Minor changes in changelog

Changelog: Prepare for release 25.03.01
Fix migration when SSH server settings exist
2026-07-23 17:33:01 +02:00 · 2025-04-11 16:27:01 +02:00 · 2025-04-11 14:09:57 +02:00 · 2025-04-11 14:05:53 +02:00 · 2025-04-11 14:04:38 +02:00 · 2025-04-11 14:04:24 +02:00
465 changed files with 7987 additions and 28079 deletions
@@ -1,51 +1,26 @@
-name: Build
+name: Bob the Builder

 on:
+  pull_request:
+    types: [opened, synchronize, reopened, labeled]
+  push:
+    branches:
+      - main
  workflow_dispatch:
    inputs:
-      flavor:
-        description: 'Optional build flavor (e.g. _minimal)'
-        required: false
-        default: ''
-        type: string
-      parallel:
-        description: 'Massive parallel build of each image'
+      minimal:
+        description: 'Build minimal defconfigs'
        required: false
        default: true
        type: boolean
-      infix_repo:
-        description: 'Repo to checkout (for spin overrides)'
-        required: false
-        default: kernelkit/infix
-        type: string
-
-
-  workflow_call:
-    inputs:
-      target:
-        required: true
-        type: string
-      name:
-        required: true
-        type: string
-      flavor:
-        required: false
-        type: string
-        default: ''
-      infix_repo:
-        required: false
-        type: string
-        default: kernelkit/infix
-
-env:
-  FLV: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.flavor || inputs.flavor }}
-  INFIX_REPO: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.infix_repo || inputs.infix_repo }}

 jobs:
  build:
-    name: Build ${{ inputs.name }} ${{ inputs.target }}
+    name: Build Infix ${{ matrix.target }}
    runs-on: [ self-hosted, latest ]
    strategy:
+      matrix:
+        target: [aarch64, x86_64]
      fail-fast: false
    outputs:
      build_id: ${{ steps.vars.outputs.INFIX_BUILD_ID }}
@@ -57,11 +32,8 @@ jobs:
          rm -rf ./.??* || true
          ls -la ./

-      - name: Checkout infix repo
-        uses: actions/checkout@v4
+      - uses: actions/checkout@v4
        with:
-          repository: ${{ env.INFIX_REPO }}
-          ref: ${{ github.ref }}
          clean: true
          fetch-depth: 0
          submodules: recursive
@@ -79,14 +51,26 @@ jobs:
                  "${{ github.event.number }}" "${{ github.event.pull_request.head.sha }}" \
                  | tee -a $GITHUB_OUTPUT $GITHUB_ENV
          fi
-
-          target=${{ inputs.target }}
-          name=${{ inputs.name }}
-          echo "dir=${name}-${target}"        >> $GITHUB_OUTPUT
-          echo "tgz=${name}-${target}.tar.gz" >> $GITHUB_OUTPUT
-          echo "flv=$FLV"              >> $GITHUB_OUTPUT
-          echo "Building target ${target}${FLV}_defconfig"
-
+          if [ "${{ github.event_name }}" == "workflow_dispatch" ]; then
+              if [ "${{ github.event.inputs.minimal }}" == "true" ]; then
+                  flavor="_minimal"
+              fi
+          else
+              # Ensure 'release' job get the proper image when building main
+              if [ "$GITHUB_REF_NAME" != "main" ]; then
+                  flavor="_minimal"
+              else
+                  flavor=""
+              fi
+              if ${{ contains(github.event.pull_request.labels.*.name, 'ci:main') }}; then
+                  flavor=""
+              fi
+          fi
+          target=${{ matrix.target }}
+          echo "dir=infix-$target"        >> $GITHUB_OUTPUT
+          echo "tgz=infix-$target.tar.gz" >> $GITHUB_OUTPUT
+          echo "flv=$flavor"              >> $GITHUB_OUTPUT
+          echo "Building target ${target}${flavor}_defconfig"
      - name: Restore Cache of dl/
        uses: actions/cache@v4
        with:
@@ -99,37 +83,23 @@ jobs:
        uses: actions/cache@v4
        with:
          path: .ccache/
-          key: ccache-${{ inputs.target }}-${{ hashFiles('.git/modules/buildroot/HEAD', 'package/*/*.hash') }}
+          key: ccache-${{ matrix.target }}-${{ hashFiles('.git/modules/buildroot/HEAD', 'package/*/*.hash') }}
          restore-keys: |
-            ccache-${{ inputs.target }}-
+            ccache-${{ matrix.target }}-
            ccache-

-      - name: Configure ${{ inputs.target }}${{ steps.vars.outputs.flv }}
+      - name: Configure ${{ matrix.target }}${{ steps.vars.outputs.flv }}
        run: |
-          make ${{ inputs.target }}${{ steps.vars.outputs.flv }}_defconfig
+          make ${{ matrix.target }}${{ steps.vars.outputs.flv }}_defconfig

-      - name: Unit Test ${{ inputs.target }}
+      - name: Unit Test ${{ matrix.target }}
        run: |
          make test-unit

-      - name: Prepare parallel build
-        id: parallel
+      - name: Build ${{ matrix.target }}${{ steps.vars.outputs.flv }}
        run: |
-
-          if [ "${{ ((github.event.inputs.parallel == 'true' && github.event_name == 'workflow_dispatch') || (github.ref_name != 'main' && github.event_name != 'workflow_dispatch')) }}" == "true" ]; then
-             echo "BR2_PER_PACKAGE_DIRECTORIES=y" >> output/.config
-             MAKE="make -j$((`getconf _NPROCESSORS_ONLN` / 2 + 2))"
-             echo "Building in parallel with -j$((`getconf _NPROCESSORS_ONLN` / 2 + 2))"
-          else
-             echo "Disabling parallel build"
-             MAKE="make"
-          fi
-          echo "MAKE=$MAKE" >> $GITHUB_OUTPUT
-
-      - name: Build ${{ inputs.target }}${{ steps.vars.outputs.flv }}
-        run: |
-          echo "Building ${{ inputs.target }}${{ steps.vars.outputs.flv }}_defconfig ..."
-          eval "${{ steps.parallel.outputs.MAKE }}"
+          echo "Building ${{ matrix.target }}${{ steps.vars.outputs.flv }}_defconfig ..."
+          make

      - name:  Check SBOM from Build
        run: |
@@ -150,7 +120,7 @@ jobs:
          printf "Size of output/images/: "
          ls -l output/images/

-      - name: Prepare ${{ inputs.target }} Artifact
+      - name: Prepare ${{ matrix.target }} Artifact
        run: |
          cd output/
          mv images ${{ steps.vars.outputs.dir }}
@@ -160,4 +130,111 @@ jobs:
      - uses: actions/upload-artifact@v4
        with:
          path: output/${{ steps.vars.outputs.tgz }}
-          name: artifact-${{ inputs.target }}
+          name: artifact-${{ matrix.target }}
+
+  test:
+    name: Regression Test of Infix x86_64
+    needs: build
+    runs-on: [ self-hosted, regression ]
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          clean: true
+          submodules: recursive
+
+      - name: Set Build Variables
+        id: vars
+        run: |
+          if [ -n "${{ needs.build.outputs.build_id }}" ]; then
+              echo "INFIX_BUILD_ID=${{ needs.build.outputs.build_id }}" \
+                   >>$GITHUB_ENV
+          fi
+
+          if [ "$GITHUB_REF_NAME" != "main" ]; then
+              flavor="_minimal"
+          else
+              flavor=""
+          fi
+          echo "flv=$flavor"              >> $GITHUB_OUTPUT
+
+      - name: Configure x86_64${{ steps.vars.outputs.flv }}
+        run: |
+          make x86_64${{ steps.vars.outputs.flv }}_defconfig
+
+      - uses: actions/download-artifact@v4
+        with:
+          pattern: "artifact-*"
+          merge-multiple: true
+
+      - name: Restore x86-64${{ steps.vars.outputs.flv }} output/
+        run: |
+          ls -l
+          mkdir -p output
+          mv infix-x86_64.tar.gz output/
+          cd output/
+          tar xf infix-x86_64.tar.gz
+          ln -s infix-x86_64 images
+
+      - name: Regression Test x86_64${{ steps.vars.outputs.flv }}
+        run: |
+          make test
+
+      - name: Publish Test Result for x86_64${{ steps.vars.outputs.flv }}
+        # Ensure this runs even if Regression Test fails
+        if: always()
+        run: cat test/.log/last/result-gh.md >> $GITHUB_STEP_SUMMARY
+
+      - name: Generate Test Report for x86_64${{ steps.vars.outputs.flv }}
+        # Ensure this runs even if Regression Test fails
+        if: always()
+        run: |
+          asciidoctor-pdf \
+          --theme test/9pm/report/theme.yml \
+          -a pdf-fontsdir=test/9pm/report/fonts \
+          test/.log/last/report.adoc \
+          -o test/.log/last/report.pdf
+
+      - name: Upload Test Report as Artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: test-report
+          path: test/.log/last/report.pdf
+
+  release:
+    if: ${{github.repository_owner == 'kernelkit' && github.ref_name == 'main'}}
+    name: Upload Latest Build
+    needs: test
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          pattern: "artifact-*"
+          merge-multiple: true
+
+      - name: Create checksums ...
+        run: |
+          for file in *.tar.gz; do
+              sha256sum $file > $file.sha256
+          done
+
+      - uses: ncipollo/release-action@v1
+        with:
+          allowUpdates: true
+          omitName: true
+          omitBody: true
+          omitBodyDuringUpdate: true
+          prerelease: true
+          tag: "latest"
+          token: ${{ secrets.GITHUB_TOKEN }}
+          artifacts: "*.tar.gz*"
+
+      - name: Summary
+        run: |
+          cat <<EOF >> $GITHUB_STEP_SUMMARY
+          # Latest Build Complete! :rocket:
+
+          For the public download links of these build artifacts, please see:
+           <https://github.com/kernelkit/infix/releases/tag/latest>
+          EOF
@@ -1,43 +0,0 @@
-name: Publish latest Infix
-
-on:
-  workflow_dispatch:
-  workflow_call:
-
-jobs:
-  publish:
-    name: Upload Latest Build
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-    steps:
-      - uses: actions/download-artifact@v4
-        with:
-          pattern: "artifact-*"
-          merge-multiple: true
-
-      - name: Create checksums ...
-        run: |
-          for file in *.tar.gz; do
-              sha256sum $file > $file.sha256
-          done
-
-      - uses: ncipollo/release-action@v1
-        with:
-          allowUpdates: true
-          omitName: true
-          omitBody: true
-          omitBodyDuringUpdate: true
-          prerelease: true
-          tag: "latest"
-          token: ${{ secrets.GITHUB_TOKEN }}
-          artifacts: "*.tar.gz*"
-
-      - name: Summary
-        run: |
-          cat <<EOF >> $GITHUB_STEP_SUMMARY
-          # Latest Build Complete! :rocket:
-
-          For the public download links of these build artifacts, please see:
-           <https://github.com/kernelkit/infix/releases/tag/latest>
-          EOF
@@ -95,11 +95,6 @@ jobs:
          name: artifact-${{ matrix.target }}
          path: output/*.tar.gz

-      - uses: actions/upload-artifact@v4
-        with:
-          name: artifact-disk-image-${{ matrix.target }}
-          path: output/images/*.qcow2
-
  release:
    name: Release Infix ${{ github.ref_name }}
    needs: build
@@ -146,11 +141,6 @@ jobs:
          for file in *.tar.gz; do
              sha256sum $file > $file.sha256
          done
-          if ls *.qcow2 &>/dev/null; then
-            for file in *.qcow2; do
-              sha256sum "$file" > "$file.sha256"
-            done
-          fi

      - name: Extract ChangeLog entry ...
        run: |
@@ -165,7 +155,7 @@ jobs:
          makeLatest: ${{ steps.rel.outputs.latest }}
          discussionCategory: ${{ steps.rel.outputs.cat }}
          bodyFile:  release.md
-          artifacts: "*.tar.gz*,*.qcow2*"
+          artifacts: "*.tar.gz*"

      - name: Summary
        run: |
@@ -1,116 +0,0 @@
-name: Test Infix
-
-on:
-  workflow_dispatch:
-    inputs:
-      infix_repo:
-        description: 'Repo to checkout (for spin overrides)'
-        required: false
-        default: kernelkit/infix
-        type: string
-
-  workflow_call:
-    inputs:
-      target:
-        required: true
-        type: string
-      name:
-        required: true
-        type: string
-      flavor:
-        required: false
-        type: string
-        default: ''
-      infix_repo:
-        required: false
-        type: string
-        default: kernelkit/infix
-      ninepm-conf:
-        required: false
-        type: string
-        default: ''
-      test-path:
-        required: false
-        type: string
-        default: 'test'
-
-env:
-  FLV: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.flavor || inputs.flavor }}
-  INFIX_REPO: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.infix_repo || inputs.infix_repo }}
-  NINEPM_CONF: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.ninepm-conf || inputs.ninepm-conf }}
-  TEST_PATH: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.test-path || inputs.test-path }}
-
-jobs:
-  test:
-    name: Regression Test ${{ inputs.name }} ${{ inputs.target }}
-    runs-on: [ self-hosted, regression ]
-    steps:
-      - name: Checkout infix repo
-        uses: actions/checkout@v4
-        with:
-          repository: ${{ env.INFIX_REPO }}
-          ref: ${{ github.ref }}
-          clean: true
-          fetch-depth: 0
-          submodules: recursive
-
-      - name: Set Build Variables
-        id: vars
-        run: |
-          if [ -n "${{ needs.build.outputs.build_id }}" ]; then
-              echo "INFIX_BUILD_ID=${{ needs.build.outputs.build_id }}" \
-                   >>$GITHUB_ENV
-          fi
-
-          echo "flv=$FLV" >> $GITHUB_OUTPUT
-
-      - name: Configure ${{ inputs.target }}${{ steps.vars.outputs.flv }}
-        run: |
-          make ${{ inputs.target }}${{ steps.vars.outputs.flv }}_defconfig
-
-      - uses: actions/download-artifact@v4
-        with:
-          pattern: "artifact-*"
-          merge-multiple: true
-
-      - name: Restore x86-64${{ steps.vars.outputs.flv }} output/
-        run: |
-          target=${{ inputs.target }}
-          name=${{ inputs.name }}
-
-          ls -l
-          mkdir -p output
-          mv ${name}-${target}.tar.gz output/
-          cd output/
-          tar xf ${name}-${target}.tar.gz
-          ln -s ${name}-${target} images
-
-      - name: Regression Test x86_64${{ steps.vars.outputs.flv }}
-        run: |
-          if [ -n "$NINEPM_CONF" ]; then
-            export NINEPM_PROJ_CONFIG="${GITHUB_WORKSPACE}/$NINEPM_CONF"
-            echo "DEBUG: NINEPM_PROJ_CONFIG is '$NINEPM_PROJ_CONFIG'"
-          fi
-          make test
-
-      - name: Publish Test Result for x86_64${{ steps.vars.outputs.flv }}
-        # Ensure this runs even if Regression Test fails
-        if: always()
-        run: cat $TEST_PATH/.log/last/result-gh.md >> $GITHUB_STEP_SUMMARY
-
-      - name: Generate Test Report for x86_64${{ steps.vars.outputs.flv }}
-        # Ensure this runs even if Regression Test fails
-        if: always()
-        run: |
-          asciidoctor-pdf \
-          --theme $TEST_PATH/9pm/report/theme.yml \
-          -a pdf-fontsdir=$TEST_PATH/9pm/report/fonts \
-          $TEST_PATH/.log/last/report.adoc \
-          -o $TEST_PATH/.log/last/report.pdf
-
-      - name: Upload Test Report as Artifact
-        uses: actions/upload-artifact@v4
-        with:
-          name: test-report
-          path: ${{ env.TEST_PATH }}/.log/last/report.pdf
-
@@ -1,37 +0,0 @@
-name: Self Trigger
-
-on:
-  pull_request:
-    types: [opened, synchronize, reopened, labeled]
-  push:
-    branches:
-      - main
-      - ci-workflow-redesign
-  workflow_dispatch:
-
-jobs:
-  build-x86_64:
-    uses: ./.github/workflows/build.yml
-    with:
-      target: "x86_64"
-      name: "infix"
-      flavor: "_minimal"
-
-  build-aarch64:
-    uses: ./.github/workflows/build.yml
-    with:
-      target: "aarch64"
-      name: "infix"
-      flavor: "_minimal"
-
-  test-run-x86_64:
-    needs: build-x86_64
-    uses: ./.github/workflows/test.yml
-    with:
-      target: "x86_64"
-      name: "infix"
-
-  test-publish-x86_64:
-    needs: test-run-x86_64
-    uses: ./.github/workflows/publish.yml
-
@@ -65,7 +65,7 @@ config INFIX_COMPATIBLE

 config INFIX_TAGLINE
 	string "Operating system tagline"
-	default "Infix OS — Immutable.Friendly.Secure"
+	default "Infix -- a Network Operating System"
 	help
 	  Mandatory. Used for identifying the OS, e.g. as PRETTY_NAME in
 	  /etc/os-release and description in the GNS3 appliance.
@@ -2,11 +2,11 @@

 <img align="right" src="doc/logo.png" alt="Infix - Linux <3 NETCONF" width=480 border=10>

-Infix is a free, Linux-based, immutable operating system built around
-[Buildroot][1] and [sysrepo][2].  A powerful mix that ease porting to
-different platforms, simplify long-term maintenance, and provide
-made-easy management using NETCONF, RESTCONF[^2], or the built-in
-command line interface (CLI) from a console or SSH login.
+Infix is a free, Linux based, immutable Network Operating System (NOS)
+built on [Buildroot][1], and [sysrepo][2].  A powerful mix that ease
+porting to different platforms, simplify long-term maintenance, and
+provide made-easy management using NETCONF, RESTCONF[^2], or the
+built-in command line interface (CLI) from a console or SSH login.

 > Click the **▶ Example CLI Session** foldout below for an example, or
 > head on over to the [Infix Documentation](doc/README.md) for more
@@ -27,15 +27,13 @@ it maintenance-free.  Configuration and data, e.g, containers, is stored
 on separate partitions to ensure complete separation from system files
 and allow for seamless backup, restore, and provisioning.

-In itself, Infix is perfectly suited for dedicated networking tasks,
-such as routing, switching, and monitoring.  This is how it started, as
-a network focused operating system.  Now, with native support for Docker
-containers, it provides a versatile platform that can easily be adapted
-to any customer need.  Be it legacy applications, network protocols,
-process monitoring, or edge data analysis, it can run close to end
-equipment.  Either directly connected on dedicated Ethernet ports or
-indirectly using virtual network cables to exist on the same LAN as
-other connected equipment.
+In itself, Infix is perfectly suited for dedicated networking tasks, and
+with native support for Docker containers, the operating system provides
+a versatile platform that can easily be adapted to any customer need.
+Be it legacy applications, network protocols, process monitoring, or
+edge data analysis, it can run close to end equipment.  Either directly
+connected on dedicated Ethernet ports or indirectly using virtual
+network cables to exist on the same LAN as other connected equipment.

 The simple design of Infix provides complete control over both system
 and data, minimal cognitive burden, and makes it incredibly easy to get
@@ -95,14 +93,12 @@ The [following boards](board/aarch64/README.md) are fully supported:
 - Marvell CN9130 CRB
 - Marvell EspressoBIN
 - Microchip SparX-5i PCB135 (eMMC)
- - Raspberry Pi 4B
+ - StarFive VisionFive2
 - NanoPi R2S

-Additionally, StarFive VisionFive2, a RISC-V based two-port router, and
-an x86_64 build is also available.  The latter is primarily intended for
-development and testing, but can also be used for evaluation and demo
-purposes.  For more information, see: [Infix in Virtual
-Environments](doc/virtual.md).
+An x86_64 build is also available, primarily intended for development
+and testing, but can also be used for evaluation and demo purposes.  For
+more information, see: [Infix in Virtual Environments](doc/virtual.md).

 > See the [GitHub Releases](https://github.com/kernelkit/infix/releases)
 > page for our pre-built images.  The *[Latest Build][]* has bleeding
@@ -230,6 +230,7 @@ CONFIG_MAC80211_LEDS=y
 CONFIG_RFKILL=y
 CONFIG_NET_9P=y
 CONFIG_NET_9P_VIRTIO=y
+# CONFIG_ETHTOOL_NETLINK is not set
 CONFIG_PCI=y
 CONFIG_PCIEPORTBUS=y
 CONFIG_PCI_IOV=y
@@ -480,6 +481,7 @@ CONFIG_I2C=y
 CONFIG_I2C_CHARDEV=y
 CONFIG_I2C_MUX=y
 CONFIG_I2C_MUX_PCA954x=y
+CONFIG_I2C_DESIGNWARE_PLATFORM=y
 CONFIG_I2C_GPIO=m
 CONFIG_I2C_RK3X=y
 CONFIG_I2C_SLAVE=y
@@ -1,14 +0,0 @@
--- a/arch/arm/boot/dts/broadcom/bcm2711-rpi-4-b.dts	2025-04-28 00:13:06.880003668 +0200
-+++ b/arch/arm/boot/dts/broadcom/bcm2711-rpi-4-b.dts	2025-04-28 00:14:17.708941263 +0200
-@@ -14,6 +14,11 @@
- 	chosen {
- 		/* 8250 auxiliary UART instead of pl011 */
- 		stdout-path = "serial1:115200n8";
-+
-+		infix {
-+			/* Default admin user password: 'admin' */
-+			factory-password-hash = "$5$mI/zpOAqZYKLC2WU$i7iPzZiIjOjrBF3NyftS9CCq8dfYwHwrmUK097Jca9A";
-+		};
- 	};
- 
- 	cam1_reg: regulator-cam1 {
@@ -1 +0,0 @@
-root=/dev/mmcblk0p2 rootwait console=tty1 console=ttyAMA0,115200
@@ -1,41 +0,0 @@
-# Please note that this is only a sample, we recommend you to change it to fit
-# your needs.
-# You should override this file using BR2_PACKAGE_RPI_FIRMWARE_CONFIG_FILE.
-# See http://buildroot.org/manual.html#rootfs-custom
-# and http://elinux.org/RPiconfig for a description of config.txt syntax
-
-start_file=start4.elf
-fixup_file=fixup4.dat
-
-kernel=u-boot.bin
-
-device_tree=bcm2711-rpi-4-b.dtb
-dtoverlay=rpi-env
-dtoverlay=infix-key
-
-# To use an external initramfs file
-#initramfs rootfs.cpio.gz
-
-# Disable overscan assuming the display supports displaying the full resolution
-# If the text shown on the screen disappears off the edge, comment this out
-disable_overscan=1
-
-# How much memory in MB to assign to the GPU on Pi models having
-# 256, 512 or 1024 MB total memory
-gpu_mem_256=100
-gpu_mem_512=100
-gpu_mem_1024=100
-
-# Enable UART0 for serial console on ttyAMA0
-enable_uart=1
-force_turbo=1
-#dtoverlay=miniuart-bt
-
-# Run as fast as firmware / board allows
-arm_boost=1
-
-# enable 64bits support
-arm_64bit=1
-
-# Enable early debugging info
-uart_2ndstage=1
@@ -1,71 +0,0 @@
-image boot.vfat {
-	vfat {
-		files = {
-#BOOT_FILES#
-		}
-	}
-
-	size = 32M
-}
-
-image cfg.ext4 {
-	empty = true
-	temporary = true
-	size = 16M
-
-	ext4 {
-		label = "cfg"
-	}
-}
-
-image var.ext4 {
-	empty = true
-	temporary = true
-	size = 512M
-
-	ext4 {
-		label = "var"
-		use-mke2fs = true
-	}
-}
-
-image sdcard.img {
-	hdimage {
-		partition-table-type = "gpt"
-	}
-
-	partition boot {
-		partition-type-uuid = EBD0A0A2-B9E5-4433-87C0-68B6B72699C7
-		bootable = "true"
-		image = "boot.vfat"
-	}
-
-	partition aux {
-		partition-uuid = D4EF35A0-0652-45A1-B3DE-D63339C82035
-		image = "aux.ext4"
-	}
-
-	partition primary {
-		partition-type-uuid = 0FC63DAF-8483-4772-8E79-3D69D8477DE4
-		bootable = true
-		size = 200M
-		image = "rootfs.squashfs"
-	}
-
-	partition secondary {
-		partition-type-uuid = 0FC63DAF-8483-4772-8E79-3D69D8477DE4
-		bootable = true
-		size = 200M
-		image = "rootfs.squashfs"
-	}
-
-	partition cfg {
-		partition-uuid = 7aa497f0-73b5-47e5-b2ab-8752d8a48105
-		image = "cfg.ext4"
-	}
-
-	partition var {
-		partition-uuid = 8046A06A-E45A-4A14-A6AD-6684704A393F
-		image = "var.ext4"
-	}
-}
@@ -1,7 +0,0 @@
-#!/bin/sh
-
-# Armbian firmware installs to /lib/firmware but driver wants the
-# file(s) in /lib/firmware/brcm/
-if [ -f "${TARGET_DIR}/lib/firmware/BCM4345C0.hcd" ]; then
-    mv "${TARGET_DIR}/lib/firmware/BCM4345C0.hcd" "${TARGET_DIR}/lib/firmware/brcm/"
-fi
@@ -1,43 +0,0 @@
-#!/bin/sh
-set -e
-
-BOARD_DIR=$(dirname "$0")
-GENIMAGE_CFG="${BUILD_DIR}/genimage.cfg"
-GENIMAGE_TMP="${BUILD_DIR}/genimage.tmp"
-
-# Device trees are installed for distro boot (syslinux.conf), but on RPi
-# we need them for the SPL, which feeds the TPL (U-Boot) for use instead
-# of the (built-in) control DT other platforms use.
-find "${TARGET_DIR}/boot" -type f -name '*.dtb' -exec cp '{}' "${BINARIES_DIR}/" \;
-
-# We've asked U-Boot previously to build overlays for us: Infix signing
-# key and our ixboot scripts.  Make sure here they are installed in the
-# proper directory so genimage can create the DOS partition the SPL
-# reads config.txt from.
-find "${BINARIES_DIR}" -type f -name '*.dtbo' -exec mv '{}' "${BINARIES_DIR}/rpi-firmware/overlays/" \;
-
-# Create FILES array for the genimage.cfg generation
-FILES=""
-for f in "${BINARIES_DIR}"/*.dtb "${BINARIES_DIR}"/rpi-firmware/*; do
-    case "$f" in
-        *~|*.bak) continue ;;
-    esac
-    FILES="${FILES}\t\t\t\"${f#"${BINARIES_DIR}/"}\",\n"
-done
-
-KERNEL=$(sed -n 's/^kernel=//p' "${BINARIES_DIR}/rpi-firmware/config.txt")
-FILES="${FILES}\t\t\t\"${KERNEL}\""
-
-sed "s|#BOOT_FILES#|${FILES}|" "${BOARD_DIR}/genimage.cfg.in" > "${GENIMAGE_CFG}"
-
-ROOTPATH_TMP=$(mktemp -d)
-trap 'rm -rf \"$ROOTPATH_TMP\"' EXIT
-
-rm -rf "${GENIMAGE_TMP}"
-
-genimage					\
-    --rootpath   "${ROOTPATH_TMP}"		\
-    --tmppath    "${GENIMAGE_TMP}"		\
-    --inputpath  "${BINARIES_DIR}"		\
-    --outputpath "${BINARIES_DIR}"		\
-    --config     "${GENIMAGE_CFG}"
@@ -1,16 +0,0 @@
-default rpi4b
-menu title Boot Menu
-prompt 1
-timeout 30
-
-label rpi4b
-        menu label Infix on Raspberry Pi 4B
-	kernel /boot/Image
-	devicetree /boot/broadcom/bcm2711-rpi-4-b.dtb
-	append ${bootargs_root} 8250.nr_uarts=1 console=ttyS0,115200 ${bootargs_log} -- ${bootargs_user}
-
-label rpi400
-	menu label Infix on Raspberry Pi 400
-	kernel /boot/Image
-	devicetree /boot/broadcom/bcm2711-rpi-400.dtb
-	append ${bootargs_root} 8250.nr_uarts=1 console=ttyS0,115200 ${bootargs_log} -- ${bootargs_user}
@@ -1,193 +0,0 @@
-{
-  "ieee802-dot1ab-lldp:lldp": {
-    "infix-lldp:enabled": true
-  },
-  "ietf-interfaces:interfaces": {
-    "interface": [
-      {
-        "name": "lo",
-        "type": "infix-if-type:loopback",
-        "ietf-ip:ipv4": {
-          "address": [
-            {
-              "ip": "127.0.0.1",
-              "prefix-length": 8
-            }
-          ]
-        },
-        "ietf-ip:ipv6": {
-          "address": [
-            {
-              "ip": "::1",
-              "prefix-length": 128
-            }
-          ]
-        }
-      },
-      {
-        "name": "eth0",
-        "type": "infix-if-type:ethernet"
-      }
-    ]
-  },
-  "ietf-keystore:keystore": {
-    "asymmetric-keys": {
-      "asymmetric-key": [
-        {
-          "name": "genkey",
-          "public-key-format": "ietf-crypto-types:ssh-public-key-format",
-          "public-key": "",
-          "private-key-format": "ietf-crypto-types:rsa-private-key-format",
-          "cleartext-private-key": "",
-          "certificates": {}
-        }
-      ]
-    }
-  },
-  "ietf-netconf-acm:nacm": {
-    "enable-nacm": true,
-    "groups": {
-      "group": [
-        {
-          "name": "admin",
-          "user-name": [
-            "admin"
-          ]
-        }
-      ]
-    },
-    "rule-list": [
-      {
-        "name": "admin-acl",
-        "group": [
-          "admin"
-        ],
-        "rule": [
-          {
-            "name": "permit-all",
-            "module-name": "*",
-            "access-operations": "*",
-            "action": "permit",
-            "comment": "Allow 'admin' group complete access to all operations and data."
-          }
-        ]
-      },
-      {
-        "name": "default-deny-all",
-        "group": [
-          "*"
-        ],
-        "rule": [
-          {
-            "name":  "deny-password-read",
-            "module-name": "ietf-system",
-            "path": "/ietf-system:system/authentication/user/password",
-            "access-operations": "*",
-            "action": "deny"
-          }
-        ]
-      }
-    ]
-  },
-  "ietf-netconf-server:netconf-server": {
-    "listen": {
-      "endpoints": {
-        "endpoint": [
-          {
-            "name": "default-ssh",
-            "ssh": {
-              "tcp-server-parameters": {
-                "local-address": "::"
-              },
-              "ssh-server-parameters": {
-                "server-identity": {
-                  "host-key": [
-                    {
-                      "name": "default-key",
-                      "public-key": {
-                        "central-keystore-reference": "genkey"
-                      }
-                    }
-                  ]
-                }
-              }
-            }
-          }
-        ]
-      }
-    }
-  },
-  "ietf-system:system": {
-    "hostname": "rpi4",
-    "ntp": {
-      "enabled": true,
-      "server": [
-        {
-          "name": "ntp.org",
-          "udp": {
-            "address": "pool.ntp.org"
-          },
-	  "iburst": true
-        }
-      ]
-    },
-    "authentication": {
-      "user": [
-        {
-          "name": "admin",
-          "password": "$factory$",
-          "infix-system:shell": "bash"
-        }
-      ]
-    },
-    "infix-system:motd-banner": "Li0tLS0tLS0uCnwgIC4gLiAgfCBJbmZpeCAtLSBhIE5ldHdvcmsgT3BlcmF0aW5nIFN5c3RlbQp8LS4gdiAuLXwgaHR0cHM6Ly9rZXJuZWxraXQuZ2l0aHViLmlvCictJy0tLSctJwo="
-  },
-  "infix-dhcp-client:dhcp-client": {
-    "client-if": [
-      {
-        "if-name": "eth0",
-        "option": [
-          {
-            "id": "netmask"
-          },
-          {
-            "id": "broadcast"
-          },
-          {
-            "id": "router"
-          },
-          {
-            "id": "domain"
-          },
-          {
-            "id": "hostname"
-          },
-          {
-            "id": "dns-server"
-          },
-          {
-            "id": "ntp-server"
-          }
-        ]
-      }
-    ]
-  },
-  "infix-meta:meta": {
-    "infix-meta:version": "1.2"
-  },
-  "infix-services:mdns": {
-    "enabled": true
-  },
-  "infix-services:web": {
-    "enabled": true,
-    "console": {
-      "enabled": true
-    },
-    "netbrowse": {
-      "enabled": true
-    },
-    "restconf": {
-      "enabled": true
-    }
-  }
-}
@@ -1,5 +0,0 @@
-{
-    "eth0": {
-	"phy-detached-when-down": true
-    }
-}
@@ -1,6 +0,0 @@
-# Broadcom BCM2835 Watchdog timer
-device /dev/watchdog0 {
-    timeout    = 60
-    interval   = 5
-    safe-exit  = true
-}
@@ -1,3 +0,0 @@
-# CONFIG_MMC_PCI is not set
-CONFIG_OF_OVERLAY_LIST="rpi-env infix-key"
-# CONFIG_ENV_IS_IN_FAT is not set
@@ -1,27 +0,0 @@
-/dts-v1/;
-/plugin/;
-
-&{/} {
-	config {
-		environment {
-			vendor = "infix";
-			preboot = "run ixpreboot";
-			ixbootdelay = "0.5";
-			bootdelay = "-2";
-			bootmenu_delay = "10";
-			boot_targets = "mmc1";
-			ethprime = "eth0";
-			bootcmd = "run ixboot";
-
-			ixpreboot     = /incbin/("scripts/ixpreboot.sh");
-			ixbtn-devmode = "setenv dev_mode yes; echo Enabled";
-			ixbtn-factory = "echo \"No button available, use bootmenu\"";
-			ixfactory     = /incbin/("scripts/ixfactory.sh");
-
-			ixboot      = /incbin/("scripts/ixboot.sh");
-			ixbootslot  = /incbin/("scripts/ixbootslot.sh");
-			ixprepblk   = /incbin/("scripts/ixprepblk.sh");
-			ixprepdhcp  = /incbin/("scripts/ixprepdhcp.sh");
-		};
-	};
-};
@@ -45,11 +45,11 @@ The default credentials for the demo builds is
    login: admin
    password: admin

