Divested-WRT: No-nonsense hardened builds for Linksys WRT series

Community Builds, Projects & Packages
1382

ver++, rinse and repeated :wink:

1383

how man ? which build you running on your wrt32x??

1384
3 Likes
1385

https://divested.dev/unofficial-openwrt-builds/mvebu-linksys/20231124-01/

  • update to 6f5c301eab71e07b1fe4b57ce6a2662dca4c66de
    https://github.com/openwrt/openwrt/compare/4d9108e0...6f5c301e
  • [upstream] update to kernel 6.1.63 (security and bug fixes)
  • [cherrypick] #14044: mwlwifi: update to version 10.4.10-20231120
    huge mwlwifi update thanks to @jbsky :fire::fire::fire:
    fixes amsdu and wpa3 (on 1900/1200) + many other improvements
  • drops amsdu patch

Been running for a few hours and happy with it :slight_smile:

wpa3 works without having sae_pwe in wireless config

8 Likes
1386

Brings some improvements for 3200 too?

1387

Check jbsky's changelog, you can see a few fixes for "all chips". But yea most of the fixes are for 1200/1900 series since that's where the problems were with amsdu, etc.

edit: he only fixed WPA3 for 1200/1900 as per the changelog, it's not fixed for 3200acm/32x as per his commit info: "Only 8964 left with broken WPA3."

1 Like
1388

hi,

problem here, idea?
thanks

openwrt$ git am *.patch
Applying: Revert "uhttpd: don't redirect to HTTPS by default"
Applying: kernel: generic 6.1: config hardening
Applying: base-files: sysctl.d: basic hardening
Applying: dnsmasq: only listen on br-lan interface
Applying: arm/aarch64: Set -O2 as default for Cortex-A processor cores
Applying: ARM Cortex-A9: build the userspace with Thumb-2 instructions
Applying: build: hardening: misc added flags
Applying: mwlwifi: update to version 10.4.10-20231120
.git/rebase-apply/patch:74: trailing whitespace.
 
.git/rebase-apply/patch:75: space before tab in indent.
 	if (sizeof(struct pcie_tx_ctrl_ndp) >
.git/rebase-apply/patch:76: space before tab in indent.
 	    sizeof(tx_info->driver_data)) {
.git/rebase-apply/patch:79: space before tab in indent.
 			  sizeof(struct pcie_tx_ctrl_ndp),
.git/rebase-apply/patch:80: space before tab in indent.
 			  sizeof(tx_info->driver_data));
error: patch failed: package/kernel/mwlwifi/Makefile:8
error: package/kernel/mwlwifi/Makefile: patch does not apply
error: patch failed: package/kernel/mwlwifi/patches/001-Fix-compilation-warning-with-64-bit-system.patch:117
error: package/kernel/mwlwifi/patches/001-Fix-compilation-warning-with-64-bit-system.patch: patch does not apply
error: patch failed: package/kernel/mwlwifi/patches/004-mwlwifi-fix-PCIe-DT-node-null-pointer-dereference.patch:19
error: package/kernel/mwlwifi/patches/004-mwlwifi-fix-PCIe-DT-node-null-pointer-dereference.patch: patch does not apply
error: patch failed: package/kernel/mwlwifi/patches/005-mac80211_update.patch:1
error: package/kernel/mwlwifi/patches/005-mac80211_update.patch: patch does not apply
error: patch failed: package/kernel/mwlwifi/patches/006-remove-uaccess-and-get_fs-calls-from-PCIe-for-Kenel-.patch:19
error: package/kernel/mwlwifi/patches/006-remove-uaccess-and-get_fs-calls-from-PCIe-for-Kenel-.patch: patch does not apply
error: patch failed: package/kernel/mwlwifi/patches/007-replace-usage-of-the-deprecated-pci-dma-compat.h-API.patch:24
error: package/kernel/mwlwifi/patches/007-replace-usage-of-the-deprecated-pci-dma-compat.h-API.patch: patch does not apply
Patch failed at 0008 mwlwifi: update to version 10.4.10-20231120
1389

