summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-connectivity
Commit message (Collapse)AuthorAgeFilesLines
...
* freeradius: ignore patched CVEsDavide Gardenal2022-07-151-0/+5
| | | | | | | | | CVE-2002-0318 and CVE-2011-4966 are both patched in our version of freeradius. The CPE in the NVD database doesn't reflect correctly the vulnerable versions that's why they are incorrectly picked up. Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openconnect: upgrade 8.20 -> 9.01wangmy2022-07-071-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freeradius: mutlilib fixesJeremy Puhlman2022-07-021-13/+21
| | | | | | | Define raddbdir based on multilib Add multilib headers and scripts for conflicting content Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: fix build with enabled pppJavier Viguera2022-07-021-1/+1
| | | | | | | | | | | | | | | | | If 'ppp' packageconfig option is enabled, but the build system does NOT have pppd binary installed, the build fails with: | Has header "pppd/pppd.h" : YES | Program pppd /sbin/pppd /usr/sbin/pppd found: NO | | ../NetworkManager-1.36.2/meson.build:570:4: ERROR: Assert failed: pppd required but not found, please provide a valid pppd path or use -Dppp=false to disable it This is due to meson trying to look for the 'pppd' binary in the build system when it should not. If the build system does not contain pppd, the build fails. Signed-off-by: Javier Viguera <javier.viguera@digi.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: fix typo for RRECOMMENDSYi Zhao2022-06-301-1/+1
| | | | | | | RRECOMENDS_${PN} -> RRECOMMENDS:${PN} Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* snort: upgrade 2.9.19 -> 2.9.20wangmy2022-06-301-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== * src/dynamic-preprocessors/appid/service_plugins/service_ssl.c : Fixed a scenario where SSL traffic was not detected correctly. * src/dynamic-preprocessors/smtp/snort_smtp.c : Fixed a possible memory corruption. * src/dynamic-preprocessors/imap/imap_util.c src/dynamic-preprocessors/pop/pop_util.c src/dynamic-preprocessors/smtp/smtp_util.c src/preprocessors/spp_httpinspect.c : Fixed malformed packet debug engine output. * src/preprocessors/Stream6/snort_stream_tcp.c : Fixed security zones info in intrusion events. * src/dynamic-preprocessors/appid/fw_appid.c : Fixed URL lookup failure. * src/preprocessors/HttpInspect/server/hi_server.c : Fixed a possible memory leak. * src/dynamic-preprocessors/appid/detector_plugins/detector_dns.c src/dynamic-preprocessors/appid/fw_appid.c src/dynamic-preprocessors/appid/fw_appid.h src/dynamic-preprocessors/appid/detector_plugins/service_plugins/service_api.h : Added support for dns root queries and underflow. * src/dynamic-preprocessors/smtp/snort_smtp.c src/Makefile.am src/dynamic-examples/Makefile.am src/dynamic-plugins/sf_dynamic_plugins.c src/dynamic-plugins/sf_dynamic_preprocessor.h src/dynamic-preprocessors/Makefile.am src/dynamic-preprocessors/smtp/snort_smtp.h src/dynamic-preprocessors/smtp/spp_smtp.c src/smtp_api.h : Added support to get extra data from SMTP and HTTP into IPS event. * src/dynamic-preprocessors/appid/detector_plugins/detector_imap.c src/dynamic-preprocessors/appid/detector_plugins/detector_pop3.c : Added support for login success and failure eventing for IMAP and POP3. * src/dynamic-preprocessors/appid/hi_server.c : Added support to handle empty string for SNI/CN/SAN/ORG. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: udpate to 1.38.0Adrian Freihofer2022-06-062-36/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add support for route type "throw". * Fix bug setting priority for IP addresses. * Static IPv6 addresses from "ipv6.addresses" are now preferred over addresses from DHCPv6, which are preferred over addresses from autoconf. This affects IPv6 source address selection, if the rules from RFC 6724, section 5 don't give a exhaustive match. * Static IPv6 addresses from "ipv6.addresses" are now interpreted with first address being preferred. Their order got inverted. This is now consistent with IPv4. * Wi-Fi hotspots will use a (stable) random channel number unless one is chosen manually. * Don't use unsupported SAE/WPA3 mode for AP mode. * NetworkManager will no longer advertise frequencies as supported when they're disallowed in configured regulatory domain. * Attempt to connect to WEP-encrypted Wi-Fi network will now fail gracefully with a recent version of wpa_supplicant when built without WEP