-    Infix OS — Immutable.Friendly.Secure v24.09.0-rc1 (hvc0)
+    Infix -- a Network Operating System v24.09.0-rc1 (hvc0)
    infix-00-00-00 login: admin
    Password: 
    .-------.
-    |  . .  | Infix OS — Immutable.Friendly.Secure
+    |  . .  | Infix -- a Network Operating System
    |-. v .-| https://kernelkit.org
    '-'---'-'

@@ -122,9 +122,9 @@ There's a lot of tutorials and guides online, start here:
 About
 -----

-Infix is a free, Linux-based, immutable operating system built around
-Buildroot, and sysrepo.  A powerful mix that ease porting to different
-platforms, simplify long-term maintenance, and provide easy management
-using NETCONF, RESTCONF, or the built-in command line interface (CLI)
-from a console or SSH login.
+Infix is a free, Linux based, immutable Network Operating System (NOS)
+built on Buildroot, and sysrepo.  A powerful mix that ease porting to
+different platforms, simplify long-term maintenance, and provide easy
+management using NETCONF, RESTCONF, or the built-in command line
+interface (CLI) from a console or SSH login.

@@ -127,7 +127,7 @@ bootdata=
 diskimg=disk.img
 bootimg=
 bootpart=
-tmpimage=$(mktemp)
+
 while getopts "a:b:B:n:s:" opt; do
    case ${opt} in
 	a)
@@ -166,7 +166,7 @@ awk \
 	  -vimgsize=$imgsize \
 	  -vcfgsize=$cfgsize \
 	  -vvarsize=$varsize \
-	  -vdiskimg=$tmpimage \
+	  -vdiskimg=$diskimg \
 	  -vbootimg="$bootimg" -vbootpart="$bootpart" \
 	  '{
 		sub(/@TOTALSIZE@/, total);
@@ -211,7 +211,5 @@ genimage \
    --rootpath "$root" \
    --tmppath  "$tmp" \
    --inputpath "$BINARIES_DIR" \
+    --outputpath "$BINARIES_DIR" \
    --config "$root/genimage.cfg"
-
-qemu-img convert -c -O qcow2 "$tmpimage" "$BINARIES_DIR/$diskimg"
-rm "$tmpimage"
@@ -23,7 +23,7 @@ if [ -n "$IMAGE_ID" ]; then
 else
    NAME="$INFIX_ID"-$(echo "$BR2_ARCH" | tr _ - | sed 's/x86-64/x86_64/')
 fi
-diskimg=disk.qcow2
+diskimg=disk.img

 ver()
 {
@@ -48,7 +48,7 @@ fi
 load_cfg DISK_IMAGE
 if [ "$DISK_IMAGE" = "y" ]; then
    ixmsg "Creating Disk Image"
-    diskimg="${NAME}-disk$(ver).qcow2"
+    diskimg="${NAME}-disk$(ver).img"
    bootcfg=
    if [ "$DISK_IMAGE_BOOT_DATA" ]; then
 	bootcfg="-b $DISK_IMAGE_BOOT_DATA -B $DISK_IMAGE_BOOT_OFFSET"
@@ -78,7 +78,7 @@ config QEMU_MACHINE

 config QEMU_MACHINE_RAM
 	string "RAM size (k/M/G)"
-	default "448M"
+	default "384M"
 	help
 	  The default, 384 MiB, works for most configurations.  However,
 	  if you get kernel panic with: "System is deadlocked on memory",
@@ -120,7 +120,7 @@ rootfs_args()
 	echo -n "-device sd-card,drive=mmc "
 	echo -n "-drive id=mmc,file=$CONFIG_QEMU_ROOTFS,if=none,format=raw "
    elif [ "$CONFIG_QEMU_ROOTFS_VSCSI" = "y" ]; then
-	echo -n "-drive file=qemu.qcow2,if=virtio,format=qcow2,bus=0,unit=0 "
+	echo -n "-drive file=$CONFIG_QEMU_ROOTFS.qcow2,if=virtio,format=qcow2,bus=0,unit=0 "
    fi
 }

@@ -316,13 +316,13 @@ gdb_args()
 run_qemu()
 {
    if [ "$CONFIG_QEMU_ROOTFS_VSCSI" = "y" ]; then
-	if ! qemu-img check "qemu.qcow2"; then
-	    rm -f "qemu.qcow2"
+	if ! qemu-img check "${CONFIG_QEMU_ROOTFS}.qcow2"; then
+	    rm -f "${CONFIG_QEMU_ROOTFS}.qcow2"
 	fi
-	if [ ! -f "qemu.qcow2" ]; then
+	if [ ! -f "${CONFIG_QEMU_ROOTFS}.qcow2" ]; then
 	    echo "Creating qcow2 disk image for Qemu ..."
 	    qemu-img create -f qcow2 -o backing_file="$CONFIG_QEMU_ROOTFS" \
-		     -F qcow2 "qemu.qcow2" > /dev/null
+		     -F raw "${CONFIG_QEMU_ROOTFS}.qcow2" > /dev/null
 	fi
    fi

@@ -1,5 +0,0 @@
-service name:wpa_supplicant :%i \
-			[2345] wpa_supplicant -s -i %i -c /etc/wpa_supplicant-%i.conf -P/var/run/wpa_supplicant-%i.pid \
-			       -- WPA supplicant @%i
-
-task name:wifi-scanner :%i [2345] <pid/wpa_supplicant:%i> /usr/libexec/infix/wifi-scanner %i -- Start scanning for SSID @ %i
@@ -1,4 +1,4 @@
 .-------.
-|  . .  | Infix OS — Immutable.Friendly.Secure
+|  . .  | Infix -- a Network Operating System
 |-. v .-| https://kernelkit.org
 '-'---'-'
@@ -1,11 +1,5 @@
 # /telemetry/optics is for streaming (not used atm)
-# Proxy buffer settings for large files
-proxy_buffering off;                 # Disable buffering for streaming
-proxy_request_buffering off;         # Stream request body immediately
-proxy_max_temp_file_size 0;         # No temp files
 location ~ ^/(restconf|yang|.well-known)/ {
-    client_max_body_size 200M;
-    client_body_buffer_size 1M;
    grpc_pass grpc://[::1]:10080;
    grpc_set_header Host $host;
    grpc_set_header X-Real-IP $remote_addr;
@@ -1 +0,0 @@
-SUBSYSTEM=="net", ACTION=="add", TEST=="/sys/class/net/$name/wireless", NAME="wifi%n"
@@ -1,12 +0,0 @@
-#!/bin/sh
-if [ $# -lt 2 ]; then
-        echo "usage: $0 <quirk-name> <ifname>"
-        exit 1
-fi
-quirk=$1
-ifname=$2
-if [ -f "/etc/product/interface-quirks.json" ]; then
-        echo "$(jq -r --arg iface "$ifname" --arg quirk "$quirk" '.[$iface][$quirk] // "false"' /etc/product/interface-quirks.json)"
-else
-        echo "false"
-fi
@@ -43,7 +43,6 @@ while [ "$1" ]; do
    txqs="$2"
    shift 2

-    [ $(/usr/libexec/infix/has-quirk "broken-mqprio" "$iface") = "true" ] && echo "Skipping $iface, does not support mqprio" && continue
    [ $txqs -lt 2 ] && continue
    [ $txqs -gt 8 ] && txqs=8

