summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-connectivity/networkmanager
Commit message (Collapse)AuthorAgeFilesLines
* networkmanager: add dependency on pyhthon3-pygobject-nativeRoss Burton2023-05-261-0/+1
| | | | | | | | The build of NM involves running Python that uses PyGObject, so add that to DEPENDS. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Turn ppp support into a packageconfig optionThomas Perrot2023-05-231-1/+1
| | | | | | | Enable it only if ppp is in distro features Signed-off-by: Thomas Perrot <thomas.perrot@bootlin.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openconnect: add new recipePetr Gotthard2023-05-151-0/+46
| | | | | | | | Integration of the OpenConnect VPN client to the NetworkManager https://gitlab.gnome.org/GNOME/NetworkManager-openconnect Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-fortisslvpn: add new recipePetr Gotthard2023-05-143-0/+410
| | | | | | | | Fortinet SSLVPN support for NetworkManager https://gitlab.gnome.org/GNOME/NetworkManager-fortisslvpn Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.42.4 -> 1.42.6Wang Mingyu2023-04-231-1/+1
| | | | | | | | | | | | | | | | | | Changelog: ========== * Emit the dhcp-change dispatcher event also after a lease renewal. * Fix assertion failure on DHCP renewal. * Add support for EC2 IMDSv2 in nm-cloud-setup. * Allow setting tunnel flags for ip6gre & ip6gretap connection profiles. * Improve the Wi-Fi hotspot functionality. * Fix setting the Wi-Fi roaming policy based on the number of seen BSSIDs. * Support the "no-aaaa" resolv.conf option. * Some oFono fixes. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.42.0 -> 1.42.4Wang Mingyu2023-03-172-39/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | 0001-libnm-std-aux-Adjust-signature-of-_nm_assert_fail_in.patch removed since it's not available in 1.42.4 Changelog: ========== * Fix a possible crash when [global-dns] is used and improve the documentation. * Documentation improvements. * Add build option to set the mobile-broadband-provider-info database path. * Add new "ipv[46].replace-local-rule" setting to control whether to remove the local route rule that is automatically generated. * Add the DHCPv6 IAID to the lease information exposed in /run and on D-Bus. * Fix assuming team connections at boot. * Fix race condition when setting the MAC address of an OVS interface. * Fix constructing the IPv4 name servers variable passed to dispatcher scripts. * Don't use tentative IPv6 address to resolve the system hostname via DNS. * Deprecate the "Master" property of the NMActiveConnection D-Bus object in favor of the new "Controller" property. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Fix build with muslKhem Raj2023-02-182-0/+39
| | | | | | | __assert_fail signature is assuming glibc which is fine for glibc systems but we have to consider musl case too. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.40.10 -> 1.42.0Wang Mingyu2023-02-181-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ * Added support for source load balancing for Ethernet Bonds. * Allow specifying vhost name (SNI) for a manually DNS-over-TLS server. Only works with systemd-resolved plugin. * Connections can now be activated on a loopback interface. * Added support of IPv4 ECMP routes. The ECMP routes will get merged automatically but the user need to configure them as single-hop routes specifying a valid weight. * Add new "reapply" dispatcher event. * Added support of VTI and VTI6 ip-tunnels along with a new property, "ip-tunnel.fwmark". * VLAN can now support 802.1ad tagging instead of 802.1Q. * Invocations of iptables now use "--wait 2" to handle races with concurrent calls. This fixes misbehavior with IPv4 shared mode. * The DHCP client-id and DHCPv6 DUID are now exposed along with the lease information. * Optionally suppress adding direct route to an external VPN gateway with the new "ipv[46].auto-route-ext-gw" property. * Open vSwitch support gained new properties: "ovs-dpdk.n-rxq-desc", "ovs-dpdk.n-txq-desc", "ovs-interface.ofport-request" and "ovs-port.trunks". * Added support of "other_config" for OVS bridge, port or interface. This property is not supported by nmcli. * nmtui now supports editing Wi-Fi WPA-Enterprise, Ethernet with 802.1X authentication and MACsec connection profiles. * nmcli now allows changing "connection.uuid" and "connection.type" properties in offline mode and setting the UUID when creating a connection. * nmcli now accepts abbreviations for the UUID with the connection selector in `nmcli connection $operator uuid $uuid`. * DHCPv6 leases are now declined when addresses fail DAD. * Documentation improvements. * Many internal improvements and bug fixes. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.40.0 -> 1.40.10Wang Mingyu2023-01-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== * Fix the evaluation of the autoconnect retries. * nm-cloud-setup now preserves addresses added externally. * Ensure that dnsmasq is stopped after changing the dns backend and restarting the service. * Fix honoring an explicit DHCPv6 DUID with dhclient. * Other various fixes. * Fixed a bug that caused devices (MACsec in particular) to be stuck in UNAVAILABLE state and not transition to DISCONNECTED if the carrier was ready too early. * Improved interoperability of MACsec with some Aruba switches by allowing CKN shorter than 64 characters. * Fixed an assertion failure when restarting NetworkManager with MACsec links configured. * Fixed a possible DHCP helper crash when handling failure to connect to D-Bus. * Corrected calculation of expiration time for items configured from IPv6 neighbor discovery messages. * Various fixes for platforms that don't allow unaligned memory access. * team: also set empty port configuration so teamd knows about the port. * team: restore port configuration after teamd respawn. * dhcp: revert restarting DHCP when MAC address changes, for example during a bond fail over. * various documentation fixes. * fix non-exported ABI in libnm which was wrongly present in the header files but unusable so far. * ifcfg-rh: fix writing ethtool pause settings to file. * core: set "proto static" for manual routing rules configured by NetworkManager. * Various minor bugfixes. * Ensure that resolv.conf gets updated when the configuration changes. * Fix setting as bond primary an interface that doesn't exist yet when the bond is activated. * The number of autoconnect retries is now accounted independently for each device when there are profiles with multi-connect=multiple. * Don't print duplicate entries in the output of "NetworkManager --print-config" * Fix the ifcfg-rh plugin to properly read infiniband P-Key connection profiles without an explicit interface name. * Allow the removal of a bond port connection profile from the bond via nmcli. * Fix race condition during the activation of veth profiles when the peer already exists. * Decline the DHCPv6 lease if all addresses fail IPv6 duplicate address detection (DAD). * Wait that devices get carrier before trying to resolve the system hostname on them via DNS. * Fix race condition during the initial activation of OVS interfaces. * Profiles generated by nm-initrd-generator now have lower than default priority. * Fix error when adding many SR-IOV virtual functions (VFs). Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: fix /etc/resolv.conf handlingChen Qi2022-12-231-4/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The current handling of /etc/resolv.conf by NM has some problems. When networkd is not configuring network, and there's 'ip=dhcp' in kernel command line, the /run/NetworkManager/resolv.conf file is not created, resulting in /etc/resolv.conf being a dead symlink. This is because NM is treating the network interface as externally configured and will not try to reconfigure it again. This means if we want NM to work properly with /etc/resolv.conf, we've got to either ensure there's no 'ip=dhcp' in kernel command line, or we've got to ensure networkd is configuring network. This is weird because normally we should not enable two network managers at the same time. Note that NM syncs part of its codes with networkd, which is the reason I think it happens to work when these two network configuration tools are configuring the same interface at the same time. In fact, NM now works well with resolved. It sends the DNS info it gets to resolved unconditionally by default (the behavior could be disabled in configuration file). Looking at the original commit that sets up the update-alternatives mechanism, it says: """ This brings the networkmanager in sync with how systemd-resolved and connman work. Additionally this allows it to function with a read-only rootFS. """ I guess the author was using systemd but disabling resolved, and the author wanted to use read-only rootFS. In order to keep such combination still works, change to use PACKAGECONFIG to handle things, and when 'man-resolv-conf' is enabled, the above combination could still work. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: install config files into correct placeChen Qi2022-12-091-2/+2
| | | | | | | | | | | | | | | The current location has no effect, because NetworkManager is not looking for config files there. In meson.build, we have: nm_pkglibdir = join_paths(nm_prefix, 'lib', nm_name) config_extra_h.set_quoted('NMLIBDIR', nm_pkglibdir) It's clear that the configuration directory should be nonarch_libdir instead of libdir. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: fix dhcpcd PACKAGECONFIGChen Qi2022-12-091-1/+1
