Commit Graph
100 Commits
Author SHA1 Message Date
Florian Eckert 0dbbc58cbc mwan3: fix tab
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-12-22 08:38:30 +01:00
Florian Eckert 6133d5a0e9 mwan3: remove unused mwan3_unlock function call
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-12-22 08:38:30 +01:00
Florian Eckert 55051e6c7b mwan3: reinstall missing mwan3.user file
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-12-22 08:38:30 +01:00
Florian Eckert c085f2648f mwan3: fix MWAN3_STARTUP caller
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-12-22 08:38:30 +01:00
Florian Eckert 8f697b45c8 mwan3: fix whitspace
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-12-22 08:38:30 +01:00
Florian Eckert 8d41e5477f mwan3: fix logger tag in mwan3 init
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-12-22 08:38:25 +01:00
Florian EckertandGitHub 6a9a68f48e Merge pull request #14290 from snh/patch-1
uhubctl: update to 2.3.0
2020-12-21 09:25:09 +01:00
Florian EckertandGitHub 3292d24cfe Merge pull request #14190 from TDT-AG/pr/20201210-lcd4linux
lcd4linux: switch service to procd
2020-12-11 07:06:06 +01:00
Florian Eckert 111b16ca1f lcd4linux: switch service to procd
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-12-10 16:10:17 +01:00
Florian EckertandGitHub bdd26d8f26 Merge pull request #14064 from G-M0N3Y-2503/docker-blocked-interface-allow-outbound
docker-ce: Added firewall.extra_iptables_args
2020-12-04 09:12:41 +01:00
Florian Eckert 733e6508f3 ddns-scripts: add gandi.net provider
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-28 11:07:14 +01:00
Florian EckertandGitHub cdef00450a Merge pull request #13643 from TDT-AG/pr/20201012-docker-ce
docker-ce: disable docker iptables changes
2020-11-23 08:36:28 +01:00
Florian Eckert 6df16e50fb docker-ce: update PKG_RELEASE version
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-19 14:20:15 +01:00
Florian Eckert 96a11a9c02 docker-ce: do not delete generated iptables by docker-ce
Deleting rules that docker has created is error-prone, because with
every update docker we have  to check if anything has changed.
Cleaning up the firewall rules is part of the docker and should and must be
cleaned up and handeled by them when the service is terminated.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-19 14:20:12 +01:00
Florian Eckert 19fc933330 docker-ce: add device option to expand interface blocking
If docker-ce handles the firewall and fw3 is not envolved because the
rules get not proceed, then not only docker0 should be handled but also
other interfaces and therefore other docker networks.

This commit extends the handling and introduces a new uci option
`device` in the docker config firewall section. This can be used to specify
which device is allowed to access the container. Up to now only docker0
is covert.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-19 14:20:09 +01:00
Florian Eckert 7c9ed12fa1 docker-ce: remove not applicable uciupdate
As the protocol is set to none, this makes no sense here, as it cannot
be controlled and thus processed by the netifd.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-19 14:20:07 +01:00
Florian Eckert f12071add9 docker-ce: set proto for docker bridge device to none
Set proto from `static` to `none`. This makes it clear that this
interface is not handled by the netifd.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-19 14:20:04 +01:00
Florian Eckert 1af5593568 docker-ce: make docker-ce firewall handling configurable
Openwrt has a own firewall service called fw3, that supports firewall zones.
Docker can bypass the handling of the zone rules in openwrt via custom
tables. These are "always" processed before the openwrt firewall.
Which is prone to errors!

Since not everyone is aware that the firewall of openwrt will
not be passed. And this is a security problem because a mapped port is
visible on all interfaces and so also on the WAN side.
If the firewall handling in docker is switched off, then the port in
fw3 must be explicitly released and it cannot happen that the
port is accidentally exported to the outside world via the interfaces on
the WAN zone.

