Signed-off-by: David Bauer <mail@david-bauer.net>

Signed-off-by: David Bauer <mail@david-bauer.net>

Updates the image to have a newer build environment, which is required
for some of the maintainer scripts.

Increases the image size from 414 to 545 MB.

ramips-mt76x8: add support for TP-Link RE305 v1

Specification:

SoC: MediaTek MT7628AN
RAM: 64MiB
Flash: 8MiB
Wifi:
  - 2.4GHz: MT7628AN
  - 5GHz: MT7612EN
LAN: 1x 10/100 Mbps

Flash instructions:
Flash factory image through stock firmware WEB UI.
Back to stock is possible by using TFTP and stripping down the Firmware
provided by TP-Link to a initramfs.

The flash space between 0x650000 and 0x7f0000
is blank in the stock firmware so I left it out as well.

modules: update modules

7073e7fb0 simple-adblock: bugfix for allow command
c25231611 perl-ack: Update to 3.6.0
bca4b82fc syslog-ng: fix OOM issues by adding support for logrotate
87254d108 python-uci: update to version 0.9.0
0a6a1ffcd v2raya: Update to 1.5.9.1698.1
ff09e836d sqm-scripts: Bump to v1.5.2
d4cc94757 vim: variants conflict with each other
268efbedd libgd: add conflicts to each other
afea82826 pdns-recursor: update to 4.7.2
a1067fa6b simple-adblock: update to 1.9.0-1
9646958be stress-ng: add libjpeg dep
ef1af9a43 pciutils: backport patch to fix compilation with older binutils
85e26798c liburcu: update to version 0.13.2
fddb4fe50 knot: update to version 3.2.0
b92eb75be django: bump to version 4.0.7
39943175a squid: bump to 4.17
c15e924f1 dnscrypt-proxy2: update to version 2.1.2
f1a15fd5b coova-chilli: Fix compile problem with _init()
625f17633 mpd: update to 0.23.9
900d42fbe mpd: update to 0.23.8
257242799 pciutils: update to 3.8.0
1e53ad688 travelmate: update 2.1.0

d1f14d17aa ramips: fix GB-PC1 and GB-PC2 device support
0197cc553a hostapd: fix WPA3 enterprise keys and ciphers
567f64df57 iwinfo: update to latest HEAD
f543588812 iproute2: Fix KERNEL_INCLUDE in SDK
8de88a2aa9 umbim: bump to git HEAD
e0832778a3 mt76: update to the latest version
da3dc96b64 netifd: update to the latest version
237f8e2cfc netifd: update to git HEAD
8a9733ee0d rpcd: bump version to 2022-08-24
8f4a2e4234 rpcd: update to latest Git HEAD
f92ac40ebd uhttpd: update to latest Git HEAD
d4f20964ff ucode: update to latest Git HEAD
469db326ac nftables: fix parsing date expressions
fd268e3973 firewall4: update to latest Git HEAD
296c9aeb39 ipq806x: add missing scaling_available_frequencies for dedicated cpufreq
97213c7335 mac80211: parse the correct set of HE capabilities for AP mode

Co-authored-by: Christoph Krapp <christoph.krapp@power.cloud>

- explain what happens on gluon-reconfigure
- show workflow to alter the wired network config
- update examples
- update 'has changed in' section

resolves #2474

Co-authored-by: Tom Herbers <mail@tomherbers.de>
Co-authored-by: David Bauer <mail@david-bauer.net>
Co-authored-by: Andreas Ziegler <dev@andreas-ziegler.de>

Co-authored-by: Tom Herbers <mail@tomherbers.de>
Co-authored-by: David Bauer <mail@david-bauer.net>
Co-authored-by: Andreas Ziegler <dev@andreas-ziegler.de>

Include OpenWrt's target default package lists in config generation

Device-specific package additions could generate `CONFIG_PACKAGE_...=m`
lines, which would override `CONFIG_PACKAGE_...=y` lines inserted by
OpenWrt for default packages (as Gluon did not know about these default
packages). This resulted in the unintended removal of such packages from
other devices that did not contain the same package in their device
package lists.

