Increase the peer limit for ath10k-ct from 32 to 96 STAs like it is set
for the non-ct firmware / driver. In order to make this work with the
memory constraints of the wireless platform, reduce the number of
concurrent vdevs to the maximum Gluon uses (4).

Closes #2604

Signed-off-by: David Bauer <mail@david-bauer.net>

Signed-off-by: David Bauer <mail@david-bauer.net>

modules: update to latest HEAD

The below mentioned commit introduced a regression, that the "wifi"
section of the request type "neighbours" was empty:

    ~# gluon-neighbour-info -d ::1 -r neighbours | ffh_pretty_json
    {
      "wifi": [
      ],
      ...
    }

After this commit, the section (correctly) looks like this:

    root@UFU-FWH-A272-Tresckowstr-GemR-vorne:~# gluon-neighbour-info -d ::1 -r neighbours | ffh_pretty_json
    {
      "wifi": {
        "ca:38:7e:42:5f:21": {
          "neighbours": {
            "fe:9f:4d:01:ea:e1": {
              "noise": -102,
              "inactive": 50,
              "signal": -84
            },
            "fe:df:b9:84:37:51": {
              "noise": -102,
              "inactive": 20,
              "signal": -73
            }
          }
        }
      },
      ...
    }

The issue was due to the fact, that the iteration over the (mesh) wifi interfaces
was broken. The code was assuming, that the section

    config interface 'mesh_radio0'
            option proto 'gluon_mesh'

in /etc/config/network contains an option "ifname", which it does not.
The ifname property is only stored in the corresponding section in
/etc/config/wireless:

    config wifi-iface 'mesh_radio0'
            option ifname 'mesh0'
            option network 'mesh_radio0'
            option mode 'mesh'
            ...

Therefore, we now iterate over wifi-ifaces in /etc/config/wireless, that
have the mode 'mesh' instead. This resolves the issue.

Fixes 0f1fa243

5343d6a09 yq: Update to 4.27.2
0fd2eb51a python-paho-mqtt: add missing dependency
cd36b6eb8 sslh: update to v1.22c Change notes: 	Updated Makefile package version and hash. 	Added libpcre2 dependency 	Removed USELIBPCRE make flag (no longer optional within sslh) 	Updated patch 001 to work with new sslh Makefile
1eb707605 luajit: patch: PPC/e500 SPE: use soft float instead of failing
b169fd026 libgpg-error: update to 1.45
8694f7f95 squashfs-tools: enable zstd compression by default
5c987e57d cryptsetup: fix library paths by calling autoreconf
79d1abd4c ffmpeg: update to 5.1
cec18eb0d chrony: Avoid building unused gnutls and ca dependencies
7727beb71 gensio: Avoid building unused python and libstdcpp dependecies
51ccd0761 gnutls: Avoid building unused gnutls dependency
bf519e9bc fail2ban: fix patch for python 3.10
3c5270c9d django: bump to version 4.0.6
8fdc92b86 rclone: update to 1.59.0
77afaaa47 nano: update to 6.4