| | | | | | | | | | | | | | Without this patch, even if dhcpcd is enabled, the NetworkManager cannot find it. Below are the messages from NetworkMananger: dhcp: init: DHCP client 'dhcpcd' not available dhcp: init: Using DHCP client 'internal' The problem is that dhcpcd needs to be specified as a path, otherwise NetworkManager tries to find it in /usr/sbin/dhcpcd. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: upgrade 1.10.0 -> 1.10.2Wang Mingyu2022-11-191-1/+1
| | | | | | | | | | | | | | Changelog: ========= * IP condfiguration is no longer required in TAP mode. * Fix initialization of secret flags. * Add support for DOMAIN-SEARCH option. * Set data-ciphers option with chosen cipher. * Update Brazilian Portuguese, Croatian, Danish, Georgian, Polish, Serbian, Slovenian, Swedish, Turkish and Ukrainian translations. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: upgrade 1.8.18 -> 1.10.0wangmy2022-09-131-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: ============= * Add support for "allow-compression" parameter. * Fix a regression in preserving the "tls-auth" settings. * Add support for "tls-min" and "tls-cipher" parameters. * Include the new gnome-control-center name in the AppData file. * Drop libnm-glib support, nobody is likely using it anymore. * Fix importing profiles with a PKCS#12 CA. * Make sure the plugin object links with glib. * Dropped dependency on intltool. * Updated Basque, Brazilian Portuguese, Chinese (China), Croatian, Czech, Danish, Dutch, Georgian, Indonesian, Polish, Serbian, Spanish, Swedish, Turkish and Ukrainian translations. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: update 1.38.0 -> 1.40.0Adrian Freihofer2022-08-292-28/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | NetworkManager: * Drop unused, internal systemd DHCPv4 client. This is long replaced by nettools' n-dhcp4 implementation. * The nmcli command now supports --offline argument with "add" and "modify" commands, allowing operation on keyfile-formatted connection profiles without the service running (e.g. during system provisioning). * The device state file /run/NetworkManager/devices/$ifindex now has new sections [dhcp4] and [dhcp6] containing the DHCP options for the current lease. * Add multipath TCP (MPTCP) support. NetworkManager can now configure IP addresses as MPTCP endpoints. This is configurable via the "connection.mptcp-flags" property. The default setting is such that MPTCP handling is automatically enabled if the kernel sysctl "/proc/sys/net/mptcp/enabled" indicates so. NetworkManager does not enable the MPTCP sysctl or adjust the limits (ip mptcp limits). The administrator or the distribution is supposed to configure the desired system settings. Note that strict reverse path filtering (rp_filter) breaks many MPTCP use cases. With MPTCP handling enabled, NetworkManager will relax a strict (1) rp_filter to loose (2). Otherwise rp_filter is untouched by NetworkManager. * NetworkManager expanded log messages for invalid DHCP options. * Fix the requirement of hardware address for DHCPv6, by dropping it. * Increase the PMK lifetime for Wi-Fi connections using WPA-EAP. * "nmcli networking off" now waits for deactivations to complete. * Improve the appearance of nm-settings-nmcli man page by preserving paragraphs. * Support enabling ipv4ll alongside DHCPv4 and static addressing. * Support configuring "ipv6.mtu". * Honor "nm.debug" kernel command line to enable debug logging of NetworkManager. * NetworkManager reads the kernel command line "/proc/cmdline" for several purposes, including "nm.debug" for enabling debugging and the "match.kernel-command-line" setting in the profile. NetworkManager now first looks now for "/run/NetworkManager/proc-cmdline", which allows to overwrite the command line. * Improve the reapply of non-bridge properties. * Honor adding a Bluetooth NAP connection with all available methods. * Improve carrier detection. * During the build, stop relying on intltool for i18n and use gettext only. * Undeprecate nm_remote_connection_get_secrets() in libnm. * NetworkManager now will restart DHCP if the MAC changes on a device. * Several internal improvements. Recipe: * Drop the last patch :-). -Difcfg_rh=false is now honored and the distro detection patch is no longer needed. * Fix: move /etc/resolv-conf.NetworkManager to daemon package * Fix: remove ppp rdepends from daemon. The ppp plugin rdepends on ppp. * ifupdown plugin requires now bash not sh. But the ifupdown is an optional plugin anyway. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: fix iptables and nft pathsJim Broadus2022-08-061-0/+2
