summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-filter
Commit message (Collapse)AuthorAgeFilesLines
* nftables: avoid python dependencies when building without pythonMichael Olbrich2024-05-301-2/+2
| | | | | | | | | | | | Use inherit_defer instead of inhert. This way, setuptools3 is not inherited when python is removed from PACKAGECONFIG in a .bbappend file. This avoids dependencies added by setuptools3. Don't add nftables-python to PACKAGES if python is disabled. It adds extra runtime dependencies on python3-core and python3-json. Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* arno-iptables-firewall: upgrade 2.1.1 -> 2.1.2Wang Mingyu2024-05-281-1/+1
| | | | | | | | | | | | | | | Changelog: ============ * Enable IPv6 name record lookups for dig-wrapper. This indirectly enables IPv6/AAAA-record support for dyndns-host-open (& traffic-accounting) plugin ! Prevent systemd from terminating the job manager when some rules fail * Renamed xxx_OUTPUT to INET_OUTPUT_xxx for clarity/consistency + Additional INET_OUTPUT_xxx settings to have better control of internet access on this machine * Reorder some code/settings for clarity/consistency Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Start WORKDIR -> UNPACKDIR transitionKhem Raj2024-05-233-8/+8
| | | | | | | Replace references of WORKDIR with UNPACKDIR where it makes sense to do so in preparation for changing the default value of UNPACKDIR. Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: Fix ptest runsKhem Raj2024-04-102-3/+24
| | | | | | | | | | | It gets OOMs with memory < 2G on x86_64 qemu Export NFT variable in run-ptest script its used by few tests Add required runtime dependencies for ptests to pass This also requires changes to kernel config features/nf_tables/nft_test.scc and CONFIG_VETH Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: Fix failed ptest testcasesWilliam Lyu2024-04-023-0/+101
| | | | | | | | | | | | | | | There are 2 failed ptest testcases. They fail because they are broken, but the fix from the upstream is not yet available in version 1.0.9. These testcases are: - tests/shell/testcases/sets/reset_command_0 Fix from the upstream: https://git.netfilter.org/nftables/commit/?id=7a6089a400a573b9a4fd92f29c00a6be7b8ef269 - tests/shell/testcases/json/0005secmark_objref_0 Fix from the upstream: https://git.netfilter.org/nftables/commit/?id=fff913c1eefbc84eb2d9c52038ef29fe881e9ee9 Signed-off-by: William Lyu <William.Lyu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: Fix ShellCheck violations in ptest wrapper script "run-ptest"William Lyu2024-04-021-5/+5
| | | | | | | | | | | | | | | | | | | | | The following ShellCheck violations in "run-ptest" are fixed: - line 4: SC2164: Use 'cd ... || exit' or 'cd ... || return' in case cd fails. - line 7: SC2086: Double quote to prevent globbing and word splitting. - line 9: SC2006: Use $(...) notation instead of legacy backticks `...`. SC2086: Double quote to prevent globbing and word splitting. SC2126: Consider using 'grep -c' instead of 'grep|wc -l'. - line 10: SC2006: Use $(...) notation instead of legacy backticks `...`. SC2086: Double quote to prevent globbing and word splitting. SC2126: Consider using 'grep -c' instead of 'grep|wc -l'. - line 17: SC2086: Double quote to prevent globbing and word splitting. Signed-off-by: William Lyu <William.Lyu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: Fix ptest output format issuesWilliam Lyu2024-04-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix the following ptest output format issues: - For "sed" command, change "-e" option to "-E" option. I believe the previous "-e" option is a typo based on the manual page of "sed": -e script, --expression=script add the script to the commands to be executed "-E" option, on the other hand, makes "sed" "use extended regular expressions in the script" according to the manual page. - The test result summary line is being treated as both a passed testcase and a failed testcase due to this line containing substring "[OK]" and "[FAILED]". The following is a sample test result summary line: I: results: [OK] 379 [SKIPPED] 1 [FAILED] 0 [TOTAL] 380 The fix is to change run-ptest to look for "I: [OK]" and "W: [FAILED]" when determining which lines correspond to passed/failed testcases. - Previously, only "W: [FAILED]" out of the following testcase failure prompts is parsed: W: [CHK DUMP] W: [VALGRIND] W: [TAINTED] W: [DUMP FAIL] W: [FAILED] Adding parsing for all testcase failure prompts. Signed-off-by: William Lyu <William.Lyu@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: Add DESCRIPTION and HOMEPAGERandy MacLeod2024-03-261-0/+5
