syslog-ng: update to version 3.27.1

snmp-dest was moved to afsnmp

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

strongswan: bump to 5.8.4

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

vallumd: switch to codeload.github.com

Review of my PR to add readsb requested to use codeload. Update vallumd
to use codeload as well, so that things are consistent.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Merge pull request #12062 from stintel/drop_maintainership

Drop maintainership

Merge pull request #12087 from simetnicbr/for-upstream/fping-suid

fping: add new config option to install SUID root

collectd: sqm_collectd improve interface name filter

Increase the range of characters that get substituted by '_' so the
shell doesn't complain about illegal variable names.

Primarily done to catch '.' and '-' but who knows what funnies will
appear in i/f names.

It's a shame that busybox ash doesn't understand :alnum:

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>

Merge pull request #12097 from neheb/dav

davfs2: fix compilation with newer neon

Merge pull request #12038 from pprindeville/syslog-ng-includes-user-settings-last

syslog-ng: including user settings after system settings

Merge pull request #12088 from lucize/sysrepofix

sysrepo: update to 1.4.2

davfs2: fix compilation with newer neon

Signed-off-by: Rosen Penev <rosenp@gmail.com>

sysrepo: update to 1.4.2

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

fping: install fping SUID root

fping requires either root or CAP_NET_PING to work, otherwise it is
useless.  Use INSTALL_SUID so that fping will be setuid root, and thus
it will be usable by non-root users.

fping knows to drop root priviledges after it parses the command line
and creates the ping socket.  You actually get a lot less code running
as root when you make it setuid root and run it from an unprivileged
user.

This is the same way net/iputils already handles "ping", which has the
same requirements.

Signed-off-by: Henrique de Moraes Holschuh <henrique@nic.br>

Merge pull request #12093 from pprindeville/openssh-no-ecdsa-hostkey

openssh-server: deprecate the ecdsa HostKey

shadowsocks-libev: ignore error from flushing route table

Linux kernel and iproute2 together now implement strict checking of the
existence of route tables.

Previously kernel does not support filtering by table id, now it does
and will error with nlmsgerr "ipv4: FIB table does not exist".

Previously iproute2 dump all routes and filter by table id in userspace,
now this has changed with iproute2 commit c7e6371bc4af ("ip route: Add
protocol, table id and device to dump request")

Error scene

root@OpenWrt:/# ip route flush table 100
Error: ipv4: FIB table does not exist.
Flush terminated
root@OpenWrt:/# echo $?
2

Fixes: https://github.com/openwrt/packages/issues/12095
Ref: https://lists.openwall.net/netdev/2019/05/02/105
Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>

Merge pull request #12092 from wongsyrone/patch-1

wsdd2: fix infinite loop when BI_PARM is never set

wsdd2: bump PKG_RELEASE; refine init script

Signed-off-by: Syrone Wong <wong.syrone@gmail.com>

libevhtp: Fix dependencies not selected when building static library

When libevhtp is added to a package's PKG_BUILD_DEPENDS (i.e. for
seafile-server), libevhtp's target package dependencies are not
automatically selected, in particular libevent2-openssl and
libevent2-pthreads.

Moreover, if libevent-openssl and libevent2-pthreads are not selected,
OpenSSL and thread support are disabled when compiling libevent2, which
in turn causes a compile error when building libevhtp.

This adds a config option, LIBEVHTP_BUILD_DEPENDS, that will select
libevent2-openssl and libevent2-pthreads (via LIBEVHTP_BUILD_SELECT)
when it is selected.

Other build dependencies are moved to PKG_BUILD_DEPENDS.

This also updates seafile-server to remove the (indirect) dependencies
added in 13d843fec1cd3281cc469fc74de302c1f793b723 and instead select
LIBEVHTP_BUILD_DEPENDS.

