image-customization.lua has replaced GLUON_FEATURES and
GLUON_SITE_PACKAGES, so the file is always required to build a useful
Gluon image. In addition, not only 'file not found' errors were ignored,
but also all other Lua load errors, resulting in a build with empty
image customization when the file was not valid.

Closes #3218

(cherry picked from commit 7feaec85bf853252be886c4c20c612b4dfcef182)

Co-authored-by: Matthias Schiffer <mschiffer@universe-factory.net>

fix 5deb3aae

This upgrade path never worked due to increase of the kernel partition size.
They dropped this name from SUPPORTED_DEVICES upstream:
https://github.com/openwrt/openwrt/commit/0d28e5d6440d2a37841a207f943e6e5a23172883



(cherry picked from commit 10b6d8e1198a5576e6aa8ec694c81674b7afb3fc)

Co-authored-by: Felix Baumann <felix.bau@gmx.de>

We need to pass the `z` option with the volume mount so it gets labeled
correctly and access is possible on SELinux-enabled systems. On systems
without SELinux, the flag is a no-op.

Fixes #3199

(cherry picked from commit 9ccd353e469da2dd8d57b7ff839e8fe308d3dfe1)

Co-authored-by: Matthias Schiffer <mschiffer@universe-factory.net>

[v2023.2.x] modules: update to latest HEAD

3d08b0f wgpeerselector: fix undefined variable peer

5a7cac9 batman-adv: Provide teardown hook for batadv_vlan proto
75e1614 batctl: Merge bugfixes from 2024.0

cd5f6637f snort3: build against gperftools-runtime
525321667 snort3: update to 3.1.81.0
28aeff87b gperftools: add new package
f589b5880 hyperscan: new package for speeding up regex ops
c9dff69de dockerd: Update to 25.0.3
755e6f783 docker: Update to 25.0.3
984b65bf7 containerd: Update to 1.7.13
a697eea62 runc: Update to 1.1.12
b3270866f tailscale: Update to 1.58.2
bd5a36867 tailscale: Update to 1.58.0
1ff74e644 travelmate: update 2.1.2-4
e5c557be0 travelmate: update 2.1.2-3
3d7193cde php8: update to 8.2.16

78d493af22 generic l2tp: drop flow hash on forward
a2943e3795 generic vxlan: don't learn non-unicast L2 destinations
b30b1d3685 mediatek: filogic: Cudy WR3000 v1 wps button fix
e94052bfee mac80211: ath11k: sync with upstream

modules: update to latest HEAD

309ee2c26 git: update to 2.43.2
53fa23900 git: update to 2.43.0
f628aaa30 lighttpd: update to lighttpd 1.4.74 release hash
06b0d0cce ovn: bump to 22.03.5
0000f307c openvswitch: bump to 2.17.9
65883df9a squid: fix configure options
57acafa66 unbound: update to latest upstream release version 1.19.1
76aaa3059 libuv: fix CVE-2024-24806
1a4c42d69 haproxy: update to v2.8.6
b23808a54 ocserv: updated config
8e9ad0e3c ocserv: use better separator for sed
a19f8a1f1 openconnect: make host dependency more resilient
22e304ecf openconnect: update to 9.12
679b9cf55 openconnect: add support for option --pfs
9164fa255 lxc: update to 5.0.3
c5ad47372 zabbix: update to version 6.4.7
583af1248 yt-dlp: bump to version 2023.12.30
abba8cff8 yt-dlp: bump to version 2023.11.16
a696cd44b yt-dlp: add missing dependencies
f12547cf1 node: February 14 2024 Security Releases
95f45c24b bind: bump to 9.18.24
1159b8ec3 bind: bump to 9.18.19
74cd5e095 bind: update to version 9.18.18
dc3fec89a bind: bump to 9.18.16
2451d5a69 pdns-recursor: update to 4.8.6 (fixes CVE-2023-50387, CVE-2023-50868)
836047068 squid: update to 6.7
f711c7e24 p910nd: bump release
0f0962ee1 p910nd: hotplug shellcheck fixes
1e8c78fcc p910nd: init: check device (/dev/usb/lpX) existence
111228675 p910nd: init: partial fix for openwrt/packages#10496
238e16f97 p910nd: hotplug+init: include extra ieee1284 properties
00d14e9bb p910nd: hotplug: minor bug fixes
b7a11d611 p910nd: hotplug: small refactor
92d1d4a77 p910nd: init: add txtvers=1 to mDNS properties
c847cac8f p910nd: init: line-break and conditionalize mDNS properties
9ea1d672b p910nd: init: only run mDNS changes if mdns is set to on
7eeb756a2 p910nd: init script
3cac4412d p910nd: hotplug script
abe112566 adblock-fast: add force_dns_interface setting
280b81c7a stlink: add packages
d844df9a4 crowdsec: new upstream release version 1.6.0
91c5ca7ba openssh: fix build failure on powerpc_8548 https://github.com/openssh/openssh-portable/commit/1036d77b34a5fa15e56f516b81b9928006848cbd
89fcc9e27 openssh: bump to 9.6p1
fad7e0ae1 tailscale: create combined tailscale/tailscaled
cf0b1e0ed knot: update to version 3.3.4
de34798be knot: update to version 3.3.3
f83e01a4b dawn: Add PKG_BUILD_FLAGS:=no-lto because lto causes strange SegFaults
a062c2a51 dawn: Update to 2023-05-14
dbb40a890 snowflake: update to 2.8.1
26c24e579 mosquitto: reenable options wrongly turned off
db28d99be python-ble2mqtt: update to 0.2.2
c2ae7b95d python-dbus-fast: upgrade to 2.21.1
63f6af4bc nextdns: Update to version 1.42.0
6d6e398c7 Openvpn: add missing script-security
bce14a016 cloudflared: refine config.yml
892ce0645 dnsproxy: Update to 0.64.1
3ffac159c inih: Update to r58
a3c2cd8fb rclone: Update to 1.65.2
8c8ec8106 cloudflared: Update to 2024.1.5
6cb714722 dos2unix: Update to 7.5.2
8d02881d4 curl: update to 8.6.0
dcff607ba nebula: update to 1.8.2-2
905afb0ed xz: Update to 5.4.6
92a07db7d php8: update to 8.2.15
1167ef72e python-dbus-fast: update version 2.21.0
e6d3a7892 python3-bleak: add missing python3-typing-extensions dependency
0da0a501e natmap: update to 20240126
67dcaa5d7 sing-box: update to 1.8.4
f87af4985  banip: update 0.9.3-5
b61930ad7 v2ray-geodata: Update to latest version
9a26ff67e v2raya: do not allow changing config/log directory
4267c8776 dnsproxy: Update to 0.63.1
63a022a87 rclone: Update to 1.65.1
d07aa2f0f xray-core: Update to 1.8.7
d9d4acfd9 cloudflared: Update to 2024.1.4
ebddc07c1 cloudflared: Update to 2024.1.2
4da835d3e gnutls: updated to 3.8.3
5aabddf75 ocserv: updated to 1.2.4
564e6e08d Openvpn: add missing script event options
0707d98c1 htop: update to 3.3.0
eb7db48b6 yggdrasil: bump to 0.5.4
315f5c41b yggdrasil: bump to 0.5.3
be2b05436 yggdrasil: support public key in config generation
4b5d833e6 yggdrasil: overhaul package with netifd support - package is bumped to 0.5.2 - new protocol changes prevent peering with 0.4.x peers - @turretkeeper revamps package with netifd support - do not use with luci-app-yggdrasil please install luci-proto-yggdrasil

48c81b80b2 wifi-scripts: Support HE Iftypes with multiple entries
60768064ce build: add explicit --no-show-signature for git
79a7195087 realtek: fix Netgear GS110TPP OEM install
31ae9728ff hostapd: fix FILS AKM selection with EAP-192
eda5930d43 generic: 5.15: backport upstream Aquantia PHY firmware loader patches
277d97e0d9 kernel: 5.15: update Aquantia PHY driver to v6.1 code
c90901f088 mediatek: fix failsafe ethernet for NWA50AX Pro
1c28058710 kernel: bump 5.15 to 5.15.148
fbe86d0e91 linux: add dtb makefile target to targets list
183c0d530d kernel-build.mk: add support for compiling only DTS
80c8d65933 toolchain: glibc: Update glibc 2.37 to recent HEAD
633eb115b5 firmware-utils: Fix PKG_MIRROR_HASH
b79583c975 wifi-scripts: fix fullmac phy detection
9e41117953 ipq40xx: fix PHY subsystem compilation (phy_interface_num_ports())
c51d49ba39 wireless-regdb: update to 2024.01.23
aa762ada80 openssl: update to 3.0.13
9ee626f945 ucode: add libjson-c/host dependency
3a23eed4dc realtek: fix zyxel-vers usage for XGS1250-12
be7d9da7be bcm27xx: base-files: fix platform_copy_config
9a869950c1 bcm27xx: improve image generation script
c82ca6dc74 bcm27xx: base-files: properly detect boot partition
8a7f667fb5 kernel: 5.15: backport v6.1 PHY changes required for Aquantia
6d962cabba kernel: backport ethtool_puts
5eb578a4fb firmware-utils: bump to latest openwrt-23.05
e302172258 ath79: add Ubiquiti Rocket M XW as alternate name to Bullet M XW
e5af19e955 ath79: ubnt-bullet-m-xw: fix Ethernet PHY traffic
58c9308400 ath79: ubnt,bullet-m-xw: set PHY max-speed to 100Mbps
b5c728948c mbedtls: security bump to version 2.28.7
b0f3fd550b ipq807x: prpl-haze: fix sysupgrade flashing from bootloader
1ca61b7b37 uhttpd: handle reload after uhttpd-mod-ubus installation using postinst
6b7c4739c4 base-files: execute package's "postinst" after executing uci-defaults
1da896f706 bcm27xx-gpu-fw: update to latest version
e05659ef59 bcm27xx-userland: update to latest version
5a4389f6ab bcm27xx: 5.15: turn on cpu erratum for A72 and disable A53
ac97ea1079 bcm27xx: config: update documentation links
c55aaa7c9a ath79: generic: disable SPI-NOR write protect unconditionally
72421d973e realtek: d-link dgs-1210-10p improve sfp support
78beef6aee jsonfilter: update to Git HEAD (2024-01-23)
c1615f3148 kernel: bump 5.15 to 5.15.147
7338733dc9 mediatek: filogic: add support ASUS RT-AX59U

See Gluon #3191

Link: https://github.com/freifunk-gluon/gluon/issues/3191



Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 97b9fcc9ecdb7df17605c36501148822e75910c7)

docs: add v2023.2.1 release notes 

Signed-off-by: David Bauer <mail@david-bauer.net>

Signed-off-by: David Bauer <mail@david-bauer.net>

modules: update to latest HEAD

Silence warnings for missing rate information.

These warnings do not provide value. Instead, they might rotate more
crucial information out of the kernel message ringbuffer.

Link: https://github.com/freifunk-gluon/gluon/issues/3160



Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 8a4c553a4323b49199f11f951b00c60315e56026)

Co-authored-by: David Bauer <mail@david-bauer.net>

ac2736542 adblock-fast: update to 1.1.1-3
58a7c28aa adblock-fast: sync with main branch
ee11377b7 nebula: update to 1.8.2
7750c869b sing-box: update to 1.8.0

c909fdad18 hostapd: ACS: Fix typo in bw_40 frequency array
2dfd1453da mediatek: fix ethernet rx hang issue on MT7981/MT7986
64d8c277cd Revert "lantiq: xway: kernel: enable SMP support"
f41f10f702 mediatek: GL-MT6000: Change LED colors

