summaryrefslogtreecommitdiffstats
path: root/meta-networking
Commit message (Collapse)AuthorAgeFilesLines
* strongswan: remove ldap from default PACKAGECONFIGNick Rosbrook2020-11-101-1/+0
| | | | | | | Since ldap is not a standard DISTRO_FEATURE, leave it disabled by default. Signed-off-by: Nick Rosbrook <rosbrookn@ainfosec.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: do not use deprecated stroke and starter by defaultNick Rosbrook2020-11-101-2/+10
| | | | | | | | | | | | | | | | The swanctl and vici configuration of strongswan is preferred, as the stroke plugin used with starter is deprecated. As a reasonable default, add swanctl to PACKAGECONFIG by default, and remove stroke. When systemd is in DISTRO_FEATURES, add systemd-charon to PACKAGECONFIG, and add charon when systemd is not in DISTRO_FEATURES. While here, make sure strongswan-starter.service is only installed when charon is enabled. The current unconditional installation of strongswan-starter.service can break systems which install strongswan.service for use with swanctl. Signed-off-by: Nick Rosbrook <rosbrookn@ainfosec.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* packagegroup-meta-networking.bb: add ntopng related recipesMingli Yu2020-11-091-1/+3
| | | | | | | Add ntopng related recipes and remove the deprecated ntop. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntop: remove the recipeMingli Yu2020-11-0911-760/+0
| | | | | | | | | | The ntop project is inactive and there is no new version since 2012 [1] and it has been replaced by ntopng. [1] https://sourceforge.net/projects/ntop/files/ntop/Stable/ Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntopng: add new recipeMingli Yu2020-11-097-0/+307
| | | | | | | | | | ntopng is a web-based network traffic monitoring application released under GPLv3. It is the new incarnation of the original ntop written in 1998, and now revamped in terms of performance, usability, and features. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmaxminddb: add new recipeMingli Yu2020-11-091-0/+18
| | | | | | | | The libmaxminddb library provides a C library for reading MaxMind DB files, including the GeoIP2 databases from MaxMind. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ndpi: add new recipeMingli Yu2020-11-092-0/+59
| | | | | | | nDPI is an open source LGPLv3 library for deep-packet inspection. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openvpn: upgrade 2.4.9 -> 2.5.0Zang Ruochen2020-11-091-2/+2
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensaf: upgrade 5.20.05 -> 5.20.08Zang Ruochen2020-11-092-70/+2
| | | | | | | | 0001-Add-configure-time-check-for-gettid-API.patch Removed since this is included in 5.20.08 Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dovecot: Disable LTOKhem Raj2020-11-091-0/+4
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* traceroute: Fix build with LTOKhem Raj2020-11-092-51/+1
| | | | | | | Drop patch needed to build when S = B, we do not use this setting anymore Signed-off-by: Khem Raj <raj.khem@gmail.com>
* rdma-core: Upgrade to 31.1Khem Raj2020-11-092-354/+4
| | | | | | | | | | Disable LTO, its uses ASM constructs for symbol versioning which are incompatible with LTO, they should migrate to gcc-10's mechanism for symbol versioning which is compatible with LTO disable manpages, it needs pandoc to build Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lksctp-tools: Update to latest masterKhem Raj2020-11-098-319/+1
| | | | | | Drop the patches which are upstream now Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: add some PACKAGECONFIG options for EAPNick Rosbrook2020-11-061-0/+2
| | | | | | | Add options for eap-identity and eap-mschapv2 plugins. Signed-off-by: Nick Rosbrook <rosbrookn@ainfosec.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* layer.conf: Add hardknott to LAYERSERIES_COMPATKhem Raj2020-11-041-1/+1
| | | | | | Thats codename for 3.3 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkd-dispatcher: Upgrade to 2.1Khem Raj2020-11-031-3/+4
| | | | | | Drop gitlab archives and use git fetcher directly instead Signed-off-by: Khem Raj <raj.khem@gmail.com>
* quagga: unify volatiles file nameYi Zhao2020-11-031-2/+2
| | | | | | | Make the volatiles file name starts with digital. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mbedtls: Fix typo in PACKAGECONFIGMark Jonas2020-11-031-1/+1