support. As long as wpa_supplicant supports WEP, NetworkManager will continue to work. * Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the NIC does not support PMF. This is known to cause problems in some setups. It is still possible to explicitly configure wifi.key-mgmt=sae for WPA3. * Add new dummy crypto backend "null" that does nothing. NetworkManager uses the crypto library when handling certificates for 802.1x profiles. * Veth devices with name "eth*" are now managed by default via the udev rule. This is to support managing the network in LXD containers. * The hostname received from DHCP is now shortened to the first dot (or to 64 characters, whatever comes first) if it's too long. * As the insecure WEP encryption for Wi-Fi network is phased out, nmcli now discourages its use when activating or modifying a profile. * Fix connectivity checks in case the check endpoint address resolves to multiple addresses. * Workaround libcurl blocking NetworkManager while resolving DNS names. * nmcli: indicate missing Wi-Fi hardware when showing rfkill setting. * nmcli: add connection migrate command to move a profile to a specified settings plugin. This allows to convert profiles in the deprecated ifcfg-rh format to keyfile. * Set "src" attribute for routes from DHCPv4 to the leased address. This helps with source address selection. * Updated translations. * Various bugfixes and internal improvements. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: use nftables by defaultAdrian Freihofer2022-06-061-1/+5
| | | | | | | | | | | | | | | | From NEWS file of netowrkmanager 1.32: firewall: add nftables firewall backend for configuring IPv4 NAT with shared mode. Now two backends are supported, "iptables" and "nftables". The default gets detected based on whether /usr/sbin/nft or /usr/sbin/iptables is installed, with nftables preferred. With this change nftables is not the prefered backend also with OE. But it's still possible to set NETWORKMANAGER_FIREWALL_DEFAULT back to iptables. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: simplify selective installationAdrian Freihofer2022-06-061-42/+73
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The main motivation for this rework is to support compiling the NetworkManager with many plugins, but to install only a few of them in a firmware image. This is advantageous when different products with different network interfaces should be supported by only one binary distribution. This is more in line with the way NetworkManager is designed and used by other binary Linux distributions. Basically this is already supported since the last rework of the networkmanager recipe. However, the rrecomments from networkmanager to all available plugins is not straight forward to be used in such a scenario. Installing only a subset of the compiled plugins required to override the rrecommends from networkmanager to the plugins in some way. To simplify the usage the networkmanager package is now an empty meta package and networkmanager itself gets moved to a new networkmanager-daemon package. This allows to keep backward compatibility: Installing the networkmanager package still adds all compiled plugins to the firmware. But with the new package splitting it's also possible to install for example only the networkmanager-wifi but not the networkmanager-wwan package even if networkamanger has been compiled with the modemmanager PACAKGECONFIG flag enabled as well. The relation from plugins to services is now a stronger rdepends which reflects better how NetworkManager is supposed to be used. If a plugin is installed but the required service is not the plugin periodically tries to connect to the service and reports error messages to the syslog if the service is not available. Therefore it's better to make the installation of the plugin optional but not the installation of the services. The bash-completion package adds support for the nmcli command line utility. This change also moves the bash completion configuration to a new package networkmanager-nmcli-bash-completion. This is more consistent anyway but gets even more important when the networkmanager package gets optional. To simplify the usage of all these packages a SUMMARY:${PN}-.. for each packages has been added. The separation of the doc packages has been removed. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: improve dependency handlingAdrian Freihofer2022-06-061-2/+17
