSE tag

According to the included license file in the package,
the license is MIT not BSD, so fix it.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

* php7-pecl-mcrypt: update PKG_LICENSE

Update license tag to latest SPDX format.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

* libwebp: Add new package

Requested by: openwrt#9740

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* youtube-dl: Update to version 2019.9.12.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

* cgroups-mount,docker-ce,lxc: rework kernel feature dependency

Fix that KERNEL_CGROUPS is enabled (selected) automatically along with
cgroups-mount

Replace "if PACKAGE_docker-ce" with a menu to avoid circular denpendency
issue involving PACKAGE_docker-ce, PACKAGE_cgroups-mount and
KERNEL_CGRUOPS

docker-ce, lxc: replace KERNEL_LXC_MISC with more specific options

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

* btrfs-progs: Update to version 5.2.2

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

* yggdrasil: fix openwrt#9960 re: vendor fix

Signed-off-by: William Fleurant <meshnet@protonmail.com>

* liblz4: Update to 1.9.2

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libgee: Update to 0.20.2

Eliminate patch in favor of configure argument.

Shuffled some stuff around for consistency between packages.

Added PKG_BUILD_PARALLEL for faster compilation.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* mmc-utils: update to latest git head

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

* libgcrypt: Update to 1.8.5

Fixed up license information. Only the library is packaged.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libfolly: Pass -DBoost_NO_BOOST_CMAKE

It seems the new CMake update broke boost again.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libwebp: Fix typo with InstallDev section

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libwebp: Fix InstallDev typo again

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libgd: Switch to CMake

Size reduced from 92878 to 91675 bytes.

CMake added CXX files. Removed those.

Removed ceill patch. ceill is not used anymore.

Removed pkgconfig patch. CMake uses a different file, which does not have
this problem.

Further size reduction to 87938 with LTO.

Removed InstallDev. CMAKE_INSTALL takes care of that.

Added WebP support.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* smartsnmpd: Update to 2015-02-22 version

Ran through 2to3 to get it to compile.

Ran init script through shellcheck. Grouped several file writes.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* ddns-scripts: Use https for domains.google.com

Without https the update fails with:

```
 132954       : #> /usr/bin/curl -RsS -o /var/run/ddns/myddns_ipv4.dat --stderr /var/run/ddns/myddns_ipv4.err --noproxy '*' 'http://CENSORED:***PW***@domains.google.com/nic/update?hostname=CENSORED&myip=CENSORED'
 132954       : DDNS Provider answered:
<HTML>
<HEAD>
<TITLE>Moved Temporarily</TITLE>
</HEAD>
<BODY BGCOLOR="#FFFFFF" TEXT="#000000">
<H1>Moved Temporarily</H1>
The document has moved <A HREF="https://domains.google.com/nic/update?hostname=CENSORED&amp;myip=CENSORED">here</A>.
</BODY>
</HTML>
 132954 ERROR : IP update not accepted by DDNS Provider
```

Signed-off-by: Paul Tobias <tobias.pal@gmail.com>

* liblo: disable tests and enable IPv6

Speeds up compilation.

Also fixed compilation without deprecated POSIX APIs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libftdi1: Don't build examples

Add PKG_BUILD_PARALLEL for faster compilation.

Replace InstallDev section with CMAKE_INSTALL

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* scons: move host build tool to a proper place

This patch aims to move scons host build tool into packages feeds, where
this tools belongs. There are currently no packages in the master tree
which would need scons, yet scons is build always as part of host tools,
just in order to satisfy host build dependency of few packages in the
packages feeeds.

Signed-off-by: Petr Štetiar <ynezz@true.cz>

* iotivity,smartsnmpd,gpsd: use scons from feed

commit 0c090fd ("scons: move host build tool to a proper place")
has moved scons into the packages feeds, so switch to that package
include and adjust build dependency to a new scons home.

Signed-off-by: Petr Štetiar <ynezz@true.cz>

* seafile-seahub: update dependency to python-mysqlclient

The `python-mysql` package was updated with PR openwrt#9705

For seahub this was omitted, since the Python dependencies are prefixed
with `python-`, so it was missed during the grep search.
And grepping just for `mysql` yields many results.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

* golang: Use new -trimpath option when compiling Go packages

Go 1.13 added a new -trimpath option to the "go build" command[1] that
removes system paths from compiled executables. This replaces the
previous -trimpath flags.

There are still system paths in the compiled executable (for crti.o and
crtn.o, when cross-compiling); these appear to be stripped during the
packaging process.

