swex has joined #openwrt-devel
<KGB-1> https://tests.reproducible-builds.org/openwrt/openwrt_lantiq.html has been updated. (98.2% images and 97.6% packages reproducible in our current test framework.)
dangole has quit [Quit: Leaving]
hurricos has quit [Quit: WeeChat 2.8]
aptanet has quit [Ping timeout: 260 seconds]
aptanet has joined #openwrt-devel
Nick_Lowe has quit [Quit: Textual IRC Client: www.textualapp.com]
wowaname has joined #openwrt-devel
opal has quit [Ping timeout: 240 seconds]
wowaname is now known as opal
greearb_ has quit [Remote host closed the connection]
greearb_ has joined #openwrt-devel
KGB-1 has quit [Ping timeout: 265 seconds]
th3g1z_ has quit [Quit: aloha]
th3g1z has joined #openwrt-devel
glyph has quit [Ping timeout: 265 seconds]
glyph_ has joined #openwrt-devel
KGB-1 has joined #openwrt-devel
jmccrohan has quit [Ping timeout: 260 seconds]
jmccrohan has joined #openwrt-devel
dxld has quit [Ping timeout: 265 seconds]
SAm0815 has quit [Ping timeout: 265 seconds]
owrt-1907-builds has quit [Ping timeout: 265 seconds]
skolev has quit [Ping timeout: 260 seconds]
owrt-1907-builds has joined #openwrt-devel
glyph_ is now known as glyph
skolev has joined #openwrt-devel
SAm0815 has joined #openwrt-devel
dxld has joined #openwrt-devel
luke-jr has joined #openwrt-devel
Darkmatter66_ has joined #openwrt-devel
Darkmatter66 has quit [Ping timeout: 272 seconds]
<mangix> sad
<mangix> oh they never fixed getrandom. thought they did
<mangix> I wonder if the util-linux patch can be removed then.
Olipro has quit [Read error: Connection reset by peer]
Tusker has quit [Ping timeout: 256 seconds]
hbug has joined #openwrt-devel
Olipro has joined #openwrt-devel
Olipro has joined #openwrt-devel
Olipro has quit [Changing host]
hbug___ has quit [Ping timeout: 240 seconds]
Tusker has joined #openwrt-devel
tobleminer-tSYS has quit [Quit: AS4242423214]
tobleminer-tSYS has joined #openwrt-devel
Misanthropos has quit [Ping timeout: 256 seconds]
Misanthr- has joined #openwrt-devel
Misanthr- is now known as Misanthropos
Tusker has quit [Read error: Connection reset by peer]
victhor has quit [Ping timeout: 258 seconds]
Darkmatter66_ has quit [Ping timeout: 258 seconds]
andi- has quit [Remote host closed the connection]
danitool has quit [Quit: Cubum autem in duos cubos, aut quadratoquadratum in duos quadratoquadratos]
andi- has joined #openwrt-devel
rsalvaterra1 has joined #openwrt-devel
rsalvaterra has quit [Ping timeout: 240 seconds]
Grommish has joined #openwrt-devel
black_ant has joined #openwrt-devel
black_ant has quit [Changing host]
black_ant has joined #openwrt-devel
massoud has joined #openwrt-devel
dorf has quit [Remote host closed the connection]
dorf has joined #openwrt-devel
dxld has quit [Remote host closed the connection]
dxld has joined #openwrt-devel
Adran has quit [Ping timeout: 272 seconds]
Adran has joined #openwrt-devel
goliath has joined #openwrt-devel
valku has quit [Quit: valku]
dopje_ has joined #openwrt-devel
nitroshift has joined #openwrt-devel
dopje has quit [Ping timeout: 272 seconds]
nitroshift has quit [Quit: Gone that way --->]
nitroshift has joined #openwrt-devel
dopje has joined #openwrt-devel
dopje_ has quit [Ping timeout: 240 seconds]
dopje_ has joined #openwrt-devel
dopje has quit [Ping timeout: 240 seconds]
rsalvaterra1 has quit [Quit: Leaving.]