| | | | | | | | | | Plugins of networkmanager redpends on related services. If for example modemmanager or wpa-supplicant is not installed but the related networkmanager plugin is, the plugin writes error messages to the syslog. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: upgrade 5.2.0 -> 5.3.0wangmy2022-05-091-1/+1
| | | | | | | | Changelog: https://github.com/wolfSSL/wolfssl/releases/tag/v5.3.0-stable Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: fix parallel build failureYi Zhao2022-05-042-0/+35
| | | | | | | | | | | | | Add dependency libnm_client_public_dep to libnm-client-test to fix parallel build error: | In file included from ../NetworkManager-1.36.0/src/libnm-client-test/nm-test-utils-impl.c:10: | ../NetworkManager-1.36.0/src/libnm-client-public/NetworkManager.h:47:10: fatal error: nm-enum-types.h: No such file or directory | 47 | #include "nm-enum-types.h" | | ^~~~~~~~~~~~~~~~~ Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: move to dynamic meta-python layerArmin Kuster2022-05-022-140/+0
| | | | | Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netplan: move from meta-networking to meta-oeArmin Kuster2022-05-024-168/+0
| | | | | | | add to the dynamic meta-pthon lot Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* crda: move to a dynamic-layer for pythonArmin Kuster2022-05-0210-406/+0
| | | | | Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ufw: Fix packaging errors found with ppc64Khem Raj2022-04-301-1/+1
| | | | | | | | | | | default baselib in ppc64 is lib64 which catches this latent issue ERROR: ufw-0.36.1-r0 do_package: QA Issue: ufw: Files/directories were installed but not shipped in any package: /usr/lib/ufw /usr/lib/ufw/ufw-init /usr/lib/ufw/ufw-init-functions Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nanomsg: upgrade 1.1.5 -> 1.2wangmy2022-04-251-1/+1
| | | | | | | | | Changelog: ========= adds support for IPv6 and fixes a couple of bugs. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ufw: Fix build with usrmerge distro featureKhem Raj2022-04-251-0/+7
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ot-br-posix: Fix build with gccKhem Raj2022-04-202-0/+41
| | | | | Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Stefan Schmidt <stefan.schmidt@huawei.com>
* wpantund: Add missing dependency on boostKhem Raj2022-04-191-1/+1
| | | | | | | | Fixes checking for boost/signals2/signal.hpp... no configure: error: Unable to find a usable implementation of boost::signals2 (not even our internal copy) Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.14.12 -> 4.14.13Yi Zhao2022-04-131-1/+1
| | | | | | | | | | This is a bugfix release of the Samba 4.14 release series. ChangeLog: https://www.samba.org/samba/history/samba-4.14.13.html Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ot-br-posix: Disable Wsign-compare for clangKhem Raj2022-04-132-132/+2
| | | | | | Specify is via CXXFLAGS instead of pragma dance. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wpantund: add new recipeStefan Schmidt2022-04-071-0/+32
| | | | | | | | | | | | | | Wpantund is part of the OpenThread project. It is used in a scenario where the Thread radio operates as a network co-processor (NCP) that is connected over SPI/UART/USB to the host. The project itself is in maintenance-only mode right now as the NCP architecture has been replaced with radio co-processor (RCP) which is implemented directly in openthread and ot-br-posix. None the less there might still be project and products out there using it. Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ot-daemon: add recipe for OpenThread daemonStefan Schmidt2022-04-071-0/+27
| | | | | | | | | | | | | | | | | The OpenThread daemon allows Linuxes devices to participate in a Thread mesh network without acting as a full border router. The device participates like any other child or router devices within the network. This same repo is used for range of different modes to run the OpenThread code. From bare metal over vendor SDKs to posix platforms. For this recipe the focus is on the Linux posix implementation and we do not pull in all the git submodules on purpose. There are openthread enabled recipes in meta-zephyr for people who want to also use OpenThread on MCU based platforms on top of Zephyr. Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ot-br-posix: add recipe for an OpenThread Border RouterStefan Schmidt2022-04-073-0/+225
