kernelkit · troglobit · Mar 5, 2026 · Mar 4, 2026
diff --git a/board/aarch64/bananapi-bpi-r3/dts/mediatek/mt7986a-bananapi-bpi-r3.dtsi b/board/aarch64/bananapi-bpi-r3/dts/mediatek/mt7986a-bananapi-bpi-r3.dtsi
@@ -8,22 +8,7 @@
 		};
 	};
 };
-/*
-From 236317dd4e55512933dcdaec3d0b4a0824f5e5bd Mon Sep 17 00:00:00 2001
-From: Shiji Yang <yangshiji66@outlook.com>
-Date: Sun, 10 Aug 2025 18:11:01 +0800
-Subject: [PATCH] arm64: dts: mediatek: mt7986: increase ATF reserved memory to
- 256 kiB
 
-The latest Mediatek open-source Trusted Firmware-A project has
-reserved 256 KiB for BL2 and BL31. It is better to increase the
-reserved memory region in the Linux kernel to protect the data.
-
-https://github.com/openwrt/openwrt/blob/main/target/linux/mediatek/patches-6.12/199-arm64-dts-mediatek-mt7986-increase-ATF-reserved-memo.patch
-*/
-&secmon_reserved {
-	reg = <0 0x43000000 0 0x40000>;
-};
 &cpu_thermal {
 	/delete-node/ trips;
 	/delete-node/ cooling-maps;

diff --git a/board/common/rootfs/etc/pam.d/login b/board/common/rootfs/etc/pam.d/login
diff --git a/buildroot b/buildroot
diff --git a/doc/ChangeLog.md b/doc/ChangeLog.md
@@ -3,16 +3,6 @@ Change Log
 
 All notable changes to the project are documented in this file.
 
-[v26.03.0][UNRELEASED] -
--------------------------
-
-### Changes
-- Upgrade Buildroot to 2026.02 (LTS)
-
-### Fixes
-
-
-
 [v26.02.0][] - 2026-03-01
 -------------------------
 

diff --git a/package/Config.in b/package/Config.in
@@ -27,15 +27,19 @@ source "$BR2_EXTERNAL_INFIX_PATH/package/klish/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/klish-plugin-sysrepo/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/landing/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/libsrx/Config.in"
+source "$BR2_EXTERNAL_INFIX_PATH/package/lowdown/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/mcd/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/mdns-alias/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/netbrowse/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/onieprom/Config.in"
+source "$BR2_EXTERNAL_INFIX_PATH/package/podman/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/python-spy/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/python-libyang/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/python-yangdoc/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/skeleton-init-finit/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/tetris/Config.in"
+source "$BR2_EXTERNAL_INFIX_PATH/package/libyang-cpp/Config.in"
+source "$BR2_EXTERNAL_INFIX_PATH/package/sysrepo-cpp/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/rousette/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/nghttp2-asio/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/date-cpp/Config.in"

diff --git a/package/feature-gps/Config.in b/package/feature-gps/Config.in
@@ -17,6 +17,7 @@ config BR2_PACKAGE_FEATURE_GPS
 	select BR2_PACKAGE_GPSD_ISYNC
 	select BR2_PACKAGE_GPSD_ITRAX
 	select BR2_PACKAGE_GPSD_NMEA2000
+	select BR2_PACKAGE_GPSD_OCEANSERVER
 	select BR2_PACKAGE_GPSD_ONCORE
 	select BR2_PACKAGE_GPSD_RTCM104V2
 	select BR2_PACKAGE_GPSD_RTCM104V3

