]> git.ipfire.org Git - ipfire-2.x.git/log
ipfire-2.x.git
7 weeks agocore195: Ship fontconfig
Michael Tremer [Thu, 24 Apr 2025 14:56:53 +0000 (14:56 +0000)] 
core195: Ship fontconfig

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agofontconfig: Update to version 2.16.2
Adolf Belka [Thu, 24 Apr 2025 13:43:46 +0000 (15:43 +0200)] 
fontconfig: Update to version 2.16.2

- Update from version 2.16.0 to 2.16 2
- Update of rootfile
- Default build system has been moved from autotools to meson. Autotools will likely be
   removed in next version.
- Changelog
    2.16.2
      meson: do not require libintl if nls feature is disabled
      ci: Add back Android build in a common way
      ci: drop Language to make sure they are applied as default style
      ci: Change the default build system to meson
      ci: Stop on fail anyway
      ci: default to clean-build
      ci: detect OS from os-release if no FC_DISTRO_NAME is set
      ci: add missing dependency of pytest
      ci: Set more timeout for pytest
      ci: fix too many open files on test
      ci: add missing dependency of requests
      meson: Use Requires.private instead of Requires
      Upgrade bindgen in Fontations enabled Rust builds
      [Fontations] Add internal PatternBuilder abstraction
      meson: don't force build of a shared library
      meson.build: define a 'c' standard for the project (C99 and C11)
    2.16.1
      meson: create fc_cachedir at the installation time
      meson: set WORDS_BIGENDIAN
      ci: get back MinGW build to rawhide
      meson: make sure config.h contains config-fixups.h for OSX
      Reformatting with clang-format
      ci: Add a workflow to check the coding style
      ci: workaround conflict between systemd and systemd-standalone-sysusers
      conf.d: Add Adwaita Sans as system-ui
      ci: disable  job tentatively
      ci: Add a release workflow
      [Fontations] Allow linkage to internals in tests
      meson.build: explicitly check for pthread support

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agocore195: Ship coreutils
Michael Tremer [Thu, 24 Apr 2025 14:56:28 +0000 (14:56 +0000)] 
core195: Ship coreutils

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agocoreutils: Update to version 9.7
Adolf Belka [Thu, 24 Apr 2025 13:43:45 +0000 (15:43 +0200)] 
coreutils: Update to version 9.7

- Update from version 9.5 to 9.7
- Update of rootfile not required
- Changelog
    9.7
** Bug fixes
  'cat' would fail with "input file is output file" if input and
   output are the same terminal device and the output is append-only.
   [bug introduced in coreutils-9.6]
  'cksum -a crc' misbehaved on aarch64 with 32-bit uint_fast32_t.
   [bug introduced in coreutils-9.6]
  dd with the 'nocache' flag will now detect all failures to drop the
   cache for the whole file.  Previously it may have erroneously succeeded.
   [bug introduced with the "nocache" feature in coreutils-8.11]
  'ls -Z dir' would crash on all systems, and 'ls -l' could crash
   on systems like Android with SELinux but without xattr support.
   [bug introduced in coreutils-9.6]
  `ls -l` could output spurious "Not supported" errors in certain cases,
   like with dangling symlinks on cygwin.
   [bug introduced in coreutils-9.6]
  timeout would fail to timeout commands with infinitesimal timeouts.
   For example `timeout 1e-5000 sleep inf` would never timeout.
   [bug introduced with timeout in coreutils-7.0]
  sleep, tail, and timeout would sometimes sleep for slightly less
   time than requested.
   [bug introduced in coreutils-5.0]
  'who -m' now outputs entries for remote logins.  Previously login
   entries prefixed with the service (like "sshd") were not matched.
   [bug introduced in coreutils-9.4]
** Improvements
  'logname' correctly returns the user who logged in the session,
  on more systems.  Previously on musl or uclibc it would have merely
  output the LOGNAME environment variable.
    9.6
** Bug fixes
  cp fixes support for --update=none-fail, which would have been
   rejected as an invalid option.
   [bug introduced in coreutils-9.5]
  cp,mv --update no longer overrides --interactive or --force.
   [bug introduced in coreutils-9.3]
  csplit no longer creates empty files given empty input.
   [This bug was present in "the beginning".]
  ls and printf fix shell quoted output in the edge case of escaped
   first and last characters, and single quotes in the string.
   [bug introduced in coreutils-8.26]
  ls -l no longer outputs "Permission denied" errors on NFS
   which may happen with files without read permission, and which resulted
   in inaccurate indication of ACLs (missing '+' flag after mode).
   [bug introduced in coreutils-9.4]
  ls -l no longer outputs "Not supported" errors on virtiofs.
   [bug introduced in coreutils-9.4]
  mv works again with macFUSE file systems.  Previously it would
   have exited with a "Function not implemented" error.
   [bug introduced in coreutils-8.28]
  nproc gives more consistent results on systems with more than 1024 CPUs.
   Previously it would have ignored the affinity mask on such systems.
   [bug introduced with nproc in coreutils-8.1]
  numfmt --from=iec-i now works with numbers without a suffix.
   Previously such numbers were rejected with an error.
   [bug introduced with numfmt in coreutils-8.21]
  printf now diagnoses attempts to treat empty strings as numbers,
   as per POSIX. For example, "printf '%d' ''" now issues a diagnostic
   and fails instead of silently succeeding.
   [This bug was present in "the beginning".]
  pwd no longer outputs an erroneous double slash on systems
   where the system getcwd() was completely replaced.
   [bug introduced in coreutils-9.2]
  'shuf' generates more-random output when the output is small.
   [bug introduced in coreutils-8.6]
  `tail --follow=name` no longer waits indefinitely for watched
   file names that are moved elsewhere within the same file system.
   [bug introduced in coreutils-8.24]
  `tail --follow` without --retry, will consistently exit with failure status
   where inotify is not used, when all followed files become inaccessible.
   [This bug was present in "the beginning".]
  `tail --follow --pid=PID` will now exit when the PID dies,
   even in the presence of blocking inputs like unopened fifos.
   [This bug was present in "the beginning".]
  'tail -c 4096 /dev/zero' no longer loops forever.
   [This bug was present in "the beginning".]
** Changes in behavior
  'factor' now buffers output more efficiently in some cases.
  install -C now dereferences symlink sources when comparing,
   rather than always treating as different and performing the copy.
  kill -l and -t now list signal 0, as it's a valid signal to send.
  ls's -f option now simply acts like -aU, instead of also ignoring
   some earlier options.  For example 'ls -fl' and 'ls -lf' are now
   equivalent because -f no longer ignores an earlier -l.  The new
   behavior is more orthogonal and is compatible with FreeBSD.
  stat -f -c%T now reports the "fuseblk" file system type as "fuse",
   given that there is no longer a distinct "ctl" fuse variant file system.
** New Features
  cksum -a now supports the "crc32b" option, which calculates the CRC
   of the input as defined by ITU V.42, as used by gzip for example.
   For performance pclmul instructions are used where supported.
  ls now supports the --sort=name option,
   to explicitly select the default operation of sorting by file name.
  printf now supports indexed arguments, using the POSIX:2024 specified
   %<i>$ format, where '<i>' is an integer referencing a particular argument,
   thus allowing repetition or reordering of printf arguments.
  test supports the POSIX:2024 specified '<' and '>' operators with strings,
   to compare the string locale collating order.
  timeout now supports the POSIX:2024 specified -f, and -p short options,
   corresponding to --foreground, and --preserve-status respectively.
** Improvements
  cksum -a crc, makes use of AVX2, AVX512, and ARMv8 SIMD extensions
   for time reductions of up to 40%, 60%, and 80% respectively.
  'head -c NUM', 'head -n NUM', 'nl -l NUM', 'nproc --ignore NUM',
   'tail -c NUM', 'tail -n NUM', and 'tail --max-unchanged-stats NUM’
   no longer fail merely because NUM stands for 2**64 or more.
  sort operates more efficiently when used on pseudo files with
   an apparent size of 0, like those in /proc.
  stat and tail now know about the "bcachefs", and "pidfs" file system types.
   stat -f -c%T now reports the file system type,
   and tail -f uses inotify for these file systems.
  wc now reads a minimum of 256KiB at a time.
   This was previously 16KiB and increasing to 256KiB was seen to increase
   wc -l performance by about 10% when reading cached files on modern systems.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agoalsa: Update to version 1.2.14
Adolf Belka [Thu, 24 Apr 2025 13:43:43 +0000 (15:43 +0200)] 
alsa: Update to version 1.2.14

