Divested-WRT: No-nonsense hardened builds for Linksys WRT series

@wally_walrus

bmon

I haven't tested it, I will try next time I do builds.

@anon68513369

you don't feel offended

I encourage people to build! That is the power and spirit of FOSS.
It is just that there have been 14 posts regarding your builds in my thread.
:slight_smile:

Hi @SkewedZeppelin thanks for this! I see you posted a new build today (Mar 26) but the changelog is not updated - anything special to look forward to in this build?

1 Like

@wally_walrus

changelog is not updated

Seems I didn't copy it to the server.
It is there now.
It should always be up to date here: https://github.com/divestedcg/Divested-WRT/blob/master/CHANGELOG.txt

2 Likes

yes, it is possible to build images now directly from the master

I will make a separate thread on the forum.

Maybe we can learn from our findings, experiments, patches!

Thanks!

So people: gvel50 is making a new separate forum thread with a github repo!

2 Likes

Divested WRT 20210326-00 running on my WRT32X. Smooth and stable. Love it!

2 Likes

Same, Just installed it on my WRT32X and no issues as yet.

Thanks for these releases, really appreciated.

Just need to do some reading now, and learn how to build my own images.

1 Like

Hello,
I saw divested has the wpad-full compiled, does it also support WPS push button?
O anyone tested this function?

I have a WRT32X (still running the final davidc502 build) and want to try Divested but cannot live without USB 3.0, NAS, NTFS-3G, and Samba4. The performance on these routers is just to good to live without having an external drive plugged in for files that I don't care about security (using a 2TB drive for movies on Kodi with Shield TV Pro) getting 120MB/s rw currently.

Is it possible to add these through opkg or would it not work because kmod is needed for the USB packages? Thanks.

1 Like

I feel I haven't provided some of the values that I afford my other projects.

I would rather see people run an up-to-date base, even if not configured as secure as possible, then I would see people run blatantly insecure software.

Today's build adds some requested kernel modules to partially remediate that.

Regards,
Tad.

4 Likes

@SkewedZeppelin I prefer an up-to-date base. Stability and Security first. No blown up image.

1 Like

Security is still first on my builds, nothing has changed there.
I don't plan on adding any daemons to my builds.
I only added the kmods and some helper tools for packages that would be incompatible if installed from opkg.

As an aside, WPA3-SAE works nicely on the 88w8864 devices.

4 Likes

Hi @SkewedZeppelin, at some point you mentioned you wanted to add SELinux to your build. Is that still a goal for the near future?

Thanks again for doing this!

1 Like

@wally_walrus
When SELinux support is ready, these builds will utilize it.
I've made a few test builds, but upstream is not yet there.

1 Like

@SkewedZeppelin

Thank you again for your work on these - once I figure out how to get DSA VLANs working as per my ISP I look forward to using your builds - but that is a topic for another thread.

Question - DoH?
I see you have banip and adblock, but don't have DoH or DoT included - curious as to your thoughts.

Cheers.

@pSych0bUNny

1 Like

hi guys, sorry for noob question but i can't find switch tab to set vlans under network menu...someone can help me. thanks

seems that they are moving away from that to something called "DSA"

there are versions that still have the "switch" menu

So now the question is how can I disable dsa and reactivate the old swconfig? If there is a patch I can recompile the software.

You can’t disable it. DSA is now upstream Linux solution for controlling switches on the mvebu platform (among others).