| | | | | Signed-off-by: Mark Jonas <toertel@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireguard-tools: upgrade 1.0.20200513 -> 1.0.20200827Ricardo Salveti2020-11-021-1/+1
| | | | | | | | | | | | | | | | | | Changelog: - 7a321ce version: bump - 91fbeb4 Revert "wg-quick: wait on process substitutions" - 9a0d65e wg-quick: android: use iproute2 to bring up interface instead of ndc - fbca033 version: bump - 26683f6 wg-quick: wait on process substitutions - 13fac76 ctype: use non-locale-specific ctype.h - cf2bf09 pubkey: isblank is a subset of isspace - b4a8a18 man: wg-quick: use syncconf instead of addconf for strip example - a66219f systemd: add reload target to systemd unit - eb4665e wincompat: fold random into genkey - 197995d ipc: split into separate files per-platform Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireguard-module: upgrade 1.0.20200712 -> 1.0.20200908Ricardo Salveti2020-11-021-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: - d97b575 version: bump - 482d020 peerlookup: take lock before checking hash in replace operation - dace9d0 compat: backport NLA policy macros - a28032f netlink: consistently use NLA_POLICY_MIN_LEN() - 515d544 netlink: consistently use NLA_POLICY_EXACT_LEN() - 1a41e32 compat: backport kfree_sensitive and switch to it - 90a9e82 compat: drop support for SUSE 15.1 - a567b4c version: bump - 4213ef0 compat: add missing headers for ip_tunnel_parse_protocol - 5a45add compat: ipv6_dst_lookup_flow was ported to rhel 7.9 beta - 372427a compat: allow override of depmod basedir - f04dae1 compat: rhel 8.3 beta removed nf_nat_core.h Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* chrony: Patch CVE-2020-14367Anatol Belski2020-11-022-0/+205
| | | | | Signed-off-by: Anatol Belski <anbelski@linux.microsoft.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 0.9.6 -> 0.9.7Zang Ruochen2020-11-021-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* radvd: upgrade 2.18 -> 2.19Zang Ruochen2020-11-022-5/+5
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.1.7 -> 1.1.8Zang Ruochen2020-11-021-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vnstat: add recipeFagundes, Paulo2020-10-232-0/+21
| | | | | | | | vnStat is a console-based network traffic monitor for Linux and BSD that keeps a log of network traffic for the selected interface(s). Signed-off-by: Paulo Fagundes <paulohefagundes@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iscsi-initiator-utils: Silence a clang warning on 64bit systemsKhem Raj2020-10-212-0/+49
| | | | | | This unbreaks the build with clang as well. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freediameter: use /run instead of /var/run in systemd service fileQi.Chen@windriver.com2020-10-201-1/+1
| | | | | | | | /var/run has been deprecated by systemd, so use /run instead, as suggested by systemd. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openhpi: use /run instead of /var/run in systemd service fileChen Qi2020-10-191-1/+1
| | | | | | | | /var/run has been deprecated by systemd, so use /run instead, as suggested by systemd. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* open-isns: use /run instead of /var/run in systemd service fileChen Qi2020-10-192-1/+29
| | | | | | | | /var/run has been deprecated by systemd, so use /run instead, as suggested by systemd. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* stunnel: upgrade 5.56 -> 5.57Pierre-Jean Texier2020-10-191-3/+2
| | | | | | | | | | | | | | | | | License-Update: copyright years updated. This is a bug fix release: - X.509 v3 extensions required by modern versions of OpenSSL are added to generated self-signed test certificaes. - Fixed a tiny memory leak in configuration file reload error handling (thx to Richard Könning). - Merged Debian 05-typos.patch (thx to Peter Pentchev). - Merged with minor changes Debian 06-hup-separate.patch (thx to Peter Pentchev). - Merged Debian 07-imap-capabilities.patch (thx to Ansgar). - Merged Debian 08-addrconfig-workaround.patch (thx to Peter Pentchev). - Fixed tests on the WSL2 platform. Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cyrus-sasl: use /run instead of /var/run for systemd service fileQi.Chen@windriver.com2020-10-161-1/+1
| | | | | | | | /var/run has been deprecated by systemd, so use /run instead, as suggested by systemd. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireguard-tools: Fix systemd service installationMario Schuknecht2020-10-151-2/+2