So all rules for the containers should and so must be made in fw3.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-19 14:20:02 +01:00
Florian Eckert dc9d9d2202 docker-ce: add arguments call to uciadd and ucidel
Up to now only the docker0 interface and bridge is created by default.
In order to create other interfaces and to integrate them into the
openwrt these functions can now be called with arguments.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-19 14:19:59 +01:00
Florian EckertandGitHub 78dd3e05a8 Merge pull request #13908 from aaronjg/mwan3-rpcd
mwan3: remove dependency on rpcd & fix iputils-ping check
2020-11-18 08:30:36 +01:00
Florian EckertandGitHub f644dadfea Merge pull request #13867 from jamesmacwhite/mwan3-user-file
mwan3: Document hotplug events and $DEVICE not being available on ifdown
2020-11-16 11:50:23 +01:00
Florian EckertandGitHub 4b2e33a7e0 Merge pull request #13881 from aaronjg/mwan3-owner-procd
mwan3: fixup ipset and install errors
2020-11-11 15:08:09 +01:00
Florian EckertandGitHub 3ca4fa7c8b Merge pull request #13796 from G-M0N3Y-2503/docker-blocked-interfaces
docker-ce: Added blocked_interfaces config option
2020-11-11 14:25:54 +01:00
Florian EckertandGitHub 16938c84f4 Merge pull request #13827 from cobaltchang/fix-cgroupfs-mount-init-script-order
cgroupfs-mount: fix symbolic link name
2020-11-09 14:28:56 +01:00
Florian EckertandGitHub 9e424325b5 Merge pull request #13853 from TDT-AG/pr/20201104-mwan3
mwan3: code cleanup and fixes
2020-11-08 13:24:40 +01:00
Florian Eckert a756fdcfdf mwan3: update version to 2.10.2
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-06 10:48:21 +01:00
Florian Eckert 1f1d21ed28 mwan3: make it clearer who initiated the start
It was somewhat opaque how the variable a is questioned. To show this
better the variable is now a string and not a boolean. So you can see
directly what should happen. With a boolean you always have to think
about what it means when 0 or 1 is used.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-06 10:41:28 +01:00
Florian Eckert 26fb7129ad mwan3: fix boundary
he line is too long. For the future it is better to split it into
several lines and make it more clearly arranged. In case of a future
change, not the whole line will be marked as a change.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-06 10:37:44 +01:00
Florian Eckert 6834f8e3a6 mwan3: use common makefile install wrappers
With this change you can see at a glance which files will be installed on
the system.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-06 10:35:55 +01:00
Florian Eckert 94a25dbd92 mwan3: fix wait conditions in mwan3track
Will only run when no events are pending.

