This was missing for quite some time.
For example the dap-x1860 profits from using its LEDs to show the mesh connectivity.

Signed-off-by: Florian Maurer <f.maurer@outlook.de>

The Aruba AP-303H offers a switchable PSE output on ETH3. The power
state is controlled using a GPIO pin like seen on CPE210 and Nanostation
alike.

However, the PSE state is active low, which the current code handles as
"Enable PoE Passthrough disable". This is not intuitive, thus support
the active low case in the Gluon Web-UI.

Signed-off-by: David Bauer <mail@david-bauer.net>

Rename WPA3-SAE uci encryption method to SAE, as this is used more commonly upstream.

Signed-off-by: Florian Maurer <f.maurer@outlook.de>

Newer drivers with firmware rate-selection select the rate for multicast
and beacon transmissions based on the basic-rate. The multicast-rate
only influenced software rate-controllers.

To make rate-selection work for those drivers, configure the basic-rate
to match the multicast-rate.

Signed-off-by: David Bauer <mail@david-bauer.net>

The import of libgen.h required for basename() was missing. This lead to
undesired behavior on 64 bit systems, where only the upper 32-bit of the
returned pointer was used.

On ARM64 systems such as mediatek-filogic, this lead to a signed extend
of the 32-bit address, leading to a crash of respondd.

Signed-off-by: David Bauer <mail@david-bauer.net>

This reverts commit 702211ac.

And refreshes the according patches to OpenWrt 24.10 / batman-adv
v2024.3.

Patch needs a rebase. Remove in the meantime.

Signed-off-by: David Bauer <mail@david-bauer.net>

The hardware is identical to the E4200 v2, so no 11s support. Added to
have more devices for testing the ARMv5 ISA.

Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>

when a device is migrated from a single WAN/LAN configuration to a
multi-port configuration (e.g. using DSA), set the same role on all
ports and not just the new WAN port.

With the switch to DSA on this board, we can now utilize the ports better, by splitting them according to their usage

Signed-off-by: Florian Maurer <f.maurer@outlook.de>

Switch config for swconfig can be found in the network,
not the system config.

This resulted in `Switch type: none` beeing reported for swconfig devices.

Rename this to avoid a potential collision with wired ethernet interfaces using the same name

No need to iterate to look up a table entry.

find_phy() did not match OpenWrt's logic for PHY names anymore, and
could not handle PHYs that don't match the 'phyX' naming scheme. Instead
of trying to add more complex logic to our own code, simply do what
OpenWrt does and use iwinfo to resolve UCI sections to PHY names.

Stop and start the gluon-arp-limiter service before the network is
brought down when commencing update.

Start the service after the network is brought back up when aborting.

Signed-off-by: David Bauer <mail@david-bauer.net>

Signed-off-by: David Bauer <mail@david-bauer.net>

Signed-off-by: Magnus Frühling <skorpy@frankfurt.ccc.de>

The Gluon Tunneldigger protocol handler hasn't received the care and
attention a core package, especially a VPN protocol, should.

Due to the works in #2102 it's no longer required to maintain
VPN handlers in the Gluon Core and they can be instead included via a
package feed.

Users who wish to continue using a supported core Gluon package are
encouraged to take a look at fastd in conjunction with it's null@l2tp method.
It offers roughly the same performance (it's using the same principle
of operation) and supports connections via IPv6 as a bonus.

In general it should be possible to change the VPN used protocol
asynchronously with a normal update.

If Gluon users wish to continue using tunneldigger the recomendation
is to participate in the development of tunneldigger inside our
community-packages.

This package allows to easily select the correct libustream implementation
without all communities having the need to manually change their included
packages.

Remove legacy migrations. These predate the currently supported upgrade path,
therefore we no longer need them.

Signed-off-by: Magnus Frühling <skorpy@frankfurt.ccc.de>

Signed-off-by: David Bauer <mail@david-bauer.net>

Use a delete_call with a boolean parameter function instead of manually
iterating over all devices.

Link: https://github.com/freifunk-gluon/gluon/pull/3102



Signed-off-by: David Bauer <mail@david-bauer.net>

This preserves configuration of MAC-addresses for each interface in case
OpenWrt sets them using netifd.

This is done by preserving all device-configuration which does not
define a bridge or the MAC-address of a bridge.

Closes #3100

Signed-off-by: David Bauer <mail@david-bauer.net>

OpenWrt now uses the new mbedTLS implementation for hostapd as well as
wpa_supplicant.

In order to keep as close to upstream as possible, use these
derivations.

Signed-off-by: David Bauer <mail@david-bauer.net>

Use CAKE for shaping ingress as well as egress bandwidth shaping.

CAKE allows to better shape egress as well as ingress bandwidth. It not
only performs bandwidth shaping but also flow-queueing.

This in conjunction with the batadv flow dissector allows us to utilize
CAKE for all mesh-implementations currently supported in Gluon.

Signed-off-by: David Bauer <mail@david-bauer.net>

Add GLuon meta-package to include on devices that support SQM.

This package provides sqm-scripts as a dependency. SUpporting mesh-vpn
protocols can then conditionally enable SQM on the VPN link.

Signed-off-by: David Bauer <mail@david-bauer.net>