(cherry picked from commit 0e102e79)

Drop the Gluon version reference from the site configuration used for
the CI builds.

These version indicators were most likely just copied from the example
site in the docs, where the version information makes sense. However,
the CI site is always built for a specific Gluon version and therefor
commit.

This avoids editing the version for each release.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 1ec99435)

modules: update to latest HEAD

b848b61 batman-adv: compat: Fix skb_vlan_eth_hdr conflict in stable kernels

1b172d0da rust: Update to 1.75.0
cbc8d7bc5 rust: unexport host sccache env variable
0142ff1ed dnsproxy: Update to 0.61.1
9d2fe1355 v2ray-geodata: Update to latest versin
97f921ca7 v2raya: Update to 2.2.4.6
0a34c8571 btop: Update to 1.3.0
b110df7cb btop: opt out of lto usage
1e9d24dca uspot: update to Git HEAD (2024-01-09)
ab6d368b7 travelmate: update 2.1.2-2
b37dec1de adblock-fast: bugfix: pause command
421e2c75a banip: update 0.9.3-4
a4d0bb91c travelmate: release 2.1.2-1
389a100bb travelmate: Added H-Rewards hotel login Signed-off-by: Marc Ole Bulling <Marc-Ole@gmx.de>
4e1c175d4 strongswan: trigger reload when interfaces are specified
0f499ec4b sing-box: Update to 1.7.7
f971d88d5 django: bump to version 4.2.8
e96b6f648  banip: update 0.9.3-3
26373f845  banip: update 0.9.3-2
6435e15a2 banip: bump to release 0.9.3-1
06d1feb78 php8: update to 8.2.14
1e9d9f2b4 dnsproxy: Update to 0.61.0
75d9f3af9 yq: Update to 4.40.5
1b500425d v2ray-geodata: Update to latest version
ea1f30b6f v2ray-core: Update to 5.13.0
e60975e71 dnsproxy: Update to 0.60.1
e95f8c8de tailscale: Update to 1.56.1
5b9ae50b2 wsdd2: update to 2023-12-21
73062e624 mosquitto: update to 2.0.18
515b0f92e nebula: update to 1.8.1
5b4067ccb libxcrypt: update to 4.4.36
9e7371ed5 libtorrent-rasterbar: Update to 2.0.9

cdc907abed ath79: read back reset register
5ad05681f2 ath79: add support for UniFi UK-Ultra
e214118148 ath79: move UniFi AC template into common
4103958e76 mediatek: fix BPI-R3 wifi mac address
2fe497c4a5 mac80211: do not emit VHT160 capabilities if channel width is less than 160 MHz
9cd0023e54 hostapd: add missing NULL pointer check on radar notification
3bf602d740 mac80211: avoid crashing on invalid band info
d4a21d75a9 mediatek: GL-MT6000: Add missing LED state definitions
0cd6b3fd0c linux/modules: remove deprecated module
40cfdf5ffe kernel: bump 5.15 to 5.15.146
6e39d2426b ramips: add support for D-Link COVR-X1860 A1
af7ef781ac ramips: add encrypted SGE factory image for D-Link devices
67d998e25d kernel: bump 5.15 to 5.15.145
b54f7105df firmware-utils: move patch to maintaince branch
34e30fb53a firmware-utils: bump to latest openwrt-23.05
e61d651053 ramips: correct the PCIe port number for Unielec u7621-01
80ef582dee rockchip: configure eth pad driver strength for orangepi r1 plus lts
9cd589bd79 ramips: lzma-loader: use default uart for rt305x
2216b10ebb ramips: lzma-loader: use proper register names
76f7dd3312 ramips: lzma-loader: use virtual memory segments for uart base address
23506e7789 raimps: mtk_eth_soc: drop rst_esw from ESW driver
0128d860a0 ramips: dts: mt7628an: reset FE and ESW cores together
ee4a042483 ramips: dts: rt5350: reset FE and ESW cores together
4e1bf2a50c ramips: dts: rt3050: reset FE and ESW cores together
88501f82f5 ramips: dts: rt3352: reset FE and ESW cores together
289515e003 ramips: mtk_eth_soc: wait longer after FE core reset to settle
8ce87267ba ramips: mtk_eth_soc: allow multiple resets
3aec71a176 mac80211: add missing newline for "min_tx_power"
c6425bb525 kernel: delete stray linux 6.1 patch
49bde57679 kernel: fix bridge proxyarp issue with some broken DHCP clients
51881b2eb9 mediatek: add support for Routerich AX3000
18d7962f7b ramips: add support for Rostelecom RT-FE-1A
f6fb6bb2ba ramips: mt7621: use lzma-loader for Sercomm NA502
9a7b14dcfe mediatek: enable mt7981-wo-firmware package by default
9325da80ab mac80211: fix a race condition related to enabling fast-xmit
b0fc8b47e0 netifd: update to Git openwrt-23.05 (2024-01-04)
5cc1918a7a dropbear: increase default receive window size
60e49cf170 ramips: fix label-mac for Xiaomi RA75

