cloudflared: update to 2024.1.5

[karasevm]

Description

Update to 2024.1.5

2024.1.5

• 2024-01-22 TUN-8176: Support ARM platforms that don't have an FPU or have it enabled in kernel
• 2024-01-15 TUN-8158: Bring back commit e6537418859afcac29e56a39daa08bcabc09e048 and fixes infinite loop on linux when the socket is closed

2024.1.4

• 2024-01-19 Revert "TUN-8158: Add logging to confirm when ICMP reply is returned to the edge"

2024.1.3

• 2024-01-15 TUN-8161: Fix broken ARM build for armv6
• 2024-01-15 TUN-8158: Add logging to confirm when ICMP reply is returned to the edge

2024.1.2

• 2024-01-11 TUN-8147: Disable ECN usage due to bugs in detecting if supported
• 2024-01-11 TUN-8146: Fix export path for install-go command
• 2024-01-11 TUN-8146: Fix Makefile targets should not be run in parallel and install-go script was missing shebang
• 2024-01-10 TUN-8140: Remove homebrew scripts

2024.1.1

• 2024-01-10 TUN-8134: Revert installed prefix to /usr
• 2024-01-09 TUN-8130: Fix path to install go for mac build
• 2024-01-09 TUN-8129: Use the same build command between branch and release builds
• 2024-01-09 TUN-8130: Install go tool chain in /tmp on build agents
• 2024-01-09 TUN-8134: Install cloudflare go as part of make install
• 2024-01-08 TUN-8118: Disable FIPS module to build with go-boring without CGO_ENABLED

2024.1.0

• 2024-01-01 TUN-7934: Update quic-go to a version that queues datagrams for better throughput and drops large datagram
• 2023-12-20 TUN-8072: Need to set GOCACHE in mac go installation script
• 2023-12-17 TUN-8072: Add script to download cloudflare go for Mac build agents
• 2023-12-15 Fix nil pointer dereference segfault when passing "null" config json to cloudflared tunnel ingress validate (Nil pointer dereference panic when passing "null" config json to cloudflared tunnel ingress validate cloudflare/cloudflared#1070)
• 2023-12-15 configuration.go: fix developerPortal link (Update developerPortal URL in configuration.go cloudflare/cloudflared#960)
• 2023-12-14 tunnelrpc/pogs: fix dropped test errors (tunnelrpc/pogs: fix dropped test errors cloudflare/cloudflared#1106)
• 2023-12-14 cmd/cloudflared/updater: fix dropped error (cmd/cloudflared/updater: fix dropped error cloudflare/cloudflared#1055)
• 2023-12-14 use os.Executable to discover the path to cloudflared ([access] use os.Executable to discover the path to cloudflared when generating ssh config cloudflare/cloudflared#1040)
• 2023-12-14 Remove extraneous period from Path Environment Variable (Remove extraneous period from Path Environment Variable cloudflare/cloudflared#1009)
• 2023-12-14 Use CLI context when running tunnel (Use CLI context when running tunnel cloudflare/cloudflared#597)
• 2023-12-14 TUN-8066: Define scripts to build on Windows agents
• 2023-12-11 TUN-8052: Update go to 1.21.5
• 2023-12-07 TUN-7970: Default to enable post quantum encryption for quic transport
• 2023-12-04 TUN-8006: Update quic-go to latest upstream
• 2023-11-15 VULN-44842 Add a flag that allows users to not send the Access JWT to stdout
• 2023-11-13 TUN-7965: Remove legacy incident status page check
• 2023-11-13 AUTH-5682 Org token flow in Access logins should pass CF_AppSession cookie

2023.10.0

• 2023-10-06 TUN-7864: Document cloudflared versions support
• 2023-10-03 CUSTESC-33731: Make rule match test report rule in 0-index base
• 2023-09-22 TUN-7824: Fix usage of systemctl status to detect which services are installed
• 2023-09-20 TUN-7813: Improve tunnel delete command to use cascade delete
• 2023-09-20 TUN-7787: cloudflared only list ip routes targeted for cfd_tunnel
• 2023-09-15 TUN-7787: Refactor cloudflared to use new route endpoints based on route IDs
• 2023-09-08 TUN-7776: Remove warp-routing flag from cloudflared
• 2023-09-05 TUN-7756: Clarify that QUIC is mandatory to support ICMP proxying

