OpenWRT 25.12

[Tbaile]

Rebase on on OpenWrt v25.12.4.

The rebase requires the following changes:

• Remove fork of jinja2
• Remove ipcalc.sh
• Remove ppp patch
• Update netifyd binaries
• Updated deprecated python regex
• Check checkmk update is not breaking everything https://checkmk.com/werks
  • agent is working, but a custom script is generating an error because opkg has been removed: 2 OPKG.Packages - opkg not available
• Package management: replace opkg calls with apk and handle new repository configuration files refactor: migrate package management from opkg to apk #1654
  • Disable extra repository during nightly update
  • Update signing process build: updated signing method for APKs #1659
• Evaluate switch to upstream or align them to new versions for the following softwares:
  • acme-acmesh chore: remove acme fork #1679: new version does not work
  • acme-common chore: remove acme fork #1679
  • adblock chore: adblock update #1653
    T: Update on my machine failed. No feeds active and a ton of feeds were active by themselves. Needs investingating.
    Fix: Multiple fixes #1690
  • banip
  • mwan3
  • openvpn-easy-rsa (upstream is too old, keeping current version)
• Evaluate the switch to persistent /var feat: enable persistent var (EXPERIMENTAL) #1680
• Evaluate if https-dns-proxy should be added to the image
  • implementation: Include https-dns-proxy with safe defaults #1691
  • doc: Document bundled https-dns-proxy defaults nethsecurity-docs#266
• Preserve bash history persistence across reboots https://openwrt.org/releases/25.12/notes-25.12.0#shell_history_is_preserved, commit
• Update snort with vectorscan chore: updated snort #1682
• Opkg is required by adblock, let's try to update adblock chore: adblock update #1653
• Check ipsecs (major bump) and some module have been removed
  • Tunnel between NethSecurity 8.7.2 and 8.8.0 is working
• Check OpenVPN, moved from 2.6.14 -> 2.7.4
  • External-database user appears disconnected even though connected #1686
  • tested tunnel between 8.7.2 and 8.8.0
• python-passlib got renamed in python-libpass, check if it still works drop in replacement, nothing changed
• python packages cgi cgitb and distutils got removed, double check if everything is in place (this might impact more python-nethsec)
  • python3-nethsec updated: chore: updated package to 3.13 python3-nethsec#128
• snmpd missing build: added back snmpd #1683
• check possible swap in interfaces (again), intel split some drivers
  • No issue on NethBox Z1+ (Giacomo)
• optional check luci if something broke bad
• Some packages got pushed using commit hashes to not disrupt the repos completely, remember to reset to latest tag:
  • ns-ui
  • ns-monitoring
  • python3-nethsec
• since netdata has been removed, controller node_exporter dashboard will not work anymore: replace them or restore netdata (see output plugin and grafana dashboard)
  • PR firewall: feat(monitoring): re-add netdata as module #1693
• configure persistent lease file, see also dnsmasq: fix dnsmasq failure on non-existent leasefile directory openwrt/openwrt#21661
  Moved to a separate issue: Preserve dnsmasq DHCP leases on mounted storage #1694
• remove "Open Netdata" button from real time monitor page NethServer/nethsecurity-ui@0aa538f
• update documentation
• update nethsecurity controller