rsalvaterra has joined #openwrt-devel
Ycarus has joined #openwrt-devel
ivanich has joined #openwrt-devel
dorf has quit [Remote host closed the connection]
dorf has joined #openwrt-devel
Night-Shade has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
dopje has joined #openwrt-devel
dopje_ has quit [Ping timeout: 240 seconds]
dopje_ has joined #openwrt-devel
<KGB-0> https://tests.reproducible-builds.org/openwrt/openwrt_bcm47xx.html has been updated. (100.0% images and 97.5% packages reproducible in our current test framework.)
dopje has quit [Ping timeout: 256 seconds]
OutBackDingo has quit [Ping timeout: 240 seconds]
OutBackDingo has joined #openwrt-devel
feriman has quit [Quit: WeeChat 3.0]
feriman has joined #openwrt-devel
<enyc> Hrrm - should https://openwrt.org/docs/guide-developer/security Support Status EOL dates be updated?
<enyc> I imagine that 18.06 be show as projected EOL "soon" (when 20.x released)
<enyc> 19.07 then considerably beyond that
nast has joined #openwrt-devel
<blogic> stintel: so the lldpd issue
<blogic> stintel: we need to make it run on the member interfaces of a bridge, rather than the bridge
<blogic> if you run it on the bridge, remote hosts will see the AP
<blogic> but the AP can't see them
Darkmatter66 has joined #openwrt-devel
<mangix> blogic: you can get it to compile?
<blogic> 1.0.7 ?
<blogic> yes build locally
<blogic> or whatever the update was
<blogic> tested in mips, arm and aarch64
<stintel> mangix: we tried reproducing the buildbot bug, it builds for Hauke for me on d10 for jow, even in the Docker container used by the build slaves
<stintel> so very much heisenbug
<blogic> what is the buildbug ?
<stintel> blogic: it builds for 0 archs
<blogic> yeah but where/what does it fall over
<stintel> some autoconf crap
<stintel> is what jow suggested
<stintel> mangix: have a link handy?
<stintel> nvm
<stintel> arm-openwrt-linux-muslgnueabi-gcc: error: READLINE_LIBS@: No such file or directory
<mangix> yep
<jow> stintel: does it fail on all arches?
<mangix> I have the same failure on CentOS and Fedora
<jow> if so I'll try to grab a config.log from one of the slaves
<jow> mangix: ah you can repro it? Mind to share config.log ?
<stintel> jow: afaik yes
<jow> my hunch is that it is somehow related to sed
<mangix> build in progress
<jow> or maybe it is a pkgconfig issue
<jow> just guessing
rsalvaterra has quit [Ping timeout: 240 seconds]
<mangix> ccache is enabled there but the bug doesn't depend on that
rsalvaterra has joined #openwrt-devel
<jow> mangix: can you also paste grep -r 'READLINE_LIBS=' build_dir/target-*/lldpd-1.0.7/ ?
<jow> seems your ./configure gets differently generated
<mangix> build_dir/target-powerpc_464fp_musl/lldpd-1.0.7/m4/ax_lib_readline.m4: READLINE_LIBS="$ax_cv_lib_readline"
<jow> that's theo nly occurence?
<mangix> yes
<jow> $ grep -r 'READLINE_LIBS='
<jow> config.log:READLINE_LIBS=''
<jow> m4/ax_lib_readline.m4: READLINE_LIBS="$ax_cv_lib_readline"
<jow> configure: READLINE_LIBS="$ax_cv_lib_readline"
<jow> autom4te.cache/output.1: READLINE_LIBS="$ax_cv_lib_readline"
<jow> autom4te.cache/traces.0: READLINE_LIBS="$ax_cv_lib_readline"
<jow> autom4te.cache/output.2: READLINE_LIBS="$ax_cv_lib_readline"
<jow> autom4te.cache/output.0: READLINE_LIBS="$ax_cv_lib_readline"
<jow> so this explains the substitution error at least
<jow> can you now please paste the log output of make package/lldpd/{clean,compile} V=s ?
<jow> to see the autoreconf messages
<mangix> hmmm
<mangix> was 2&> for directing both stdout and stderr?
<stintel> in bash can just &>
<stintel> I think 2>&1
<stintel> is the posix way but might be wrong
fonix232 has quit [Quit: https://quassel-irc.org - Chat comfortably. Anywhere.]