Avoid this issue by explicitly adding OpenWrt's target default package
list to the front of Gluon's target package list.

OpenWrt's default package list contains the package "nftables", which is
a virtual package provided by "nftables-json" and "nftables-nojson".
Explicitly handle this case, otherwise our config check will fail when
we extend our default package list with the one from OpenWrt.

Another leftover from legacy OpenWrt targets, which we don't support
anymore.

modules: update to latest HEAD

8872359 mesh11sd: Release v1.2.0
e819ede opennds: Release v9.8.0

bed539e7c miniflux: update to 2.0.38
77d94fda9 miniflux: update to 2.0.37
c04063379 yt-dlp: update to 2022.8.14
39f39f72b yt-dlp: update to 2022.7.18
9655fc279 yt-dlp: update to 2022.6.22.1
ca6eaf0cd ddns-scripts: Fix typo s/ganid/gandi/
3e1c7b9ff host-pip-requirements: update Cython to version 0.29.28
b02ea962c libmbim: bump to 1.26.4
5b87373a3 libmbim: switch to meson build tools
68946d4c7 modemmanager: switch to meson build tools
b8a8dd53c libqmi: bump to 1.30.6
94b824423 libqmi: polish Makefile
1683d7c96 libqmi: switch to meson build tools
d2a0a8e03 rclone: Update to 1.59.1
f82e778c0 gg: Update to 0.2.8
e07b43761 usteer: update to latest HEAD
613e709ce usteer: bump to git HEAD
46c8524e5 telegraf: Update to version 1.23.4
74c36ecec telegraf: Add influxdb2 output plugin to package version small
39a25cea0 stress-ng: update to 0.14.03
95d59cc2a squeezelite: update to 1.9.9-1403
fcdba64d0 frp: update to 0.44.0
ac1cf386f opendoas: fix build with PAM
2af698b98 cloudflared: Update to 2022.8.0
f37bdcc9e lighttpd: update to lighttpd 1.4.66 release hash
b66878186 ariang: update to 1.2.4
3d5f882b6 knot: update to 3.1.9
90f35f262 rsync: bump to 3.2.5
94821d9c0 opendoas: add package
b621a75f3 rclone: fix init script on CIDR format ipaddr
dd45bb89c rsync: bump to 3.2.4
8c85981f8 rsync: fix CVE-2022-29154
63d46221b python-websockets: update to version 10.3
eaefde9a4 unbound: update to 1.16.2, fix CVE-2022-30698, CVE-2022-30699
2e878763d unbound: update to 1.16.1
c5ac15a86 antfs: require kernel version 5.10 to build
80a3d7738 ptunnel-ng: fix compilation with kernel 5.15
60eff3656 pingcheck: update to 2022-03-01
a11f3757f libpfring: update to 8.0.0
6df708763 shadowsocks-libev: ss-rules: nft rule cleanup on reload
53952a136 shadowsocks-libev: ss-rules: setup policy rules for udp/ip6
6bede4157 cgi-io: update to latest Git HEAD
81601471e watchcat: fix broken ping invocation for no-address-family configuration
a4933fc0a php8: update to 8.1.9

