cubixle/packages
1
0
Fork 0
mirror of https://github.com/novatiq/packages.git synced 2026-07-30 07:13:07 +01:00
Code Issues Packages Projects Releases Wiki Activity
22,338 Commits 8 Branches 1 Tag
4ecdc1393884ae120366c19ae80a173e98438bc4
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Florian EckertandGitHub cdef00450a Merge pull request #13643 from TDT-AG/pr/20201012-docker-ce 
docker-ce: disable docker iptables changes
 2020-11-23 08:36:28 +01:00
Florian Eckert 6df16e50fb docker-ce: update PKG_RELEASE version 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-19 14:20:15 +01:00
Florian Eckert 96a11a9c02 docker-ce: do not delete generated iptables by docker-ce 
Deleting rules that docker has created is error-prone, because with
every update docker we have  to check if anything has changed.
Cleaning up the firewall rules is part of the docker and should and must be
cleaned up and handeled by them when the service is terminated.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-19 14:20:12 +01:00
Florian Eckert 19fc933330 docker-ce: add device option to expand interface blocking 
If docker-ce handles the firewall and fw3 is not envolved because the
rules get not proceed, then not only docker0 should be handled but also
other interfaces and therefore other docker networks.

This commit extends the handling and introduces a new uci option
`device` in the docker config firewall section. This can be used to specify
which device is allowed to access the container. Up to now only docker0
is covert.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-19 14:20:09 +01:00
Florian Eckert 7c9ed12fa1 docker-ce: remove not applicable uciupdate 
As the protocol is set to none, this makes no sense here, as it cannot
be controlled and thus processed by the netifd.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-19 14:20:07 +01:00
Florian Eckert f12071add9 docker-ce: set proto for docker bridge device to none 
Set proto from `static` to `none`. This makes it clear that this
interface is not handled by the netifd.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-19 14:20:04 +01:00
Florian Eckert 1af5593568 docker-ce: make docker-ce firewall handling configurable 
Openwrt has a own firewall service called fw3, that supports firewall zones.
Docker can bypass the handling of the zone rules in openwrt via custom
tables. These are "always" processed before the openwrt firewall.
Which is prone to errors!

Since not everyone is aware that the firewall of openwrt will
not be passed. And this is a security problem because a mapped port is
visible on all interfaces and so also on the WAN side.
If the firewall handling in docker is switched off, then the port in
fw3 must be explicitly released and it cannot happen that the
port is accidentally exported to the outside world via the interfaces on
the WAN zone.

So all rules for the containers should and so must be made in fw3.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-19 14:20:02 +01:00
Florian Eckert dc9d9d2202 docker-ce: add arguments call to uciadd and ucidel 
Up to now only the docker0 interface and bridge is created by default.
In order to create other interfaces and to integrate them into the
openwrt these functions can now be called with arguments.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-19 14:19:59 +01:00
Florian EckertandGitHub 78dd3e05a8 Merge pull request #13908 from aaronjg/mwan3-rpcd 
mwan3: remove dependency on rpcd & fix iputils-ping check
 2020-11-18 08:30:36 +01:00
Florian EckertandGitHub f644dadfea Merge pull request #13867 from jamesmacwhite/mwan3-user-file 
mwan3: Document hotplug events and $DEVICE not being available on ifdown
 2020-11-16 11:50:23 +01:00
Florian EckertandGitHub 4b2e33a7e0 Merge pull request #13881 from aaronjg/mwan3-owner-procd 
mwan3: fixup ipset and install errors
 2020-11-11 15:08:09 +01:00
Florian EckertandGitHub 3ca4fa7c8b Merge pull request #13796 from G-M0N3Y-2503/docker-blocked-interfaces 
docker-ce: Added blocked_interfaces config option
 2020-11-11 14:25:54 +01:00
Florian EckertandGitHub 16938c84f4 Merge pull request #13827 from cobaltchang/fix-cgroupfs-mount-init-script-order 
cgroupfs-mount: fix symbolic link name
 2020-11-09 14:28:56 +01:00
Florian EckertandGitHub 9e424325b5 Merge pull request #13853 from TDT-AG/pr/20201104-mwan3 
mwan3: code cleanup and fixes
 2020-11-08 13:24:40 +01:00
Florian Eckert a756fdcfdf mwan3: update version to 2.10.2 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-06 10:48:21 +01:00
Florian Eckert 1f1d21ed28 mwan3: make it clearer who initiated the start 
It was somewhat opaque how the variable a is questioned. To show this
better the variable is now a string and not a boolean. So you can see
directly what should happen. With a boolean you always have to think
about what it means when 0 or 1 is used.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-06 10:41:28 +01:00
Florian Eckert 26fb7129ad mwan3: fix boundary 
he line is too long. For the future it is better to split it into
several lines and make it more clearly arranged. In case of a future
change, not the whole line will be marked as a change.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-06 10:37:44 +01:00
Florian Eckert 6834f8e3a6 mwan3: use common makefile install wrappers 
With this change you can see at a glance which files will be installed on
the system.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-06 10:35:55 +01:00
Florian Eckert 94a25dbd92 mwan3: fix wait conditions in mwan3track 
Will only run when no events are pending.