Signed-off-by: David Bauer <mail@david-bauer.net>

Signed-off-by: Magnus Frühling <skorpy@frankfurt.ccc.de>

* docs: user/site: add missing image-customization example

* doc: user/site: improve wording of image customization section

Also add a link to the examples section.

openwrt: backport patches for v2023.2 release

The error handling needed for the buffer growth logic relies on
uloop_fd's error flag, which is set based on epoll events. Doing so
without handling recvmsg's error codes is racy, as an error state may be
set between receiving epoll events and the next recvmsg, but calling
recvmsg clears the error state.

To fix this, add handling for errors returned by nl_recvmsgs_default()
and nl_recv(); checking for u->error and retrieving the error status
using getsockopt() becomes redundant.

We have observed this issue on Gluon (recent OpenWrt 23.05); on some
devices with DSA switches, the bridge interface's carrier-on event would
consistenly get lost during boot due to insufficient buffer space
(see [1]).

We have bisected the issue to netifd commit 516ab774cc16 ("system-linux:
fix race condition on bringing up wireless devices"), but that commit only
uncovered the preexisting bug by switching from getting the carrier state
from sysfs to using the netlink messages in cb_rtnl_event().

I suspect that other recent issues about netifd missing a carrier state
change like [2] may have the same underlying cause.

[1] https://github.com/freifunk-gluon/gluon/issues/3130
[2] https://github.com/openwrt/openwrt/issues/13863



Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Signed-off-by: David Bauer <mail@david-bauer.net>

Increasing the receive window size improves throughout on higher-latency
links such as WAN connections. The current default of 24KB caps out at
around 500 KB/s.

Increasing the receive buffer to 256KB increases the throughput to at
least 11 MB/s.

Signed-off-by: David Bauer <mail@david-bauer.net>

readthedocs: update to Python 3.11

.readthedocs.yaml is how the file is mentioned in the docs. Adjust the
name.

The latest Sphinx versions require at least 3.9.

docs: remove an unrelated/misleading link and fix headings

This was an idea (thought experiment?) from a Wireless Battlemesh ages
ago between batman-adv devs. Regarding what could be done to interconnect
isolated/separate WiFi mesh clouds on layer 3 without losing best path
metric information, without worsening/compromising on the best route decision.
And as a more sophisticated approach to the batman-adv gateway feature and
a potential replacement for tunneled batman-adv over VPN connections.

Which is the opposite of what the sentence in this Gluon README
is saying. And this never got implemented in either batman-adv nor Gluon.

Therefore removing this link to this old draft page.

The newly added information is way too verbose and non-practical for a
"Getting started". Therefore adding an "Overview" heading and moving the
"Getting started" back to where it originally was.

This adds a hint to the Repository on Github and makes it easier to recognize the license text

Goal is to cancel Worfklows for Pull Request if they become obsolte
due to new changes.
Without this workflows will continue running, wasting resources and
delaying the run of relevant workflows.
This situation will typically occour if a author of a PR notices an
error/typo/missing bit and pushes new changes to the branch.

This won't affect concurrent workflows for otherwise triggered
workflows (push, workflow_dispatch, tag, ...).

build: implement flexible site-selection system

This package allows to easily select the correct libustream implementation
without all communities having the need to manually change their included
packages.