| | | | | | | Add DESCRIPTION and HOMEPAGE. Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipset: Update to 7.21Khem Raj2024-03-242-2/+53
| | | | | | Fix build with latest musl while here Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: drop ${SRCPV} usageMartin Jansa2024-02-091-1/+1
| | | | | | | | | | * Drop SRCPV similarly like oe-core did in: https://git.openembedded.org/openembedded-core/commit/?h=nanbield&id=843f82a246a535c353e08072f252d1dc78217872 * SRCPV is deferred now from PV to PKGV since: https://git.openembedded.org/openembedded-core/commit/?h=nanbield&id=a8e7b0f932b9ea69b3a218fca18041676c65aba0 Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
* ipset: upgrade 7.15 -> 7.19Khem Raj2023-11-061-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 1.0.8 -> 1.0.9Yi Zhao2023-10-231-3/+2
| | | | | | | | | | Changelog: https://www.netfilter.org/projects/nftables/files/changes-nftables-1.0.9.txt Drop configure option --disable-python as it has been removed upstream. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* conntrack-tools: upgrade 1.4.7 -> 1.4.8Yi Zhao2023-10-231-2/+2
| | | | | | | | This release fixes several regressions in 1.4.7 with the -U/--update and -D/--delete commands. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 1.0.7 -> 1.0.8Yi Zhao2023-08-221-1/+1
| | | | | | | | Changelog: https://netfilter.org/projects/nftables/files/changes-nftables-1.0.8.txt Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnetfilter-queue: enable native buildYi Zhao2023-07-281-0/+2
| | | | | | | Required by daq native build. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnfnetlink: enable native buildYi Zhao2023-07-281-0/+2
| | | | | | | Required by libnetfilter-queue native build. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.2.5 -> 1.2.6Wang Mingyu2023-07-201-1/+1
| | | | | | | | | | | Changelog: ========= tests: nft-rule-test: Add test cases to improve code coverage tests: nft-table-test: fix typo shixuantong expr: meta: introduce broute meta expression Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* conntrack-tools: add required kernel modules to RRECOMMENDSYi Zhao2023-06-271-0/+4
| | | | | | | | Refer to https://git.netfilter.org/conntrack-tools/tree/INSTALL, add required kernel modules to RRECOMMENDS. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* conntrack-tools: add systemd unit fileYi Zhao2023-06-272-0/+21
| | | | | | | | | Refer to https://salsa.debian.org/pkg-netfilter-team/pkg-conntrack-tools/-/blob/master/debian/conntrackd.service, add systemd unit file conntrackd.service. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* *.patch: add Upstream-Status to all patchesMartin Jansa2023-06-212-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | There is new patch-status QA check in oe-core: https://git.openembedded.org/openembedded-core/commit/?id=76a685bfcf927593eac67157762a53259089ea8a This is temporary work around just to hide _many_ warnings from optional patch-status (if you add it to WARN_QA). This just added Upstream-Status: Pending everywhere without actually investigating what's the proper status. This is just to hide current QA warnings and to catch new .patch files being added without Upstream-Status, but the number of Pending patches is now terrible: 5 (26%) meta-xfce 6 (50%) meta-perl 15 (42%) meta-webserver 21 (36%) meta-gnome 25 (57%) meta-filesystems 26 (43%) meta-initramfs 45 (45%) meta-python 47 (55%) meta-multimedia 312 (63%) meta-networking 756 (61%) meta-oe Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nfacct: Update SRC_URI to point to valid URLKhem Raj2023-05-011-5/+3
| | | | | | Update UPSTREAM_CHECK_URI accordingly Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 1.0.6 -> 1.0.7Petr Gotthard2023-04-141-11/+33