Signed-off-by: Aaron Goodman <aaronjg@stanford.edu>
[ Update description and split into own commit ]
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-06 10:35:49 +01:00
Florian Eckert 81e6a8fd3b mwan3: move mwan3_init call in mwwan3track into main 
Initialize TRACK_OUTPUT has been set after INTERFACE variable initialization.
Move definition into main fixes this issue.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-06 10:35:45 +01:00
Florian Eckert ca7625ef11 mwan3: remove not needes jshn.sh include 
Remove not needed jshn.sh include.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-06 10:34:53 +01:00
Florian EckertandGitHub 7ec6f47ee5 Merge pull request #13859 from TDT-AG/pr/20201105-xinetd 
xinetd: do not restart service after config change if it is not running
 2020-11-05 14:51:13 +01:00
Florian EckertandGitHub fa403a5551 Merge pull request #13851 from zhaojh329/master 
rp-pppoe: fix typo
 2020-11-04 13:26:59 +01:00
Florian EckertandGitHub 5e86f0d94c Merge pull request #13798 from TDT-AG/pr/20201018-extra-command-update 
treewide: use new extra_command function for init
 2020-11-04 08:51:50 +01:00
Florian Eckert a4267bd6e3 docker-ce: use new extra_command function definition 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-04 08:50:34 +01:00
Florian Eckert d561ea555f wifidog: use new extra_command function definition 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-04 08:50:34 +01:00
Florian Eckert 9e6d28b3cb vpnbypass: use new extra_command function definition 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-04 08:50:34 +01:00
Florian Eckert fe4d4f0bcc vpn-policy-routing: use new extra_command function definition 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-04 08:50:34 +01:00
Florian Eckert 3364d6665a tinc: use new extra_command function definition 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-04 08:50:34 +01:00
Florian Eckert 1b0ddae963 tgt: use new extra_command function definition 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-04 08:50:34 +01:00
Florian Eckert 04e52a13c4 simple-adblock: use new extra_command function definition 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-04 08:50:34 +01:00
Florian Eckert 6f00afc97b seafile-server: use new extra_command function definition 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-04 08:50:34 +01:00
Florian Eckert 154d2482e1 radicale: use new extra_command function definition 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-04 08:50:34 +01:00
Florian Eckert 7184a471ef openvswitch: use new extra_command function definition 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-04 08:50:34 +01:00
Florian Eckert 1db50a6131 nginx: use new extra_command function definition 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-04 08:50:34 +01:00
Florian Eckert f2820aa328 haproxy: use new extra_command function definition 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-04 08:50:34 +01:00
Florian Eckert 0869415ce7 gnunet: use new extra_command function definition 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-04 08:50:34 +01:00
Florian Eckert faf579b0ab apfree-wifidog: use new extra_command function definition 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-04 08:50:34 +01:00
Florian Eckert fef5dda5f6 postfix: use new extra_command function definition 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-11-04 08:50:34 +01:00
Florian EckertandGitHub 33df7bbda8 Merge pull request #13748 from aaronjg/mwan3-owner-procd 
mwan3: fix mwan3 'use'
 2020-11-03 12:28:42 +01:00
Florian EckertandGitHub 81b8d863a7 Merge pull request #13806 from TDT-AG/pr/20201029-stunnel 
stunnel: update version to 5.57
 2020-10-30 16:38:13 +01:00
Florian Eckert 18a130c6bb stunnel: update version to 5.57 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-10-29 12:49:41 +01:00
Florian EckertandGitHub ca5dc9754f Merge pull request #13752 from TDT-AG/pr/20201023-xinetd 
xinetd: some changes
 2020-10-27 09:21:16 +01:00
Florian EckertandGitHub 70aa64bd22 Merge pull request #13739 from TDT-AG/pr/20201022-ddns-scripts 
ddns-scripts: update sitelutions url
 2020-10-23 15:10:00 +02:00
Florian Eckert c374711e60 mwan3: fix reload handling 
When the interface section was changed, the changed configuration
options were not applied.
This commit adds the service reload handling again.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-10-23 08:15:57 +02:00
Florian Eckert dd719e4960 ddns-scripts: update sitelutions url 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-10-22 07:44:26 +02:00
Florian EckertandGitHub 9485b9401d Merge pull request #13169 from aaronjg/mwan3-owner-procd 
mwan3: mwan3track via default routing table and use procd from mwan3track & mwan3rtmon
 2020-10-21 16:33:19 +02:00
Florian EckertandGitHub 6519bc5b76 Merge pull request #13641 from TDT-AG/pr/20201012-keepalived 
keepalived: update to 2.1.5
 2020-10-13 11:42:52 +02:00
Florian Eckert 7a503ca84b keepalived: update PKG_VERSION to 2.1.5 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-10-12 08:55:18 +02:00
Florian EckertandGitHub a333d71fd0 Merge pull request #13509 from TDT-AG/pr/20200928-ddns-scripts 
ddns-scripts: fix regression added by version 2.8.0
 2020-10-01 14:15:10 +02:00
Florian Eckert 42eb5cc0c3 ddns-scripts: update PKG_VERSION to 2.8.1 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-28 15:28:27 +02:00
Florian Eckert 8d10cdda08 ddns-scripts: also read providers from custom directory 
The provider could also be read from the custom directory. To get always
the latest version of the provider config json file, we read first the custom
directory and after that we also check the default directory, if we could not
find the provider file