@@ -1,16 +0,0 @@
-#!/bin/sh
-
-if [ $# -ne 1 ]; then
-	echo "usage: $0 <ifname>"
-	exit 1
-fi
-ifname=$1
-
-TIMEOUT=300
-status=$(wpa_cli -i $ifname scan)
-while [ "$status" != "OK" ]; do
-	status=$(wpa_cli -i $ifname scan)
-	TIMEOUT=$((TIMEOUT-1))
-	[ $TIMEOUT -eq 0 ] && logger -t wifi-scanner "Failed to start scanning $ifname" && exit 1
-	sleep 0.5
-done
@@ -550,7 +550,7 @@ while [ "$1" != "" ]; do
 	    ;;
 	-m | --mount)
 	    shift
-	    mount="$mount --mount=$1"
+	    mount="--mount=$1"
 	    ;;
 	--manual)
 	    manual=true
@@ -696,7 +696,7 @@ case $cmd in
 	    oci)
 		find $BUILTIN $DOWNLOADS -type f 2>/dev/null
 		;;
-	    *)
+	    *)		
 		podman ps $all --format "{{.Names}}"
 		;;
 	esac
@@ -17,23 +17,14 @@ endef
 # U-Boot build tree. This will then be built in to the final U-Boot
 # image's control DT via the CONFIG_DEVICE_TREE_INCLUDES option (see
 # extras.config).
-#
-# Some platforms, most notably Raspberry Pi, load the device tree
-# from the SPL, effectively overriding the built-in control DT.
-# For that we bundle an overlay that can be included instead.
 define UBOOT_PRE_BUILD_INSTALL_KEY
-	$(HOST_DIR)/bin/dtc -a 1024 <(echo '/dts-v1/; / { signature {}; };') \
-		>$(@D)/infix-key.dtb
+	$(HOST_DIR)/bin/dtc <(echo '/dts-v1/; / { signature {}; };') >$(@D)/infix-key.dtb
 	$(foreach key, \
 		$(call qstrip,$(TRUSTED_KEYS_DEVELOPMENT_PATH)) $(call qstrip,$(TRUSTED_KEYS_EXTRA_PATH)),\
 		$(call uboot-add-pubkey,$(key),$(@D)/infix-key.dtb))
 	$(HOST_DIR)/bin/dtc -I dtb -O dts \
 		<$(@D)/infix-key.dtb \
-		| sed -e 's:/dts-v[0-9]\+/;::' \
-		| tee $(@D)/arch/$(UBOOT_ARCH)/dts/infix-key.dtsi \
-		| sed -e '1i\/dts-v1/;\n/plugin/;\n' -e '/^$$/d' -e 's:/ {:\&{/} {:' \
-		>$(@D)/arch/$(UBOOT_ARCH)/dts/infix-key.dtso
-
+	| sed -e 's:/dts-v[0-9]\+/;::' >$(@D)/arch/$(UBOOT_ARCH)/dts/infix-key.dtsi
 	rm $(@D)/infix-key.dtb
 endef
 UBOOT_PRE_BUILD_HOOKS += UBOOT_PRE_BUILD_INSTALL_KEY
@@ -27,14 +27,13 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="${BR2_EXTERNAL_INFIX_PATH}/board/common/post-build
 BR2_ROOTFS_POST_IMAGE_SCRIPT="${BR2_EXTERNAL_INFIX_PATH}/board/common/post-image.sh"
 BR2_LINUX_KERNEL=y
 BR2_LINUX_KERNEL_CUSTOM_VERSION=y
-BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.12.35"
+BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.12.21"
 BR2_LINUX_KERNEL_USE_CUSTOM_CONFIG=y
 BR2_LINUX_KERNEL_CUSTOM_CONFIG_FILE="${BR2_EXTERNAL_INFIX_PATH}/board/aarch64/linux_defconfig"
 BR2_LINUX_KERNEL_INSTALL_TARGET=y
 BR2_PACKAGE_BUSYBOX_CONFIG="${BR2_EXTERNAL_INFIX_PATH}/board/common/busybox_defconfig"
 BR2_PACKAGE_STRACE=y
 BR2_PACKAGE_STRESS_NG=y
-BR2_PACKAGE_SYSREPO_GROUP="sys-cli"
 BR2_PACKAGE_JQ=y
 BR2_PACKAGE_E2FSPROGS=y
 BR2_PACKAGE_DBUS_CXX=y
@@ -126,7 +125,7 @@ BR2_PACKAGE_HOST_UBOOT_TOOLS=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SUPPORT=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SIGNATURE_SUPPORT=y
 INFIX_VENDOR_HOME="https://github.com/kernelkit"
-INFIX_DESC="Infix is an operating system based on Linux and modeled with YANG.  It can be set up both as a switch, with offloading using switchdev, a router with firewalling, or a secure end device.  All while supporting advanced networking scenarios and running Docker containers."
+INFIX_DESC="Infix is a Network Operating System based on Linux.  It can be set up both as a switch, with offloading using switchdev, and a router with firewalling."
 INFIX_HOME="https://github.com/kernelkit/infix/"
 INFIX_DOC="https://github.com/kernelkit/infix/tree/main/doc"
 INFIX_SUPPORT="mailto:kernelkit@googlegroups.com"
@@ -140,7 +139,6 @@ BR2_PACKAGE_CURIOS_HTTPD=y
 BR2_PACKAGE_CURIOS_NFTABLES=y
 BR2_PACKAGE_GENCERT=y
 BR2_PACKAGE_STATD=y
-BR2_PACKAGE_SHOW=y
 BR2_PACKAGE_FACTORY=y
 BR2_PACKAGE_FINIT_PLUGIN_HOTPLUG=y
 BR2_PACKAGE_FINIT_PLUGIN_HOOK_SCRIPTS=y
@@ -165,11 +163,7 @@ BR2_PACKAGE_PODMAN_DRIVER_VFS=y
 BR2_PACKAGE_TETRIS=y
 BR2_PACKAGE_ROUSETTE=y
 BR2_PACKAGE_RAUC_INSTALLATION_STATUS=y
-BR2_PACKAGE_FEATURE_WIFI=y
-BR2_PACKAGE_FEATURE_WIFI_DONGLE_REALTEK=y
 BR2_PACKAGE_HOST_PYTHON_YANGDOC=y
-BR2_DOWNLOAD_FORCE_CHECK_HASHES=y
-BR2_PACKAGE_GETENT=y
 TRUSTED_KEYS=y
 TRUSTED_KEYS_DEVELOPMENT=y
 DISK_IMAGE_BOOT_BIN=y
@@ -27,14 +27,13 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="${BR2_EXTERNAL_INFIX_PATH}/board/common/post-build
 BR2_ROOTFS_POST_IMAGE_SCRIPT="${BR2_EXTERNAL_INFIX_PATH}/board/common/post-image.sh"
 BR2_LINUX_KERNEL=y
 BR2_LINUX_KERNEL_CUSTOM_VERSION=y
-BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.12.35"
+BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.12.21"
 BR2_LINUX_KERNEL_USE_CUSTOM_CONFIG=y
 BR2_LINUX_KERNEL_CUSTOM_CONFIG_FILE="${BR2_EXTERNAL_INFIX_PATH}/board/aarch64/linux_defconfig"
 BR2_LINUX_KERNEL_INSTALL_TARGET=y
 BR2_PACKAGE_BUSYBOX_CONFIG="${BR2_EXTERNAL_INFIX_PATH}/board/common/busybox_defconfig"
 BR2_PACKAGE_STRACE=y
 BR2_PACKAGE_STRESS_NG=y
-BR2_PACKAGE_SYSREPO_GROUP="sys-cli"
 BR2_PACKAGE_JQ=y
 BR2_PACKAGE_E2FSPROGS=y
 BR2_PACKAGE_DBUS_CXX=y
@@ -108,7 +107,7 @@ BR2_PACKAGE_HOST_UBOOT_TOOLS=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SUPPORT=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SIGNATURE_SUPPORT=y
 INFIX_VENDOR_HOME="https://github.com/kernelkit"
-INFIX_DESC="Infix is an operating system based on Linux and modeled with YANG.  It can be set up both as a switch, with offloading using switchdev, a router with firewalling, or a secure end device.  All while supporting advanced networking scenarios and running Docker containers."
+INFIX_DESC="Infix is a Network Operating System based on Linux.  It can be set up both as a switch, with offloading using switchdev, and a router with firewalling."
 INFIX_HOME="https://github.com/kernelkit/infix/"
 INFIX_DOC="https://github.com/kernelkit/infix/tree/main/doc"
 INFIX_SUPPORT="mailto:kernelkit@googlegroups.com"
@@ -120,7 +119,6 @@ BR2_PACKAGE_CONFD=y
 BR2_PACKAGE_CONFD_TEST_MODE=y
 BR2_PACKAGE_GENCERT=y
 BR2_PACKAGE_STATD=y
-BR2_PACKAGE_SHOW=y
 BR2_PACKAGE_FACTORY=y
 BR2_PACKAGE_FINIT_PLUGIN_HOTPLUG=y
 BR2_PACKAGE_FINIT_PLUGIN_HOOK_SCRIPTS=y
@@ -139,8 +137,6 @@ BR2_PACKAGE_MDNS_ALIAS=y
 BR2_PACKAGE_LIBINPUT=y
 BR2_PACKAGE_ROUSETTE=y
 BR2_PACKAGE_RAUC_INSTALLATION_STATUS=y
-BR2_DOWNLOAD_FORCE_CHECK_HASHES=y
-BR2_PACKAGE_GETENT=y
 DISK_IMAGE_BOOT_BIN=y
 TRUSTED_KEYS=y
 TRUSTED_KEYS_DEVELOPMENT=y
@@ -8,6 +8,7 @@ BR2_CCACHE=y
 BR2_CCACHE_DIR="${BR2_EXTERNAL_INFIX_PATH}/.ccache"
 BR2_ENABLE_DEBUG=y
 BR2_GLOBAL_PATCH_DIR="${BR2_EXTERNAL_INFIX_PATH}/patches"
+BR2_DOWNLOAD_FORCE_CHECK_HASHES=y
 BR2_TARGET_GENERIC_HOSTNAME="infix"
 BR2_TARGET_GENERIC_ISSUE="Infix by KernelKit"
 BR2_INIT_FINIT=y
@@ -29,7 +30,7 @@ BR2_ROOTFS_POST_IMAGE_SCRIPT="${BR2_EXTERNAL_INFIX_PATH}/board/common/post-image
 BR2_ROOTFS_POST_SCRIPT_ARGS="-c $(BR2_EXTERNAL_INFIX_PATH)/board/aarch64/r2s/genimage.cfg"
 BR2_LINUX_KERNEL=y
 BR2_LINUX_KERNEL_CUSTOM_VERSION=y
-BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.12.35"
+BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.10.3"
 BR2_LINUX_KERNEL_PATCH="$(BR2_EXTERNAL_INFIX_PATH)/board/aarch64/r2s/rk3328-nanopi-r2s-dts.patch"
 BR2_LINUX_KERNEL_USE_CUSTOM_CONFIG=y
 BR2_LINUX_KERNEL_CUSTOM_CONFIG_FILE="${BR2_EXTERNAL_INFIX_PATH}/board/aarch64/r2s/linux_defconfig"
@@ -41,7 +42,6 @@ BR2_LINUX_KERNEL_NEEDS_HOST_OPENSSL=y
 BR2_PACKAGE_BUSYBOX_CONFIG="$(BR2_EXTERNAL_INFIX_PATH)/board/common/busybox_defconfig"
 BR2_PACKAGE_STRACE=y
 BR2_PACKAGE_STRESS_NG=y
-BR2_PACKAGE_SYSREPO_GROUP="sys-cli"
 BR2_PACKAGE_JQ=y
 BR2_PACKAGE_E2FSPROGS=y
 BR2_PACKAGE_LINUX_FIRMWARE=y
@@ -74,6 +74,7 @@ BR2_PACKAGE_PYTHON_GUNICORN=y
 BR2_PACKAGE_LIBSSH_OPENSSL=y
 BR2_PACKAGE_LIBSSH2=y
 BR2_PACKAGE_LIBSSH2_OPENSSL=y
+BR2_PACKAGE_LIBXCRYPT=y
 BR2_PACKAGE_LIBOPENSSL_BIN=y
 BR2_PACKAGE_LIBINPUT=y
 BR2_PACKAGE_LIBCURL_CURL=y
@@ -170,14 +171,13 @@ BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SUPPORT=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SIGNATURE_SUPPORT=y
 INFIX_VENDOR_HOME="https://github.com/kernelkit"
 INFIX_IMAGE_ID="${INFIX_ID}-r2s"
-INFIX_DESC="Infix is an operating system based on Linux and modeled with YANG.  It can be set up both as a switch, with offloading using switchdev, a router with firewalling, or a secure end device.  All while supporting advanced networking scenarios and running Docker containers."
+INFIX_DESC="Infix is a Network Operating System based on Linux.  It can be set up both as a switch, with offloading using switchdev, and a router with firewalling."
 INFIX_HOME="https://github.com/kernelkit/infix/"
 INFIX_DOC="https://github.com/kernelkit/infix/tree/main/doc"
 INFIX_SUPPORT="mailto:kernelkit@googlegroups.com"
 BR2_PACKAGE_CONFD=y
 BR2_PACKAGE_GENCERT=y
 BR2_PACKAGE_STATD=y
-BR2_PACKAGE_SHOW=y
 BR2_PACKAGE_FACTORY=y
 BR2_PACKAGE_FINIT_PLUGIN_HOTPLUG=y
 BR2_PACKAGE_FINIT_PLUGIN_HOOK_SCRIPTS=y
@@ -201,10 +201,8 @@ BR2_PACKAGE_PODMAN_DRIVER_DEVICEMAPPER=y
 BR2_PACKAGE_PODMAN_DRIVER_VFS=y
 BR2_PACKAGE_TETRIS=y
 BR2_PACKAGE_ROUSETTE=y
-BR2_PACKAGE_RAUC_INSTALLATION_STATUS=y
 BR2_PACKAGE_HOST_PYTHON_YANGDOC=y
-BR2_DOWNLOAD_FORCE_CHECK_HASHES=y
-BR2_PACKAGE_GETENT=y
+BR2_PACKAGE_RAUC_INSTALLATION_STATUS=y
 TRUSTED_KEYS=y
 TRUSTED_KEYS_DEVELOPMENT=y
 # GNS3_APPLIANCE is not set
@@ -39,7 +39,6 @@ BR2_LINUX_KERNEL_NEEDS_HOST_OPENSSL=y
 BR2_PACKAGE_BUSYBOX_CONFIG="$(BR2_EXTERNAL_INFIX_PATH)/board/common/busybox_defconfig"
 BR2_PACKAGE_STRACE=y
 BR2_PACKAGE_STRESS_NG=y
-BR2_PACKAGE_SYSREPO_GROUP="sys-cli"
 BR2_PACKAGE_JQ=y
 BR2_PACKAGE_E2FSPROGS=y
 BR2_PACKAGE_LINUX_FIRMWARE=y
@@ -162,7 +161,7 @@ BR2_PACKAGE_HOST_UBOOT_TOOLS=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SUPPORT=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SIGNATURE_SUPPORT=y
 INFIX_VENDOR_HOME="https://github.com/kernelkit"
-INFIX_DESC="Infix is an operating system based on Linux and modeled with YANG.  It can be set up both as a switch, with offloading using switchdev, a router with firewalling, or a secure end device.  All while supporting advanced networking scenarios and running Docker containers."
+INFIX_DESC="Infix is a Network Operating System based on Linux.  It can be set up both as a switch, with offloading using switchdev, and a router with firewalling."
 INFIX_HOME="https://github.com/kernelkit/infix/"
 INFIX_DOC="https://github.com/kernelkit/infix/tree/main/doc"
 INFIX_SUPPORT="mailto:kernelkit@googlegroups.com"
@@ -170,7 +169,6 @@ BR2_PACKAGE_CONFD=y
 # BR2_PACKAGE_CONFD_TEST_MODE is not set
 BR2_PACKAGE_GENCERT=y
 BR2_PACKAGE_STATD=y
-BR2_PACKAGE_SHOW=y
 BR2_PACKAGE_FACTORY=y
 BR2_PACKAGE_FINIT_PLUGIN_HOTPLUG=y
 BR2_PACKAGE_FINIT_PLUGIN_HOOK_SCRIPTS=y
@@ -196,8 +194,6 @@ BR2_PACKAGE_TETRIS=y
 BR2_PACKAGE_ROUSETTE=y
 BR2_PACKAGE_HOST_PYTHON_YANGDOC=y
 BR2_PACKAGE_RAUC_INSTALLATION_STATUS=y
-BR2_DOWNLOAD_FORCE_CHECK_HASHES=y
-BR2_PACKAGE_GETENT=y
 TRUSTED_KEYS=y
 TRUSTED_KEYS_DEVELOPMENT=y
 # GNS3_APPLIANCE is not set
@@ -1,201 +0,0 @@
-BR2_aarch64=y
-BR2_cortex_a72=y
-BR2_ARM_FPU_VFPV4=y
-BR2_TOOLCHAIN_EXTERNAL=y
-BR2_TOOLCHAIN_EXTERNAL_BOOTLIN=y
-BR2_TOOLCHAIN_EXTERNAL_GDB_SERVER_COPY=y
-BR2_DL_DIR="${BR2_EXTERNAL_INFIX_PATH}/dl"
-BR2_CCACHE=y
-BR2_CCACHE_DIR="${BR2_EXTERNAL_INFIX_PATH}/.ccache"
-BR2_GLOBAL_PATCH_DIR="board/raspberrypi/patches ${BR2_EXTERNAL_INFIX_PATH}/patches"
-BR2_DOWNLOAD_FORCE_CHECK_HASHES=y
-BR2_TARGET_GENERIC_HOSTNAME="infix"
-BR2_TARGET_GENERIC_ISSUE="Infix by KernelKit"
-BR2_INIT_FINIT=y
-BR2_ROOTFS_DEVICE_CREATION_DYNAMIC_EUDEV=y
-BR2_ROOTFS_DEVICE_TABLE="system/device_table.txt ${BR2_EXTERNAL_INFIX_PATH}/board/common/xattrs"
-BR2_ROOTFS_MERGED_USR=y
-# BR2_TARGET_ENABLE_ROOT_LOGIN is not set
-BR2_SYSTEM_BIN_SH_BASH=y
-BR2_TARGET_GENERIC_GETTY_PORT="@console"
-BR2_TARGET_GENERIC_GETTY_TERM="xterm"
-BR2_SYSTEM_DHCP="eth0"
-BR2_SYSTEM_DEFAULT_PATH="/bin:/sbin:/usr/bin:/usr/sbin"
-BR2_ENABLE_LOCALE_WHITELIST="C en_US en_CA C.UTF-8"
-BR2_GENERATE_LOCALE="en_US en_CA C.UTF-8"
-BR2_TARGET_TZ_INFO=y
-BR2_ROOTFS_OVERLAY="${BR2_EXTERNAL_INFIX_PATH}/board/common/rootfs ${BR2_EXTERNAL_INFIX_PATH}/board/aarch64/rootfs ${BR2_EXTERNAL_INFIX_PATH}/board/aarch64/rpi/rootfs"
-BR2_ROOTFS_POST_BUILD_SCRIPT="${BR2_EXTERNAL_INFIX_PATH}/board/common/post-build.sh ${BR2_EXTERNAL_INFIX_PATH}/board/aarch64/rpi/post-build.sh"
-BR2_ROOTFS_POST_IMAGE_SCRIPT="${BR2_EXTERNAL_INFIX_PATH}/board/common/post-image.sh ${BR2_EXTERNAL_INFIX_PATH}/board/aarch64/rpi/post-image.sh"
-BR2_LINUX_KERNEL=y
-BR2_LINUX_KERNEL_CUSTOM_VERSION=y
-BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.12.35"
-BR2_LINUX_KERNEL_PATCH="${BR2_EXTERNAL_INFIX_PATH}/board/aarch64/rpi/bcm2711-rpi-4-b-dts.patch"
-BR2_LINUX_KERNEL_USE_CUSTOM_CONFIG=y
-BR2_LINUX_KERNEL_CUSTOM_CONFIG_FILE="${BR2_EXTERNAL_INFIX_PATH}/board/aarch64/rpi/bcm2711_defconfig"
-BR2_LINUX_KERNEL_DTS_SUPPORT=y
-BR2_LINUX_KERNEL_INTREE_DTS_NAME="broadcom/bcm2711-rpi-4-b broadcom/bcm2711-rpi-400"
-BR2_LINUX_KERNEL_DTB_KEEP_DIRNAME=y
-BR2_LINUX_KERNEL_INSTALL_TARGET=y
-BR2_LINUX_KERNEL_NEEDS_HOST_OPENSSL=y
-BR2_PACKAGE_BUSYBOX_CONFIG="$(BR2_EXTERNAL_INFIX_PATH)/board/common/busybox_defconfig"
-BR2_PACKAGE_XZ=y
-BR2_PACKAGE_STRACE=y
-BR2_PACKAGE_STRESS_NG=y
-BR2_PACKAGE_JQ=y
-BR2_PACKAGE_E2FSPROGS=y
-BR2_PACKAGE_ARMBIAN_FIRMWARE=y
-BR2_PACKAGE_ARMBIAN_FIRMWARE_AP6255=y
-BR2_PACKAGE_BRCMFMAC_SDIO_FIRMWARE_RPI=y
-BR2_PACKAGE_LINUX_FIRMWARE=y
-BR2_PACKAGE_LINUX_FIRMWARE_BRCM_BCM43XX=y
-BR2_PACKAGE_LINUX_FIRMWARE_BRCM_BCM43XXX=y
-BR2_PACKAGE_LINUX_FIRMWARE_BRCM_BCM4366B1=y
-BR2_PACKAGE_LINUX_FIRMWARE_BRCM_BCM4366C0=y
-BR2_PACKAGE_RPI_FIRMWARE=y
-BR2_PACKAGE_RPI_FIRMWARE_VARIANT_PI4=y
-BR2_PACKAGE_RPI_FIRMWARE_VARIANT_PI4_X=y
-BR2_PACKAGE_RPI_FIRMWARE_CONFIG_FILE="${BR2_EXTERNAL_INFIX_PATH}/board/aarch64/rpi/config.txt"
-BR2_PACKAGE_RPI_FIRMWARE_CMDLINE_FILE="${BR2_EXTERNAL_INFIX_PATH}/board/aarch64/rpi/cmdline.txt"
-BR2_PACKAGE_DBUS_CXX=y
-BR2_PACKAGE_DBUS_GLIB=y
-BR2_PACKAGE_DBUS_TRIGGERD=y
-BR2_PACKAGE_EUDEV_RULES_GEN=y
-# BR2_PACKAGE_EUDEV_ENABLE_HWDB is not set
-BR2_PACKAGE_EVEMU=y
-BR2_PACKAGE_EVTEST=y
-BR2_PACKAGE_GPTFDISK=y
-BR2_PACKAGE_GPTFDISK_SGDISK=y
-BR2_PACKAGE_INPUT_EVENT_DAEMON=y
-BR2_PACKAGE_MDIO_TOOLS=y
-BR2_PACKAGE_RNG_TOOLS=y
-BR2_PACKAGE_UBOOT_TOOLS_FIT_SUPPORT=y
-BR2_PACKAGE_UBOOT_TOOLS_FIT_SIGNATURE_SUPPORT=y
-BR2_PACKAGE_UBOOT_TOOLS_FIT_CHECK_SIGN=y
-BR2_PACKAGE_UBOOT_TOOLS_MKENVIMAGE=y
-BR2_PACKAGE_PYTHON3=y
-BR2_PACKAGE_PYTHON_GUNICORN=y
-BR2_PACKAGE_LIBSSH_OPENSSL=y
-BR2_PACKAGE_LIBSSH2=y
-BR2_PACKAGE_LIBSSH2_OPENSSL=y
-BR2_PACKAGE_LIBOPENSSL_BIN=y
-BR2_PACKAGE_LIBINPUT=y
-BR2_PACKAGE_LIBCURL_CURL=y
-BR2_PACKAGE_NETOPEER2_CLI=y
-BR2_PACKAGE_NSS_MDNS=y
-BR2_PACKAGE_LINUX_PAM=y
-BR2_PACKAGE_LIBPAM_RADIUS_AUTH=y
-BR2_PACKAGE_ONIGURUMA=y
-BR2_PACKAGE_AVAHI_DAEMON=y
-BR2_PACKAGE_AVAHI_DEFAULT_SERVICES=y
-BR2_PACKAGE_CHRONY=y
-BR2_PACKAGE_CONNTRACK_TOOLS=y
-BR2_PACKAGE_DNSMASQ=y
-BR2_PACKAGE_ETHTOOL=y
-BR2_PACKAGE_FPING=y
-BR2_PACKAGE_FRR=y
-BR2_PACKAGE_HOSTAPD=y
-# BR2_PACKAGE_IFUPDOWN_SCRIPTS is not set
-BR2_PACKAGE_IPROUTE2=y
-BR2_PACKAGE_IPTABLES_NFTABLES=y
-BR2_PACKAGE_IPUTILS=y
-BR2_PACKAGE_IW=y
-BR2_PACKAGE_LLDPD=y
-BR2_PACKAGE_MSTPD=y
-BR2_PACKAGE_NETCALC=y
-BR2_PACKAGE_NETCAT_OPENBSD=y
-BR2_PACKAGE_NETSNMP=y
-BR2_PACKAGE_NFTABLES=y
-BR2_PACKAGE_NGINX=y
-BR2_PACKAGE_NGINX_HTTP_SSL_MODULE=y
-BR2_PACKAGE_NGINX_HTTP_V2_MODULE=y
-BR2_PACKAGE_NMAP=y
-BR2_PACKAGE_NMAP_NCAT=y
-BR2_PACKAGE_NMAP_NMAP=y
-BR2_PACKAGE_NMAP_NPING=y
-BR2_PACKAGE_OPENRESOLV=y
-BR2_PACKAGE_OPENSSH=y
-BR2_PACKAGE_SOCAT=y
-BR2_PACKAGE_TCPDUMP=y
-BR2_PACKAGE_TRACEROUTE=y
-BR2_PACKAGE_ULOGD=y
-BR2_PACKAGE_WHOIS=y
-BR2_PACKAGE_WIRELESS_REGDB=y
-BR2_PACKAGE_WIRELESS_TOOLS=y
-BR2_PACKAGE_WPA_SUPPLICANT=y
-BR2_PACKAGE_BASH_COMPLETION=y
-BR2_PACKAGE_SUDO=y
-BR2_PACKAGE_TTYD=y
-BR2_PACKAGE_GETENT=y
-BR2_PACKAGE_HTOP=y
-BR2_PACKAGE_IRQBALANCE=y
-BR2_PACKAGE_KMOD_TOOLS=y
-BR2_PACKAGE_PWGEN=y
-BR2_PACKAGE_RAUC=y
-BR2_PACKAGE_RAUC_DBUS=y
-BR2_PACKAGE_RAUC_GPT=y
-BR2_PACKAGE_RAUC_NETWORK=y
-BR2_PACKAGE_RAUC_JSON=y
-BR2_PACKAGE_SYSKLOGD=y
-BR2_PACKAGE_SYSKLOGD_LOGGER=y
-BR2_PACKAGE_WATCHDOGD=y
-BR2_PACKAGE_LESS=y
-BR2_PACKAGE_MG=y
-BR2_PACKAGE_NANO=y
-BR2_TARGET_ROOTFS_SQUASHFS=y
-# BR2_TARGET_ROOTFS_TAR is not set
-BR2_TARGET_UBOOT=y
-BR2_TARGET_UBOOT_BOARD_DEFCONFIG="rpi_arm64"
-BR2_TARGET_UBOOT_CONFIG_FRAGMENT_FILES="$(BR2_EXTERNAL_INFIX_PATH)/board/common/uboot/extras.config $(BR2_EXTERNAL_INFIX_PATH)/board/aarch64/rpi/uboot/extras.config"
-BR2_TARGET_UBOOT_FORMAT_CUSTOM=y
-BR2_TARGET_UBOOT_FORMAT_CUSTOM_NAME="arch/arm/dts/infix-key.dtbo arch/arm/dts/rpi-env.dtbo"
-BR2_TARGET_UBOOT_CUSTOM_DTS_PATH="$(BR2_EXTERNAL_INFIX_PATH)/board/aarch64/rpi/uboot/rpi-env.dtso"
-BR2_PACKAGE_HOST_DOSFSTOOLS=y
-BR2_PACKAGE_HOST_E2FSPROGS=y
-BR2_PACKAGE_HOST_ENVIRONMENT_SETUP=y
-BR2_PACKAGE_HOST_GENEXT2FS=y
-BR2_PACKAGE_HOST_GENIMAGE=y
-BR2_PACKAGE_HOST_KMOD_XZ=y
-BR2_PACKAGE_HOST_MTOOLS=y
-BR2_PACKAGE_HOST_RAUC=y
-BR2_PACKAGE_HOST_UBOOT_TOOLS=y
-BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SUPPORT=y
-BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SIGNATURE_SUPPORT=y
-INFIX_VENDOR_HOME="https://github.com/kernelkit"
-INFIX_IMAGE_ID="${INFIX_ID}-rpi4"
-INFIX_DESC="Infix is an operating system based on Linux and modeled with YANG.  It can be set up both as a switch, with offloading using switchdev, a router with firewalling, or a secure end device.  All while supporting advanced networking scenarios and running Docker containers."
-INFIX_HOME="https://github.com/kernelkit/infix/"
-INFIX_DOC="https://github.com/kernelkit/infix/tree/main/doc"
-INFIX_SUPPORT="mailto:kernelkit@googlegroups.com"
-BR2_PACKAGE_CONFD=y
-BR2_PACKAGE_GENCERT=y
-BR2_PACKAGE_STATD=y
-BR2_PACKAGE_FACTORY=y
-BR2_PACKAGE_FINIT_PLUGIN_HOTPLUG=y
-BR2_PACKAGE_FINIT_PLUGIN_HOOK_SCRIPTS=y
-BR2_PACKAGE_FINIT_PLUGIN_MODULES_LOAD=y
-BR2_PACKAGE_FINIT_PLUGIN_RTC=y
-BR2_PACKAGE_FINIT_RTC_DATE="2024-11-04 10:54:00"
-BR2_PACKAGE_FINIT_RTC_FILE="/var/lib/misc/rtc"
-BR2_PACKAGE_FINIT_PLUGIN_TTY=y
-BR2_PACKAGE_FINIT_PLUGIN_URANDOM=y
-BR2_PACKAGE_IITO=y
-BR2_PACKAGE_KEYACK=y
-BR2_PACKAGE_KLISH_PLUGIN_INFIX=y
-BR2_PACKAGE_LANDING=y
-BR2_PACKAGE_LOWDOWN=y
-BR2_PACKAGE_MCD=y
-BR2_PACKAGE_MDNS_ALIAS=y
-BR2_PACKAGE_NETBROWSE=y
-BR2_PACKAGE_PODMAN=y
-BR2_PACKAGE_PODMAN_DRIVER_BTRFS=y
-BR2_PACKAGE_PODMAN_DRIVER_DEVICEMAPPER=y
-BR2_PACKAGE_PODMAN_DRIVER_VFS=y
-BR2_PACKAGE_SHOW=y
-BR2_PACKAGE_TETRIS=y
-BR2_PACKAGE_ROUSETTE=y
-BR2_PACKAGE_RAUC_INSTALLATION_STATUS=y
-BR2_PACKAGE_HOST_PYTHON_YANGDOC=y
-TRUSTED_KEYS=y
-TRUSTED_KEYS_DEVELOPMENT=y
-SDCARD_AUX=y
@@ -26,7 +26,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/qemu/x86_64/post-build.sh ${BR2_EXTERNAL_INF
 BR2_ROOTFS_POST_IMAGE_SCRIPT="${BR2_EXTERNAL_INFIX_PATH}/board/common/post-image.sh"
 BR2_LINUX_KERNEL=y
 BR2_LINUX_KERNEL_CUSTOM_VERSION=y
-BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.12.35"
+BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.12.21"
 BR2_LINUX_KERNEL_USE_CUSTOM_CONFIG=y
 BR2_LINUX_KERNEL_CUSTOM_CONFIG_FILE="${BR2_EXTERNAL_INFIX_PATH}/board/x86_64/linux_defconfig"
 BR2_LINUX_KERNEL_INSTALL_TARGET=y
@@ -34,7 +34,6 @@ BR2_LINUX_KERNEL_NEEDS_HOST_LIBELF=y
 BR2_PACKAGE_BUSYBOX_CONFIG="${BR2_EXTERNAL_INFIX_PATH}/board/common/busybox_defconfig"
 BR2_PACKAGE_STRACE=y
 BR2_PACKAGE_STRESS_NG=y
-BR2_PACKAGE_SYSREPO_GROUP="sys-cli"
 BR2_PACKAGE_JQ=y
 BR2_PACKAGE_E2FSPROGS=y
 BR2_PACKAGE_DBUS_CXX=y
@@ -132,7 +131,7 @@ BR2_PACKAGE_HOST_UBOOT_TOOLS=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SUPPORT=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SIGNATURE_SUPPORT=y
 INFIX_VENDOR_HOME="https://github.com/kernelkit"
-INFIX_DESC="Infix is an operating system based on Linux and modeled with YANG.  It can be set up both as a switch, with offloading using switchdev, a router with firewalling, or a secure end device.  All while supporting advanced networking scenarios and running Docker containers."
+INFIX_DESC="Infix is a Network Operating System based on Linux.  It can be set up both as a switch, with offloading using switchdev, and a router with firewalling."
 INFIX_HOME="https://github.com/kernelkit/infix/"
 INFIX_DOC="https://github.com/kernelkit/infix/tree/main/doc"
 INFIX_SUPPORT="mailto:kernelkit@googlegroups.com"
@@ -142,7 +141,6 @@ BR2_PACKAGE_CURIOS_HTTPD=y
 BR2_PACKAGE_CURIOS_NFTABLES=y
 BR2_PACKAGE_GENCERT=y
 BR2_PACKAGE_STATD=y
-BR2_PACKAGE_SHOW=y
 BR2_PACKAGE_FACTORY=y
 BR2_PACKAGE_FINIT_PLUGIN_HOTPLUG=y
 BR2_PACKAGE_FINIT_PLUGIN_HOOK_SCRIPTS=y
@@ -167,11 +165,7 @@ BR2_PACKAGE_PODMAN_DRIVER_VFS=y
 BR2_PACKAGE_TETRIS=y
 BR2_PACKAGE_ROUSETTE=y
 BR2_PACKAGE_RAUC_INSTALLATION_STATUS=y
-BR2_PACKAGE_FEATURE_WIFI=y
-BR2_PACKAGE_FEATURE_WIFI_DONGLE_REALTEK=y
 BR2_PACKAGE_HOST_PYTHON_YANGDOC=y
-BR2_DOWNLOAD_FORCE_CHECK_HASHES=y
-BR2_PACKAGE_GETENT=y
 TRUSTED_KEYS=y
 TRUSTED_KEYS_DEVELOPMENT=y
 GNS3_APPLIANCE_RAM=512
@@ -7,14 +7,13 @@ BR2_CCACHE=y
 BR2_CCACHE_DIR="${BR2_EXTERNAL_INFIX_PATH}/.ccache"
 BR2_ENABLE_DEBUG=y
 BR2_GLOBAL_PATCH_DIR="${BR2_EXTERNAL_INFIX_PATH}/patches"
-BR2_DOWNLOAD_FORCE_CHECK_HASHES=y
 BR2_TARGET_GENERIC_HOSTNAME="ix"
 BR2_TARGET_GENERIC_ISSUE="Infix by KernelKit"
 BR2_INIT_FINIT=y
 BR2_ROOTFS_DEVICE_CREATION_DYNAMIC_EUDEV=y
 BR2_ROOTFS_DEVICE_TABLE="system/device_table.txt ${BR2_EXTERNAL_INFIX_PATH}/board/common/xattrs"
-BR2_ROOTFS_MERGED_USR=y
 # BR2_TARGET_ENABLE_ROOT_LOGIN is not set
+BR2_ROOTFS_MERGED_USR=y
 BR2_SYSTEM_BIN_SH_BASH=y
 BR2_TARGET_GENERIC_GETTY_PORT="@console"
 BR2_TARGET_GENERIC_GETTY_TERM="xterm"
@@ -27,7 +26,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/qemu/x86_64/post-build.sh ${BR2_EXTERNAL_INF
 BR2_ROOTFS_POST_IMAGE_SCRIPT="${BR2_EXTERNAL_INFIX_PATH}/board/common/post-image.sh"
 BR2_LINUX_KERNEL=y
 BR2_LINUX_KERNEL_CUSTOM_VERSION=y
-BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.12.35"
+BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.12.21"
 BR2_LINUX_KERNEL_USE_CUSTOM_CONFIG=y
 BR2_LINUX_KERNEL_CUSTOM_CONFIG_FILE="${BR2_EXTERNAL_INFIX_PATH}/board/x86_64/linux_defconfig"
 BR2_LINUX_KERNEL_INSTALL_TARGET=y
@@ -35,7 +34,6 @@ BR2_LINUX_KERNEL_NEEDS_HOST_LIBELF=y
 BR2_PACKAGE_BUSYBOX_CONFIG="${BR2_EXTERNAL_INFIX_PATH}/board/common/busybox_defconfig"
 BR2_PACKAGE_STRACE=y
 BR2_PACKAGE_STRESS_NG=y
-BR2_PACKAGE_SYSREPO_GROUP="sys-cli"
 BR2_PACKAGE_JQ=y
 BR2_PACKAGE_E2FSPROGS=y
 BR2_PACKAGE_DBUS_CXX=y
@@ -52,7 +50,10 @@ BR2_PACKAGE_UBOOT_TOOLS_FIT_SIGNATURE_SUPPORT=y
 BR2_PACKAGE_UBOOT_TOOLS_FIT_CHECK_SIGN=y
 BR2_PACKAGE_UBOOT_TOOLS_MKENVIMAGE=y
 BR2_PACKAGE_PYTHON3=y
+BR2_PACKAGE_LIBSSH_OPENSSL=y
 BR2_PACKAGE_LIBSSH2=y
+BR2_PACKAGE_LIBSSH2_OPENSSL=y
+BR2_PACKAGE_LIBXCRYPT=y
 BR2_PACKAGE_LIBOPENSSL_BIN=y
 BR2_PACKAGE_LIBCURL_CURL=y
 BR2_PACKAGE_LIBMNL=y
@@ -82,7 +83,6 @@ BR2_PACKAGE_TCPDUMP=y
 BR2_PACKAGE_WHOIS=y
 BR2_PACKAGE_BASH_COMPLETION=y
 BR2_PACKAGE_SUDO=y
-BR2_PACKAGE_GETENT=y
 BR2_PACKAGE_KMOD_TOOLS=y
 BR2_PACKAGE_PWGEN=y
 BR2_PACKAGE_RAUC=y
@@ -115,7 +115,7 @@ BR2_PACKAGE_HOST_UBOOT_TOOLS=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SUPPORT=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SIGNATURE_SUPPORT=y
 INFIX_VENDOR_HOME="https://github.com/kernelkit"
-INFIX_DESC="Infix is an operating system based on Linux and modeled with YANG.  It can be set up both as a switch, with offloading using switchdev, a router with firewalling, or a secure end device.  All while supporting advanced networking scenarios and running Docker containers."
+INFIX_DESC="Infix is a Network Operating System based on Linux.  It can be set up both as a switch, with offloading using switchdev, and a router with firewalling."
 INFIX_HOME="https://github.com/kernelkit/infix/"
 INFIX_DOC="https://github.com/kernelkit/infix/tree/main/doc"
 INFIX_SUPPORT="mailto:kernelkit@googlegroups.com"
@@ -138,7 +138,6 @@ BR2_PACKAGE_KLISH_PLUGIN_INFIX=y
 BR2_PACKAGE_LOWDOWN=y
 BR2_PACKAGE_MCD=y
 BR2_PACKAGE_MDNS_ALIAS=y
-BR2_PACKAGE_SHOW=y
 BR2_PACKAGE_ROUSETTE=y
 BR2_PACKAGE_RAUC_INSTALLATION_STATUS=y
 TRUSTED_KEYS=y
@@ -3,71 +3,13 @@ Change Log

 All notable changes to the project are documented in this file.

-[v25.06.0][] - 2025-07-01
+[v25.03.1][] - 2025-04-11
 -------------------------

-### Changes
- Upgrade Buildroot to 2025.02.4 (LTS)
- Upgrade Linux kernel to 6.12.35 (LTS)
- Upgrade curiOS built-in containers to v25.06.0
- Add support for setting mode of a container content mount, issue #1070
- Add Wi-Fi client support and add support for some USB-Wi-Fi cards
- New slogan: Infix OS — Immutable.Friendly.Secure
-
 ### Fixes
- cli: fix by-word movement, detect word barrier using non-alphanum chars
- cli: fix delete word left/right, make sure to save word in kill buffer
-
-
-[v25.05.1][] - 2025-06-12
-------------------------
-
-### Changes
- Upgrade Linux kernel to 6.12.32 (LTS)
-
-### Fixes
- Fix #1060: Restore of missing CLI commands, regression in Infix v25.05.0
-
-[v25.05.0][] - 2025-05-27
-------------------------
-
-### Changes
- Upgrade Buildroot to 2025.02.3 (LTS)
- Upgrade Linux kernel to 6.12.30 (LTS)
- Upgrade libyang to 3.12.2
- Upgrade sysrepo to 3.6.11
- Upgrade netopeer2 (NETCONF) to 2.4.1
- New hardware support: Raspberry Pi 4B (aarch64)
- Add documentation on Infix upgrading and downgrading, issue #1009
- Add HDMI and USB support for iMX8MP-evk
- Enforced strict format for LLDP destination MAC address:
-  - Only accepts colon-separated format: `01:80:C2:00:00:0E`
- Add `show lldp` command to show discovered neighbors per interface.
- Add configuration support for per-interface LLDP administrative status
-
-### Fixes
- Fix containers with multiple mounts
- Correct description for LAG LACP modes
- Fix #1040: Add `mount` constraint for container config
-
-
-[v25.04.0][] - 2025-04-30
-------------------------
-
-### Changes
- - Upgrade Linux kernel to 6.12.25 (LTS)
- - Upgrade Buildroot to 2025.02.1 (LTS)
- - Format for disk image (for QEMU) has changed to `qcow2`
-
-### Fixes
- - Fix #1002: Broken symlink in release package
- - Fix #1006: NanoPi R2S corrupt startup, regression in Infix v25.02.0
-   - Bump R2S kernel, now same as tier one boards
- - Fix #1015: Not possible to save custom SSH settings in startup-config
- - Fix group owner and permissions of `/cfg/backup` directory
- - Fix extraction of old version for `/cfg/backup/` files
 - Fix configuration migration issues when upgrading

+
 [v25.03.0][] - 2025-03-31
 -------------------------

@@ -161,7 +103,6 @@ All notable changes to the project are documented in this file.
 - Add support for GRE/GRETAP tunnels
 - Add support for STP/RSTP on bridges
 - Add support for VXLAN tunnels
- - Add support for configuring global LLDP `message-tx-interval`

 ### Fixes

@@ -1594,10 +1535,8 @@ Supported YANG models in addition to those used by sysrepo and netopeer:
 - N/A

 [buildroot]:  https://buildroot.org/
-[v25.06.0]:   https://github.com/kernelkit/infix/compare/v25.05.1...v26.06.0
-[v25.05.1]:   https://github.com/kernelkit/infix/compare/v25.05.0...v25.05.1
-[v25.05.0]:   https://github.com/kernelkit/infix/compare/v25.04.0...v25.05.0
-[v25.04.0]:   https://github.com/kernelkit/infix/compare/v25.03.0...v25.04.0
+[UNRELEASED]: https://github.com/kernelkit/infix/compare/v25.03.0...HEAD
+[v25.03.1]:   https://github.com/kernelkit/infix/compare/v25.03.0...v25.03.1
 [v25.03.0]:   https://github.com/kernelkit/infix/compare/v25.02.0...v25.03.0
 [v25.02.0]:   https://github.com/kernelkit/infix/compare/v25.01.0...v25.02.0
 [v25.01.0]:   https://github.com/kernelkit/infix/compare/v24.11.0...v25.01.0
@@ -1,7 +1,7 @@
 <img align="right" src="logo.png" alt="Infix - Linux <3 NETCONF" width=480 border=10>

-Welcome to Infix, your immutable, friendly, and secure operating system!
-On these pages you can find both user and developer documentation.
+Welcome to Infix, your friendly Network Operating System!  On these
+pages you can find both user and developer documentation.

 Most topics on configuring the system include CLI examples, but every
 setting, as well as status read-back from the operational datastore, is
@@ -63,7 +63,7 @@ bootloader's validation procedure, user configuration is kept to a
 minimum.  Two settings are available:

 - **Boot order**: Since Infix maintains two copies of its software image,
-  and as some bootloaders support [netbooting][2], the order in which boot
+  and as some bootloaders support netbooting, the order in which boot
  sources are considered can be configured. To select the active
  source, use [RAUC][]:

@@ -349,8 +349,5 @@ can funtion reasonably well without a persistent `/var`, loosing
 If `var` is not available, Infix will still persist `/var/lib` using
 `cfg` as the backing storage.

-[^1]: See [Upgrading procedures and boot
-    order](system.md#upgrade-procedures-and-boot-order) for
-    information on upgrading via CLI.
-
-[2]: netboot.md
+[^1]: See [CLI Upgrade](cli/upgrade.md) for information on upgrading
+    via CLI.
@@ -214,7 +214,7 @@ text file without line breaks (`-w0`):
 ```bash
 $ echo "Li0tLS0tLS0uCnwgIC4gLiAgfCBJbmZpeCAtLSBhIE5ldHdvcmsgT3BlcmF0aW5nIFN5c3RlbQp8LS4gdiAuLXwgaHR0cHM6Ly9rZXJuZWxraXQuZ2l0aHViLmlvCictJy0tLSctJwo=" |base64 -d
 .-------.
-|  . .  | Infix OS — Immutable.Friendly.Secure
+|  . .  | Infix -- a Network Operating System
 |-. v .-| https://kernelkit.github.io
 '-'---'-'
 ```
@@ -39,12 +39,7 @@ The secondary partition (`rootfs.1`) has now been upgraded and will be used as
 the *active* partition on the next boot.  Leaving the primary partition, with
 the version we are currently running, intact in case of trouble.

-See [upgrading procedures and boot order][2] for more information on
-    upgrading.
-
 [^1]: It is not possible to upgrade the partition we booted from.  Thankfully
    the underlying "rauc" subsystem keeps track of this.  Hence, to upgrade
    both partitions you must reboot to the new version (to verify it works)
    and then repeat the same command.
-
-[2]: ../system.md#upgrade-procedures-and-boot-order
@@ -131,8 +131,6 @@ This rebuilds (and installs) `foo` and `bar`, the `all` target calls
 on Buildroot to finalize the target filesystem and generate the images.
 The final `run` argument is explained below.

-
-
 ### `confd`

 The Infix `src/confd/` is the engine of the system.  Currently it is a
@@ -168,36 +166,36 @@ Now you can rebuild `confd`, just as described above, and restart Infix:

 ### `statd`

-The Infix status daemon, `src/statd`, is responsible for populating the
-sysrepo `operational` datastore. Like `confd`, it uses XPath subscriptions,
-but unlike `confd`, it relies entirely on `yanger`, a Python script that
+The Infix status daemon, `src/statd`, is responsible for populating the 
+sysrepo `operational` datastore. Like `confd`, it uses XPath subscriptions, 
+but unlike `confd`, it relies entirely on `yanger`, a Python script that 
 gathers data from local linux services and feeds it into sysrepo.

 To apply changes, rebuild the image:

    make python-statd-rebuild statd-rebuild all

-Rebuilding the image and testing on target for every change during
-development process can be tedious. Instead, `yanger` allows remote
-execution, running the script directly on the host system (test
+Rebuilding the image and testing on target for every change during 
+development process can be tedious. Instead, `yanger` allows remote 
+execution, running the script directly on the host system (test 
 container):

    infamy0:test # ../src/statd/python/yanger/yanger -x "../utils/ixll -A ssh d3a" ieee802-dot1ab-lldp

 `ixll` is a utility script that lets you run network commands using an
-**interface name** instead of a hostname. It makes operations like
+**interface name** instead of a hostname. It makes operations like 
 `ssh`, `scp`, and network discovery easier.

-Normally, `yanger` runs commands **locally** to retrieve data
-(e.g., `lldpcli` when handling `ieee802-dot1ab-lldp`). However, when
-executed with `-x "../utils/ixll -A ssh d3a"` it redirects these
-commands to a remote system connected to the local `d3a` interface via
-SSH. This setup is used for running `yanger` in an
+Normally, `yanger` runs commands **locally** to retrieve data 
+(e.g., `lldpcli` when handling `ieee802-dot1ab-lldp`). However, when 
+executed with `-x "../utils/ixll -A ssh d3a"` it redirects these 
+commands to a remote system connected to the local `d3a` interface via 
+SSH. This setup is used for running `yanger` in an 
 [interactive test environment](testing.md#interactive-usage). The yanger
-script runs on the `host` system, but key commands are executed on the
+script runs on the `host` system, but key commands are executed on the 
 `target` system.

-For debugging or testing, you can capture system command output and
+For debugging or testing, you can capture system command output and 
 replay it later without needing a live system.

 To capture:
@@ -211,193 +209,29 @@ To replay:
 This is especially useful when working in isolated environments or debugging
 issues without direct access to the DUT.

