Staging tree of Piotr Dymacz https://git.openwrt.org/openwrt/staging/pepe2k/atom?h=v22.03.1 2022-09-16T16:50:46Z 2022-09-16T16:50:46Z Petr Štetiar 2022-09-13T05:40:37Z urn:sha1:81388f74b58e98d79274a788b442b7a1aa8a11c7 Several users of wget for downloads (curl is not available in the system) have reported broken download functionality: wget --tries=5 --timeout=20 --output-document=- https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.10.142.tar.xz http://: Invalid host name. Thats all happening due to '' was passed as an argument, which got later expanded to http://. In the context of a list constructor '' is not nothing, it is an empty string element. So fix it by using () as it will yield "nothing" and thus not introduce an empty string element. Fixes: #10692 Fixes: 90c6e3aedf16 ("scripts: always check certificates") Signed-off-by: Jo-Philipp Wich <jo@mein.io> [shellwords() -> ()] Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit 50a48faa1b8424e6b4b436b7118fffa2cba14b18) 2022-09-16T16:50:46Z Petr Štetiar 2022-09-13T05:38:10Z urn:sha1:b8cbca8ac8e89aa417a2ab739b81d288185a4b2d When running build in verbose mode `make V=s` we can see a lot of following warnings when curl is not available in the system: Can't exec "curl": No such file or directory at scripts/download.pl line 77. So lets fix it by redirecting of the stderr to null hole. Signed-off-by: Petr Štetiar <ynezz@true.cz> (cherry picked from commit c836ca84e8f641e10a8349a8f9b7432b33d6cec1) 2022-09-16T16:50:46Z Josh Roys 2022-07-23T15:23:16Z urn:sha1:340b138932c3720db227821415f494ac81e8b675 Remove flags from wget and curl instructing them to ignore bad server certificates. Although other mechanisms can protect against malicious modifications of downloads, other vectors of attack may be available to an adversary. TLS certificate verification can be disabled by turning oof the "Enable TLS certificate verification during package download" option enabled by default in the "Global build settings" in "make menuconfig" Signed-off-by: Josh Roys <roysjosh@gmail.com> [ add additional info on how to disable this option ] Signed-off-by: Christian Marangi <ansuelsmth@gmail.com> (cherry picked from commit 90c6e3aedf167b0ae1baf376e7800a631681e69a) 2022-03-09T10:23:25Z Rui Salvaterra 2022-02-09T15:18:45Z urn:sha1:6b822189b11d0abb3a8618f7b9f73a9de50caabd While at it, also fix the download.xs4all.nl and add ftp.gnu.org to the GNU mirrors, as it seems to be updated faster. Deleted (upstreamed): 600-Close_the_file_descriptor.patch [1] [1] https://sourceware.org/git/?p=binutils-gdb.git;a=commit;h=5a98fb7513b559e20dfebdbaa2a471afda3b4742 Signed-off-by: Rui Salvaterra <rsalvaterra@gmail.com> 2022-01-17T08:14:26Z Ansuel Smith 2021-11-25T01:12:58Z urn:sha1:88204bfa82f982a986d2aa3e166a4c5946040308 Ubuntu started to flag which as deprecated and it seems which is not really standard and may vary across Distro. Drop the use of which and use the standard 'command -v' for this simple task. Which is still present in the prereq if some package/script still use which. A utility script called command_all.sh is implemented that will just mimic the output of which -a. Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com> 2021-05-13T13:13:15Z Leonardo Mörlein 2021-05-09T20:28:15Z urn:sha1:b993b68b6ca8444b5227a0c18df4600b37ac565c Before this commit, it was assumed that mkhash is in the PATH. While this was fine for the normal build workflow, this led to some issues if make TOPDIR="$(pwd)" -C "$pkgdir" compile was called manually. In most of the cases, I just saw warnings like this: make: Entering directory '/home/.../package/gluon-status-page' bash: line 1: mkhash: command not found bash: line 1: mkhash: command not found bash: line 1: mkhash: command not found bash: line 1: mkhash: command not found bash: line 1: mkhash: command not found bash: line 1: mkhash: command not found bash: line 1: mkhash: command not found bash: line 1: mkhash: command not found [...] While these were only warnings and the package still compiled sucessfully, I also observed that some package even fail to build because of this. After applying this commit, the variable $(MKHASH) is introduced. This variable points to $(STAGING_DIR_HOST)/bin/mkhash, which is always the correct path. Signed-off-by: Leonardo Mörlein <me@irrelefant.net> 2021-02-26T19:41:00Z David Bauer 2021-02-20T20:17:26Z urn:sha1:9a9cf40dd968f409cf36c9537e79438d35322d95 Add an alias for Debian packages and download them from the Debian mirror redirector. Signed-off-by: David Bauer <mail@david-bauer.net> 2021-02-26T19:41:00Z David Bauer 2021-02-20T18:18:32Z urn:sha1:01c01d9861d26af53b88f15cb13283af5d9685a9 Use the GNOME mirror redirector as the primary download source for GNOME packages. Signed-off-by: David Bauer <mail@david-bauer.net> 2021-02-21T23:57:04Z David Bauer 2021-02-20T20:24:11Z urn:sha1:f04e0074915f03249cdebb460d4dc92875091c63 These mirrors don't exist anymore. Remove them. Signed-off-by: David Bauer <mail@david-bauer.net> 2021-02-05T22:00:24Z Paul Spooren 2021-01-30T20:54:44Z urn:sha1:8286f3a3d3a7d65d36ee312c6fd3828d4e4fd048 Multiple sources are hosted on OpenWrts source server only. The source URLs to point to the server vary based on different epochs in OpenWrts history. Replace all by @OPENWRT which is an "empty" mirror, therefore using the fallback servers sources.cdn.openwrt.org and sources.openwrt.org. Signed-off-by: Paul Spooren <mail@aparcar.org>