Conversation
Signed-off-by: Christian Stewart <christian@aperture.us>
Signed-off-by: Christian Stewart <christian@aperture.us>
Daemonize is a command line utility to run a program as a Unix daemon. Signed-off-by: Christian Stewart <christian@aperture.us> --- TODO: Changes requested for v2: https://patchwork.ozlabs.org/project/buildroot/patch/20210124102241.1207866-1-christian@paral.in/
Adds both host and target packages for buildah. Buildah is a tool that facilitates building OCI images. https://github.com/containers/buildah The buildah tree does not ship with a default policy.json file, and instead relies on packagers to provide one. A patch is added to create a basic barebones policy.json which is installed to /etc/containers/policy.json with a hook. Signed-off-by: Christian Stewart <christian@aperture.us> --- v1 -> v2: - add package to developers - add host runc dependency for host package - add libgpgme runtime dependency v2 -> v3: - add policy.json to target: required by some commands - example: buildah pull docker.io/library/alpine - pull: tested on raspberry pi 4 v3 -> v4: - TODO: move policy.json to package dir - https://lists.buildroot.org/pipermail/buildroot/2022-January/634936.html - bump to version v1.32.1 - https://github.com/containers/buildah/releases/tag/v1.32.1 v4 -> v5: - bump to version 1.35.x Signed-off-by: Christian Stewart <christian@aperture.us>
Add a symlink to the expected location for vpdma-1ba in the root of the firmware directory. Signed-off-by: Christian Stewart <christian@aperture.us>
paralin
marked this pull request as draft
June 16, 2022 02:36
paralin
force-pushed
the
skiff
branch
3 times, most recently
from
June 23, 2022 03:07
0915eeb to
7af4c59
Compare
paralin
force-pushed
the
skiff
branch
4 times, most recently
from
June 27, 2022 21:03
c5e35c6 to
ba56dae
Compare
paralin
force-pushed
the
skiff
branch
3 times, most recently
from
July 11, 2022 14:01
0d083d6 to
99d3e37
Compare
Signed-off-by: Christian Stewart <christian@paral.in>
Lack of an RNG source can block boot-up on headless systems with few hardware entropy sources. This patch allows rngd to start earlier than the current "basic.target" when systemd is used. Removing the dependency on "basic.target" and by extension, "sockets.target" will allow rngd to start before, for example, docker.sock - which can take some time to become ready without entropy. This is a cherry-pick of a peer project patch: https://patchwork.openembedded.org/patch/163303/ Signed-off-by: Christian Stewart <christian@aperture.us>
paralin
force-pushed
the
skiff
branch
10 times, most recently
from
July 19, 2022 11:26
75f485c to
f8af779
Compare
https://github.com/podman-container-tools/skopeo/releases/tag/v1.24.0 Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://www.ruby-lang.org/en/news/2026/07/14/ruby-4-0-6-released/ https://github.com/ruby/ruby/releases/tag/v4.0.6 Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://mmonit.com/monit/changes/ https://bitbucket.org/tildeslash/monit/commits/tag/release-6-0-0 Rebased patch 0002. Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
Changelog: https://github.com/zellij-org/zellij/blob/v0.45.1/CHANGELOG.md Signed-off-by: Alexander Shirokov <shirokovalexs@gmail.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
The removed patch has been merged [1]. Since version 0.24, a C++20 compiler is required [2], so add a dependency on gcc >= 10 and propagate it to kyua, which selects atf. Release notes: https://github.com/freebsd/atf/releases/tag/atf-0.25 https://github.com/freebsd/atf/releases/tag/atf-0.24 [1] freebsd/atf@67e7d35 [2] freebsd/atf@35134a3 Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com> [Julien: add link to v0.24 release notes] Signed-off-by: Julien Olivain <ju.o@free.fr>
