golang: Update to 1.17.5, add patch

Includes fixes for:
* CVE-2021-44716: unbounded growth of HTTP/2 header canonicalization
  cache
* CVE-2021-44717: syscall.ForkExec error can close file descriptor 0

Added patches:
* 001-cmd-link-use-gold-on-ARM-ARM64-only-if-gold-is-available.patch:
  https://github.com/golang/go/pull/49748 backported for Go 1.17,
  this removes the requirement for the gold linker when building Go
  programs that use Go plugins on arm/arm64

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit eac2e91a285e9df119ce1aac0f4fe340cc54a6e4)

adguardhome: update to 0.107.0

Full changelog available at: https://github.com/AdguardTeam/AdGuardHome/releases/tag/v0.107.0

packr has been removed from build dependencies, per
https://github.com/AdguardTeam/AdGuardHome/commit/c6888326b034daea9e69de5ee0a8f37aede45892#diff-2873f79a86c0d8b3335cd7731b0ecf7dd4301eb19a82ef7a1cba7589b5252261L2

Also added the ability to configure working directory location and moved
the directory to /var. On most setups this should not change anything,
as /var is symlinked to /tmp. The move mostly benefits setups where /var
is configured to be persistent.

The working directory is used by AdGuard to store persistent data like
query logs, filter lists, etc.

Data stored in this directory can get really huge, as such allowing
this directory to be moved elsewhere (ie. an USB drive) is very
beneficial.

Fixes: #17437
Co-authored-by: Dobroslaw Kijowski <dobo90@gmail.com>
Co-authored-by: Jeffery To <jeffery.to@gmail.com>
Signed-off-by: Hiếu Lê <leorize+oss@disroot.org>
(cherry picked from commit f44603a131ef54bbfb2836ef942d0276da427881)
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
[Added fixes in the commit message]

Merge pull request #17439 from 1715173329/xr-2102

[openwrt-21.02] xray-core: Update to 1.5.2

Merge pull request #17438 from 1715173329/yq21

[openwrt-21.02] yq: Update to 4.16.2

xray-core: Update to 1.5.2

Removed upstreamed patches.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 418e59356b2517a0c28aae283dacf20aaafffc77)

xray-core: Update to 1.5.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 6d56c80ff917ed3ef1a55bba0c01f739acb04be6)

yq: Update to 4.16.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit c47425fe2965c4424331d2060ae1f73c6a8736e9)

adblock: 4.1.3-4

* fix backup dir creation in raw mode

Signed-off-by: Dirk Brenken <dev@brenken.org>
(cherry picked from commit 25dd0c63affd278a6be88629cc20bd3c66586ca8)

python-lxml: update to version 4.6.5

Fixes: CVE-2021-43818
  https://nvd.nist.gov/vuln/detail/CVE-2021-43818

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Merge pull request #17405 from mhei/21.02-php8-update

[21.02] php8: update to 8.0.14

php8: update to 8.0.14

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Merge pull request #17400 from jefferyto/remove-commodo-openwrt-21.02

[openwrt-21.02] python-packages/seafile: Remove commodo as maintainer

seafile: remove myself as maintainer of these packages

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 1e27dd7f8ff23515da5348a7029660aa33a48907)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

python-packages: remove myself as maintainer

There's been a bit of overlapping opinions on some of these packages.
The best thing to do here is to reduce ownership and relinquish my
control.

This patch does that.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 48ce6e48b617ee72e40220e6ab6b7ceaa079a192)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>

crowdsec-firewall-bouncer: update to 0.0.18

Update to upstream release 0.0.18

(cherry picked from commit 515f8489cc77bfbd0e9925599713a3f4843e6e3a)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>

Merge pull request #17356 from mhei/21.02-php7-update

[21.02] php7: update to 7.4.27

php7: update to 7.4.27

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

nano: update to version 6.0

Update nano editor to version 6.0

Version 6.0 enable toggling the display of the line numbers with
the shortcut key M-N (Alt-n). Also the cmdline option "-l" works.
Remove earlier patch regarding that.

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 0571f5400dfc1120b161df988f7bd8c836f33e8a)

libqmi: fix missing CONFIG_ prefix

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
(cherry picked from commit 43a0f68940f1a2709273fa630f12be5467c426c7)

ldns: update to 1.8.1

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>
(cherry picked from commit 7594e8581a200f6fd20fcba29672af54c4591111)

unbound: update to 1.14.0

Signed-off-by: Eric Luehrsen <ericluehrsen@gmail.com>

htop: update to 3.1.2-1

Build-tested: x86/64
Run-tested: bcm2711/RPi4B

Signed-off-by: John Audia <graysky@archlinux.us>
(cherry picked from commit 3b041e3b458889d7dbef72e1d49b102f193bf5c7)

htop: explicitly disable some build options

Since 3.1.0 delayacct option is enabled if the needed dependencies
are detected, it was previously disabled.
Sensors also check for dependency so we need to explicitly
disable it when not enabled.

