The OpenWrt community is proud to announce the first stable release of the OpenWrt 24.10 stable series.
OpenWrt 24.10.0 incorporates over 5400 commits since branching the previous OpenWrt 23.05 release and has been under development for over one year.
Download firmware images using the OpenWrt Firmware Selector:
Upgrades of many components to new versions like the Linux kernel from version 5.15 to 6.6
TLS 1.3 support in default images
mbedtls was updated to version 3.6 which includes support for TLS 1.3
Activate POSIX Access Control Lists and file system security attributes for all file systems on devices with big flash sizes. This is needed by docker nowadays.
This is activated for all targets which do not have the small_flash feature flag. small_flash is set for the ath79/tiny, bcm47xx/legacy, lantiq/ase, lantiq/xrx200_legacy, lantiq/xway_legacy, ramips/mt76x8, ramips/rt288x, ramips/rt305x and ramips/rt3883 targets.
Activate kernel support for Multipath TCP on devices with big flash sizes.
Improved support for WiFi6 (802.11ax) and initial support for WiFi7 (802.11be)
Not many Wifi7 devices are supported by OpenWrt yet
Improved Link Layer Discovery Protocol (LLDP) support
OpenWrt 24.10 uses OPKG only, APK packages are not supported. Only main branch was changed to APK.
Many new devices added
OpenWrt 24.10 supports over 1970 devices. Support for over 100 new devices was added in addition to the device support by OpenWrt 23.05.
Added loongarch64 target for SoCs with Loongson LoongArch CPUs.
Added starfive target for StarFive JH71x0 (7100/7110) SoCs.
Added stm32 target for STMicroelectronics STM32 SoCs.
Renamed ipq807x target to qualcommax.
Removed ath25 target. It supported Atheros ieee80211g devices with maximum 16MB RAM
Removed bcm63xx target. It supported some Broadcom DSL MIPS SoCs and was replaced by the bmips target. The Broadcom DSL itself was never supported.
Removed octeontx target. It supported the Octeon-TX CN80XX/CN81XX based boards
Removed oxnas target. It supported the PLXTECH/Oxford NAS782x/OX8xx
The qoriq target for the NXP QorIQ (PowerPC) SoCs is built
The ipq806x target for Qualcomm Atheros IPQ806X SoCs was converted to DSA
Added support for Airoha AN8855 DSA Switch (Xiaomi AX3000T ship both Mediatek and Airoha Switch in the same revision)
Core components update
Core components have the following versions in 24.10.0:
Updated toolchain:
musl libc 1.2.5
glibc 2.38
gcc 13.3.0
binutils 2.42
Updated Linux kernel
6.6.73 for all targets
Network:
hostapd master snapshot from September 2024, dnsmasq 2.90, dropbear 2024.86
cfg80211/mac80211 from kernel 6.12.6
Upgrading to 24.10
Sysupgrade can be used to upgrade a device from 23.05 to 24.10, and configuration will be preserved in most cases.
For for upgrades inside the OpenWrt 24.10 stable series for example from a OpenWrt 24.10 release candidate Attended Sysupgrade is supported in addition which allows preserving the installed packages too.
Sysupgrade from 22.03 to 24.10 is not officially supported.
There is no configuration migration path for users of the ipq806x target for Qualcomm Atheros IPQ806X SoCs because it switched to DSA. You have to upgrade without saving the configuration.
''Image version mismatch. image 1.1 device 1.0 Please wipe config during upgrade (force required) or reinstall. Config cannot be migrated from swconfig to DSA Image check failed''
User of the Linksys E8450 aka. Belkin RT3200 running OpenWrt 23.05 or earlier will need to run installer version v1.1.3 or later in order to reorganize the UBI layout for the 24.10 release. A detailed description is in the OpenWrt wiki. Updating without using the installer will break the device. Sysupgrade will show a warning before doing an incompatible upgrade.
Users of the Xiaomi AX3200 aka. Redmi AX6S running OpenWrt 23.05 or earlier have to follow a special upgrade procedure described in the wiki. This will increase the flash memory available for OpenWrt. Updating without following the guide in the wiki break the device. Sysupgrade will show a warning before doing an incompatible upgrade.