- Update from version 1.2.13 to 1.2.14
- alsa-lib, alsa-utils and alsa-ucm-conf all updated to that new version.
- Update of rootfile
- Changelog
    1.2.14
     alsa-lib
Core
    Delete alsalisp code
    include: prefer alsa/asoundlib.h for apps, dependency cleanups
    seq: Define new events for UMP EP/FB change notifications
    configure: Make sequencer dependent on rawmidi
    src/Versions.in.in: Update *_tempo_base name
Config API
    include: prefer alsa/asoundlib.h for apps, dependency cleanups
Control API
    control: remap - improve sync feature
    control: remap - add sync feature
    control: remap - separate event handling from map (preparation for sync)
    control: remap - add possibility to remap multiple source channels
    include: prefer alsa/asoundlib.h for apps, dependency cleanups
PCM API
    pcm: hw: do not reset tstamp_type in SND_PCM_APPEND mode (#2)
    pcm: hw: fix default timestamp type for O_APPPEND
    pcm: hw: do not reset tstamp_type in SND_PCM_APPEND mode
    pcm: fix minor typos in doc
RawMidi API
    rawmidi: ump - fix snd_ump_block_info_set_block_id double version #2
    rawmidi: Extensions for tied device and substream inactive flag
    rawmidi: ump - fix snd_ump_block_info_set_block_id double version
    rawmidi: ump - fix snd_ump_block_info_get_block_id double version
Rawmidi API
    rawmidi: Make rawmidi flag bits doxygen-style comments
    rawmidi: Extensions for tied device and substream inactive flag
Sequencer API
    seq: update_group_ports - rewrite blknames update
    ALSA: seq: Use SND_* instead of SNDRV_*
    ALSA: seq: Add missing UMP EP cap bit at snd_seq_create_ump_endpoint()
    seq: shuffle calloc arguments in snd_seq_hw_open (gcc warning)
    seq: add more checks to snd_seq_hw_set_client_info for older kernels
    seq: Fix typo of the group number in snd_seq_create_ump_endpoint()
    seq: Fix bogus return of snd_seq_client_info_get_ump_conversion()
    seq: seq.c - fix calloc arguments
    seq: seqmid - fix info->name is always true error
    seq: Define new events for UMP EP/FB change notifications
    seq: include UMP headers
Use Case Manager API
    ucm: do not bump syntax version to 8
    ucm: add '${LibCaps}' substitution
    ucm: remove @@LibraryVersion and @@SyntaxVersion variables
    ucm: format @@SyntaxVersion to 4 digits
    ucm: enhance documentation (sys-card + ranges + more)
    ucm: add @@LibraryVersion and @@SyntaxVersion variables
    ucm: add sys-card substitution
/Makefile.am
    Delete alsalisp code
/include/Makefile.am
    Delete alsalisp code
    include: prefer alsa/asoundlib.h for apps, dependency cleanups
ALSA Lisp
    Delete alsalisp code
Documentation
    doc: fix permissions
External PCM Filter Plugin SDK
    include: pcm extplug/ioplug: fix internal include
External PCM I/O Plugin SDK
    include: pcm extplug/ioplug: fix internal include
Kernel Headers
    Sync UAPI asequencer.h with 6.14 kernel
    Sync UAPI asound.h with 6.14 kernel
MIDI 2.0 (UMP)
    include/ump_msg.h: Fix endianness detection
    seq: include UMP headers
Test/Example code
    test/playmidi1: fix compilation caused by conflict between midifile.h and
    ump_msg.h
Utils
    utils: add missing alsa-topology.pc.in to EXTRA_DIST
     alsa-utils
Core
    axfer, topology: use only <alsa/asoundlib.h> include instead specific
     alsa-lib headers
ALSA Control (alsactl)
    alsactl: info - handle situations when devices are not available in kernel
    alsactl: info - print errors for next_device calls
    Remove trailing spaces in man pages
    alsactl: 90-alsa-restore.rules - fix AMD acp-pdm-mach link
    alsactl: 90-alsa-restore.rules - fix alsa_restore_go/std
Audio Transfer utility
    axfer, topology: use only <alsa/asoundlib.h> include instead specific
     alsa-lib headers
alsa-info.sh
    alsa-info: move man page to section 8 (administration commands)
    alsa-info.sh: Add alsa-ucm package to package filter
alsatplg (topology)
    Topology: NHLT: Intel: Improve error message for DMIC enable conflict
    Topology: NHLT: Intel: Fix mono DMIC configure for MTL platform
    axfer, topology: use only <alsa/asoundlib.h> include instead specific
     alsa-lib headers
    Topology: NHLT: Intel: Fix DMA slots config in SSP blob
amixer
    amixer: fix unknown TVL sequence print
aplay/arecord
    Remove trailing spaces in man pages
aplaymidi/arecordmidi
    Remove trailing spaces in man pages
aplaymidi2/arecordmidi2 (MIDI v2.0)
    arecordmidi2: fix unitialization variable error in read_ump_raw()
aseqdump
    aseqdump: Fix typos in messages
     alsa-ucm-conf
Core
    github: use ucm-validator2, use actions/checkout@v4
Configuration
    USB-Audio: Add support of HyperX SoloCast (USB ID 03f0:0b8b)
    ucm2: Qualcomm: add Asus Zenbook A14