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
[ Update description and split into own commit ]
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-06 10:35:49 +01:00
Florian Eckert 81e6a8fd3b mwan3: move mwan3_init call in mwwan3track into main
Initialize TRACK_OUTPUT has been set after INTERFACE variable initialization.
Move definition into main fixes this issue.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-06 10:35:45 +01:00
Florian Eckert ca7625ef11 mwan3: remove not needes jshn.sh include
Remove not needed jshn.sh include.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-06 10:34:53 +01:00
Florian EckertandGitHub 7ec6f47ee5 Merge pull request #13859 from TDT-AG/pr/20201105-xinetd
xinetd: do not restart service after config change if it is not running
2020-11-05 14:51:13 +01:00
Florian EckertandGitHub fa403a5551 Merge pull request #13851 from zhaojh329/master
rp-pppoe: fix typo
2020-11-04 13:26:59 +01:00
Florian EckertandGitHub 5e86f0d94c Merge pull request #13798 from TDT-AG/pr/20201018-extra-command-update
treewide: use new extra_command function for init
2020-11-04 08:51:50 +01:00
Florian Eckert a4267bd6e3 docker-ce: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert d561ea555f wifidog: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert 9e6d28b3cb vpnbypass: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert fe4d4f0bcc vpn-policy-routing: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert 3364d6665a tinc: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert 1b0ddae963 tgt: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert 04e52a13c4 simple-adblock: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert 6f00afc97b seafile-server: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert 154d2482e1 radicale: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert 7184a471ef openvswitch: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert 1db50a6131 nginx: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert f2820aa328 haproxy: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert 0869415ce7 gnunet: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert faf579b0ab apfree-wifidog: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian Eckert fef5dda5f6 postfix: use new extra_command function definition
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-11-04 08:50:34 +01:00
Florian EckertandGitHub 33df7bbda8 Merge pull request #13748 from aaronjg/mwan3-owner-procd
mwan3: fix mwan3 'use'
2020-11-03 12:28:42 +01:00
Florian EckertandGitHub 81b8d863a7 Merge pull request #13806 from TDT-AG/pr/20201029-stunnel
stunnel: update version to 5.57
2020-10-30 16:38:13 +01:00
Florian Eckert 18a130c6bb stunnel: update version to 5.57
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-10-29 12:49:41 +01:00
Florian EckertandGitHub ca5dc9754f Merge pull request #13752 from TDT-AG/pr/20201023-xinetd
xinetd: some changes
2020-10-27 09:21:16 +01:00
Florian EckertandGitHub 70aa64bd22 Merge pull request #13739 from TDT-AG/pr/20201022-ddns-scripts
ddns-scripts: update sitelutions url
2020-10-23 15:10:00 +02:00
Florian Eckert c374711e60 mwan3: fix reload handling
When the interface section was changed, the changed configuration
options were not applied.
This commit adds the service reload handling again.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-10-23 08:15:57 +02:00
Florian Eckert dd719e4960 ddns-scripts: update sitelutions url
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-10-22 07:44:26 +02:00
Florian EckertandGitHub 9485b9401d Merge pull request #13169 from aaronjg/mwan3-owner-procd
mwan3: mwan3track via default routing table and use procd from mwan3track & mwan3rtmon
2020-10-21 16:33:19 +02:00
Florian EckertandGitHub 6519bc5b76 Merge pull request #13641 from TDT-AG/pr/20201012-keepalived
keepalived: update to 2.1.5
2020-10-13 11:42:52 +02:00
Florian Eckert 7a503ca84b keepalived: update PKG_VERSION to 2.1.5
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-10-12 08:55:18 +02:00
Florian EckertandGitHub a333d71fd0 Merge pull request #13509 from TDT-AG/pr/20200928-ddns-scripts
ddns-scripts: fix regression added by version 2.8.0
2020-10-01 14:15:10 +02:00
Florian Eckert 42eb5cc0c3 ddns-scripts: update PKG_VERSION to 2.8.1
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-28 15:28:27 +02:00
Florian Eckert 8d10cdda08 ddns-scripts: also read providers from custom directory
The provider could also be read from the custom directory. To get always
the latest version of the provider config json file, we read first the custom
directory and after that we also check the default directory, if we could not
find the provider file