@Peacefuleight
that last commit you don't need as it was merged upstream: https://github.com/openwrt/openwrt/commit/2ed358180ef0f87532cdedefec09d5d605625beb

1 Like
1390

finaly it is ok for the patch but errors at the end

 postinst prerm;  )
install -d -m0755 /media/james/D/WRT_build/openwrt/bin/packages/arm_cortex-a9_vfpv3-d16/base
/media/james/D/WRT_build/openwrt/staging_dir/host/bin/fakeroot /media/james/D/WRT_build/openwrt/staging_dir/host/bin/bash /media/james/D/WRT_build/openwrt/scripts/ipkg-build -m "" /media/james/D/WRT_build/openwrt/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/ath10k-ct-firmware-2020-11-08/ipkg-arm_cortex-a9_vfpv3-d16/ath10k-firmware-qca988x-ct /media/james/D/WRT_build/openwrt/bin/packages/arm_cortex-a9_vfpv3-d16/base
Packaged contents of /media/james/D/WRT_build/openwrt/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/ath10k-ct-firmware-2020-11-08/ipkg-arm_cortex-a9_vfpv3-d16/ath10k-firmware-qca988x-ct into /media/james/D/WRT_build/openwrt/bin/packages/arm_cortex-a9_vfpv3-d16/base/ath10k-firmware-qca988x-ct_2020-11-08-1_arm_cortex-a9_vfpv3-d16.ipk
rm -rf /media/james/D/WRT_build/openwrt/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/ath10k-ct-firmware-2020-11-08/.pkgdir/ath10k-firmware-qca988x-ct.installed /media/james/D/WRT_build/openwrt/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/ath10k-ct-firmware-2020-11-08/.pkgdir/ath10k-firmware-qca988x-ct
mkdir -p /media/james/D/WRT_build/openwrt/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/ath10k-ct-firmware-2020-11-08/.pkgdir/ath10k-firmware-qca988x-ct
install -d -m0755 /media/james/D/WRT_build/openwrt/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/ath10k-ct-firmware-2020-11-08/.pkgdir/ath10k-firmware-qca988x-ct/lib/firmware/ath10k/QCA988X/hw2.0
install -m0644 /media/james/D/WRT_build/openwrt/dl/ath10k-ct-firmware-2020-11-08/QCA988X-firmware-2-ct-full-community-22.bin.lede.022 /media/james/D/WRT_build/openwrt/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/ath10k-ct-firmware-2020-11-08/.pkgdir/ath10k-firmware-qca988x-ct/lib/firmware/ath10k/QCA988X/hw2.0/firmware-2.bin
touch /media/james/D/WRT_build/openwrt/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/ath10k-ct-firmware-2020-11-08/.pkgdir/ath10k-firmware-qca988x-ct.installed
mkdir -p /media/james/D/WRT_build/openwrt/staging_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/root-mvebu/stamp
SHELL= flock /media/james/D/WRT_build/openwrt/tmp/.root-copy.flock -c 'cp -fpR /media/james/D/WRT_build/openwrt/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/ath10k-ct-firmware-2020-11-08/.pkgdir/ath10k-firmware-qca988x-ct/. /media/james/D/WRT_build/openwrt/staging_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/root-mvebu/'
touch /media/james/D/WRT_build/openwrt/staging_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/root-mvebu/stamp/.ath10k-firmware-qca988x-ct_installed
echo "ath10k-firmware-qca988x-ct" >> /media/james/D/WRT_build/openwrt/staging_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/pkginfo/ath10k-ct-firmware.default.install
make[3]: Leaving directory '/media/james/D/WRT_build/openwrt/package/firmware/ath10k-ct-firmware'
time: package/firmware/ath10k-ct-firmware/compile#0.41#0.12#0.48
make[3]: Entering directory '/media/james/D/WRT_build/openwrt/package/kernel/mwlwifi'
touch /media/james/D/WRT_build/openwrt/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/linux-mvebu_cortexa9/mwlwifi-2023-11-20-2a5a4ae3/.prepared_463c4261b3dcdbbc6f5f920bbe4987f1_6664517399ebbbc92a37c5bb081b5c53_check
. /media/james/D/WRT_build/openwrt/include/shell.sh; xzcat /media/james/D/WRT_build/openwrt/dl/mwlwifi-2023-11-20-2a5a4ae3.tar.xz | tar -C /media/james/D/WRT_build/openwrt/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/linux-mvebu_cortexa9/mwlwifi-2023-11-20-2a5a4ae3/.. -xf -
[ ! -d ./src/ ] || cp -fpR ./src/. /media/james/D/WRT_build/openwrt/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/linux-mvebu_cortexa9/mwlwifi-2023-11-20-2a5a4ae3