    ucm2: Qualcomm: add Lenovo ThinkBook 16 support
    ucm2: Qualcomm: add HP Omnibook X14 support
    USB-Audio: Add focusrite scarlett 18i20 lineup
    USB-Audio: Add Roland BridgeCast One
    sof-soundwire: cs42l43: Switch mixer based on output volume
    ucm2: sof-soundwire: Correct include file path for dsp.conf
    USB-Audio: ALC4080 - add rear microphone support for 0414:a014 (Gigabyte
       Aorus Pro)
    sof-soundwire: Add LED support for cs35l56 amplifiers
    sof-soundwire: cs42l43: Drop headset mic from mic mute LED
    HDA: mics - don't create conflict link for Headphone Mic
    HDA: mics - improve the Jack selection
    HDA: mics - prefer 'Mic Jack' instead 'Headphone Jack'
    USB-Audio: ALC4080 - add support for ASUS B850-I (USB ID 0b05:1be1)
    sof-hda-dsp: Use common HDA initialization from /HDA/init.conf
    HDA: move led.conf include to more appropriate place
    ucm2: Qualcomm: fix typo in Lenovo T14s matching
    sof-soundwire: rt1318: add playback control switch
    ucm2: Qualcomm: add Lenovo Yoga Slim7x support
    ucm2: Qualcomm: add Lenovo T14s support
    ucm2: MediaTek: mt8390-evk: Add support for SOF
    Torradex: replace spaces with tabs when appropriate
    Torradex: fix wrong device names Headphone/Microphone
    USB-Audio: Add support for RME Fireface UCX II
    Qualcomm: Add QCS6490 RB3Gen2 HiFi config
    Qualcomm: Add QCM6490 IDP HiFi config
    ucm2: IO-Boards: Toradex: verdin: Add support for Toradex
    ucm2: IO-Boards: Toradex: verdin: Add support for Toradex
    ucm2: NXP: iMX6: Toradex: colibri-imx6: Add support for
    ucm2: NXP: iMX7: Toradex: colibri-imx7: Add support for
    ucm2: NXP: iMX8X: Toradex: colibri-imx8x: Add support for
    ucm2: NXP: iMX6: Toradex: apalis-imx6: Add support for
    ucm2: NXP: iMX8: Toradex: apalis-imx8: Add support for
    ucm2: IO-Boards: Toradex: apalis: Add support for Toradex
    USB-Audio: add Roland Quad-Capture support
    ucm2: HDA - remove HDA-Capture-value.conf and put contents directly to
  HDACaptureDevice macro
    ucm2: HDA: HiFi-analog/mic: Refactor the analog mic discovery
    GoXLR: Add 'Broadcast Stream Mix 2' to Capture if channels
    use SetLED in rt1318 init configuration
    Turn speaker LED accroding to rt1318 speaker status
    ucm2: use new SetLED macro to hide the implementation details
    common: add led.conf with SetLED macro to hide implementation details
    USB-Audio: Add support for TASCAM Model 12
    UCM2: Blobs: SOF: Cleanup blob names from .blob to .bin
    USB-Audio: alc4080: Add MSI PRO B650-A WIFI USB ID 0db0:9e6d
    USB-Audio: Improve support for Focusrite 4th Gen devices
    USB-Audio: GoXLR - fix the channel detection for mini, cleanups
    USB-Audio: set capture channels to 4 in UR22C-HiFi.conf
    sof-soundwire: Fix cs42l43 dmic initialisation
    sof-soundwire: Split cs42l43 dmic initialisation
    ucm2: add mt8183_mt6358_ts3a227_max98357
    ucm2: add mt8183_da7219_rt1015p
    ucm2: add acp3x-alc5682-alc1015
    DEBUG.md: add "Logs from PipeWire (wireplumber)" section
    USB-Audio: Revelator-IO-44-HiFi - fix device names (validator)
    Rename ucm2/AMD/acp3xalc5682m98 to ucm2/AMD/acp3x-alc5682-max98357
    Rename ucm2/AMD/acpd7219m98357 to ucm2/AMD/acp-da7219-rt5682-max98357
    Qualcomm: Add SM8750 MTP HiFi config
    rt722: change output volume of headphone to 0dB
    ucm2: USB-Audio: add Presonus Revelator IO 44 (USB194f:0424)
    USB-Audio: ALC4080 - add ASUS ROG Crosshair X870E Hero (USB ID 0b05:1b7c)
    sun4i-codec: add routing for headphones and internal speaker
    UCM2: sof-soundwire: Add setup of IIR, DRC, beamformer
    UCM2: sof-soundwire: Add setup of IIR, DRC, beamformer
    UCM2: sof-soundwire: Enable DRC and equalizers for
    UCM2: Intel: sof-hda-dsp: Enable Dmic0 DRC and TDFB
    UCM2: Blobs/SOF/IPC4: Add Beamformer blobs, update
    UCM2: Intel: sof-hda-dsp: Cleanup definitions
    UCM2: Intel: sof-hda-dsp: Move variables defitions from
    ucm: fix SectionDevice identifiers
    ucm2: whitespace fixes
    USB-Audio: ALC4080: add support for MSI MEG X670E GODLIKE (USB 0db0:e1f8)
    USB-Audio: ALC4080 - add ASUS ROG STRIX X870E-E GAMING WIFI (USB 0b05:1b9b)
    Configuration files for Roland Bridge Cast X V2
    ucm2: sof-soundwire: Correct FixedBootSequence for dmic info
    amd-soundwire: add support for AMD generic legacy machine driver
    sof-hda-dsp: Add back missing .conf suffix for product/user specific configs
    sof-soundwire: whitespace cleanup
    sof-soundwire: cs42l43: Correct CapturePCM and routing
    avs_nau8825: Fix JackControl name
    sof-soundwire: cs42l43-spk: Correct PlaybackPCM and routing
    sof-hda-dsp: Fix the case where sysfs dmi product_name attribute is not set
    UCM2: Intel: sof-hda-dsp: Fix handling of empty sys_vendor