2023.8.2

• 2023-08-25 TUN-7700: Implement feature selector to determine if connections will prefer post quantum cryptography
• 2023-08-22 TUN-7707: Use X25519Kyber768Draft00 curve when post-quantum feature is enabled

2023.8.1

• 2023-08-23 TUN-7718: Update R2 Token to no longer encode secret

2023.8.0

• 2023-07-26 TUN-7584: Bump go 1.20.6

2023.7.3

• 2023-07-25 TUN-7628: Correct Host parsing for Access
• 2023-07-24 TUN-7624: Fix flaky TestBackoffGracePeriod test in cloudflared

2023.7.2

• 2023-07-19 TUN-7599: Onboard cloudflared to Software Dashboard
• 2023-07-19 TUN-7587: Remove junos builds
• 2023-07-18 TUN-7597: Add flag to disable auto-update services to be installed
• 2023-07-17 TUN-7594: Add nightly arm64 cloudflared internal deb publishes
• 2023-07-14 TUN-7586: Upgrade go-jose/go-jose/v3 and core-os/go-oidc/v3
• 2023-07-14 TUN-7589: Remove legacy golang.org/x/crypto/ssh/terminal package usage
• 2023-07-14 TUN-7590: Remove usages of ioutil
• 2023-07-14 TUN-7585: Remove h2mux compression
• 2023-07-14 TUN-7588: Update package coreos/go-systemd

Upstream changelog: https://github.com/cloudflare/cloudflared/blob/master/RELEASE_NOTES

Checklist

• Build rule all-supported completed successfully
• New installation of package completed successfully
• Package upgrade completed successfully (Manually install the package again)
• Package functionality was tested
• Any needed documentation is updated/created

Type of change

• Bug fix
• New Package
• Package update
• Includes small framework changes
• This change requires a documentation update (e.g. Wiki)

[hgy59]

regarding the folowing change

• 2023-07-18 TUN-7597: Add flag to disable auto-update services to be installed

we should use this new flag to disable auto-update.

[karasevm]

As described in this commit message, the flag is for the cloudflared service install command, that is used for installing a systemd service/sysv script on regular Linux systems. Also we already disable the updates anyway with --no-autoupdate flag in the service command.

[hgy59]

still waiting for an update to support go 1.21 (cloudflare/cloudflared#1054)

[karasevm]

2024.1.0 compiles successfully with go 1.21, but while testing it seems that cloudflare/cloudflared#1132 is still present on the release version. Even though it does fallback to HTTP2 after a few minutes, it's probably worth waiting for a fixed release.

[karasevm]

2024.1.1 now requires building using cloudflare/go, I've attempted to replicate the build process of the official containers but I'm open to any suggestions.

[DevinCarr]

Hey, I work on cloudflared, how can I help you with the new build process? (would love to help get this package updated for my own NAS!)

The way that we manage the build is the following:

1. Install base go 1.21
2. Download and install cloudflare/go
3. Build with cloudflare/go

There shouldn't be any noticeable differences between go 1.21 and the cloudflare/go (1.21), but feel free to let me know how I can help!

[karasevm]

@DevinCarr Thanks for offering help, the package is being built just like you've described. It would be great if you could check the changes in cross/cloudflared/Makefile just to be sure that there are no issues. Other than that (if there are no other
questions/suggestions from anyone else) the PR is ready to be merged.

[hgy59]

LGTM

[mreid-tt]

Happy to merge and publish this for you...

[war59312]

Thanks for all the hard work on this.

I see the Cloudflared package updated at both https://synocommunity.com/packages and https://synocommunity.com/package/cloudflared

But it is not being offered yet in the Synology Package Center.

Is there a way to force the Synology Package Center to check for a new build?

I realize I can just manually install the updated package via the download links, via the .spk files, but I'd rather do it through Package Center.

[mreid-tt]

The SynoCommunity has bandwidth and content delivery generously provided and sponsored by Fastly (from our homepage). What this means, is that changes to the repository will take 24-48 hours to propagate throughout the Fastly global network of caching servers.

If you need it installed more quickly, a manual install via the download links is the only way to do so. The files are exactly the same as what would be distributed via the Package Center so no risk.