| | | | | | | | | | | | | | | | | | | | The NetworkManager meson.build is searching for iptables and nft by passing absolute paths to meson's find_program. The result is that it locates tools on the host machine when they exist at those locations. If they don't, it uses default locations. This often works out, but in some cases, such as when the host uses a merged usr scheme and the build target does not, the paths will be incorrect and the tools won't be found at runtime. These could be PACKAGECONFIG options, but since they have fallback values, completely disabling the use of either iptables or nft would require patching the meson.build or setting a bogus location. Note that this meson.build file follows the same pattern elsewhere, but most cases are already covered by PACKAGECONFIG options. Signed-off-by: Jim Broadus <jim@thruwave.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: fix build with enabled pppJavier Viguera2022-07-021-1/+1
| | | | | | | | | | | | | | | | | If 'ppp' packageconfig option is enabled, but the build system does NOT have pppd binary installed, the build fails with: | Has header "pppd/pppd.h" : YES | Program pppd /sbin/pppd /usr/sbin/pppd found: NO | | ../NetworkManager-1.36.2/meson.build:570:4: ERROR: Assert failed: pppd required but not found, please provide a valid pppd path or use -Dppp=false to disable it This is due to meson trying to look for the 'pppd' binary in the build system when it should not. If the build system does not contain pppd, the build fails. Signed-off-by: Javier Viguera <javier.viguera@digi.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: udpate to 1.38.0Adrian Freihofer2022-06-062-36/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add support for route type "throw". * Fix bug setting priority for IP addresses. * Static IPv6 addresses from "ipv6.addresses" are now preferred over addresses from DHCPv6, which are preferred over addresses from autoconf. This affects IPv6 source address selection, if the rules from RFC 6724, section 5 don't give a exhaustive match. * Static IPv6 addresses from "ipv6.addresses" are now interpreted with first address being preferred. Their order got inverted. This is now consistent with IPv4. * Wi-Fi hotspots will use a (stable) random channel number unless one is chosen manually. * Don't use unsupported SAE/WPA3 mode for AP mode. * NetworkManager will no longer advertise frequencies as supported when they're disallowed in configured regulatory domain. * Attempt to connect to WEP-encrypted Wi-Fi network will now fail gracefully with a recent version of wpa_supplicant when built without WEP support. As long as wpa_supplicant supports WEP, NetworkManager will continue to work. * Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the NIC does not support PMF. This is known to cause problems in some setups. It is still possible to explicitly configure wifi.key-mgmt=sae for WPA3. * Add new dummy crypto backend "null" that does nothing. NetworkManager uses the crypto library when handling certificates for 802.1x profiles. * Veth devices with name "eth*" are now managed by default via the udev rule. This is to support managing the network in LXD containers. * The hostname received from DHCP is now shortened to the first dot (or to 64 characters, whatever comes first) if it's too long. * As the insecure WEP encryption for Wi-Fi network is phased out, nmcli now discourages its use when activating or modifying a profile. * Fix connectivity checks in case the check endpoint address resolves to multiple addresses. * Workaround libcurl blocking NetworkManager while resolving DNS names. * nmcli: indicate missing Wi-Fi hardware when showing rfkill setting. * nmcli: add connection migrate command to move a profile to a specified settings plugin. This allows to convert profiles in the deprecated ifcfg-rh format to keyfile. * Set "src" attribute for routes from DHCPv4 to the leased address. This helps with source address selection. * Updated translations. * Various bugfixes and internal improvements. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: use nftables by defaultAdrian Freihofer2022-06-061-1/+5
| | | | | | | | | | | | | | | | From NEWS file of netowrkmanager 1.32: firewall: add nftables firewall backend for configuring IPv4 NAT with shared mode. Now two backends are supported, "iptables" and "nftables". The default gets detected based on whether /usr/sbin/nft or /usr/sbin/iptables is installed, with nftables preferred. With this change nftables is not the prefered backend also with OE. But it's still possible to set NETWORKMANAGER_FIREWALL_DEFAULT back to iptables. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: simplify selective installationAdrian Freihofer2022-06-061-42/+73