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agopakfire.cgi: Changes to 'Install' confirmation page
Stephen Cuka [Thu, 24 Apr 2025 12:40:55 +0000 (06:40 -0600)] 
pakfire.cgi: Changes to 'Install' confirmation page

- Comma separate package names if multiple packages selected to install.

 - Display dependencies for package(s) to install in 'parent -> child' format.

 - Formatting and verbiage changes.

 - No functional changes to the install process.

Signed-off-by: Stephen Cuka <stephen@firemypi.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agocore195: Ship backup.pl and sources files
Adolf Belka [Thu, 24 Apr 2025 14:20:41 +0000 (16:20 +0200)] 
core195: Ship backup.pl and sources files

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agoupdate.sh: Core195 - remove any 3coresec ipblocklists during Core Update
Adolf Belka [Thu, 24 Apr 2025 14:20:40 +0000 (16:20 +0200)] 
update.sh: Core195 - remove any 3coresec ipblocklists during Core Update

- This ensures that any existing 3coresec blocklists that might have been selected
   when they existed will be removed from users systems.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agobackup.pl: Remove any 3coresec ipblocklists from old backups being restored
Adolf Belka [Thu, 24 Apr 2025 14:20:39 +0000 (16:20 +0200)] 
backup.pl: Remove any 3coresec ipblocklists from old backups being restored

- This patch ensures that any restore from an old backup cointaining the 3coresec lists
   will not restore the ipblocklist associated files for those lists.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agosources: remove the 3CORESEC ipblocklist entries from the sources file
Adolf Belka [Thu, 24 Apr 2025 14:20:38 +0000 (16:20 +0200)] 
sources: remove the 3CORESEC ipblocklist entries from the sources file

- The three 3CORESEC ipblocklists were removed and the web server urls completely
   removed on 3 Feb 2025. There was no explanation or announcement.
- There was some suggestion from their twitter account that they might be ressurrected
   which is why the removal was delayed. However there has been no further notification
   or indication of any change.
- From their website they focus on a turnkey platform provision and the provision of
   actionable threat information being provided on a subscription basis. So I believe
   they have decided to stop the free IPBlocklist provision but were not willing to
   make a clear announcement on that fact.
- This patch removes the three lists from the sources file.

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agocore195: Ship protobuf and protobuf-c
Michael Tremer [Thu, 24 Apr 2025 14:52:08 +0000 (14:52 +0000)] 
core195: Ship protobuf and protobuf-c

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agoprotobuf-c: Update to version 1.5.2
Adolf Belka [Thu, 24 Apr 2025 13:45:44 +0000 (15:45 +0200)] 
protobuf-c: Update to version 1.5.2

- Update from version 1.5.0 to 1.5.2
- Update of rootfile not required
- The update to protobuf caused a breaking change for the build of protobuf-c. Version
   1.5.2 has the fix for that issue in it.
- The changes to protobuf-c are such that the code has been significantly changed and
   the previous patch file for version 1.5.0 is no longer needed.
- Changelog
    1.5.2
* Chase compatibility issues with Google protobuf 30.0-rc1 by @edmonds in
  https://github.com/protobuf-c/protobuf-c/pull/762
* protoc-gen-c: Explicitly construct strings where needed for protobuf 30.x by
  @edmonds in https://github.com/protobuf-c/protobuf-c/pull/768
    1.5.1
* CMakeList.txt: Remove double hyphens by @AlessandroBono in
  https://github.com/protobuf-c/protobuf-c/pull/699
* Makefile.am: Distribute missing Config.cmake.in by @AlessandroBono in
  https://github.com/protobuf-c/protobuf-c/pull/700
* protobuf_c_message_unpack(): Fix memory corruption by initializing
  unknown_fields pointer by @smuellerDD in
  https://github.com/protobuf-c/protobuf-c/pull/703
* Fix CI issues with CMake by @clementperon in
  https://github.com/protobuf-c/protobuf-c/pull/714
* build.yml: Install libtool on OS X by @edmonds in
  https://github.com/protobuf-c/protobuf-c/pull/717
* build.yml: Set "fail-fast: false" so we can tell which jobs are failing by
  @edmonds in https://github.com/protobuf-c/protobuf-c/pull/718
* Update actions by @AndrewQuijano in
  https://github.com/protobuf-c/protobuf-c/pull/740
* Miscellaneous CI updates by @edmonds in
  https://github.com/protobuf-c/protobuf-c/pull/747
* build.yml: Build on more pull request activity types by @edmonds in
  https://github.com/protobuf-c/protobuf-c/pull/751
* Chase compatibility issues with Google protobuf >= 26.0 by @edmonds in
  https://github.com/protobuf-c/protobuf-c/pull/711
* Clean CMake by @clementperon in
  https://github.com/protobuf-c/protobuf-c/pull/719
* build.yml: Update Windows dependencies (abseil, protobuf) by @edmonds in
  https://github.com/protobuf-c/protobuf-c/pull/753
* build.yml: Ubuntu: Add 22.04, 24.04 by @edmonds in
  https://github.com/protobuf-c/protobuf-c/pull/754
* Order oneof union members from largest to smallest by @edmonds in
  https://github.com/protobuf-c/protobuf-c/pull/755
* More renaming of `protoc-c` to `protoc-gen-c` by @edmonds in
  https://github.com/protobuf-c/protobuf-c/pull/756
* cmake: Fix build when using ninja and protobuf-c already installed by
  @edmonds in https://github.com/protobuf-c/protobuf-c/pull/757
* protoc-gen-c: Log a deprecation warning when invoked as `protoc-c` by
  @edmonds in https://github.com/protobuf-c/protobuf-c/pull/758
* build.yml: Try running multiarch builds on Debian bookworm by @edmonds in
  https://github.com/protobuf-c/protobuf-c/pull/759

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agoprotobuf: Update to version 30.2
Adolf Belka [Thu, 24 Apr 2025 13:45:43 +0000 (15:45 +0200)] 
protobuf: Update to version 30.2