Users of Zyxel GS1900 series switches running OpenWrt 23.05 or earlier have to perform a new factory install with the initramfs image due to a changed partition layout. Sysupgrade will show a warning before doing an incompatible upgrade and is not possible.
Known issues
LEDs for Airoha AN8855 are not yet supported. Devices like the Xiaomi AX3000T with an Airoha switch will have their switch LEDs powered off. This issue will be addressed in an upcoming OpenWrt SNAPSHOT and the OpenWrt 24.10 minor release.
5GHz WiFi is non-functional on certain devices with ath10k chipsets. Affected models include the TP-Link Archer C60 v1, TP-Link Archer C6 v2, and possibly others. For details, see issue #14541.
Ethernet link instability on some MT7530 switches. Users experiencing unstable Ethernet connections should disable Energy-Efficient Ethernet (EEE) as a workaround. See issue #17351 for more information.
Kernel warning in ath10k-ct driver at startup. The warning WARNING: CPU: 3 PID: 1695 at backports-6.9.9/net/mac80211/main.c:270 ieee80211_do_open+0x4e8/0x5e0 [mac80211] appears during boot but is harmless and can be ignored. See issue #15959 for details.
Missing strongswan package should be added to known issues - that's why I am not upgrading my TP-Link Archer C7 V2.
Netgear WAX202 could not be upgraded:
root@Netgear:~# owut upgrade
owut - OpenWrt Upgrade Tool 2025.01.25~2bf45d50-r1 (/usr/bin/owut)
ASU-Server https://sysupgrade.openwrt.org
Upstream https://downloads.openwrt.org
Target ramips/mt7621
Profile netgear_wax202
Package-arch mipsel_24kc
Root-FS-type squashfs
Sys-type sysupgrade
Version-from 24.10.0-rc7 r28417-daef29c75d (kernel 6.6.73)
Version-to 24.10.0 r28427-6df0e3d02a (kernel 6.6.73)
Build-FS-type squashfs
Build-at 2025-02-03T23:09:37Z (~53 hours ago)
Image-prefix openwrt-24.10.0-ramips-mt7621-netgear_wax202
Image-URL https://downloads.openwrt.org/releases/24.10.0/targets/ramips/mt7621
Image-file openwrt-24.10.0-ramips-mt7621-netgear_wax202-squashfs-sysupgrade.bin
Installed 178 packages
Top-level 39 packages
Default 30 packages
User-installed 16 packages (top-level only)
Package version changes:
luci 25.027.83426~170375e 25.035.62793~4f7a183
luci-app-attendedsysupgrade 25.027.83426~170375e 25.035.62793~4f7a183
luci-app-dawn 25.027.83426~170375e 25.035.62793~4f7a183
luci-app-filemanager 25.027.83426~170375e 25.035.62793~4f7a183
luci-app-firewall 25.027.83426~170375e 25.035.62793~4f7a183
luci-app-package-manager 25.027.83426~170375e 25.035.62793~4f7a183
luci-base 25.027.83426~170375e 25.035.62793~4f7a183
luci-light 25.027.83426~170375e 25.035.62793~4f7a183
luci-mod-admin-full 25.027.83426~170375e 25.035.62793~4f7a183
luci-mod-network 25.027.83426~170375e 25.035.62793~4f7a183
luci-mod-status 25.027.83426~170375e 25.035.62793~4f7a183
luci-mod-system 25.027.83426~170375e 25.035.62793~4f7a183
luci-proto-ipv6 25.027.83426~170375e 25.035.62793~4f7a183
luci-proto-ppp 25.027.83426~170375e 25.035.62793~4f7a183
luci-theme-bootstrap 25.027.83426~170375e 25.035.62793~4f7a183
owut 2025.01.25~2bf45d50-r1 2025.01.29~bced54ad-r1
16 packages are out-of-date
Default package analysis:
Default Provided-by
nftables nftables-json
wpad-basic-mbedtls not installed
There are currently package build failures for 24.10.0 mipsel_24kc:
Feed: packages
python-bcrypt Wed Feb 5 23:16:37 2025 - not installed
qemu Wed Feb 5 23:10:26 2025 - not installed
strongswan Wed Feb 5 23:16:10 2025 - not installed
Feed: telephony
freetdm Wed Feb 5 23:34:55 2025 - not installed
Failures don't affect this device, details at
https://downloads.openwrt.org/releases/faillogs-24.10/mipsel_24kc/
Request:
Version 24.10.0 r28427-6df0e3d02a (kernel 6.6.73)
Request hash:
539c61181e1eb48765c41753fa79ca1f356cb64662e64cd45d313a7f73293eb8
--
Status: queued - 0 ahead of you
Progress: 0s total = 0s in queue + 0s in build
--
Status: container_setup
Progress: 2s total = 0s in queue + 2s in build
--
Status: validate_manifest
Progress: 12s total = 0s in queue + 12s in build
--
Status: Error: Impossible package selection
Progress: 18s total = 0s in queue + 18s in build
Build failed in 18s total = 0s in queue + 18s to build:
ASU server error =
Traceback (most recent call last):