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-28 15:28:27 +02:00
Florian Eckert 8be604072c ddns-scripts: move all json files to default 
Since we can also install custom ddns services, the name for the default
services is not optimally chosen. To emphasize this the folder with the
standard services for the package feed will be renamed to default.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-28 14:47:37 +02:00
Florian Eckert b67240f7ce ddns-scripts: add dependency for ddns-scripts-services on ddns-scripts 
If we install ddns-scripts we also install the default
ddns-scripts-services package. So the behabviour for the user does not
change.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-28 14:36:20 +02:00
Florian EckertandGitHub a7862b9ef9 Merge pull request #13494 from TDT-AG/pr/20200925-xinetd 
xinetd: fix xinetd reload problem
 2020-09-28 12:15:50 +02:00
Florian Eckert 3ec59622e9 ddns-scripts: change install path of custom service providers 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-28 09:53:46 +02:00
Florian Eckert cde01dc150 ddns-scripts: remove list file from ddns-scripts install 
This is not needed. The file get installed on demand with the new ddns
script.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-28 09:32:30 +02:00
Florian Eckert b985835748 ddns-scripts: remove special service json files from ddns-scripts-servies package 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-28 09:32:30 +02:00
Florian Eckert 2290df3aa8 ddns-scripts: rename cnkuai package 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-28 09:12:58 +02:00
Florian Eckert b036c506cc ddns-scripts: rename route53 package 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-28 09:11:48 +02:00
Florian Eckert c2ccf8aff6 ddns-scripts: rename nsupdate package 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-28 09:11:00 +02:00
Florian Eckert c3c269c48b ddns-scripts: rename noip package 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-28 09:10:08 +02:00
Florian Eckert 9a1341b530 ddns-scripts: rename digitalocean package 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-28 09:08:58 +02:00
Florian Eckert e81929eeb1 ddns-scripts: rename godaddy package 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-28 09:07:47 +02:00
Florian Eckert a01c6fa139 ddns-scripts: rename freedns package 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-28 09:06:22 +02:00
Florian Eckert 5e0836a538 ddns-scripts: rename cloudflare package 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-28 09:05:09 +02:00
Florian Eckert a05030b9ca ddns-scripts: rename ddns-scripts_service package to ddns-scripts-services 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-28 09:03:43 +02:00
Florian EckertandGitHub 5b7f191bec Merge pull request #13402 from TDT-AG/pr/20200916-ddns-scripts 
ddns-scripts: move providers into json
 2020-09-24 13:53:02 +02:00
Florian Eckert a3308e4175 ddns-scripts: update PKG_VERSION to 2.8.0 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-22 11:56:35 +02:00
Florian Eckert f184fdf44c ddns-scripts: add ddns script to manage the providers 
Redmine-patch-id: 5298
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-22 11:56:35 +02:00
Florian Eckert 30234fcb55 ddns-scripts: add service list file 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert 42696aa162 ddns-scripts: and new ddns-scripts_service package 
Move all ddns service description into the package to shrik the size of
the ddns-scripts base package.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert b4e74b6646 ddns-scripts: chmod 644 Makefile 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert 1d20c59fc3 ddns-scripts: update dynamic_dns_*.sh installation 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert 88f6bc8d7b ddns-scripts: update init installation 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert dd9633977c ddns-scripts: update hotplug installation 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert 63804b7358 ddns-scripts: update config installation 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert 0c983efec5 ddns-scripts: remove PKG_BUILD_DIR installation 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert f5c7271ff1 ddns-scripts: write version string during installation into file 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert 4f6614c41d ddns-scripts: remove not needed prinst script 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert 41e0f3b6c0 ddns-scripts: cleanup prerm scripts 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert 02c435a7cb ddns-scripts: remove not needed preinst and postinst scripts 
Since we no longer need to edit the service and serive_ipv6 files during
installation, the preinst and postinst script can be removed. They are
not neede anymore.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert 87b106cc9f ddns-scripts: cleanup postinst script 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert 7855caff9e ddns-scripts: remove old and unmaintainded uci defaults scripts 
From my point of view there are several reasons why this uci default
script should be deleted.