- Update from version 29.3 to 30.2
- Update of rootfile
- Changes in protobuf required changes in protobuf-c to prevent build crashes. An update
   for protobuf-c is combined in this patch set.
- protobuf, protobuf-c and frr (which depends on those) all built successfully.
- Changelog
    30.2
Compiler
    Restore generator headers in cmake install until the next breaking C++
     release (#20749) (b69f653)
C++
    Remove dllexport attribute on variable definition. (#20833) (7831669)
    Restore generator headers in cmake install until the next breaking C++
     release (#20749) (b69f653)
    Change how we decide which empty string implementation to use. (#20708)
     (221b2a0)
Java
    Remove dllexport attribute on variable definition. (#20833) (7831669)
    Add protobuf_maven artifacts to protobuf_maven_dev as well so they can
     still be referenced correctly using the dev namespace for dev-only
     targets. (#20771) (09b5078)
    Add volatile to featuresResolved (#20766) (b7f06f1)
    Restore generator headers in cmake install until the next breaking C++
     release (#20749) (b69f653)
    Restore custom protobuf maven namespaces to avoid polluting main maven
     namespace for non-dev dependencies as well. (#20739) (f4b0a79)
    Fix Java concurrency issue in feature resolution for old <=3.25.x gencode
     using lazy feature resolution. (#20751) (2dc9f35)
    Fix lite classes in the protobuf-java Maven release to be JDK8 compatible.
     (#20843) (7a4c63b)
Kotlin
    Restore custom protobuf maven namespaces to avoid polluting main maven
     namespace for non-dev dependencies as well. (#20739) (f4b0a79)
Csharp
    Restore generator headers in cmake install until the next breaking C++
     release (#20749) (b69f653)
Objective-C
    Restore generator headers in cmake install until the next breaking C++
     release (#20749) (b69f653)
Python
    Restore generator headers in cmake install until the next breaking C++
     release (#20749) (b69f653)
Ruby
    Restore generator headers in cmake install until the next breaking C++
     release (#20749) (b69f653)
Other
    Restore JDK8 compatibility in Bazel for libraries with dependencies from
     Maven (e.g. //java/util) (#20832) (da9cadc)
    30.1
Bazel
    Loosen py_proto_library check to be on the import path instead of full
     directory (i.e. excluding external/module-name prefix). (#20569) (3576a1f)
Compiler
    Fix python codegen crash when C++ features are used. (#20577) (250c550)
C++
    Fix python codegen crash when C++ features are used. (#20577) (250c550)
Java
    Remove Java runtime classes from kotlin release. (#20607) (4747628)
Kotlin
    Remove Java runtime classes from kotlin release. (#20607) (4747628)
Python
    Fix python codegen crash when C++ features are used. (#20577) (250c550)
Other
    Re-add system_python repo alias to MODULE.bazel (#20662) (ebb5224)
    30.0
Announcements
    This version includes breaking changes to: Objective-C, Python, C++.
        [Objective-C] Remove legacy WKT headers. (d9caebc)
        [Objective-C] Remove deprecated apis. (2a52b90)
        [Objective-C] Remove support for older generated code. (cffa590)
        [Objective-C] Remove GPBUnknownFieldSet. (2b93422)
        [Python] Fix closed enum validation under editions (72b3eda)
        [Python] Remove deprecated GetDebugString() from protobuf python cpp
 extension. (721a452)
        [Python] Remove deprecated reflection methods (292f964)
        [Python] Remove deprecated GetPrototype MessageFactory.GetPrototype(),
 (c261b49)
        [Python] Python nested message class qualname now contains the outer
 message name. (Previous qualname has the same result with name for
 nested message that outer message name was not included) (0720536)
        [Python] Remove deprecated Python RPC Service Interfaces (5ba74b1)
        [Python] Python setdefault behavior change for map field. (81da6b9)
        [Python] Remove deprecated py_proto_library macro.
        [C++] Prohibit using Bazel+MSVC to build protobuf (117e7bb)
        [C++] Remove deprecated Arena::CreateMessage. (d83a536)
        [C++] Remove CMake submodule support in favor of fetched or installed
 dependencies. (3f06ca4)
        [C++] Flip default behavior for handling cmake dependencies. (9cc685e)
        [C++] Add ASAN poisoning after clearing oneof messages on arena.
 (54d068e)
        [C++] Upgrade return type of type_name() and cpp_type_name() from
 const char* to absl::string_view. (a9ad51f)
        [C++] Remove deprecated RepeatedPtrField::ClearedCount(). (e8e3253)
        [C++] Upgrade return type of several string returning functions to
 absl::string_view. (d1990d9)
        [C++] Strip ctype from options in C++ (aebf8b9)
        [C++] Remove MutableRepeatedFieldRef::Reserve() in reflection (913f7b0)
        [C++] Remove deprecated JsonOptions alias. (e2eb0a1)
        [C++] Remove deprecated Arena::GetArena. (30ed452)
Bazel
    Remove reference to cc_proto_aspect (fa02f76)
    Remove deprecated bazel/system_python.bzl alias. (00f108c)
Compiler
    Add notices.h with information about our dependencies' licenses and add
     --notices flag to protoc to print the contents of that file. (a7df327)
    Have the protoc CLI properly report any parser warnings. (cafeaa4)
    Split protoc apart from libprotoc in our cmake configs. (b4b93b3)
    Begin adding extension numbers to SourceCodeInfo and FileDescriptorSet for
     tooling purposes. (9d7236b)
    Fix various unsigned to signed comparison warnings. (#17212) (67de087)
C++
    Fixing staleness tests (6abaf77)
    Add notices.h with information about our dependencies' licenses and add
     --notices flag to protoc to print the contents of that file. (a7df327)
    Backport: Remove if_constexpr usage for future Abseil compatibility
     (#20488) (450ee76)
    Add tests for older gcc versions we still support (#20463) (0778473)
    Fix a bug in handling of implicit-presence string_view fields. (#20403)
     (81196ac)
    Remove rules_rust dependency from MODULE.bazel for 30.x (#20310) (b8248f6)
    Upgrade abseil-cpp to 20250127 and use @com_google_absl -> @abseil-cpp and
     com_google_googletest -> @googletest canonical BCR names. (#20295) (df849cc)
    Replace std::any with a custom solution. (#20251) (6250d09)
    Make DebugString print debug output, enable debug markers for debug output
     (9a03332)
    Fix missing port_undef (#20052) (0644388)
    Use __builtin_expect_with_probability for proto field presence checks.
     (e958419)
    Enable meta-tagging for redaction purposes (1f48795)
    Breaking change: Prohibit using Bazel+MSVC to build protobuf (117e7bb)
    Breaking change: Upgrade return type of several string returning functions
     to absl::string_view. (d1990d9)
    Print the presence probability when analysis is enabled. (d4ba7ff)
    Split protoc apart from libprotoc in our cmake configs. (b4b93b3)
    Breaking change: Strip ctype from options in C++ (aebf8b9)
    Breaking change: Remove MutableRepeatedFieldRef::Reserve() in reflection
     (913f7b0)
    Remove stale references to C++14. (f4cc92c)
    Breaking change: Upgrade return type of type_name() and cpp_type_name()
     from const char* to absl::string_view. (a9ad51f)
    Update cmake minimum version to >=3.16. (21f535c)
    Migrate coded output stream arguments from const std::string& to
     absl::string_view. (0361a59)
    Breaking change: Remove deprecated Arena::GetArena. (30ed452)
    Remove the time (or time-based) entropy being added to Map's seed. (a7875bb)
    Don't use CLOCK_UPTIME_RAW if it won't be defined (#16951) (097dcda)
    Fix DEPENDENCIES in protobuf_generate() to accept multiple values instead
     of silently dropping (52887e1)
    Use ABSL_PREDICT_TRUE|FALSE instead of PROTOBUF_PREDICT_TRUE|FALSE. (fd47730)
    Breaking change: Flip default behavior for handling cmake dependencies.
     (9cc685edf867acf5...