ecd8f7e294 ramips: get MAC addr from the encrypted partition (WG4хх223)
290ace2fe6 base-files: add mtd_get_mac_encrypted_arcadyan function
d94a28f7d2 uencrypt: add package to decrypt WG4хх223 config
bfb37d363c odhcp6c: update to git HEAD
464f349fad ramips: allow custom trx magic for Arcadyan
7edaae16db ramips: create new dtsi for Arcadyan routers
206581018c ramips: add support for MTS WG430223
1320a78aab ramips: add support for ASUS RT-AX53U
e06f97eb33 mvebu: backport pending Turris Omnia LEDs improvements
93ac163dea mvebu: backport DTS changes for Turris Omnia from mvebu/dt
659bb7638d mpc85xx: enable NAND support for all subtargets
89b7714cf6 kernel: add kmod-leds-turris-omnia
5e39f37caa toolchain: Update glibc 2.34 to recent HEAD
da7e9b201e build: add support for python3.11 and higher
dfe5c23592 iwinfo: update to latest HEAD
1d16b928b3 ath25: fix initramfs image generation
2728d13030 ath25: fix ELF image generation
46e62907f1 kernel: bump 5.10 to 5.10.136
be29de706c kernel: bump 5.10 to 5.10.135
6c901ec97d kernel: Backport upstream flowtable patches from 5.15
6a638c134d pkg-config: always use correct path for pkg-config.real
1c7a167366 kernel: kmod-phy-smsc: Add new PHY
fd4a354f3e kernel: kmod-phy-ax88796b: Add new PHY
13d66ef33f kernel: kmod-ipt-ulog: Remove package
534e256c02 kernel: kmod-nft-nat6: Remove package
2a6fa77b77 kernel: ipt-ipset: Add ipset/ip_set_hash_ipmac.ko
fc05102d51 kernel: netsupport: kmod-sched: explicitly define included modules
3b51f74a91 kernel: netsupport: kmod-sched: Add kmod-lib-textsearch dependency
9727b71147 kernel: netsupport: kmod-sched: Remove sch_fq_codel and sch_fifo
0038e96c27 arm-trusted-firmware-mediatek: skip bad blocks on SPI-NAND (SNFI)
5c69416246 fstools: add uci fstab section to conffiles for package block-mount
0855549b4b kernel: scale nf_conntrack_max more reasonably
0179ba7851 dnsmasq: fix jail_mount for serversfile

docs: update fastd Gateway / Supernode Configuration

Gone due to
commit 45c84a11 ("ar71xx: drop target")

gluon-core: provide migration for preserve_channels

This method previously returned the string literal of the config key,
leading to checks evaluating to true even in case this option was
disabled.

Signed-off-by: David Bauer <mail@david-bauer.net>

The preserve_channels configuration option was moved to the gluon UCI
package without adding a proper migration.

Signed-off-by: David Bauer <mail@david-bauer.net>

closes freifunk-gluon/gluon#2603

Co-authored-by: Martin Weinelt <martin@darmstadt.freifunk.net>

Increase the peer limit for ath10k-ct from 32 to 96 STAs like it is set
for the non-ct firmware / driver. In order to make this work with the
memory constraints of the wireless platform, reduce the number of
concurrent vdevs to the maximum Gluon uses (4).

Closes #2604

Signed-off-by: David Bauer <mail@david-bauer.net>

Signed-off-by: David Bauer <mail@david-bauer.net>

modules: update to latest HEAD

The below mentioned commit introduced a regression, that the "wifi"
section of the request type "neighbours" was empty:

    ~# gluon-neighbour-info -d ::1 -r neighbours | ffh_pretty_json
    {
      "wifi": [
      ],
      ...
    }

After this commit, the section (correctly) looks like this:

    root@UFU-FWH-A272-Tresckowstr-GemR-vorne:~# gluon-neighbour-info -d ::1 -r neighbours | ffh_pretty_json
    {
      "wifi": {
        "ca:38:7e:42:5f:21": {
          "neighbours": {
            "fe:9f:4d:01:ea:e1": {
              "noise": -102,
              "inactive": 50,
              "signal": -84
            },
            "fe:df:b9:84:37:51": {
              "noise": -102,
              "inactive": 20,
              "signal": -73
            }
          }
        }
      },
      ...
    }

The issue was due to the fact, that the iteration over the (mesh) wifi interfaces
was broken. The code was assuming, that the section

    config interface 'mesh_radio0'
            option proto 'gluon_mesh'

in /etc/config/network contains an option "ifname", which it does not.
The ifname property is only stored in the corresponding section in
/etc/config/wireless:

    config wifi-iface 'mesh_radio0'
            option ifname 'mesh0'
            option network 'mesh_radio0'
            option mode 'mesh'
            ...

