aboutsummaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-kernel/wireguard
AgeCommit message (Collapse)Author
2022-09-15wireguard-tools: Add a new package for wg-quickJose Quaresma
- This will move the dependencie of bash to wg-quick Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit f36a158aa0b6dc5d595c08f33733f889a7202b36) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-09-15wireguard-module: 1.0.20210219 -> 1.0.20220627Jose Quaresma
Also change the git protocol to https. Relevant changes: - 18fbcd6 version: bump - 3ec3e82 compat: handle backported rng and blake2s - ba45dd6 qemu: give up on RHEL8 in CI - c7560fd qemu: set panic_on_warn=1 from cmdline - 33c87a1 qemu: use vports on arm - 894152a netns: limit parallelism to $(nproc) tests at once - f888673 netns: make routing loop test non-fatal - f9d9b4d device: check for metadata_dst with skb_valid_dst() - f909532 qemu: enable ACPI for SMP - ec89ca6 socket: ignore v6 endpoints when ipv6 is disabled - fa32671 socket: free skb in send6 when ipv6 is disabled - ffb8cd6 qemu: simplify RNG seeding - 4eff63d queueing: use CFI-safe ptr_ring cleanup function - 273018b crypto: curve25519-x86_64: use in/out register constraints more precisely - 4f4c019 compat: drop Ubuntu 14.04 - 743eef2 version: bump - 3c9f3b6 crypto: curve25519-x86_64: solve register constraints with reserved registers - 8e40dd6 compat: udp_tunnel: don't take reference to non-init namespace - ea6b8e7 compat: siphash: use _unaligned version by default - 5325bc8 ratelimiter: use kvcalloc() instead of kvzalloc() - e44c78c receive: drop handshakes if queue lock is contended - 5707d38 receive: use ring buffer for incoming handshakes - 68abb1b device: reset peer src endpoint when netns exits - ea3f5fb main: rename 'mod_init' & 'mod_exit' functions to be module-specific - cb001d4 netns: actually test for routing loops - 2715e64 compat: update for RHEL 8.5 - 2974725 compat: account for grsecurity backports and changes - 50dda8c compat: account for latest c8s backports - d378f93 version: bump - fb4a0da qemu: increase default dmesg log size - 8f4414d qemu: add disgusting hacks for RHEL 8 - fd7a462 allowedips: add missing __rcu annotation to satisfy sparse - 383461d allowedips: free empty intermediate nodes when removing single node - 03add82 allowedips: allocate nodes in kmem_cache - b56d48c allowedips: remove nodes in O(1) - 3c14c4b allowedips: initialize list head in selftest - 4d8b7ed peer: allocate in kmem_cache - 6fbc0e6 global: use synchronize_net rather than synchronize_rcu - 405caf0 kbuild: do not use -O3 - b50ef4d netns: make sure rp_filter is disabled on vethc - e67b722 version: bump - 1edffe2 Revert "compat: skb_mark_not_on_list will be backported to Ubuntu 18.04" - 2cf9543 compat: update and improve detection of CentOS Stream 8 - 122f06b compat: icmp_ndo_send functions were backported extensively Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit e2a2320a7953fd70e8b416f9f6741d0b6654f280) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-03-04recipes: Update LICENSE variable to use SPDX license identifiersKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-11-22wireguard-tools: upgrade 1.0.20210315 -> 1.0.20210914wangmy
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-11-03recipes: Update SRC_URI branch and protocolsRichard Purdie
This patch updates SRC_URIs using git to include branch=master if no branch is set and also to use protocol=https for github urls as generated by the conversion script in OE-Core. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-08-03Convert to new override syntaxMartin Jansa
This is the result of automated script (0.9.1) conversion: oe-core/scripts/contrib/convert-overrides.py . converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2021-06-23wireguard-module: Stop overriding modules_install in the recipeDaiane Angolini
Configure the recipe to use the module_install function from the module source code and remove the overriden modules_install function from the recipe. Using the default modules_install (instead of the function defined in the recipe file) the module is signed when DISTRO_FEATURE contains modsign. Signed-off-by: Daiane Angolini <daiane.angolini@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-04-17wireguard: update to v1.0.20210219 +1Armin Kuster
The +1 fixes build issues for the 5.4 kernel. This update looks like bugfixes Signed-off-by: Armin Kuster <akuster808@gmail.com> v2] Wrong version listed Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-18wireguard-tools: upgrade 1.0.20210223 -> 1.0.20210315zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-04wireguard-tools: upgrade 1.0.20200827 -> 1.0.20210223zangrc
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-05wireguard-module: remove PKG assignmentMartin Jansa
* it's not clear why it was added in first place and it's causing issues since: "package: get_package_mapping: avoid dependency mapping if renamed package provides original name" commit in oe-core as discussed in: https://lists.openembedded.org/g/openembedded-core/message/143672 https://github.com/openembedded/meta-openembedded/issues/285 Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-27wireguard-module: upgrade 1.0.20200908 -> 1.0.20201112Ricardo Salveti
Relevant changes: - fe40226 version: bump - d0bf51b qemu: bump default testing version - ce8faa3 compat: SYM_FUNC_{START,END} were backported to 5.4 - da5646f qemu: drop build support for rhel 8.2 - 99e954f netns: check that route_me_harder packets use the right sk - 25320ac noise: take lock when removing handshake entry from table Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02wireguard-tools: upgrade 1.0.20200513 -> 1.0.20200827Ricardo Salveti