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agocore195: Ship WireGuard
Michael Tremer [Thu, 24 Apr 2025 14:47:33 +0000 (14:47 +0000)] 
core195: Ship WireGuard

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agoMerge remote-tracking branch 'ms/wg' into next
Michael Tremer [Thu, 24 Apr 2025 09:34:23 +0000 (09:34 +0000)] 
Merge remote-tracking branch 'ms/wg' into next

7 weeks agofirewall: Add support for WireGuard peers to groups
Michael Tremer [Wed, 23 Apr 2025 10:35:52 +0000 (12:35 +0200)] 
firewall: Add support for WireGuard peers to groups

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agocore195: Ship functions.pl
Michael Tremer [Wed, 23 Apr 2025 09:51:07 +0000 (09:51 +0000)] 
core195: Ship functions.pl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agofunctions.pl: Fix Bug13842 - Add resolvedeps to pakfire Usage:.
Stephen Cuka [Wed, 23 Apr 2025 02:39:03 +0000 (20:39 -0600)] 
functions.pl: Fix Bug13842 - Add resolvedeps to pakfire Usage:.

- Add 'resolvedeps' command to pakfire 'Usage:'.

 - Break long lines in 'Usage:' so that they don't wrap.

 - Minor text and punctuation changes.

Signed-off-by: Stephen Cuka <stephen@firemypi.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agofirewall: Actually create WireGuard rules
Michael Tremer [Tue, 22 Apr 2025 17:59:43 +0000 (19:59 +0200)] 
firewall: Actually create WireGuard rules

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard-functions.pl: Return subnets as an array reference
Michael Tremer [Tue, 22 Apr 2025 17:58:01 +0000 (19:58 +0200)] 
wireguard-functions.pl: Return subnets as an array reference

I don't know why, but otherwise Perl will try to expand everything
everywhere all of the time.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agofirewall-lib.pl: Fix whitespace issues
Michael Tremer [Tue, 22 Apr 2025 17:48:37 +0000 (19:48 +0200)] 
firewall-lib.pl: Fix whitespace issues

No functional changes.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard-functions.pl: Return a hash reference instead of a hash when loading a...
Michael Tremer [Tue, 22 Apr 2025 17:47:23 +0000 (19:47 +0200)] 
wireguard-functions.pl: Return a hash reference instead of a hash when loading a peer

Perl is so absolutely fucking broken and dealing with hashes is such a
massive pain in the rear. I don't want to see this any more.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agofirewall.cgi: Use "peer" for the WireGuard "hosts"
Michael Tremer [Tue, 22 Apr 2025 16:12:20 +0000 (18:12 +0200)] 
firewall.cgi: Use "peer" for the WireGuard "hosts"

We don't distinguish between N2N and RW and therefore we should not use
the term "hosts" here.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agofirewall.cgi: Highlight any deleted WireGuard peers
Michael Tremer [Tue, 22 Apr 2025 16:09:31 +0000 (18:09 +0200)] 
firewall.cgi: Highlight any deleted WireGuard peers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agofirewall.cgi: Highlight WireGuard rules in the correct colour
Michael Tremer [Tue, 22 Apr 2025 15:48:20 +0000 (17:48 +0200)] 
firewall.cgi: Highlight WireGuard rules in the correct colour

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agoRun "./make.sh lang"
Michael Tremer [Tue, 22 Apr 2025 15:47:52 +0000 (17:47 +0200)] 
Run "./make.sh lang"

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agofirewall.cgi: Add dropdown to add WireGuard peers to a firewall rule
Michael Tremer [Tue, 22 Apr 2025 15:41:12 +0000 (17:41 +0200)] 
firewall.cgi: Add dropdown to add WireGuard peers to a firewall rule

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agomake.sh: Build wireguard-tools later
Michael Tremer [Thu, 2 Jan 2025 13:41:12 +0000 (13:41 +0000)] 
make.sh: Build wireguard-tools later

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Remove function to show configuration
Michael Tremer [Fri, 6 Dec 2024 19:15:44 +0000 (20:15 +0100)] 
wireguard.cgi: Remove function to show configuration

This code is no longer re-used

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard-functions.pl: Actually generate all configuration types
Michael Tremer [Fri, 6 Dec 2024 19:14:55 +0000 (20:14 +0100)] 
wireguard-functions.pl: Actually generate all configuration types

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: It is no longer possible to download the configuration again
Michael Tremer [Fri, 6 Dec 2024 19:08:33 +0000 (20:08 +0100)] 
wireguard.cgi: It is no longer possible to download the configuration again

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Merge both functions to generate a peer configuration
Michael Tremer [Fri, 6 Dec 2024 19:06:19 +0000 (20:06 +0100)] 
wireguard.cgi: Merge both functions to generate a peer configuration

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard-functions.pl: Unify fetching the endpoint
Michael Tremer [Fri, 6 Dec 2024 19:01:48 +0000 (20:01 +0100)] 
wireguard-functions.pl: Unify fetching the endpoint

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Redirect back to the right place on error
Michael Tremer [Fri, 6 Dec 2024 18:59:54 +0000 (19:59 +0100)] 
wireguard.cgi: Redirect back to the right place on error

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Bring back the warning about showing config only once
Michael Tremer [Fri, 6 Dec 2024 18:59:35 +0000 (19:59 +0100)] 
wireguard.cgi: Bring back the warning about showing config only once

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: No longer store the private keys for RW peers
Michael Tremer [Fri, 6 Dec 2024 18:56:05 +0000 (19:56 +0100)] 
wireguard.cgi: No longer store the private keys for RW peers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Send the N2N peer configuration to the client
Michael Tremer [Fri, 6 Dec 2024 18:50:33 +0000 (19:50 +0100)] 
wireguard.cgi: Send the N2N peer configuration to the client

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Change generate_peer_configuration to only generate RW stuff
Michael Tremer [Fri, 6 Dec 2024 18:31:35 +0000 (19:31 +0100)] 
wireguard.cgi: Change generate_peer_configuration to only generate RW stuff

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Don't offer to download the configuration for N2N
Michael Tremer [Fri, 6 Dec 2024 17:40:16 +0000 (18:40 +0100)] 
wireguard.cgi: Don't offer to download the configuration for N2N

