Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

strongswan: move ipsec conf files to subpackage

This commit adds a number of fixes to the OpenVPN up/down hotplug command
wrapper which currently fails to actually invoke user defined up and down
commands for uci configurations not using external native configurations.

 - Use the `--setenv` to pass the user configured `up` and `down` commands
   as `user_up` and `user_down` environment variables respectively

 - Instead of attempting to scrape the `up` and `down` settings from the
   (possibly generated) native OpenVPN configuration in
   `/etc/hotplug.d/openvpn/01-user`, read them from the respective
   environment variables instead

 - Fix parsing of native configuration values in `get_openvpn_option()`;
   first try to parse a given setting as single quoted value, then as
   double quoted and finally as non-quoted, potentially white-space
   escaped one. This ensures that `up '/bin/foo'` is interpreted as
   `/bin/foo` and not `'/bin/foo'`

Ref: https://forum.openwrt.org/t/openvpn-up-down-configuration-ignored/91126


Supersedes: #15121, #15284
Signed-off-by: Jo-Philipp Wich <jo@mein.io>

curl: update to version 7.76.0 (security fix)

The `tmate` tool is a fork of `tmux` which allows remote access to a
device without setting up any port forwarding. This commits adds the
backend server which handles connections.

Signed-off-by: Paul Spooren <mail@aparcar.org>

Fixes CVE-2021-22876 and CVE-2021-22890

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Updated geodata to latest version.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

- Re-assigned myself as the maintainer
- Used $(AUTORELEASE) for PKG_RELEASE

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>

These config files are only used by the ipsec interface to charon,
and shouldn't be part of the base package.

Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>

The 'autopart' package is intended for devices with rather large
block device storage (ie. SATA or MMC).
It automatically allocates the free space on the block device used
for booting into an LVM2 physical volume.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Add Open vSwtich configuration daemon for netifd.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

* add -selinux variant which depends on libselinux
* init script for background service
* updated configurations
* maintainer change as requested

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

Signed-off-by: Martin Matějek <martin.matejek@gmx.com>

stress-ng: bump to version 0.12.06

Download static busybox to provide rootfs-amd64.tar.gz for test-suite.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Now that 'crun' has been packaged, add support for it in podman.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

crun is the prefered container run-time of podman, it's faster than
runc and has a much lower memory footprint.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

cni-plugins makes use of veth, make sure kernel module is installed.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

ARC architecture is not yet supported by libseccomp.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>

Python updates1

icecast: fix whitespace in init file

mpd: run mpd as a non-root user

knot: update to version 3.0.5

Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>

Signed-off-by: Jan Hak <jan.hak@nic.cz>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>

* Make /etc/mpd.conf worldreadable.

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>

* Updated the .ga TLD server.
* Removed the .cd and cf TLD servers.
* Removed 72 new gTLDs which are no longer active.

Signed-off-by: Paul Spooren <mail@aparcar.org>

Ariadne Conill (1):
      database: do not chroot(".") unless actually necessary

Martin Vahlensieck (1):
      Use correct port when redirected

Timo Teräs (5):
      db: fix control character check to use uint8_t
      libfetch: send Proxy-Authorization also for https connect
      del: report correctly package's provides names

Signed-off-by: Paul Spooren <mail@aparcar.org>

banip: update to 0.7.6

mpd-full: enable lame and vorbis encoders

Signed-off-by: Lucian Cristian <lucian.cristian@gmail.com>

Enable Vorbis encoder for OGG format and lame for MP3.
This enables mpd to stream OGG and MP3 to e.g. Icecast2.

Signed-off-by: Alexander Egorenkov <egorenar-dev@posteo.net>

* rework the central iptables function to significantly
  reduce the code complexity and the overall number of iptables calls
* check early and only once in the chain for ctstate NEW and
  return otherwise (thanks @ldir-EDB0)
* made the whitelist ordering within the chain more flexible

Signed-off-by: Dirk Brenken <dev@brenken.org>

treewide: build CMake projects with Ninja