-### Upgrading Packages
-
-#### Buildroot
-
-Kernelkit maintains an internal [fork of
-Buildroot](https://github.com/kernelkit/buildroot), with branches
-following the naming scheme `YYYY.MM.patch-kkit`
-e.g. `2025.02.1-kkit`, which means a new branch should be created
-whenever Buildroot is updated. These branches should contain **only**
-changes to existing packages (but no new patches), modifications to
-Buildroot itself or upstream backports.
-
-KernelKit track the latest Buildroot LTS (Long-Term Support) release
-and updates. The upgrade of LTS minor releases is expected to have low
-impact and should be done as soon there is a patch release of
-Buildroot LTS is available.
-
-> **Depending on your setup, follow the appropriate steps below.**
-
-🔁 If you **already have** the Buildroot repo locally
-
-1. Navigate to the Buildroot directory
-   ```bash
-    $ cd buildroot
-   ```
-2. Pull the latest changes from KernelKit
-   ```bash
-   $ git pull
-   ```
-3. Fetch the latest tags from upstream
-   ```bash
-   $ git fetch upstream --tags
-   ```
-
-
-🆕 If you don't have the repo locally
-
-1. Clone the Kernelkit Buildroot repository
-   ```bash
-   $ git clone git@github.com:kernelkit/buildroot.git
-   ```
-
-2. Add the upstream remote
-   ```bash
-   $ git remote add upstream https://gitlab.com/buildroot.org/buildroot.git
-   ```
-3. Checkout old KernelKit branch
-   ```bash
-   $ git checkout 2025.02.1-kkit
-   ```
-
-
-🛠  Continue from here (applies to both cases):
-
-4. Create a new branch based on the **previous** KernelKit Buildroot
-   release (e.g.  `2025.02.1-kkit`) and name it according to the naming scheme (e.g. `2025.02.2-kkit`)
-   ```bash
-   $ git checkout -b 2025.02.2-kkit
-   ```
-5. Rebase the new branch onto the corresponding upstream release
-   ```bash
-   $ git rebase 2025.02.2
-   ```
-> [!NOTE] It is **not** allowed to rebase the branch when bumped in Infix.
-
-6. Push the new branch and tags
-   ```bash
-   $ git push origin 2025.02.2-kkit --tags
-   ```
-7. In Infix, checkout new branch of Buildroot
-   ```bash
-   $ cd buildroot
-   $ git fetch
-   $ git checkout 2025.02.2-kkit
-   ```
-8. Push changes
-Commit and push the changes. Don’t forget to update the changelog.
-
-9. Create a pull request.
-
-> [!NOTE] Remember to set the pull request label to `ci:main` to ensure full CI coverage.
-
-
-#### Linux kernel
-
-KernelKit maintains an internal [fork of Linux
-kernel](https://github.com/kernelkit/linux), with branches following
-the naming scheme `kkit-linux-[version].y`, e.g. `kkit-6.12.y`, which
-means a new branch should be created whenever the major kernel version
-is updated. This branch should contain *all* kernel patches used by
-Infix.
-
-KernelKit track the latest Linux kernel LTS (Long-Term Support)
-release and updates. The upgrade of LTS minor releases is expected to
-have low impact and should be done as soon as a patch release of the
-LTS Linux kernel is available.
-
-
-🔁 If you **already have** the Linux kernel repo locally
-
-1. Navigate to the Linux kernel directory
-   ```bash
-   $ cd linux
-   ```
-2. Get latest changes from KernelKit
-   ```bash
-   $ git pull
-   ```
-3. Fetch the latest tags from upstream
-   ```bash
-   $ git fetch upstream --tags
-   ```
-
-🆕 If you don't have the repo locally
-
-1. Clone the KernelKit Linux kernel repository
-   ```bash
-   $ git clone git@github.com:kernelkit/linux.git
-	```
-2. Add the upstream remote
-   ```bash
-   $ git remote add upstream git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
-   ```
-
-3. Checkout correct kernel branch
-   ```bash
-   $ git checkout kkit-linux-6.12.y
-   ```
-
-🛠  Continue from here (applies to both cases)
-
-
-4. Rebase on the upstream release
-   ```bash
-   $ git rebase v6.12.29
-   ```
-
-6. Push changes and the tags
-   ```bash
-
-   $ git push -f origin kkit-linux-6.12.y --tags
-   ```
-
-**Move to your infix directory**
-
-7. Generate patches
-   ```bash
-   $ make x86_64_defconfig
-   $ cd output
-   $ ../utils/kernel-refresh.sh -k /path/to/linux -o 6.12.28 -t v6.12.29
-   ```
-   > [!NOTE] See help of `kernel-refresh.sh` script for more information
-
-
-8. Push changes
-   Commit and push the changes. Don’t forget to update the s:changelog:doc/ChangeLog.md.
-
-9. Create a pull request.
-   > [!NOTE] Remember to set the pull request label to `ci:main` to ensure full CI coverage.
-
-
 ### Agree on YANG Model

 When making changes to the `confd` and `statd` services, you will often need to update
-the YANG models. If you are adding a new YANG module, it's best to follow the
+the YANG models. If you are adding a new YANG module, it's best to follow the 
 structure of an existing one. However, before making any changes, **always discuss
-them with the Infix core team**. This helps avoid issues later in development and
+them with the Infix core team**. This helps avoid issues later in development and 
 makes pull request reviews smoother.

-
 Testing
 -------

 Manual testing can be done using Qemu by calling <kbd>make run</kbd>,
-see also [Infix in Virtual Environments](virtual.md), or on a physical
-device by upgrading to the latest build or "[netbooting](netboot.md)"
-and running the image from RAM.  The latter is how most board porting
-work is done -- **much quicker** change-load-test cycles.
+see also [Infix in Virtual Environments](virtual.md).

 The Infix automated test suite is built around Qemu and [Qeneth][2], see:

 * [Testing](testing.md)
 * [Docker Image](../test/docker/README.md)

-With any new feature added to Infix, it is essential to include relevant
-test case(s).  See the [Test Development](testing.md#test-development)
-section for guidance on adding test cases.
+With any new feature added to Infix, it is essential to include a 
+relevant test case. See the 
+[Test Development](testing.md#test-development) section for guidance
+on adding test cases.


 Reviewing
@@ -46,7 +46,7 @@ admin@infix-c0-ff-ee:~$

 ## LLDP

-Infix supports LLDP (IEEE 802.1AB). For a device with factory default
+Infix supports LLDP (IEEE 802.1AB).  For a device with factory default
 settings, the link-local IPv6 address can be read from the Management
 Address TLV using *tcpdump* or other sniffing tools[^1]:

@@ -131,10 +131,6 @@ tcpdump: listening on tap0, link-type EN10MB (Ethernet), snapshot length 262144
 linux-pc:#
 ```

-The following capabilities are available via NETCONF/RESTCONF or the Infix CLI.
-
-### LLDP Enable/Disable
-
 The LLDP service can be disabled using the following commands.

 ```
@@ -144,59 +140,6 @@ admin@infix-c0-ff-ee:/config/> leave
 admin@infix-c0-ff-ee:/> 
 ```

-To reenable it from the CLI config mode:
-
-```
-admin@test-00-01-00:/config/> set lldp enabled 
-admin@test-00-01-00:/config/> leave
-```
-
-### LLDP Message Transmission Interval
-
-By default, LLDP uses a `message-tx-interval` of 30 seconds, as defined
-by the IEEE standard. Infix allows this value to be customized.
-To change it using the CLI:
-
-```
-admin@test-00-01-00:/config/> set lldp message-tx-interval 1
-admin@test-00-01-00:/config/> leave
-```
-
-### LLDP Administrative Status per Interface
-
-Infix supports configuring the LLDP administrative status on a per-port
-basis. The default mode is `tx-and-rx`, but the following options are 
-also supported:
-
- `rx-only` – Receive LLDP packets only
- `tx-only` – Transmit LLDP packets only
- `disabled` – Disable LLDP on the interface
-
-Example configuration:
-
-```
-admin@test-00-01-00:/config/> set lldp port e8 dest-mac-address 01:80:C2:00:00:0E admin-status disabled
-admin@test-00-01-00:/config/> set lldp port e5 dest-mac-address 01:80:C2:00:00:0E admin-status rx-only 
-admin@test-00-01-00:/config/> set lldp port e6 dest-mac-address 01:80:C2:00:00:0E admin-status tx-only
-admin@test-00-01-00:/config/> leave
-```
-
-> [!NOTE]
-> The destination MAC address must be the standard LLDP multicast 
-> address: `01:80:C2:00:00:0E`.
-
-###  Displaying LLDP Neighbor Information
-
-In CLI mode, Infix also provides a convenient `show lldp` command to
-list LLDP neighbors detected on each interface:
-
-```
-admin@test-00-01-00:/> show lldp 
-INTERFACE       REM-IDX   TIME        CHASSIS-ID          PORT-ID             
-e5              1         902         00:a0:85:00:04:01   00:a0:85:00:04:07   
-e6              3         897         00:a0:85:00:03:01   00:a0:85:00:03:07   
-e8              2         901         00:a0:85:00:02:01   00:a0:85:00:02:05
-```

 ## mDNS-SD

@@ -294,7 +237,7 @@ rtt min/avg/max/mdev = 0.852/1.105/1.348/0.202 ms
 linux-pc:# ssh admin@infix-c0-ff-ee.local
 (admin@infix-c0-ff-ee.local) Password: 
 .-------.
-|  . .  | Infix OS — Immutable.Friendly.Secure
+|  . .  | Infix -- a Network Operating System
 |-. v .-| https://kernelkit.org
 '-'---'-

@@ -334,7 +277,7 @@ rtt min/avg/max/mdev = 0.751/1.482/2.281/0.626 ms
 linux-pc:# ssh admin@infix.local
 (admin@infix.local) Password: 
 .-------.
-|  . .  | Infix OS — Immutable.Friendly.Secure
+|  . .  | Infix -- a Network Operating System
 |-. v .-| https://kernelkit.org
 '-'---'-

@@ -79,11 +79,11 @@ typically setup to run at 115200 baud, 8N1.


 ```
-Infix OS — Immutable.Friendly.Secure v24.11.1 (ttyS0)
+Infix -- a Network Operating System v24.11.1 (ttyS0)
 example login: admin
 Password:
 .-------.
-|  . .  | Infix OS — Immutable.Friendly.Secure
+|  . .  | Infix -- a Network Operating System
 |-. v .-| https://kernelkit.org
 '-'---'-'

