refactor(ns-audit): simplify report generation by integrating tar.gz creation and latest symlink into API

- Remove /usr/sbin/ns-audit wrapper script
- Integrate tar.gz bundle generation directly in ns.audit API generate method
- Automatically create/update 'latest' symlink pointing to newly generated report
- Update Makefile to remove installation of ns-audit.py
- Update README.md documentation

Author: gsanchietti

1705.patch

@@ -0,0 +1,97 @@
+From 9d730a39cb17f7118daaecfa282e2a669352ea6b Mon Sep 17 00:00:00 2001
+From: Giacomo Sanchietti <giacomo.sanchietti@nethesis.it>
+Date: Wed, 3 Jun 2026 13:14:10 +0200
+Subject: [PATCH] fix(storage): handle changes from OpenWrt 25
+
+Changes:
+- /rom partition is not mounted on first boot,
+  from the second boot, it's mounted twice also in loop
+- stop all services that using the storage before unmounting
+  to avoid resource busy errors
+- before unmounting, wait for all processes to finish
+  writing files
+- restart the services that are using the storage when
+  the configuration changes so they can reconfigure themself
+---
+ packages/ns-storage/files/add-storage            |  7 ++++++-
+ packages/ns-storage/files/ns-storage-dhcp-leases |  7 +++----
+ packages/ns-storage/files/remove-storage         | 16 ++++++++++++++--
+ 3 files changed, 23 insertions(+), 7 deletions(-)
+
+diff --git a/packages/ns-storage/files/add-storage b/packages/ns-storage/files/add-storage
+index 11851168c..9aa15d682 100755
+--- a/packages/ns-storage/files/add-storage
++++ b/packages/ns-storage/files/add-storage
+@@ -50,4 +50,9 @@ crontab -l | grep -q '/usr/sbin/sync-data' || echo '40 1 * * * /usr/sbin/sync-da
+ /usr/libexec/ns-openvpn/openvpn-merge-connections-db
+ 
+ # Setup persistent dnsmasq leases file
+-/usr/libexec/ns-storage-dhcp-leases
+\ No newline at end of file
++/usr/libexec/ns-storage-dhcp-leases
++
++# Restart services that will use the storage
++/etc/init.d/dnsmasq restart
++/etc/init.d/victoria-metrics restart
++/etc/init.d/victoria-logs restart 2>/dev/null || :
+diff --git a/packages/ns-storage/files/ns-storage-dhcp-leases b/packages/ns-storage/files/ns-storage-dhcp-leases
+index 027b6f88a..f5318ea5e 100644
+--- a/packages/ns-storage/files/ns-storage-dhcp-leases
++++ b/packages/ns-storage/files/ns-storage-dhcp-leases
+@@ -37,13 +37,12 @@ fi
+ if  [ "${current_leasefile}" != "${target_leasefile}" ]; then
+ 	if [ "${current_leasefile}" = "${STORAGE_LEASEFILE}" ]; then
+ 		# From storage to tmp
+-		cp -af "${STORAGE_LEASEFILE}" "${TMP_LEASEFILE}" || :
++		cp -af "${STORAGE_LEASEFILE}" "${TMP_LEASEFILE}" 2>/dev/null || :
+ 	else
+ 		# From tmp to storage
+ 		mkdir -p "${STORAGE_DIR}"
+-		cp -af "${TMP_LEASEFILE}" "${STORAGE_LEASEFILE}" || :
++		cp -af "${TMP_LEASEFILE}" "${STORAGE_LEASEFILE}" 2>/dev/null || :
+ 	fi
+ 	uci set dhcp.ns_dnsmasq.leasefile="$target_leasefile"
+ 	uci commit dhcp
+-	reload_config
+-fi
+\ No newline at end of file
++fi
+diff --git a/packages/ns-storage/files/remove-storage b/packages/ns-storage/files/remove-storage
+index 1dde7d33a..6afacf7d1 100644
+--- a/packages/ns-storage/files/remove-storage
++++ b/packages/ns-storage/files/remove-storage
+@@ -7,7 +7,7 @@
+ 
+ set -e
+ 
+-rom_part=$(lsblk -ln | grep "/rom" | uniq | awk '{print $1}')
++rom_part=$(lsblk -ln | grep "/boot" | uniq | awk '{print $1}')
+ rom_disk=$(lsblk -lno pkname /dev/$rom_part)
+ 
+ data_part=$(mount | grep /mnt/data | uniq | awk '{print $1}')
+@@ -26,6 +26,13 @@ uci commit rsyslog
+ crontab -l | grep -v "/usr/sbin/sync-data" | sort | uniq | crontab -
+ /etc/init.d/cron restart
+ 
++# Stop process that will prevent umount
++/etc/init.d/dnsmasq stop
++/etc/init.d/victoria-metrics stop
++/etc/init.d/victoria-logs stop 2>/dev/null || :
++# Sync and wait for the disk to be free
++sync && sleep 5
++
+ # Umounting data device
+ umount -f /mnt/data
+ rm -rf /mnt/data
+@@ -36,4 +43,9 @@ if [ "$rom_disk" == "$data_disk" ]; then
+ fi
+ 
+ # Restore dnsmasq to /tmp before the storage disappears.
+-/usr/libexec/ns-storage-dhcp-leases
+\ No newline at end of file
++/usr/libexec/ns-storage-dhcp-leases
++
++# Start services
++/etc/init.d/dnsmasq start
++/etc/init.d/victoria-metrics start
++/etc/init.d/victoria-logs start 2>/dev/null || :

a.sh

@@ -0,0 +1,3 @@
+for file in /rom/etc/profile.d; do
+ echo        cp "$file" /etc/profile.d/
+done

fixes

@@ -0,0 +1,10 @@
+- from the report, remove the "Run: " from the header
+- on the hader, add the hostname of the machine
+- check if a subscription is present, value is info
+- improve the css, it must be more similar to the firewall: use the style from https://192.168.100.237/
+
+- if ha is enabled, is a big plus
+
+test on:
+- testing machine: ssh root@192.168.100.237
+- testing on production machine, DO NOT CHANGE the configuration: ssh root@fw.gs.nethserver.net