In collaboration with @dangowrt the server makes use of `ucert`. Active
workers sign created firmware and clients check if the signature is
valid. Certs of *hacked* or inactive workers can be revoked. Private CA
key is **not** stored on the upgrade server.
Only for devices already supporting ucert via firmware metadata.
Signed-off-by: Paul Spooren <mail@aparcar.org>
Drop pre-ucert signature verification.
HTTPS is optional now as integrity can also be provided using ucert.
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Add new package,
open-vm-tools is Open Virtual Machine Tools for VMware guest OS
tested: OpenWrt master and 18.06.2 (x86_64) on ESXi 6.5, 6.7
Signed-off-by: Yuhei OKAWA <tochiro.srchack@gmail.com>
This program has been created to aid open source spectrum analyzer
development for Qualcomm/Atheros AR92xx and AR93xx based chipsets.
Find more information about the package here:
https://github.com/simonwunderlich/FFT_eval
This package is used in LibreMesh, however our CI doesn't support
multiple architecures as all LibreMesh code is lua. Adding this package
to the official repos allows us to offer it in our tool chain.
Signed-off-by: Paul Spooren <mail@aparcar.org>
Remove LTO. It causes an increase in size.
Remove fsck.btrfs. It's just a script that says to run btrfs check.
Replace INSTALL_BIN with CP to avoid copying what should be a symlink.
Install libbtrfsutil. This is needed by a few of the tools.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
By default the database of the known drives is compiled into smartctl and smartd.
These tools also support loading external database from /usr/share/smartmontools/drivedb.h.
This changeset splits moves the database to a separate package
which allows to save some flash space and RAM for those for whom
generic S.M.A.R.T. attributes are enough.
Signed-off-by: Maxim Storchak <m.storchak@gmail.com>
Added -Wl,--gc-sections for smaller size.
Removed TARGET_CFLAGS as there is no difference in size.
Added PKG_BUILD_PARALLEL for faster compilation.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
This replaces the use of uci_validate_section() with
uci_load_validate(), which removes the need to declare local variables
for every config option.
This also fixes some space-indented lines to use tabs.
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
The shared library does not depend on libatomic nor libstdcpp anymore.
This is very good news for the users of said lib.
This commit updates the depends accordingly.
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
While researching CircleCI build failures, I came across a linking error
relating to liblzma, where ld instructs to recompile with fPIC.
Unfortunately, this increases filesize. Added some configure flags to try
to mitigate is somewhat.
Removed maintainer as he is no longer active.
Added PKG_CPE_ID for proper CVE tracking.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
OpenSSL is only used for hashing while being a huge dependency (689.4KB
for mips_24kc.
Cryptsetup also supports and recommends argon2 for hashing, which is not
provided by OpenSSL.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Add several configure arguments to speed up build time.
Switch from using libgcrypt to using the kernel directly.
This has a number of benefits including smaller size and faster speed. It
also allows selection of desired crypto primatives instead of having all
of them.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
50-client.cnf is used by the client library, so it should be installed
with the library. This commit moves the configuration file to the
correct package and updates its depend (50-client.cnf is sourced by
my.cnf from mariadb-common).
Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>
The libelf1 source package has been renamed to libelf in OpenWrt base,
adjust the dependency in "at" accordingly.
There are no functional changes and no changes in the resulting binary.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
The libelf1 source package has been renamed to libelf in OpenWrt base,
adjust the dependency in avrdude accordingly.
There are no functional changes and no changes in the resulting binary.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Based on debian patch. LDFLAGS were not being passed, which caused relro
to not be applies.
Also made stock CFLAGS optional. -fkeep-inline was keeping sizes high.
Removed PKG_NO_MIPS16 as the original problem seems to be gone.
Size from 54338 to 50761
Signed-off-by: Rosen Penev <rosenp@gmail.com>
The code from 1996 is using pre-c99 inline semantics that cause compilation
failures on i386. Added std-gnu89 to fix this.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Use codeload URL suggested by neheb
Add ABI_VERSION:=5 to libsensors
Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
Bump PKG_RELEASE just in case.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Removed weird uclibc++ compatibility stuff as it seems to not be needed
anymore.
Switched to standard variables.
Added PKG_BUILD_PARALLEL for faster compilation.
Removed PKG_FIXUP as it seems the package has been fixed already.
A few changes to the CFLAGS and linker options resulted in ipk size going
from 244694 to 244283, possibly due to previous overlinking.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Disable dynamic libraries and enable LTO
Only use `--enable-libc-musl` when musl is selected
Shrinks ipk size by about 200KB
Signed-off-by: Deng Qingfang <dengqf6@mail2.sysu.edu.cn>
This allows to get rid of the heavy libstdcpp dependency.
Added -fno-rtti to save a little space (200 bytes).
Also did some Makefile rearrangements for consistency.
Added HTTPS to URLs.
Signed-off-by: Rosen Penev <rosenp@gmail.com>
Backport an upstream patch to remove the upper limit of
lm-sensors version check, so that using lm-sensors 3.5.0
will work.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Drop the config knobs '*_address' and introduce '*_interface'
and '*_ipv6' instead.
'*_interface' takes an openwrt interface name ('loopback', 'lan',
'wan' etc), from which the primary IP is used to listen on. If
the matching '*_ipv6' is set to '1', the IPv6 adress will be used,
IPv4 elsewise.
procd interface triggers are now combined with this, so if a listen
interface is not yet configured when the init script is executed, the
process start is defered, and the trigger takes care of that once
the interfaces are ready.
Signed-off-by: Andre Heider <a.heider@gmail.com>
Daniel Golle
Paul Spooren
Yuhei OKAWA
Karel Kočí
Rosen Penev
Maxim Storchak
Jeffery To
Sebastian Kemper
Daniel Engberg
Josef Schlehofer
Moritz Warning
Jo-Philipp Wich
Deng Qingfang
Jan Pavlinec
Hannu Nyman
Andre Heider