| | | | | | | | | Install systemd configuration file wg-quick@.service into the proper folder. Use 'systemd_system_unitdir' instead of 'systemd_unitdir' as the installation path. Signed-off-by: Mario Schuknecht <mario.schuknecht@dresearch-fe.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* meta-openembedded: Add gatesgarth to LAYERSERIES_COMPATKhem Raj2020-10-151-1/+1
| | | | | | Remove older releases from COMPAT Signed-off-by: Khem Raj <raj.khem@gmail.com>
* networkmanager: remove PACKAGECONFIG[dhclient]Yi Zhao2020-10-141-3/+5
| | | | | | | | | | | | | The dhcp-client has been removed from oe-core and the current networkmanager does not support dhcpcd >= 9.0 (See bug report: https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/410) Remove the PACKAGECONFIG[dhclient] and pass --with-dhclient/dhcpcd=no explicitly to EXTRA_OECONF. Otherwise it will search the host path when configure. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* samba: upgrade 4.10.17 -> 4.10.18Yi Zhao2020-10-144-193/+2
| | | | | | | | | | | | This is security release in order to address CVE-2020-1472 (Unauthenticated domain takeover via netlogon ("ZeroLogon")). See: https://www.samba.org/samba/history/samba-4.10.18.html Also remove 3 backported patches. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 3.2.6 -> 3.2.7Zang Ruochen2020-10-131-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* mtr: upgrade 0.93 -> 0.94Zang Ruochen2020-10-131-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: upgrade 0.9.0 -> 0.9.1Zang Ruochen2020-10-131-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* utouch-*, ifenslave, iozone3, ttf-honkyfonts, python3-smbus: don't use ↵Martin Jansa2020-10-091-1/+1
| | | | | | | | | | | trailing slash in S * see oe-core base.bbclass changes from: https://lists.openembedded.org/g/openembedded-core/message/143159 https://lists.openembedded.org/g/openembedded-core/message/143161 Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wolfssl: upgrade 4.4.0 -> 4.5.0Alexander Vickberg2020-10-062-2/+36
| | | | | | | Add patch from upstream which fixes building on big endian. Signed-off-by: Alexander Vickberg <wickbergster@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: Add missing rdep on nftables-pythonWinfried Dobbe2020-09-261-0/+1
| | | | | | | Fixes Issue #280 Signed-off-by: Winfried Dobbe <winfried.dobbe@xmsnet.nl> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* arno-iptables-firewall: upgrade 2.1.0 -> 2.1.1Zang Ruochen2020-09-251-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libiec61850: add recipe for libiec61850Romain Naour2020-09-244-0/+141
| | | | | | | | | | | | | | | IEC 61850 is an international standard for communication systems in Substation Automation Systems (SAS) and management of Decentralized Energy Resources (DER). It is seen as one of the communication standards of the emerging Smart Grid. Add two upstream patch fixing build issues with musl libc. Enable the libiec61850 python binding (pyiec61850) that require a fix to find the correct PYTHON_SITE_DIR path while cross-compiling. Signed-off-by: Romain Naour <romain.naour@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* crda: rdepends on wireless-regdb-staticRobert Yang2020-09-241-1/+1
| | | | | | | | | | | | | | | | | The wireless-regdb has been moved to oe-core. According the commit message: wireless-regdb-static should be used with kernel >= 4.15. wireless-regdb can be used with older kernels and is mostly irrelevant here, but keeping it in meta-networking would create needless recipe duplication. it should replace runtime dependency wireless-regdb with wireless-regdb-static. Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* firewalld: upgrade 0.8.3 -> 0.9.0Todd Cunningham2020-09-231-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cifs-utils: remove explicitly set PV variableVladimir Zapolskiy2020-09-231-2/+0
| | | | | | | | | There is no need to set and then tediously modify PV variable on every upgrade, what's worse it may happen that the PV is not modified like it happened on the recent upgrade from cifs-utils-6.10 to cifs-utils-6.11. Signed-off-by: Vladimir Zapolskiy <vladimir@tuxera.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* strongswan: Remove obsolete setting regarding the Standard OutputMingli Yu2020-09-232-0/+35