Since hidapi was introduced in commit 6267f34, it forgot to propagate some dependencies of libgudev (which existed back then). Initially libgudev was only needed when BR2_INIT_SYSTEMD=y, but still the dependencies were not propagated for the systemd case. Anyway, since e739dd5, libgudev is a mandatory dependency of hidapi, independently from the selected init system. We make sure to propagate all dependencies of libgudev to hidapi, and propagate them to the reverse dependencies of hidapi. Fixes: 6267f34 ("hidapi: new package") Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
Even though kodi itself has architecture dependencies (expressed through BR2_PACKAGE_KODI_ARCH_SUPPORTS, the option BR2_PACKAGE_KODI_MYSQL selects BR2_PACKAGE_MARIADB, which has its own architecture dependencies as well. Make sure to propagate those to BR2_PACKAGE_KODI_MYSQL, which doesn't require adding a Config.in comment as these are purely architecture dependencies. We haven't replicate all dependencies of BR2_PACKAGE_MARIADB because all the others are covered by the top-level BR2_PACKAGE_KODI, and propagating them would require adding a Config.in comment for BR2_PACKAGE_KODI_MYSQL. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
The definition of BR2_PACKAGE_KODI_ARCH_SUPPORTS is incorrect, it goes like this: bool default y if BR2_PACKAGE_FFMPEG_ARCH_SUPPORTS default y if BR2_PACKAGE_HOST_OPENJDK_BIN_ARCH_SUPPORTS so it means it would be "y" if either BR2_PACKAGE_FFMPEG_ARCH_SUPPORTS *OR* BR2_PACKAGE_HOST_OPENJDK_BIN_ARCH_SUPPORTS is true. While clearly what we need is for both to be true: ffmpeg should be available for the target architecture, and openjdk should be available for the host architecture. One option was to change to: bool default y if BR2_PACKAGE_FFMPEG_ARCH_SUPPORTS && BR2_PACKAGE_HOST_OPENJDK_BIN_ARCH_SUPPORTS Or: bool default y if BR2_PACKAGE_FFMPEG_ARCH_SUPPORTS depends on BR2_PACKAGE_HOST_OPENJDK_BIN_ARCH_SUPPORTS But we preferred: bool default y depends on BR2_PACKAGE_FFMPEG_ARCH_SUPPORTS depends on BR2_PACKAGE_HOST_OPENJDK_BIN_ARCH_SUPPORTS Fixes: b6a2f49 ("package/kodi: depend on host-openjdk-bin instead of selecting BR2_NEEDS_HOST_JAVA") Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/taglib/taglib/blob/v2.3.2/CHANGELOG.md https://mail.kde.org/pipermail/taglib-devel/2026-September/003127.html Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
…7.2+ Update rtl8822cs driver to latest of the jethome-iot/rtl88x2cs. Fixes: http://autobuild.buildroot.org/results/d4705d1a933528bad1f4afdf8f621c71bda8eada Signed-off-by: Viacheslav Bocharov <v@baodeep.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
pocketpy enables thread support by default (PK_ENABLE_THREADS=ON) and
then requires Threads from cmake, which fails on toolchains without
thread support:
CMake Error at /usr/share/cmake-3.28/Modules/FindPackageHandleStandardArgs.cmake:230 (message):
Could NOT find Threads (missing: Threads_FOUND)
Thread support is optional, so enable it only when the toolchain
provides threads.
Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
Release notes: https://github.com/pocketpy/pocketpy/releases/tag/v2.2.0 Signed-off-by: Dario Binacchi <dario.binacchi@amarulasolutions.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/znc/znc/blob/znc-1.10.3/ChangeLog.md https://wiki.znc.in/ChangeLog/1.10.3 Fixes CVE-2020-11022, CVE-2020-11023, CVE-2026-82373 & CVE-2026-82374. Updated _SITE according to https://wiki.znc.in/index.php?title=ZNC&diff=3493&oldid=3460 Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
BR2_PACKAGE_PULSEVIEW selects BR2_PACKAGE_QT5BASE_PNG and BR2_PACKAGE_QT5BASE_WIDGETS, which both depend on BR2_PACKAGE_QT5BASE_GUI. It ends working because we also select BR2_PACKAGE_QT5SVG, which selects BR2_PACKAGE_QT5BASE_GUI, so there is no bug, but it's bit inconsistent to select sub-options that have a "depends on" without selecting the option they depend on. This not a bug fix, it has no functional implication. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