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The main motivation for this rework is to support compiling the NetworkManager with many plugins, but to install only a few of them in a firmware image. This is advantageous when different products with different network interfaces should be supported by only one binary distribution. This is more in line with the way NetworkManager is designed and used by other binary Linux distributions. Basically this is already supported since the last rework of the networkmanager recipe. However, the rrecomments from networkmanager to all available plugins is not straight forward to be used in such a scenario. Installing only a subset of the compiled plugins required to override the rrecommends from networkmanager to the plugins in some way. To simplify the usage the networkmanager package is now an empty meta package and networkmanager itself gets moved to a new networkmanager-daemon package. This allows to keep backward compatibility: Installing the networkmanager package still adds all compiled plugins to the firmware. But with the new package splitting it's also possible to install for example only the networkmanager-wifi but not the networkmanager-wwan package even if networkamanger has been compiled with the modemmanager PACAKGECONFIG flag enabled as well. The relation from plugins to services is now a stronger rdepends which reflects better how NetworkManager is supposed to be used. If a plugin is installed but the required service is not the plugin periodically tries to connect to the service and reports error messages to the syslog if the service is not available. Therefore it's better to make the installation of the plugin optional but not the installation of the services. The bash-completion package adds support for the nmcli command line utility. This change also moves the bash completion configuration to a new package networkmanager-nmcli-bash-completion. This is more consistent anyway but gets even more important when the networkmanager package gets optional. To simplify the usage of all these packages a SUMMARY:${PN}-.. for each packages has been added. The separation of the doc packages has been removed. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: improve dependency handlingAdrian Freihofer2022-06-061-2/+17
| | | | | | | | | | Plugins of networkmanager redpends on related services. If for example modemmanager or wpa-supplicant is not installed but the related networkmanager plugin is, the plugin writes error messages to the syslog. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: fix parallel build failureYi Zhao2022-05-042-0/+35
| | | | | | | | | | | | | Add dependency libnm_client_public_dep to libnm-client-test to fix parallel build error: | In file included from ../NetworkManager-1.36.0/src/libnm-client-test/nm-test-utils-impl.c:10: | ../NetworkManager-1.36.0/src/libnm-client-public/NetworkManager.h:47:10: fatal error: nm-enum-types.h: No such file or directory | 47 | #include "nm-enum-types.h" | | ^~~~~~~~~~~~~~~~~ Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.36.0 -> 1.36.2Wang Mingyu2022-03-172-7/+4
| | | | | | | | | | | | | | | | | | 0001-do-not-ask-host-for-ifcfg-defaults.patch refreshed for new version Changelog: ========== * When the list of plugins is not specified via "main.plugins" in NetworkManager.conf and no build-time default is set with "--with-config-plugins-default" configure argument, now all known plugins found in the plugin directory are loaded (and the built-in "keyfile" plugin is preferred over others). * Preserve external ports during checkpoint rollback * Fix removal of ovsdb entry when an OVS interface goes away * Fix DNS configuration for WWAN connections Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: upgrade 1.8.16 -> 1.8.18Wang Mingyu2022-03-171-1/+1
| | | | | | | | | | | Changelog: ========== * Gtk4 version of the editor plugin is now available (for use with Control Center of GNOME 42 or later). * Update Catalan, Croatian, Czech, Hebrew and Slovenian translations. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: fix installed-vs-shipped errorKai Kang2022-03-071-1/+1
| | | | | | | | | | | | | | | | Fix installed-vs-shipped error of networkmanager: | ERROR: networkmanager-1.36.0-r0 do_package: QA Issue: networkmanager: Files/directories were installed but not shipped in any package: | /usr/lib/firewalld | /usr/lib/firewalld/zones | /usr/lib/firewalld/zones/nm-shared.xml | Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them with in do_install. | networkmanager: 3 installed and not shipped files. [installed-vs-shipped] Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Update LICENSE variable to use SPDX license identifiersKhem Raj2022-03-041-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: replace deprecated licensesAdrian Freihofer2022-03-031-1/+1