[v2023.2.x] master backports

(cherry picked from commit 10721f6e23184a1ca501ba35173e49cd90b1bfd3)

Signed-off-by: Florian Maurer <f.maurer@outlook.de>
(cherry picked from commit 1ba17d6fe2f5bc0f327d42f1627522b709408b67)

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 9fc4918c52b7815c31ffb0317b5ca843acea5939)

(cherry picked from commit 067dc3ed02d173cf08a6089b31fe511657493e4c)

(cherry picked from commit 0e102e79904342d91fa27b75f47a5ae6b9486280)

Drop the Gluon version reference from the site configuration used for
the CI builds.

These version indicators were most likely just copied from the example
site in the docs, where the version information makes sense. However,
the CI site is always built for a specific Gluon version and therefor
commit.

This avoids editing the version for each release.

Signed-off-by: David Bauer <mail@david-bauer.net>
(cherry picked from commit 1ec9943539638249a3ee72646b4b6dc605a19306)

modules: update to latest HEAD

b848b61 batman-adv: compat: Fix skb_vlan_eth_hdr conflict in stable kernels

1b172d0da rust: Update to 1.75.0
cbc8d7bc5 rust: unexport host sccache env variable
0142ff1ed dnsproxy: Update to 0.61.1
9d2fe1355 v2ray-geodata: Update to latest versin
97f921ca7 v2raya: Update to 2.2.4.6
0a34c8571 btop: Update to 1.3.0
b110df7cb btop: opt out of lto usage
1e9d24dca uspot: update to Git HEAD (2024-01-09)
ab6d368b7 travelmate: update 2.1.2-2
b37dec1de adblock-fast: bugfix: pause command
421e2c75a banip: update 0.9.3-4
a4d0bb91c travelmate: release 2.1.2-1
389a100bb travelmate: Added H-Rewards hotel login Signed-off-by: Marc Ole Bulling <Marc-Ole@gmx.de>
4e1c175d4 strongswan: trigger reload when interfaces are specified
0f499ec4b sing-box: Update to 1.7.7
f971d88d5 django: bump to version 4.2.8
e96b6f648  banip: update 0.9.3-3
26373f845  banip: update 0.9.3-2
6435e15a2 banip: bump to release 0.9.3-1
06d1feb78 php8: update to 8.2.14
1e9d9f2b4 dnsproxy: Update to 0.61.0
75d9f3af9 yq: Update to 4.40.5
1b500425d v2ray-geodata: Update to latest version
ea1f30b6f v2ray-core: Update to 5.13.0
e60975e71 dnsproxy: Update to 0.60.1
e95f8c8de tailscale: Update to 1.56.1
5b9ae50b2 wsdd2: update to 2023-12-21
73062e624 mosquitto: update to 2.0.18
515b0f92e nebula: update to 1.8.1
5b4067ccb libxcrypt: update to 4.4.36
9e7371ed5 libtorrent-rasterbar: Update to 2.0.9