[1]: https://golang.org/doc/go1.13#trimpath

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

* collectd: add new cpu config values

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

* collectd: add new memory config values

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

* collectd: bump PKG_RELEASE number

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

* cgi-io: use different acl scopes for path and command permissions

Use the `cgi-io` scope to check for permission to execute the requested
command (`upload`, `backup`) and the `file` scope to check path
permissions.

The reasoning of this change is that `cgi-io` is usually used in
conjunction with `rpcd-mod-file` to transfer large file data out
of band and `rpcd-mod-file` already uses the `file` scope to manage
file path access permissions. After this change, both `rpc-mod-file`
and `cgi-io` can share the same path acl rules.

Write access to a path can be granted by using an ubus call in the
following form:

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "file",
        "objects": [
            [ "/var/lib/uploads/*", "write" ]
        ]
    }'

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

* cgi-io: add download operation

Add a new `cgi-download` applet which allows to retrieve the contents
of regular files or block devices.

In order to initiate a transfer, a POST request in x-www-form-urlencoded
format must be sent to the applet, with one field "sessionid" holding
the login session and another field "path" containing the file path to
download.

Further optional fields are "filename" which - if present - will cause
the download applet to set a Content-Dispostition header and "mimetype"
which allows to let the applet respond with a specific type instead of
the default "application/octet-stream".

Below is an example for the required acl rules to grant download access
to files or block devices:

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "cgi-io",
        "objects": [
            [ "download", "read" ]
        ]
    }'

    ubus call session grant '{
        "ubus_rpc_session": "...",
        "scope": "file",
        "objects": [
            [ "/etc/config/*", "read" ],
            [ "/dev/mtdblock*", "read" ]
        ]
    }'

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

* cgi-io: pass appropriate HTTP error codes to failure()

Instead of always replying with a generic 500 internal server error code,
use more appropriate codes such as 403 to indicate denied permissions.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

* cgi-io: use splice() to stream backup archive

This improves the I/O performance when outputting large backups.

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

* pdns: bump version to 4.2.0

Bump PowerDNS Authoritative DNS Server to 4.2.0. Release changelong can be found at
https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.2.0

Compile Tested: OpenWRT Snapshot - armv7
Run Tested: Linksys WRT1900ACS - package runs correctly, not all functionality has been tested.

Signed-off-by: James Taylor <james@jtaylor.id.au>

* dnscrypt-proxy: Update to latest git version.
	Revise dnscrypt-resolvers.csv with new dnscrypt-ca info.

Signed-off-by: Ted Hess <thess@kitschensync.net>

* libgd: Backport SOVERSION and pkgconfig changes

The latter is needed for some packages to find libgd.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* nut: Switch to pkgconfig for finding libgd

nut uses gdlib-config to find libgd, which happens to be deprecated. This
switches it to use pkgconfig and allows a fallback to gdlib-config, same
as the libusb check.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* leptonica: Add missing libwebp dependency

Now that libwebp is in the tree, leptonica picks it up.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* opencv: Add missing libwebp dependency

Now that libwebp is in the tree, opencv picks it up.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* motion: Update to 4.2.2

Removed webp support. motion picks it up now that it's in the tree.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libftdi1: Remove faulty change from last patch

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* librsocket-cpp: Update to 2019-09-12

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* sqm-scripts: Bump to v1.4.0

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

* wipe: add new package

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>

* openldap: update to 2.4.48

Fixes CVE-2019-13565.

Signed-off-by: W. Michael Petullo <mike@flyn.org>

* scapy: update to 2.4.3

Signed-off-by: W. Michael Petullo <mike@flyn.org>

* vips: update to 8.8.2

Signed-off-by: W. Michael Petullo <mike@flyn.org>

* scapy: fix PKG_LICENSE_FILES

Signed-off-by: W. Michael Petullo <mike@flyn.org>

* strongswan: bump to 5.8.1

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

* mjpg-streamer: modularize package

Instead of selecting the modules on compile time, package them into
several small packages. While at it, add the ZeroMQ output plugin which
was previously not packaged.
Also make sure to use OpenWrt's built-in support for CMake properly by
calling Build/Configure/Default in the package's Build/Configure rule.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

* openvswitch: bump to version 2.12.0

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

* dtc: bump to version 1.5.1

Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

* adblock: update 3.8.6

* refine stop logic to prevent needless dns backend restarts
  and other oddities
* cosmetics

Signed-off-by: Dirk Brenken <dev@brenken.org>

* python-schema: update to version 0.7.1

Signed-off-by: Karel Kočí <karel.koci@nic.cz>

* bigclown-firmware-tool: update to version 1.4.1

This release updates: bcf create --from

There are no dependencies changes introduced by upstream and changes are
of limited character.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>

* bigclown-mqtt2influxdb: update to version 1.2.0

This version introduces new option -d that makes service not to exit on
error. This is brutal solution but is required to protect against
service failure when remote resource is down.

bigclown-mqtt2influxdb is service moving data from MQTT to InfluxDB and
both of those services can and potentially are remote. The original
implementation where it failed when service goes down is not ideal
because network outage or target server outage can later require this
service restart.