This also updates the maintainer's email address and adds myself as
another maintainer.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

openssh-server: deprecate the ecdsa HostKey

The init.d script for sshd never generates an ecdsa HostKey as seen
here:

for type in rsa ed25519
do
# check for keys
key=/etc/ssh/ssh_host_${type}_key
[ ! -f $key ] && {
# generate missing keys
[ -x /usr/bin/ssh-keygen ] && {
/usr/bin/ssh-keygen -N '' -t $type -f $key 2>&- >&-
}
}
done

so we'll never succeed at loading one.  Get rid of the resultant
error message in logging:

May  5 17:13:59 OpenWrt sshd[20070]: error: Unable to load host key: /etc/ssh/ssh_host_ecdsa_key

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

wsdd2: fix infinite loop when BI_PARM is never set

If BI_PARM is never set, it's "" and causes
infinite loop (before my PR sent upstream) or
error out (after my PR sent upstream).
Append -b option only if it's valid.

Signed-off-by: Syrone Wong <wong.syrone@gmail.com>

Merge pull request #11980 from neheb/pulseee

pulseaudio: add lto and gc-sections to reduce size

pulseaudio: do not build NEON with unsupported platforms

Unfortunately, meson's check is totally broken.

Fortunately, it's fairly easy to workaround.

Fixes compilation with all ARM platforms that don't support NEON.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #12052 from neheb/sati

minisatip: update to 1.0.3

Merge pull request #12041 from neheb/shair

shairport-sync: update to 3.3.6

docker-ce: fix docker info warning

If we execute `docker info` we get the following warning:

WARNING: bridge-nf-call-iptables is disabled
WARNING: bridge-nf-call-ip6tables is disabled

To fix this enable this in sysctl if docker is installed.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

collectd: bump PKG_RELEASE

Bump PKG_RELEASE on behalf of 38235de9c

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>

collectd: SQM collect data from some qdiscs

Add a script that can collect data from mq (multi queue) and cake
qdiscs.

Script is reliant on collectd's 'exec' module.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>

rrdtool1: modify logarithmic scale labelling

The y-axis graph labels in logarithmic mode display in 'scientific'
notation eg: '1e+00' for 0, '1e+01' for 10, '1e+02' for 100 and so on.
This IMO is a pain in the backside for non scientific humans to read.

Modified output to display numbers up to 99,999 in conventional decimal
format and to revert to scientific notation for larger, thus the same
display space is taken.

Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>

Merge pull request #12046 from BKPepe/youtubedl

youtube-dl: update to version 2020.5.3

Merge pull request #12079 from stangri/master-vpn-policy-routing

vpn-policy-routing: support phys-dev policies

Merge pull request #12081 from ematsu/feature_create_tmpdir

freeradius3: Fix to init script.

freeradius3: Fix to init script.

To use eap tls, 'tmpdir' must be created before server starts.
This 'tmpdir' is used to store and verify client certificate,
and therefore radiusd do 'chmod go-rwx'.

If 'tmpdir' does NOT exists, server failed to start and default
'tmpdir' is '/tmp/radiusd'. So init script MUST create default
'tmpdir' like other directories.

Signed-off-by: Eiji MATSUMOTO <toudaiman@gmail.com>

pulseaudio: add lto and gc-sections to reduce size

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #12059 from neheb/gerb2

gerbera: update to 1.5.0

gerbera: update to 1.5.0

This is a fairly massive update that adds new dependencies.

Switched the CMAKE_OPTIONS to use ON/OFF as is done elsewhere.

Added a patch fixing compilation with libiconv-stub/full.

Add a small debug option to write to syslog debug information.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

vpn-policy-routing: support phys-dev policies

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #12078 from micmac1/masneon

neon: add back sed scripts for neon-config

libmicrohttpd: update to 0.9.70

Fix license information.

