4e1c175d4 strongswan: trigger reload when interfaces are specified
0f499ec4b sing-box: Update to 1.7.7
f971d88d5 django: bump to version 4.2.8
e96b6f648  banip: update 0.9.3-3
26373f845  banip: update 0.9.3-2
6435e15a2 banip: bump to release 0.9.3-1
06d1feb78 php8: update to 8.2.14
1e9d9f2b4 dnsproxy: Update to 0.61.0
75d9f3af9 yq: Update to 4.40.5
1b500425d v2ray-geodata: Update to latest version
ea1f30b6f v2ray-core: Update to 5.13.0
e60975e71 dnsproxy: Update to 0.60.1
e95f8c8de tailscale: Update to 1.56.1
5b9ae50b2 wsdd2: update to 2023-12-21
73062e624 mosquitto: update to 2.0.18
515b0f92e nebula: update to 1.8.1
5b4067ccb libxcrypt: update to 4.4.36
9e7371ed5 libtorrent-rasterbar: Update to 2.0.9

51881b2eb9 mediatek: add support for Routerich AX3000
18d7962f7b ramips: add support for Rostelecom RT-FE-1A
f6fb6bb2ba ramips: mt7621: use lzma-loader for Sercomm NA502
9a7b14dcfe mediatek: enable mt7981-wo-firmware package by default
9325da80ab mac80211: fix a race condition related to enabling fast-xmit
b0fc8b47e0 netifd: update to Git openwrt-23.05 (2024-01-04)
5cc1918a7a dropbear: increase default receive window size
60e49cf170 ramips: fix label-mac for Xiaomi RA75

Signed-off-by: David Bauer <mail@david-bauer.net>

Signed-off-by: Magnus Frühling <skorpy@frankfurt.ccc.de>

* docs: user/site: add missing image-customization example

* doc: user/site: improve wording of image customization section

Also add a link to the examples section.

openwrt: backport patches for v2023.2 release

The error handling needed for the buffer growth logic relies on
uloop_fd's error flag, which is set based on epoll events. Doing so
without handling recvmsg's error codes is racy, as an error state may be
set between receiving epoll events and the next recvmsg, but calling
recvmsg clears the error state.

To fix this, add handling for errors returned by nl_recvmsgs_default()
and nl_recv(); checking for u->error and retrieving the error status
using getsockopt() becomes redundant.

We have observed this issue on Gluon (recent OpenWrt 23.05); on some
devices with DSA switches, the bridge interface's carrier-on event would
consistenly get lost during boot due to insufficient buffer space
(see [1]).

We have bisected the issue to netifd commit 516ab774cc16 ("system-linux:
fix race condition on bringing up wireless devices"), but that commit only
uncovered the preexisting bug by switching from getting the carrier state
from sysfs to using the netlink messages in cb_rtnl_event().

I suspect that other recent issues about netifd missing a carrier state
change like [2] may have the same underlying cause.

[1] https://github.com/freifunk-gluon/gluon/issues/3130
[2] https://github.com/openwrt/openwrt/issues/13863



Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Signed-off-by: David Bauer <mail@david-bauer.net>

Increasing the receive window size improves throughout on higher-latency
links such as WAN connections. The current default of 24KB caps out at
around 500 KB/s.

Increasing the receive buffer to 256KB increases the throughput to at
least 11 MB/s.

Signed-off-by: David Bauer <mail@david-bauer.net>

readthedocs: update to Python 3.11

.readthedocs.yaml is how the file is mentioned in the docs. Adjust the
name.

The latest Sphinx versions require at least 3.9.

docs: remove an unrelated/misleading link and fix headings

This was an idea (thought experiment?) from a Wireless Battlemesh ages
ago between batman-adv devs. Regarding what could be done to interconnect
isolated/separate WiFi mesh clouds on layer 3 without losing best path
metric information, without worsening/compromising on the best route decision.
And as a more sophisticated approach to the batman-adv gateway feature and
a potential replacement for tunneled batman-adv over VPN connections.

Which is the opposite of what the sentence in this Gluon README
is saying. And this never got implemented in either batman-adv nor Gluon.

Therefore removing this link to this old draft page.

The newly added information is way too verbose and non-practical for a
"Getting started". Therefore adding an "Overview" heading and moving the
"Getting started" back to where it originally was.

This adds a hint to the Repository on Github and makes it easier to recognize the license text

Goal is to cancel Worfklows for Pull Request if they become obsolte
due to new changes.
Without this workflows will continue running, wasting resources and
delaying the run of relevant workflows.
This situation will typically occour if a author of a PR notices an
error/typo/missing bit and pushes new changes to the branch.