diff --git a/...001-Implement-SchemaNode-actionRpcs.patch → ...001-Implement-SchemaNode-actionRpcs.patch b/...001-Implement-SchemaNode-actionRpcs.patch → ...001-Implement-SchemaNode-actionRpcs.patch
diff --git a/...ang-cpp/4/0002-CI-pin-to-libyang-v3.patch → ...byang-cpp/0002-CI-pin-to-libyang-v3.patch b/...ang-cpp/4/0002-CI-pin-to-libyang-v3.patch → ...byang-cpp/0002-CI-pin-to-libyang-v3.patch
diff --git a/...ang-cpp/4/0003-wrap-lyd_validate_op.patch → ...byang-cpp/0003-wrap-lyd_validate_op.patch b/...ang-cpp/4/0003-wrap-lyd_validate_op.patch → ...byang-cpp/0003-wrap-lyd_validate_op.patch
diff --git a/...byang-cpp/4/0004-port-to-libyang-v4.patch → ...libyang-cpp/0004-port-to-libyang-v4.patch b/...byang-cpp/4/0004-port-to-libyang-v4.patch → ...libyang-cpp/0004-port-to-libyang-v4.patch
diff --git a/...0005-Add-SchemaNode-isOutput-method.patch → ...0005-Add-SchemaNode-isOutput-method.patch b/...0005-Add-SchemaNode-isOutput-method.patch → ...0005-Add-SchemaNode-isOutput-method.patch
diff --git a/...06-adapt-to-changes-in-libyang-v4.2.patch → ...06-adapt-to-changes-in-libyang-v4.2.patch b/...06-adapt-to-changes-in-libyang-v4.2.patch → ...06-adapt-to-changes-in-libyang-v4.2.patch
diff --git a/...ault-when-listing-module-s-features.patch → ...ault-when-listing-module-s-features.patch b/...ault-when-listing-module-s-features.patch → ...ault-when-listing-module-s-features.patch
diff --git a/package/libyang-cpp/Config.in b/package/libyang-cpp/Config.in
@@ -0,0 +1,6 @@
+config BR2_PACKAGE_LIBYANG_CPP
+	bool "libyang-cpp"
+	depends on BR2_USE_MMU
+	select BR2_PACKAGE_LIBYANG
+	help
+	   Libyang CPP bindings
diff --git a/package/libyang-cpp/libyang-cpp.hash b/package/libyang-cpp/libyang-cpp.hash
@@ -0,0 +1,3 @@
+# Locally calculated
+sha256  82e3758011ec44c78e98d0777799d6e12aec5b8a64b32ebb20d0fe50e32488bb  LICENSE
+sha256  70fd0df940026fb930d5407abe679e064caf4701bff35d79465b9ad2c0915808  libyang-cpp-v4.tar.gz
diff --git a/package/libyang-cpp/libyang-cpp.mk b/package/libyang-cpp/libyang-cpp.mk
@@ -0,0 +1,13 @@
+################################################################################
+#
+# CPP bindings for libyang
+#
+################################################################################
+LIBYANG_CPP_VERSION = v4
+LIBYANG_CPP_SITE = $(call github,CESNET,libyang-cpp,$(LIBYANG_CPP_VERSION))
+LIBYANG_CPP_LICENSE = BSD-3-Clause
+LIBYANG_CPP_LICENSE_FILES = LICENSE
+LIBYANG_CPP_DEPENDENCIES = libyang
+LIBYANG_CPP_INSTALL_STAGING = YES
+
+$(eval $(cmake-package))
diff --git a/package/lowdown/Config.in b/package/lowdown/Config.in
@@ -0,0 +1,7 @@
+config BR2_PACKAGE_LOWDOWN
+	bool "lowdown"
+	help
+	  Simple markdown translator, useful for terminals.
+
+	  https://kristaps.bsd.lv/lowdown/
+
diff --git a/patches/lowdown/1.4.0/fix-build.patch → package/lowdown/fix-build.patch b/patches/lowdown/1.4.0/fix-build.patch → package/lowdown/fix-build.patch
@@ -1,8 +1,7 @@
-diff --git a/configure b/configure
-index 8ae6a78..c8ab908 100755
---- a/configure
-+++ b/configure
-@@ -61,12 +61,7 @@ echo "config.log: writing..."
+diff -urN lowdown-VERSION_1_0_2.orig/configure lowdown-VERSION_1_0_2/configure
+--- lowdown-VERSION_1_0_2.orig/configure	2025-03-21 12:58:06.151106271 +0000
++++ lowdown-VERSION_1_0_2/configure	2025-03-21 13:20:20.649825864 +0000
+@@ -61,12 +61,7 @@
 
  MAKE_FLAGS=""
 