Fixes 5f916720551ad5ea5ac86cf5e122fc2c0c34cc15

Signed-off-by: Etienne Champetier <champetier.etienne@gmail.com>
(cherry picked from commit 253e3f558c9d5d6ee43a7e870ef60f8a1c0c80c7)

htop: update to 3.1.0

Update htop to versio 3.1.0

* Adjust Makefile configuration options to update
* Avoid libcap dependency
* Backport post-release fix for old automake

Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
(cherry picked from commit 5f916720551ad5ea5ac86cf5e122fc2c0c34cc15)

Merge pull request #17299 from nxhack/2102_node_14182

[21.02] node: bump to 14.18.2

node: bump to 14.18.2

Update to v14.18.2

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

Merge pull request #17270 from BKPepe/update-python3

python3: update to version 3.9.9

hwdata: update to version 0.354

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 20a759a6ddf9f24ee1ca5128a10cfd95eabad771)

python-babel: update to version 2.9.1

Changelog:
https://github.com/python-babel/babel/releases/tag/v2.9.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit e2932db1ce45e1882b6935694a46c3a3b7e8536f)

python-babel: update to version 2.9.0

Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit a31dc44d2dd8cae498135b2994a7a117bc4c6e2d)

knot: update to 3.1.4

Signed-off-by: Jan Hák <jan.hak@nic.cz>
(cherry picked from commit 60a80b31fbf3585d52b64ab0b9bf5a4aa844a032)

gnutls: don't run aclocal --install

Remove the --install parameter when running aclocal.  The --install
argument is used to copy third-party files to the first -I directory.
gnutls has -I m4 first, which would copy files to its local build
directory.  However, openwrt prepends the staging dir m4 directory,
causing aclocal --install to copy an old definition of
ax_code_coverage.m4 into the staging dir.

If strace is built after gnutls, compilation will fail:

    Makefile:9303: *** missing separator.  Stop.

The version of ax_code_coverage.m4 that gets installed does not define
@CODE_COVERAGE_RULES@.

Removing the --install parameter in gnutls solves the issue.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
(cherry picked from commit 206eaae16520f5e89af5219cf574fa649e64d7e1)

bind: bump to 9.17.20

Signed-off-by: Noah Meyerhans <frodo@morgul.net>
(cherry picked from commit 249079187dd6a3a21ec62b275782d13f546b5e26)

knot-resolver: update to version 5.4.3

Release notes:
https://www.knot-resolver.cz/2021-12-01-knot-resolver-5.4.3.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 10ab2306702c5292f98a43cf5a1dfc0b7ab99c27)

yq: Update to 4.16.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 0f46facfdba667473ffb57fbda31a145f644af48)

python3: update to version 3.9.9

- Updated setuptools and pip
- Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>

msmtp: update to version 1.8.1.9

Changelog:
https://marlam.de/msmtp/news/msmtp-1-8-19/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 173faad3340772e1b2194c618fb8c1f13f81b9a9)

Merge pull request #17259 from rs/nextdns-1.37.7-openwrt-21.02

[21.02] nextdns: Update to version 1.37.7

mariadb: Create compatibility symlinks

For every mysql* binary create corresponding mariadb binary and vice
versa.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 2295c351ed826d26778b42888d6f54744e0133f5)

mariadb: Install all supporting sql files

Do not pick just few random SQL files to install, install all of them.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 4653d83048b24bc49c26c23b34dc74e8627544fe)

mariadb: Tweak default configuration

Remove from default configuration options that are compiled in like
default paths and character set. On the other hand add few examples of
tweak options that might be handy.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit a2c1a5728285ad974aaf1160438fc61f6885603d)

mariadb: Init script improvements

Update init script so other user/group can be used. Also make sure that
init script can actually create an empty database instead of forcing the
user to do it by hand. Other new feature is taking care of migration
of the database when upgrading the database.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit 1be35284bb524c43a4e9448c5ead215fc3052efb)

mariadb-common: Drop package and adjust configuration

The raison d'être of package mariadb-common was to provide common my.cnf
config file that was being used to include subdirectories and then to
push utf-8 as default everywhere. Let's make this file part of the
server package as there we actually set other options as well and drop
it from all clients. Instead let's set utf-8 as default in server,
client and client libraries. While at it also set socket to the more
common path and drop mysqld_safe script from the list of configuration
files and do other minor tweaks.

Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
(cherry picked from commit d8ecded02d29e04fe5b0399de2474605fb6d9897)

nextdns: Update to version 1.37.7

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

Merge pull request #17254 from rs/nextdns-1.37.6-openwrt-21.02

[21.02] nextdns: Update to version 1.37.6

nextdns: Update to version 1.37.6

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

syslog-ng: update to version 3.35.1

Also bump the version in syslog-ng config file.
Removes this warning:

Nov 16 14:19:41 turris syslog-ng[15159]: WARNING: Configuration file format is too old, syslog-ng is running in compatibility mode. Please update it to use the syslog-ng 3.35 format at your time of convenience. To upgrade the configuration, please review the warnings about incompatible changes printed by syslog-ng, and once completed change the @version header at the top of the configuration file; config-version='3.33'

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 2d2fd36e28a40a63b1bd16c77cce57d446d656cc)

yggdrasil: bump to 0.4.2

Signed-off-by: George Iv <zhoreeq@users.noreply.github.com>

yggdrasil: uci ifname is now known as device

Signed-off-by: William Fleurant <meshnet@protonmail.com>

Merge pull request #17241 from rs/nextdns-1.37.5-openwrt-21.02

[21.02] nextdns: Update to version 1.37.5

nextdns: Update to version 1.37.5

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

ddns-scripts: use HTTPS for spdyn

Signed-off-by: Peter Gransdorfer <peter.gransdorfer@cattronix.com>
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
- PKG_RELEASE number updated
(cherry picked from commit c0296bf25da7a4832059d0a708431aef4c5f3238)

Merge pull request #17233 from stangri/openwrt-21.02

[21.02] curl: update to 7.80.0

icu: bump to 70.1

ICU 70 released. It updates to Unicode 14, including new characters, scripts, emoji, and corresponding API constants. ICU 70 adds support for emoji properties of strings. It also updates to CLDR 40 locale data with many additions and corrections. ICU 70 also includes many other bug fixes and enhancements, especially for measurement unit formatting, and it can now be built and used with C++20 compilers.

This change will require minor modifications in php7 and php8.

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>

curl: update to 7.80.0

* bump version to 7.80.0
* update maintainer email address

Signed-off-by: Stan Grishin <stangri@melmac.net>
(cherry picked from commit 80ef61729b18c28b76a1ee64d7af7251031a2496)

Merge pull request #17162 from stangri/openwrt-21.02

[21.02] nebula: update to 1.5.0

yq: Update to 4.15.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 63f95db55e38d53947bfe871292f81aa15ac5936)

crowdsec: update to 1.2.1
crowdsec-firewall-boucer: update to 0.0.16

Signed-off-by: Kerma Gérald <gandalf@gk2.net>
(cherry picked from commit 2861370567bde7d426a5dda2b41cda321d050f5f)
Signed-off-by: Kerma Gérald <gandalf@gk2.net>

Merge pull request #17155 from jefferyto/golang-1.17.3-openwrt-21.02

[openwrt-21.02] golang: Update to 1.17.3

docker: Update to 20.10.11

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

dockerd: Update to 20.10.11

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

containerd: Update to 1.4.12

Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>

conntrack-tools: import patch to fix cache

As written in the commit message:

Depending on your conntrackd configuration, events might get lost,
leaving stuck entries in the cache forever. Skip checking the conntrack
ID to allow for lazy cleanup by when a new entry that is represented by
the same tuple is added.

Signed-off-by: Nick Hainke <vincent@systemli.org>
(cherry picked from commit da619f19f436bc95acd07c0d7aca772328cc5895)

conntrack-tools: add a patch to fix endianness issue

Signed-off-by: Tao Gong <gongtao0607@gmail.com>
(cherry picked from commit f62c15f92d4c8c6eabedf512efd5b2ebbca4b44d)

Merge pull request #17170 from mhei/21.02-php7-update

[21.02] php7: update to 7.4.26

Merge pull request #17169 from mhei/21.02-php8-update

[21.02] php8: update to 8.0.13

php8: update to 8.0.13

This fixes:
    - CVE-2021-21707

Also drop upstream patch which is included in the release now.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit 2e9c1a00ea85a927accad4e0814f67240881d0d4)

php7: update to 7.4.26

This fixes:
    - CVE-2021-21707

Also drop upstream patch which is included in the release now.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>
(cherry picked from commit c6f27671a303dad64cb7429377ffddb67760ba6a)

rosy-file-server: drop this package

Reasons to drop this package:
a) this package depends on luci-app-rosy-file-server
Unfortunately, it was marked as broken as it is unmaintained.