Therefore, we now iterate over wifi-ifaces in /etc/config/wireless, that
have the mode 'mesh' instead. This resolves the issue.

Fixes 0f1fa243

5343d6a09 yq: Update to 4.27.2
0fd2eb51a python-paho-mqtt: add missing dependency
cd36b6eb8 sslh: update to v1.22c Change notes: 	Updated Makefile package version and hash. 	Added libpcre2 dependency 	Removed USELIBPCRE make flag (no longer optional within sslh) 	Updated patch 001 to work with new sslh Makefile
1eb707605 luajit: patch: PPC/e500 SPE: use soft float instead of failing
b169fd026 libgpg-error: update to 1.45
8694f7f95 squashfs-tools: enable zstd compression by default
5c987e57d cryptsetup: fix library paths by calling autoreconf
79d1abd4c ffmpeg: update to 5.1
cec18eb0d chrony: Avoid building unused gnutls and ca dependencies
7727beb71 gensio: Avoid building unused python and libstdcpp dependecies
51ccd0761 gnutls: Avoid building unused gnutls dependency
bf519e9bc fail2ban: fix patch for python 3.10
3c5270c9d django: bump to version 4.0.6
8fdc92b86 rclone: update to 1.59.0
77afaaa47 nano: update to 6.4

ca58b8b4fe ramips: Add Xiaomi Mi Router 4A 100M International
707ec48ab3 zlib: backport null dereference fix
5e0173de51 zlib: bump PKG_RELEASE after CVE fix
7561eab8e8 zlib: backport fix for heap-based buffer over-read (CVE-2022-37434)
1f9d603141 odhcpd: update to git HEAD
39ac29a68a uboot-mvebu: update to v2022.07
ec8b5cf0e6 realtek: Fix typo in Kconfig prompt
247ef07540 ramips: support fw_printenv for Netgear WAX202
62fff4e1e6 umdns: add missing syscall to seccomp filter
ecf0dc7055 ramips: Add support command fw_setsys for Xiaomi routers
bd9bb13012 ltq-vdsl-app: Fix counter overflow resulting in negative values
bd74c11155 kernel: silence refresh warning
dcb782792b x86: add missing Lex 3I380NX network detection
c2c32bdc80 lantiq: fix lan port 3+4 phy-mode settings for Fritzbox 3390
456d05d6d8 ipq40xx: fix RUTX10 Wi-Fi woes
daa73dc681 libmnl: fix build when bash is not located at /bin/bash
596efe1356 OpenWrt v22.03.0-rc6: revert to branch defaults
f1ff3fd95c OpenWrt v22.03.0-rc6: adjust config defaults
042d558536 mac80211: Update to version 5.15.58-1
c9cc3189ed wolfssl: fix math library build
535f4a5bff odhcp6c: update to latest git HEAD
5a7bcd6977 firewall3: update file hash
c5f0eab222 uboot-at91: fix build on buildbots
972b833e91 uboot-at91: update to linux4sam-2022.04
39810995fb at91bootstrap: update at91bootstrap v4 targets to v4.0.3

This new field reflects the TQ to the selected gateway.

Before this commit, if you had connectivity issues in a larger mesh,
it was a tedious task to understand which nodes are affected and which
are not. By providing this new value for each node, it becomes easier
to see which nodes are affected by the connectivity issues and which
are not.

The new field "gateway_tq" is located at the toplevel of the
statistics resource (next to "gateway" and "gateway_nexthop"):

    gluon-neighbour-info -d ::1 -r statistics
    {
        ...
        "gateway": "02:a1:71:04:09:10",
        "gateway_nexthop": "88:e6:40:20:90:10",
        "gateway_tq": 193,
        ...
    }

Move common firewall rules to respective packages