<mangix> I wonder if the issue is gawk
<mangix> CentOS 7 has gawk 4.0.2
<mangix> stintel: just tested. seems &> and 2&> produce identical output
fonix232 has joined #openwrt-devel
<jow> mangix: can you please also grep this:
<jow> grep -r AX_LIB_READLINE staging_dir/target-*/host/share/aclocal/ staging_dir/target-*/usr/share/aclocal/ staging_dir/hostpkg/share/aclocal/
<mangix> 5 results in staging_dir/target-powerpc_464fp_musl/usr/share/aclocal/
<jow> in one .m4 file I presume
<mangix> two
<jow> can you please paste them?
<mangix> ax_lib_readline.m4 and ax_lua.n4
<jow> so the lldpd guys forked the official ax_lib_readline.m4
<jow> and put a modified copy with the same name in their tree
<jow> and likely even the same or a higher serial
<jow> erm same or lower
<jow> so our autoconf prefers the official macro of the same name from the global shared macro dir
<jow> which is differently defined and likely does not set READLINE_LIBS
<jow> mangix: can you paste the contents of these files?
<jow> actually only ax_lib_readline.m4 is interesting
<jow> ax_lua.m4 is just using it
<jow> well it was foolish to assume that downstream projects use autoconf correctly
<jow> yeah, now it is clear
<jow> lldpd forked it, using same name, lower serial (version)
<jow> the simplest fix would be a global s/AX_LIB_READLINE/AX_LIB_READLINE_LLDPD/g in the lldpd tree
<jow> to avoid ading knee deep through m4sh hell
<jow> *wading
<jow> so basically rename the macro in the locally shipped m4/ax_lib_readline.m4 and its invocation in configure.ac
<jow> stintel: so the reason why we weren't able to reproduce is because we didn't build autoconf-archive in our tests
<jow> stintel: in hindsight it is an obvious candidate for interference
<mangix> jow: there might be a simpler fix
<mangix> for ola, the other package that broke, this was the fix for it: https://github.com/openwrt/packages/blob/master/net/ola/patches/201-automake-fix.patch
<jow> I think this case is different
<jow> usually it is locally shipped macros which are broken and omitting them fixes things
<jow> but in this case, lddpd relies on a "broken" (modified) local macro
<jow> the official one does not set the expected variables
<jow> and due to the official one having a higher serial, autoconf will always prefer it, even if we'd shuffle the include paths to prefer local over global (which was my first idea for a fix)
<mangix> hmm git grep amincline doesn't show anything interesting
<mangix> *aminclude
<mangix> jow: right but ola broke with the introduction of autoconf-archive
<jow> well, autoconf has more failure modes than working code paths
<jow> can you give this one a try, just to confirm the suspected cause?
<jow> if this fixes things, it should be added as patch, changing m4/ax_lib_readline.m4 + configure.ac
<mangix> yep that fixed it
<jow> shall I prepare a patch?
<mangix> sure
<mangix> looks like several packages have broken pkgconfig files...
<mangix> git grep libdir=/usr | wc -l
<mangix> 5
<jow> stintel, mangix: https://git.openwrt.org/?p=openwrt/staging/jow.git;a=commit;h=f491b90f9463cf04b2b2a59ca6e46f3a4ba2b16a
<jow> maybe I could get your tested-by
<stintel> jow: I guess revbump is not needed because no package has been built for a long time
<mangix> compiles. feel free to add mine.
<mangix> stintel: lldpd doesn't really change either
<Pepe> mangix: Do you think that we can someone enable this https://docs.github.com/en/free-pro-team@latest/github/administering-a-repository/enabling-or-disabling-github-discussions-for-a-repository#enabling-or-disabling-discussions-for-your-repository for packages repository? It would be good to move feature requests from issues to it. And BTW: Github has Dark Mode finally! :)
<Pepe> somehow* my bad
feriman has quit [Quit: WeeChat 3.0]
adrianschmutzler has joined #openwrt-devel
<dorf> speaking of dark mode, what's the general view here of dark mode for LuCi?
<dorf> jow: in favor, or you prefer light?
<jow> okay for me if implemented through CSS variables
<jow> no extra theme please
<dorf> no, not proposing to do 2 themes :)
<jow> *CSS variables or slectors
<dorf> so css variables and some knobs in the UI to change?
