podman: change permissions on /usr/share/containers/seccomp.json

ariang: update to 1.2.2

wsdd2: update to git 2021-06-28 (v1.8.5)

uci2: update revision

samba4: update to 4.14.5

rpcbind: update to 1.2.6

libtirpc: update to 1.3.2

* update to git 2021-06-28 (v1.8.5)
* add extra startup delay

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Pull in new API function from upstream.

Signed-off-by: Jakov Petrina <jakov.petrina@sartura.hr>

A pure C implementation of lolcat, probably the lightest out there.

Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com>

strongswan: miscellaneous cleanup of config file, etc

Also from Vincent Wiemann <vincent.wiemann@ironai.com>.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Also from Vincent Wiemann <vincent.wiemann@ironai.com>.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

This option sets the interface of the policy.

Also from Vincent Wiemann <vincent.wiemann@ironai.com>.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Also from Vincent Wiemann <vincent.wiemann@ironai.com>.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Use list's where appropriate for multi-value config variables.

Forbid absolute/relative paths for certificate and key files.

Get rid of last remnants of left/right naming.

Factor invariant code paths.

Drop redundant secrets.rsa.filename section.

Thanks to Vincent Wiemann <vincent.wiemann@ironai.com> for calling
out many of these improvements.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

mariadb: fix cmake issue

We enable the option by default, but do not depend on the kernel modules
required for L2TP offloading to avoid wasting space when the feature is
not needed. To use offloading, kmod-l2tp-eth must be installed.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

* update to 4.14.5
* refresh patches

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

* update to 1.2.6
* remove merged upstream patch

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

update to 1.3.2

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

The UMAC-based methods provide higher performance than GMAC and aren't
suspectible to timing attacks when implemented in software (which is
always the case on OpenWrt, as OpenSSL support is disabled). Disable
GMAC by default to save a few KiB.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

The fix requires the use of the generated dnsmasq `lancache.conf` file.
So I moved configuration of the hosts directory out of the UCI and into
the generated dnsmasq configuration file to simplify the script.

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

Same fix that went into libmariadb package with commit fd13c12.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

libmariadb: fix compilation cmake issue

nextdns: Update to version 1.33.11

acme: update to 2.9.0

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switch to AUTORELEASE to avoid bumping PKG_RELEASE all the time.

Run shell scripts through shfmt -w -ci -bn -sr -s in order to have a
standard style.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

msgpack-c: don't check for GTest

* fix a possible race condition during boot
* use the new "device" syntax in the network wizard

Signed-off-by: Dirk Brenken <dev@brenken.org>

softethervpn5: update to 5.02.5180

* update to 5.02.5180
* refresh patches
* add deps: libsodium
* fix (Build/Install)

Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>

fixup

delve: add package

Signed-off-by: Niels Widger <niels@qacafe.com>

tailscale: update to version 1.8.7

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

spdlog: fix compilation with fmtlib 8

Not available with OpenWrt. Fixes compilation when host GTest is
present.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Without this, compilation fails because of a fortify-source header.
There's something defining and undefining _GNU_SOURCE somewhere.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Small API change.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>

open-vm-tools: update to 11.3.0

dante: adopt package