@@ -16,7 +15,7 @@ index 8ae6a78..c8ab908 100755
 
  if [ -n "$MAKE_FLAGS" ]; then 
  	echo "GNU submake detected: using --no-print-directory" 1>&2
-@@ -79,9 +74,6 @@ fi
+@@ -79,9 +74,6 @@
  # in.
  #----------------------------------------------------------------------
 

diff --git a/package/lowdown/lowdown.hash b/package/lowdown/lowdown.hash
@@ -0,0 +1,3 @@
+# Locally calculated
+sha256  292f15c06a7fef39547775f7adabb19cf24a9ca2ffdf5b60fe8f933647e9f774  LICENSE.md
+sha256  049b7883874f8a8e528dc7c4ed7b27cf7ceeb9ecf8fe71c3a8d51d574fddf84b  lowdown-VERSION_1_0_2.tar.gz
diff --git a/package/lowdown/lowdown.mk b/package/lowdown/lowdown.mk
@@ -0,0 +1,24 @@
+################################################################################
+#
+# lowdown
+#
+################################################################################
+
+LOWDOWN_VERSION = VERSION_1_0_2
+LOWDOWN_SITE = $(call github,kristapsdz,lowdown,$(LOWDOWN_VERSION))
+LOWDOWN_LICENSE = ISC
+LOWDOWN_LICENSE_FILES = LICENSE.md
+
+define LOWDOWN_CONFIGURE_CMDS
+        (cd $(@D); $(TARGET_CONFIGURE_OPTS) ./configure)
+endef
+
+define LOWDOWN_BUILD_CMDS
+        $(TARGET_MAKE_ENV) $(MAKE) -C $(@D)
+endef
+
+define LOWDOWN_INSTALL_TARGET_CMDS
+	$(INSTALL) -t $(TARGET_DIR)/usr/bin -D -m 0755 $(@D)/lowdown
+endef
+
+$(eval $(generic-package))
diff --git a/package/nghttp2-asio/nghttp2-asio.mk b/package/nghttp2-asio/nghttp2-asio.mk
@@ -13,6 +13,5 @@ NGHTTP2_ASIO_DEPENDENCIES = boost nghttp2 openssl
 NGHTTP2_ASIO_INSTALL_STAGING = YES
 NGHTTP2_ASIO_AUTOGEN = YES
 NGHTTP2_ASIO_AUTORECONF = YES
-NGHTTP2_ASIO_CONF_OPTS += -DCMAKE_POLICY_VERSION_MINIMUM=3.5
 