| | | | | | | | | | | | The Standard output type "syslog" is obsolete, causing a warning since systemd version 246 [1]. Please consider using "journal" or "journal+console" [1] https://github.com/systemd/systemd/blob/master/NEWS#L202 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ippool: Remove obsolete setting in service fileMingli Yu2020-09-231-1/+0
| | | | | | | | | | | | The Standard error type "syslog" is obsolete, causing a warning since systemd version 246 [1]. Please consider using "journal" or "journal+console" [1] https://github.com/systemd/systemd/blob/master/NEWS#L202 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ssmtp: adjust u-aMartin Jansa2020-09-181-8/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * it's newaliases not newalias in sbindir * drop u-a for man pages, because only ssmtp.8 was created which shouldn't conflict with esmpt In my build I don't have mailq, sendmail, newaliases as man pages, but binaries in sbindir (and the sbinbinary is called newaliases, not newalias) tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/ tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr/share tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr/share/man tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr/share/man/man8 tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr/share/man/man8/ssmtp.8 tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr/sbin tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr/sbin/mailq tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr/sbin/sendmail tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr/sbin/newaliases tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/usr/sbin/ssmtp tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/etc tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/etc/ssmtp tmp-glibc/work/core2-64-oe-linux/ssmtp/2.64-r0/image/etc/ssmtp/revaliases this added u-a is causing following warnings: WARNING: ssmtp-2.64-r0 do_package: ssmtp: alternative target (/usr/share/man/man1/mailq.1 or /usr/share/man/man1/mailq.1.ssmtp) does not exist, skipping... WARNING: ssmtp-2.64-r0 do_package: ssmtp: alternative target (/usr/share/man/man1/newaliases.1 or /usr/share/man/man1/newaliases.1.ssmtp) does not exist, skipping... WARNING: ssmtp-2.64-r0 do_package: ssmtp: alternative target (/usr/share/man/man1/sendmail.1 or /usr/share/man/man1/sendmail.1.ssmtp) does not exist, skipping... WARNING: ssmtp-2.64-r0 do_package: ssmtp: alternative target (/usr/sbin/newalias or /usr/sbin/newalias.ssmtp) does not exist, skipping... WARNING: ssmtp-2.64-r0 do_package: ssmtp: NOT adding alternative provide /usr/share/man/man1/mailq.1: /usr/share/man/man1/mailq.1.ssmtp does not exist WARNING: ssmtp-2.64-r0 do_package: ssmtp: NOT adding alternative provide /usr/share/man/man1/newaliases.1: /usr/share/man/man1/newaliases.1.ssmtp does not exist WARNING: ssmtp-2.64-r0 do_package: ssmtp: NOT adding alternative provide /usr/share/man/man1/sendmail.1: /usr/share/man/man1/sendmail.1.ssmtp does not exist WARNING: ssmtp-2.64-r0 do_package: ssmtp: NOT adding alternative provide /usr/sbin/newalias: /usr/sbin/newalias.ssmtp does not exist WARNING: ssmtp-2.64-r0 do_package: ssmtp: alt_link == alt_target: /usr/share/man/man1/mailq.1 == /usr/share/man/man1/mailq.1 WARNING: ssmtp-2.64-r0 do_package: ssmtp: alt_link == alt_target: /usr/share/man/man1/newaliases.1 == /usr/share/man/man1/newaliases.1 WARNING: ssmtp-2.64-r0 do_package: ssmtp: alt_link == alt_target: /usr/share/man/man1/sendmail.1 == /usr/share/man/man1/sendmail.1 WARNING: ssmtp-2.64-r0 do_package: ssmtp: alt_link == alt_target: /usr/sbin/newalias == /usr/sbin/newalias Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* netkit-rsh: inherit update-alternativesMartin Jansa2020-09-181-1/+1
| | | | | | | | | * fixes: netkit-rsh-0.17-r0 do_package_qa: QA Issue: netkit-rsh: recipe defines ALTERNATIVE_netkit-rsh-client but doesn't inherit update-alternatives. This might fail during do_rootfs later! [missing-update-alternatives] netkit-rsh-0.17-r0 do_package_qa: QA Issue: netkit-rsh: recipe defines ALTERNATIVE_netkit-rsh-server but doesn't inherit update-alternatives. This might fail during do_rootfs later! [missing-update-alternatives] Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>