Applying /media/james/D/WRT_build/openwrt/package/kernel/mwlwifi/patches/001-Fix-compilation-warning-with-64-bit-system.patch using plaintext: 
patching file debugfs.c
patching file hif/fwcmd.c
patching file hif/pcie/8964/tx_ndp.c
patching file hif/pcie/pcie.c

Applying /media/james/D/WRT_build/openwrt/package/kernel/mwlwifi/patches/001-Fix-compilation-warning-with-64-bit-system.patch.rej using plaintext: 
patching file debugfs.c
Hunk #1 FAILED at 130.
Hunk #2 FAILED at 143.
Hunk #3 FAILED at 158.
3 out of 3 hunks FAILED -- saving rejects to file debugfs.c.rej
Patch failed!  Please fix /media/james/D/WRT_build/openwrt/package/kernel/mwlwifi/patches/001-Fix-compilation-warning-with-64-bit-system.patch.rej!
make[3]: *** [Makefile:107: /media/james/D/WRT_build/openwrt/build_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/linux-mvebu_cortexa9/mwlwifi-2023-11-20-2a5a4ae3/.prepared_463c4261b3dcdbbc6f5f920bbe4987f1_6664517399ebbbc92a37c5bb081b5c53] Error 1
make[3]: Leaving directory '/media/james/D/WRT_build/openwrt/package/kernel/mwlwifi'
time: package/kernel/mwlwifi/compile#0.19#0.05#0.22
    ERROR: package/kernel/mwlwifi failed to build.
make[2]: *** [package/Makefile:128: package/kernel/mwlwifi/compile] Error 1
make[2]: Leaving directory '/media/james/D/WRT_build/openwrt'
make[1]: *** [package/Makefile:122: /media/james/D/WRT_build/openwrt/staging_dir/target-arm_cortex-a9+vfpv3-d16_musl_eabi/stamp/.package_compile] Error 2
make[1]: Leaving directory '/media/james/D/WRT_build/openwrt'
make: *** [/media/james/D/WRT_build/openwrt/include/toplevel.mk:232: world] Error 2
1391

@Peacefuleight
try resetting:

  • git add -A && git am --abort
  • git add -A && git reset --hard
  • git pull
  • etc.
1 Like
1393

Guess I could bring the 1900 out of storage and try it. Is it worth it? Or stick with the 3200 and wireless AP?

1394

The only difference is WPA3 is fixed for the 1900. Other than connecting to WiFi in a slightly more secure way than WPA2, the 3200 is faster or on par in every other way.

Most networks still can't use WPA3 exclusively so it's moot anyway, since many devices still rely on WPA2 so you end up leaving both protocols enabled (on my U6+ I have both on).

1395

My AP is a WAX620 and I have WPA3/WPA2 enabled. Only device uses WPA3 is my phone.

OK I'll stick with the 3200.

Thanks much!

1396

Is disabling AMSDU still recommended for WRT32x/3200, or has this been fixed at some point along the way? :slight_smile: Thanks

1397

Disabling AMSDU has never been recommended for 32x/3200acm. It was only a latency issue on 1200/1900.

It's discussed here: [https://openwrt.org/toh/linksys/wrt_ac_series#latency_with_88w8864]

2 Likes