nss: update to 3.61

lang/php7: Don't run phpize7 with QUILT

libs/nss: Don't run nsinstall with QUILT

banip: release 0.7.0

* major rewrite
* add support for multiple chains
* add mac whitelisting
* add support for multiple ssh daemons in parallel
* add an ipset report engine
* add mail notifications
* add suspend/resume functions
* add a cron wrapper to set an ipset related auto-timer for
  automatic blocklist updates
* add a list wrapper to add/remove blocklist sources
* add 19.x and Turris OS 5.x compatibility code
* sources stored in an external compressed json file
  (/etc/banip/banip.sources.gz)
* change Country/ASN download sources (faster/more reliable)
* fix DHCPv6/icmpv6 issues

Signed-off-by: Dirk Brenken <dev@brenken.org>

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Add "ipstatistics"-plugin. This plugin parses "/proc/net/netstat" and
"/proc/net/snmp6" to get the overall ipv4 and ipv6 usage.

Signed-off-by: Nick Hainke <vincent@systemli.org>

svox: Don't move files with QUILT

xray-core: fix service start / reload

Allows targets such as prepare, refresh, or update to be run without
building dependencies for easier patch maintenance.

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>

Allows targets such as prepare, refresh, or update to be run without
building dependencies for easier patch maintenance.

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>

Allows targets such as prepare, refresh, or update to be run without
building dependencies for easier patch maintenance.

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>

Fix starting problem:
Starting function should be named 'start_service' instead of 'start_instance'.

Fix reloading problem:
Register reload tigger for uci config itself.
And, xray does not support reload currently, so use legacy restart as reload.

Fixes: 6c9b96352f ("xray-core: add init script")

Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>

ksmbd(-tools): update to 3.3.4

macremapper: linux 5.6+ compatibility

prometheus-node-exporter-lua: update netstat

mini_snmpd: Fix minor nit in the init script

wget: update to 1.21.1

dockerd: change dockerd start level to 99 to avoid unknown conflicts

xray-core: add example configs and init script

Major changes are:

    add "vfs objects = acl_xattr" parameter in configuration.
    fix wrong group domain name in lsarpc response.
    set to SID_TYPE_UNKNOWN if there is no domain sid in server.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Major changes are:

    Make xattr format of ksmbd compatible with samba's one.
    Use netdevice_notifier to configure TCP listeners.
    Fix a build break with linux-5.11 kernel.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Add init script so the users could run it with their configs quickly.

Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>

Thry're from v2fly/v2ray-core wikis, used as examples.

Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>

Use $(AUTORELEASE) to bump PKG_RELEASE automatically.

Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>

iputils: bump to 20210202 and fix version reporting

lighttpd: update to lighttpd 1.4.59 release hash

miredo: add debian reproducibility patch

The iputils build system embeds git tags into the generated binaries
for use by commands like ping -V.  Since openwrt packaging is done in
a different repository from the upstream repo, the tags it finds
aren't particularly meaningful, and we get confusing results like
those described at https://github.com/openwrt/packages/issues/13920

This change removes the git tag inspection in favor of the static
version string that's already known to the upstream build system.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

Move the tftpd binary from /usr/bin to /usr/sbin per upstream.

Signed-off-by: Noah Meyerhans <frodo@morgul.net>

update to lighttpd 1.4.59 release hash
add new base module mod_ajp13

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>

Refreshed other patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Dockerd start too early will conflict with other net config.
After boot must manually restart dockerd, Or some container will not run.

Signed-off-by: Yuhang Qin <qinyuhangxiaoxiang@gmail.com>

Update sysrepo packages

stress-ng: bump to version 0.12.02

numpy: bump to version 1.20.0

simple-adblock: remove dependency on jsonfilter & old code

Signed-off-by: Stan Grishin <stangri@melmac.net>

xray-core: add new package

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

Signed-off-by: Jakov Smolic <jakov.smolic@sartura.hr>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>

Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>

getdns: Fix TLS V1.3 Ciphersuites option in Stubby

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

antfs: patch for linux >= 5.8.0