<jow> I think there's a media query to check if user prefers dark mode
<jow> so no ui knobs needed
<jow> can be added later if needed, but initially we should simply stick to the media queries
<dorf> ok
<dorf> sounds reasonable
<dorf> @media (prefers-color-scheme: dark) is the query in question
<jow> right
<jow> stintel: can I add your acked-by?
<mangix> Pepe: stontel disabled that
<mangix> * stintel
<Pepe> stintel: That was just for team members, this is a new public feature. See how it looks: https://github.com/nodejs/node/discussions and docs can be found here: https://docs.github.com/en/free-pro-team@latest/discussions
<mangix> ah this is something else
<stintel> Pepe: whe have too many discussion places already. flyspray, forum, github issues/PRs, irc, ML. do we really need another one?
<stintel> jow: also builds for me, so tested-and-acked by if that is a think :)
<jow> upstream accepted the change already btw
<Pepe> I see your point, but there are already more than 200 issues in packages repository and some of them are feature request which can be moved there.
<jow> so with the next bump we can get rid of the patch again
<stintel> jow: excellent!
<stintel> jow: thanks a lot for this
victhor has joined #openwrt-devel
<jow> yw
<mangix> hmm wish I knew when 19.07.5 was dropping so I could have backported kambs
<mangix> *ksmbd
<jow> mangix: you can backport any non-image-included packages at any time
<mangix> jow: the problem is this: https://github.com/openwrt/packages/issues/12599
<jow> ah I see
<mangix> current version has many bugfixes
<mangix> courtesy of xdarklight
Darkmatter66 has quit [Ping timeout: 260 seconds]
<ynezz> 19.07.6 is dropping anytime soon
csrf has quit [Quit: ZNC 1.7.2+deb3 - https://znc.in]
<dorf> is that likely to be a simple opkg update, or more involved, ynezz?
csrf has joined #openwrt-devel
<ynezz> you can't update kernel that way
dorf has quit [Remote host closed the connection]
dorf has joined #openwrt-devel
<dorf> > yeah, what I suspected. what about a semi-painless way to update an install on exroot?
<dorf> also, has anyone considered a mechanism to update the kernel by downloading and deploying on reboot? or is that too complex?
MatMaul has joined #openwrt-devel
<dorf> -or- failing that, a LuCI feature that builds on the various backup/restore scripts out there, backing up all relevant configs together with a list of installed apps, with the option to import the backup to restore a previous setup post-upgrade.
rr123 has quit [Remote host closed the connection]
<rsalvaterra> mangix: I just saw your pull request. Do you have a link to the upstream multi-CPU port DSA patch? :)
Borromini has joined #openwrt-devel
T-Bone has joined #openwrt-devel
f00b4r0 has quit [Ping timeout: 265 seconds]
noltari has quit [Quit: Bye ~ Happy Hacking!]
Borromini has quit [Quit: Lost terminal]
noltari has joined #openwrt-devel
Tusker has joined #openwrt-devel
Tusker has quit [Client Quit]
danitool has joined #openwrt-devel
ivanich has quit [Quit: Konversation terminated!]
ivanich has joined #openwrt-devel
<ynezz> jow: what's the rationale behind 65fad8645d72f2293a7d62d6ca338ebc2ee0d9de ?
dopje_ has quit [Read error: Connection reset by peer]
dopje has joined #openwrt-devel
<mangix> rsalvaterra: it was referenced in that PR
<rsalvaterra> Sorry, must have missed it.
<mangix> ynezz: who cuts the releases?
Olipro has quit [Ping timeout: 260 seconds]
Misanthropos has quit [Read error: Connection reset by peer]
Olipro has joined #openwrt-devel
Olipro has joined #openwrt-devel
Misanthr- has joined #openwrt-devel
Misanthr- is now known as Misanthropos
nitroshift has quit [Quit: Gone that way --->]
danitool has quit [Quit: Cubum autem in duos cubos, aut quadratoquadratum in duos quadratoquadratos]
<ynezz> mangix: if you look at the commits, it's mostly Hauke, he's sending usually emails few weeks in advance
noltari has quit [Quit: Bye ~ Happy Hacking!]