Changelog: - 7a321ce version: bump - 91fbeb4 Revert "wg-quick: wait on process substitutions" - 9a0d65e wg-quick: android: use iproute2 to bring up interface instead of ndc - fbca033 version: bump - 26683f6 wg-quick: wait on process substitutions - 13fac76 ctype: use non-locale-specific ctype.h - cf2bf09 pubkey: isblank is a subset of isspace - b4a8a18 man: wg-quick: use syncconf instead of addconf for strip example - a66219f systemd: add reload target to systemd unit - eb4665e wincompat: fold random into genkey - 197995d ipc: split into separate files per-platform Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02wireguard-module: upgrade 1.0.20200712 -> 1.0.20200908Ricardo Salveti
Changelog: - d97b575 version: bump - 482d020 peerlookup: take lock before checking hash in replace operation - dace9d0 compat: backport NLA policy macros - a28032f netlink: consistently use NLA_POLICY_MIN_LEN() - 515d544 netlink: consistently use NLA_POLICY_EXACT_LEN() - 1a41e32 compat: backport kfree_sensitive and switch to it - 90a9e82 compat: drop support for SUSE 15.1 - a567b4c version: bump - 4213ef0 compat: add missing headers for ip_tunnel_parse_protocol - 5a45add compat: ipv6_dst_lookup_flow was ported to rhel 7.9 beta - 372427a compat: allow override of depmod basedir - f04dae1 compat: rhel 8.3 beta removed nf_nat_core.h Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-10-15wireguard-tools: Fix systemd service installationMario Schuknecht
Install systemd configuration file wg-quick@.service into the proper folder. Use 'systemd_system_unitdir' instead of 'systemd_unitdir' as the installation path. Signed-off-by: Mario Schuknecht <mario.schuknecht@dresearch-fe.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-08-21wireguard-module: Exlude from world buildsKhem Raj
Moving beyond kernel 5.6, this kmod is not needed and core has moved the reference kernel to 5.8 for reference machines wireguard-tools should RDEPEND but not DEPEND Remove it from meta-networking packagegroup as well Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-20wireguard-tools: upgrade 1.0.20200319 -> 1.0.20200513Zheng Ruoqin
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-07-20wireguard-module: upgrade 1.0.20200401 -> 1.0.20200712Zheng Ruoqin
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-07wireguard: Upgrade to latest compat external module and toolsKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-03-29wireguard-tools: Ensure make clean target is run properlyKhem Raj
When S is pointing to a level up, it calls clean target which also tries to clean the module build objects, which causes make clean to misnehave since the env is not set to build module and it tries to reach out to /lib/modules dir on host Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-29wireguard: Upgrade to 20191219 snapshotKhem Raj
Fixes build with kernel >= 5.4 Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-15wireguard: Upgrade 20190905 to 20190913Scott Ellis
Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-09-07wireguard: Upgrade 20190702 to 20190905Scott Ellis
Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-04wireguard: Upgrade 20190406 to 20190702Scott Ellis
Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-20wireguard: Upgrade 20190123 -> 20190406Scott Ellis
Fixes issues with kernels 5.1 and greater. Signed-off-by: Scott Ellis <scott@jumpnowtek.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-30wireguard: udpate to 20190123 versionStefan Agner
Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-01-30wireguard: use ${nonarch_base_libdir} for modulesStefan Agner
Use ${nonarch_base_libdir} for modules. This makes this recipe working also when using usrmerge. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-03-05wireguard: udpate to 20171221 versionArmin Kuster
this fixes build issue on a 4.14 kernel: /src/compat/padata/padata.c:831:9: error: implicit declaration of function 'padata_alloc'; did you mean 'padata_alloc_pd'? [-Werror=implicit-function-declaration] | return padata_alloc(wq, cpu_possible_mask, cpu_possible_mask); | ^~~~~~~~~~~~ | padata_alloc_pd Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-12wireguard: Upgrade to 20170810 snapshotKhem Raj
Fixes build with linux kernel 4.12+ Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-12wireguard-tools: Add bash to rdepsKhem Raj
Fixes QA error /usr/bin/wg-quick contained in package wireguard-tools requires /bin/bash Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28wireguard: bump version to latest snapshot 0.0.20170517Stefan Agner
Use the latest available snapshot 0.0.20170517 of WireGuard. Signed-off-by: Stefan Agner <stefan@agner.ch> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-05-09wireguard: module install cleanupJoe MacDonald
The module_install target shouldn't be used, just installing the module to the sysroot directly seems more appropriate. Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-05-01wireguard: blacklistJoe MacDonald
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-27wireguard: add dependencies and kernel build optionsJoe MacDonald
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-27wireguard: add WireGuard kernel module and toolsStefan Agner
WireGuard is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPSec, while avoiding the massive headache. The recipes add the current experimental snapshot v0.0.20170421 out-of-tree kernel module and tools. The kernel module has some kernel configuration dependencies such as some configuration part of features/netfilter/netfilter.scc, hence netfilter.scc should be part of KERNEL_EXTRA_FEATURES (which is the case by default). Since wireguard-tools is TUNE_PKGARCH and depends on wireguard-module which is MACHINE_ARCH (like all kernel modules) we need to add this dependency to SIGGEN_EXCLUDE_SAFE_RECIPE_DEPS. Signed-off-by: Stefan Agner <stefan@agner.ch> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>