build(deps): bump korthout/backport-action from 1.2.0 to 1.3.0

.github/labeler.yml

@@ -28,7 +28,7 @@
   - package/gluon-mesh-vpn-fastd/**
 "3. topic: firewall":
   - package/**/*-firewall
-  - package/gluon-ebtables-*/**
+  - package/gluon-nftables-*/**
 "3. topic: hardware":
   - package/gluon-core/luasrc/lib/gluon/upgrade/010-primary-mac
   - package/gluon-core/luasrc/usr/lib/lua/gluon/platform.lua

.github/workflows/backport.yml

@@ -13,7 +13,7 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       - name: Create backport PRs
-        uses: korthout/backport-action@v1.2.0
+        uses: korthout/backport-action@v1.3.0
         with:
           # Config README: https://github.com/korthout/backport-action#backport-action
           pull_description: |-

.luacheckrc

@@ -29,6 +29,7 @@ files["package/**/check_site.lua"] = {
 		"need",
 		"need_alphanumeric_key",
 		"need_array",
+		"need_array_elements_exclusive",
 		"need_array_of",
 		"need_boolean",
 		"need_chanlist",
@@ -50,6 +51,7 @@ files["package/**/check_site.lua"] = {
 
 files["package/**/luasrc/lib/gluon/config-mode/*"] = {
 	globals = {
+		"MultiListValue",
 		"DynamicList",
 		"Flag",
 		"Form",
@@ -79,10 +81,17 @@ files["package/**/luasrc/lib/gluon/**/controller/*"] = {
 	},
 }
 
-files["package/**/luasrc/lib/gluon/ebtables/*"] = {
+files["package/**/luasrc/lib/gluon/nftables/*"] = {
 	read_globals = {
-		"chain",
+		"path",
+		"include",
 		"rule",
+
+		"bridge_rule",
+		"bridge_chain",
+		"bridge_table",
+		"bridge_include_rule",
+		"bridge_include_table",
 	},
 	max_line_length = false,
 }

Makefile

@@ -45,6 +45,7 @@ GLUON_PACKAGEDIR ?= $(GLUON_OUTPUTDIR)/packages
 GLUON_DEBUGDIR ?= $(GLUON_OUTPUTDIR)/debug
 GLUON_TARGETSDIR ?= targets
 GLUON_PATCHESDIR ?= patches
+GLUON_PREFIX ?= openwrt
 
 $(eval $(call mkabspath,GLUON_TMPDIR))
 $(eval $(call mkabspath,GLUON_OUTPUTDIR))
@@ -60,6 +61,7 @@ GLUON_MULTIDOMAIN ?= 0
 GLUON_AUTOREMOVE ?= 0
 GLUON_DEBUG ?= 0
 GLUON_MINIFY ?= 1
+GLUON_BUILDTYPE ?= gluon
 
 # Can be overridden via environment/command line/... to use the Gluon
 # build system for non-Gluon builds
@@ -71,7 +73,7 @@ GLUON_VARS = \
 	GLUON_VERSION GLUON_SITE_VERSION \
 	GLUON_RELEASE GLUON_REGION GLUON_MULTIDOMAIN GLUON_AUTOREMOVE GLUON_DEBUG GLUON_MINIFY GLUON_DEPRECATED \
 	GLUON_DEVICES GLUON_TARGETSDIR GLUON_PATCHESDIR GLUON_TMPDIR GLUON_IMAGEDIR GLUON_PACKAGEDIR GLUON_DEBUGDIR \
-	GLUON_SITEDIR GLUON_AUTOUPDATER_BRANCH GLUON_AUTOUPDATER_ENABLED GLUON_LANGS GLUON_BASE_FEEDS \
+	GLUON_SITEDIR GLUON_BUILDTYPE GLUON_AUTOUPDATER_BRANCH GLUON_AUTOUPDATER_ENABLED GLUON_LANGS GLUON_BASE_FEEDS GLUON_PREFIX \
 	GLUON_TARGET BOARD SUBTARGET
 
 unexport $(GLUON_VARS)

README.md

@@ -2,6 +2,14 @@
 [![License](https://img.shields.io/badge/License-BSD%202--Clause-orange.svg)](https://opensource.org/license/bsd-2-clause/)
 [![GitHub release (latest SemVer)](https://img.shields.io/github/v/release/freifunk-gluon/gluon?sort=semver)](https://github.com/freifunk-gluon/gluon/releases/latest)
 
+# FFGraz Fork
+
+This is a fork of gluon to add olsrd and L3 mesh support.
+
+This is intended to be eventually upstreamed. Currently it's a bit messy and the best documentation of the site config would be the  [ffgraz site](https://github.com/mkg20001/funkfeuer-graz-gluon-site/blob/master/site.conf)
+
+See [the github project](https://github.com/ffgraz/gluon/projects/1?query=is%3Aopen+sort%3Aupdated-desc) for more details
+
 # Gluon
 
 Gluon is a firmware framework to build preconfigured OpenWrt images for public mesh networks.

contrib/actions/install-dependencies.sh

@@ -3,6 +3,6 @@
 set -e
 
 apt-get -y update
-apt-get -y install git subversion build-essential python3 gawk unzip libncurses5-dev zlib1g-dev libssl-dev wget time qemu-utils
+apt-get -y install git build-essential python3 gawk unzip libncurses5-dev zlib1g-dev libssl-dev libelf-dev wget rsync time qemu-utils
 apt-get -y clean
 rm -rf /var/lib/apt/lists/*

contrib/ci/olsr-site/site.conf

@@ -23,10 +23,14 @@
   -- Prefixes used by clients within the mesh.
   -- prefix6 is required, prefix4 can be omitted if next_node.ip4
   -- is not set.
+  prefix4 = '10.0.0.0/20',
   prefix6 = 'fdff:cafe:cafe:cafe::/64',
 
   -- Prefixes used by nodes within the mesh
   node_prefix6 = 'fdff:cafe:cafe:cafe::/64',
+  node_prefix4 = '10.12.0.0/16',
+  node_prefix4_range = 24,
+  node_prefix4_temporary = true,
 
   -- Timezone of your community.
   -- See https://openwrt.org/docs/guide-user/base-system/system_configuration#time_zones
@@ -96,7 +100,16 @@
   -- Options specific to routing protocols (optional)
   mesh = {
     vxlan = true,
-    olsrd = {},
+    -- [olsr] OLSR configuration with v1/v2 parallel mesh
+    olsrd = {
+      v1 = {
+        enable = true,
+      },
+      v2 = {
+        enable = true,
+        ip6_exclusive_mode = true,
+      }
+    },
   },
 
   mesh_vpn = {

contrib/ci/olsr-site/site.mk

@@ -7,9 +7,6 @@
 
 GLUON_FEATURES := \
 	autoupdater \
-	ebtables-filter-multicast \
-	ebtables-filter-ra-dhcp \
-	ebtables-limit-arp \
 	mesh-olsrd \
 	mesh-vpn-fastd \
 	respondd \

contrib/docker/Dockerfile

@@ -5,8 +5,8 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     ca-certificates \
     file \
     git \
-    subversion \
     python3 \
+    python3-distutils \
     build-essential \
     gawk \
     unzip \

contrib/push_pkg.sh

@@ -7,7 +7,6 @@ topdir="$(realpath "$(dirname "${0}")/../openwrt")"
 # defaults to qemu run script
 ssh_host=localhost
 build_only=0
-preserve_config=1
 
 print_help() {
 	echo "$0 [OPTIONS] PACAKGE_DIR [PACKAGE_DIR] ..."
@@ -18,10 +17,6 @@ print_help() {
 	echo "             running qemu instance started by run_qemu.sh."
 	echo " -p PORT     use PORT as ssh port (default is 22)"
 	echo " -b          build only, do not push"
-	echo " -P          do not preserve /etc/config. By default, if a package"
-	echo "             defines a config file in /etc/config, this config file"
-	echo "             will be preserved. If you specify this flag, the package"
-	echo "             default will be installed instead."
 	echo ""
 	echo ' To change gluon variables, run e.g. "make config GLUON_MINIFY=0"'
 	echo ' because then the gluon logic will be triggered, and openwrt/.config'
@@ -33,7 +28,6 @@ print_help() {
 while getopts "p:r:hbP" opt
 do
 	case $opt in
-		P) preserve_config=0;;
 		p) ssh_port="${OPTARG}";;
 		r) ssh_host="${OPTARG}"; [ -z "$ssh_port" ] && ssh_port=22;;
 		b) build_only=1;;
@@ -121,18 +115,16 @@ while [ $# -gt 0 ]; do
 			fi
 		done
 
-		if [ "$preserve_config" -eq 0 ]; then
-			opkg_flags=" --force-maintainer"
-		fi
-
 		# shellcheck disable=SC2029
 		if [ -n "$filename" ]; then
-			scp -O -P "${ssh_port}" "$feed/$filename" "root@${BL}${ssh_host}${BR}:/tmp/${filename}"
+			scp -P "${ssh_port}" "$feed/$filename" "root@${BL}${ssh_host}${BR}:/tmp/${filename}"
 			ssh -p "${ssh_port}" "root@${ssh_host}" "
 				set -e
-				echo Running opkg:
-				opkg install --force-reinstall ${opkg_flags} '/tmp/${filename}'
+				echo Extracting:
+				tar xvfz '/tmp/${filename}' -C /tmp
+				tar xvfz '/tmp/data.tar.gz' -C /
 				rm '/tmp/${filename}'
+				rm /tmp/*.tar.gz
 				gluon-reconfigure
 			"
 		else

docs/conf.py

@@ -71,6 +71,13 @@
 # Don't highlight code blocks unless requested explicitly
 highlight_language = 'none'
 
+# Ignore links to the config mode, as well as anchors on on hackint, which are
+# used to mark channel names and do not exist. Regular links are not effected.
+linkcheck_ignore = [
+    'http://192.168.1.1',
+    'https://webirc.hackint.org/#'
+]
+
 
 # -- Options for HTML output -------------------------------------------------
 

docs/dev/packages.rst

@@ -29,10 +29,10 @@ the workflow using these scripts:
   contrib/run_qemu.sh output/images/factory/[...]-x86-64.img
 
   # apply changes to the desired package
-  vi package/gluon-ebtables/files/etc/init.d/gluon-ebtables
+  vi package/gluon-nftables/files/etc/init.d/gluon-nftables
 
   # rebuild and push the package to the qemu instance
-  contrib/push_pkg.sh package/gluon-ebtables/
+  contrib/push_pkg.sh package/gluon-nftables/
 
   # test your changes
   ...
@@ -41,7 +41,7 @@ the workflow using these scripts:
   ...
 
   # rebuild and push the package to the qemu instance
-  contrib/push_pkg.sh package/gluon-ebtables/
+  contrib/push_pkg.sh package/gluon-nftables/
 
   # test your changes
   ...
@@ -83,7 +83,7 @@ Note that:
 * If you add new packages, you must run ``make update config GLUON_TARGET=...``.
 * You can change the gluon target of the target machine via ``make config GLUON_TARGET=...``.
 * If you want to update the ``site.conf`` of the target machine, use ``push_pkg.sh package/gluon-site/``.
-* Sometimes when things break, you can heal them by compiling a package with its dependencies: ``cd openwrt; make package/gluon-ebtables/clean; make package/gluon-ebtables/compile; cd ..``.
+* Sometimes when things break, you can heal them by compiling a package with its dependencies: ``cd openwrt; make package/gluon-nftables/clean; make package/gluon-nftables/compile; cd ..``.
 * You can exit qemu by pressing ``CTRL + a`` and ``c`` afterwards.
 