See: https://github.com/openwrt/luci/commit/34b682afac310859f0d4696110d8a1af60f16c04

b) maintainer is inactive
c) rosinson website does not seem to be working

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f1893a426a815a667786385e083e8385f7622524)

nebula: update to 1.5.0

* update binaries to version 1.5.0 (thanks @jefferyto)
* update maintainer's email address

Signed-off-by: Stan Grishin <stangri@melmac.ca>
(cherry picked from commit 1421440174b80b7f9e9562217aa3951c6688839e)

Merge pull request #17159 from rs/nextdns-1.37.4-openwrt-21.02

[21.02] nextdns: Update to version 1.37.4

nextdns: Update to version 1.37.4

Signed-off-by: Olivier Poitrey <rs@nextdns.io>

golang: Update to 1.17.3

Contains fixes for:

* CVE-2021-41771: ImportedSymbols in debug/macho (for Open or OpenFat)
  accesses a memory location after the end of a buffer

* CVE-2021-41772: archive/zip Reader.Open panic via a crafted ZIP
  archive containing an invalid name or an empty filename field

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 901f80aae7d14b48e1ff94b59ef03eeeae7b0900)

auc: remove superfluous variables

Remove parsing of data which is not used within `auc`. Later iterations
may use these but they can be gradually added whenever needed.

Also remove HTTP code handling of error codes no longer used by the
backend. Early iterations of the server where infinitely complex to
figure out created images and announce them to clients but ever since
everything is stored in JSON, things got better (aka simpler).

If a package is missing on the upstream server, color it in red.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 6527d65b9bff5f01a67c3d8b1bd0da5f026960aa)

auc: use /json/v1/

Currently `auc` uses the outdated /json/ path, this commit uses
/json/v1/ to be more future proof.

Signed-off-by: Paul Spooren <mail@aparcar.org>
(cherry picked from commit 69b5c289298762ff50783ec81dd67f888a53452b)

auc: fix some minor issues

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 51f9df5b92dd79e739db00f627f0fef584d7e9e2)

rclone: Update to 1.57.0

- Disabled unused plugins and re-enabled CGO.
- Fixed test script

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit f712dc311e7c9b76b324e826f85eb2a5dfe33e62)

yq: Update to 4.14.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
(cherry picked from commit 8eab3a2bf2b31dfd3090443e70619ba002f86fdd)

exim: update to version 4.95

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 40c71110f064ceacb7c44892f55f7f6cb18995ae)

exim: some clean ups

 * use username/group 'exim' instead of mail
 * register configuration file
 * make sure /usr/lib/exim/lookups exists

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 66a62e2fcfeecd0baed5f597c9f7e5970fd1fd5b)

exim: add default config and init script, enable lmtp

Ship default configuration /etc/exim/exim.conf as well as
a simple procd init script. Enable building with LMTP for better
integration with dovecot.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 31d12ead78e29837b6eb29d08684f36e8af9ce46)

exim: update to version 4.94.2

Several exploitable vulnerabilities in Exim were reported to us and are
fixed.
Local vulnerabilities
- CVE-2020-28007: Link attack in Exim's log directory
- CVE-2020-28008: Assorted attacks in Exim's spool directory
- CVE-2020-28014: Arbitrary PID file creation
- CVE-2020-28011: Heap buffer overflow in queue_run()
- CVE-2020-28010: Heap out-of-bounds write in main()
- CVE-2020-28013: Heap buffer overflow in parse_fix_phrase()
- CVE-2020-28016: Heap out-of-bounds write in parse_fix_phrase()
- CVE-2020-28015: New-line injection into spool header file (local)
- CVE-2020-28012: Missing close-on-exec flag for privileged pipe
- CVE-2020-28009: Integer overflow in get_stdinput()
Remote vulnerabilities
- CVE-2020-28017: Integer overflow in receive_add_recipient()
- CVE-2020-28020: Integer overflow in receive_msg()
- CVE-2020-28023: Out-of-bounds read in smtp_setup_msg()
- CVE-2020-28021: New-line injection into spool header file (remote)
- CVE-2020-28022: Heap out-of-bounds read and write in extract_option()
- CVE-2020-28026: Line truncation and injection in spool_read_header()
- CVE-2020-28019: Failure to reset function pointer after BDAT error
- CVE-2020-28024: Heap buffer underflow in smtp_ungetc()
- CVE-2020-28018: Use-after-free in tls-openssl.c
- CVE-2020-28025: Heap out-of-bounds read in pdkim_finish_bodyhash()

The update to 4.94.2 also integrates a fix for a printf format issue
previously addressed by a local patch which is removed.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit c241cb12bb292e894e45f063f1a8ddb8a627371d)

exim: fix compilation without deprecated OpenSSL APIs

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit de9c527e9a2e5a3437b884c6f583e9dcbe15f3f8)

gpgme: update to version 1.16.0

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e0e5dea89e1dbdc5270861c129144f21f1670eef)

podman: update to 3.4.1

A lot of changes since 3.3.1.

