libevdev: Update to 1.5.9

pyodbc: Update to 4.0.24

pcre2: Update to 10.32

openobex: Update to 1.7.2

hiredis: Update to 0.14.0

c-ares: Add CPE ID to track CVEs

libartnet: Fix compile with GCC7

cyrus-sasl: Update to 2.1.27-rc8

yara: Update to 3.8.1

libp11: Update to 0.4.9

python-psycopg2: Update to 2.7.5

ccid: Update to 1.4.30

jool: Backport two fixes for newer kernels.

cmdpad: Fix compile

oath-toolkit: Add patch from Fedora to fix compilation

spoofer: Update to 1.4.0

mdnsresponder: bump to 878.70.2 and refresh patches

libopus: Update to 1.3.0

Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>

Signed-off-by: Jonathan G. Underwood <jonathan.underwood@gmail.com>

python-requests: Update to 2.20.0

node-mozilla-iot-gateway: bump to version 0.6.0

Update collectd to version 5.8.1

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

Signed-off-by: Marko Ratkaj <marko.ratkaj@sartura.hr>

Switched URL to a sensical version.

Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

syslog-ng: stop service when uninstalling/updating

Signed-off-by: Rosen Penev <rosenp@gmail.com>

aria2: fixed the spelling for rpc-passwd and rpc-user.

hdparm: Update to 9.57

sbc: Bump to 1.4

unbound: fix odhcpd and axfr script functions

net/mwan3: improvements

Signed-off-by: brv phoenix <feixuekaka1@gmail.com>

- fix AXFR zones to delay a potentially large download with ntp-hotplug
- fix odhcpd link script to properly delete expired lease data from DNS

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

build: add CircleCI

Allows to choose database management software and adds mysql support.
Proxy gets the same database management software as server, because it
must be the same type.

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
[Keep postgresl as default / depend on libpq]
Signed-off-by: Krystian Kozak <krystian.kozak20@gmail.com>

this allow us to stop using uci /var/state,
which is deprecated since forever

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

we use ubus since 2014 (af1fe70acb)
we don't use uci since 2015 (76150309a8)

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

The big advantages are:
- everyone can download the build logs and the ipks
- we use our own docker image
- people with commit access can ssh into the build env

The disadvantages:
- need to push new commits to restart the build

I haven't reimplemented the commit message checks as this should be replaced
with a separate script doing only that so we can require it
(https://help.github.com/articles/enabling-required-status-checks/)

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

This allow to run zabbix as non root
Thanks to Adrian Kirchner (@adriankirchner)

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

If we set the option "local_source" in the globals mwan3 section to "none",
traffic generated by the router it self will always use the default route from
the wan interface with the lowest metric. If this interface is down
the router traffic still uses the connection with the lowest metric but
this is disconnected. Load balancing and failover from the lan site is
still possible. Only router generated traffic is not load balanced and
could not use failover.

To solve this issue with router initiated traffic add the additional
option "online_metric" to the mwan3 interface section.

If the interface is connected then this lower "online metric" is set in the
default routing table.

With this change we have at least a failover with router initiated
traffic.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

During runntime of mwan3 we could add dynamicly networks to this ipset
which would then treated as connected networks by mwan3.

This is also usefull for ipsec.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

With the list param "rt_table_lookup" in the mwan3 section globals,
it is now possible to add a additional routing table numbers which would get
also parsed and will be added to the connected network.
So mwan3 will treat them as they are directly connected to this device.

This could be usefull if we use ipsec.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

The IPv6 egrep regex is confusing and hard to maintain.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

This change should optimize and speed up the status output generation.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

The generation for reporting the policies uses the same code add a
common function to reduce duplication.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Prettify and cleanup source

Signed-off-by: Florian Eckert <fe@dev.tdt.de>