@@ -193,11 +193,3 @@ admin@example:/config/web/> edit restconf
 admin@example:/config/web/restconf/> no enabled
 admin@example:/config/web/restconf/>
 ```
-
-# System Upgrade
-
-See [upgrading procedures and boot order][1] for information on
-    upgrading.
-
-
-[1]: system.md#upgrade-procedures-and-boot-order
@@ -1,130 +0,0 @@
-Netboot HowTo
-=============
-
-This document describes how to set up network booting U-Boot devices on
-a LAN, e.g., when working with an evaluation board or other embedded
-system.  The most secure way to do this is with a local LAN between a PC
-and the device.
-
-Instead of setting up everything in U-Boot to download the Linux Image,
-device tree, and initramfs, we will let U-Boot download a script with
-instructions to run.  When you have multiple systems (boards) this
-quickly becomes a lot easier to manage.
-
-> [!NOTE]
-> Instructions in this HowTo assume a Debian based development system,
-> e.g., Ubuntu or Linux Mint.
-
-
-## Network Interface Setup
-
-For two dedicated network interfaces, here `eth2` and `eth3` (ymmv), we
-create an old-style interfaces config[^1] with the following content:
-
-```
-# /etc/network/interfaces.d/gimli
-auto eth2
-iface eth2 inet static
-        address 192.168.0.1
-        netmask 255.255.255.0
-
-auto eth3
-iface eth3 inet manual
-```
-
-> [!TIP]
-> Use configuration file names in `.d/` directories that make sense and
-> can easily be remembered.  Here we use the hostname of the PC.
-
-
-## DHCP/TFTP Server Setup
-
-The examples given here use `dnsmasq`, which provides both DHCP and TFTP
-server support.  The same can be achieved with other implementations.
-
-Similar to `interfaces.d`, dnsmasq has an `/etc/dnsmasq.d` directory so
-we can use "snippets" instead of modifying `/etc/dnsmasq.conf` directly.
-Add a file called `/etc/dnsmasq.d/gimli`.
-
-Initial content:
-
-```
-# Remember IP address handed out to BOOTP clients
-bootp-dynamic
-# Disable check-if-ip-address-is-already-used
-no-ping
-
-# Enable TFTP server, use /srv/ftp, same as any FTP server, useful
-# when using the same images for system upgrade as for netbooting.
-enable-tftp
-tftp-root=/srv/ftp
-```
-
-> [!CAUTION]
-> First of all, make sure you DO NOT accidentally set up dnsmasq so that
-> it starts acting as a DHCP server also on your office LAN!  Follow the
-> instructions below for more details.
-
-If you have many interfaces used for lab equipment and only one office
-LAN interface, then use something like this:
-
-```
-# Disable DHCP server on loopback and office LAN (eth0)
-except-interface=lo
-except-interface=eth0
-```
-
-To further lock this down, we only run the DHCP server on each of the
-interfaces used for lab equipment, with a dedicated IP range as well:
-
-```
-# Currently I have an imx8mp-evk on eth2, so on my system I have a
-# symlink bootfile-eth2 -> netboot.scr
-interface=eth2
-dhcp-range=192.168.0.100,192.168.0.199,1h
-dhcp-boot=tag:eth2,bootfile-eth2
-```
-
-## Bootfile netboot.scr
-
-The bootfile U-Boot retrieves from the TFTP server is a script that
-looks like this, `netboot.sh`:
-
-```sh
-setenv ramdisk_addr_r 0x58000000
-setenv fdt_addr_r     0x50400000
-
-setenv autoboot off
-tftp ${fdt_addr_r}     imx8mp-evk/imx8mp-evk.dtb
-tftp ${kernel_addr_r}  imx8mp-evk/Image
-tftp ${ramdisk_addr_r} imx8mp-evk/rootfs.squashfs
-
-setenv bootargs console=ttymxc1,115200 root=/dev/ram0 brd.rd_size=500000 rauc.slot=net
-booti ${kernel_addr_r} ${ramdisk_addr_r}:${filesize} ${fdt_addr_r}
-```
-
-U-Boot cannot read script files directly, so we need to wrap it with a
-FIT format header, this is done by first converting it on the PC:
-
-```
-$ mkimage -T script -d netboot.sh netboot.scr
-```
-
-The output is `netboot.scr` which we symlink to above in the dnsmasq
-setup step.
-
-
-## U-Boot Commands
-
-U-Boot is a maze of environment variables, some with values, some wrap
-commands, and most are undocumented.  We will use a prefix for our
-variables to ensure we do not overwrite anything you may want to use
-later.
-
-```sh
-==> setenv ixboot 'dhcp && source \${fileaddr}'
-==> saveenv
-```
-
-
-[^1]: To prevent NetworkManager from automatically managing the interfaces.
@@ -92,7 +92,7 @@ Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
 Warning: Permanently added 'fe80::ff:fe00:0%eth0' (ED25519) to the list of known hosts.
 admin@fe80::ff:fe00:0%eth0's password: *****
 .-------.
-|  . .  | Infix OS — Immutable.Friendly.Secure
+|  . .  | Infix -- a Network Operating System
 |-. v .-| https://kernelkit.org
 '-'---'-'

@@ -1263,7 +1263,7 @@ It should now be possible to access the switch from the PC via SSH (or NETCONF).
 ~ $ ssh admin@fe80::0053:00ff:fe06:1101%eth1
 admin@fe80::0053:00ff:fe06:1101%eth1's password: 
 .-------.
-|  . .  | Infix OS — Immutable.Friendly.Secure
+|  . .  | Infix -- a Network Operating System
 |-. v .-| https://kernelkit.org
 '-'---'-'

@@ -323,439 +323,7 @@ reference ID, stratum, time offsets, frequency, and root delay.
 > The system uses `chronyd` Network Time Protocol (NTP) daemon.  The
 > output shown here is best explained in the [Chrony documentation][4].

-## Upgrade procedures and boot order
-
-For resilience purposes, Infix maintains two software
-images referred to as the _primary_ and _secondary_ partition image.
-In addition, some bootloaders support [netbooting][6].
-
-The _boot order_ defines which image is tried first, and is listed
-with the CLI `show software` command. It also shows Infix version
-installed per partition, and which image was used when booting (`STATE
-booted`).
-
-```
-admin@example:/> show software
-BOOT ORDER
-primary secondary net
-
-NAME      STATE     VERSION                DATE
-primary   booted    v25.01.0               2025-04-25T10:15:00+00:00
-secondary inactive  v25.01.0               2025-04-25T10:07:20+00:00
-admin@example:/>
-```
-
-YANG support for upgrading Infix, inspecting and _modifying_ the
-boot-order, is defined in [infix-system-software][5].
-
-
-### Upgrading Infix
-
-Upgrading Infix is done one partition at a time. If the system has
-booted from one partition, an `upgrade` will apply to the other
-(inactive) partition.
-
-1. Download and unpack the release to install. Make the image *pkg*
-   bundle available at some URL[^10]
-2. (Optional) Backup the startup configuration
-3. Assume the unit has booted the `primary` image. Then running the
-   `upgrade` command installs a new image on the `secondary`
-   partition
-4. As part of a successful upgrade, the boot-order is implictly
-   changed to boot the newly installed image
-5. Reboot the unit
-6. The unit now runs the new image. To upgrade the remaining partition
-   (`primary`), run the same upgrade command again, and (optionally)
-   reboot to verify the upgrade
-   
-> [!CAUTION]
-> During boot (step 5), the unit may
-> [migrate](#configuration-migration) the startup configuration for
-> any syntax changes.  It is therefore important that you make sure to
-> upgrade the other partition as well after reboot, of course after
-> having verified your setup.
-
-The CLI example below shows steps 2-5.
-
-*Backup startup configuration:* It is recommended to backup the
-startup configuration before performing an upgrade. The backup is
-useful if the upgrade fails, and makes a later
-[downgrade](#downgrading-infix) smoother to conduct.
-
-```
-admin@example:/> dir /cfg
-/cfg directory
-backup/             ssl/                startup-config.cfg
-
-admin@example:/> copy /cfg/startup-config.cfg /cfg/v25.01.0-startup-config.cfg
-admin@example:/> dir /cfg
-/cfg directory
-backup/             ssl/                startup-config.cfg           v25.01.0-startup-config.cfg
-
-admin@example:/> 
-```
-
-*Upgrade:* Here the image *pkg bundle* was made available via TFTP.
-
-```
-admin@example:/> upgrade tftp://198.18.117.1/infix-aarch64-25.03.1.pkg
-installing
-  0% Installing
-  0% Determining slot states
- 10% Determining slot states done.
-...
- 98% Copying image to rootfs.1
- 99% Copying image to rootfs.1
- 99% Copying image to rootfs.1 done.
- 99% Updating slots done.
-100% Installing done.
-Installing `tftp://198.18.117.1/infix-aarch64-25.03.1.pkg` succeeded
-admin@example:/>
-```
-
-*Reboot:* The unit will boot on the other partition, with the newly
-installed image. The `Loading startup-config` step conducts migration
-of startup configuration if applicable.
-
-```
-admin@example:/> reboot
-[ OK ] Stopping Static routing daemon
-[ OK ] Stopping Zebra routing daemon
-...
-[ OK ] Loading startup-config
-[ OK ] Verifying self-signed https certificate
-[ OK ] Update DNS configuration
-[ OK ] Starting Status daemon
-
-Infix OS — Immutable.Friendly.Secure v25.03.1 (ttyS0)
-example login: admin
-Password:
-.-------.
-|  . .  | Infix OS — Immutable.Friendly.Secure
-|-. v .-| https://kernelkit.org
-'-'---'-'
-
-Run the command 'cli' for interactive OAM
-
-admin@example:~$ cli
-
-See the 'help' command for an introduction to the system
-
-admin@example:/> show software
-BOOT ORDER
-secondary primary net
-
-NAME      STATE     VERSION                DATE
-primary   inactive  v25.01.0               2025-04-25T10:15:00+00:00
-secondary booted    v25.03.1               2025-04-25T10:24:31+00:00
-admin@example:/>
-```
-
-As shown, the *boot order* has been updated, so that *secondary* is
-now the preferred boot source.
-
-To upgrade the remaining partition (`primary`), run the `upgrade URL`
-command again, and (optionally) reboot.
-
-### Configuration Migration
-
-The example above illustrated an upgrade from Infix v25.01.0 to
-v25.03.1. Inbetween these versions, YANG configuration definitions
-changed slightly (more details given below).
-
-During boot, Infix inspects the `version` meta information within the
-startup configuration file to determine if configuration migration is
-needed. In this specific case, the configuration file has version
-`1.4` while the booted software expects version `1.5` (the
-configuration version numbering differs from the Infix image version
-numbering).  The startup configuration is migrated to `1.5`
-definitions and stored, while a backup previous startup configuration
-is stored in directory `/cfg/backup/`.
-
-```
-admin@example:/> dir /cfg/backup/
-/cfg/backup/ directory
-startup-config-1.4.cfg
-
-admin@example:/>
-```
-
-The modifications made to the startup configuration can be viewed by
-comparing the files from the *shell*. An example is shown below.
-
-```
-admin@example:/> exit
-admin@example:~$ diff /cfg/backup/startup-config-1.4.cfg /cfg/startup-config.cfg
--- /cfg/backup/startup-config-1.4.cfg
-+++ /cfg/startup-config.cfg
-...
-          "public-key-format": "ietf-crypto-types:ssh-public-key-format",
-+          "public-key-format": "infix-crypto-types:ssh-public-key-format",
-...
-          "private-key-format": "ietf-crypto-types:rsa-private-key-format",
-+          "private-key-format": "infix-crypto-types:rsa-private-key-format",
-...
-    "version": "1.4"
-+    "version": "1.5"
-...
-admin@example:~$
-```
-
-### Downgrading Infix
-
-Downgrading to an earlier Infix version is possible, however,
-downgrading is **not** guaranteed to work smoothly. In particular,
-when the unit boots up with the downgraded version, it may fail to
-apply the *startup config*, and instead apply its [failure config][7].
-
-We consider two cases: downgrading with or without applying a backup
-startup configuration before rebooting.
-
-In both cases we start out with a unit running Infix v25.03.1, and
-wish to downgrade to v25.01.0.
-
-```
-admin@example:/> show software
-BOOT ORDER
-primary secondary net
-
-NAME      STATE     VERSION                DATE
-primary   booted    v25.03.1               2025-04-25T11:36:26+00:00
-secondary inactive  v25.03.1               2025-04-25T10:24:31+00:00
-admin@example:/>
-```
-
-#### Downgrading when applying a backup startup configuration
-
-This is the recommended approach to downgrade, given that you have a
-backup configuration available.  The objective is to avoid ending up
-with the unit in *failure config*.
-
-1. Find the backup configuration file.
-2. Run `upgrade URL` to install Infix image to downgrade to.
-3. Copy backup startup configuration to current startup configuration
-   (from shell).
-4. Reboot.
-
-*Find the backup configuration file:*
-
-Assume you have a backup startup config for the Infix version to
-downgrade to (here Infix v25.01.0, config `version 1.4`).
-
-The preferred approach is to use a startup configuration backed up
-when running Infix v25.01.0 on the unit. See the section on [upgrading
-Infix](#upgrading-infix) above for more information. In the example
-below, there is a backup file available named
-*v25.01.0-startup-config.cfg* 
-
-```
-admin@example:/> dir /cfg
-/cfg directory
-backup/             ssl/                startup-config.cfg           v25.01.0-startup-config.cfg
-
-admin@example:/> 
-```
-
-The alternative is to use a startup config implicitly backed up by the
-system as part of [configuration migration](#configuration-migration).
-
-```
-admin@example:/> dir /cfg/backup/
-/cfg/backup/ directory
-startup-config-1.4.cfg
-
-admin@example:/>
-```
-
-> [!CAUTION] Using a backup configuration file stored when the unit
-> was running the old version (e.g., v25.01.0-startup-config.cfg) is
-> preferred. Although backup files stored due to configuration
-> migration (e.g., startup-config-1.4.cfg) usually works too if the
-> configuration file version (`1.4`) matches, there are
-> situations when the system may fail to apply it as described below.
-
-The *configuration file version* (`1.4`) is only incremented when
-changes in YANG configuration syntax mandates it to handle
-*upgrading*.  Say the next Infix version includes a new feature
-setting, it can still have version `1.4`, as upgrading to it would not
-need migration. If a user then enables the new feature setting, the
-new configuration will no longer be compatible with the previous *Infix
-version*. A downgrade after enabling new features risks ending up with
-the unit in *failure config*. 
-
-
-*Use `upgrade` command to downgrade:*
-
-```
-admin@example:/> upgrade tftp://198.18.117.1/infix-aarch64-25.01.0.pkg
-installing
-  0% Installing
-  0% Determining slot states
- 10% Determining slot states done.
- ...
- 99% Copying image to rootfs.1 done.
- 99% Updating slots done.
-100% Installing done.
-Installing `tftp://198.18.117.1/infix-aarch64-25.01.0.pkg` succeeded
-admin@example:/>
-```
-
-*Apply the backup configuration file:*
-
-It is recommended to use a backup configuration file for the Infix version to
-downgrade to, if there is one available.
-
-```
-admin@example:/> copy /cfg/v25.01.0-startup-config.cfg /cfg/startup-config.cfg
-Overwrite existing file /cfg/startup-config.cfg (y/N)? y
-admin@example:/>
-```
-
-An alternative is to use a backup file stored when the system
-conducted a [configuration migration](#configuration-migration). See
-the *caution* note above.
-
-```
-admin@example:/> copy /cfg/backup/startup-config-1.4.cfg /cfg/startup-config.cfg
-Overwrite existing file /cfg/startup-config.cfg (y/N)? y
-admin@example:/>
-```
-
-*Reboot:*
-
-The unit will come up with the applied backup configuration. 
-
-```
-admin@example:/> reboot
-[ OK ] Saving system clock to file
-[ OK ] Stopping Software update service
-[ OK ] Stopping Status daemon
-...
-[ OK ] Bootstrapping YANG datastore
-[ OK ] Starting Configuration daemon
-[ OK ] Loading startup-config
-[ OK ] Update DNS configuration
-[ OK ] Verifying self-signed https certificate
-[ OK ] Starting Status daemon
-
-Infix OS — Immutable.Friendly.Secure v25.01.0 (ttyS0)
-example login:
-```
-> [!NOTE]
-> If the unit despite these measures ends up in *failure config*, see
-> the next section for more information on how to recover.
-
-#### Downgrading without applying a backup startup configuration
-
-This procedure assumes you have access to the unit's console port and
-its default login credentials[^9].
-
-1. Downgrade
-2. Reboot
-3. Login with unit's default credentials
-4. Conduct factory reset
-5. (Then go on configure the unit as you wish)
-
-*Use `upgrade` command to downgrade:*
-
-```
-admin@example:/> upgrade tftp://198.18.117.1/infix-aarch64-25.01.0.pkg
-installing
-  0% Installing
-  0% Determining slot states
- 10% Determining slot states done.
- ...
- 99% Copying image to rootfs.1 done.
- 99% Updating slots done.
-100% Installing done.
-Installing `tftp://198.18.117.1/infix-aarch64-25.01.0.pkg` succeeded
-admin@example:/>
-```
-
-*Reboot:*
-
-Conduct a reboot. During boot, the unit fails to apply the existing
-startup configuration (config version `1.5` while software expects
-version `1.4` or earlier), and instead applies its [failure
-config][7]. This is what is seen on the console when this situation
-occurs. Note that the login prompt displays `failed` as part of the
-*hostname*.
-
-```
-admin@example:/> reboot
-[ OK ] Saving system clock to file
-[ OK ] Stopping Software update service
-[ OK ] Stopping Status daemon
-...
-[ OK ] Verifying SSH host keys
-[ OK ] Bootstrapping YANG datastore
-[ OK ] Starting Configuration daemon
-[FAIL] Loading startup-config
-[ OK ] Loading failure-config
-[ OK ] Verifying self-signed https certificate
-[ OK ] Starting Status daemon
-
-Infix OS — Immutable.Friendly.Secure v25.01.0 (ttyS0)
-
-ERROR: Corrupt startup-config, system has reverted to default login credentials
-failed-00-00-00 login:
-```
-
-To remedy a situation like this, you can login with the unit's *default
-login credentials*, preferrably via a [console port][8].
-The unit's default credentials are typically printed on a sticker on
-the unit.
-
-```
-failed-00-00-00 login: admin
-Password:
-
-Run the command 'cli' for interactive OAM
-
-admin@failed-00-00-00:~$
-```
-
-When it is *safe* from a network operations perspective, you can
-conduct a factory reset and reboot. It is recommended to remove the
-unit from any production network before doing this, as a factory reset
-may enable undesired connectivity between the unit's ports.
-
-```
-admin@failed-00-00-00:~$ factory
-Factory reset device (y/N)? y
-factory: scheduled factory reset on next boot.
-Reboot now to perform reset, (y/N)? y
-[ OK ] Saving system time (UTC) to RTC
-[ OK ] Stopping mDNS alias advertiser
-...
-[ OK ] Starting Configuration daemon
-[ OK ] Loading startup-config
-[ OK ] Update DNS configuration
-[ OK ] Verifying self-signed https certificate
-[ OK ] Starting Status daemon
-[ OK ] Starting Status daemon
-
-
-Please press Enter to activate this console.
-
-Infix OS — Immutable.Friendly.Secure v25.01.0 (ttyS0)
-example login:
-```
-
-Continued configuration is done as with any unit after factory reset.
-
 [1]: https://www.rfc-editor.org/rfc/rfc7317
 [2]: https://github.com/kernelkit/infix/blob/main/src/confd/yang/infix-system%402024-02-29.yang
 [3]: https://www.rfc-editor.org/rfc/rfc8341
 [4]: https://chrony-project.org/doc/4.6.1/chronyc.html
-[5]: https://github.com/kernelkit/infix/blob/main/src/confd/yang/confd/infix-system-software.yang
-[6]: netboot.md
-[7]: introduction.md#system-boot
-[8]: management.md#console-port
-[^9]: In failure config, Infix puts all Ethernet ports as individual
-    interfaces. With direct access, one can connect with e.g., SSH,
-    using link local IPv6 addresses. This as an alternative to
-    connecting via a console port.
-[^10]: Set up an FTP/TFTP/SFTP or HTTP/HTTPS server on the same LAN. 
-
-[11]: scripting.md#-backup-configuration-using-sysrepocfg-and-scp
@@ -123,11 +123,11 @@ there is another helper script in Infamy for this:
    Trying 127.0.0.1...
    Connected to 127.0.0.1.

-    Infix OS — Immutable.Friendly.Secure v23.11.0-226-g0c144da (console)
+    Infix -- a Network Operating System v23.11.0-226-g0c144da (console)
    infix-00-00-00 login: admin
    Password:
    .-------.
-    |  . .  | Infix OS — Immutable.Friendly.Secure
+    |  . .  | Infix -- a Network Operating System
    |-. v .-| https://kernelkit.org
    '-'---'-'

@@ -1,152 +0,0 @@
-# Wi-Fi (Wireless LAN)
-
-Infix includes built-in Wi-Fi client support for connecting to
-wireless networks. When a compatible Wi-Fi adapter is detected, the
-system automatically begins scanning for available networks.
-
-## Current Limitations
-
- Only client mode is supported (no access point functionality)
- USB hotplug is not supported - adapters must be present at boot
- Interface naming may be inconsistent with multiple USB Wi-Fi adapters
-
-## Supported Wi-Fi Adapters
-
-Wi-Fi support is primarily tested with Realtek chipset-based adapters.
-
-### Known Working Chipsets
-
- RTL8821CU
- Other Realtek chipsets may work but are not guaranteed
-
-
-> [!NOTE]  Some Realtek chipsets require proprietary drivers not included in the standard kernel
->          Firmware requirements vary by chipset
->          Check kernel logs if your adapter is not detected
-
-## Configuration
-
-Add a supported Wi-Fi network device. To verify that it has been
-detected, look for `wifi0` in `show interfaces`
-
-```
-admin@example:/>  show interfaces
-INTERFACE       PROTOCOL   STATE       DATA
-lo              loopback   UP
-                ipv4                   127.0.0.1/8 (static)
-                ipv6                   ::1/128 (static)
-e1              ethernet   UP          02:00:00:00:00:01
-                ipv6                   fe80::ff:fe00:1/64 (link-layer)
-                ipv6                   fec0::ff:fe00:1/64 (link-layer)
-wifi0           ethernet   DOWN        f0:09:0d:36:5f:86
-                wifi                   ssid: ------, signal: ------
-
-```
-Add the new Wi-Fi interface to the configuration to start scanning.
-```
-admin@example:/config/> set interface wifi0
-admin@example:/config/> leave
-```
-Now the system will now start scanning in the background. To
-see the result read the operational datastore for interface `wifi0` or
-use the CLI
-
-```
-admin@infix-00-00-00:/> show interfaces name wifi0
-name                : wifi0
-type                : wifi
-index               : 3
-mtu                 : 1500
-operational status  : down
-physical address    : f0:09:0d:36:5f:86
-ipv4 addresses      :
-ipv6 addresses      :
-SSID                : ----
-Signal              : ----
-
-SSID                                    ENCRYPTION                    SIGNAL
-ssid1                                   WPA2-Personal                 excellent
-ssid2                                   WPA2-Personal                 excellent
-ssid3                                   WPA2-Personal                 excellent
-ssid4                                   WPA2-Personal                 good
-ssid5                                   WPA2-Personal                 good
-ssid6                                   WPA2-Personal                 good
-```
-
-In the CLI, signal strength is reported as: excellent, good, poor or
-bad. For precise values, use NETCONF or RESTCONF, where the RSSI (in
-dBm) is available in the operational datastore.
-
-Configure your Wi-Fi secret in the keystore, it should be between 8
-and 63 characters
-
-```
-admin@example:/> configure
-admin@example:/config/> edit keystore symmetric-key example
-admin@example:/config/keystore/symmetric-key/example/> set key-format wifi-preshared-key-format
-admin@example:/config/keystore/symmetric-key/example/> set cleartext-key mysecret
-admin@example:/config/keystore/symmetric-key/example/> leave
-admin@example:/>
-```
-
-Configure the Wi-Fi settings, set secret to the name selected above
-for the symmetric key, in this case `example`.
-
-WPA2 or WPA3 encryption will be automatically selected based on what
-the access point supports. No manual selection is required unless
-connecting to an open network. No support for certificate based
-authentication yet.
-
-Unencrypted network is also supported, to connect to an unencrypted
-network (generally not recommended):
-```
-admin@example:/config/interface/wifi0/> set wifi encryption disabled
-```
-
-A valid `country-code` is also required for regulatory compliance, the
-valid codes are documented in the YANG model `infix-wifi-country-codes`
-
-
-```
-admin@example:/> configure
-admin@example:/config/> edit interface wifi0
-admin@example:/config/interface/wifi0/>
-admin@example:/config/interface/wifi0/> set wifi ssid ssid1
-admin@example:/config/interface/wifi0/> set wifi secret example
-admin@example:/config/interface/wifi0/> set wifi country-code SE
-admin@example:/config/interface/wifi0/> leave
-```
-
-The Wi-Fi negotiation should now start immediately, provided that the
-SSID and pre-shared key are correct. You can verify the connection by
-running `show interfaces` again.
-
-
-```
-admin@example:/> show interfaces
-INTERFACE       PROTOCOL   STATE       DATA
-lo              loopback   UP
-                ipv4                   127.0.0.1/8 (static)
-                ipv6                   ::1/128 (static)
-e1              ethernet   UP          02:00:00:00:00:01
-                ipv6                   fe80::ff:fe00:1/64 (link-layer)
-                ipv6                   fec0::ff:fe00:1/64 (link-layer)
-wifi0           ethernet   UP          f0:09:0d:36:5f:86
-                wifi                   ssid: ssid1, signal: excellent
-
-admin@example:/>
-```
-
-## Troubleshooting Connection Issues
-
-Use `show wifi scan wifi0` and `show interfaces` to verify signal strength
-and connection status. If issues arise, try the following
-troubleshooting steps:
-
-1. **Verify signal strength**: Check that the target network shows "good" or "excellent" signal
-2. **Check credentials**: Verify the preshared key in `ietf-keystore`
-3. **Review logs**: Check system logs with `show log` for Wi-Fi related errors
-4. **Regulatory compliance**: Ensure the country-code matches your location
-5. **Hardware detection**: Confirm the adapter appears in `show interfaces`
-
-If issues persist, check the system log for specific error messages that can help identify the root cause.
@@ -2,7 +2,6 @@ menu "Packages"

 comment "Hardware Support"
 source "$BR2_EXTERNAL_INFIX_PATH/package/board/Config.in"
-source "$BR2_EXTERNAL_INFIX_PATH/package/feature-wifi/Config.in"

 comment "Software Packages"
 source "$BR2_EXTERNAL_INFIX_PATH/package/bin/Config.in"
@@ -35,7 +34,6 @@ source "$BR2_EXTERNAL_INFIX_PATH/package/python-libyang/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/python-statd/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/python-yangdoc/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/skeleton-init-finit/Config.in"
-source "$BR2_EXTERNAL_INFIX_PATH/package/show/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/tetris/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/libyang-cpp/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/sysrepo-cpp/Config.in"
@@ -43,4 +41,5 @@ source "$BR2_EXTERNAL_INFIX_PATH/package/rousette/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/nghttp2-asio/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/date-cpp/Config.in"
 source "$BR2_EXTERNAL_INFIX_PATH/package/rauc-installation-status/Config.in"
+
 endmenu
@@ -1,2 +1,53 @@
-include $(BR2_EXTERNAL_INFIX_PATH)/package/board/ix-board.mk
+define inner-ix-board
+
+$(2)_VERSION = ix-board
+$(2)_LICENSE = BSD-3-Clause
+$(2)_LICENSE_FILES = LICENSE
+$(2)_SITE_METHOD = local
+$(2)_SITE = $$(BR2_EXTERNAL_INFIX_PATH)/src/board/$(1)
+$(2)_REDISTRIBUTE = NO
+
+# The kernel must be built first.
+$(2)_DEPENDENCIES += \
+	linux \
+	$$(BR2_MAKE_HOST_DEPENDENCY)
+
+# This is only defined in some infrastructures (e.g. autotools, cmake),
+# but not in others (e.g. generic). So define it here as well.
+$(2)_MAKE ?= $$(BR2_MAKE)
+
+define $(2)_DTBS_BUILD
+	@$$(call MESSAGE,"Building device tree blob(s)")
+	$$(LINUX_MAKE_ENV) $$($$(PKG)_MAKE) \
+		-C $$(LINUX_DIR) \
+		$$(LINUX_MAKE_FLAGS) \
+		$$($(2)_DTB_MAKE_OPTS) \
+		PWD=$$(@D)/dts \
+		M=$$(@D)/dts \
+		modules
+endef
+$(2)_POST_BUILD_HOOKS += $(2)_DTBS_BUILD
+
+define $(2)_DTBS_INSTALL_TARGET
+	@$$(call MESSAGE,"Installing device tree blob(s)")
+	$$(TARGET_MAKE_ENV) $$(TARGET_CONFIGURE_OPTS) $$($$(PKG)_MAKE) \
+		-f $$(BR2_EXTERNAL_INFIX_PATH)/package/board/dtb-inst.makefile \
+		-C $$(@D)/dts \
+		DESTDIR="$$(TARGET_DIR)" \
+		install
+endef
+$(2)_POST_INSTALL_TARGET_HOOKS += $(2)_DTBS_INSTALL_TARGET
+
+define $(2)_OVERLAY_INSTALL_TARGET
+	@test -d $$(@D)/rootfs && \
+	$$(call MESSAGE,"Copying overlay") && \
+	$$(call SYSTEM_RSYNC,$$(@D)/rootfs,$(TARGET_DIR)) || \
+	true
+endef
+$(2)_POST_INSTALL_TARGET_HOOKS += $(2)_OVERLAY_INSTALL_TARGET
+
+endef
+
+ix-board = $(call inner-ix-board,$(pkgname),$(call UPPERCASE,$(pkgname)))
+
 include $(sort $(wildcard $(BR2_EXTERNAL_INFIX_PATH)/package/board/*/*.mk))
@@ -20,26 +20,6 @@ define FREESCALE_IMX8MP_EVK_LINUX_CONFIG_FIXUPS
 	$(call KCONFIG_ENABLE_OPT,CONFIG_INTERCONNECT_IMX)
 	$(call KCONFIG_ENABLE_OPT,CONFIG_INTERCONNECT_IMX8MP)
 	$(call KCONFIG_ENABLE_OPT,CONFIG_REALTEK_PHY)
-# For X
-	$(call KCONFIG_ENABLE_OPT,CONFIG_DRM)
-	$(call KCONFIG_ENABLE_OPT,CONFIG_DRM_ETNAVIV)
-	$(call KCONFIG_ENABLE_OPT,CONFIG_DRM_IMX8MP_DW_HDMI_BRIDGE)
-	$(call KCONFIG_ENABLE_OPT,CONFIG_PHY_FSL_SAMSUNG_HDMI_PHY)
-	$(call KCONFIG_ENABLE_OPT,CONFIG_DRM_IMX8MP_HDMI_PVI)
-	$(call KCONFIG_ENABLE_OPT,CONFIG_DRM_IMX_LCDIF)
-	$(call KCONFIG_ENABLE_OPT,CONFIG_INPUT_MOUSE)
-	$(call KCONFIG_ENABLE_OPT,CONFIG_INPUT_MOUSEDEV)
-	$(call KCONFIG_ENABLE_OPT,CONFIG_HID_GENERIC)
-
-# For USB
-	$(call KCONFIG_DISABLE_OPT,CONFIG_USB)
-	$(call KCONFIG_ENABLE_OPT,CONFIG_USB)
-	$(call KCONFIG_ENABLE_OPT,CONFIG_USB_DWC3)
-	$(call KCONFIG_DISABLE_OPT,CONFIG_USB_DWC3_GADGET)
-	$(call KCONFIG_ENABLE_OPT,CONFIG_USB_DWC3_HOST)
-	$(call KCONFIG_ENABLE_OPT,CONFIG_ARM_IMX_BUS_DEVFREQ)
-	$(call KCONFIG_ENABLE_OPT,CONFIG_TYPEC_TCPCI)
-	$(call KCONFIG_ENABLE_OPT,CONFIG_TYPEC_SWITCH_GPIO)
 endef

 $(eval $(ix-board))
@@ -1,51 +0,0 @@
-define inner-ix-board
-
-$(2)_VERSION = ix-board
-$(2)_LICENSE = BSD-3-Clause
-$(2)_LICENSE_FILES = LICENSE
-$(2)_SITE_METHOD = local
-$(2)_SITE = $$(BR2_EXTERNAL_INFIX_PATH)/src/board/$(1)
-$(2)_REDISTRIBUTE = NO
-
-# The kernel must be built first.
-$(2)_DEPENDENCIES += \
-	linux \
-	$$(BR2_MAKE_HOST_DEPENDENCY)
-
-# This is only defined in some infrastructures (e.g. autotools, cmake),
-# but not in others (e.g. generic). So define it here as well.
-$(2)_MAKE ?= $$(BR2_MAKE)
-
-define $(2)_DTBS_BUILD
-	@$$(call MESSAGE,"Building device tree blob(s)")
-	$$(LINUX_MAKE_ENV) $$($$(PKG)_MAKE) \
-		-C $$(LINUX_DIR) \
-		$$(LINUX_MAKE_FLAGS) \
-		$$($(2)_DTB_MAKE_OPTS) \
-		PWD=$$(@D)/dts \
-		M=$$(@D)/dts \
-		modules
-endef
-$(2)_POST_BUILD_HOOKS += $(2)_DTBS_BUILD
-
-define $(2)_DTBS_INSTALL_TARGET
-	@$$(call MESSAGE,"Installing device tree blob(s)")
-	$$(TARGET_MAKE_ENV) $$(TARGET_CONFIGURE_OPTS) $$($$(PKG)_MAKE) \
-		-f $$(BR2_EXTERNAL_INFIX_PATH)/package/board/dtb-inst.makefile \
-		-C $$(@D)/dts \
-		DESTDIR="$$(TARGET_DIR)" \
-		install
-endef
-$(2)_POST_INSTALL_TARGET_HOOKS += $(2)_DTBS_INSTALL_TARGET
-
-define $(2)_OVERLAY_INSTALL_TARGET
-	@test -d $$(@D)/rootfs && \
-	$$(call MESSAGE,"Copying overlay") && \
-	$$(call SYSTEM_RSYNC,$$(@D)/rootfs,$(TARGET_DIR)) || \
-	true
-endef
-$(2)_POST_INSTALL_TARGET_HOOKS += $(2)_OVERLAY_INSTALL_TARGET
-
-endef
-
-ix-board = $(call inner-ix-board,$(pkgname),$(call UPPERCASE,$(pkgname)))
@@ -25,11 +25,6 @@ else
 CONFD_CONF_OPTS += --disable-containers
 endif

-ifeq ($(BR2_PACKAGE_FEATURE_WIFI),y)
-CONFD_CONF_OPTS += --enable-wifi
-else
-CONFD_CONF_OPTS += --disable-wifi
-endif
 define CONFD_INSTALL_EXTRA
 	for fn in confd.conf resolvconf.conf; do \
 		cp $(CONFD_PKGDIR)/$$fn  $(FINIT_D)/available/; \
@@ -40,30 +35,13 @@ define CONFD_INSTALL_EXTRA
 	cp $(CONFD_PKGDIR)/avahi.service $(TARGET_DIR)/etc/avahi/services/netconf.service
 endef

-NETOPEER2_SEARCHPATH=$(TARGET_DIR)/usr/share/yang/modules/netopeer2/
-SYSREPO_SEARCHPATH=$(TARGET_DIR)/usr/share/yang/modules/sysrepo/
-LIBNETCONF2_SEARCHPATH=$(TARGET_DIR)/usr/share/yang/modules/libnetconf2/