| | | | | | | | | | | | | | | | | | The OpenThread project is an open source implementation of the Thread low-power mesh network protocol. In a Thread network devices can have different roles, and of of these roles is a Border Router that allows a Thread network to be connected with other IP networks. Ot-br-posix runs as a systemd service on a standard Linux system to handle the connection to a Thread network. In terms of patches we need a fix to allow building on musl + clang (CMSG_NXTHDR macro triggers a -Wsign-compare warning) and a systemd unit file change is OE specific and avoids having service dependencies implemented as pre exec hooks. Signed-off-by: Stefan Schmidt <stefan.schmidt@huawei.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: add 2 cves to allowlistMatsunaga-Shinji2022-04-061-0/+5
| | | | | | | | Patch for CVE-2018-1050 is applied in version 4.5.15, 4.6.13, 4.7.5. Patch for CVE-2018-1057 is applied in version 4.3.13, 4.4.16. Signed-off-by: matsunaga-shinji <shin.matsunaga@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: fix python site-packages installation issueChen Qi2022-04-062-1/+51
| | | | | | | | | The blueman is relying on host python to determine the target python site-packages directory which is not correct. Add a new option to fix this issue. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueman: update; add missing RDEPENDSMarkus Volk2022-03-292-33/+26
| | | | | | | | | - update to v2.2.4 - switch to meson buildsystem - add missing RDEPENDS Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dhcp-relay: upgrade 4.4.2p1 -> 4.4.3Yi Zhao2022-03-246-118/+97
| | | | | | | | | | | | | | License-Update: The ISC DHCP is licensed under the Mozilla Public License, MPL 2.0 rather than ISC License now[1][2]. [1] https://www.isc.org/licenses/ [2] https://downloads.isc.org/isc/dhcp/4.4.3/dhcp-4.4.3-RELNOTES The bundled BIND has been updated to 9.11.36. We don't need to download it from external anymore. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libiec61850: Use GNUInstallDirs in cmakeKhem Raj2022-03-212-0/+30
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netplan: fix parallel build failureYi Zhao2022-03-172-0/+45
| | | | | | | | Backport a patch to fix the parallel build failure: src/dbus.c:17:10: fatal error: _features.h: No such file or directory Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.36.0 -> 1.36.2Wang Mingyu2022-03-172-7/+4
| | | | | | | | | | | | | | | | | | 0001-do-not-ask-host-for-ifcfg-defaults.patch refreshed for new version Changelog: ========== * When the list of plugins is not specified via "main.plugins" in NetworkManager.conf and no build-time default is set with "--with-config-plugins-default" configure argument, now all known plugins found in the plugin directory are loaded (and the built-in "keyfile" plugin is preferred over others). * Preserve external ports during checkpoint rollback * Fix removal of ovsdb entry when an OVS interface goes away * Fix DNS configuration for WWAN connections Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager-openvpn: upgrade 1.8.16 -> 1.8.18Wang Mingyu2022-03-171-1/+1
| | | | | | | | | | | Changelog: ========== * Gtk4 version of the editor plugin is now available (for use with Control Center of GNOME 42 or later). * Update Catalan, Croatian, Czech, Hebrew and Slovenian translations. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libiec61850: upgrade 1.5.0 -> 1.5.1Wang Mingyu2022-03-171-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-*: remove obsolete PYPA_WHEEL and PIP_INSTALL_PACKAGE assignmentsRoss Burton2022-03-111-2/+0
| | | | | | | | These variables are no longer used by pip_install_wheel, so remove them from all recipes that set them. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: fix installed-vs-shipped errorKai Kang2022-03-071-1/+1
| | | | | | | | | | | | | | | | Fix installed-vs-shipped error of networkmanager: | ERROR: networkmanager-1.36.0-r0 do_package: QA Issue: networkmanager: Files/directories were installed but not shipped in any package: | /usr/lib/firewalld | /usr/lib/firewalld/zones | /usr/lib/firewalld/zones/nm-shared.xml | Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them with in do_install. | networkmanager: 3 installed and not shipped files. [installed-vs-shipped] Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ufw: port to setuptools, use setuptools_legacyRoss Burton2022-03-042-1/+22