Cleanup Makefile for consistency between packages.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

neon: add back sed scripts for neon-config

Commit 3a67097 removed the sed scripts that ran on neon-config. Now
there is build failure for Asterisk because a host include directory is
added to the build:

mips_24kc_musl/usr/lib/libintl-stub/include    -I/store/buildbot/slave/shared-workdir/build/sdk/staging_dir/target-mips_24kc_musl/usr/include/libxml2  -Wall -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations       -fPIC -DAST_MODULE=\"res_calendar_exchange\" -DAST_MODULE_SELF_SYM=__internal_res_calendar_exchange_self  -I/usr/include/neon -I/store/buildbot/slave/shared-workdir/build/sdk/staging_dir/target-mips_24kc_musl/usr/include -pthread -I/store/buildbot/slave/shared-workdir/build/sdk/staging_dir/target-mips_24kc_musl/usr/include
res_calendar_exchange.c:34:10: fatal error: ne_session.h: No such file or directory
 #include <ne_session.h>
          ^~~~~~~~~~~~~~
compilation terminated.

This commit adds back the sed scripts.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

Merge pull request #12036 from micmac1/json-glib

json-glib: new package

Merge pull request #12063 from mstorchak/tmux

tmux: update to 3.1b

Merge pull request #12071 from neheb/yara

yara: update to 4.0.0

Merge pull request #12076 from TDT-AG/pr/20200504-collectd

collectd: add syslog json plugin

collectd: add syslog json plugin

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

tmux: update to 3.1b

Signed-off-by: Maxim Storchak <m.storchak@gmail.com>

acme: Bump acme.sh to v2.8.6

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

acme: Remove luci-app-acme

The Luci app for ACME has been moved to the luci package feed.

Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>

keepalived: update PKG_RELEASE number

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

keepalived: add script security param to fix warning

Openwrt is a single user system. So keepalived is runnig as root.
If we add the config options `script_user root` and
`enabled_script_security' the following warnings are gone.

> local1.info Keepalived_vrrp[5382]: SECURITY VIOLATION - scripts are
being executed but script_security not enabled.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

keepalived: move linkbeat_use_polling section into main section

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

keepalived: move alt_config_file check into process_config

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

keepalived: add upgrade script for globals section

Signed-off-by: Florian Eckert <fe@dev.tdt.de>

Merge pull request #12039 from lucize/frrref

frr: makefile cleanup and misc fixes

yara: update to 4.0.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #12044 from lucize/yangup

libyang: update to 1.0.130

Merge pull request #12069 from stangri/master-vpn-policy-routing

vpn-policy-routing: bugfix: remove non-ASCII from log; update README

Merge pull request #12068 from ClaymorePT/boost_1.73.0

boost: Package Version Update (1.73.0)

Merge pull request #12051 from neheb/tirp

libtirpc: update to 1.2.6

Merge pull request #12061 from cyrozap/prometheus-node-exporter-lua-time

prometheus-node-exporter-lua: Change node_time_seconds type to "gauge"

Merge pull request #12050 from neheb/neon

neon: update to 0.31.1

prometheus-node-exporter-lua: Change node_time_seconds type to "gauge"

The official node_exporter reports node_time_seconds as a gauge, but
prometheus-node-exporter-lua reports it as a counter. To be consistent
with the official implementation, and because "gauge" is more correct
than "counter" for this metric (system time can decrease, but the
Prometheus documentation states, "A counter is a cumulative metric that
represents a single monotonically increasing counter whose value can
only increase or be reset to zero on restart."), change the type for
node_time_seconds to "gauge".

Signed-off-by: Forest Crossman <cyrozap@gmail.com>

Merge pull request #12056 from stangri/master-vpnbypass

vpnbypass: bugfix: remove non-ASCII from system log; update README

vpn-policy-routing: bugfix: remove non-ASCII from log; update README

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #12064 from wvdakker/master

Shorewall: Bump to 5.2.4.4

boost: Package Version Update (1.73.0)

This commit updates Boost to version 1.73.0
In this release, there are two new libraries
 - Nowide [2] - Standard library functions with UTF-8 API on Windows,
   from Artyom Beilis.
 - Static String [3] - A dynamically resizable string of characters
   with compile-time fixed capacity and contiguous embedded storage,
   from Vinnie Falco and Krystian Stasiowski.