noltari has joined #openwrt-devel
hbug has quit [Remote host closed the connection]
hbug has joined #openwrt-devel
opal has quit [Remote host closed the connection]
opal has joined #openwrt-devel
valku has joined #openwrt-devel
xxiao has joined #openwrt-devel
<xxiao> if i have a package mandating openssl, will wolfssl/mbedtls still make any sense at all? wolfss itself is 400K
<xxiao> trying to switch all to openssl and see how much space it can save, the ideal world will be all packages be ssl-neutral
Darkmatter66 has joined #openwrt-devel
Night-Shade has joined #openwrt-devel
dedeckeh has joined #openwrt-devel
Night-Shade has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
kubrickdave has quit [Quit: ZNC 1.7.2+deb3 - https://znc.in]
kubrickdave has joined #openwrt-devel
kubrickdave has quit [Client Quit]
Nick_Lowe has joined #openwrt-devel
kubrickdave has joined #openwrt-devel
<jow> ynezz: real world failures with canonical mirrors having expired / selfsigned certs
<jow> ynezz: reasoning was that we rely on hashes to verify integrity, HTTPS only adding complexity at best
<jow> modern CDNs even mass-produce throw-away certs for dozens of sites they're caching, so I really don't see any merit in turning random cert quirks into hard failures
<jow> but I can live with reverting it if it makes the security fanboys happy
blb4393 has joined #openwrt-devel
<jow> s/canoical mirrors/canonical sources/, as in random project sites hosting tarballs
<jow> likely not that much of an issue nowadays, its all github, sourceforge or aws anyway
finsternis has quit [Read error: Connection reset by peer]
<Nick_Lowe> jow Are you happy with this type of patch being sent in to add short descriptions in to LuCI? https://github.com/openwrt/luci/pull/4649/commits/9060c129155e018567716d3f9cfe75b0accf6dc5
<Nick_Lowe> WMM and hidden SSIDs I see as low hanging fruit - they are often misconfigured
dorf has quit [Remote host closed the connection]
junland has quit [Quit: %ZNC Disconnected%]
junland has joined #openwrt-devel
junland has quit [Remote host closed the connection]
junland has joined #openwrt-devel
dorf has joined #openwrt-devel
danitool has joined #openwrt-devel
gch9812138860000 has joined #openwrt-devel
junland has quit [Quit: %ZNC Disconnected%]
noahm has quit [Quit: reboot...]
noahm has joined #openwrt-devel
blb4393 has quit [Quit: ChatZilla 0.9.93 [Waterfox 56.3/MOZ_BUILDID]]
junland has joined #openwrt-devel
xxiao is now known as rr123
dangole has joined #openwrt-devel
dopje_ has joined #openwrt-devel
dopje has quit [Ping timeout: 240 seconds]
ldir- has quit [Quit: *.net *.split]
ldir has joined #openwrt-devel
Nick_Lowe has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<dorf> this looks interesting: https://github.com/rufengsuixing/luci-app-adguardhome .. has anyone installed it?
<dorf> adguardhome is being packaged for 20.x so it might be an idea to see if it's worth making that available?
Nick_Lowe has joined #openwrt-devel
Nick_Lowe has quit [Client Quit]
Darkmatter66_ has joined #openwrt-devel
Darkmatter66 has quit [Ping timeout: 240 seconds]
<ynezz> jow: ok, makes sense, there is no commit description, so had to ask :)
<rr123> jow: it has been a while since i used openssh-sftp-server for luci, does dropbear work with openssh-sftp-server or i have to use openssh to replace dropbear? I'm running dropbear with openssh-sftp-server but sshfs complains "remote host has disconnected"
<dorf> not yet messed with sshfs, but sftp works fine with the openssh package.
<rr123> dorf: for sure, i just don't recall if i need openssh-server for sftp, or dropbear server can work, don't want to use openssh server due to size
<dorf> I never bothered to uninstall dropbear, but I did install the ssh server.
<dorf> openssh-sftp-server and *sftp-cient
<dorf> sorry, that's probably not much help.
<dorf> I'm guessing you probably need those for the sftp service, rr123.
<dorf> also, I didn't install the openssh-server package.