Signed-off-by: Karel Kočí <karel.koci@nic.cz>

* zoneinfo: Updated to the latest release.

Signed-off-by: Vladimir Ulrich <admin@evl.su>

* lcdgrilo: Fix compilation with newer Vala

It seems semantics changed slightly.

Cleaned up Makefile for consistency between packages.

Added PKG_BUILD_PARALLEL for faster compilation.

Fixed license information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libftdi1: Partially add back InstallDev

The pkgconfig file needs changing.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libzstd: Fix pkgconfig paths for cross compilation

pkgconfig needs to override these.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libfmt: Fix pkgconfig paths

pkgconfig needs to override these.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libftdi1: Apply pkgconfig fixes to libftdipp1 as well

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libiio: Update to 0.18

While at, fix a minor nitpick while installing shared library symlinks.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

* libgpiod: update to 1.4.1

While at, fix minor nitpick during installation of library symlinks.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

* libmodbus: update to 3.1.6

Also fix the license information: in older versions the test programs
were GPL 3 licensed, but meanwhile it changed to BSD license.
But since this package only packages the library itself, we can
safely focus only on the LGPL here which covers the library itself.

While at, fix a minor nitpick during library symlink installation.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

* protobuf: Switch to CMake

Allows PKG_BUILD_PARALLEL to work properly.

Replaced InstallDev section with CMAKE_INSTALL.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* zerotier: update to 1.4.6

Signed-off-by: Moritz Warning <moritzwarning@web.de>

* ulogd: Add back autoreconf

Compile fails at times, probably because of the patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* dtc: Add missing dependency to -utils

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* collectd: add apcups uci config

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

* collectd: add curl uci config

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

* collectd: add network uci config

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

* collectd: add iptables uci config

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

* collectd: bump PKG_PACKAGE version

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

* treewide: add PKG_CPE_ID for better cvescanner coverage

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

* gpsd: Fix pkgconfig file for libgps

This ensures it can be found properly by any package that uses pkgconfig
to find libgps.

Nothing in the tree currently does.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libogg: Update to 1.3.4

Added PKG_BUILD_PARALLEL for faster compilation.

Added ABI_VERSION to force rebuilds on ABI upgrade.

Added a couple of LDFLAGS for smaller size.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libgd: Fix pkgconfig file for cross compilation

This allows packages that use pkgconfig to find libgd properly.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* forked-daapd: Fix compilation with newer alsa-libs

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* libuv: update to 1.32.0

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

* pdns: Explicitly define lua implementation

Compile Tested: yes, selects lua as implementation and doesn't pick up luajit
Run Tested: no, minor change

Maintainer: me

Description:
On some architectures PowerDNS was preferring Luajit over Lua, which wasn't added
as a dependency. On previous versions this was controlled by passing `--with-lua`
and `--without-luajit` however this isn't functional anymore.

On the 4.2 series, it is instead possible to define the lua implementation to be
used by passing `--with-lua=[implementation]` ie `--with-lua=lua`

Signed-off-by: James Taylor <james@jtaylor.id.au>

* pulseaudio: Backport upstream patch

Fixes compilation with recent alsa-libs.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* irssi: update to version 1.2.2 (security fix)

Fixes CVE-2019-15717

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

* django: Update to 1.11.24

Fixes a whole bunchs of CVEs:

CVE-2019-3498
CVE-2019-6975
CVE-2019-12308
CVE-2019-12781
CVE-2019-14232
CVE-2019-14233
CVE-2019-14234
CVE-2019-14235

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* p11-kit: Update to 0.23.17

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* python-certifi: bump to 2019.9.11

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>

* mjpg-streamer: Fix build depends

Signed-off-by: Rosen Penev <rosenp@gmail.com>

* collectd: add logfile plugin definitions

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

* collectd: add reload and service trigger

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

* collectd: bump PKG_PACKAGE version

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
tohojo pushed a commit that referenced this issue Nov 17, 2019
Fixes #9456

Ref: #9456
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants