Requesting new packages / new versions

from log:

[warn] Please upgrade! This version of Tor (0.2.7.6) is not recommended, according to the directory authorities. Recommended versions are: 0.2.5.14,0.2.8.14,0.2.9.11,0.3.0.9,0.3.0.10,0.3.1.5-alpha

Adblock is outdated. Please update the package.

you should update dnsmasq asap, since there are a lot if secutiry issues there (not only dns related):


http://www.thekelleys.org.uk/dnsmasq/CHANGELOG

Btw could you please also send new translation packages? I have a total new language translation for Hungarian. Language update does not interfere with any functioning, and I am on RC channel anyway. I would like to use it and test it.

Thanks!

dnsmasq:
https://forum.test.turris.cz/t/dnsmasq-cves-please-provide-updates/5166/6?u=pepe

1 Like

Can we also have the dnscrypt-proxy package updated? Thanks!

1 Like

is there any chance to get new version of netdata package?

Hello,
I also received this request from @boessi.

We created issue on Gitlab here

Maybe @paja will tell you more, but the latest news, what he told me was that it doesnā€™t build and it has some error.

@BuloZB

ā€¦Iā€™ve started building / stealing most ā€œup to dateā€ packages for the Omnia from a docker arch linux image or running anything that flakes in a container, latest version of netdata included, with no issues.

So you are running docker on turris omnia?

Hi @Comodore125,

Yes, running the latest version of docker from the alpine linux sources. Itā€™s a bit of a pain, but working well so far apart from the missing kernel modules mentioned in another thread.

Search the forum for this post or just docker, and install the package that huibuhDec pulled together - then once installed, find the alpine docker APK, untar and copy the new bins / libs in place.

Blockquote

huibuhDec '17
Hey guys,

I manged to get docker running (more or less) on the Turris Omnia.

I used precompiled armhf binaries from the alpine linux distribution. To circumvent the networking problems described above (and a few more) you need to install following dependencies:

kmod-veth
kmod-ipt-extra
iptables-mod-extra
Here you can find a package compiled for the current released kernel version (4.4.91-e8cacce0ae0bf48eea19d58c2e860359-1): MEGA

Limitations:

Ressource sharing: Since the required cgroups are not enabled in the stock kernel, the docker daemon has no way of limiting the consumption of certain resources for containers. So if youā€™re running resource hungry containers, they might starve others.
Swarm: There is (as far as I could find) no available IP_VS module and the kernel is compiled without support for it. If I remember correctly, this is required to set up the ingress network used by docker in swarm mode to route incoming packets. If you want your router to join a swarm, you will most probably need to compile it yourself (or ask me, Iā€™ve got a working version for the current kernel but I am too lazy to look for it right now since I think that probably noone will want it)
For other geeks that want to take this further, my makefile that I used to build the package (I assume you can understand the folder structure and copy & paste the corresponding files where they belong): https://gist.github.com/DanielSel/e575e189720022eaffd61c2878a415088

@Turris Omnia Team: Would it be possible to enable (at least) the following kernel options at some point in the future?

CONFIG_MEMCG_SWAP_ENABLED
CONFIG_MEMCG_KMEM
CONFIG_BLK_DEV_THROTTLING
CONFIG_IOSCHED_CFQ
CONFIG_CFQ_GROUP_IOSCHED
CONFIG_CGROUP_PERF
CONFIG_CGROUP_HUGETLB
CONFIG_CGROUP_NET_PRIO
CONFIG_CFS_BANDWIDTH
CONFIG_FAIR_GROUP_SCHED
CONFIG_RT_GROUP_SCHED
Especially the cgroups would make docker more reliable. Thanks!

Have fun and enjoy the rest of your day!

Blockquote

Iā€™m not here much but if youā€™d get stuck, ping and Iā€™ll try to talk you through what I did at least ā€¦

cheersā€¦

A package I would really happy to get is infenslave - did anyone build it already?

@paja: would it be possible to add package ifenslave to repository?

@paja: would be really nice to get that package! :hugs:

What are you trying to do? I am not exactly network guy so I donā€™t know (or remember) how exactly you can use it. But from my understanding this is BSD type network tool. Linux ip utils should handle that too. Specially if I am not mistaken you want to use ip l set master.

Please find what I actually did here.
Maybe there are other solutions out there but those are rarely documented.
@paja wrote an answer but deleted it before I could read so I donā€™t know what he had on his mind about that topic.

Hi @pepe & Turris teamā€¦

Is there any chance of upgrading the nginx package to the latest upstream version?

The TO version is 1.10, and the latest stable version is 1.14: http://nginx.org/en/download.html. The upstream version is 1.12: https://github.com/openwrt/packages/tree/master/net/nginx

There are some pretty big changes between 1.10 & 1.12 - that would be a start, but 1.14 might be even better!

Or has someone written up how to install OpenWrt packages on TO? (I know the platform is mvebu, but today, I canā€™t find it in https://downloads.openwrt.org/snapshots/targets/mvebu/)

You could try directly installing from https://downloads.lede-project.org/releases/packages-18.06/x86_64/packages/ (v.1.12)

I guess that would work for BASH scripts (e.g. adblock), but for binaries (like nginx)?

1 Like

I used to install adblock that way until Turris team put a current version into TO repo.

This would work because adblock is just BASH scripts. It wont work with nginx because that package would contain compiled binariesā€¦