<dorf> So in short, the opensftp-server and opensftp-client packages will work with dropbear.
swex_ has joined #openwrt-devel
swex has quit [Ping timeout: 256 seconds]
<rr123> mkdir -p /tmp/xyz && sshfs root@192.168.1.1:/usr/lib /tmp/xyz
<rr123> can you try that? I have dropbear + openssh-tftp-server but the above command will: remote host has disconnected
<dorf> if I must. how do I specify a port with sshfs?
<dorf> ssh is not running on port 22 here.
<dorf> -o port=PORT
<rr123> mkdir -p /tmp/xyz && sshfs root@192.168.1.1:/usr/lib /tmp/xyz -p 3453
<philipp64> karlp: what it you that emailed me the link to the “procd init script parameters” wiki page?
<philipp64> seems like some of the hooks are undocumented, like “service_started()”, etc.
<dorf> works for me, rr123.
<dorf> and no, it's not -p <port> it's -o port=<port>
Night-Shade has joined #openwrt-devel
<rr123> dorf:thanks for testing, does not work for me still, testing
<rr123> that's what i kind of remembered, that dropbear + openssh-sftp-server should work
<dorf> sure thing. sounds like a permissions issue of sorts.
<dorf> did you disabled password logins in dropbear?
<dorf> also, maybe logread will give you some insight into what the issue is.
<rr123> logread was not helping, just show (root) exited, i use ssh public key access which worked fine for ssh access
<dorf> maybe try with a password, see if it's an issue with key access?
<rr123> tries that , something else is wrong, just revert some changes in my ssh_config, not helping either
<rr123> i can sshfs to other host just fine
Ycarus has quit [Quit: Ycarus]
<karlp> philipp64: I may have at some point, not recently? yeah, people keep adding things and then not documenting them, I cnat do much abotu that :)
<philipp64> maybe rmilecki can fix that if he gets bored...
<jow> rr123: openssh-sftp-server works with dropbear
<jow> it does not replace it
thess has joined #openwrt-devel
<dorf> jow: you're a little late to the party!
thess has quit []
<rr123> thanks, i found the problem, i was replacing wolfssl with openssl as i need openssl anyway so why adding the 400KB wolfssl, in the process I enabled cryptodev, then disable it as i realize my ath79 probably does not have it supported, then i mistakenly disable openssh engine support, it's place holder but must be on, otherwise sftp won't run. now it works, no openssh-server needed.
<dorf> \o/
thess has joined #openwrt-devel
<rr123> s/openssh engine support/openssl engine suport/
<philipp64> jow: you around? seeing something weird in IPsec…
<philipp64> Dec 7 18:12:46 OpenWrt2 ipsec: 12[NET] received packet: from 45.33.216.244[500] to 192.168.254.2[500] (617 bytes)
<philipp64> what would cause that reflection?
* rr123 finally ready to play with luci js files
thess has left #openwrt-devel [#openwrt-devel]
<philipp64> jow: I just ran “iptables-save | less” but nothing looks like a culprit (that I could see, anyway) regarding reflection…. And why would reflection happen on traffic coming from the outside, anyway? I thought reflection only happened when you tried to connection (from the inside) to a service on the WAN address…
<jow> philipp64: uhm no idea, sorry.
<jow> I usually avoid touching ipsec since it never works as intended for me
<philipp64> okay, who knows that part of the firewall?
<jow> I do, but I fail to see the relation to ipsec
* rr123 thought the whole world is already on wireguard
<philipp64> or could tell me where to dive into the reflection/NATting?
<jow> iptables -t nat -nvL ?
<rr123> https://gitlab.bau-ha.us/mt/owsd-tiny a potential uhttpd-mod-ws? after 2 days I have not given up on websockets...
<jow> only 53KB
<jow> lol
<rr123> a ws proxy for uhttpd will open lots of doors
<dorf> hahaha.. 53K!
<dorf> that's HUUUUUUUGE!
<rr123> 53KB is static, come on
<dorf> I'm kidding, but I don't think jow is :)
<jow> why do we need websockets?
<jow> I mean, what use case exactly do they address?
<dorf> non-linear server-side updates.
<jow> evensource?
<aparcar[m]> jow: can we remove iftop from openwrt.git?