- This script is no longer maintained and there was no significant
change since the old stable release openwrt-18.06.

- The script is installed with every additional package. Which is kind
of funny. It would be better to maintain a separate uci default upgrade
script for each package. So uci default tasks that are no longer needed
can simply be deleted without having to watch and test the whole scirpt.

- The script is also not so easy to maintain, because the code is not
easy to read.

Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert 37045562d9 ddns-scripts: cleanup prerm script 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert ac0e0feac1 ddns-scripts: update makefile package descriptions 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert 686fd42bb5 ddns-scripts: cleanup Makefile 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert fdf1cdbd7b ddns-scripts: update cnkuai.cn to json 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert 96c67053e3 ddns-scripts: update route53-v1 to json 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert e051d37720 ddns-scripts: update bind-nsupdate to json 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert cabdcdf795 ddns-scripts: update no-ip.com to json 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert 6945528179 ddns-scripts: update digitalocean.com-v2 to json 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert f9f3d67a57 ddns-scripts: update godaddy.com-v1 to json 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert a4b13ba1dd ddns-scripts: update freedns.42.pl to json 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert 7a41ef8283 ddns-scripts: update cloudflare.com-v4 to json 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert 46991fb58c ddns-scripts: update install for service provider json files 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert 5229d8f954 ddns-scripts: convert ddns service provider files into json 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert 1b3bb98fcf ddns-scripts: load ddsn service provider parameter from json 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-21 10:17:01 +02:00
Florian Eckert da183bdb3d CONTRIBUTING.md: update branch info 
Signed-off-by: Florian Eckert <fe@dev.tdt.de>
 2020-09-09 11:07:27 +02:00
Florian EckertandGitHub 91bf524845 Merge pull request #13041 from aaronjg/mwan3-startup-performance 
mwan3: startup performance improvements and other fixes
 2020-08-19 13:59:02 +02:00