| | | | | | | | | | NetworkManager should only be licensed under LGPL 2.1 or higher. But as far as I understand, the process is not finished yet and some codes are still under GPL-2.0. https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/main/RELICENSE.md Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: new configure optionsAdrian Freihofer2022-03-033-32/+100
| | | | | | | | | | | | | | - Allow to compile nmcli with libedit (alternative to gplv3 readline) - Support iwd as well as wpa-supplicant for wifi - Make vala build-time dependency optional - Split all plugins into packages. By default all packages are installed acc. to features in the PACKAGECONFIG but it's now possible to build images where only some plugins are installed. - Move FILES:networkmanager to last position to increase the FILES priority of other packages. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: switch to mesonAdrian Freihofer2022-03-035-151/+71
| | | | | | | | | | | - Switch to meson build-system - Removed 0003-install-firewalld-to-var-libdir-rather-than-hardcod-.patch nm-shared.xml gets installed into /usr/lib/firewalld/zones where also firewalld installs its xml files. Not 100% sure this is as it was before but it seams to be consistent with firewalld. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.34.0 -> 1.36.0Wang Mingyu2022-03-011-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Overview of changes since NetworkManager-1.34 ============================================= * The handling of Layer 3 configurations has been substantially reworked. While this is mostly internal change, it results in more robust behavior when addressing information from multiple sources (DHCP, manually configured, VPN) need to be applied simultaneously. Overall performance and memory use have also slightly improved. * Manually configured addresses can no longer expire even if the same addresses are also obtained dynamically. * Code for systemd-based DHCP and DHCPv6 clients has been updated from upstream. * NTP servers obtained via DHCPv6 are now exposed on the DBus API, visible in nmcli and available for use by dispatcher scripts. * 5G NR (New Radio) modems are now supported. * The "rd.znet_ifnames" kernel command line option is now honored on network bootups on an IBM s390 platform. * Wi-Fi P2P support does now work with the IWD backend, in addition to wpa_supplicant backend. * Support for special route types have been added: "prohibit", "blackhole" and "unreachable". * Routes managed by routing daemons are now ignored. This is done to address a performance bottleneck on specialized routers. * Handling of IP addressing and routing information is now slightly more efficient and uses less memory. This is apparent on systems with large amount of IP configuration information. * It is now possible to start NetworkManager without root user privileges. This is experimental doesn't necessarily result in a working daemon. NetworkManager service already drops many of capabilities available to the root user. * WPA3 Wi-FI network security have been improved by enabling new H2E (hash to element) method for generating SAE password element. * It is now possible to select the default Wi-Fi backend (wpa_supplicant or IWD) at build-time. * Replies from broken DHCP servers that send duplicate address or mask options are now handled gracefully. * Bridge support has gained the possibility of turning off MAC ageing. * "configure-and-quit" mode and nm-iface-helper have been removed. * A number of bugs that could cause NetworkManager to crash in rare conditions have been fixed. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.32.12 -> 1.34.0wangmy2022-01-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========= * initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6". * core: better handle sd-resolved errors when resolving hostnames. * nmcli: fix import WireGuard profile with DNS domain and address family disabled. * ndisc: send router solicitations before expiry. * policy: send earlier the ip configs to the DNS manager. * core: support linking with LLD 13. * wireguard: importing wg-quick configuration files with nmcli no longer sets a negative, exclusive "dns-priority". This plays better with common split DNS setups that use systemd-resolved. Adjust the "dns-priority" to your liking after import yourself. * NetworkManager no longer listens for netlink events for traffic control objects (qdiscs and filters). * core: add internal nm-priv-helper service for separating privileges and have a way to drop capabilities from NetworkManager daemon. * bond: add support for setting queue-id of bond port. * dns: support configuring