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-28 15:28:27 +02:00
Florian Eckert 8be604072c ddns-scripts: move all json files to default
Since we can also install custom ddns services, the name for the default
services is not optimally chosen. To emphasize this the folder with the
standard services for the package feed will be renamed to default.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-28 14:47:37 +02:00
Florian Eckert b67240f7ce ddns-scripts: add dependency for ddns-scripts-services on ddns-scripts
If we install ddns-scripts we also install the default
ddns-scripts-services package. So the behabviour for the user does not
change.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-28 14:36:20 +02:00
Florian EckertandGitHub a7862b9ef9 Merge pull request #13494 from TDT-AG/pr/20200925-xinetd
xinetd: fix xinetd reload problem
2020-09-28 12:15:50 +02:00
Florian Eckert 3ec59622e9 ddns-scripts: change install path of custom service providers
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-28 09:53:46 +02:00
Florian Eckert cde01dc150 ddns-scripts: remove list file from ddns-scripts install
This is not needed. The file get installed on demand with the new ddns
script.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-28 09:32:30 +02:00
Florian Eckert b985835748 ddns-scripts: remove special service json files from ddns-scripts-servies package
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-28 09:32:30 +02:00
Florian Eckert 2290df3aa8 ddns-scripts: rename cnkuai package
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-28 09:12:58 +02:00
Florian Eckert b036c506cc ddns-scripts: rename route53 package
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-28 09:11:48 +02:00
Florian Eckert c2ccf8aff6 ddns-scripts: rename nsupdate package
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-28 09:11:00 +02:00
Florian Eckert c3c269c48b ddns-scripts: rename noip package
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-28 09:10:08 +02:00
Florian Eckert 9a1341b530 ddns-scripts: rename digitalocean package
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-28 09:08:58 +02:00
Florian Eckert e81929eeb1 ddns-scripts: rename godaddy package
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-28 09:07:47 +02:00
Florian Eckert a01c6fa139 ddns-scripts: rename freedns package
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-28 09:06:22 +02:00
Florian Eckert 5e0836a538 ddns-scripts: rename cloudflare package
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-28 09:05:09 +02:00
Florian Eckert a05030b9ca ddns-scripts: rename ddns-scripts_service package to ddns-scripts-services
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-28 09:03:43 +02:00
Florian EckertandGitHub 5b7f191bec Merge pull request #13402 from TDT-AG/pr/20200916-ddns-scripts
ddns-scripts: move providers into json
2020-09-24 13:53:02 +02:00
Florian Eckert a3308e4175 ddns-scripts: update PKG_VERSION to 2.8.0
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-22 11:56:35 +02:00
Florian Eckert f184fdf44c ddns-scripts: add ddns script to manage the providers
Redmine-patch-id: 5298
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-22 11:56:35 +02:00
Florian Eckert 30234fcb55 ddns-scripts: add service list file
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00
Florian Eckert 42696aa162 ddns-scripts: and new ddns-scripts_service package
Move all ddns service description into the package to shrik the size of
the ddns-scripts base package.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00
Florian Eckert b4e74b6646 ddns-scripts: chmod 644 Makefile
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00
Florian Eckert 1d20c59fc3 ddns-scripts: update dynamic_dns_*.sh installation
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00
Florian Eckert 88f6bc8d7b ddns-scripts: update init installation
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00
Florian Eckert dd9633977c ddns-scripts: update hotplug installation
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00
Florian Eckert 63804b7358 ddns-scripts: update config installation
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00
Florian Eckert 0c983efec5 ddns-scripts: remove PKG_BUILD_DIR installation
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00
Florian Eckert f5c7271ff1 ddns-scripts: write version string during installation into file
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00
Florian Eckert 4f6614c41d ddns-scripts: remove not needed prinst script
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00
Florian Eckert 41e0f3b6c0 ddns-scripts: cleanup prerm scripts
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00
Florian Eckert 02c435a7cb ddns-scripts: remove not needed preinst and postinst scripts
Since we no longer need to edit the service and serive_ipv6 files during
installation, the preinst and postinst script can be removed. They are
not neede anymore.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00
Florian Eckert 87b106cc9f ddns-scripts: cleanup postinst script
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00
Florian Eckert 7855caff9e ddns-scripts: remove old and unmaintainded uci defaults scripts
From my point of view there are several reasons why this uci default
script should be deleted.

- This script is no longer maintained and there was no significant
change since the old stable release openwrt-18.06.

- The script is installed with every additional package. Which is kind
of funny. It would be better to maintain a separate uci default upgrade
script for each package. So uci default tasks that are no longer needed
can simply be deleted without having to watch and test the whole scirpt.

- The script is also not so easy to maintain, because the code is not
easy to read.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00
Florian Eckert 37045562d9 ddns-scripts: cleanup prerm script
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00
Florian Eckert ac0e0feac1 ddns-scripts: update makefile package descriptions
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00
Florian Eckert 686fd42bb5 ddns-scripts: cleanup Makefile
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00
Florian Eckert fdf1cdbd7b ddns-scripts: update cnkuai.cn to json
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00
Florian Eckert 96c67053e3 ddns-scripts: update route53-v1 to json
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
2020-09-21 10:17:01 +02:00