This won't affect concurrent workflows for otherwise triggered
workflows (push, workflow_dispatch, tag, ...).

build: implement flexible site-selection system

This package allows to easily select the correct libustream implementation
without all communities having the need to manually change their included
packages.

Signed-off-by: David Bauer <mail@david-bauer.net>

bcm27xx: add support for Pi4 and switch bcm27xx from ext4 to squashfs

Remove legacy migrations. These predate the currently supported upgrade path,
therefore we no longer need them.

Signed-off-by: Magnus Frühling <skorpy@frankfurt.ccc.de>

Known issues:

* 11s is not working
* has no reset button, only SSH access, serial access or an external SD
  card update can return it to config mode at the moment
* LED: generally the red sys LED is working, including boot and failsafe
  blink patters, but:
  * sometimes not lit after boot
  * not blinking in config mode; instead sometimes either persistently on
    and sometimes persistently off after booting into config mode

Therefore adding it as broken.

However, due to its CPU power and small size still interesting as a VPN
offloader or WiFi rooftop core node (e.g. to Gluon'ify 5+60GHz devices).

Manifest aliases are added for upgrades from unreleased Gluon builds
and can be removed again at some point in the future.

Tested on a Raspberry Pi 4 Model B Rev 1.1.

Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>

Similar to x86 build images with a squashfs instead of ext4 filesystem
on bcm27xx / for the Raspberry Pi. This allows to use sysupgrade
properly and allows to use the firstboot command.

Runtime tested on a Raspberry Pi 4. Build tested for the Pi 3 / bcm2710.

Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>

Load the site image-customization.lua file only on init. Previously, the
file was loaded on every device invocation.

Signed-off-by: David Bauer <mail@david-bauer.net>

Create an init routine which loads the environment only once instead
every evaluation.

Signed-off-by: David Bauer <mail@david-bauer.net>

modules: update to latest HEAD

53ea3b8 libplatforminfo: update bcm27xx target name
28a35ea libplatforminfo: drop obsolete ar71xx-mikrotik target

4e9c89801 snowflake: update to 2.8.0
b38eb34ad wifidog: make it compile again with recent version of WolfSSL
b6e00e30e php8: update to 8.2.13
1ee27592c tang: silence errors on first installation
5741b3374 haproxy: update to v2.8.5
8ebf99b7e adblock-fast: update to 1.1.1-1
40a730516 python3: Update to 3.11.7, refresh patches
755ad8d13 unbound: fix `create_host_record_from_host` error when `dns` is not set
26afa741e unbound: create extra host records from DHCP static leases
07e8278e5 golang: Update to 1.21.5
c82697da6 python3-ble2mqtt: bump version to 0.2.1
bb3a34020 python3-bleak: bump version to 0.21.1
5c9de3c0a python3-dbus-fast: bump version to 2.20.0
4bc836e48 syncthing: fix duplicate command line parameters on service
e3148ef0f https-dns-proxy: only restart firewall when needed
73b689f96 adblock-fast: better allow-listing
7abcfbccf nebula: update to 1.8.0
213d2df70 curl: update to 8.5.0
341d817e2 adblock-fast: bugfix: block domains from config when not using block-lists

59fd8f08cf mvebu: fix RTC of IEI-World Puzzle M90x devices
fd6831731b mediatek: add SPDX header for Confiabits MT7981 DTS
1598d87309 mediatek: add support for Confiabits MT7981
9cf5769636 mwlwifi: update to version 10.4.10-20231120
c9c35dca7a mt76: Add firmware package for MT7922
20615c410b kirkwood: fix Ctera C200 V1 ubi part name
ad363f6910 ath79: make boot-leds service executable
fcf08d9db6 ipq807x: fix edgecore EAP102 lan/wan
0186032f6a mediatek: filogic: add Acelink EW-7886CAX support
583e67222e mediatek: filogic: reorder alphabetically
b95e9dae43 mediatek: fiilogic: device tree `switch@1f` fix
af740e9ef9 mediatek: fix the name of buswidth to bus-width

As the boardname-based image name setting was broken for bcm27xx due to the
target rename, we need to keep the model-based names updated for now.

Add all model strings currently seen on the Multimeshviewer and update
the comments accordingly.

Signed-off-by: David Bauer <mail@david-bauer.net>

Include the file-extension with the image-customization.lua file. This
will ease work with editors providing syntax highlighting, as they now
properly detect the file-type.

Signed-off-by: David Bauer <mail@david-bauer.net>

If we align the table keys of the selection table to match the return
object of get_selections, we can omit creating a new return object.

Signed-off-by: David Bauer <mail@david-bauer.net>

Print a warning in case users attempt to build Gluon using a site.mk
which containes deprecated GLUON_FEATURES or GLUON_SITE_PACKAGES.

Signed-off-by: David Bauer <mail@david-bauer.net>