Daniel Golle 0f3d48a378 snowflake: run snowflake-proxy with procd-ujail
snowflake-proxy doesn't write any files
 => run in read-only rootfs environment

the process needs to read SSL certs but no other files
 => only exposed path is /etc/ssl/certificates (read-only)

running as unpriviledged user with no additional capabilities
 => set no-new-privs bit

By default procd-ujail also isolates the process by executing it in
a separate new IPC and PID namespace.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-09-25 01:38:09 +01:00
2022-05-31 09:47:35 +02:00
2022-09-22 01:30:59 -07:00
2022-09-19 19:50:16 +02:00
2022-09-17 12:58:04 -07:00
2022-09-22 20:49:27 -07:00
2022-09-07 22:56:26 +01:00
2022-08-19 16:13:53 -07:00
2022-09-24 12:36:33 +02:00
2014-06-16 08:14:04 +02:00
2020-05-24 14:50:30 -07:00

OpenWrt packages feed

Description

This is the OpenWrt "packages"-feed containing community-maintained build scripts, options and patches for applications, modules and libraries used within OpenWrt.

Installation of pre-built packages is handled directly by the opkg utility within your running OpenWrt system or by using the OpenWrt SDK on a build system.

Usage

This repository is intended to be layered on-top of an OpenWrt buildroot. If you do not have an OpenWrt buildroot installed, see the documentation at: OpenWrt Buildroot Installation on the OpenWrt support site.

This feed is enabled by default. To install all its package definitions, run:

./scripts/feeds update packages
./scripts/feeds install -a -p packages

License

See LICENSE file.

Package Guidelines

See CONTRIBUTING.md file.

Description
Community maintained packages for OpenWrt. Documentation for submitting pull requests is in CONTRIBUTING.md
Readme GPL-2.0 169 MiB
Languages
Makefile 54.5%
Shell 31.4%
C 8.1%
C++ 1.9%
Lua 1.4%
Other 2.5%