<jow> aparcar[m]: sure
<aparcar[m]> you're the maintainer just checkin
<rr123> for a long-running backend process I do not need poll, embedded boards sometimes take time to run certain process(for seconds or even longer)
<dorf> jow: maybe graphs -> connections is a good trial candidate for websockets..
<dorf> it's next to useless as is.
<jow> dorf: can be implemented using evensource
<jow> *eventsource
* enyc meows
ivanich has quit [Quit: Konversation terminated!]
<aparcar[m]> eventsource > websockets?
<rr123> WS can transmit both binary data and UTF-8, SSE is limited to UTF-8(no binary support)
<aparcar[m]> mangix: mind becoming the maintainer of iftop?
Tapper has quit [Quit: Instantbird 1.6a1pre -- http://www.instantbird.com]
<jow> rr123: yes, but do you intend to decode binary data in luci?
<jow> I know that it is useful for bidirectional data streaming, think video conferencing etc.
<jow> but as a "better poll" alternative it is bloated mess ihmo
<jow> the protocol is complicated, the implementations are complex and huge, and the requirement of persistent connections easily opens DoS vectors without further limiting measures
<philipp64> jow: no, not a firewall problem. Strongswan is generating traffic from an interface that’s NOT the one facing the default route…
<philipp64> hence it getting NATted on the outgoing masquerade…
<jow> philipp64: was about to write that... your DNAT/SNAT rule list is quite empty
<philipp64> Dec 7 18:12:46 OpenWrt2 ipsec: 09[NET] sending packet: from 192.168.254.2[500] to 45.33.216.244[500] (584 bytes)
<philipp64> WTF...
<jow> rr123: yeah, Rafal implemented it last month
<dorf> jow: eventsource sounds good to me.
<dorf> potentially better than websockets, unidirectional.. no need for bidirectional communication.
<rr123> ok I'm going to play with that, I never intend to play games within luci anyways
<dorf> eventsource is a new one to me, but it looks pontentially a better fit.
<jow> downside of eventsource is that the EvenSource() client API does not allow setting custom headers, so no way to pass the token using Authorization: or Cookie:
<dorf> is the max 6 connections if !http/2 an issue?
<jow> remains to be seen
<rr123> then how to do authentication in luci
<jow> rr123: we need to allow passing the session token via query string for EventSource requests
<rr123> the 6-connection limit is so brain-dead
<rr123> i mean, why 6
<rr123> put session token in query string brings back the old luci style to me
<dorf> query strings, not good unless https
<dorf> at least that polyfill is being actively maintained.
<dorf> "If you are using HTTP Basic Authentication, you can embed credentials into the URL - http://username:password@github.com"
<dorf> rr123: 6 sounds like something Mozilla et al dreamt up and never bothered to fix.. "oh, we'll just make everyone use http/2"
<mangix> aparcar[m]: why?
<aparcar[m]> mangix: because you're bumping so many things anyway *duck*
<dorf> Mozilla have form, anyways. Took them years to fix the 10 second socks timeout.
<mangix> aparcar[m]: doesn't mean I want to maintain them
<mangix> i don't use iftop either
<aparcar[m]> mangix: just asking 🙂
<aparcar[m]> jow: do you mind staying the maintainer if it moves to packages.git?
<aparcar[m]> I guess I can do it because it doesn't receive any updates anyway
Nick_Lowe has joined #openwrt-devel
gch9812138860000 has quit [Ping timeout: 240 seconds]
Nick_Lowe has joined #openwrt-devel
Nick_Lowe has quit [Client Quit]
Nick_Lowe has joined #openwrt-devel
dedeckeh has quit [Remote host closed the connection]
dopje has joined #openwrt-devel
_lore_ has quit [Ping timeout: 264 seconds]
dopje_ has quit [Ping timeout: 264 seconds]
dangole has quit [Remote host closed the connection]
dangole has joined #openwrt-devel
_lore_ has joined #openwrt-devel
<jow> aparcar[m]: fine with me
Borromini has joined #openwrt-devel
Nick_Lowe has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<aparcar[m]> jow: fine to stay maintainer in packages.git or me becoming the maintainer?