| | | | | | | | | | | This package has a traditional setup.py which has a custom install command, which isn't supported with the modern wheel/pip installation method. Until upstream has moved away from distutils, use setuptools_legacy so the installation is correct. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Update LICENSE variable to use SPDX license identifiersKhem Raj2022-03-0424-24/+24
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: replace deprecated licensesAdrian Freihofer2022-03-031-1/+1
| | | | | | | | | | NetworkManager should only be licensed under LGPL 2.1 or higher. But as far as I understand, the process is not finished yet and some codes are still under GPL-2.0. https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/blob/main/RELICENSE.md Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: new configure optionsAdrian Freihofer2022-03-033-32/+100
| | | | | | | | | | | | | | - Allow to compile nmcli with libedit (alternative to gplv3 readline) - Support iwd as well as wpa-supplicant for wifi - Make vala build-time dependency optional - Split all plugins into packages. By default all packages are installed acc. to features in the PACKAGECONFIG but it's now possible to build images where only some plugins are installed. - Move FILES:networkmanager to last position to increase the FILES priority of other packages. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: switch to mesonAdrian Freihofer2022-03-035-151/+71
| | | | | | | | | | | - Switch to meson build-system - Removed 0003-install-firewalld-to-var-libdir-rather-than-hardcod-.patch nm-shared.xml gets installed into /usr/lib/firewalld/zones where also firewalld installs its xml files. Not 100% sure this is as it was before but it seams to be consistent with firewalld. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ufw: Upgrade to 0.36.1 bugfix releaseKhem Raj2022-03-012-18/+20
| | | | | | | | | | Forward port 0002-add-an-option-to-specify-iptables-location.patch Use distutils3, since it still needs it [1] [1] https://git.launchpad.net/ufw/tree/setup.py#n28 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bluepy: Define custom PYPA_WHEELKhem Raj2022-03-011-0/+2
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openconnect: upgrade 8.10 -> 8.20Wang Mingyu2022-03-011-2/+2
| | | | | | | | COPYING.LGPL: Two blank lines were deleted. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: upgrade 1.34.0 -> 1.36.0Wang Mingyu2022-03-011-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Overview of changes since NetworkManager-1.34 ============================================= * The handling of Layer 3 configurations has been substantially reworked. While this is mostly internal change, it results in more robust behavior when addressing information from multiple sources (DHCP, manually configured, VPN) need to be applied simultaneously. Overall performance and memory use have also slightly improved. * Manually configured addresses can no longer expire even if the same addresses are also obtained dynamically. * Code for systemd-based DHCP and DHCPv6 clients has been updated from upstream. * NTP servers obtained via DHCPv6 are now exposed on the DBus API, visible in nmcli and available for use by dispatcher scripts. * 5G NR (New Radio) modems are now supported. * The "rd.znet_ifnames" kernel command line option is now honored on network bootups on an IBM s390 platform. * Wi-Fi P2P support does now work with the IWD backend, in addition to wpa_supplicant backend. * Support for special route types have been added: "prohibit", "blackhole" and "unreachable". * Routes managed by routing daemons are now ignored. This is done to address a performance bottleneck on specialized routers. * Handling of IP addressing and routing information is now slightly more efficient and uses less memory. This is apparent on systems with large amount of IP configuration information. * It is now possible to start NetworkManager without root user privileges. This is experimental doesn't necessarily result in a working daemon. NetworkManager service already drops many of capabilities available to the root user. * WPA3 Wi-FI network security have been improved by enabling new H2E (hash to element) method for generating SAE password element. * It is now possible to select the default Wi-Fi backend (wpa_supplicant or IWD) at build-time. * Replies from broken DHCP servers that send duplicate address or mask options are now handled gracefully. * Bridge support has gained the possibility of turning off MAC ageing. * "configure-and-quit" mode and nm-iface-helper have been removed. * A number of bugs that could cause NetworkManager to crash in rare conditions have been fixed. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netplan: Add knob to enable testsKhem Raj2022-02-241-1/+5