More info about Boost 1.73.0 can be found at the usual place [1].

[1]: https://www.boost.org/users/history/version_1_73_0.html
[2]: https://www.boost.org/libs/nowide/
[3]: https://www.boost.org/libs/static_string/

Signed-off-by: Carlos Miguel Ferreira <carlosmf.pt@gmail.com>

Merge pull request #12066 from jqqqqqqqqqq/master

fish: update to 3.1.2

fish: update to 3.1.2

Signed-off-by: Curtis Jiang <jqqqqqqqqqq@gmail.com>

Shorewall6: Bump to 5.2.4.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall: Bump to 5.2.4.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall6-lite: Bump to 5.2.4.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall-lite: Bump to 5.2.4.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

Shorewall-core: Bump to 5.2.4.4

Signed-off-by: W. van den Akker <wvdakker@wilsoft.nl>

domoticz: drop maintainership

As I no longer use the software, I will no longer maintain it.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

openzwave: drop maintainership

As I no longer use the software, I will no longer maintain it.

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

pugixml: add

Needed for gerbera 1.5.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

spdlog: add

Needed for Gerbera 1.5.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

upmpdcli: update to 1.4.7

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libupnpp: update to 0.18.0

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libnpupnp: add

This is needed for newer versions of libupnpp. This may or may not also
be needed for newer versions of Gerbera.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libupnp: update to 1.12.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

frr: makefile cleanup and misc fixes

fix mips runtime by backporting some yang changes from master
added commited fixes to 7.3
also add option for snmp support

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

syslog-ng: including user settings after system settings

Initially we included user-specific settings last, so that they
could turn off or replace system settings... otherwise we only get
to change what's NOT explicitly set by the system.  This is overly
constraining.

Restore the original functionality of allowing the user to
override settings defined by the distribution's configuration.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

vpnbypass: bugfix: remove non-ASCII from system log; update README

Signed-off-by: Stan Grishin <stangri@melmac.net>

Merge pull request #12053 from neheb/lo

liblo: update to 0.31

Merge pull request #12047 from jekkos/do-ddns-v2

ddns-scripts: Add digitalocean as DDNS provider

ddns-scripts: Add digitalocean as DDNS provider

Signed-off-by: Jeroen Peelaerts <jeroen.peelaerts@gmail.com>

liblo: update to 0.31

Refreshed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

minisatip: update to 1.0.3

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

libtirpc: update to 1.2.6

Add HOST_BUILD_PARALLEL for faster compilation.

Remove upstreamed patch.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

neon: update to 0.31.1

Upstream changed.

Add license information.

Add PKG_BUILD_PARALLEL for faster compilation.

Remove several outdated options.

Refreshed OpenSSL patch.

Other small cleanups.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Merge pull request #12042 from neheb/yaml

libyaml: update to 0.2.4

Merge pull request #12040 from neheb/mess

meson: update to 0.54.1

youtube-dl: update to version 2020.5.3

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

Merge pull request #12045 from peter-stadler/pytz

python-pytz: update version to 2020.1

libyang: update to 1.0.130

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

python-pytz: update version to 2020.1

Signed-off-by: Peter Stadler <peter.stadler@student.uibk.ac.at>

json-glib: new package

From upstream description:

JSON-GLib is a library providing serialization and deserialization
support for the JavaScript Object Notation (JSON) format described by
RFC 4627.

Signed-off-by: Sebastian Kemper <sebastian_ml@gmx.net>

libyaml: update to 0.2.4

Signed-off-by: Rosen Penev <rosenp@gmail.com>

shairport-sync: update to 3.3.6

Use PKG_INSTALL for consistency between packages.

Ran the init script through shellcheck.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

meson: update to 0.54.1

Signed-off-by: Rosen Penev <rosenp@gmail.com>

vala: update to 0.48.5

Signed-off-by: Rosen Penev <rosenp@gmail.com>