Divested-WRT: No-nonsense hardened builds for Linksys WRT series

Community Builds, Projects & Packages
143

@SkewedZeppelin

Thank you for the builds and your excellent documentation to maintain our own. Your instructions are clear and easy to follow.

I noticed that ip6 leases are not handed out to wireless clients, is that by design? If so, would you please elaborate?

Thanks again for your time and knowledge.

1 Like
144

@scott68
I haven't had any issues with IPv6, wired or wireless, DHCPv6 or SLAAC.
Is your LAN br-lan?
If you have multiple OpenWrt units you need to make sure that they each have a unique IPv6 suffix set for the LAN interface and have an identical ULA-Prefix set.

@wally_walrus
If you are compiling you can put configs in
packages/base-files/
or
target/linux/mvebu/cortexa9/base-files/
or edit the specific files for each package.

You can also create a custom init script that calls uci with your changes.
There is CONFIG_PREINITOPT and CONFIG_INITOPT for overriding the init.

145

@SkewedZeppelin, thank you... I was hoping there would be a way to "mount" the image and copy the files over. I wish I could compile on my own but I'm not there yet, may have to take that as my next project :slight_smile:

146

@wally_walrus
I think you technically can extract the sysupgrade and use squashfstools to edit the root partition.
But ymmv.

147

Yes, its br-lan. No dual router setups.

I used your divested .config, added a couple packages, and setup from scratch. The build is very stable. Fastest pings yet.

Personally I use x86 build with ap's, but I help family and a friend. One has 1200ac with a single ap and the other has a 32x using internal wlans. No ip6 on the 32x's wlans is not a deal breaker. Heck, it may keep his kids off of facetime. Lol. No strange errors in log to report. Everything else looks normal.

I'm going to backup and reflash your latest to see if a package I added is causing the issue.

148

@scott68
here are the relevant parts of my config for reference:

/etc/config/network
config globals 'globals'
	option ula_prefix 'CHANGE ME'

config interface 'lan'
	option ip6assign '64'
	option ip6hint '1'
	option ip6ifaceid '::1' #INCREMENT this on each subsequent router/AP

config interface 'wan'
	option ifname 'wan'
	option proto 'dhcp'
	option peerdns '0'

config interface 'wan6'
	option ifname 'wan'
	option proto 'dhcpv6'
	option peerdns '0'
	option reqprefix '56'
	option auto '1'


/etc/config/dhcp
config dhcp 'lan'
	option interface 'lan'
	option leasetime '12h'
	option dhcpv6 'server'
	option ra 'server'
	option ra_slaac '1'
	list ra_flags 'managed-config'
	list ra_flags 'other-config'
149

hi,
@SkewedZeppelin - thanks for the guide and the video - very helpful and much appreciated.

Is there a how to migrate guide for swconfig to dsa. I tried to search this forum for more info but havent had much luck. Or is it better off just installing the firmware factory defaults and reconfiguring ?
cheers

150

@skitts24

Rough swconfig to DSA migration steps:

  1. Backup
  2. Edit /etc/config/network as follows:
  • drop all config switch* blocks and their contents
  • in config interface 'lan' change option ifname value to 'lan1 lan2 lan3 lan4'
  • in config interface 'wan' change option ifname value to 'wan'
  • add the following
config device 'wan_wan_dev'
	option name 'wan'
	option macaddr '[INSERT MAC]'
  1. Edit /etc/config/system as follows:
  • in config system add option compat_version '1.1'
  • in config led 'led_wan' change option dev to 'wan'
  1. Edit /etc/config/sqm as follows
  • in config queue 'eth1' change option interface to 'wan'
  1. sysupgrade with keep settings checked
  2. success?

Note: if it isn't right you will get locked out, and will have to factory reset via the button.

I haven't done it in a while, please anyone correct it if necessary.
I'll then write it up and add it to the site soon.

Alternative you can just sysupgrade with keep settings unchecked and start fresh.

5 Likes
151

Under lan section also add the wireless interfaces as they are members of the same zone.

nitroshift

3 Likes
152

Thanks heaps - i will give that a go and let you know if i have any issues.

153

i want to build an image without the firewall but am not sure exactly how to remove it and where it sits in the config. I have a 2 wrt-32x (second one i scored for real cheap), one being an ap only.
in the config under the luci -> applications section i cant make a change to the install option which i assume is based on other dependencies that are installing. problem is i dont know where they are located in the config exactly.
cheers

154

@skitts24
You do not need to remove the firewall if all you want to do is use it as an AP.

155

Thanks. I was reading that doco earlier and it was saying to disable the firewall. I thought it would be easier to just not install it so I would have a custom config with no firewall installed for that particular router

156

Hi!

I´m trying to compile following your instructions, but when running this ./scripts/feeds install -a -f everithing seems to be OK, but later it shows this warnings:

WARNING: Makefile 'package/utils/busybox/Makefile' has a dependency on 'libpam', which does not exist
WARNING: Makefile 'package/utils/busybox/Makefile' has a dependency on 'libpam', which does not exist
WARNING: Makefile 'package/utils/busybox/Makefile' has a build dependency on 'libpam', which does not exist
WARNING: Makefile 'package/boot/kexec-tools/Makefile' has a dependency on 'liblzma', which does not exist
WARNING: Makefile 'package/network/services/lldpd/Makefile' has a dependency on 'libnetsnmp', which does not exist
WARNING: Makefile 'package/utils/policycoreutils/Makefile' has a dependency on 'libpam', which does not exist
WARNING: Makefile 'package/utils/policycoreutils/Makefile' has a dependency on 'libpam', which does not exist
WARNING: Makefile 'package/utils/policycoreutils/Makefile' has a build dependency on 'libpam', which does not exist

I'm compiling from Ubuntu 20.04 LTS using WSL2.

Will this be a problem?

Thank you!

2 Likes
157

@sunchar

Master is currently broken/in-flux right now.
I'd checkout to d8afae0be8f0a2a4a26e303dd5212e2a2f8d69a3.
I'm not actually sure how to checkout all repos. Anyone know?

3 Likes
158

This means that it could lead to problems if install resulting firmware?

159

Checkout specific code revision

1 Like
160

This is my first atempt, but it didn't worked. This is the result of the last step:

$ make -j16
ln: failed to create symbolic link 'lib64': Not a directory
ln: failed to create symbolic link 'lib32': Not a directory
time: target/linux/prereq#0.47#0.23#2.89
 make[1] world
 make[2] tools/compile
 make[3] -C tools/flock compile
 make[3] -C tools/xz compile
 make[2] package/cleanup
    ERROR: tools/xz failed to build.
make -r world: build failed. Please re-run make with -j1 V=s or V=sc for a higher verbosity level to see what's going on
make: *** [/mnt/c/Users/Carlos/openwrt/include/toplevel.mk:230: world] Error 1

Any ideas about what i'm doing wrong?
I'm new on this.

Thank you!

161

do you have all the build libraries?
see

i have had to use -j1 for first make on a local git clone.
this is specifically mentioned in the quick building guide:

"For faster compiling, use make -j N , where N is the number of CPU cores + 1. Be aware that this method is prone to errors during compiling. In case you encounter compile errors, your very first step is to compile again without -j N . Use of make download prior to parallel compilation is recommended to prevent some of these errors (-jN is generally safe for the download step for those with faster Internet connectivity.)"

it is a mystery to me why these errors occur but I have usually been able to resolve them by running make -j1.

162

Use j -1 V=sc

1 Like