DNS over TLS (DoT) with systemd-resolved. * nmtui: add support for WireGuard profiles. * nmcli: add aliases `nmcli device up|down` beside connect|disconnect. * conscious language: Deprecate 'Device.Slaves' D-Bus property in favor of new 'Device.Ports' property. Depracate 'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()' in libnm. * nmcli: invoking nmcli command without arguments will now show 'default' instead of null address in route4 or route6 section. The following changes were backported to 1.32.x releases between 1.32.0 and 1.32.12 are also present in NetworkManager-1.34: - 1.32.12: * Fix wrong order of addresses when restarting NetworkManager. * Preserve the IPv6 ff00::/8 route added by kernel in the local table, necessary for multicast communication. * Fix emitting the signal for changed metered status of devices. * Fix applying the ethtool autonegotiation and speed settings. * initrd: fix crash parsing plain '=' without key. * cloud-setup: use suppress_prefixlength rule to honor non-default-routes in the main table. - 1.32.10: * core: fix the order of IPv6 addresses changing on service restart. * initrd: add command line option to configure link autonegotiation and speed. * ifcfg-rh: fix crash when parsing invalid DNS address. * ifcfg-rh: extend ifup/ifdown scripts to work with connection profile names. * udev: also react to "move" (and "change") udev actions in our rules. - 1.32.8: * firewalld: configure zones on "Reloaded" signal. * core: fix wrong MTU for bridge interfaces. * cloud-setup: fix gateway address for Aliyun cloud. - 1.32.6: * core: fix adding stale local routes when address changes. * initrd: tag generated profiles with origin in user data. * core: introduce "allowed-connections" option to disallow profiles on a device. This allows to filter out profiles that originate from initrd. * core: introduce "keep-configuration" device option to forcefully activate a profile on start. * dhcp: handle filename/bootfile_name DHCP option and write it to device state file for initrd/kickstart. * initrd: add "ib.pkey=" command line option - 1.32.4: * core: remove stale entries from "seen-bssids" and "timestamp" files in "/var/lib/NetworkManager". * bond: support the peer_notif_delay option. * core: add ipv[46].required-timeout option to wait for IP configuration while activating. * core: send ARP announcements when there is carrier. * core: start DHCPv6 when a prefix delegation is needed for shared mode. * firewall: fix nftables backend to create "ip" table for IPv4 only. * initrd: set required-timeout of 20 seconds for default IPv4 configuration to opportunistically wait for IPv4. * ifcfg: log warning about invalid keys in ifcfg files. * ifcfg: reject non-UTF-8 from ifcfg files. * nmcli: show DNS SEARCH field in device information. * cloud-setup: add support for Aliyun cloud. - 1.32.2: * hostname: prefer IPv4 addresses for reverse DNS lookup. * dhcp: ignore unauthenticated FORCERENEW messages with internal, systemd-based DHCPv4 plugin (CVE-2020-13529). This plugin is not used, unless the undocumented dhcp=systemd option was set. * cloud-setup: preserve IP addresses, routes and rules from currently active connection profile. * Various bugfixes and performance improvements. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: update to 1.32.12Oleksandr Kravchuk2021-10-161-1/+1
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: upgrade 1.8.14 -> 1.8.16zangrc2021-10-161-2/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.32.8 -> 1.32.10wangmy2021-08-261-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.32.4 -> 1.32.8Andreas Müller2021-08-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | =============================================== NetworkManager-1.32.8 Overview of changes since NetworkManager-1.32.6 =============================================== * firewalld: configure zones on "Reloaded" signal. * core: fix wrong MTU for bridge interfaces. * cloud-setup: fix gateway address for Aliyun cloud. =============================================== NetworkManager-1.32.6 Overview of changes since NetworkManager-1.32.4 =============================================== * core: fix adding stale local routes when address changes. * initrd: tag generated profiles with origin in user data. * core: introduce "allowed-connections" option to disallow profiles on a device. This allows to filter out profiles that originate from initrd. * core: introduce "keep-configuration" device option to forcefully activate a profile on start. * dhcp: handle filename/bootfile_name DHCP option and write it to device state file for initrd/kickstart. * initrd: add "ib.pkey=" command line option Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: add PACKAGECONFIG for audit and selinuxYi Zhao2021-08-121-0/+3