cdc907abed ath79: read back reset register
5ad05681f2 ath79: add support for UniFi UK-Ultra
e214118148 ath79: move UniFi AC template into common
4103958e76 mediatek: fix BPI-R3 wifi mac address
2fe497c4a5 mac80211: do not emit VHT160 capabilities if channel width is less than 160 MHz
9cd0023e54 hostapd: add missing NULL pointer check on radar notification
3bf602d740 mac80211: avoid crashing on invalid band info
d4a21d75a9 mediatek: GL-MT6000: Add missing LED state definitions
0cd6b3fd0c linux/modules: remove deprecated module
40cfdf5ffe kernel: bump 5.15 to 5.15.146
6e39d2426b ramips: add support for D-Link COVR-X1860 A1
af7ef781ac ramips: add encrypted SGE factory image for D-Link devices
67d998e25d kernel: bump 5.15 to 5.15.145
b54f7105df firmware-utils: move patch to maintaince branch
34e30fb53a firmware-utils: bump to latest openwrt-23.05
e61d651053 ramips: correct the PCIe port number for Unielec u7621-01
80ef582dee rockchip: configure eth pad driver strength for orangepi r1 plus lts
9cd589bd79 ramips: lzma-loader: use default uart for rt305x
2216b10ebb ramips: lzma-loader: use proper register names
76f7dd3312 ramips: lzma-loader: use virtual memory segments for uart base address
23506e7789 raimps: mtk_eth_soc: drop rst_esw from ESW driver
0128d860a0 ramips: dts: mt7628an: reset FE and ESW cores together
ee4a042483 ramips: dts: rt5350: reset FE and ESW cores together
4e1bf2a50c ramips: dts: rt3050: reset FE and ESW cores together
88501f82f5 ramips: dts: rt3352: reset FE and ESW cores together
289515e003 ramips: mtk_eth_soc: wait longer after FE core reset to settle
8ce87267ba ramips: mtk_eth_soc: allow multiple resets
3aec71a176 mac80211: add missing newline for "min_tx_power"
c6425bb525 kernel: delete stray linux 6.1 patch
49bde57679 kernel: fix bridge proxyarp issue with some broken DHCP clients
51881b2eb9 mediatek: add support for Routerich AX3000
18d7962f7b ramips: add support for Rostelecom RT-FE-1A
f6fb6bb2ba ramips: mt7621: use lzma-loader for Sercomm NA502
9a7b14dcfe mediatek: enable mt7981-wo-firmware package by default
9325da80ab mac80211: fix a race condition related to enabling fast-xmit
b0fc8b47e0 netifd: update to Git openwrt-23.05 (2024-01-04)
5cc1918a7a dropbear: increase default receive window size
60e49cf170 ramips: fix label-mac for Xiaomi RA75

Signed-off-by: David Bauer <mail@david-bauer.net>

Signed-off-by: Magnus Frühling <skorpy@frankfurt.ccc.de>

* docs: user/site: add missing image-customization example

* doc: user/site: improve wording of image customization section

Also add a link to the examples section.

openwrt: backport patches for v2023.2 release

The error handling needed for the buffer growth logic relies on
uloop_fd's error flag, which is set based on epoll events. Doing so
without handling recvmsg's error codes is racy, as an error state may be
set between receiving epoll events and the next recvmsg, but calling
recvmsg clears the error state.

To fix this, add handling for errors returned by nl_recvmsgs_default()
and nl_recv(); checking for u->error and retrieving the error status
using getsockopt() becomes redundant.

We have observed this issue on Gluon (recent OpenWrt 23.05); on some
devices with DSA switches, the bridge interface's carrier-on event would
consistenly get lost during boot due to insufficient buffer space
(see [1]).

We have bisected the issue to netifd commit 516ab774cc16 ("system-linux:
fix race condition on bringing up wireless devices"), but that commit only
uncovered the preexisting bug by switching from getting the carrier state
from sysfs to using the netlink messages in cb_rtnl_event().

I suspect that other recent issues about netifd missing a carrier state
change like [2] may have the same underlying cause.

[1] https://github.com/freifunk-gluon/gluon/issues/3130
[2] https://github.com/openwrt/openwrt/issues/13863



Signed-off-by: Matthias Schiffer <mschiffer@universe-factory.net>
Signed-off-by: David Bauer <mail@david-bauer.net>

Increasing the receive window size improves throughout on higher-latency
links such as WAN connections. The current default of 24KB caps out at
around 500 KB/s.

Increasing the receive buffer to 256KB increases the throughput to at
least 11 MB/s.

Signed-off-by: David Bauer <mail@david-bauer.net>

readthedocs: update to Python 3.11

.readthedocs.yaml is how the file is mentioned in the docs. Adjust the
name.

The latest Sphinx versions require at least 3.9.

docs: remove an unrelated/misleading link and fix headings