Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

node: bump to 14.17.4

Fixes crashes like:
daemon.err asterisk[5087]: Assertion failed: enc->streams == NULL (src/opusenc.c: ope_encoder_drain: 839)

Signed-off-by: Andre Heider <a.heider@gmail.com>

php7: update to 7.4.22

php8: update to 8.0.9/add runtime test

gateway-go: update to 0.2.0

Signed-off-by: Yu Fang <yu@iotserv.com>

July 2021 Security Releases:

Use after free on close http2 on stream canceling (High) (CVE-2021-22930)
Node.js is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.
You can read more about it in https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22930

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

ykclient: remove pointless PKG_BUILD_DEPENDS

Description: Lack of support of HTTP/2 by default starts to hurt,
for example with https-dns-proxy package, some DoH resolvers (like mullvad)
no longer support HTTP/1 and are not usable.

This enables HTTP/2 support by default (which would bring ~68Kb libnghttp).

Signed-off-by: Stan Grishin <stangri@melmac.net>

* update binary to the latest commit (2021-07-29) to fix #16222 and #16239
* add hotplug.d/iface file and update Makefile to install it
* use Cloudflare's and Google's bootstrap DNS if bootstrap DNS is missing
* minor improvements in append_bool function
* add append_counter function for verbosity setting
* add append_bootstrap function (and supporting functions) to parse/sanitize bootstrap setting
* move firewall array from 'main' instance to the first proxy instance
* delete useless 'main' instace

Signed-off-by: Stan Grishin <stangri@melmac.net>

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Changing a volume right after activation doesn't work well due to some
caching or race-condition issue.
Perform activation as last lvchange operation as a work-around.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Also replace dependency with + one.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Switch to AUTORELEASE for simplicity. Now that kernel 5.4 is the
minimum, no need to have compatibility with 19.07.

Added new dependencies. Removed some transient ones.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

ncdu: udpate to 1.16

alsa stuff: update to 12..5.1

fish: update to 3.3.1

gptfdisk: update to 1.0.8

libyaml-cpp: update to 0.7.0

pcre2: update to 10.37

sshfs: update to 3.7.2

triggerhappy: don't build man pages

muninlite: update to new upstream release (2.1.2)

treewide: change email address in PKG_MAINTAINER

Lua-cURLv3: add package

gitlab-runner: update to 14.0.1

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Change from jan.pavlinec@nic.cz to jan.pavlinec1@gmail.com

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

openvswitch: add SSL support

Open vSwitch supports SSL to connect to an OpenFlow controller. This is
recommended for security. Expand the UCI ovs config section to allow
configuring SSL CA, certificate and private key.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

The Open vSwitch init script does not set USE_PROCD=1. Instead, it
defines most of the functions and variables that would be set when
USE_PROCD is set to 1, but with some minor changes.

The basescript variable however, which is used when calling
procd_open_service and procd_kill, is not set. As a result, basename of
the contents of the initscript variable is used as the service name. As
the service is automatically started via its symlink in /etc/rc.d,
S15openvswitch, the service name is S15openvswitch.

Set the basescript variable so that the service name is openvswitch.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

openvswitch: support setting OpenFlow datapath ID

By default, Open vSwitch will generate the OpenFlow datapath ID of a
bridge based on the MAC address of one of its ports. Due to this, it's
possible that the datapath ID changes when new ports are added. When the
datapath ID changes, Open vSwitch disconnects from the controller, as
there is no way to notify the controller that the datapath ID has
changed.

Add an option to set the datapath ID so that the above situation can be
avoided. The option takes either exactly 16 hex characters, or when
prefixed with 0x, between 1 and 16 hex characters.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

minicom: update to 2.8

Fix bring-up of ro volumes on creation and on boot.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>