<jow> aparcar[m]: both actually. But since I am neither using nor updating iftop, it might make sense if you take it over
goliath has quit [Quit: SIGSEGV]
Borromini has quit [Quit: Lost terminal]
Nick_Lowe has joined #openwrt-devel
dopje_ has joined #openwrt-devel
dopje has quit [Ping timeout: 264 seconds]
<aparcar[m]> jow: I'll take over. I don't use it much but as it haven't received and update in 2 years the involved work seems doable
<jow> thanks
<mangix> makes sense someone would get irritated by that
<jow> mangix: can you ping me about that tomorrow?
<mangix> ok
<jow> hanks!
dangole has quit [Quit: Leaving]
<mangix> oh nice. lldpd builds on the buildbots again
<stintel> is there any way to get alerts about packages not building ?
<stintel> quite interesting that nobody reported this earlier. I guess it means it doesn't have many users.
<stintel> for me it's a basic feature of a network device, which is why I will veto its move to the packages feed
black_ant has quit [Ping timeout: 265 seconds]
* mangix has no idea what lldpd is
<rr123> enterprise switch all has it, home users no need
<rr123> layer2 vendor compatibility stuff as I recall
<stintel> link layer discovery protocol, basically device X announces itself and some of its capabilities to device Y and vice versa
<stintel> on my switch, it gives this handy info:
<stintel> so if I forgot which switchport goes to which devices, this is very helpful
<stintel> aside from the crappy Cisco SG200-08 on MultiGE0/0/15 =)
<barhom> Does anyone know if there is a good way to get events from the kernel when it learns about new mac-addr (arp) ? hotplug.d/neigh is not enough because it is based on dnsmasq/dhcp.
<stintel> ip monitor neigh ?
<stintel> never used tbh but might be useful
<barhom> stintel, I learned something new today. Thanks
<stintel> welcome :)
<barhom> What would you say about letting it be an option to run this and plugging it into hotplug.d/neigh ? Anyone find it useful maybe?
<stintel> sounds like a DoS vector
<barhom> For me it is about being able to list clients on the network who have set a static IP
<stintel> there might be other options
philipp64 has quit [Ping timeout: 260 seconds]
Nick_Lowe has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
philipp64 has joined #openwrt-devel
T-Bone has quit [Quit: Quitte]
Nick_Lowe has joined #openwrt-devel
<stintel> I was thinking prometheus and node_exporter, but seems the lua version doesn't expose arp entries
<mangix> sounds niche
falk0n has quit [Ping timeout: 240 seconds]
<rr123> what about a small sh script to expose `arp -a`
<barhom> I think Ill skip adding this extra unnecessary arp-entries checker. I wanted to get a list of client devices reliably. hotplug.d/dhcp and hostapd_cli to catch wifi connect/disconnect catches almost all clients
falk0n has joined #openwrt-devel
<barhom> The only ones I'll be missing are the ones that connect via cable and incorrectly do not use dhcp and set a static IP. Those clients will never be listed
adrianschmutzler has quit [Quit: ~ Trillian - www.trillian.im ~]
* rr123 did not see hotplug.d on the master build at all
<jow> barhom: monitoring netlink is the only reliable way to detect new neighbour entries
<jow> ip neigh monitor does exactly that, but depending on how you implemented your solution, subscribing to a netlink socket in C might be easer
<jow> compared to scraping "ip monitor" output
<jow> altenratively poll /proc/net/arp
<barhom> I do not see why i shouldn't use ip monitor neigh if I want to subscribe to this. Feels easy enough in bash, read each line and run whatever script you want
Nick_Lowe has quit [Quit: My MacBook has gone to sleep. ZZZzzz…]
<barhom> jow, do you think hotplug.d/neigh should get updates or is it too much spam?
Nick_Lowe has joined #openwrt-devel
<jow> I think it
<jow> 'll overwhlem the event system in case of high neighbour activity
<barhom> yeh, I think Ill skip this whole chapter for now. Enough with dhcp+hostapd_cli
pkgadd has quit [Remote host closed the connection]
pkgadd has joined #openwrt-devel
<barhom> It was quite cumbersome to add hostapd_cli to startup. The only good way I could find was ti add it in hotplug.d/net/
<barhom> with this script, https://0bin.net/paste/mYEhK3aF#TFUvMF6FI5J+xxBXkuMTirHQBmyOUNUzLC+fXN53VYg
<barhom> I wish I could remove the sleep and start it more reliably