packages/net/prosody, branch master

prosody: do not drive the service through prosodyctl

2026-08-19T20:27:09Z

prosodyctl refuses start, stop, restart and reload once it detects an init system, and /etc/init.d/prosody makes that detection always true. The refusal is fatal, so the service could neither be started nor stopped: ERROR: Use of 'prosodyctl stop' is disabled in this installation because we detected that this system uses rc.d for managing services. Let procd supervise the daemon directly with -F instead, and reload the configuration with SIGHUP, which is what prosody expects. Signed-off-by: Josef Schlehofer

prosody: add test-version.sh

2026-08-09T08:40:28Z

Neither prosody nor prosodyctl reports its version on any flag the generic tests probe, so the version check fails without an override. Drop the now duplicate check from the functional test.sh. Signed-off-by: Josef Schlehofer

prosody: extend test.sh past the version string grep

2026-07-31T06:46:08Z

The previous test only grepped prosody.version and ran `prosodyctl about`, which still passes when the parts that actually differ per target architecture are broken. Drive the rest of the package instead: - Assert `prosodyctl about` reports Lua 5.4. The wrapper silently falls back to /usr/bin/lua (5.1 on OpenWrt) if --runwith is lost, and prosody 13 refuses to run on it. - Require loader.lua to be installed, since prosody(ctl) cannot resolve any of its 'prosody.*' requires without it. - Register and unregister an account on the sample VirtualHost. That is the only path exercising util.datamanager storage together with the internal_hashed SCRAM derivation, and it must not leave the cleartext password on disk. - Load each of the 13 compiled util/*.so extensions through their luaopen_prosody_util_* entry points. - Check known-answer vectors through util.hashes and an Ed25519 sign/verify round trip through util.crypto (both linked against libopenssl), IDNA plus stringprep through util.encodings (libidn), and XML parsing through util.xml (luaexpat). - Require lfs, socket and ssl, so a missing luafilesystem5.4 / luasocket5.4 / luasec5.4 runtime dependency fails here rather than on a user's router. The XMPP daemon is still never started: it would block forever under QEMU emulation. Signed-off-by: Alexandru Ardelean

prosody: update to 13.0.6

2026-07-31T06:46:08Z

0.12.x is EOL upstream and accumulating CVEs. Bump to the current stable 13.0.6, which carries the fix from security advisory 2026-04-29 / prosody.im/security/advisory_735dd9d3 that first shipped in 13.0.5. Prosody 13 requires Lua >= 5.2 (configure rejects 5.1). Switch the build and runtime to Lua 5.4 and depend on the new luafilesystem5.4 / luaexpat5.4 / luasec5.4 / luasocket5.4 variants. Drop the now-unused luabitop dependency: bit operations are built in since Lua 5.3. Other notes: - configure now needs an explicit --lua-version=5.4 and --runwith=lua5.4 because the wrapper script defaults to '/usr/bin/lua' (5.1 on OpenWrt). - Install the new mod_debug_stanzas plugin directory. The commented-out fallbacks/*.lua install is dropped rather than revived: upstream's 'make install' never copies that directory, and fallbacks/lxp.lua is Lua 5.1 code using module(), which does not even load on 5.4. - util-src/hashes.c now calls EVP_blake2{s256,b512}(), which libopenssl does not provide unless OPENSSL_WITH_BLAKE2 is set, so compile those two hashes out when libcrypto lacks them. Selecting the symbol instead is not enough: the resulting util/hashes.so still fails to relocate against a stock libcrypto, and prosody aborts at startup. Only the COMPAT util.hmac table references them, and it tolerates nil entries. - Install loader.lua. 13.x moved every internal require() to the 'prosody.*' namespace, and loader.lua is what maps those names back onto the installed layout. It is the first file prosodyctl looks for, so both prosody and prosodyctl abort at startup without it. Refs: https://github.com/openwrt/packages/issues/29252 Release notes: https://blog.prosody.im/prosody-13.0.6-released/ Security: https://prosody.im/security/advisory_735dd9d3/ Signed-off-by: Alexandru Ardelean

prosody: fix build, bump to to 0.12.6 and add test.sh

2026-05-06T11:40:45Z

mod_s2s was refactored into a single mod_s2s.lua in the flat modules directory in 0.12.x; remove the obsolete subdirectory install rule that caused the package build to fail. Also add util/human/ and util/prosodyctl/ which are new subdirectories in 0.12.x not covered by the previous install rules. Force libidn instead of ICU for stringprep prosody's configure script auto-detects stringprep backends and prefers ICU when available, generating -DUSE_STRINGPREP_ICU and including . The OpenWrt SDK staging directory does not provide ICU development headers, so the build fails with: encodings.c:271:10: fatal error: unicode/usprep.h: No such file or directory The Makefile DEPENDS already declares +libidn. Pass --with-idn=idn to explicitly select the libidn backend, which is available in the staging directory. Also, pass TARGET="../util/" to MAKE_FLAGS. OpenWrt has it's own TARGET env var which clobbers the 'TARGET' var from prosody's build (specified as 'TARGET?=../util/') Adding a test.sh to check for the correct version (since prosody mostly has lua scripts). Security release addressing multiple vulnerabilities. 0.12.6 is likely the last release of the 0.12.x series (EOL June 2026). Upstream advisory: https://prosody.im/security/ Signed-off-by: Alexandru Ardelean

prosody: fix PKG_HASH for 0.12.4

2026-04-28T21:10:43Z

The prosody.im upstream updated the 0.12.4 tarball in-place, changing its content without bumping the version. Update PKG_HASH to match the currently published tarball. Fixes: f4d305b73 ("prosody: update to 0.12.4") Signed-off-by: Alexandru Ardelean

prosody: update to 0.12.4

2026-04-26T20:21:48Z

Release notes: https://blog.prosody.im/prosody-0.12.4-released/ Co-authored-by: BKPepe <4096468+BKPepe@users.noreply.github.com>

prosody: update to version 0.11.13

2022-01-28T20:10:09Z

Fixes CVEs: - CVE-2022-0217 - CVE-2021-37601 - CVE-2021-32918 - CVE-2021-32920 - CVE-2021-32921 - CVE-2021-32917 - CVE-2021-32919 Signed-off-by: Josef Schlehofer

prosody: fix shellcheck warnings

2020-10-16T01:20:20Z

Remove paxctl stuff. pax is not packaged in OpenWrt. Add reload support. Install lua cfg file as 644. It's needed to be readable as prosody user Signed-off-by: Rosen Penev

prosody: update to 0.11.7

2020-10-15T22:34:51Z

Signed-off-by: Rosen Penev