Signed-off-by: David Bauer <mail@david-bauer.net>

bcm27xx: add support for Pi4 and switch bcm27xx from ext4 to squashfs

Remove legacy migrations. These predate the currently supported upgrade path,
therefore we no longer need them.

Signed-off-by: Magnus Frühling <skorpy@frankfurt.ccc.de>

Known issues:

* 11s is not working
* has no reset button, only SSH access, serial access or an external SD
  card update can return it to config mode at the moment
* LED: generally the red sys LED is working, including boot and failsafe
  blink patters, but:
  * sometimes not lit after boot
  * not blinking in config mode; instead sometimes either persistently on
    and sometimes persistently off after booting into config mode

Therefore adding it as broken.

However, due to its CPU power and small size still interesting as a VPN
offloader or WiFi rooftop core node (e.g. to Gluon'ify 5+60GHz devices).

Manifest aliases are added for upgrades from unreleased Gluon builds
and can be removed again at some point in the future.

Tested on a Raspberry Pi 4 Model B Rev 1.1.

Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>

Similar to x86 build images with a squashfs instead of ext4 filesystem
on bcm27xx / for the Raspberry Pi. This allows to use sysupgrade
properly and allows to use the firstboot command.

Runtime tested on a Raspberry Pi 4. Build tested for the Pi 3 / bcm2710.

Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue>

Load the site image-customization.lua file only on init. Previously, the
file was loaded on every device invocation.

Signed-off-by: David Bauer <mail@david-bauer.net>

Create an init routine which loads the environment only once instead
every evaluation.

Signed-off-by: David Bauer <mail@david-bauer.net>

modules: update to latest HEAD

53ea3b8 libplatforminfo: update bcm27xx target name
28a35ea libplatforminfo: drop obsolete ar71xx-mikrotik target

4e9c89801 snowflake: update to 2.8.0
b38eb34ad wifidog: make it compile again with recent version of WolfSSL
b6e00e30e php8: update to 8.2.13
1ee27592c tang: silence errors on first installation
5741b3374 haproxy: update to v2.8.5
8ebf99b7e adblock-fast: update to 1.1.1-1
40a730516 python3: Update to 3.11.7, refresh patches
755ad8d13 unbound: fix `create_host_record_from_host` error when `dns` is not set
26afa741e unbound: create extra host records from DHCP static leases
07e8278e5 golang: Update to 1.21.5
c82697da6 python3-ble2mqtt: bump version to 0.2.1
bb3a34020 python3-bleak: bump version to 0.21.1
5c9de3c0a python3-dbus-fast: bump version to 2.20.0
4bc836e48 syncthing: fix duplicate command line parameters on service
e3148ef0f https-dns-proxy: only restart firewall when needed
73b689f96 adblock-fast: better allow-listing
7abcfbccf nebula: update to 1.8.0
213d2df70 curl: update to 8.5.0
341d817e2 adblock-fast: bugfix: block domains from config when not using block-lists

59fd8f08cf mvebu: fix RTC of IEI-World Puzzle M90x devices
fd6831731b mediatek: add SPDX header for Confiabits MT7981 DTS
1598d87309 mediatek: add support for Confiabits MT7981
9cf5769636 mwlwifi: update to version 10.4.10-20231120
c9c35dca7a mt76: Add firmware package for MT7922
20615c410b kirkwood: fix Ctera C200 V1 ubi part name
ad363f6910 ath79: make boot-leds service executable
fcf08d9db6 ipq807x: fix edgecore EAP102 lan/wan
0186032f6a mediatek: filogic: add Acelink EW-7886CAX support
583e67222e mediatek: filogic: reorder alphabetically
b95e9dae43 mediatek: fiilogic: device tree `switch@1f` fix
af740e9ef9 mediatek: fix the name of buswidth to bus-width

As the boardname-based image name setting was broken for bcm27xx due to the
target rename, we need to keep the model-based names updated for now.

Add all model strings currently seen on the Multimeshviewer and update
the comments accordingly.