ca58b8b4fe ramips: Add Xiaomi Mi Router 4A 100M International
707ec48ab3 zlib: backport null dereference fix
5e0173de51 zlib: bump PKG_RELEASE after CVE fix
7561eab8e8 zlib: backport fix for heap-based buffer over-read (CVE-2022-37434)
1f9d603141 odhcpd: update to git HEAD
39ac29a68a uboot-mvebu: update to v2022.07
ec8b5cf0e6 realtek: Fix typo in Kconfig prompt
247ef07540 ramips: support fw_printenv for Netgear WAX202
62fff4e1e6 umdns: add missing syscall to seccomp filter
ecf0dc7055 ramips: Add support command fw_setsys for Xiaomi routers
bd9bb13012 ltq-vdsl-app: Fix counter overflow resulting in negative values
bd74c11155 kernel: silence refresh warning
dcb782792b x86: add missing Lex 3I380NX network detection
c2c32bdc80 lantiq: fix lan port 3+4 phy-mode settings for Fritzbox 3390
456d05d6d8 ipq40xx: fix RUTX10 Wi-Fi woes
daa73dc681 libmnl: fix build when bash is not located at /bin/bash
596efe1356 OpenWrt v22.03.0-rc6: revert to branch defaults
f1ff3fd95c OpenWrt v22.03.0-rc6: adjust config defaults
042d558536 mac80211: Update to version 5.15.58-1
c9cc3189ed wolfssl: fix math library build
535f4a5bff odhcp6c: update to latest git HEAD
5a7bcd6977 firewall3: update file hash
c5f0eab222 uboot-at91: fix build on buildbots
972b833e91 uboot-at91: update to linux4sam-2022.04
39810995fb at91bootstrap: update at91bootstrap v4 targets to v4.0.3

This new field reflects the TQ to the selected gateway.

Before this commit, if you had connectivity issues in a larger mesh,
it was a tedious task to understand which nodes are affected and which
are not. By providing this new value for each node, it becomes easier
to see which nodes are affected by the connectivity issues and which
are not.

The new field "gateway_tq" is located at the toplevel of the
statistics resource (next to "gateway" and "gateway_nexthop"):

    gluon-neighbour-info -d ::1 -r statistics
    {
        ...
        "gateway": "02:a1:71:04:09:10",
        "gateway_nexthop": "88:e6:40:20:90:10",
        "gateway_tq": 193,
        ...
    }

Move common firewall rules to respective packages

This implements the same behavior as it is used in the autoupdater [1].

This is for example required to allow the manual installation of
firmware upgrades via the config mode on devices which where migrated
from swconfig to DSA. Otherwise the image will always be invalid.

[1] https://github.com/freifunk-gluon/packages/commit/b80428166454d184f356e5a14a144911d9ee11aa

When running "fastd -v" fails, line may be NULL, causing a segfault in
strncmp.

modules: update to latest HEAD

d385ac504 curl: switch default SSL to mbedTLS
910a8a075 telegraf: Update to version 1.23.3
ce619701b knot: update to 3.1.8
93d53a56d dockerd: Update to v20.10.17
17758cf81 docker: Update to v20.10.17
90bbda1b5 libnetwork: Update to f6ccccb for Docker v20.10.17
0f2e46afe containerd: Update to v1.6.6 for Docker v20.10.17
f238e8f7c runc: Update to v1.1.2 for Docker v20.10.17
c85111226 dawn: update to 2022-07-24
944a896e5 dawn: update to 2022-07-22
0902a5fc0 usteer: update to latest HEAD
71db92ef6 usteer: bump to git HEAD
c90aaa1ec dawn: update to 2022-07-21
9552a30bc mutt: add PKG_CONFIG_DEPENDS
ffe306981 opusfile: add autoreconf
10a6452b8 golang: Update to 1.18.4
fb7206356 libextractor: fix iconv handling
7d74fbf37 glib2: disable fortify source
756a3243d wifidog: fix compilation with more recent wolfssl
ef545e031 curl: fix compilation with wolfSSL
fdd16fefa yq: Update to 4.26.1
b0118aab5 xray-core: Update to 1.5.9
d9c09bb40 dawn: update to 2022-07-18
f4eb0c359 mpd: add missing AUDIO_SUPPORT in CONFIG_DEPENDS
ff0dd2d12 mpd-full: remove partial BUILD_PATENTED on ffmpeg
c1732453f postfix: fix download failure
97ebbd014 travelmate: update 2.0.9-2
86408bf66 dawn: update to 2022-07-16
09d9d6093 watchcat: add support to run a script
afd77fd6c watchcat: add IP version selection support; fix bug with unlockbands
8829c4025 libuwsc: fix compiltation with wolfSSL
e1090a022 pdns: update to 4.6.3
a3f25a711 pdns-recursor: update to 4.7.1
71bd1a8a5 telegraf: Update to version 1.23.2
fe38196a7 telegraf: Update to version 1.23.1
859f7319a dnslookup: Update to 1.7.1
e34230521 cloudflared: Update to 2022.7.1
0ac8154bc xr_usb_serial_common: bump to 2022-03-30
cdf76bc38 fio: update to 3.29
298786838 libarchive: fix ext2fs build race error condition
be959ca32 nebula: update to 1.6.0
81cd7959f node: July 7th 2022 Security Releases
d2a2c005d nsutils: Update to latest version, switch to cmake
241a7198a nsutils: bump to new release
953e29f06 python-cryptography: Fix failing build