- BR2_PACKAGE_IVI_HOMESCREEN_AUDIO_PLAYERS selects gstreamer1, which has a depends on BR2_USE_MMU, but does not propagate it - BR2_PACKAGE_IVI_HOMESCREEN_FLUTTER_SECURE_STORAGE_PLUGIN selects libsecret, which has a depends on BR2_USE_MMU, but does not propagate it In practice there is no problem since ivi-homescreen depends on glibc, and glibc doesn't support any noMMU architecture. But just by walking the chain of option dependencies, this is not something that is theoretically guaranteed (making automated verification of dependencies difficult). The other "depends on" from gstreamer1 and libsecret, BR2_USE_WCHAR and BR2_TOOLCHAIN_HAS_THREADS are on the other hand already handled by the top-level BR2_PACKAGE_IVI_HOMESCREEN option, so there is no ambiguity. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
BR2_PACKAGE_QT5CINEX selects BR2_PACKAGE_QT5BASE_PNG, BR2_PACKAGE_QT5BASE_WIDGETS and BR2_PACKAGE_QT5BASE_EGLFS, which are all sub-options of BR2_PACKAGE_QT5BASE_GUI, but we don't explicitly selects BR2_PACKAGE_QT5BASE_GUI. It turns out that things work because the package selects BR2_PACKAGE_QT5GRAPHICALEFFECTS, which selects BR2_PACKAGE_QT5DECLARATIVE_QUICK, which selects BR2_PACKAGE_QT5BASE_GUI, but that is rather non-obvious, and it makes more sense for BR2_PACKAGE_QT5CINEX to directly select BR2_PACKAGE_QT5BASE_GUI if it also selects sub-options of it. No functional change. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
In commit 76241e8 ("package/libabseil-cpp: bump to version 20260817.0"), libabseil-cpp was bumped, which required the gcc >= 8.x dependency to be upgraded to a gcc >= 10.x dependency. This was properly done in package/protobuf as part of this commit, as protobuf is a reverse dependency of libabseil-cpp. However, usbguard, which is a reverse dependency of protobuf, was forgotten, and it no longer carries the correct gcc dependency. This commit fixes this issue. Fixes: 76241e8 ("package/libabseil-cpp: bump to version 20260817.0") Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
BR2_PACKAGE_LIBSSH_OPENSSL unconditionnally selects BR2_PACKAGE_LIBOPENSSL_ENGINES even though libressl is also supported as an OpenSSL provider (and BR2_PACKAGE_LIBOPENSSL_ENGINES doesn't make sense for libressl). This causes the following Kconfig warning: WARNING: unmet direct dependencies detected for BR2_PACKAGE_LIBOPENSSL_ENGINES Depends on [n]: <choice> && BR2_PACKAGE_LIBOPENSSL [=n] Selected by [y]: - BR2_PACKAGE_LIBSSH_OPENSSL [=y] && <choice> && BR2_PACKAGE_OPENSSL [=y] We checked that libssh, with OpenSSL support and libressl selected as an OpenSSL provider works fine, using the following defconfig: BR2_aarch64=y BR2_TOOLCHAIN_EXTERNAL=y BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y BR2_TOOLCHAIN_EXTERNAL_BOOTLIN_AARCH64_GLIBC_STABLE=y BR2_PACKAGE_LIBSSH=y BR2_PACKAGE_LIBSSH_SERVER=y BR2_PACKAGE_LIBRESSL=y Fixes: 62103be ("package/libssh: select BR2_PACKAGE_LIBOPENSSL_ENGINES") Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
In commit 0e2c958 ("package/libseccomp: bump to version 2.5.3"), the kernel headers dependency of seccomp was bumped from 3.12 to 3.17, but BR2_PACKAGE_WEBKITGTK_SANDBOX, which is a reverse dependency of BR2_PACKAGE_LIBSECCOMP was forgotten. This commit fixes this inconsistency. Fixes: 0e2c958 ("package/libseccomp: bump to version 2.5.3") Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
BR2_PACKAGE_WEBKITGTK_MULTIMEDIA selects BR2_PACKAGE_GST1_LIBAV, which depends on BR2_PACKAGE_FFMPEG_ARCH_SUPPORTS, but doesn't propagate this dependency. In practice, there is no issue, as webkitgtk is only available on a subset of CPU architectures, while BR2_PACKAGE_FFMPEG_ARCH_SUPPORTS makes ffmpeg available on pretty much all CPU architectures, except Cortex-M, m68k coldfire, and some specific cases of OpenRISC, which are not supported by webkitgtk. But for the sake of having correct dependency propagation, let's fix this. The other packages selected by BR2_PACKAGE_WEBKITGTK_MULTIMEDIA have dependencies that are already handled at the top-level BR2_PACKAGE_WEBKITGTK option. Fixes: e6e549b ("ffmpeg: add BR2_PACKAGE_FFMPEG_ARCH_SUPPORTS") Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
