Prevents spurious build failures.

x86: copy separate kernel and rootfs images to "other" directory

gluon-web: prohibit cross-origin POST requests

Update OpenWrt base, clean up patches

lint-sh fixes

Removal of more obsolete migrations, minor cleanup and improvements to lsupgrade.sh

As gluon-web uses standard multipart/form-data requests, browsers don't
enforce any cross-origin restrictions. To prevent malicious injection of
POST requests into the config mode, match the Origin header against the
Host header of the request.

Actually raise an error and turn it into an HTTP 400 return code when
something goes wrong, rather than ignoring the error.

We also improve the conditions under which errors are thrown before
pump() is called: We don't need to check for the multipart/form-data
content-type twice, and a POST without this content-type is now always
an error.

Having a trailing newline is nice when viewing the returned data in a
terminal.

This was a remnant of LuCI that was never used in gluon-web.

Using apt in scripts is discouraged. Also add an update to hopefully fix
the lua-check installation failure in CI.

By applying a label `backport <branch>` the action will automatically
try to cherry-pick the change to the target branch after the pull
request was successfully merged.

Swap the interfaces so than the PoE input port LAN0 is used for WAN and
config mode, and LAN1 becomes LAN.

To this end, the code previously used for ar71xx and removed in
commit 9fdc57c1 ("treewide: drop ar71xx platform specific code") is
reintroduced.

Fixes #2384

/etc/config/gluon-core is used for nothing else.

As /etc/config/gluon uses a named wireless section, also change the
get_first() to get().

There wasn't really a reason to have a separate script to set a single
value.

In addition, the old script was using the identifier 'c' instead of
'uci' for the UCI cursor. Following the convention of the other scripts
is helpful so it is easy to grep for all uses of a certain config file/
option.

- Use printf instead of echo for better portability
- Print whole path without reordering components
- Deduplicate code

Iterating over all the package directories in the OpenWrt feed takes a
while, even though it doesn't contain any upgrade scripts. Skip the
whole directory.

We are on Linux 5.4, so these patches for Linux 4.14 don't do anything.

97b95ef8b918 uci: update to the latest master

Replace the downstream UCI patch with a proper OpenWrt 21.02 backport.

modules: updates

5bca036 pretty-hostname: instantly apply hostname
a85fa33 treewide: change Github URLs from git:// to https:// (#252)

c2e138d olsrd: add ubus ipc integration to olsrd
7d07ef9 CI: fix runtime testing for non master branch
61cd00c naywatch: introduce kick-count
440e7af naywatch: fix mode without watchdog
c8b613e olsrd: fix meshing via wireguard tunnels

444b64e36 cryptsetup: update to version 2.4.3
a259a4aaa git: update to version 2.34.1
0cdffbaf9 crowdsec: update from upstream latest release 1.2.3
031fbb16a smcroute: update to 2.5.5
fcf163335 smcroute: update to 2.5.4
c7470d1d8 wg-installer: switch to ubus call for olsrd hotplug
8c3ce87fd wg-installer: rework iproute2 commands
3f88edfa5 2to3: add package host tool
bb09bc37b CI: fix runtime testing for non master branch
bbd3d70cd i2pd: Update to 2.40.0 and update package sources
19d32003c i2pd: remove unneeded functions.sh
8d150985c i2pd: Update to 2.38.0
5ee9fb98d i2pd: update to 2.36
d0bb48741 mariadb: Add sudo dependency
f4d8f9c98 mariadb: Check and fix datadir owner issues during upgrade
7a3f41af4 mariadb: update to version 10.4.22
d3e6dc51e mg: bump to 7.0
15b41a675 zerotier: add configuration reload trigger
2bca94d83 netdata: Update init script to use -D rather than -nd
c7fef6db5 atlas-probe: update to version 2.4.1
98c1fe435 atlas-sw-probe: update to version 5040
1a40e3c89 crowdsec-firewall-bouncer: update to 0.0.21
432140a36 crowdsec: update to 1.2.2
b5443ccdf apache: fixup apxs
19451ec86 apache: security bump to 2.4.51
6fe1b64e7 wg-installer: fix shell typo
f21f39cfd wg-installer: allow defining link costs for hotplugs
995251746 wg-installer: private key as parameter
652ebf1a3 wg-installer: generate new keys for every connection
5f517cc58 golang: Update to 1.17.6
92e357ebd wg-installer: fix using symlinks for conf files
caa72e5c5 fail2ban: fix 2to3 error
b3764db33 wg-installer: fix cleanup script
1e179f92a haveged: update to 1.9.17
d36455277 wg-installer: fix get_usage function
49f898044 wg-installer: delete old interfaces
335ad2a4d wg-installer: fix dependencies
f2745c85a wg-installer: fix typo in cleanup function
1de352b60 wg-installer: fix ipv4 meshing via olsr
efb5bdf07 wg-installer: add link-local to client interface
bf1c780af wg-installer: add cleanup script
032d0157c wg-installer: add ipv4 support
33d6705d2 getdns: remove maintainer
b1dfbf975 getdns: bump to 1.7.0
f755690b0 wg-installer: add hotplug script for olsr
85b6d750d radicale2: Update to 2.1.12
2415cbb9b radicale: Update to 1.1.7
4e1bfe4e9 inadyn: update to 2.9.1