| | | | | | | | | | | | | | | | | | | Changelog: https://netfilter.org/projects/nftables/files/changes-nftables-1.0.7.txt The COPYING text changed to highlight that "New code though is moving to GPL version 2 or any later which is the preferred license for this project these days." Although the project itself stays GPLv2 only. https://netfilter.org/licensing.html#terms The upstream replaced distutils with setuptools, so the nftables-python is now built using the standard approach. The coexistence of setuptools and automake is solved in the same way as in meta-oe/recipes-support/libiio. The removal of *.pyc is no longer necessary. Signed-off-by: Petr Gotthard <petr.gotthard@advantech.cz> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.2.4 -> 1.2.5Yi Zhao2023-03-122-5/+5
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnetfilter-cttimeout: upgrade 1.0.0 -> 1.0.1Yi Zhao2023-03-062-269/+5
| | | | | | | Drop backport patch. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnetfilter-cthelper: upgrade 1.0.0 -> 1.0.1Yi Zhao2023-03-063-399/+17
| | | | | | | Drop backport patch. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnfnetlink: upgrade 1.0.1 -> 1.0.2Yi Zhao2023-03-068-681/+20
| | | | | | | Drop backport patches. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: Fix missing leading whitespace with ':append'Niko Mauno2023-01-251-1/+1
| | | | | | | | | Mitigate occurence where ':append' operator is used and leading whitespace character is obviously missing, risking inadvertent string concatenation. Signed-off-by: Niko Mauno <niko.mauno@vaisala.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: fix builds with latest setuptoolsAlexander Kanavin2023-01-062-45/+5
| | | | | | | | | | | | | | Using a private module from setuptools is not a good idea and no longer works with latest setuptools. it's actually better to revert to official distutils even if it is going away in the next python release. Hopefully by then upstream will transition to something supported. TMPDIR in .pyc can be addressed by simply not installing the .pyc. Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: Upgrade to 1.0.6Khem Raj2023-01-061-3/+2
| | | | | | | | Changes are here [1], change to xz compressed archives [1] https://www.netfilter.org/projects/nftables/files/changes-nftables-1.0.6.txt Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.2.3 -> 1.2.4Wang Mingyu2022-11-141-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ulogd2: upgrade 2.0.7 -> 2.0.8Wang Mingyu2022-11-071-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: use automake ptest output formatRandy MacLeod2022-11-072-2/+19
| | | | | | | | | | | | | | | | | Make run-ptest use the correct libdir for multilib builds. Log the ptest output to a date stamped file and append a test summary to the end of the log. Munge the log as it is produced to: - insert the expected automake keywords: PASS and FAIL. - remove escape sequences used for ANSI colours as well as movement commands Add additional discrete tool dependencies to the nftables-ptest list since the test suite does not work with the busybox versions. Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* conntrack-tools: Use canonical shell spacingAlex Kiernan2022-10-161-12/+12
| | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* conntrack-tools: Add PACKAGECONFIGs for build optionsAlex Kiernan2022-10-161-1/+8
| | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* conntrack-tools: Upgrade 1.4.6 -> 1.4.7Alex Kiernan2022-10-161-3/+2
| | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 1.0.4 -> 1.0.5Yi Zhao2022-09-291-1/+1
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.2.2 -> 1.2.3Yi Zhao2022-09-292-656/+4
| | | | | | | | Drop 0001-avoid-naming-local-function-as-one-of-printf-family.patch as the issue has been fixed upstream. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: Upgrade 1.0.2 -> 1.0.4Alex Kiernan2022-07-123-49/+54
| | | | | | | | | | | | | | | | | Drop backported patch, switch PACKAGECONFIG assignment to ?= (matches current practice), add in editline, linenoise CLI options and xtables option. Switch to --disable-python when building without python to avoid a configure time warning. We can drop UPSTREAM_CHECK_REGEX as the version no longer gets confused by the 0.099 version which exists. Fix buildpaths warning by switching to setuptools and add dependency on ${PN}-python to ${PN}-ptest so that the embedded paths in the compiled python files are correct. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.2.1 -> 1.2.2wangmy2022-06-301-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* conntrack-tools: fix postinst scriptAdrian Freihofer2022-05-281-0/+1