| | | | | | | this puts python3-nose away from default requirements, nose dependency should eventually be removed and perhaps converted to pytest Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: upgrade 5.1.0- > 5.2.0Wang Mingyu2022-02-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netplan: upgrade 0.103 -> 0.104Wang Mingyu2022-02-234-39/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | refresh patches for 0.104: 0001-Makefile-do-not-use-Werror.patch 0001-don-t-fail-if-GLOB_BRACE-is-not-defined.patch 0001-parse-nm-fix-32bit-format-string.patch removed since it's included in 0.104 Changelog: ========= Enable embedded-switch-mode setting on SmartNICs (#253) Permit multiple patterns for the driver globs in match (#202), LP#1918421 Improve routing capabilities (#248), LP#1892272, LP#1805038 Support additional link offload options for networkd (#225) (#242), LP#1771740 Consolidate enum-to-string arrays (#230) Handle differing ip6-privacy default value for NetworkManager (#263) YAML state tracking (--state rootdir) for DBus API and netplan try (#231), LP#1943120 Support ConfigureWithoutCarrier (ignore-carrier) for networkd (#215) Move primary git branch master to main Documentation improvements (#226) Compatibility for glib-2.70 (#235) Cleanup Makefile, install only public headers Improve test reliability & enable integration testing CI for autopkgtests Netplan get to use the libnetplan parser (#252) libnetplan: - introduce the notion of NetplanState (#232) - use an explicit parser context (#233) - expose coherent generator APIs (#239) - improve overall error handling (#234) - consolidation of YAML parsing into the library (#241, #249, #250, #251) Restrict the symbol export to a determined public API (#227) - WARNING: We dropped some internal symbols from the API that we know have no external consumers (that we are aware of) - 0.103: _serialize_yaml, contains_netdef_type, tmp, validate_default_route_consistency - 0.102: cur_filename, netplan_netdef_new - 0.100: address_option_handlers, is_hostname, validate_ovs_target, wireguard_peer_handlers - 0.99: current_file, is_ip4_address, is_ip6_address, missing_id, missing_ids_found, parser_error, validate_backend_rules, validate_netdef_grammar, yaml_error Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Fix DeprecationWarning about regexpsMartin Jansa2022-02-211-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | * fixes: meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:125: DeprecationWarning: invalid escape sequence \. meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:126: DeprecationWarning: invalid escape sequence \. meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:128: DeprecationWarning: invalid escape sequence \. meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:129: DeprecationWarning: invalid escape sequence \. meta-oe/meta-networking/recipes-support/strongswan/strongswan_5.9.4.bb:130: DeprecationWarning: invalid escape sequence \. meta-oe/meta-oe/recipes-graphics/ttf-fonts/ttf-mplus_027.bb:18: DeprecationWarning: invalid escape sequence \. meta-oe/meta-oe/recipes-multimedia/libcdio/libcdio-paranoia_10.2+2.0.1.bb:21: DeprecationWarning: invalid escape sequence \. meta-oe/meta-oe/recipes-multimedia/libcdio/libcdio_2.1.0.bb:28: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1342: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1343: DeprecationWarning: invalid escape sequence \- oe-core/meta/classes/package.bbclass:1343: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1344: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1345: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1348: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1350: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1353: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1355: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1358: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1360: DeprecationWarning: invalid escape sequence \. oe-core/meta/classes/package.bbclass:1365: DeprecationWarning: invalid escape sequence \. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Use new CVE_CHECK_IGNORE variableKhem Raj2022-02-211-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-08-04 18:12:54 +0000