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Create a new simplified dialogue to create a new N2N connection
Michael Tremer [Fri, 6 Dec 2024 17:35:42 +0000 (18:35 +0100)] 
wireguard.cgi: Create a new simplified dialogue to create a new N2N connection

The former process was very complicated and required that many settings
were copied across both sides. It seems to be much more elegant to
generate a new connection in one place and import it on the other side.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard: Accept FQDNs as endpoints
Michael Tremer [Fri, 6 Dec 2024 16:13:53 +0000 (17:13 +0100)] 
wireguard: Accept FQDNs as endpoints

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard: Install wg-dynamic
Michael Tremer [Fri, 6 Dec 2024 16:12:16 +0000 (17:12 +0100)] 
wireguard: Install wg-dynamic

This is a script that checks if we are connected with the correct peer.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard: Transparently replace 0.0.0.0/0 with 0.0.0.0/1 and 128.0.0.0/1
Michael Tremer [Fri, 6 Dec 2024 15:20:30 +0000 (16:20 +0100)] 
wireguard: Transparently replace 0.0.0.0/0 with 0.0.0.0/1 and 128.0.0.0/1

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard-functions.pl: Fix Perl syntax issue
Michael Tremer [Fri, 6 Dec 2024 13:34:38 +0000 (14:34 +0100)] 
wireguard-functions.pl: Fix Perl syntax issue

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Fix connection status for RW connections
Michael Tremer [Fri, 6 Dec 2024 13:30:20 +0000 (14:30 +0100)] 
wireguard.cgi: Fix connection status for RW connections

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Make it clear what peer is being edited
Michael Tremer [Fri, 22 Nov 2024 13:09:35 +0000 (14:09 +0100)] 
wireguard.cgi: Make it clear what peer is being edited

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Suggest a PSK for new N2N peers
Michael Tremer [Fri, 22 Nov 2024 13:04:40 +0000 (14:04 +0100)] 
wireguard.cgi: Suggest a PSK for new N2N peers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Show our own public key when creating N2N peers
Michael Tremer [Fri, 22 Nov 2024 12:53:07 +0000 (13:53 +0100)] 
wireguard.cgi: Show our own public key when creating N2N peers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Don't show the public key
Michael Tremer [Fri, 22 Nov 2024 12:38:13 +0000 (13:38 +0100)] 
wireguard.cgi: Don't show the public key

There is very little use now since we don't use this key for N2N
connections any more. RW clients will have the public key in their
configuration files.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Fix fetching connection status with multiple interfaces
Michael Tremer [Fri, 22 Nov 2024 12:34:35 +0000 (13:34 +0100)] 
wireguard.cgi: Fix fetching connection status with multiple interfaces

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard: Store the connection name as an alias
Michael Tremer [Mon, 30 Sep 2024 18:05:48 +0000 (20:05 +0200)] 
wireguard: Store the connection name as an alias

This way it is easier to find the correct interface on the console.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Allow to edit the port and automatically chose one
Michael Tremer [Mon, 30 Sep 2024 18:04:05 +0000 (20:04 +0200)] 
wireguard.cgi: Allow to edit the port and automatically chose one

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Add controls to download configuration
Michael Tremer [Mon, 30 Sep 2024 17:40:09 +0000 (19:40 +0200)] 
wireguard.cgi: Add controls to download configuration

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Store the private key for RW peers, too
Michael Tremer [Mon, 30 Sep 2024 17:00:40 +0000 (19:00 +0200)] 
wireguard.cgi: Store the private key for RW peers, too

We have so much key material stored that it does not make much sense to
drop a bit of it when it makes life so much harder.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard: Implement creating an extra interface per N2N peer
Michael Tremer [Mon, 30 Sep 2024 16:53:45 +0000 (18:53 +0200)] 
wireguard: Implement creating an extra interface per N2N peer

When importing a configuration, we will receive a new private key which
we cannot apply to the original interface. Therefore we need to create a
new one for each peer. RW peers will remain on wg0 which will always
exist.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard-functions.pl: Store networks in CIDR notation only
Michael Tremer [Mon, 30 Sep 2024 16:49:07 +0000 (18:49 +0200)] 
wireguard-functions.pl: Store networks in CIDR notation only

wg(8) does not accept anything else.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Implement a way to import a connection
Michael Tremer [Sun, 29 Sep 2024 12:17:10 +0000 (14:17 +0200)] 
wireguard.cgi: Implement a way to import a connection

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Rename function to check keys
Michael Tremer [Fri, 27 Sep 2024 16:53:51 +0000 (18:53 +0200)] 
wireguard.cgi: Rename function to check keys

This function can check all types of keys and not only the public key.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard-functions.pl: Don't send DNS configuration to n2n peers
Michael Tremer [Fri, 27 Sep 2024 16:03:14 +0000 (18:03 +0200)] 
wireguard-functions.pl: Don't send DNS configuration to n2n peers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Rename "generate_client_configuration" to "generate_peer_configuration"
Michael Tremer [Fri, 27 Sep 2024 15:58:36 +0000 (17:58 +0200)] 
wireguard.cgi: Rename "generate_client_configuration" to "generate_peer_configuration"

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Normalize filenames
Michael Tremer [Fri, 27 Sep 2024 15:55:46 +0000 (17:55 +0200)] 
wireguard.cgi: Normalize filenames

This is because Windows clients won't import any configurations that
have spaces in the filename. Therefore we replace it and remove anything
else unwanted on the way.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard: Select the correct source IP address for N2N peers
Michael Tremer [Fri, 27 Sep 2024 15:39:22 +0000 (17:39 +0200)] 
wireguard: Select the correct source IP address for N2N peers

This is so that the firewall chooses the correct IP address when trying
to establish connections to the remote networks.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agomisc-progs: Fix compiling wireguardctrl
Michael Tremer [Sat, 21 Sep 2024 10:12:05 +0000 (12:12 +0200)] 
misc-progs: Fix compiling wireguardctrl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Allow to configure a custom endpoint
Michael Tremer [Fri, 20 Sep 2024 15:12:26 +0000 (17:12 +0200)] 
wireguard.cgi: Allow to configure a custom endpoint

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Permit empty client pool
Michael Tremer [Fri, 20 Sep 2024 14:54:09 +0000 (16:54 +0200)] 
wireguard.cgi: Permit empty client pool

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agofirewall: Add WireGuard RW to the UI
Michael Tremer [Thu, 12 Sep 2024 17:39:26 +0000 (19:39 +0200)] 
firewall: Add WireGuard RW to the UI

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard: Move functions into their own file
Michael Tremer [Wed, 11 Sep 2024 00:24:49 +0000 (02:24 +0200)] 
wireguard: Move functions into their own file