-CONFD_SEARCHPATH=$(TARGET_DIR)/usr/share/yang/modules/confd/
-TEST_MODE_SEARCHPATH=$(TARGET_DIR)/usr/share/yang/modules/test-mode/
-ROUSETTE_SEARCHPATH=$(TARGET_DIR)/usr/share/yang/modules/rousette/
 COMMON_SYSREPO_ENV = \
 	SYSREPO_SHM_PREFIX=$(CONFD_SYSREPO_SHM_PREFIX) \
 	SYSREPOCTL_EXECUTABLE="$(HOST_DIR)/bin/sysrepoctl" \
 	SYSREPOCFG_EXECUTABLE="$(HOST_DIR)/bin/sysrepocfg" \
-	SEARCH_PATH="$(NETOPEER2_SEARCHPATH) $(SYSREPO_SEARCHPATH) $(LIBNETCONF2_SEARCHPATH) $(TEST_MODE_SEARCHPATH) $(CONFD_SEARCHPATH) $(ROUSETTE_SEARCHPATH)"
-
+	SEARCH_PATH="$(TARGET_DIR)/usr/share/yang/modules/confd/"

 define CONFD_INSTALL_YANG_MODULES
-	$(COMMON_SYSREPO_ENV) \
-	$(BR2_EXTERNAL_INFIX_PATH)/utils/srload $(@D)/yang/sysrepo.inc
-	$(COMMON_SYSREPO_ENV) \
-	$(BR2_EXTERNAL_INFIX_PATH)/utils/srload $(@D)/yang/libnetconf2.inc
-	$(COMMON_SYSREPO_ENV) \
-	$(BR2_EXTERNAL_INFIX_PATH)/utils/srload $(@D)/yang/netopeer2.inc
-	$(COMMON_SYSREPO_ENV) \
-	$(BR2_EXTERNAL_INFIX_PATH)/utils/srload $(@D)/yang/rousette.inc
-	$(COMMON_SYSREPO_ENV) \
-	$(BR2_EXTERNAL_INFIX_PATH)/utils/srload $(@D)/yang/test-mode.inc
 	$(COMMON_SYSREPO_ENV) \
 	$(BR2_EXTERNAL_INFIX_PATH)/utils/srload $(@D)/yang/confd.inc
 endef
@@ -74,42 +52,20 @@ define CONFD_INSTALL_YANG_MODULES_CONTAINERS
 	$(BR2_EXTERNAL_INFIX_PATH)/utils/srload $(@D)/yang/containers.inc
 endef
 endif
-ifeq ($(BR2_PACKAGE_FEATURE_WIFI),y)
-define CONFD_INSTALL_YANG_MODULES_WIFI
-	$(COMMON_SYSREPO_ENV) \
-	$(BR2_EXTERNAL_INFIX_PATH)/utils/srload $(@D)/yang/wifi.inc
-endef
-endif

-# PER_PACKAGE_DIR
-# Since the last package in the dependency chain that runs sysrepoctl is confd, we need to
-# manually copy the *real* content here from host-sysrepo.
-ifeq ($(BR2_PER_PACKAGE_DIRECTORIES),y)
-define CONFD_INSTALL_IN_ROMFS
-	cp -a $(PER_PACKAGE_DIR)/host-sysrepo/target/etc/sysrepo/* $(PER_PACKAGE_DIR)/confd/target/etc/sysrepo/
+define CONFD_PERMISSIONS
+	/etc/sysrepo/data/ r 660 root wheel - - - - -
+	/etc/sysrepo/data  d 770 root wheel - - - - -
 endef
-endif

-# PER_PACKAGE_DIR
-# Need to do some special stuff if using per-packet (parallel) since sysrepo install the submodules in
-# $(PER_PACKAGE_DIR)/host-sysrepo/target/etc/sysrepo/ but $(PER_PACKAGE_DIR)/confd/target/etc/sysrepo/ contains remains
-# of other packets that have installed its models (netopeer2), we want the result in $(PER_PACKAGE_DIR)/host-sysrepo/target/etc/sysrepo/
-define CONFD_EMPTY_SYSREPO
-	rm -rf $(TARGET_DIR)/etc/sysrepo/*
-	if [ "$(BR2_PER_PACKAGE_DIRECTORIES)" = "y" ]; then \
-		rm -rf $(PER_PACKAGE_DIR)/host-sysrepo/target/etc/sysrepo/* $(PER_PACKAGE_DIR)/confd/target/etc/sysrepo/*; \
-	fi
-endef
 define CONFD_CLEANUP
 	rm -f /dev/shm/$(CONFD_SYSREPO_SHM_PREFIX)*
 endef
-CONFD_PRE_BUILD_HOOKS += CONFD_EMPTY_SYSREPO
-CONFD_PRE_BUILD_HOOKS += CONFD_CLEANUP
+
+CONFD_PRE_INSTALL_TARGET_HOOKS += CONFD_CLEANUP
 CONFD_POST_INSTALL_TARGET_HOOKS += CONFD_INSTALL_EXTRA
 CONFD_POST_INSTALL_TARGET_HOOKS += CONFD_INSTALL_YANG_MODULES
 CONFD_POST_INSTALL_TARGET_HOOKS += CONFD_INSTALL_YANG_MODULES_CONTAINERS
-CONFD_POST_INSTALL_TARGET_HOOKS += CONFD_INSTALL_YANG_MODULES_WIFI
-CONFD_POST_INSTALL_TARGET_HOOKS += CONFD_INSTALL_IN_ROMFS
-CONFD_TARGET_FINALIZE_HOOKS += CONFD_CLEANUP
+CONFD_POST_INSTALL_TARGET_HOOKS += CONFD_CLEANUP

 $(eval $(autotools-package))
@@ -1,4 +1,4 @@
 # Locally computed
 sha256  ab15fd526bd8dd18a9e77ebc139656bf4d33e97fc7238cd11bf60e2b9b8666c6  COPYING
-sha256  c4995c0a7a96d5273c97c7c026c03ff5e2a42cade6d66808fdeba0fae9a343d8  curios-httpd-oci-arm64-v25.06.0.tar.gz
-sha256  4d48a03b38eabe558052ecbab7560e6d9f995311eb91b90ddaac336b5f001a5e  curios-httpd-oci-amd64-v25.06.0.tar.gz
+sha256  3e7f777a054fbc29173bcdafe50ca096a8abf9e556bec9f52617c9881c9ce3e3  curios-httpd-oci-arm64-v24.11.0.tar.gz
+sha256  bfa52f712301427a21b89cfee31ca315e1404973affaf34b23978a70a3ec4f63  curios-httpd-oci-amd64-v24.11.0.tar.gz
@@ -4,7 +4,7 @@
 #
 ################################################################################

-CURIOS_HTTPD_VERSION = v25.06.0
+CURIOS_HTTPD_VERSION = v24.11.0
 CURIOS_HTTPD_SOURCE = curios-httpd-oci-$(GO_GOARCH)-$(CURIOS_HTTPD_VERSION).tar.gz
 CURIOS_HTTPD_SITE = https://github.com/kernelkit/curiOS/releases/download/$(CURIOS_HTTPD_VERSION)
 CURIOS_HTTPD_LICENSE = GPL
@@ -1,4 +1,4 @@
 # Locally computed
 sha256  ab15fd526bd8dd18a9e77ebc139656bf4d33e97fc7238cd11bf60e2b9b8666c6  COPYING
-sha256  94c7173fe4b8e64dcb1e0f67b974c23753ccce73bc07212a87e35f41a41ae5b8  curios-nftables-oci-arm64-v25.06.0.tar.gz
-sha256  feceb82327cccb4433db63e469f6ed115c10c0266242f0171b85ae1a88472757  curios-nftables-oci-amd64-v25.06.0.tar.gz
+sha256  95b3625587738cb0a8cc6e9eb41d10a0b2f77ae99dbb1d9b213148d35268eb75  curios-nftables-oci-arm64-v24.11.0.tar.gz
+sha256  4f61ccef90721b8f95a5c7b77b69ccccb5dbd215b9c38986d20e5b245244e902  curios-nftables-oci-amd64-v24.11.0.tar.gz
@@ -4,7 +4,7 @@
 #
 ################################################################################

-CURIOS_NFTABLES_VERSION = v25.06.0
+CURIOS_NFTABLES_VERSION = v24.11.0
 CURIOS_NFTABLES_SOURCE = curios-nftables-oci-$(GO_GOARCH)-$(CURIOS_NFTABLES_VERSION).tar.gz
 CURIOS_NFTABLES_SITE = https://github.com/kernelkit/curiOS/releases/download/$(CURIOS_NFTABLES_VERSION)
 CURIOS_NFTABLES_LICENSE = GPL
@@ -1,20 +0,0 @@
-config BR2_PACKAGE_FEATURE_WIFI
-	bool "Feature Wi-Fi"
-	select BR2_PACKAGE_WPA_SUPPLICANT
-	select BR2_PACKAGE_WPA_SUPPLICANT_WPA3
-	select BR2_PACKAGE_WPA_SUPPLICANT_DEBUG_SYSLOG
-	select BR2_PACKAGE_WPA_SUPPLICANT_AUTOSCAN
-	select BR2_PACKAGE_WPA_SUPPLICANT_CLI
-	select BR2_PACKAGE_WIRELESS_REGDB
-	select BR2_PACKAGE_IW
-	help
-	  Enables WiFi in Infix. Enables all requried applications.
-
-config BR2_PACKAGE_FEATURE_WIFI_DONGLE_REALTEK
-       bool "Realtek USB WiFi Dongles"
-       depends on BR2_PACKAGE_FEATURE_WIFI
-       select BR2_PACKAGE_LINUX_FIRMWARE
-       select BR2_PACKAGE_LINUX_FIRMWARE_RTL_RTW88
-       select BR2_PACKAGE_LINUX_FIRMWARE_RTL_RTW89
-       help
-         Enables Support for RTW88 and RTW89 USB dongles.
@@ -1,42 +0,0 @@
-################################################################################
-#
-# Wi-Fi support
-#
-################################################################################
-
-FEATURE_WIFI_PACKAGE_VERSION = 1.0
-FEATURE_WIFI_PACKAGE_LICENSE = MIT
-
-define FEATURE_WIFI_LINUX_CONFIG_FIXUPS
-	$(call KCONFIG_ENABLE_OPT,CONFIG_WLAN)
-	$(call KCONFIG_ENABLE_OPT,CONFIG_RFKILL)
-	$(call KCONFIG_SET_OPT,CONFIG_MAC80211,m)
-	$(call KCONFIG_SET_OPT,CONFIG_CFG80211,m)
-
-	$(if $(filter y,$(BR2_PACKAGE_FEATURE_WIFI_DONGLE_REALTEK)),
-		$(call KCONFIG_ENABLE_OPT,CONFIG_WLAN_VENDOR_REALTEK)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW89)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88_8703B)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88_8723CS)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88_8723D)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88_8723DE)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88_8723DS)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88_8723DU)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88_8723X)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88_8821C)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88_8821CE)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88_8821CS)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88_8821CU)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88_8822B)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88_8822BE)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88_8822BS)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88_8822BU)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88_8822C)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88_8822CU)
-		$(call KCONFIG_ENABLE_OPT,CONFIG_RTW88_8822CE)
-	)
-endef
-
-
-$(eval $(generic-package))
@@ -1,5 +1,5 @@
 # From https://github.com/troglobit/finit/releases/
-sha256  b6a0a2f98c860cf9fe5dfe7e3601d922957ad7880ae29919176ab960b7b96e70  finit-4.12.tar.gz
+sha256  7e49a3df58c5aedfff9537b7ff34b9238fc28b523d4dbacc316d606c7af5e335  finit-4.11.tar.gz

 # Locally calculated
 sha256  2fd62c0fe6ea6d1861669f4c87bda83a0b5ceca64f4baa4d16dd078fbd218c14  LICENSE
@@ -4,7 +4,7 @@
 #
 ################################################################################

-FINIT_VERSION = 4.12
+FINIT_VERSION = 4.11
 FINIT_SITE = https://github.com/troglobit/finit/releases/download/$(FINIT_VERSION)
 FINIT_LICENSE = MIT
 FINIT_LICENSE_FILES = LICENSE
@@ -28,6 +28,7 @@ KLISH_PLUGIN_INFIX_CONF_OPTS += --enable-shell
 else
 KLISH_PLUGIN_INFIX_CONF_OPTS += --disable-shell
 endif
+
 ifeq ($(BR2_PACKAGE_BASH),y)
 KLISH_PLUGIN_INFIX_CONF_OPTS += --with-shell=/bin/bash
 else
@@ -1,3 +1,3 @@
 # Locally calculated
 sha256  9d9d33b873917ca5d0bdcc47a36d2fd385971ab0c045d1472fcadf95ee5bcf5b  LICENCE
-sha256  eff4cc740c6cfe2c03f7aeee2092f16616575d1462b1ad67d9f476463a6bf3fe  klish-1c5ae4bbb49a0d7e1425ca1afe8518b873ee84cb-git4.tar.gz
+sha256  79c9b16b227320fea358114738933ea25be33f8f263d3eec1f83fb603c0c0b22  klish-019ebd2704e322b5d500f5687d526431e535eec8-git4.tar.gz
@@ -4,7 +4,7 @@
 #
 ################################################################################

-KLISH_VERSION = 1c5ae4bbb49a0d7e1425ca1afe8518b873ee84cb
+KLISH_VERSION = 019ebd2704e322b5d500f5687d526431e535eec8
 KLISH_SITE = https://github.com/kernelkit/klish.git
 #KLISH_VERSION = tags/3.0.0
 #KLISH_SITE = https://src.libcode.org/pkun/klish.git
@@ -11,7 +11,6 @@ LANDING_LICENSE = ISC
 LANDING_LICENSE_FILES = LICENSE

 define LANDING_INSTALL_TARGET_CMDS
-        mkdir -p $(TARGET_DIR)/usr/html/
 	cp $(@D)/*.html $(TARGET_DIR)/usr/html/
 	cp $(@D)/*.png  $(TARGET_DIR)/usr/html/
 endef
@@ -1,11 +1,11 @@
 From d0f6422fee7a46fcb7445c88f499f61b3eb0ead0 Mon Sep 17 00:00:00 2001
 From: Adam Piecek <Adam.Piecek@cesnet.cz>
 Date: Wed, 23 Oct 2024 14:37:09 +0200
-Subject: [PATCH 01/18] added support for RpcYang in Context::parseOp
+Subject: [PATCH 1/8] added support for RpcYang in Context::parseOp
 MIME-Version: 1.0
 Content-Type: text/plain; charset=UTF-8
 Content-Transfer-Encoding: 8bit
-Organization: Wires
+Organization: Addiva Elektronik

 Change-Id: I25182ea2d042be1e6e4246e18aee260cc032e547
 Signed-off-by: Mattias Walström <lazzer@gmail.com>
@@ -1,11 +1,11 @@
 From 7e015f3486bdbb54f1dcc2e2ce51102b1d623081 Mon Sep 17 00:00:00 2001
 From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Pecka?= <tomas.pecka@cesnet.cz>
 Date: Wed, 23 Oct 2024 12:52:24 +0200
-Subject: [PATCH 02/18] throw when lyd_validate_all returns error
+Subject: [PATCH 2/8] throw when lyd_validate_all returns error
 MIME-Version: 1.0
 Content-Type: text/plain; charset=UTF-8
 Content-Transfer-Encoding: 8bit
-Organization: Wires
+Organization: Addiva Elektronik

 Bug: https://github.com/CESNET/libyang-cpp/issues/20
 Change-Id: I005a2f1b057978573a4046e7b4cc31d77e36fde3
@@ -1,11 +1,11 @@
 From 490d8bb242d33213b948485f5b94c55e22cf86a6 Mon Sep 17 00:00:00 2001
 From: =?UTF-8?q?Jan=20Kundr=C3=A1t?= <jan.kundrat@cesnet.cz>
 Date: Thu, 21 Nov 2024 11:32:44 +0100
-Subject: [PATCH 03/18] remove a misleading comment
+Subject: [PATCH 3/8] remove a misleading comment
 MIME-Version: 1.0
 Content-Type: text/plain; charset=UTF-8
 Content-Transfer-Encoding: 8bit
-Organization: Wires
+Organization: Addiva Elektronik

 The whole intention within action's input/output handling here was to
 put some emphasis on the fact that we aren't tracking the input/output
@@ -1,11 +1,11 @@
 From e1b17386cf61048d2fe27fffb3b763981a225f52 Mon Sep 17 00:00:00 2001
 From: =?UTF-8?q?Bed=C5=99ich=20Schindler?= <bedrich.schindler@gmail.com>
 Date: Wed, 27 Nov 2024 09:47:47 +0100
-Subject: [PATCH 04/18] schema: improve `List::keys()` not to use `std::move`
+Subject: [PATCH 4/8] schema: improve `List::keys()` not to use `std::move`
 MIME-Version: 1.0
 Content-Type: text/plain; charset=UTF-8
 Content-Transfer-Encoding: 8bit
-Organization: Wires
+Organization: Addiva Elektronik

 `List::keys()` used `std::move` while iterating over array of leafs.
 This was solved without using `std::move`.
@@ -1,11 +1,11 @@
 From 1102ecdcafbc9206f59b383769687e418557838e Mon Sep 17 00:00:00 2001
 From: =?UTF-8?q?Bed=C5=99ich=20Schindler?= <bedrich.schindler@gmail.com>
 Date: Mon, 25 Nov 2024 15:54:02 +0100
-Subject: [PATCH 05/18] schema: make leaf-list's `default` statement available
+Subject: [PATCH 5/8] schema: make leaf-list's `default` statement available
 MIME-Version: 1.0
 Content-Type: text/plain; charset=UTF-8
 Content-Transfer-Encoding: 8bit
-Organization: Wires
+Organization: Addiva Elektronik

 Make leaf-list's `default` statement available so that it can be
 accessed if end-user requires reading schema nodes.
@@ -1,11 +1,11 @@
 From 01f2633cef60495d5cafc4b4b1f25273b03ab3cd Mon Sep 17 00:00:00 2001
 From: =?UTF-8?q?Bed=C5=99ich=20Schindler?= <bedrich.schindler@gmail.com>
 Date: Tue, 22 Oct 2024 15:11:30 +0200
-Subject: [PATCH 06/18] schema: Make choice and case statements available
+Subject: [PATCH 6/8] schema: Make choice and case statements available
 MIME-Version: 1.0
 Content-Type: text/plain; charset=UTF-8
 Content-Transfer-Encoding: 8bit
-Organization: Wires
+Organization: Addiva Elektronik

 Make choice and case statements available so that they can be accessed
 if end-user requires reading schema nodes.
@@ -1,12 +1,12 @@
 From a1acdc794facf8cbf113f73274ecebd5898c81a1 Mon Sep 17 00:00:00 2001
 From: =?UTF-8?q?Jan=20Kundr=C3=A1t?= <jan.kundrat@cesnet.cz>
 Date: Tue, 17 Dec 2024 15:08:43 +0100
-Subject: [PATCH 07/18] Wrap lyd_change_term for changing the value for a
+Subject: [PATCH 7/8] Wrap lyd_change_term for changing the value for a
 terminal node
 MIME-Version: 1.0
 Content-Type: text/plain; charset=UTF-8
 Content-Transfer-Encoding: 8bit
-Organization: Wires
+Organization: Addiva Elektronik

 Previously, the code would require a newPath(...,
 libyang::CreationOptions::Update), which is quite a mouthful.
@@ -1,652 +0,0 @@
-From 32b200ed06e9adb44a8d4ce6771f18812a54d06e Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Bed=C5=99ich=20Schindler?= <bedrich.schindler@gmail.com>
-Date: Wed, 20 Nov 2024 10:20:19 +0100
-Subject: [PATCH 08/18] Add `Module::child()`, `Module::childrenDfs()` and
- `Module::immediateChildren()`
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-Organization: Wires
-
-Those functions are implemented in the same manner as in `SchemaNode`
-and allows to walk through modules children. This is counterpart to
-already implemented `Module::childInstantiables()` that returns
-instantiables schema nodes. These return all nodes, including
-the schema-only nodes such as choice and case if end-user needs
-to read its schema.
-
-While the implementation is inspired by functions in `SchemaNode`,
-imlementation of `Module::parent()` and `Module::siblings()` was omitted
-as those do no make sense on `Module`.
-
-Change-Id: I38c8374304f859d65343d04d08302e07deb05f27
-Signed-off-by: Mattias Walström <lazzer@gmail.com>
---
- include/libyang-cpp/Collection.hpp |   1 +
- include/libyang-cpp/Module.hpp     |   5 +
- src/Module.cpp                     |  40 +++
- tests/context.cpp                  |   5 +
- tests/example_schema.hpp           |  21 ++
- tests/schema_node.cpp              | 409 +++++++++++++++++++----------
- 6 files changed, 346 insertions(+), 135 deletions(-)
-
-diff --git a/include/libyang-cpp/Collection.hpp b/include/libyang-cpp/Collection.hpp
-index 557a0a2..4324791 100644
--- a/include/libyang-cpp/Collection.hpp
-+++ b/include/libyang-cpp/Collection.hpp
-@@ -98,6 +98,7 @@ class LIBYANG_CPP_EXPORT Collection {
- public:
-     friend DataNode;
-     friend Iterator<NodeType, ITER_TYPE>;
-+    friend Module;
-     friend SchemaNode;
-     ~Collection();
-     Collection(const Collection<NodeType, ITER_TYPE>&);
-diff --git a/include/libyang-cpp/Module.hpp b/include/libyang-cpp/Module.hpp
-index f10c36f..ab20d36 100644
--- a/include/libyang-cpp/Module.hpp
-+++ b/include/libyang-cpp/Module.hpp
-@@ -34,6 +34,8 @@ class ChildInstanstiables;
- class Identity;
- class SchemaNode;
- class SubmoduleParsed;
-+template <typename NodeType, IterationType ITER_TYPE>
-+class Collection;
- 
- namespace types {
- class IdentityRef;
-@@ -86,7 +88,10 @@ public:
- 
-     std::vector<Identity> identities() const;
- 
-+    std::optional<SchemaNode> child() const;
-     ChildInstanstiables childInstantiables() const;
-+    libyang::Collection<SchemaNode, IterationType::Dfs> childrenDfs() const;
-+    Collection<SchemaNode, IterationType::Sibling> immediateChildren() const;
-     std::vector<SchemaNode> actionRpcs() const;
- 
-     std::string printStr(const SchemaOutputFormat format, const std::optional<SchemaPrintFlags> flags = std::nullopt, std::optional<size_t> lineLength = std::nullopt) const;
-diff --git a/src/Module.cpp b/src/Module.cpp
-index 4dc9e3b..d6d4023 100644
--- a/src/Module.cpp
-+++ b/src/Module.cpp
-@@ -8,6 +8,7 @@
- 
- #include <algorithm>
- #include <libyang-cpp/ChildInstantiables.hpp>
-+#include <libyang-cpp/Collection.hpp>
- #include <libyang-cpp/Module.hpp>
- #include <libyang-cpp/Utils.hpp>
- #include <libyang/libyang.h>
-@@ -178,6 +179,23 @@ std::vector<Identity> Module::identities() const
-     return res;
- }
- 
-+/**
-+ * @brief Returns the first child node of this module.
-+ * @return The child, or std::nullopt if there are no children.
-+ */
-+std::optional<SchemaNode> Module::child() const
-+{
-+    if (!m_module->implemented) {
-+        throw Error{"Module::child: module is not implemented"};
-+    }
-+
-+    if (!m_module->compiled->data) {
-+        return std::nullopt;
-+    }
-+
-+    return SchemaNode{m_module->compiled->data, m_ctx};
-+}
-+
- /**
-  * @brief Returns a collection of data instantiable top-level nodes of this module.
-  *
-@@ -191,6 +209,28 @@ ChildInstanstiables Module::childInstantiables() const
-     return ChildInstanstiables{nullptr, m_module->compiled, m_ctx};
- }
- 
-+/**
-+ * @brief Returns a collection for iterating depth-first over the subtree this module points to.
-+ */
-+Collection<SchemaNode, IterationType::Dfs> Module::childrenDfs() const
-+{
-+    if (!m_module->implemented) {
-+        throw Error{"Module::childrenDfs: module is not implemented"};
-+    }
-+    return Collection<SchemaNode, IterationType::Dfs>{m_module->compiled->data, m_ctx};
-+}
-+
-+/**
-+ * @brief Returns a collection for iterating over the immediate children of where this module points to.
-+ *
-+ * This is a convenience function for iterating over this->child().siblings() which does not throw even when module has no children.
-+ */
-+Collection<SchemaNode, IterationType::Sibling> Module::immediateChildren() const
-+{
-+    auto c = child();
-+    return c ? c->siblings() : Collection<SchemaNode, IterationType::Sibling>{nullptr, nullptr};
-+}
-+
- /**
-  * @brief Returns a collection of RPC nodes (not action nodes) as SchemaNode
-  *
-diff --git a/tests/context.cpp b/tests/context.cpp
-index 5929b75..25343db 100644
--- a/tests/context.cpp
-+++ b/tests/context.cpp
-@@ -713,6 +713,11 @@ TEST_CASE("context")
-   +--rw anydataWithMandatoryChild       anydata
-   +--rw anyxmlBasic?                    anyxml
-   +--rw anyxmlWithMandatoryChild        anyxml
-+  +--rw (choiceOnModule)?
-+  |  +--:(case1)
-+  |  |  +--rw choiceOnModuleLeaf1?   string
-+  |  +--:(case2)
-+  |     +--rw choiceOnModuleLeaf2?   string
-   +--rw choiceBasicContainer
-   |  +--rw (choiceBasic)?
-   |     +--:(case1)
-diff --git a/tests/example_schema.hpp b/tests/example_schema.hpp
-index ae3b4de..0d8acb9 100644
--- a/tests/example_schema.hpp
-+++ b/tests/example_schema.hpp
-@@ -390,6 +390,19 @@ module type_module {
-         mandatory true;
-     }
- 
-+    choice choiceOnModule {
-+        case case1 {
-+            leaf choiceOnModuleLeaf1 {
-+                type string;
-+            }
-+        }
-+        case case2 {
-+            leaf choiceOnModuleLeaf2 {
-+                type string;
-+            }
-+        }
-+    }
-+
-     container choiceBasicContainer {
-         choice choiceBasic {
-             case case1 {
-@@ -787,6 +800,14 @@ module type_module {
- }
- )"s;
- 
-+const auto empty_module = R"(
-+module empty_module {
-+    yang-version 1.1;
-+    namespace "e";
-+    prefix "e";
-+}
-+)"s;
-+
- const auto with_inet_types_module = R"(
- module with-inet-types {
-   yang-version 1.1;
-diff --git a/tests/schema_node.cpp b/tests/schema_node.cpp
-index 8d74bd2..0001377 100644
--- a/tests/schema_node.cpp
-+++ b/tests/schema_node.cpp
-@@ -24,8 +24,10 @@ TEST_CASE("SchemaNode")
-         libyang::ContextOptions::SetPrivParsed | libyang::ContextOptions::NoYangLibrary | libyang::ContextOptions::DisableSearchCwd};
-     ctx->parseModule(example_schema, libyang::SchemaFormat::YANG);
-     ctx->parseModule(type_module, libyang::SchemaFormat::YANG);
-+    ctx->parseModule(empty_module, libyang::SchemaFormat::YANG);
-     ctxWithParsed->parseModule(example_schema, libyang::SchemaFormat::YANG);
-     ctxWithParsed->parseModule(type_module, libyang::SchemaFormat::YANG);
-+    ctxWithParsed->parseModule(empty_module, libyang::SchemaFormat::YANG);
- 
-     DOCTEST_SUBCASE("context lifetime")
-     {
-@@ -74,10 +76,34 @@ TEST_CASE("SchemaNode")
-         REQUIRE(node->schema().path() == "/example-schema:person");
-     }
- 
-    DOCTEST_SUBCASE("SchemaNode::child")
-+    DOCTEST_SUBCASE("child")
-     {
-        REQUIRE(ctx->findPath("/type_module:listAdvancedWithTwoKey").child()->name() == "first");
-        REQUIRE(!ctx->findPath("/type_module:leafString").child().has_value());
-+        DOCTEST_SUBCASE("implemented module")
-+        {
-+            DOCTEST_SUBCASE("SchemaNode::child")
-+            {
-+                REQUIRE(ctx->findPath("/type_module:listAdvancedWithTwoKey").child()->name() == "first");
-+                REQUIRE(!ctx->findPath("/type_module:leafString").child().has_value());
-+            }
-+
-+            DOCTEST_SUBCASE("Module::child")
-+            {
-+                REQUIRE(ctx->getModule("type_module", std::nullopt)->child()->name() == "anydataBasic");
-+                REQUIRE(!ctx->getModule("empty_module", std::nullopt)->child());
-+            }
-+        }
-+
-+        DOCTEST_SUBCASE("unimplemented module")
-+        {
-+            DOCTEST_SUBCASE("Module::child")
-+            {
-+                ctx->setSearchDir(TESTS_DIR / "yang");
-+                auto modYangPatch = ctx->loadModule("ietf-yang-patch", std::nullopt);
-+                auto modRestconf = ctx->getModule("ietf-restconf", "2017-01-26");
-+                REQUIRE(!modRestconf->implemented());
-+                REQUIRE_THROWS_WITH_AS(modRestconf->child(), "Module::child: module is not implemented", libyang::Error);
-+            }
-+        }
-     }
- 
-     DOCTEST_SUBCASE("SchemaNode::config")
-@@ -160,162 +186,275 @@ TEST_CASE("SchemaNode")
- 
-     DOCTEST_SUBCASE("childInstantiables")
-     {
-        std::vector<std::string> expectedPaths;
-        std::optional<libyang::ChildInstanstiables> children;
-
-        DOCTEST_SUBCASE("SchemaNode::childInstantiables")
-+        DOCTEST_SUBCASE("implemented module")
-         {
-            expectedPaths = {
-                "/type_module:listAdvancedWithOneKey/lol",
-                "/type_module:listAdvancedWithOneKey/notKey1",
-                "/type_module:listAdvancedWithOneKey/notKey2",
-                "/type_module:listAdvancedWithOneKey/notKey3",
-                "/type_module:listAdvancedWithOneKey/notKey4",
-            };
-+            std::vector<std::string> expectedPaths;
-+            std::optional<libyang::ChildInstanstiables> children;
-+
-+            DOCTEST_SUBCASE("SchemaNode::childInstantiables")
-+            {
-+                expectedPaths = {
-+                    "/type_module:listAdvancedWithOneKey/lol",
-+                    "/type_module:listAdvancedWithOneKey/notKey1",
-+                    "/type_module:listAdvancedWithOneKey/notKey2",
-+                    "/type_module:listAdvancedWithOneKey/notKey3",
-+                    "/type_module:listAdvancedWithOneKey/notKey4",
-+                };
-+
-+                children = ctx->findPath("/type_module:listAdvancedWithOneKey").childInstantiables();
-+            }
- 
-            children = ctx->findPath("/type_module:listAdvancedWithOneKey").childInstantiables();
-        }
-+            DOCTEST_SUBCASE("Module::childInstantiables")
-+            {
-+                expectedPaths = {
-+                    "/type_module:anydataBasic",
-+                    "/type_module:anydataWithMandatoryChild",
-+                    "/type_module:anyxmlBasic",
-+                    "/type_module:anyxmlWithMandatoryChild",
-+                    "/type_module:choiceOnModuleLeaf1",
-+                    "/type_module:choiceOnModuleLeaf2",
-+                    "/type_module:choiceBasicContainer",
-+                    "/type_module:choiceWithMandatoryContainer",
-+                    "/type_module:choiceWithDefaultContainer",
-+                    "/type_module:implicitCaseContainer",
-+                    "/type_module:leafBinary",
-+                    "/type_module:leafBits",
-+                    "/type_module:leafEnum",
-+                    "/type_module:leafEnum2",
-+                    "/type_module:leafNumber",
-+                    "/type_module:leafRef",
-+                    "/type_module:leafRefRelaxed",
-+                    "/type_module:leafString",
-+                    "/type_module:leafUnion",
-+                    "/type_module:meal",
-+                    "/type_module:leafWithConfigFalse",
-+                    "/type_module:leafWithDefaultValue",
-+                    "/type_module:leafWithDescription",
-+                    "/type_module:leafWithMandatoryTrue",
-+                    "/type_module:leafWithStatusDeprecated",
-+                    "/type_module:leafWithStatusObsolete",
-+                    "/type_module:leafWithUnits",
-+                    "/type_module:iid-valid",
-+                    "/type_module:iid-relaxed",
-+                    "/type_module:leafListBasic",
-+                    "/type_module:leafListWithDefault",
-+                    "/type_module:leafListWithMinMaxElements",
-+                    "/type_module:leafListWithUnits",
-+                    "/type_module:listBasic",
-+                    "/type_module:listAdvancedWithOneKey",
-+                    "/type_module:listAdvancedWithTwoKey",
-+                    "/type_module:listWithMinMaxElements",
-+                    "/type_module:numeric",
-+                    "/type_module:container",
-+                    "/type_module:containerWithMandatoryChild",
-+                };
-+                children = ctx->getModule("type_module", std::nullopt)->childInstantiables();
-+            }
- 
-        DOCTEST_SUBCASE("Module::childInstantiables")
-        {
-            expectedPaths = {
-                "/type_module:anydataBasic",
-                "/type_module:anydataWithMandatoryChild",
-                "/type_module:anyxmlBasic",
-                "/type_module:anyxmlWithMandatoryChild",
-                "/type_module:choiceBasicContainer",
-                "/type_module:choiceWithMandatoryContainer",
-                "/type_module:choiceWithDefaultContainer",
-                "/type_module:implicitCaseContainer",
-                "/type_module:leafBinary",
-                "/type_module:leafBits",
-                "/type_module:leafEnum",
-                "/type_module:leafEnum2",
-                "/type_module:leafNumber",
-                "/type_module:leafRef",
-                "/type_module:leafRefRelaxed",
-                "/type_module:leafString",
-                "/type_module:leafUnion",
-                "/type_module:meal",
-                "/type_module:leafWithConfigFalse",
-                "/type_module:leafWithDefaultValue",
-                "/type_module:leafWithDescription",
-                "/type_module:leafWithMandatoryTrue",
-                "/type_module:leafWithStatusDeprecated",
-                "/type_module:leafWithStatusObsolete",
-                "/type_module:leafWithUnits",
-                "/type_module:iid-valid",
-                "/type_module:iid-relaxed",
-                "/type_module:leafListBasic",
-                "/type_module:leafListWithDefault",
-                "/type_module:leafListWithMinMaxElements",
-                "/type_module:leafListWithUnits",
-                "/type_module:listBasic",
-                "/type_module:listAdvancedWithOneKey",
-                "/type_module:listAdvancedWithTwoKey",
-                "/type_module:listWithMinMaxElements",
-                "/type_module:numeric",
-                "/type_module:container",
-                "/type_module:containerWithMandatoryChild",
-            };
-            children = ctx->getModule("type_module", std::nullopt)->childInstantiables();
-        }
-+            std::vector<std::string> actualPaths;
-+            for (const auto& child : *children) {
-+                actualPaths.emplace_back(child.path());
-+            }
- 
-        std::vector<std::string> actualPaths;
-        for (const auto& child : *children) {
-            actualPaths.emplace_back(child.path());
-+            REQUIRE(expectedPaths == actualPaths);
-         }
- 
-        REQUIRE(expectedPaths == actualPaths);
-+        DOCTEST_SUBCASE("unimplemented module")
-+        {
-+            DOCTEST_SUBCASE("Module::childInstantiables")
-+            {
-+                ctx->setSearchDir(TESTS_DIR / "yang");
-+                auto modYangPatch = ctx->loadModule("ietf-yang-patch", std::nullopt);
-+                auto modRestconf = ctx->getModule("ietf-restconf", "2017-01-26");
-+                REQUIRE(!modRestconf->implemented());
-+                REQUIRE_THROWS_WITH_AS(modRestconf->childInstantiables(), "Module::childInstantiables: module is not implemented", libyang::Error);
-+            }
-+        }
-     }
- 
-    DOCTEST_SUBCASE("SchemaNode::childrenDfs")
-+    DOCTEST_SUBCASE("childrenDfs")
-     {
-        std::vector<std::string> expectedPaths;
-+        DOCTEST_SUBCASE("implemented module")
-+        {
-+            std::vector<std::string> expectedPaths;
-+            std::optional<libyang::Collection<libyang::SchemaNode, libyang::IterationType::Dfs>> children;
- 
-        const char* path;
-+            DOCTEST_SUBCASE("SchemaNode::childrenDfs")
-+            {
-+                DOCTEST_SUBCASE("listAdvancedWithTwoKey")
-+                {
-+                    expectedPaths = {
-+                        "/type_module:listAdvancedWithTwoKey",
-+                        "/type_module:listAdvancedWithTwoKey/first",
-+                        "/type_module:listAdvancedWithTwoKey/second",
-+                    };
-+                    children = ctx->findPath("/type_module:listAdvancedWithTwoKey").childrenDfs();
-+                }
- 
-        DOCTEST_SUBCASE("listAdvancedWithTwoKey")
-        {
-            expectedPaths = {
-                "/type_module:listAdvancedWithTwoKey",
-                "/type_module:listAdvancedWithTwoKey/first",
-                "/type_module:listAdvancedWithTwoKey/second",
-            };
-+                DOCTEST_SUBCASE("DFS on a leaf")
-+                {
-+                    expectedPaths = {
-+                        "/type_module:leafString",
-+                    };
-+                    children = ctx->findPath("/type_module:leafString").childrenDfs();
-+                }
-+            }
- 
-            path = "/type_module:listAdvancedWithTwoKey";
-        }
-+            DOCTEST_SUBCASE("Module::childrenDfs")
-+            {
-+                expectedPaths = {
-+                    "/type_module:anydataBasic",
-+                };
-+                children = ctx->getModule("type_module", std::nullopt)->childrenDfs();
-+            }
- 
-        DOCTEST_SUBCASE("DFS on a leaf")
-        {
-            expectedPaths = {