| | | | | | | Add them to PACKAGECONFIG if enable selinux distro feature. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Convert to new override syntaxMartin Jansa2021-08-032-23/+23
| | | | | | | | | | This is the result of automated script (0.9.1) conversion: oe-core/scripts/contrib/convert-overrides.py . converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* networkmanager: upgrade 1.32.2 -> 1.32.4wangmy2021-07-291-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.30.4 -> 1.32.2Andreas Müller2021-07-084-202/+19
| | | | | | | Did not find hints upstream but musl build turned painless! Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.30.2 -> 1.30.4zangrc2021-04-221-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.28.0 -> 1.30.2Vinicius Aquino2021-04-087-249/+59
| | | | | | | | | | | | | | | | | | Upgrade to release 1.30.2: - 0004-fix_reallocarray_check.patch removed because the current version of nm already includes boths malloc.h and stdlib.h - musl/0002-Fix-build-with-musl.patch removed because the commit c50da167bc of nm solves the build issue with musl - musl/0001-Fix-build-with-musl-systemd-specific.patch modified to avoid conflicts when applied to current version of nm - musl/0003-Fix-build-with-musl-systemd-specific.patch renamed to musl/0002-Fix-build-with-musl-systemd-specific.patch and modified to avoid conflicts when applied to current version of nm Signed-off-by: Vinicius Aquino <voa.aquino@gmail.com> Signed-off-by: Otavio Salvador <otavio@ossystems.com.br> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: Fix packageingAndreas Müller2021-04-071-0/+1
| | | | | | | | | | Recent upgrade introduced: | ERROR: networkmanager-openvpn-1.8.14-r0 do_package: QA Issue: networkmanager-openvpn: Files/directories were installed but not shipped in any package: | /usr/share/metainfo | /usr/share/metainfo/network-manager-openvpn.metainfo.xml Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: upgrade 1.8.12 -> 1.8.14zhengruoqin2021-04-011-2/+2
| | | | | Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Add PACKAGECONFIG for ovsNicolas Jeker2021-01-281-1/+1
| | | | | | | | | | | | | | | Open vSwitch support is enabled by default in NetworkManager, but only useful in the context of several virtualisation environments, e.g. Xen, KVM, OpenStack and more. Therefore, the ovs PACKAGECONFIG is now disabled by default. The jansson dependency is only required for Open vSwitch and teamsdctl support in NetworkManager. As there is no libteamsdctl recipe around (and no teamsdctl PACKAGECONFIG), make it dependent on the ovs PACKAGECONFIG. Signed-off-by: Nicolas Jeker <n.jeker@gmx.net> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: add missing readline dependsAdrian2021-01-271-2/+6
| | | | | | | | Introduce PACKAGECONFIG[nmcli] to make building the nmcli utility which depends on GPLv3 licensed readline library optional. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Add Wireless Extensions to PACKAGECONFIG[wifi]Nicolas Jeker2021-01-271-1/+1
| | | | | | | | | | | Linux Wireless Extensions (Wext) support is enabled per default in NetworkManager. Having Wext enabled without enabling WiFi support, too, doesn't make much sense. Therefore, instead of creating a separate PACKAGECONFIG flag, 'wext' was added to the already existing 'wifi' flag. Signed-off-by: Nicolas Jeker <n.jeker@gmx.net> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.22.14 -> 1.28.0Andreas Müller2021-01-218-108/+65
| | | | | | | | | | | | | * Build tested on aarch64 glibc/musl * 0003-Fix-build-with-musl-for-n-dhcp4.patch has to go. Grepped nm code for seed48_r / mrand48_r => no findings * Since this is a huge version bump no detaile release notes are provided here * Have tried to move to meson build few months ago but it turned into huge efforts and ended without success. Maybe situation changed but let's postpone for now Signed-off-by: Andreas Müller <schnitzeltony@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Fix reallocarray check in meson and configureKhem Raj2020-12-122-0/+28
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: remove PACKAGECONFIG[dhclient]Yi Zhao2020-10-141-3/+5
| | | | | | | | | | | | | The dhcp-client has been removed from oe-core and the current networkmanager does not support dhcpcd >= 9.0 (See bug report: https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/410) Remove the PACKAGECONFIG[dhclient] and pass --with-dhclient/dhcpcd=no explicitly to EXTRA_OECONF. Otherwise it will search the host path when configure. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: Depend on dhcpcdKhem Raj2020-09-011-1/+1
| | | | | | dhcp-client is being removed from oe-core Signed-off-by: Khem Raj <raj.khem@gmail.com>