* 093464b Merge pull request #155 from bobidle/ffbs-mesh-vpn-parker
* b37699a ffbs-mesh-vpn-parker: fix reading persistent_keepalive and typos

* ed8e7b5 Merge pull request #154 from SmithChart/ffbs-mesh-vpn-parker-shutdown
* 7611b92 ffbs-mesh-vpn-parker: Remove all wireguard interfaces on autoupdate

* 449e3f8 Merge pull request #152 from jluebbe/mesh-vpn-parker-fix-crashloop
* 8b2e0ca ffbs-mesh-vpn-parker: fix shell word splitting

chrissi^ authored 5 months ago and chrissi^ committed 1 month ago

This change moves our parker-related packages from our own repo to
community-packages. It also renames all dependencies.

This key is stored on frido and can be accessed by FFBS server admins.

This package will reboot the node every Thursday morning between 3 and
6.
This will hopefully fix issues with nodes where WiFi randomly
misbehaves.

* bc75cd8 gluon-ffbsnext-nodeconfig/status: Inform user if node is starting up
* faf44ae gluon-ffbsnext-nodeconfig: Leave breadcrubs after successful run
* 131e4b1 gluon-ffbsnext-nodeconfig: Remove collect-debug-info
* 84bbf4d Remove gluon-ffbs-debugbathosts

chrissi^ authored 5 months ago and chrissi^ committed 5 months ago

We have added `ffbs-debugbathosts` and `ffbs-collect-debug-info` to
community-packages.

This commit adds both packages from there and drops them from our feed.
All in all this should be a no-op for our image.

* fe1d306 nodeconfig: add netstat to collect-debug-info

New Commits:

* 47e3aff gluon-ffbsnext-nodeconfig-respondd: Add README
* f24868b gluon-ffbsnext-nextnode: Add README
* 06cc8e4 gluon-ffbsnext-info-pull: Add README
* 148710b gluon-ffbsnext-debugrsyslog: Add README

This package is not specific to `parker`, so we can remove the `next`
from it's name.

Wifi-fallback is a great idea, if you are tryping to change anything on
your network, that may isolate mesh-only nodes.

At the moment we are not planning on doing any such changes.
Also: our `gluon-ffbs-autoupdater-wifi-fallback` package is not state of
the art anymore. Today we would probably want to base our package on the
community-package version.
(But for parker this would still need some careful testing anyway.)

chrissi^ authored 10 months ago and chrissi^ committed 10 months ago

Re-format site.conf using stylua, an opinionated code formatter for Lua.

This commit should be a no-op - but makes the file much more readable.

Freifunk Nodes do not have https-support. So installing something via
opkg is not possible with the configuration provided with the images.
With this chage the package sources should now point to http.

OPKG uses signatures on the packages anyway, so we are fine with http
instead of https.

* 4f83ee2 treewide/*.lua: Re-format using stylua
* 0073731 Merge branch 'collect-debug-info' into 'v2023.2.x-ffbs-next'
* 7419e02 nodeconfig: add collect-debug-info script
* ab47f0d nodeconfig: status: add uname -a to output
* bd0972c noderoute: IPv6-addr check: Also log if we are client or server
* 8f36f1e noderoute: Fix logic for URADVD warnings

This will allow us to template the config file in our gluon-builder.

For now we will only use this to strip the SSH pubkeys for stable.

* 2a06ce5 noderoute: fix shellcheck warnings
* f9804e8 noderoute: check_batman enterprise loop
* c865bd1 gluon-ffbsnext-wireguard: bump embedded library
* 449f61a noeroute.sh: Actually log and not create stray file in '/'

This should be according to:
https://gluon.readthedocs.io/en/latest/releases/v2023.2.html#image-customization

For debugging issues related to netlink on the routers, it is very
useful to inspect what is happening via netlink in the kernel. Add
kmod-nlmon for that.

An older version-bump mistakenly removed the gluon-wireguard package,
thinking it was an upstream package. We have no renamed it according to
our internal naming scheme, re-add it as gluon-ffbsnext-wireguard.

Includes:
- fix to replace empty wireguard keys due to old nodeconfig bug
- gluon-wireguard rename to gluon-ffbsnext-wireguard

In OpenWrt or Gluon v2022 the package name for iptables has changed.
We still need the iptables tool; but it seems some other package already
depends on the correct thing... We'll just remove it here.

darkbit authored 2 years ago and chrissi^ committed 1 year ago

Since v2022 `gluon-wireguard` is part of the upstream wireguard support.
We only want wireguard itself, not the additional gluon features. This
we need `wireguard-tools` and `kmod-wireguard`.

This filters out address requests (DHCP v4/v6 and SLAAC) going to client
ports and address offers from client ports.

The existing config already allows running a DHCPd/radvd on the node
itself, so we don't need to change anything in the package.