File "/usr/local/lib/python3.12/site-packages/rq/worker.py", line 1633, in perform_job
return_value = job.perform()
^^^^^^^^^^^^^
File "/usr/local/lib/python3.12/site-packages/rq/job.py", line 1331, in perform
self._result = self._execute()
^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.12/site-packages/rq/job.py", line 1365, in _execute
result = self.func(*self.args, **self.kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/app/asu/build.py", line 241, in build
report_error(job, "Impossible package selection")
File "/app/asu/util.py", line 298, in report_error
raise RuntimeError(msg)
RuntimeError: Impossible package selection
ASU server stderr =
Generate local signing keys...
Generate local certificate...
Package list missing or not up-to-date, generating it.
Building package index...
Downloading http://downloads.openwrt.org/releases/24.10.0/targets/ramips/mt7621/packages/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_core
Downloading http://downloads.openwrt.org/releases/24.10.0/targets/ramips/mt7621/packages/Packages.sig
Signature check passed.
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/base/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_base
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/base/Packages.sig
Signature check passed.
Downloading http://downloads.openwrt.org/releases/24.10.0/targets/ramips/mt7621/kmods/6.6.73-1-3abe85def815b59c6c75ac1f92135cb6/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_kmods
Downloading http://downloads.openwrt.org/releases/24.10.0/targets/ramips/mt7621/kmods/6.6.73-1-3abe85def815b59c6c75ac1f92135cb6/Packages.sig
Signature check passed.
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/luci/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_luci
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/luci/Packages.sig
Signature check passed.
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/packages/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_packages
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/packages/Packages.sig
Signature check passed.
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/routing/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_routing
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/routing/Packages.sig
Signature check passed.
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/telephony/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_telephony
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/telephony/Packages.sig
Signature check passed.
Downloading file:packages/Packages
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/imagebuilder
Downloading file:packages/Packages.sig
Signature check passed.
Collected errors:
* opkg_install_pkg: Checksum or size mismatch for package busybox. Either the opkg or the package index are corrupt. Try 'opkg update'.
* opkg_install_cmd: Cannot install package base-files.
* opkg_install_pkg: Checksum or size mismatch for package libelf1. Either the opkg or the package index are corrupt. Try 'opkg update'.
* opkg_install_cmd: Cannot install package bridger.
make[2]: *** [Makefile:234: package_install] Error 255
make[1]: *** [Makefile:171: _call_manifest] Error 2
make: *** [Makefile:349: manifest] Error 2
ERROR: Build failed with status 500
The above errors are often due to the upgrade server lagging behind the
build server, first suggestion is to wait a while and try again.
I had the build and mostly worked with exception of Wireguard it did not allow wireguard tools it said something incorrect version. I was coming from 24.10.0 rc7.I also tried attended Sysupgrade.
I installed the new release on GL-MT6000 10 minutes ago. With Firmware Selector with the packages luci-proto-wireguard luci-app-https-dns-proxy luci-app-sqm and after a very short test I don`t see a single problem.
Many thanks to the developers and the many testers.
what firewall MTU bug? is there a github ticket/issue for this?
Also, does anyone have wiki access, can we include this (NAT66 performance degradation) to the list of known issues when upgrading from v23 to v24, or has this been fixed already?? Based from the ticket, it affects multiple platforms
Thumbs up to everyone involved!