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agofirewall: Allow WG traffic when the firewall is in permissive mode
Michael Tremer [Fri, 6 Sep 2024 16:20:46 +0000 (18:20 +0200)] 
firewall: Allow WG traffic when the firewall is in permissive mode

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Only show the location if we have something
Michael Tremer [Fri, 6 Sep 2024 16:10:48 +0000 (18:10 +0200)] 
wireguard.cgi: Only show the location if we have something

Otherwise the text won't be centered in the box which looks a little bit
wrong.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agoservices.cgi: Don't always try expand the status column unless asked
Michael Tremer [Fri, 6 Sep 2024 16:02:26 +0000 (18:02 +0200)] 
services.cgi: Don't always try expand the status column unless asked

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Remove the large box to warn people that the configuration will only...
Michael Tremer [Fri, 6 Sep 2024 15:59:58 +0000 (17:59 +0200)] 
wireguard.cgi: Remove the large box to warn people that the configuration will only be shown once

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Add a button to return after creating a new connection
Michael Tremer [Fri, 6 Sep 2024 15:56:15 +0000 (17:56 +0200)] 
wireguard.cgi: Add a button to return after creating a new connection

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agoAQM: Ignore WireGuard interfaces
Michael Tremer [Wed, 14 Aug 2024 16:49:56 +0000 (18:49 +0200)] 
AQM: Ignore WireGuard interfaces

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agoweb UI: Add a menu entry
Michael Tremer [Wed, 14 Aug 2024 16:40:09 +0000 (18:40 +0200)] 
web UI: Add a menu entry

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agomisc-progs: Update rootfile
Michael Tremer [Wed, 14 Aug 2024 16:33:44 +0000 (18:33 +0200)] 
misc-progs: Update rootfile

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Don't allow creating RW connections if there is no address space
Michael Tremer [Wed, 14 Aug 2024 16:23:55 +0000 (18:23 +0200)] 
wireguard.cgi: Don't allow creating RW connections if there is no address space

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Don't show an empty table if there are no peers
Michael Tremer [Wed, 14 Aug 2024 16:14:26 +0000 (18:14 +0200)] 
wireguard.cgi: Don't show an empty table if there are no peers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard: Install empty configuration files
Michael Tremer [Wed, 14 Aug 2024 15:55:06 +0000 (15:55 +0000)] 
wireguard: Install empty configuration files

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agofirewall: Fix typo in "iptables"
Michael Tremer [Wed, 14 Aug 2024 15:51:19 +0000 (15:51 +0000)] 
firewall: Fix typo in "iptables"

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Rename local subnets to allowed subnets
Michael Tremer [Thu, 25 Apr 2024 18:36:42 +0000 (20:36 +0200)] 
wireguard.cgi: Rename local subnets to allowed subnets

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agomisc-progs: Add wireguardctrl
Michael Tremer [Wed, 17 Apr 2024 17:13:32 +0000 (17:13 +0000)] 
misc-progs: Add wireguardctrl

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard-tools: New package
Michael Tremer [Sun, 14 Apr 2024 13:50:08 +0000 (13:50 +0000)] 
wireguard-tools: New package

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard: Block unauthorized traffic
Michael Tremer [Thu, 25 Apr 2024 18:32:57 +0000 (20:32 +0200)] 
wireguard: Block unauthorized traffic

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard: Rename routes to remote subnets
Michael Tremer [Thu, 25 Apr 2024 18:20:13 +0000 (20:20 +0200)] 
wireguard: Rename routes to remote subnets

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agolang: Add translation for "remarks"
Michael Tremer [Thu, 25 Apr 2024 18:16:38 +0000 (20:16 +0200)] 
lang: Add translation for "remarks"

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Implement toggle enable/disable peers
Michael Tremer [Thu, 25 Apr 2024 18:13:56 +0000 (20:13 +0200)] 
wireguard.cgi: Implement toggle enable/disable peers

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Make the client configuration downloadable
Michael Tremer [Thu, 25 Apr 2024 18:03:49 +0000 (20:03 +0200)] 
wireguard.cgi: Make the client configuration downloadable

I believe this is much better than copy & paste.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Implement DNS configuration for clients
Michael Tremer [Thu, 25 Apr 2024 17:50:45 +0000 (19:50 +0200)] 
wireguard.cgi: Implement DNS configuration for clients

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Correctly compose the FQDN
Michael Tremer [Thu, 25 Apr 2024 17:33:21 +0000 (19:33 +0200)] 
wireguard.cgi: Correctly compose the FQDN

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agogeneral-functions.pl: Always load the main settings
Michael Tremer [Thu, 25 Apr 2024 17:32:52 +0000 (19:32 +0200)] 
general-functions.pl: Always load the main settings

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Call start instead of reload
Michael Tremer [Thu, 25 Apr 2024 17:22:01 +0000 (19:22 +0200)] 
wireguard.cgi: Call start instead of reload

I didn't implement reload in the helper.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Dynamically allocate a pool address for clients
Michael Tremer [Thu, 25 Apr 2024 17:15:53 +0000 (19:15 +0200)] 
wireguard.cgi: Dynamically allocate a pool address for clients

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Ensure that AllowedIPs are in CIDR format
Michael Tremer [Thu, 25 Apr 2024 16:48:22 +0000 (18:48 +0200)] 
wireguard.cgi: Ensure that AllowedIPs are in CIDR format

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard: Route the client pool
Michael Tremer [Thu, 25 Apr 2024 16:47:49 +0000 (18:47 +0200)] 
wireguard: Route the client pool

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Show a QR code that contains the client configuration
Michael Tremer [Thu, 25 Apr 2024 15:32:32 +0000 (17:32 +0200)] 
wireguard.cgi: Show a QR code that contains the client configuration

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Show client configuration after creating a client
Michael Tremer [Thu, 25 Apr 2024 15:14:27 +0000 (17:14 +0200)] 
wireguard.cgi: Show client configuration after creating a client

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Check if the client pool is in use and prevent editing
Michael Tremer [Thu, 25 Apr 2024 11:04:01 +0000 (13:04 +0200)] 
wireguard.cgi: Check if the client pool is in use and prevent editing

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Add client pool config option
Michael Tremer [Thu, 25 Apr 2024 10:57:08 +0000 (12:57 +0200)] 
wireguard.cgi: Add client pool config option

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Implement creating host-to-net connections
Michael Tremer [Thu, 25 Apr 2024 10:51:46 +0000 (12:51 +0200)] 
wireguard.cgi: Implement creating host-to-net connections

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
7 weeks agowireguard.cgi: Move creating private keys into a separate function
Michael Tremer [Thu, 25 Apr 2024 10:18:14 +0000 (12:18 +0200)] 
wireguard.cgi: Move creating private keys into a separate function

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>