-                "/type_module:leafString",
-            };
-+            std::vector<std::string> actualPaths;
-+            for (const auto& it : *children) {
-+                actualPaths.emplace_back(it.path());
-+            }
- 
-            path = "/type_module:leafString";
-+            REQUIRE(actualPaths == expectedPaths);
-         }
- 
-        std::vector<std::string> actualPaths;
-        for (const auto& it : ctx->findPath(path).childrenDfs()) {
-            actualPaths.emplace_back(it.path());
-+        DOCTEST_SUBCASE("unimplemented module")
-+        {
-+            DOCTEST_SUBCASE("Module::childrenDfs")
-+            {
-+                ctx->setSearchDir(TESTS_DIR / "yang");
-+                auto modYangPatch = ctx->loadModule("ietf-yang-patch", std::nullopt);
-+                auto modRestconf = ctx->getModule("ietf-restconf", "2017-01-26");
-+                REQUIRE(!modRestconf->implemented());
-+                REQUIRE_THROWS_WITH_AS(modRestconf->childrenDfs(), "Module::childrenDfs: module is not implemented", libyang::Error);
-+            }
-         }
-
-        REQUIRE(actualPaths == expectedPaths);
-     }
- 
-    DOCTEST_SUBCASE("SchemaNode::immediateChildren")
-+    DOCTEST_SUBCASE("immediateChildren")
-     {
-        std::vector<std::string> expectedPaths;
-        const char* path;
-        DOCTEST_SUBCASE("listAdvancedWithTwoKey")
-        {
-            expectedPaths = {
-                "/type_module:listAdvancedWithTwoKey/first",
-                "/type_module:listAdvancedWithTwoKey/second",
-            };
-            path = "/type_module:listAdvancedWithTwoKey";
-        }
-        DOCTEST_SUBCASE("leaf")
-+        DOCTEST_SUBCASE("implemented module")
-         {
-            expectedPaths = {
-            };
-            path = "/type_module:leafString";
-        }
-        DOCTEST_SUBCASE("no recursion")
-        {
-            expectedPaths = {
-                "/type_module:container/x",
-                "/type_module:container/y",
-                "/type_module:container/z",
-            };
-            path = "/type_module:container";
-        }
-        DOCTEST_SUBCASE("empty container")
-        {
-            expectedPaths = {
-            };
-            path = "/type_module:container/y";
-        }
-        DOCTEST_SUBCASE("one item")
-        {
-            expectedPaths = {
-                "/type_module:container/z/z1",
-            };
-            path = "/type_module:container/z";
-+            std::vector<std::string> expectedPaths;
-+            std::optional<libyang::Collection<libyang::SchemaNode, libyang::IterationType::Sibling>> children;
-+
-+            DOCTEST_SUBCASE("SchemaNode::immediateChildren")
-+            {
-+                DOCTEST_SUBCASE("listAdvancedWithTwoKey")
-+                {
-+                    expectedPaths = {
-+                        "/type_module:listAdvancedWithTwoKey/first",
-+                        "/type_module:listAdvancedWithTwoKey/second",
-+                    };
-+                    children = ctx->findPath("/type_module:listAdvancedWithTwoKey").immediateChildren();
-+                }
-+                DOCTEST_SUBCASE("leaf")
-+                {
-+                    expectedPaths = {};
-+                    children = ctx->findPath("/type_module:leafString").immediateChildren();
-+                }
-+                DOCTEST_SUBCASE("no recursion")
-+                {
-+                    expectedPaths = {
-+                        "/type_module:container/x",
-+                        "/type_module:container/y",
-+                        "/type_module:container/z",
-+                    };
-+                    children = ctx->findPath("/type_module:container").immediateChildren();
-+                }
-+                DOCTEST_SUBCASE("empty container")
-+                {
-+                    expectedPaths = {};
-+                    children = ctx->findPath("/type_module:container/y").immediateChildren();
-+                }
-+                DOCTEST_SUBCASE("one item")
-+                {
-+                    expectedPaths = {
-+                        "/type_module:container/z/z1",
-+                    };
-+                    children = ctx->findPath("/type_module:container/z").immediateChildren();
-+                }
-+                DOCTEST_SUBCASE("two items")
-+                {
-+                    expectedPaths = {
-+                        "/type_module:container/x/x1",
-+                        "/type_module:container/x/x2",
-+                    };
-+                    children = ctx->findPath("/type_module:container/x").immediateChildren();
-+                }
-+            }
-+
-+            DOCTEST_SUBCASE("Module::immediateChildren")
-+            {
-+                expectedPaths = {
-+                    "/type_module:anydataBasic",
-+                    "/type_module:anydataWithMandatoryChild",
-+                    "/type_module:anyxmlBasic",
-+                    "/type_module:anyxmlWithMandatoryChild",
-+                    // choiceOnModule is a choice, so it doesn't have path "/type_module:choiceOnModule".
-+                    // This node is tested at the end of the test subcase.
-+                    "/",
-+                    "/type_module:choiceBasicContainer",
-+                    "/type_module:choiceWithMandatoryContainer",
-+                    "/type_module:choiceWithDefaultContainer",
-+                    "/type_module:implicitCaseContainer",
-+                    "/type_module:leafBinary",
-+                    "/type_module:leafBits",
-+                    "/type_module:leafEnum",
-+                    "/type_module:leafEnum2",
-+                    "/type_module:leafNumber",
-+                    "/type_module:leafRef",
-+                    "/type_module:leafRefRelaxed",
-+                    "/type_module:leafString",
-+                    "/type_module:leafUnion",
-+                    "/type_module:meal",
-+                    "/type_module:leafWithConfigFalse",
-+                    "/type_module:leafWithDefaultValue",
-+                    "/type_module:leafWithDescription",
-+                    "/type_module:leafWithMandatoryTrue",
-+                    "/type_module:leafWithStatusDeprecated",
-+                    "/type_module:leafWithStatusObsolete",
-+                    "/type_module:leafWithUnits",
-+                    "/type_module:iid-valid",
-+                    "/type_module:iid-relaxed",
-+                    "/type_module:leafListBasic",
-+                    "/type_module:leafListWithDefault",
-+                    "/type_module:leafListWithMinMaxElements",
-+                    "/type_module:leafListWithUnits",
-+                    "/type_module:listBasic",
-+                    "/type_module:listAdvancedWithOneKey",
-+                    "/type_module:listAdvancedWithTwoKey",
-+                    "/type_module:listWithMinMaxElements",
-+                    "/type_module:numeric",
-+                    "/type_module:container",
-+                    "/type_module:containerWithMandatoryChild",
-+                };
-+                children = ctx->getModule("type_module", std::nullopt)->immediateChildren();
-+
-+                std::vector<std::string> actualNames;
-+                for (auto it : children.value()) {
-+                    actualNames.emplace_back(it.name());
-+                }
-+                // choiceOnModule is a choice, so it doesn't have path, just name.
-+                REQUIRE(actualNames[4] == "choiceOnModule");
-+            }
-+
-+            std::vector<std::string> actualPaths;
-+            for (const auto& it : *children) {
-+                actualPaths.emplace_back(it.path());
-+            }
-+            REQUIRE(actualPaths == expectedPaths);
-         }
-        DOCTEST_SUBCASE("two items")
-+
-+        DOCTEST_SUBCASE("unimplemented module")
-         {
-            expectedPaths = {
-                "/type_module:container/x/x1",
-                "/type_module:container/x/x2",
-            };
-            path = "/type_module:container/x";
-        }
-        std::vector<std::string> actualPaths;
-        for (const auto& it : ctx->findPath(path).immediateChildren()) {
-            actualPaths.emplace_back(it.path());
-+            DOCTEST_SUBCASE("Module::immediateChildren")
-+            {
-+                ctx->setSearchDir(TESTS_DIR / "yang");
-+                auto modYangPatch = ctx->loadModule("ietf-yang-patch", std::nullopt);
-+                auto modRestconf = ctx->getModule("ietf-restconf", "2017-01-26");
-+                REQUIRE(!modRestconf->implemented());
-+                REQUIRE_THROWS_WITH_AS(modRestconf->immediateChildren(), "Module::child: module is not implemented", libyang::Error);
-+            }
-         }
-        REQUIRE(actualPaths == expectedPaths);
-     }
- 
-     DOCTEST_SUBCASE("SchemaNode::siblings")
-- 
-2.43.0
-
@@ -1,11 +1,11 @@
 From 39c7530caa510144c17521278b721ba1e6d8ff40 Mon Sep 17 00:00:00 2001
 From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Pecka?= <tomas.pecka@cesnet.cz>
 Date: Thu, 9 Jan 2025 15:31:37 +0100
-Subject: [PATCH 09/18] upstream stopped reporting schema-mounts node
+Subject: [PATCH 8/8] upstream stopped reporting schema-mounts node
 MIME-Version: 1.0
 Content-Type: text/plain; charset=UTF-8
 Content-Transfer-Encoding: 8bit
-Organization: Wires
+Organization: Addiva Elektronik

 Change-Id: I940769d38d56fcfda3e1408c92331fdb00c161e9
 Signed-off-by: Mattias Walström <lazzer@gmail.com>
@@ -1,39 +0,0 @@
-From 82c963766ad4e4a802db7be656acbedb640745e9 Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Jan=20Kundr=C3=A1t?= <jan.kundrat@cesnet.cz>
-Date: Thu, 30 Jan 2025 16:34:12 +0100
-Subject: [PATCH 10/18] CI: temporarily pin version due to anyxml behavior
- changes upstream
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-Organization: Wires
-
-Change-Id: Id977f4d045098c1b93656c0efb871c9a1b650e2d
-Signed-off-by: Mattias Walström <lazzer@gmail.com>
---
- .zuul.yaml | 4 ++--
- 1 file changed, 2 insertions(+), 2 deletions(-)
-
-diff --git a/.zuul.yaml b/.zuul.yaml
-index b41c490..19f0def 100644
--- a/.zuul.yaml
-+++ b/.zuul.yaml
-@@ -4,13 +4,13 @@
-         - f38-gcc-cover:
-             required-projects:
-               - name: github/CESNET/libyang
-                override-checkout: devel
-+                override-checkout: cesnet/2025-01-29
-               - name: github/onqtam/doctest
-                 override-checkout: v2.3.6
-         - f38-clang-asan-ubsan:
-             required-projects: &projects
-               - name: github/CESNET/libyang
-                override-checkout: devel
-+                override-checkout: cesnet/2025-01-29
-               - name: github/onqtam/doctest
-                 override-checkout: v2.4.11
-         - f38-clang-tsan:
-- 
-2.43.0
-
@@ -1,40 +0,0 @@
-From 50a216e35a555961f94a32a71bb2d45ac611d0aa Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Jan=20Kundr=C3=A1t?= <jan.kundrat@cesnet.cz>
-Date: Wed, 29 Jan 2025 22:49:08 +0100
-Subject: [PATCH 11/18] build: a single place to define package version
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-Organization: Wires
-
-Change-Id: I2cd7397895ed4852f852e99b97543dde76eaff8f
-Signed-off-by: Mattias Walström <lazzer@gmail.com>
---
- CMakeLists.txt | 4 ++--
- 1 file changed, 2 insertions(+), 2 deletions(-)
-
-diff --git a/CMakeLists.txt b/CMakeLists.txt
-index 732f52b..c518ca8 100644
--- a/CMakeLists.txt
-+++ b/CMakeLists.txt
-@@ -21,7 +21,8 @@ add_custom_target(libyang-cpp-version-cmake
-         cmake/ProjectGitVersionRunner.cmake
-         )
- include(cmake/ProjectGitVersion.cmake)
-prepare_git_version(LIBYANG_CPP_VERSION "3")
-+set(LIBYANG_CPP_PKG_VERSION "3")
-+prepare_git_version(LIBYANG_CPP_VERSION ${LIBYANG_CPP_PKG_VERSION})
- 
- find_package(Doxygen)
- option(WITH_DOCS "Create and install internal documentation (needs Doxygen)" ${DOXYGEN_FOUND})
-@@ -29,7 +30,6 @@ option(BUILD_SHARED_LIBS "By default, shared libs are enabled. Turn off for a st
- 
- find_package(PkgConfig REQUIRED)
- pkg_check_modules(LIBYANG REQUIRED libyang>=3.7.8 IMPORTED_TARGET)
-set(LIBYANG_CPP_PKG_VERSION "3")
- 
- # FIXME from gcc 14.1 on we should be able to use the calendar/time from libstdc++ and thus remove the date dependency
- find_package(date)
-- 
-2.43.0
-
@@ -1,173 +0,0 @@
-From 1533458346b4f395b1187c646b61bbcb1fddc615 Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Jan=20Kundr=C3=A1t?= <jan.kundrat@cesnet.cz>
-Date: Mon, 4 Nov 2024 14:52:12 +0100
-Subject: [PATCH 12/18] YANG-flavored regular expressions
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-Organization: Wires
-
-Change-Id: I93b2756d0f470585280c076308df3f384bd7765d
-Signed-off-by: Mattias Walström <lazzer@gmail.com>
---
- CMakeLists.txt                |  3 +++
- include/libyang-cpp/Regex.hpp | 28 ++++++++++++++++++++++
- src/Regex.cpp                 | 45 +++++++++++++++++++++++++++++++++++
- tests/regex.cpp               | 30 +++++++++++++++++++++++
- 4 files changed, 106 insertions(+)
- create mode 100644 include/libyang-cpp/Regex.hpp
- create mode 100644 src/Regex.cpp
- create mode 100644 tests/regex.cpp
-
-diff --git a/CMakeLists.txt b/CMakeLists.txt
-index c518ca8..512af8c 100644
--- a/CMakeLists.txt
-+++ b/CMakeLists.txt
-@@ -54,6 +54,7 @@ add_library(yang-cpp
-     src/Enum.cpp
-     src/Collection.cpp
-     src/Module.cpp
-+    src/Regex.cpp
-     src/SchemaNode.cpp
-     src/Set.cpp
-     src/Type.cpp
-@@ -83,6 +84,7 @@ if(${CMAKE_VERSION} VERSION_GREATER_EQUAL "3.24")
-             libyang-cpp/Enum.hpp
-             libyang-cpp/ChildInstantiables.hpp
-             libyang-cpp/Module.hpp
-+            libyang-cpp/Regex.hpp
-             libyang-cpp/Set.hpp
-             libyang-cpp/SchemaNode.hpp
-             libyang-cpp/Time.hpp
-@@ -119,6 +121,7 @@ if(BUILD_TESTING)
-     libyang_cpp_test(schema_node)
-     libyang_cpp_test(unsafe)
-     target_link_libraries(test_unsafe PkgConfig::LIBYANG)
-+    libyang_cpp_test(regex)
- 
-     if(date_FOUND)
-         add_executable(test_time-stl-hhdate tests/time.cpp)
-diff --git a/include/libyang-cpp/Regex.hpp b/include/libyang-cpp/Regex.hpp
-new file mode 100644
-index 0000000..31935f2
--- /dev/null
-+++ b/include/libyang-cpp/Regex.hpp
-@@ -0,0 +1,28 @@
-+/*
-+ * Copyright (C) 2025 CESNET, https://photonics.cesnet.cz/
-+ *
-+ * Written by Jan Kundrát <jan.kundrat@cesnet.cz>
-+ *
-+ * SPDX-License-Identifier: BSD-3-Clause
-+ */
-+#pragma once
-+#include <libyang-cpp/export.h>
-+#include <string>
-+
-+namespace libyang {
-+class Context;
-+
-+/**
-+ * @brief A regular expression pattern which uses the YANG-flavored regex engine
-+ */
-+class LIBYANG_CPP_EXPORT Regex {
-+public:
-+    Regex(const std::string& pattern);
-+    ~Regex();
-+    bool matches(const std::string& input);
-+
-+private:
-+    void* code;
-+};
-+
-+}
-diff --git a/src/Regex.cpp b/src/Regex.cpp
-new file mode 100644
-index 0000000..a34fcd5
--- /dev/null
-+++ b/src/Regex.cpp
-@@ -0,0 +1,45 @@
-+/*
-+ * Copyright (C) 2025 CESNET, https://photonics.cesnet.cz/
-+ *
-+ * Written by Jan Kundrát <jan.kundrat@cesnet.cz>
-+ *
-+ * SPDX-License-Identifier: BSD-3-Clause
-+ */
-+
-+// The following header MUST be included before anything else which "might" use PCRE2
-+// because that library uses the preprocessor to prepare the "correct" versions of symbols.
-+#include <libyang/tree_data.h>
-+
-+#include <libyang-cpp/Regex.hpp>
-+#include <pcre2.h>
-+#include "utils/exception.hpp"
-+
-+#define THE_PCRE2_CODE_P reinterpret_cast<pcre2_code*>(this->code)
-+#define THE_PCRE2_CODE_P_P reinterpret_cast<pcre2_code**>(&this->code)
-+
-+namespace libyang {
-+
-+Regex::Regex(const std::string& pattern)
-+    : code(nullptr)
-+{
-+    auto res = ly_pattern_compile(nullptr, pattern.c_str(), THE_PCRE2_CODE_P_P);
-+    throwIfError(res, ly_last_logmsg());
-+}
-+
-+Regex::~Regex()
-+{
-+    pcre2_code_free(THE_PCRE2_CODE_P);
-+}
-+
-+bool Regex::matches(const std::string& input)
-+{
-+    auto res = ly_pattern_match(nullptr, nullptr /* we have a precompiled pattern */, input.c_str(), input.size(), THE_PCRE2_CODE_P_P);
-+    if (res == LY_SUCCESS) {
-+        return true;
-+    } else if (res == LY_ENOT) {
-+        return false;
-+    } else {
-+        throwError(res, ly_last_logmsg());
-+    }
-+}
-+}
-diff --git a/tests/regex.cpp b/tests/regex.cpp
-new file mode 100644
-index 0000000..7594f43
--- /dev/null
-+++ b/tests/regex.cpp
-@@ -0,0 +1,30 @@
-+/*
-+ * Copyright (C) 2025 CESNET, https://photonics.cesnet.cz/
-+ *
-+ * Written by Jan Kundrát <jan.kundrat@cesnet.cz>
-+ *
-+ * SPDX-License-Identifier: BSD-3-Clause
-+ */
-+
-+#include <doctest/doctest.h>
-+#include <libyang-cpp/Regex.hpp>
-+#include <libyang-cpp/Utils.hpp>
-+
-+TEST_CASE("regex")
-+{
-+    using libyang::Regex;
-+    using namespace std::string_literals;
-+
-+    REQUIRE_THROWS_WITH_AS(Regex{"\\"}, R"(Regular expression "\" is not valid ("": \ at end of pattern).: LY_EVALID)", libyang::ErrorWithCode);
-+
-+    Regex re{"ahoj"};
-+    REQUIRE(re.matches("ahoj"));
-+    REQUIRE(!re.matches("cau"));
-+    REQUIRE(re.matches("ahoj")); // test repeated calls as well
-+    REQUIRE(!re.matches("oj"));
-+    REQUIRE(!re.matches("aho"));
-+
-+    // Testing runtime errors during pattern *matching* is tricky. There's a limit on backtracking,
-+    // so testing a pattern like x+x+y on an obscenely long string of "x" characters *will* do the trick, eventually,
-+    // but the PCRE2 library has a default limit of 10M attempts. That's a VERY big number to hit during a test :(.
-+}
-- 
-2.43.0
-
@@ -1,67 +0,0 @@
-From 8d406728a53c2e77a4fe7393b7e30d42b8f9b9bb Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Jan=20Kundr=C3=A1t?= <jan.kundrat@cesnet.cz>
-Date: Thu, 30 Jan 2025 15:40:22 +0100
-Subject: [PATCH 13/18] Adapt to upstream changes in anyxml JSON printing
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-Organization: Wires
-
-Change-Id: I5f6de28cebc95a446549017c2768b450f4fd6526
-Signed-off-by: Mattias Walström <lazzer@gmail.com>
---
- .zuul.yaml          | 4 ++--
- CMakeLists.txt      | 3 ++-
- tests/data_node.cpp | 2 +-
- 3 files changed, 5 insertions(+), 4 deletions(-)
-
-diff --git a/.zuul.yaml b/.zuul.yaml
-index 19f0def..b41c490 100644
--- a/.zuul.yaml
-+++ b/.zuul.yaml
-@@ -4,13 +4,13 @@
-         - f38-gcc-cover:
-             required-projects:
-               - name: github/CESNET/libyang
-                override-checkout: cesnet/2025-01-29
-+                override-checkout: devel
-               - name: github/onqtam/doctest
-                 override-checkout: v2.3.6
-         - f38-clang-asan-ubsan:
-             required-projects: &projects
-               - name: github/CESNET/libyang
-                override-checkout: cesnet/2025-01-29
-+                override-checkout: devel
-               - name: github/onqtam/doctest
-                 override-checkout: v2.4.11
-         - f38-clang-tsan:
-diff --git a/CMakeLists.txt b/CMakeLists.txt
-index 512af8c..a40fd52 100644
--- a/CMakeLists.txt
-+++ b/CMakeLists.txt
-@@ -29,7 +29,8 @@ option(WITH_DOCS "Create and install internal documentation (needs Doxygen)" ${D
- option(BUILD_SHARED_LIBS "By default, shared libs are enabled. Turn off for a static build." ON)
- 
- find_package(PkgConfig REQUIRED)
-pkg_check_modules(LIBYANG REQUIRED libyang>=3.7.8 IMPORTED_TARGET)
-+# FIXME: it's actually 3.7.12, but that hasn't been released yet
-+pkg_check_modules(LIBYANG REQUIRED libyang>=3.7.11 IMPORTED_TARGET)
- 
- # FIXME from gcc 14.1 on we should be able to use the calendar/time from libstdc++ and thus remove the date dependency
- find_package(date)
-diff --git a/tests/data_node.cpp b/tests/data_node.cpp
-index 45fd6c1..14470dd 100644
--- a/tests/data_node.cpp
-+++ b/tests/data_node.cpp
-@@ -1568,7 +1568,7 @@ TEST_CASE("Data Node manipulation")
-                 REQUIRE(*jsonAnyXmlNode.createdNode->printStr(libyang::DataFormat::JSON, libyang::PrintFlags::Shrink | libyang::PrintFlags::WithSiblings)
-                         == R"|({"example-schema:ax":[1,2,3]})|"s);
-                 REQUIRE(*jsonAnyXmlNode.createdNode->printStr(libyang::DataFormat::XML, libyang::PrintFlags::Shrink | libyang::PrintFlags::WithSiblings)
-                        == R"|(<ax xmlns="http://example.com/coze"/>)|"s);
-+                        == R"|(<ax xmlns="http://example.com/coze">)|"s + origJSON + "</ax>");
-             }
- 
-             REQUIRE(!!val);
-- 
-2.43.0
-
@@ -1,57 +0,0 @@
-From f050e7e4a17ef2e221ca000a544042c33c9541fc Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Jan=20Kundr=C3=A1t?= <jan.kundrat@cesnet.cz>
-Date: Thu, 13 Mar 2025 19:21:26 +0100
-Subject: [PATCH 14/18] fix DataNode::insertSibling() return value
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-Organization: Wires
-
-When such an insert happens, the C library returns the node which is now
-the first sibling among all of the siblings of the node which was used
-as a reference during the insert. Our API was also documented this way,
-but we were not doing that.
-
-Reported-by: Irfan <irfan.haslanded@gmail.com>
-Bug: https://github.com/CESNET/libyang-cpp/issues/29
-Change-Id: Id7f84a31e50212d6e2cbce9ab03a351a3721f767
-Signed-off-by: Mattias Walström <lazzer@gmail.com>
---
- src/DataNode.cpp    | 2 +-
- tests/data_node.cpp | 7 +++++++
- 2 files changed, 8 insertions(+), 1 deletion(-)
-
-diff --git a/src/DataNode.cpp b/src/DataNode.cpp
-index 84591e5..b899b18 100644
--- a/src/DataNode.cpp
-+++ b/src/DataNode.cpp
-@@ -711,7 +711,7 @@ DataNode DataNode::insertSibling(DataNode toInsert)
-         lyd_insert_sibling(this->m_node, toInsert.m_node, &firstSibling);
-     }, toInsert.parent() ? OperationScope::JustThisNode : OperationScope::AffectsFollowingSiblings, m_refs);
- 
-    return DataNode{m_node, m_refs};
-+    return DataNode{firstSibling, m_refs};
- }
- 
- /**
-diff --git a/tests/data_node.cpp b/tests/data_node.cpp
-index 14470dd..b6ee455 100644
--- a/tests/data_node.cpp
-+++ b/tests/data_node.cpp
-@@ -973,6 +973,13 @@ TEST_CASE("Data Node manipulation")
-         REQUIRE(getNumberOrder() == expected);
-     }
- 
-+    DOCTEST_SUBCASE("DataNode::insertSibling")
-+    {
-+        auto node = ctx.newPath("/example-schema:leafUInt8", "10");
-+        REQUIRE(node.insertSibling(ctx.newPath("/example-schema:leafUInt16", "10")).path() == "/example-schema:leafUInt8");
-+        REQUIRE(node.insertSibling(ctx.newPath("/example-schema:dummy", "10")).path() == "/example-schema:dummy");
-+    }
-+
-     DOCTEST_SUBCASE("DataNode::duplicate")
-     {
-         auto root = ctx.parseData(data2, libyang::DataFormat::JSON);
-- 
-2.43.0
-
@@ -1,260 +0,0 @@
-From f958af42bf5d9fbd901ed59ebc1359ac0ddcc00f Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Jan=20Kundr=C3=A1t?= <jan.kundrat@cesnet.cz>
-Date: Fri, 14 Mar 2025 11:36:50 +0100
-Subject: [PATCH 15/18] API/ABI change: opaque node naming
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-Organization: Wires
-
-Our C++ API would ignore the "module name or XML prefix", which turns
-out to be *the* relevant part when it comes to opaque node naming. The
-prefix is, instead, just that string that might have been inherited from
-the parent node when parsing the serialized data; it's an optional
-thingy which, if not set explicitly, is implicitly inherited.
-
-Adapt the API for this, and since this *will* break the build, let's
-bump the package version.
-
-Change-Id: I199afe5fa7a571034b744531c63b93b9c656563a
-Signed-off-by: Mattias Walström <lazzer@gmail.com>
---
- CMakeLists.txt                   |  5 ++---
- include/libyang-cpp/Context.hpp  |  4 ++--
- include/libyang-cpp/DataNode.hpp | 11 ++++++++--
- src/Context.cpp                  | 32 ++++++++++++++++++++--------
- src/DataNode.cpp                 | 19 ++++++++++++++---
- tests/data_node.cpp              | 36 ++++++++++++++++++++++++++------
- 6 files changed, 82 insertions(+), 25 deletions(-)
-
-diff --git a/CMakeLists.txt b/CMakeLists.txt
-index a40fd52..c5fec45 100644
--- a/CMakeLists.txt
-+++ b/CMakeLists.txt
-@@ -21,7 +21,7 @@ add_custom_target(libyang-cpp-version-cmake
-         cmake/ProjectGitVersionRunner.cmake
-         )
- include(cmake/ProjectGitVersion.cmake)
-set(LIBYANG_CPP_PKG_VERSION "3")
-+set(LIBYANG_CPP_PKG_VERSION "4")
- prepare_git_version(LIBYANG_CPP_VERSION ${LIBYANG_CPP_PKG_VERSION})
- 
- find_package(Doxygen)
-@@ -29,8 +29,7 @@ option(WITH_DOCS "Create and install internal documentation (needs Doxygen)" ${D
- option(BUILD_SHARED_LIBS "By default, shared libs are enabled. Turn off for a static build." ON)
- 
- find_package(PkgConfig REQUIRED)
-# FIXME: it's actually 3.7.12, but that hasn't been released yet
-pkg_check_modules(LIBYANG REQUIRED libyang>=3.7.11 IMPORTED_TARGET)
-+pkg_check_modules(LIBYANG REQUIRED libyang>=3.10.1 IMPORTED_TARGET)
- 
- # FIXME from gcc 14.1 on we should be able to use the calendar/time from libstdc++ and thus remove the date dependency
- find_package(date)
-diff --git a/include/libyang-cpp/Context.hpp b/include/libyang-cpp/Context.hpp
-index baa47b3..ca89063 100644
--- a/include/libyang-cpp/Context.hpp
-+++ b/include/libyang-cpp/Context.hpp
-@@ -115,8 +115,8 @@ public:
-     CreatedNodes newPath2(const std::string& path, libyang::JSON json, const std::optional<CreationOptions> options = std::nullopt) const;
-     CreatedNodes newPath2(const std::string& path, libyang::XML xml, const std::optional<CreationOptions> options = std::nullopt) const;
-     std::optional<DataNode> newExtPath(const ExtensionInstance& ext, const std::string& path, const std::optional<std::string>& value, const std::optional<CreationOptions> options = std::nullopt) const;
-    std::optional<DataNode> newOpaqueJSON(const std::string& moduleName, const std::string& name, const std::optional<libyang::JSON>& value) const;
-    std::optional<DataNode> newOpaqueXML(const std::string& moduleName, const std::string& name, const std::optional<libyang::XML>& value) const;
-+    std::optional<DataNode> newOpaqueJSON(const OpaqueName& name, const std::optional<libyang::JSON>& value) const;
-+    std::optional<DataNode> newOpaqueXML(const OpaqueName& name, const std::optional<libyang::XML>& value) const;
-     SchemaNode findPath(const std::string& dataPath, const InputOutputNodes inputOutputNodes = InputOutputNodes::Input) const;
-     Set<SchemaNode> findXPath(const std::string& path) const;
- 
-diff --git a/include/libyang-cpp/DataNode.hpp b/include/libyang-cpp/DataNode.hpp
-index 851681b..310b5e3 100644
--- a/include/libyang-cpp/DataNode.hpp
-+++ b/include/libyang-cpp/DataNode.hpp
-@@ -225,15 +225,22 @@ private:
- };
- 
- /**
- * @brief Contains a (possibly module-qualified) name of an opaque node.
-+ * @brief Contains a name of an opaque node.
-  *
- * This is generic container of a prefix/module string and a name string.
-+ * An opaque node always has a name, and a module (or XML namespace) to which this node belongs.
-+ * Sometimes, it also has a prefix.
-+ *
-+ * If the prefix is set *and* the underlying node is an opaque JSON one, then the prefix must be the same as the "module or namespace" name.
-+ * If the underlying node is an opaque XML one, then the XML prefix might be something completely different, and in that case the real fun begins.
-+ * Review the libayng C manual, this is something that the C++ wrapper doesn't really have under control.
-  *
-  * Wraps `ly_opaq_name`.
-  */
- struct LIBYANG_CPP_EXPORT OpaqueName {
-+    std::string moduleOrNamespace;
-     std::optional<std::string> prefix;
-     std::string name;
-+    std::string pretty() const;
- };
- 
- /**
-diff --git a/src/Context.cpp b/src/Context.cpp
-index 287f8c8..fec2f27 100644
--- a/src/Context.cpp
-+++ b/src/Context.cpp
-@@ -378,17 +378,25 @@ std::optional<DataNode> Context::newExtPath(const ExtensionInstance& ext, const
-  *
-  * Wraps `lyd_new_opaq`.
-  *
- * @param moduleName Node module name, used as a prefix as well
-  * @param name Name of the created node
-  * @param value JSON data blob, if any
-  * @return Returns the newly created node (if created)
-  */
-std::optional<DataNode> Context::newOpaqueJSON(const std::string& moduleName, const std::string& name, const std::optional<libyang::JSON>& value) const
-+std::optional<DataNode> Context::newOpaqueJSON(const OpaqueName& name, const std::optional<libyang::JSON>& value) const
- {
-+    if (name.prefix && *name.prefix != name.moduleOrNamespace) {
-+        throw Error{"invalid opaque JSON node: prefix \"" + *name.prefix + "\" doesn't match module name \"" + name.moduleOrNamespace + "\""};
-+    }
-     lyd_node* out;
-    auto err = lyd_new_opaq(nullptr, m_ctx.get(), name.c_str(), value ? value->content.c_str() : nullptr, nullptr, moduleName.c_str(), &out);
-+    auto err = lyd_new_opaq(nullptr,
-+                            m_ctx.get(),
-+                            name.name.c_str(),
-+                            value ? value->content.c_str() : nullptr,
-+                            name.prefix ? name.prefix->c_str() : nullptr,
-+                            name.moduleOrNamespace.c_str(),
-+                            &out);
- 
-    throwIfError(err, "Couldn't create an opaque JSON node '"s + moduleName + ':' + name + "'");
-+    throwIfError(err, "Couldn't create an opaque JSON node " + name.pretty());
- 
-     if (out) {
-         return DataNode{out, std::make_shared<internal_refcount>(m_ctx)};
-@@ -403,17 +411,23 @@ std::optional<DataNode> Context::newOpaqueJSON(const std::string& moduleName, co
-  *
-  * Wraps `lyd_new_opaq2`.
-  *
- * @param xmlNamespace Node module namespace
-  * @param name Name of the created node
-  * @param value XML data blob, if any
-  * @return Returns the newly created node (if created)
-  */
-std::optional<DataNode> Context::newOpaqueXML(const std::string& xmlNamespace, const std::string& name, const std::optional<libyang::XML>& value) const
-+std::optional<DataNode> Context::newOpaqueXML(const OpaqueName& name, const std::optional<libyang::XML>& value) const
- {
-+    // the XML node naming is "complex", we cannot really check the XML namespace for sanity here
-     lyd_node* out;
-    auto err = lyd_new_opaq2(nullptr, m_ctx.get(), name.c_str(), value ? value->content.c_str() : nullptr, nullptr, xmlNamespace.c_str(), &out);
-
-    throwIfError(err, "Couldn't create an opaque XML node '"s + name +"' from namespace '" + xmlNamespace + "'");
-+    auto err = lyd_new_opaq2(nullptr,
-+                             m_ctx.get(),
-+                             name.name.c_str(),
-+                             value ? value->content.c_str() : nullptr,
-+                             name.prefix ? name.prefix->c_str() : nullptr,
-+                             name.moduleOrNamespace.c_str(),
-+                             &out);
-+
-+    throwIfError(err, "Couldn't create an opaque XML node " + name.pretty());
- 
-     if (out) {
-         return DataNode{out, std::make_shared<internal_refcount>(m_ctx)};
-diff --git a/src/DataNode.cpp b/src/DataNode.cpp
-index b899b18..344f1b6 100644
--- a/src/DataNode.cpp
-+++ b/src/DataNode.cpp
-@@ -1112,9 +1112,9 @@ OpaqueName DataNodeOpaque::name() const
- {
-     auto opaq = reinterpret_cast<lyd_node_opaq*>(m_node);
-     return OpaqueName{
-        .prefix = opaq->name.prefix ? std::optional(opaq->name.prefix) : std::nullopt,
-        .name = opaq->name.name
-    };
-+        .moduleOrNamespace = opaq->name.module_name,
-+        .prefix = opaq->name.prefix ? std::optional{opaq->name.prefix} : std::nullopt,
-+        .name = opaq->name.name};
- }
- 
- std::string DataNodeOpaque::value() const
-@@ -1122,6 +1122,19 @@ std::string DataNodeOpaque::value() const
-     return reinterpret_cast<lyd_node_opaq*>(m_node)->value;
- }
- 
-+std::string OpaqueName::pretty() const
-+{
-+    if (prefix) {
-+        if (*prefix == moduleOrNamespace) {
-+            return *prefix + ':' + name;
-+        } else {