 $(eval $(cmake-package))
diff --git a/package/podman/Config.in b/package/podman/Config.in
@@ -0,0 +1,56 @@
+config BR2_PACKAGE_PODMAN
+	bool "podman"
+	depends on BR2_PACKAGE_HOST_GO_TARGET_ARCH_SUPPORTS
+	depends on BR2_PACKAGE_HOST_GO_TARGET_CGO_LINKING_SUPPORTS
+	depends on BR2_TOOLCHAIN_HAS_THREADS
+	depends on !BR2_TOOLCHAIN_USES_UCLIBC # no fexecve
+	depends on BR2_USE_MMU # libgpgme
+	select BR2_PACKAGE_CRUN # runtime dependency
+	select BR2_PACKAGE_CONMON  # runtime dependency
+	select BR2_PACKAGE_CNI_PLUGINS # runtime dependency
+	select BR2_PACKAGE_BRIDGE_UTILS # Required for container networking
+	select BR2_PACKAGE_IPTABLES # Required for container network
+	select BR2_PACKAGE_CGROUPFS_MOUNT if !BR2_PACKAGE_SYSTEMD # runtime dependency
+	select BR2_PACKAGE_CA_CERTIFICATES # Required for the podman pull command via https
+	select BR2_PACKAGE_LIBGPGME
+	help
+	  podman is a CLI tool for spawning and running containers
+	  according to the OCI specification.
+
+	  https://github.com/containers/podman
+
+if BR2_PACKAGE_PODMAN
+
+config BR2_PACKAGE_PODMAN_DRIVER_BTRFS
+	bool "btrfs filesystem driver"
+	depends on BR2_USE_MMU # btrfs-progs
+	depends on BR2_TOOLCHAIN_HAS_THREADS # btrfs-progs
+	select BR2_PACKAGE_BTRFS_PROGS
+	help
+	  Build the btrfs filesystem driver.
+
+config BR2_PACKAGE_PODMAN_DRIVER_DEVICEMAPPER
+	bool "devicemapper filesystem driver"
+	depends on BR2_TOOLCHAIN_HAS_THREADS # lvm2
+	depends on BR2_USE_MMU # lvm2
+	depends on !BR2_STATIC_LIBS # lvm2
+	select BR2_PACKAGE_LVM2
+	help
+	  Build the devicemapper filesystem driver.
+
+config BR2_PACKAGE_PODMAN_DRIVER_VFS
+	bool "vfs filesystem driver"
+	depends on BR2_USE_WCHAR # gvfs
+	depends on BR2_USE_MMU # gvfs
+	depends on BR2_TOOLCHAIN_HAS_THREADS # gvfs
+	depends on !BR2_STATIC_LIBS # gvfs
+	select BR2_PACKAGE_GVFS
+	help
+	  Build the vfs filesystem driver.
+
+endif
+
+comment "podman needs a glibc or musl toolchain w/ threads"
+	depends on BR2_PACKAGE_HOST_GO_TARGET_ARCH_SUPPORTS && \
+		BR2_PACKAGE_HOST_GO_TARGET_CGO_LINKING_SUPPORTS
+	depends on !BR2_TOOLCHAIN_HAS_THREADS || BR2_TOOLCHAIN_USES_UCLIBC
diff --git a/package/podman/containers-policy.json b/package/podman/containers-policy.json
@@ -0,0 +1,14 @@
+{
+  "default": [
+    {
+    "type": "insecureAcceptAnything"
+  }
+  ],
+  "transports":
+  {
+    "docker-daemon":
+    {
+      "": [{"type":"insecureAcceptAnything"}]
+    }
+  }
+}
diff --git a/package/podman/podman.hash b/package/podman/podman.hash
@@ -0,0 +1,3 @@
+# Locally computed
+sha256  53f6bf7a8e4b647b2378ea8bfee6c67e03e412bf027b4dc0ff37a3a764703405  podman-4.9.5-go2.tar.gz
+sha256  62fb8a3a9621dc2388174caaabe9c2317b694bb9a1d46c98bcf5655b68f51be3  LICENSE
diff --git a/package/podman/podman.mk b/package/podman/podman.mk
@@ -0,0 +1,138 @@
+################################################################################
+#
+# podman
+#
+################################################################################
+
+PODMAN_VERSION = 4.9.5
+PODMAN_SITE = $(call github,containers,podman,v$(PODMAN_VERSION))
+PODMAN_LICENSE = Apache-2.0
+PODMAN_LICENSE_FILES = LICENSE
+
+PODMAN_CPE_ID_VENDOR = podman_project
+PODMAN_GOMOD = github.com/containers/podman/v4
+
+PODMAN_BUILD_TARGETS = cmd/podman cmd/rootlessport cmd/quadlet
+PODMAN_DEPENDENCIES += libgpgme
+PODMAN_LDFLAGS = \
+	-X $(PODMAN_GOMOD)/libpod/define.gitCommit=$(PODMAN_VERSION)
+PODMAN_TAGS = \
+	btrfs_noversion containers_image_openpgp \
+	exclude_graphdriver_devicemapper exclude_graphdriver_zfs
+
+ifeq ($(BR2_INIT_SYSTEMD),y)
+PODMAN_TAGS += systemd
+endif
+
+ifeq ($(BR2_PACKAGE_LIBAPPARMOR),y)
+PODMAN_DEPENDENCIES += libapparmor
+PODMAN_TAGS += apparmor
+endif
+
+ifeq ($(BR2_PACKAGE_LIBSECCOMP),y)
+PODMAN_TAGS += seccomp
+PODMAN_DEPENDENCIES += libseccomp host-pkgconf
+else
+define PODMAN_SECCOMP_PROFILE
+	$(INSTALL) -D -m 644 $(PODMAN_PKGDIR)/unconfined.conf \
+		$(TARGET_DIR)/etc/containers/containers.conf
+endef
+endif
+
+ifeq ($(BR2_PACKAGE_LIBSELINUX),y)
+PODMAN_TAGS += selinux
+PODMAN_DEPENDENCIES += libselinux
+endif
+