1472a8fa42 procd: update to git HEAD
015f170fe6 procd: update to git HEAD
cd5ba0cfbb ustream-ssl: variants conflict with each other
6eced97ce4 lantiq: flag FritzBox 7360 family buttons active-low
b59f3b08b4 firmware-utils: tplink-safeloader: fix Archer A7v5 factory flashing from vendor fw > v1.1.x
43d105ec2a kernel: bump 5.4 to 5.4.171
1db847488d ath79: rb912: fix pll init issues
6ced8cad8e kernel: backport workaround for Realtek RTL8672 and RTL9601C chips
77ee281a3e kernel: add kmod-ledtrig-pattern
aa2de44cdd kernel: fix AutoLoad parameter for uleds module
bc37a699e5 kernel: add kmod-leds-uleds
96b5962704 mvebu: remove patch that was applied into linux stable
5beaa75d94 openssl: bump to 1.1.1m
93842b20dc bcm4908: include ATF in bootfs images
18b10db2f1 arm-trusted-firmware-bcm63xx: add ATF for Broadcom devices
739e359241 kernel: backport support for multicolor & RGB LEDs to 5.4
608c7dccf2 bcm4908: sysupgrade: add pkgtb format support
b6ed2641df busybox: backport dd support for iflag=count_bytes
7e4485fd5b bcm4908: add uboot-envtools to default packages
4cd5d11fa3 bcm4908: add fdt-utils to default packages
1d4a28d5e1 dtc: support printing binary data with fdtget
ce5d0378bf dtc: import package for dtc & fdt from packages feed
6292d1e354 bcm4908: sysupgrade: refactor handling different firmware formats
a00854040d ipq40xx: specify FritzBox 7530 LAN port label numbers
27225e3538 kernel: ath10k: provide a build variant for small RAM devices
104774c3b0 mvebu: puzzle: wan LED and fix default network
47d82f0710 mvebu: enable Aquantia phy driver for Puzzle devices
164ed6069c mvebu: add id for AQR112 Ethernet phy variants
daf4301071 mvebu: import patch enabling AQR113 PHY
ee5750043c mvebu: import patch enabling AQR112 and AQR412 PHY
a03840a1a9 mvebu: puzzle-m901: add LEDs, fan and reset button
280bb7c10c mvebu: puzzle-m902: add GPIO reset button
1e5df4d550 mvebu: puzzle-mcu: improve led driver
99a1e88297 mvebu: puzzle-m902: add driver for MCU driving LEDs, fan and buzzer
3b14ddf8d2 build: fix opkg install step for large package selection

gluon-core: add gluon info binary

Co-Authored-By: Matthias Schiffer <mschiffer@universe-factory.net>

Co-Authored-By: Matthias Schiffer <mschiffer@universe-factory.net>

Co-Authored-By: Matthias Schiffer <mschiffer@universe-factory.net>

This copies the code from web-admin and uses it to create a neat
cli-accessible summary about a node

This could also be extended or possibly have all the data the status
page has

Co-Authored-By: Matthias Schiffer <mschiffer@universe-factory.net>

Fixes: 1cb0fc84 ("gluon-status-page: swap bandwidth limits (#2304)")
Resolves #2370

The following features are available in Busybox ash, so we don't need to
warn about them for runtime scripts:

- local keyword
- echo -n / -e
- String indexing

These warnings are new in shellcheck 0.7.2, which would otherwise fail
for various scripts.

0.7.1 complains about unescaped backslashes in double quotes (which are
intepreted by printf in the two affected places). While the warning was
retired with shellcheck 0.7.2, it seems like a good idea to fix it
anyways.

Target build cleanup