Full (long) lists of release notes between
versions are available at
https://github.com/containers/podman/releases

containers.conf updated

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 3e5761d6cd3142d7d8649dbd4f14f78d43161f24)

podman: fix broken conffiles

Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
(cherry picked from commit e6e770b268bc4b7448a36c0947cdada8cd5b0e17)

podman: update to 3.3.1

Earlier versions of podman did not make use of TMPDIR when running "podman
run ...". Podman's default, /var/tmp, presents a problem to rootless
use since OpenWrt's /var/tmp does not permit writes by non-root users.
Podman 3.3.1 makes full use of TMPDIR.

This is part of an attempt to get rootless podman to work on OpenWrt.
See https://github.com/openwrt/packages/issues/15096.

See also the upstream issue at
https://github.com/containers/podman/issues/10698.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit 416eced1748859690c9935f483e22d7f389f6451)

podman: change permissions on /usr/share/containers/seccomp.json

Running podman as users other than root seems to require that those
users can read /usr/share/containers/seccomp.json. This change sets the
permissions on that file to match those used on Fedora.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit a41556af4f2fb5c79b3a7902b4f3ca3b81644920)

podman: update to 3.2.0

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit e565bebf4158c5b835110d76955c3f618c63f25b)

podman: change permissions on /etc/containers

Running podman as users other than root seems to require that those
users can read the configuration files in /etc/containers. This change
sets the permissions of /etc/containers and its contents to match those
used on Fedora.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit f51ef46aa6adad6ba95ebc15c50e847044984b36)

podman: bumb version to 3.1.2

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit b6299c763ac901d4b2e5f0919789d5c3dad42c3a)

podman: update to 3.1.1

 - Add support for AppArmor
 - Gracefully stop containers and pods on shutdown

I found out that If you change location of containers to persistent storage instead of tmpfs, starting them will fail unless they have been stopped. If this is the case that reboot has occurred before pods and containers have been stopped, they cannot be started, they have to be removed and re-created. Change in initscript tries to avoid that. Even if containers are running at tmpfs, this won't hurt. Still, if something happens and system hangs/reboots/etc, script won't save you from that. It's just a attempt to make things better.
I also enabled AppArmor support for future possibilities.

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 5bb8844fe3e8d6def59f76301acf4c294d38dd30)

podman: Add selinux variant and several improvements

* add -selinux variant which depends on libselinux
* init script for background service
* updated configurations
* maintainer change as requested

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit abce42385154c824d850225f466e54f1136a657a)

podman: add 'crun' to containers.conf

Now that 'crun' has been packaged, add support for it in podman.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 954be76e6a7d3612d36b33de12c355e306458426)

podman: update to version 3.0.1

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 3c758231cb30e4b1e481d00de0a1a7eb06c6b518)

conmon: update to 2.0.30

bug fixes:
 - Remove unreachable code path
 - exit: report if the exit command was killed
 - exit: fix race zombie reaper
 - conn_sock: allow watchdog messages through the notify socket proxy
 - seccomp: add support for seccomp notify

misc:
 - Add seccomp to build dependency

included patch removes unnecessary dependency of libdl and also allows a succesfull build
disabled for arc where libseccomp does not seem to be available

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit ab08ad2ad966b32a7e6e478e3c7dd775492a36ff)

conmon: update to 2.0.29

Patch fixing segfaults on nulls was removed due to patch's content being now included in conmon's source since containers/conmon@355dbf1

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 9fdfe2e2c76aa08c1653cee97e9ce25f19286207)

conmon: fix segfault, correct a typo and update description

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
(cherry picked from commit 463227f70cc75579a93a59c09cb6b372c48c13cc)

conmon: update to version 2.0.27

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 301abeecdcaf696f10c55ed6ac5a3f220bbbcec4)

conmon: update to 2.0.26

Switched to building with meson as it works better in a parallel
context.

Small Makefile adjustments for consistency.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit c8128df4e4ad4f19d975960c495c3b3ff149783d)