8b6b73d0e8 wolfssl: make shared again
7ca89e1187 kernel: bump 5.10 to 5.10.134
1db4f5cba3 x86: update defconfig for 5.10.133
762703d397 kernel: bump 5.10 to 5.10.133
aedcbaae37 kernel: bump 5.10 to 5.10.132
a409bd7705 octeon: add SUPPORTED_DEVICES to er/erlite
e0d3dc5de1 uboot-bcm4908: include SoC in output files
066547b974 bcm4908: build bootfs image per-SoC
506432a783 lantiq: fix network port GPIO settings for Fritzbox 3390
ee27a2b706 ipq806x: Archer VR2600: fix switch ports numbering
f2c12b8940 layerscape: update PKG_HASH / PKG_MIRROR_HASH
bddfd3f7ed sdk: add spidev-test to the bundle of userspace sources
396dc89ee7 realtek: correct egress frame port verification
f8a44c22d4 realtek: correct egress frame priority assignment
4da0b5a786 realtek: fix egress L2 learning on rtl839x
8614b8eb5f realtek: fix egress port mask on rtl839x
c240fed242 ramips: add support for Netgear WAX202
d5858c6d97 image: add support for Netgear encrypted image
a1068f77c9 wolfssl: Do not activate HW acceleration on armvirt by default
dbe19b1041 libpcap: fix PKG_CONFIG_DEPENDS for rpcapd
a12eb71c88 wolfssl: WOLFSSL_HAS_WPAS requires WOLFSSL_HAS_DH
41fa086e6f kernel: Refresh kernel patches
aa237757e0 kernel: bump 5.10 to 5.10.131
a51f54b41d kernel: bump 5.10 to 5.10.130
f14122f8e6 kernel: bump 5.10 to 5.10.129
73ef008ea6 kernel: bump 5.10 to 5.10.128
cb9a69807e firewall3: bump to latest git HEAD
8ccd657629 mt7622: remove 300 MHz from dts
606fc4cd81 bcm4908: use upstream-accepted watchdog patches
7eda42a3f3 bcm4908: backport latest DT patches
187f5147d3 kernel: update leds-bcm63138 driver
f1fc90e5a1 kernel: backport LEDs driver for BCMBCA devices
a8001815a6 opkg: update to 2022-02-24
479890083d firmware: intel-microcode: update to 20220510
c5ee4b7863 openssl: bump to 1.1.1q
ade7c6db1e wolfssl: bump to 5.4.0
409534860f ath79: bsap18x0: pad rootfs image
1be4cad669 ath79: ja76pf2: use nvmem cells to specify MAC addresses
94530067ad ath79: move image check for devices with RedBoot
8e09f9ffc3 ath79: switch some RedBoot based devices to OKLI loader
01b8cd3200 rockchip: reliably distribute net interrupts
4fb05e45df wolfssl: re-enable AES-NI by default for x86_64
ec9f82fa18 mac80211: fix AQL issue with multicast traffic
945b13e369 realtek: build sane factory images for DGS-1210 models
3fbf45bd09 realtek: build factory images for all DGS-1210 models
128575d0fd realtek: rename u-boot-env2 to board-name
9081098273 scripts: fix CAMEO tag generator
87e58a43ea realtek: build DGS-1210 images with CAMEO tag
b151362d19 scripts: add CAMEO tag generator
72466aaeb9 realtek: add DGS-1210-28 factory image
b2876e6a3a scripts: add cameo image header generator
8b4169f1c9 bcm53xx: use -falign-functions=32 for kernel compilation
e291e49da3 bcm53xx: enable & setup packet steering
5359a8ca38 bcm53xx: disable GRO by default at kernel level
027f7b18b9 bcm53xx: revert bgmac back to the old limited max frame size
bd826dc9f9 kernel: drop patch adding hardcoded kernel compilation flags
da7c57b086 kernel: support setting extra CFLAGS for kernel compilation
614a420084 kernel: use KCFLAGS for passing EXTRA_OPTIMIZATION flags

