qemu io_uring feature and bonding patches

zerotier: fix bug

This reverts commit fa96401f.

1. fix config_path: create and persist
2. fix secret: support identity.secret
3. fix stop_instance: remove existing networks

Signed-off-by: NVladimir Ulrich <admin@evl.su>
Co-authored-by: NVladimir Ulrich <admin@evl.su>

sync upstream

Fix “tailscaled.state” file does not exist
Remove redundant '/'

This reverts commit 2ae1ba0a.

Closed: #670

Co-authored-by: Nbreakings <breakingstop@gmail.com>

Co-authored-by: Nbreakings <breakingstop@gmail.com>

Changelog: https://github.com/qbittorrent/qBittorrent/blob/v4_5_x/ChangelogCo-authored-by: Nbreakings <breakingstop@gmail.com>

 - Update tailscale to version 1.36.0
 - Patch iptables support

Tailscale does not (yet) support nftables.
Tailscale allows running with --netfilter=off allowing
end-user to create his own firewall rules, but this
affects only tailscale cli, not tailscaled daemon, so
connection cannot be made without error telling that
tailscaled was unable to determine execute iptables
for determining it's version.

There is a work-around for those who do not want
nft-iptables compatibility package; they can create
a script to /usr/bin/iptables which responds to
--version argument and echos fake version string
and on any other arguments or no arguments, just exits.

After this procedure and starting tailscale cli with
netfilter off- it works. Openwrt has moved on to
nftables, so iptables manipulation seems unnecessary.
Especially for other reasons, on Openwrt, firewall
should be configured on it's own, because firewall
rules made by other software, such as tailscale,
loose their firewalling rules when firewall restarts.

So I patched it to allow "fake" iptables pointing
to executable /bin/false and ignoring version
request. And I also set cli to default to
netfilter off setting.

If still end-user wants to use iptables, this
patch does not make it impossible; just install
iptables, or nft-iptables, and run tailscale
with argument --netfilter=on and it works out
as it did before, tailscaled daemon still
matches with iptables if it is found in $PATH.
Signed-off-by: NOskari Rauta <oskari.rauta@gmail.com>

Fixes #19774 
Signed-off-by: NCarlo Alberto Ferraris <cafxx@strayorange.com>

Signed-off-by: NStanislav Petrashov <s@petrashov.ru>

Signed-off-by: NStanislav Petrashov <s@petrashov.ru>

Signed-off-by: NMichal Vasilek <michal.vasilek@nic.cz>

tailscale version, tailscaled -version and the web UI reported the wrong
version number which doesn't cause any issues, but it can be confusing.

This is fixed by specifying the version in go ldflags similar to how
it's done in many other go packages and the official tailscale Dockerfile.

version.Long version can not be specified in GO_PKG_LDFLAGS_X because it
contains a space and GO_PKG_LDFLAGS_X is always split at a space.
Signed-off-by: NMichal Vasilek <michal.vasilek@nic.cz>

Signed-off-by: NMagnus Kessler <Magnus.Kessler@gmx.net>

This reverts commit e5c3e251.

This reverts commit 2d3c61bd.

This reverts commit c9c73f61.

This reverts commit 0247014f.

also add new variable CARGO_VARS to make it possible
to pass environment variables for cargo process.
This is necessary when for example, cross-compiling
netavark.
Signed-off-by: NOskari Rauta <oskari.rauta@gmail.com>

* https://curl.se/changes.html#8_0_1Signed-off-by: NStan Grishin <stangri@melmac.ca>