Start firewall rules before network is brought up.

Forwarded: https://github.com/evilsocket/opensnitch/pull/1019
Last-Update: 2025-04-20

Also protect the firewall daemon from the kernel OOM killer.  Partly
based on proposal from
https://github.com/evilsocket/opensnitch/pull/1019/.

Gbp-Pq: Name 1030-systemd-service-earlier.patch

Added ebpf build rule mapping for armv8 to work with more armhf machines.

Forwarded: https://github.com/evilsocket/opensnitch/pull/1326
Last-Update: 2025-04-20

Last-Update: 2025-04-20
Gbp-Pq: Name 1020-ebpf-armv8l.patch

Changed how ebpf build find kernel headers from running to installed version.

Forwarded: https://github.com/evilsocket/opensnitch/pull/1327
Last-Update: 2025-04-20

The installed kernel do not match running kernel in chroots and containers.
Last-Update: 2025-04-20
Gbp-Pq: Name 1000-installed-kernel-headers.patch

opensnitch (1.6.9-2+rpi1) trixie-staging; urgency=medium

  * Remove linux-headers build-dependency.

[dgit import unpatched opensnitch 1.6.9-2+rpi1]

Import opensnitch_1.6.9-2+rpi1.debian.tar.xz

[dgit import tarball opensnitch 1.6.9-2+rpi1 opensnitch_1.6.9-2+rpi1.debian.tar.xz]

Import opensnitch_1.6.9.orig.tar.gz

[dgit import orig opensnitch_1.6.9.orig.tar.gz]