ath79-generic: migrate wnr2200 and add similar variant

ath79-generic: (re)add RE450 v1
ath79-generic: (re)add RE355 v1

Note: Buffalo has introduced hardware changes without bumping the
revision number. 19.07 did not support the rb-variant so there's no need
to implement a migration for the rb-variant.
Every g300nh supported by Gluon should either be the s-variant or
been flashed wrongly.

Gone due to
commit 45c84a11 ("ar71xx: drop target")

ath79-nand: migrate wndr3700v4

Gone due to
commit 45c84a11 ("ar71xx: drop target")

Gone due to
commit 45c84a11 ("ar71xx: drop target")

Gone due to
commit 45c84a11 ("ar71xx: drop target")

ath79-generic: (re)add support for ALFA Network AP121F

Gone due to
commit 45c84a11 ("ar71xx: drop target")

Note that it was wrongly marked as device class tiny in
commit 7fd7116e ("targets: add device-class flags") in the past,
the device has 64MB RAM and not 32MB.

Also, the device has no "led-running" assigned in DTS. The device has
three LEDs: "green:vpn", "green:lan" and "green:wlan". The first LED,
"green:vpn", has a "V" icon and was used to show the VPN connection
status in the vendor firmware. This LED will be used via the newly
added "led-boot" fallback in gluon-setup-mode. But will be unused
during normal operation due to the unassigned "led-running" in DTS.

Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>

for devices in targets that do no implement `get_status_led` in /etc/diag.sh
and do not have an led-running in their dts

Gone due to
commit 45c84a11 ("ar71xx: drop target")

The CN/RU variant of the device has the same hardware
as the EU already supported, but contains a 16M flash chip.

Gone due to
commit 45c84a11 ("ar71xx: drop target")

ar71xx only supported the 8M variant

Specifications:
* SoC: AR7242 (Virian 400MHz)
* RAM: 64 MB DDR (W9751G6JB-25)
* Flash: 16MB SPI flash (S25FL129PIF)
* WiFi: AR9382 (2.4/5GHz) + 2x SE2595L
* LAN: 1x1000M (PEF7071V)

To install via EVA bootloader, a FTP connection need to be
established to 192.168.178.1 within the first seconds after power on:

  ftp> quote USER adam2
  ftp> quote PASS adam2
  ftp> binary
  ftp> debug
  ftp> passive
  ftp> quote MEDIA FLSH
  ftp> put lede-ar71xx-generic-fritz300e-squashfs-sysupgrade.bin mtd1

Depending on the source of the primary MAC address, uppercase digits
would be used on some devices. Convert the address to lowercase for
consistency.

We only change the case for newly configured nodes to avoid changing the
node ID and derives MAC addresses for existing installations.

modules: update to latest HEAD

The Ubiquiti UniFi 6 LR now has a v2 with a different LED setup, thus
the previous model was added a v1 suffix.

Signed-off-by: David Bauer <mail@david-bauer.net>

The ip6tables-legacy metapackage was renamed to ip6ables-zz-legacy.