-+            return "{" + moduleOrNamespace + "}, " + *prefix + ':' + name;
-+        }
-+    } else {
-+        return "{" + moduleOrNamespace + "}, " + name;
-+    }
-+}
-+
- /**
-  * Wraps a raw non-null lyd_node pointer.
-  * @param node The pointer to be wrapped. Must not be null.
-diff --git a/tests/data_node.cpp b/tests/data_node.cpp
-index b6ee455..a1096a6 100644
--- a/tests/data_node.cpp
-+++ b/tests/data_node.cpp
-@@ -1969,9 +1969,11 @@ TEST_CASE("Data Node manipulation")
- 
-         DOCTEST_SUBCASE("opaque nodes for sysrepo ops data discard")
-         {
-            auto discard1 = ctx.newOpaqueJSON("sysrepo", "discard-items", libyang::JSON{"/example-schema:a"});
-+            // the "short" form with no prefix
-+            auto discard1 = ctx.newOpaqueJSON(libyang::OpaqueName{"sysrepo", std::nullopt, "discard-items"}, libyang::JSON{"/example-schema:a"});
-             REQUIRE(!!discard1);
-            auto discard2 = ctx.newOpaqueJSON("sysrepo", "discard-items", libyang::JSON{"/example-schema:b"});
-+            // let's use a prefix form here
-+            auto discard2 = ctx.newOpaqueJSON(libyang::OpaqueName{"sysrepo", "sysrepo", "discard-items"}, libyang::JSON{"/example-schema:b"});
-             REQUIRE(!!discard2);
-             discard1->insertSibling(*discard2);
-             REQUIRE(*discard1->printStr(libyang::DataFormat::JSON, libyang::PrintFlags::WithSiblings)
-@@ -2001,16 +2003,38 @@ TEST_CASE("Data Node manipulation")
-             auto data = ctx.newPath2("/example-schema:myRpc/outputLeaf", "AHOJ", libyang::CreationOptions::Output).createdNode;
-             REQUIRE(data);
-             data->newPath("/example-schema:myRpc/another", "yay", libyang::CreationOptions::Output);
-+            std::string prettyName;
- 
-            DOCTEST_SUBCASE("JSON") {
-                out = ctx.newOpaqueJSON(data->schema().module().name(), "output", std::nullopt);
-+            DOCTEST_SUBCASE("JSON no prefix") {
-+                out = ctx.newOpaqueJSON({data->schema().module().name(), std::nullopt, "output"}, std::nullopt);
-+                prettyName = "{example-schema}, output";
-             }
- 
-            DOCTEST_SUBCASE("XML") {
-                out = ctx.newOpaqueXML(data->schema().module().ns(), "output", std::nullopt);
-+            DOCTEST_SUBCASE("JSON with prefix") {
-+                out = ctx.newOpaqueJSON({data->schema().module().name(), data->schema().module().name(), "output"}, std::nullopt);
-+                prettyName = "example-schema:output";
-+
-+                // wrong prefix is detected
-+                REQUIRE_THROWS_WITH_AS(ctx.newOpaqueJSON({data->schema().module().name(), "xxx", "output"}, std::nullopt),
-+                                       R"(invalid opaque JSON node: prefix "xxx" doesn't match module name "example-schema")",
-+                                       libyang::Error);
-+            }
-+
-+            DOCTEST_SUBCASE("XML no prefix") {
-+                out = ctx.newOpaqueXML({data->schema().module().ns(), std::nullopt, "output"}, std::nullopt);
-+                prettyName = "{http://example.com/coze}, output";
-+            }
-+
-+            DOCTEST_SUBCASE("XML with prefix") {
-+                out = ctx.newOpaqueXML({data->schema().module().ns(),
-+                                        data->schema().module().name() /* prefix is a module name, not the XML NS*/,
-+                                        "output"},
-+                                       std::nullopt);
-+                prettyName = "{http://example.com/coze}, example-schema:output";
-             }
- 
-             REQUIRE(out);
-+            REQUIRE(prettyName == out->asOpaque().name().pretty());
-             data->unlinkWithSiblings();
-             out->insertChild(*data);
- 
-- 
-2.43.0
-
@@ -1,462 +0,0 @@
-From 8c59ecc5c687f8ee2ce62825835a378b422185f2 Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Jan=20Kundr=C3=A1t?= <jan.kundrat@cesnet.cz>
-Date: Fri, 14 Mar 2025 13:41:01 +0100
-Subject: [PATCH 16/18] Add a helper for finding opaque nodes
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-Organization: Wires
-
-This is needed for sysrepo where we want to search through the
-sysrepo:discard-items top-level opaque nodes.
-
-At first I wanted to simply wrap lyd_find_sibling_opaq_next(), but its
-semantics is quite different to what is needed in the code which uses
-sysrepo, so here's my attempt at a nice-ish API.
-
-Change-Id: I2571961e42f6d7a121e27c881cacdcfec0e87762
-Signed-off-by: Mattias Walström <lazzer@gmail.com>
---
- include/libyang-cpp/DataNode.hpp   |   2 +
- src/DataNode.cpp                   |  49 ++++++
- tests/data_node.cpp                |  74 +++++++++
- tests/yang/sysrepo@2024-10-25.yang | 257 +++++++++++++++++++++++++++++
- 4 files changed, 382 insertions(+)
- create mode 100644 tests/yang/sysrepo@2024-10-25.yang
-
-diff --git a/include/libyang-cpp/DataNode.hpp b/include/libyang-cpp/DataNode.hpp
-index 310b5e3..50d6c0e 100644
--- a/include/libyang-cpp/DataNode.hpp
-+++ b/include/libyang-cpp/DataNode.hpp
-@@ -102,6 +102,7 @@ public:
- 
-     bool isOpaque() const;
-     DataNodeOpaque asOpaque() const;
-+    std::optional<DataNodeOpaque> firstOpaqueSibling() const;
- 
-     // TODO: allow setting the `parent` argument
-     DataNode duplicate(const std::optional<DuplicationOptions> opts = std::nullopt) const;
-@@ -241,6 +242,7 @@ struct LIBYANG_CPP_EXPORT OpaqueName {
-     std::optional<std::string> prefix;
-     std::string name;
-     std::string pretty() const;
-+    bool matches(const std::string& prefixIsh, const std::string& name) const;
- };
- 
- /**
-diff --git a/src/DataNode.cpp b/src/DataNode.cpp
-index 344f1b6..7e87917 100644
--- a/src/DataNode.cpp
-+++ b/src/DataNode.cpp
-@@ -1135,6 +1135,20 @@ std::string OpaqueName::pretty() const
-     }
- }
- 
-+/**
-+ * @short Fuzzy-match a real-world name against a combination of "something like a prefix" and "unqualified name"
-+ *
-+ * Because libyang doesn't propagate inherited prefixes, and because opaque nodes are magic, we seem to require
-+ * this "fuzzy matching". It won't properly report a match on opaque nodes with a prefix that's inherited when
-+ * using XML namespaces, though.
-+ * */
-+bool OpaqueName::matches(const std::string& prefixIsh, const std::string& name) const
-+{
-+    return name == this->name
-+        && (prefixIsh == moduleOrNamespace
-+            || (!!prefix && prefixIsh == *prefix));
-+}
-+
- /**
-  * Wraps a raw non-null lyd_node pointer.
-  * @param node The pointer to be wrapped. Must not be null.
-@@ -1305,4 +1319,39 @@ bool DataNode::siblingsEqual(const libyang::DataNode& other, const DataCompare f
-     }
- }
- 
-+/**
-+ * @short Find the first opaque node among the siblings
-+ *
-+ * This function was inspired by `lyd_find_sibling_opaq_next()`.
-+ * */
-+std::optional<DataNodeOpaque> DataNode::firstOpaqueSibling() const
-+{
-+    struct lyd_node *candidate = m_node;
-+
-+    // Skip all non-opaque nodes; libyang guarantees to have them first, followed by a (possibly empty) set
-+    // of opaque nodes. This is not documented anywhere, but it was explicitly confirmed by the maintainer:
-+    //
-+    // JK: can I rely on all non-opaque nodes being listed first among the siblings, and then all opaque nodes
-+    // in one continuous sequence (but with an unspecified order among the opaque nodes themselves)?
-+    //
-+    // MV: yep
-+    while (candidate && candidate->schema) {
-+        candidate = candidate->next;
-+    }
-+
-+    // walk back through the opaque nodes; however, libyang lists are not your regular linked lists
-+    while (candidate
-+           && !candidate->prev->schema // don't go from the first opaque node through the non-opaque ones
-+           && candidate->prev->next // don't wrap from the first node to the last one in case all of them are opaque
-+    ) {
-+        candidate = candidate->prev;
-+    }
-+
-+    if (candidate) {
-+        return DataNode{candidate, m_refs}.asOpaque();
-+    }
-+
-+    return std::nullopt;
-+}
-+
- }
-diff --git a/tests/data_node.cpp b/tests/data_node.cpp
-index a1096a6..db5a28e 100644
--- a/tests/data_node.cpp
-+++ b/tests/data_node.cpp
-@@ -1982,6 +1982,80 @@ TEST_CASE("Data Node manipulation")
-   "sysrepo:discard-items": "/example-schema:b"
- }
- )");
-+
-+            // check that a list which only consists of opaque nodes doesn't break our iteration
-+            REQUIRE(!!discard1->firstOpaqueSibling());
-+            REQUIRE(*discard1->firstOpaqueSibling() == *discard1);
-+            REQUIRE(!!discard2->firstOpaqueSibling());
-+            REQUIRE(*discard2->firstOpaqueSibling() == *discard1);
-+
-+            auto leafInt16 = ctx.newPath("/example-schema:leafInt16", "666");
-+            leafInt16.insertSibling(*discard1);
-+            REQUIRE(*discard1->firstSibling().printStr(libyang::DataFormat::JSON, libyang::PrintFlags::WithSiblings)
-+                    == R"({
-+  "example-schema:leafInt16": 666,
-+  "sysrepo:discard-items": "/example-schema:a",
-+  "sysrepo:discard-items": "/example-schema:b"
-+}
-+)");
-+            REQUIRE(leafInt16.firstSibling().path() == "/example-schema:leafInt16");
-+            REQUIRE(discard1->firstSibling().path() == "/example-schema:leafInt16");
-+            REQUIRE(discard2->firstSibling().path() == "/example-schema:leafInt16");
-+
-+            auto dummy = ctx.newPath("/example-schema:dummy", "blah");
-+            auto opaqueLeaf = ctx.newPath("/example-schema:leafInt32", std::nullopt, libyang::CreationOptions::Opaque);
-+            opaqueLeaf.newAttrOpaqueJSON("ietf-netconf", "operation", "delete");
-+            dummy.insertSibling(opaqueLeaf);
-+
-+            // FIXME reword this: this one might not be handled by sysrepo, but we want it for our fuzzy matcher testing anyway
-+            auto discard3 = ctx.newOpaqueXML(libyang::OpaqueName{"http://www.sysrepo.org/yang/sysrepo", "sysrepo", "discard-items"}, libyang::XML{"/example-schema:c"});
-+            REQUIRE(!!discard3);
-+            // notice that it's printed without a proper prefix at first...
-+            REQUIRE(*discard3->printStr(libyang::DataFormat::JSON, libyang::PrintFlags::Shrink)
-+                    == R"({"discard-items":"/example-schema:c"})");
-+            // ...but after loading the module, the proper module is added back
-+            ctx.parseModule(TESTS_DIR / "yang" / "sysrepo@2024-10-25.yang", libyang::SchemaFormat::YANG);
-+            REQUIRE(*discard3->printStr(libyang::DataFormat::JSON, libyang::PrintFlags::Shrink)
-+                    == R"({"sysrepo:discard-items":"/example-schema:c"})");
-+
-+            dummy.insertSibling(*discard3);
-+            leafInt16.insertSibling(dummy);
-+            REQUIRE(*discard1->firstSibling().printStr(libyang::DataFormat::JSON, libyang::PrintFlags::WithSiblings)
-+                    == R"({
-+  "example-schema:dummy": "blah",
-+  "example-schema:leafInt16": 666,
-+  "sysrepo:discard-items": "/example-schema:a",
-+  "sysrepo:discard-items": "/example-schema:b",
-+  "example-schema:leafInt32": "",
-+  "@example-schema:leafInt32": {
-+    "ietf-netconf:operation": "delete"
-+  },
-+  "sysrepo:discard-items": "/example-schema:c"
-+}
-+)");
-+
-+            REQUIRE(dummy.firstOpaqueSibling() == discard1);
-+            REQUIRE(dummy.firstOpaqueSibling() != discard2);
-+            REQUIRE(leafInt16.firstOpaqueSibling() == discard1);
-+            REQUIRE(opaqueLeaf.firstOpaqueSibling() == discard1);
-+            REQUIRE(discard1->firstOpaqueSibling() == discard1);
-+            REQUIRE(discard2->firstOpaqueSibling() == discard1);
-+            REQUIRE(discard3->firstOpaqueSibling() == discard1);
-+            REQUIRE(discard1->asOpaque().name().matches("sysrepo", "discard-items"));
-+            REQUIRE(!discard1->asOpaque().name().matches("http://www.sysrepo.org/yang/sysrepo", "discard-items"));
-+            REQUIRE(discard2->asOpaque().name().matches("sysrepo", "discard-items"));
-+            REQUIRE(!discard2->asOpaque().name().matches("http://www.sysrepo.org/yang/sysrepo", "discard-items"));
-+            REQUIRE(discard3->asOpaque().name().matches("sysrepo", "discard-items"));
-+            REQUIRE(discard3->asOpaque().name().matches("http://www.sysrepo.org/yang/sysrepo", "discard-items"));
-+            REQUIRE(!opaqueLeaf.asOpaque().name().matches("sysrepo", "discard-items"));
-+
-+            REQUIRE(!!dummy.firstOpaqueSibling()->nextSibling());
-+            REQUIRE(dummy.firstOpaqueSibling()->nextSibling() == discard2);
-+            REQUIRE(!!dummy.firstOpaqueSibling()->nextSibling()->nextSibling());
-+            REQUIRE(dummy.firstOpaqueSibling()->nextSibling()->nextSibling() == opaqueLeaf);
-+            REQUIRE(!!dummy.firstOpaqueSibling()->nextSibling()->nextSibling()->nextSibling());
-+            REQUIRE(dummy.firstOpaqueSibling()->nextSibling()->nextSibling()->nextSibling() == discard3);
-+            REQUIRE(!dummy.firstOpaqueSibling()->nextSibling()->nextSibling()->nextSibling()->nextSibling());
-         }
- 
-         DOCTEST_SUBCASE("RESTCONF RPC output")
-diff --git a/tests/yang/sysrepo@2024-10-25.yang b/tests/yang/sysrepo@2024-10-25.yang
-new file mode 100644
-index 0000000..f5bc32c
--- /dev/null
-+++ b/tests/yang/sysrepo@2024-10-25.yang
-@@ -0,0 +1,257 @@
-+module sysrepo {
-+    namespace "http://www.sysrepo.org/yang/sysrepo";
-+    prefix sr;
-+
-+    yang-version 1.1;
-+
-+    import ietf-yang-types {
-+        prefix yang;
-+    }
-+
-+    import ietf-datastores {
-+        prefix ds;
-+    }
-+
-+    import ietf-yang-metadata {
-+        prefix md;
-+        revision-date 2016-08-05;
-+    }
-+
-+    organization
-+        "CESNET";
-+
-+    contact
-+        "Author: Michal Vasko
-+                 <mvasko@cesnet.cz>";
-+
-+    description
-+        "Sysrepo YANG datastore internal attributes and information.";
-+
-+    revision "2024-10-25" {
-+        description
-+            "Removed redundant metadata used for push operational data.";
-+    }
-+
-+    revision "2019-07-10" {
-+        description
-+            "Initial revision.";
-+    }
-+
-+    typedef module-ref {
-+        description
-+            "Reference to a module.";
-+        type leafref {
-+            path "/sysrepo-modules/module/name";
-+        }
-+    }
-+
-+    md:annotation operation {
-+        type enumeration {
-+            enum none {
-+                description
-+                    "Node with this operation must exist but does not affect the datastore in any way.";
-+                reference
-+                    "RFC 6241 section 7.2.: default-operation";
-+            }
-+            enum ether {
-+                description
-+                    "Node with this operation does not have to exist and does not affect the datastore in any way.";
-+            }
-+            enum purge {
-+                description
-+                    "Node with this operation represents an arbitrary generic node instance and all
-+                     the instances will be deleted.";
-+            }
-+        }
-+        description
-+            "Additional proprietary <edit-config> operations used internally.";
-+        reference
-+            "RFC 6241 section 7.2.";
-+    }
-+
-+    identity notification {
-+        base ds:datastore;
-+        description
-+            "Special datastore for storing notifications for replay.";
-+    }
-+
-+    grouping module-info-grp {
-+        leaf name {
-+            type string;
-+            description
-+                "Module name.";
-+        }
-+
-+        leaf revision {
-+            type string;
-+            description
-+                "Module revision.";
-+        }
-+
-+        leaf-list enabled-feature {
-+            type string;
-+            description
-+                "List of all the enabled features.";
-+        }
-+
-+        list plugin {
-+            key "datastore";
-+            description
-+                "Module datastore plugin handling specific datastore data.";
-+
-+            leaf datastore {
-+                type identityref {
-+                    base ds:datastore;
-+                }
-+                description
-+                    "Datastore of this plugin.";
-+            }
-+
-+            leaf name {
-+                type string;
-+                mandatory true;
-+                description
-+                    "Specific plugin name as present in the plugin structures.";
-+            }
-+        }
-+    }
-+
-+    grouping deps-grp {
-+        list lref {
-+            description
-+                "Dependency of a leafref node.";
-+
-+            leaf target-path {
-+                type yang:xpath1.0;
-+                mandatory true;
-+                description
-+                    "Path identifying the leafref target node.";
-+            }
-+
-+            leaf target-module {
-+                type module-ref;
-+                mandatory true;
-+                description
-+                    "Foreign target module of the leafref.";
-+            }
-+        }
-+
-+        list inst-id {
-+            description
-+                "Dependency of an instance-identifier node.";
-+
-+            leaf source-path {
-+                type yang:xpath1.0;
-+                mandatory true;
-+                description
-+                    "Path identifying the instance-identifier node.";
-+            }
-+
-+            leaf default-target-path {
-+                type yang:xpath1.0;
-+                description
-+                    "Default instance-identifier value.";
-+            }
-+        }
-+
-+        list xpath {
-+            description
-+                "Dependency of an XPath expression - must or when statement.";
-+
-+            leaf expression {
-+                type yang:xpath1.0;
-+                mandatory true;
-+                description
-+                    "XPath expression of the dependency - must or when statement argument.";
-+            }
-+
-+            leaf-list target-module {
-+                type module-ref;
-+                description
-+                    "Foreign modules with the data needed for evaluation of the XPath.";
-+            }
-+        }
-+    }
-+
-+    container sysrepo-modules {
-+        config false;
-+        description
-+            "All installed Sysrepo modules.";
-+
-+        leaf content-id {
-+            type uint32;
-+            mandatory true;
-+            description
-+                "Sysrepo module-set content-id to be used for its generated yang-library data.";
-+        }
-+
-+        list module {
-+            key "name";
-+            description
-+                "Sysrepo module.";
-+
-+            uses module-info-grp;
-+
-+            leaf replay-support {
-+                type yang:date-and-time;
-+                description
-+                    "Present only if the module supports replay. Means the earliest stored notification if any present.
-+                     Otherwise the time the replay support was switched on.";
-+            }
-+
-+            container deps {
-+                description
-+                    "Module data dependencies on other modules.";
-+                uses deps-grp;
-+            }
-+
-+            leaf-list inverse-deps {
-+                type module-ref;
-+                description
-+                    "List of modules that depend on this module.";
-+            }
-+
-+            list rpc {
-+                key "path";
-+                description
-+                    "Module RPC/actions.";
-+
-+                leaf path {
-+                    type yang:xpath1.0;
-+                    description
-+                        "Path identifying the operation.";
-+                }
-+
-+                container in {
-+                    description
-+                        "Operation input dependencies.";
-+                    uses deps-grp;
-+                }
-+
-+                container out {
-+                    description
-+                        "Operation output dependencies.";
-+                    uses deps-grp;
-+                }
-+            }
-+
-+            list notification {
-+                key "path";
-+                description
-+                    "Module notifications.";
-+
-+                leaf path {
-+                    type yang:xpath1.0;
-+                    description
-+                        "Path identifying the notification.";
-+                }
-+
-+                container deps {
-+                    description
-+                        "Notification dependencies.";
-+                    uses deps-grp;
-+                }
-+            }
-+        }
-+    }
-+}
-- 
-2.43.0
-
@@ -1,56 +0,0 @@
-From dab8c9aac96063ccb8541d5d1795ee89b75faeee Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Jan=20Kundr=C3=A1t?= <jan.kundrat@cesnet.cz>
-Date: Wed, 2 Apr 2025 11:50:24 -0700
-Subject: [PATCH 17/18] build: link to libpcre2 explicitly
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-Organization: Wires
-
-This is apparently a problem on Mac OS X builds where the transitive
-dependency via libyang doesn't take effect:
-
- Undefined symbols for architecture arm64:
-   "_pcre2_code_free_8", referenced from:
-       libyang::Regex::~Regex() in Regex.cpp.o
-       libyang::Regex::~Regex() in Regex.cpp.o
- ld: symbol(s) not found for architecture arm64
-
-Let's fix this by linking with libpcre2-8 directly.
-
-We're using a different approach than libyang; they have their own CMake
-wrapper. I find it easier to work with pkg-config modules, so let's try
-it that way.
-
-Change-Id: I1a64407d852161595b7dca654433190002cc3600
-Signed-off-by: Mattias Walström <lazzer@gmail.com>
---
- CMakeLists.txt | 5 ++++-
- 1 file changed, 4 insertions(+), 1 deletion(-)
-
-diff --git a/CMakeLists.txt b/CMakeLists.txt
-index c5fec45..4e009aa 100644
--- a/CMakeLists.txt
-+++ b/CMakeLists.txt
-@@ -34,6 +34,9 @@ pkg_check_modules(LIBYANG REQUIRED libyang>=3.10.1 IMPORTED_TARGET)
- # FIXME from gcc 14.1 on we should be able to use the calendar/time from libstdc++ and thus remove the date dependency
- find_package(date)
- 
-+# libyang::Regex::~Regex() bypasses libyang and calls out to libpcre directly
-+pkg_check_modules(LIBPCRE2 REQUIRED libpcre2-8 IMPORTED_TARGET)
-+
- include_directories(${CMAKE_CURRENT_SOURCE_DIR}/include)
- 
- include(CheckIncludeFileCXX)
-@@ -64,7 +67,7 @@ add_library(yang-cpp
-     src/utils/newPath.cpp
-     )
- 
-target_link_libraries(yang-cpp PRIVATE PkgConfig::LIBYANG)
-+target_link_libraries(yang-cpp PRIVATE PkgConfig::LIBYANG PkgConfig::LIBPCRE2)
- # We do not offer any long-term API/ABI guarantees. To make stuff easier for downstream consumers,
- # we will be bumping both API and ABI versions very deliberately.
- # There will be no attempts at semver tracking, for example.
-- 
-2.43.0
-
@@ -1,66 +0,0 @@
-From 7519fcd35216072a6b1eebe2a79e19789be345a9 Mon Sep 17 00:00:00 2001
-From: =?UTF-8?q?Jan=20Kundr=C3=A1t?= <jan.kundrat@cesnet.cz>
-Date: Wed, 9 Apr 2025 15:35:37 +0200
-Subject: [PATCH 18/18] CI: renamed project upstream
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-Organization: Wires
-
-Change-Id: I5447f243297fbfde7c364eb3919b00db239bd069
-Signed-off-by: Mattias Walström <lazzer@gmail.com>
---
- .zuul.yaml  | 4 ++--
- README.md   | 2 +-
- ci/build.sh | 2 +-
- 3 files changed, 4 insertions(+), 4 deletions(-)
-
-diff --git a/.zuul.yaml b/.zuul.yaml
-index b41c490..7b92766 100644
--- a/.zuul.yaml
-+++ b/.zuul.yaml
-@@ -5,13 +5,13 @@
-             required-projects:
-               - name: github/CESNET/libyang
-                 override-checkout: devel
-              - name: github/onqtam/doctest
-+              - name: github/doctest/doctest
-                 override-checkout: v2.3.6
-         - f38-clang-asan-ubsan:
-             required-projects: &projects
-               - name: github/CESNET/libyang
-                 override-checkout: devel
-              - name: github/onqtam/doctest
-+              - name: github/doctest/doctest
-                 override-checkout: v2.4.11
-         - f38-clang-tsan:
-             required-projects: *projects
-diff --git a/README.md b/README.md
-index d76975b..8291e00 100644
--- a/README.md
-+++ b/README.md
-@@ -11,7 +11,7 @@ Object lifetimes are managed automatically via RAII.
- - [libyang v3](https://github.com/CESNET/libyang) - the `devel` branch (even for the `master` branch of *libyang-cpp*)
- - C++20 compiler (e.g., GCC 10.x+, clang 10+)
- - CMake 3.19+
-- optionally for built-in tests, [Doctest](https://github.com/onqtam/doctest/) as a C++ unit test framework
-+- optionally for built-in tests, [Doctest](https://github.com/doctest/doctest/) as a C++ unit test framework
- - optionally for the docs, Doxygen
- 
- ## Building
-diff --git a/ci/build.sh b/ci/build.sh
-index d06b646..0867f07 100755
--- a/ci/build.sh
-+++ b/ci/build.sh
-@@ -73,7 +73,7 @@ build_n_test() {
- }
- 
- build_n_test github/CESNET/libyang -DENABLE_BUILD_TESTS=ON -DENABLE_VALGRIND_TESTS=OFF
-build_n_test github/onqtam/doctest -DDOCTEST_WITH_TESTS=OFF
-+build_n_test github/doctest/doctest -DDOCTEST_WITH_TESTS=OFF
- build_n_test ${ZUUL_PROJECT_NAME} -DBUILD_TESTING=ON
- 
- pushd ${BUILD_DIR}/${ZUUL_PROJECT_NAME}
-- 
-2.43.0
-
@@ -1,27 +0,0 @@
-diff -urN lowdown-VERSION_1_0_2.orig/configure lowdown-VERSION_1_0_2/configure
--- lowdown-VERSION_1_0_2.orig/configure	2025-03-21 12:58:06.151106271 +0000
-+++ lowdown-VERSION_1_0_2/configure	2025-03-21 13:20:20.649825864 +0000
-@@ -61,12 +61,7 @@
- 
- MAKE_FLAGS=""
- 
-if [ -n "${MAKELEVEL}" ]; then
-	if [ "${MAKELEVEL}" -gt 0 ] ; then
-		MAKE_FLAGS="--no-print-directory"
-		echo "all:" | make ${MAKE_FLAGS} -sf - 2>/dev/null || MAKE_FLAGS=""
-	fi
-fi
-+MAKE_FLAGS="--no-print-directory"
- 
- if [ -n "$MAKE_FLAGS" ]; then 
- 	echo "GNU submake detected: using --no-print-directory" 1>&2
-@@ -79,9 +74,6 @@
- # in.
- #----------------------------------------------------------------------
- 
-AR=`printf "all:\\n\\t@echo \\\$(AR)\\n" | make ${MAKE_FLAGS} -sf -`
-CC=`printf "all:\\n\\t@echo \\\$(CC)\\n" | make ${MAKE_FLAGS} -sf -`
-CFLAGS=`printf "all:\\n\\t@echo \\\$(CFLAGS)\\n" | make ${MAKE_FLAGS} -sf -`
- CFLAGS="${CFLAGS} -g -W -Wall -Wextra -Wmissing-prototypes -Wstrict-prototypes"
- CFLAGS="${CFLAGS} -Wwrite-strings -Wno-unused-parameter"
- LDLIBS=
@@ -9,7 +9,7 @@ NGHTTP2_ASIO_SITE = https://github.com/kernelkit/nghttp2-asio.git
 NGHTTP2_ASIO_SITE_METHOD = git
 NGHTTP2_ASIO_LICENSE = MIT
 NGHTTP2_ASIO_LICENSE_FILES = COPYING
-NGHTTP2_ASIO_DEPENDENCIES = boost nghttp2 openssl
+NGHTTP2_ASIO_DEPENDENCIES = boost nghttp2
 NGHTTP2_ASIO_INSTALL_STAGING = YES
 NGHTTP2_ASIO_AUTOGEN = YES
 NGHTTP2_ASIO_AUTORECONF = YES
@@ -10,8 +10,8 @@ PYTHON_LIBYANG_SITE = https://files.pythonhosted.org/packages/91/2e/ff13ee16c874
 PYTHON_LIBYANG_SETUP_TYPE = setuptools
 PYTHON_LIBYANG_LICENSE = MIT
 PYTHON_LIBYANG_LICENSE_FILES = LICENSE
-PYTHON_LIBYANG_DEPENDENCIES = python-cython python-cffi libyang
-HOST_PYTHON_LIBYANG_DEPENDENCIES = host-python-cython host-python-cffi host-libyang
+PYTHON_LIBYANG_DEPENDENCIES = python-cython python-cffi
+HOST_PYTHON_LIBYANG_DEPENDENCIES = host-python-cython host-python-cffi

 $(eval $(python-package))
 $(eval $(host-python-package))
@@ -1,12 +1,12 @@
 From 9622a68eba4aeaa60619b4c33d050ce91b27653d Mon Sep 17 00:00:00 2001
 From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Pecka?= <tomas.pecka@cesnet.cz>
 Date: Tue, 8 Oct 2024 12:22:49 +0200
-Subject: [PATCH 01/44] restconf: report the list key values when they differ
+Subject: [PATCH 01/20] restconf: report the list key values when they differ
 between URI and data
 MIME-Version: 1.0
 Content-Type: text/plain; charset=UTF-8
 Content-Transfer-Encoding: 8bit
-Organization: Wires
+Organization: Addiva Elektronik

 For creating (leaf-)list instances with PUT and PATCH methods one has
 to specify the list key values in the URI and in the data as well.
@@ -1,11 +1,11 @@
 From 070cffb48fda789910581930265d4624a7213e1b Mon Sep 17 00:00:00 2001
 From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Pecka?= <tomas.pecka@cesnet.cz>
 Date: Wed, 16 Oct 2024 11:02:45 +0200
-Subject: [PATCH 02/44] uri: rename url-encoding to percent-encoding
+Subject: [PATCH 02/20] uri: rename url-encoding to percent-encoding
 MIME-Version: 1.0
 Content-Type: text/plain; charset=UTF-8
 Content-Transfer-Encoding: 8bit
-Organization: Wires
+Organization: Addiva Elektronik

 RFC 3986 [1] calls it the percent-encoding, let's be consistent.

@@ -1,11 +1,11 @@
 From 8a233202647f24538f2bbb8fff1e38d52e3599a4 Mon Sep 17 00:00:00 2001
 From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Pecka?= <tomas.pecka@cesnet.cz>
 Date: Wed, 16 Oct 2024 11:05:09 +0200
-Subject: [PATCH 03/44] uri: correct x3 rule class names
+Subject: [PATCH 03/20] uri: correct x3 rule class names
 MIME-Version: 1.0
 Content-Type: text/plain; charset=UTF-8
 Content-Transfer-Encoding: 8bit
-Organization: Wires
+Organization: Addiva Elektronik

 Fixes: e06d5bf ("server: parser for data resources in URI paths")
 Change-Id: Ic953e568d841032113ede1c0e896574361c0ebe2
@@ -1,12 +1,12 @@
 From 96cbf730010ee9539d05d0d72697dc960b3a938c Mon Sep 17 00:00:00 2001
 From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Pecka?= <tomas.pecka@cesnet.cz>
 Date: Mon, 7 Oct 2024 20:46:24 +0200
-Subject: [PATCH 04/44] restconf: parser should work on raw percent-encoded
+Subject: [PATCH 04/20] restconf: parser should work on raw percent-encoded
 paths
 MIME-Version: 1.0
 Content-Type: text/plain; charset=UTF-8
 Content-Transfer-Encoding: 8bit
-Organization: Wires
+Organization: Addiva Elektronik

 The difference between nghttp2's uri_ref::path and raw_path is that the
 raw_path keeps the percent encoding, while the path converts the percent
@@ -1,12 +1,12 @@
 From 8b13c1e4ccaa61a241674c27063439e257fa88de Mon Sep 17 00:00:00 2001
 From: =?UTF-8?q?Tom=C3=A1=C5=A1=20Pecka?= <tomas.pecka@cesnet.cz>
 Date: Wed, 2 Oct 2024 20:21:28 +0200
-Subject: [PATCH 05/44] restconf: list key values checking must respect
+Subject: [PATCH 05/20] restconf: list key values checking must respect
 libyang's canonicalization
 MIME-Version: 1.0
 Content-Type: text/plain; charset=UTF-8
 Content-Transfer-Encoding: 8bit
-Organization: Wires
+Organization: Addiva Elektronik

 While dealing with the issue that was fixed in the previous commit we
 realized that the issue is deeper. Not only that our parser rejected
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Mattias Walström	e3fe203005	Minor changes in changelog	2025-04-11 16:27:01 +02:00
Mattias Walström	18f7c779c9	Changelog: Prepare for release 25.03.01	2025-04-11 14:09:57 +02:00
Mattias Walström	454207c185	Fix migration when SSH server settings exist This fix #1015	2025-04-11 14:05:53 +02:00
Richard AlpeandMattias Walström	d877806e2b	confd: remove prefix from version leaf in migrate Signed-off-by: Richard Alpe <richard@bit42.se>	2025-04-11 14:04:38 +02:00
Richard AlpeandMattias Walström	5ed7182361	confd: fix indentation of bin/migrate Don't mix tabs and spaces. Signed-off-by: Richard Alpe <richard@bit42.se>	2025-04-11 14:04:24 +02:00
Mattias Walström	3f695b6c62	Fix symlink in release packages Fix #1002	2025-04-11 14:03:57 +02:00
Mattias Walström	4f3605a5f7	migrate: Fix typo resulting in not logging correctly	2025-04-11 14:03:42 +02:00
Joachim WibergandMattias Walström	e89dde0d25	confd: set correct file version of migrated files in backup Signed-off-by: Joachim Wiberg <troglobit@gmail.com>	2025-04-11 14:03:28 +02:00
Joachim WibergandMattias Walström	e1ecf6b71d	board/common: set wheel group on /cfg/backup dir Signed-off-by: Joachim Wiberg <troglobit@gmail.com>	2025-04-11 14:03:16 +02:00
				`@@ -1 +0,0 @@`
				`root=/dev/mmcblk0p2 rootwait console=tty1 console=ttyAMA0,115200`
				`@@ -1 +0,0 @@`
				`SUBSYSTEM=="net", ACTION=="add", TEST=="/sys/class/net/$name/wireless", NAME="wifi%n"`