| | | | | | | | | | | | | | Fix error caused by postinst script of conntrack-tools: do_rootfs: Postinstall scriptlets of ['conntrack-tools'] have failed... Configuring ... rootfs//var/lib/opkg/info/conntrack-tools.postinst: line 2: setcap: command not found conntrack-tools.postinst returned 127, marking as unpacked only... Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* conntrack-tools: fix postinst scriptKai Kang2022-05-101-2/+2
| | | | | | | | | | | Fix error caused by postinst script of conntrack-tools: | /var/tmp/rpm-tmp.or09Iq: line 4: unexpected EOF while looking for matching `"' | %post(conntrack-tools-1.4.6-r0.core2_64): waitpid(1173) rc 1173 status 200 | warning: %post(conntrack-tools-1.4.6-r0.core2_64) scriptlet failed, exit status 2 Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ulogd2: Add recipeAlex Kiernan2022-05-073-0/+271
| | | | | | | | | | | ulogd-2.x provides a flexible, almost universal logging daemon for netfilter logging. This encompasses both packet-based logging (logging of policy violations) and flow-based logging, e.g. for accounting purpose. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Alex Kiernan <alexk@zuma.ai> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* conntrack-tools: Fix missing capabilityBassem Boubaker2022-04-291-0/+5
| | | | | | The commit fix this error message: Do not forget that you need *root* or CAP_NET_ADMIN capabilities ;-) Signed-off-by: Khem Raj <raj.khem@gmail.com>
* arno-iptables-firewall: Do not use bitbake variable inside SKhem Raj2022-04-231-1/+1
| | | | | | | | Location of file inside sourcedir fixed but bitbake variable systemd_unitdir varies depending on usrmerge feature hence can not be used here Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: add ptestTrevor Gamblin2022-04-122-1/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Note that (like for nftables itself), the ptests will require the following added to local.conf (or the kernel configuration): KERNEL_FEATURES:append = " features/nf_tables/nf_tables.scc" Current pass/fail results: I: results: [OK] 271 [FAILED] 29 [TOTAL] 300 I've been investigating the failing tests under the assumption that they fail because of missing kernel modules, but there are some that suggest syntax problems (possibly problems with the tests themselves). Example: W: [FAILED] ./tests/shell/testcases/listing/0020flowtable_0: got 1 /dev/stdin:2:12-12: Error: Could not process rule: No such file or directory flowtable f { ^ /dev/stdin:6:11-12: Error: Could not process rule: No such file or directory flowtable f2 { ^^ Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnetfilter-conntrack: upgrade 1.0.8 -> 1.0.9Yi Zhao2022-03-312-3/+67
| | | | | | | Backport a patch to fix musl build. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 1.0.1 -> 1.0.2Yi Zhao2022-03-242-2/+44
| | | | | | | | | | Backport a patch to fix build error: ../../nftables-1.0.2/examples/nft-buffer.c:3:10: fatal error: nftables/libnftables.h: No such file or directory 3 | #include <nftables/libnftables.h> | ^~~~~~~~~~~~~~~~~~~~~~~~ Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Update LICENSE variable to use SPDX license identifiersKhem Raj2022-03-0414-14/+14
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: remove perl from RDEPENDSChristian Eggers2022-02-141-1/+1
| | | | | | | | | The upstream ebtables-legacy-save perl script is replaced by a bash implementation (taken from Fedora). So there's nothing left which RDEPENDs on perl. Signed-off-by: Christian Eggers <ceggers@arri.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnetfilter-queue: upgrade 1.0.3 -> 1.0.5Yi Zhao2022-01-182-1229/+1
| | | | | | | | Drop 0001-libnetfilter-queue-Declare-the-define-visivility-attribute-together.patch as the clang build issue had been fixed upstream. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-06-26 22:20:17 +0000