 Gluon package makefiles

docs/features/olsrd.rst

@@ -0,0 +1,57 @@
+OLSRD
+===========
+
+[todo: re-work for upstream]
+
+Gluon supports OLSRD, both version 1 and 2 in the following modes:
+
+- olsrd
+  - v4 only
+- olsrd2
+  - v4 only
+  - v6 only
+  - dual-stack
+
+olsrdv1 support is intended mostly for migration purposes
+and as such v1 IPv6 support is not going to be added
+
+Configuration
+-------------
+
+The LAN will automatically be determined by the specified prefix and prefix6
+
+The following options exist
+
+.. code-block:: lua
+    {
+      mesh {
+        olsrd = {
+          v1 = {
+            -- Enable v1
+            -- enable = true,
+
+            -- Set additional olsrd configuration
+            -- config = {
+            --   DebugLevel = 0,
+            --   IpVersion = 4,
+            --   AllowNoInt = yes,
+            -- },
+          },
+          v2 = {
+            -- Enable v2
+            enable = true,
+
+            -- Make v2 IPv6 exclusive
+            -- ip6_exclusive_mode = true,
+
+            -- Make v2 IPv4 exclusive (useful for v1 co-existence)
+            -- ip4_exclusive_mode = true,
+
+            -- Set additional olsrd2 configuration
+            -- config = {
+            --
+            -- }
+          }
+        }
+      }
+    }

docs/features/static-ip.rst

@@ -0,0 +1,21 @@
+Static IP managment
+-------------------
+
+A hack for graz
+
+Static IP managment has the following options
+
+.. code-block:: lua
+    {
+      -- Auto-assign addresses from an IPv4 range
+      node_prefix4 = '10.12.23.0/16',
+      node_prefix4_range = 24, -- range of node_prefix4 that should be randomized with mac
+      node_prefix4_temporary = true, -- (def: true) flag to indicate whether or not this is a temporary range that will need manual change for permanent assignments or not
+
+      -- Auto-assign addresses from an IPv6 range
+      node_prefix6 = 'fdff:cafe:cafe:cafe:23::/128',
+      node_prefix6_range = 84, -- (def: 64) range of node_prefix6 that should be randomized with mac
+      node_prefix6_temporary = true, -- (def: false) flag to indicate whether or not this is a temporary range that will need manual change for permanent assignments or not
+    }
+
+Note that these addresses are intended to be temporary

docs/features/vpn.rst

@@ -191,6 +191,16 @@ negative effects. Only when a previously connected node reboots the effect
 comes into play, as the gateway still knows about the old timestamp of the gluon
 node.
 
+gluon-mesh-vpn-key-translate
+""""""""""""""""""""""""""""
+
+Many communities already possess a collection of active fastd-keys when they
+plan migrating their community to WireGuard.
+These public keys known on the server-side can be derived into their WireGuard
+equivalent using `gluon-mesh-vpn-key-translate <https://github.com/AiyionPrime/gluon-mesh-vpn-key-translate>`__.
+The routers do the necessary reencoding of the private key seamlessly
+when updating firmware from fastd to the WireGuard variant.
+
 Gateway / Supernode Configuration
 """""""""""""""""""""""""""""""""
 

docs/index.rst

@@ -28,8 +28,10 @@ Several Freifunk communities in Germany use Gluon as the foundation of their Fre
   features/dns-cache
   features/monitoring
   features/multidomain
+  features/olsrd
   features/authorized-keys
   features/roles
+  features/static-ip
   features/vpn
 
 .. toctree::
@@ -62,10 +64,10 @@ Several Freifunk communities in Germany use Gluon as the foundation of their Fre
 
   package/gluon-client-bridge
   package/gluon-config-mode-domain-select
-  package/gluon-ebtables-filter-multicast
-  package/gluon-ebtables-filter-ra-dhcp
-  package/gluon-ebtables-limit-arp
-  package/gluon-ebtables-source-filter
+  package/gluon-nftables-filter-multicast
+  package/gluon-nftables-filter-ra-dhcp
+  package/gluon-nftables-limit-arp
+  package/gluon-nftables-source-filter
   package/gluon-hoodselector
   package/gluon-logging
   package/gluon-mesh-batman-adv

docs/multidomain-site-example/site.mk

@@ -7,9 +7,9 @@
 
 GLUON_FEATURES := \
 	autoupdater \
-	ebtables-filter-multicast \
-	ebtables-filter-ra-dhcp \
-	ebtables-limit-arp \
+	nftables-filter-multicast \
+	nftables-filter-ra-dhcp \
+	nftables-limit-arp \
 	mesh-batman-adv-15 \
 	mesh-vpn-fastd \
 	respondd \