BR2_PACKAGE_FALCOSECURITY_LIBS selects BR2_PACKAGE_HOST_GRPC and BR2_PACKAGE_HOST_PROTOBUF, neither of which exists. These selects are anyway not needed, so drop them. Fixes: a15e35c ("falcosecurity-libs: add new package") Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
In commit 203725a ("package/clamav: bump version to 1.0.1"), select BR2_PACKAGE_JSON_C was added to BR2_PACKAGE_CLAMAV without propagating the BR2_TOOLCHAIN_HAS_SYNC_4 dependency from BR2_PACKAGE_JSON_C. Since at the same time a dependency on BR2_PACKAGE_HOST_RUSTC_TARGET_ARCH_SUPPORTS was added to clamav and Rust is not supported on the few architectures that don't have 4-byte sync intrinsics, this has basically no effect, but ensure a correct propagation of dependencies. Fixes: 203725a ("package/clamav: bump version to 1.0.1") Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
In commit 76241e8 ("package/libabseil-cpp: bump to version 20260817.0"), libabseil-cpp was bumped, which required the gcc >= 8.x dependency to be upgraded to a gcc >= 10.x dependency. This was properly done in package/protobuf as part of this commit, as protobuf is a reverse dependency of libabseil-cpp. However, mosh, which is a reverse dependency of protobuf, was forgotten, and it no longer carries the correct gcc dependency. This commit fixes this issue. Fixes: 76241e8 ("package/libabseil-cpp: bump to version 20260817.0") Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
…5.x, 5.10.x series Update the latest kernel releases to: - 7.2.5 -> 7.2.6 - 6.18.51 -> 6.18.52 - 6.12.109 -> 6.12.110 - 6.6.156 -> 6.6.157 - 6.1.187 -> 6.1.188 - 5.15.220 -> 5.15.221 - 5.10.269 -> 5.10.270 Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
Fixes the following vulnerabilities: - CVE-2026-59679: Font Server Client encoding Out-Of-Bounds Read/Write - CVE-2026-44950: Font Server Client Cumulative Glyph Data Heap Buffer Overflow For more details, see the advisory: https://lists.x.org/archives/xorg-announce/2026-August/003734.html Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/lldpd/lldpd/releases/tag/1.0.22 https://github.com/lldpd/lldpd/releases/tag/1.0.21 Fixes CVE-2026-46433, an out-of-bound read access when removing the VLAN tag. 1.0.21 fixes path traversal vulnerabilities and arbitrary file deletion in the privileged process. GPG signature verified with key AEF2348766F371C689A7360095A42FE8353525F9, LICENSE hash unchanged. Signed-off-by: Joachim Wiberg <troglobit@gmail.com> Signed-off-by: Julien Olivain <ju.o@free.fr>
check-package reports six warnings on S60lldpd: indentation with spaces, no DAEMON variable, and shellcheck complaints. The script also masks failures, the exit status of "[ $? = 0 ] && echo OK || echo FAIL" is the one of echo, so start and stop always return success. Stopping does not wait for the daemon to exit either, so a restart can race the instance on its way out. Rewrite it after package/busybox/S01syslogd, as the manual asks. lldpd daemonizes and writes the PID file itself, but does not remove it on exit, so pass the PID file to both start-stop-daemon and the daemon and drop the stale file once the process is gone. Also pick up arguments from /etc/default/lldpd and add the customary reload alias. Signed-off-by: Joachim Wiberg <troglobit@gmail.com> [Julien: remove .checkpackageignore entry to fix check-package error] Signed-off-by: Julien Olivain <ju.o@free.fr>
automated build + check-package + legal-info. Signed-off-by: Christian Stewart <christian@aperture.us>
Buildroot now carries upstream-backed fixes for the function parameter comparison and const-preserving string searches. Remove the older local patches so each source change is applied once. Signed-off-by: Christian Stewart <christian@aperture.us>
Linux 7.3 assigns remain-on-channel and management transmit cookies in cfg80211 and passes them to drivers by value. Accept those cookies while retaining driver-side generation for older kernels. Signed-off-by: Christian Stewart <christian@aperture.us>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
20 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR tracks changes vs upstream-master.