+ifeq ($(BR2_PACKAGE_PODMAN_DRIVER_BTRFS),y)
+PODMAN_DEPENDENCIES += btrfs-progs
+define PODMAN_BTFRS_DRIVER_CONFIG_FIXUPS
+	$(call KCONFIG_ENABLE_OPT,CONFIG_BTRFS_FS)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_BTRFS_FS_POSIX_ACL)
+endef
+else
+PODMAN_TAGS += exclude_graphdriver_btrfs
+endif
+
+ifeq ($(BR2_PACKAGE_PODMAN_DRIVER_DEVICEMAPPER),y)
+PODMAN_DEPENDENCIES += lvm2
+define PODMAN_DEVICEMAPPER_DRIVER_CONFIG_FIXUPS
+	$(call KCONFIG_ENABLE_OPT,CONFIG_MD)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_BLK_DEV_DM)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_MD_THIN_PROVISIONING)
+endef
+else
+PODMAN_TAGS += exclude_graphdriver_devicemapper
+endif
+
+ifeq ($(BR2_PACKAGE_PODMAN_DRIVER_VFS),y)
+PODMAN_DEPENDENCIES += gvfs
+else
+PODMAN_TAGS += exclude_graphdriver_vfs
+endif
+
+ifeq ($(BR2_PACKAGE_BASH_COMPLETION),y)
+define PODMAN_BASH_COMPLETION
+	$(INSTALL) -D -m 644 $(@D)/completions/bash/podman \
+		$(TARGET_DIR)/usr/share/bash-completion/completions/
+endef
+endif
+
+define PODMAN_INSTALL_TARGET_CMDS
+	$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) DESTDIR=$(TARGET_DIR) PREFIX=/usr \
+		install.bin
+	$(INSTALL) -d -m 700 $(TARGET_DIR)/etc/cni
+	$(INSTALL) -d -m 700 $(TARGET_DIR)/etc/cni/net.d
+	$(INSTALL) -D -m 644 $(@D)/cni/87-podman-bridge.conflist \
+		$(TARGET_DIR)/etc/cni/net.d/87-podman-bridge.conflist
+	$(INSTALL) -d -m 755 $(TARGET_DIR)/etc/containers
+	$(INSTALL) -D -m 644 $(PODMAN_PKGDIR)/containers-policy.json \
+		$(TARGET_DIR)/etc/containers/policy.json
+	$(PODMAN_SECCOMP_PROFILE)
+	$(PODMAN_BASH_COMPLETION)
+endef
+
+define PODMAN_INSTALL_INIT_SYSTEMD
+	$(TARGET_MAKE_ENV) $(MAKE) -C $(@D) DESTDIR=$(TARGET_DIR) PREFIX=/usr \
+		install.systemd
+endef
+
+define PODMAN_LINUX_CONFIG_FIXUPS
+	$(call KCONFIG_ENABLE_OPT,CONFIG_MEMCG)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_CGROUPS)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_CGROUP_SCHED)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_CGROUP_FREEZER)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_CGROUP_DEVICE)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_CGROUP_CPUACCT)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_CGROUP_PIDS)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_CPUSETS)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_NAMESPACES)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_UTS_NS)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_IPC_NS)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_PID_NS)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_NET_NS)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_USER_NS)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_NETFILTER)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_NETFILTER_ADVANCED)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_BRIDGE_NETFILTER)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_NF_CONNTRACK)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_NETFILTER_XTABLES)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_NETFILTER_XT_MATCH_ADDRTYPE)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_NETFILTER_XT_MATCH_CONNTRACK)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_NETFILTER_XT_MATCH_IPVS)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_NETFILTER_XT_MATCH_COMMENT)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_IP_NF_IPTABLES)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_IP_NF_FILTER)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_IP_NF_NAT)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_IP_NF_TARGET_MASQUERADE)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_BRIDGE)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_NET_CORE)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_VETH)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_KEYS)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_POSIX_MQUEUE)
+	$(call KCONFIG_ENABLE_OPT,CONFIG_OVERLAY_FS)
+	$(PODMAN_BTFRS_DRIVER_CONFIG_FIXUPS)
+	$(PODMAN_DEVICEMAPPER_DRIVER_CONFIG_FIXUPS)
+endef
+
+$(eval $(golang-package))