OpenWrt 24.10.0 - First Stable Release

Hi,

The OpenWrt community is proud to announce the first stable release of the OpenWrt 24.10 stable series.
OpenWrt 24.10.0 incorporates over 5400 commits since branching the previous OpenWrt 23.05 release and has been under development for over one year.

Download firmware images using the OpenWrt Firmware Selector:

Highlights in OpenWrt 24.10

General changes

  • Upgrades of many components to new versions like the Linux kernel from version 5.15 to 6.6
  • TLS 1.3 support in default images
    • mbedtls was updated to version 3.6 which includes support for TLS 1.3
  • Activate POSIX Access Control Lists and file system security attributes for all file systems on devices with big flash sizes. This is needed by docker nowadays.
    • This is activated for all targets which do not have the small_flash feature flag. small_flash is set for the ath79/tiny, bcm47xx/legacy, lantiq/ase, lantiq/xrx200_legacy, lantiq/xway_legacy, ramips/mt76x8, ramips/rt288x, ramips/rt305x and ramips/rt3883 targets.
  • Activate kernel support for Multipath TCP on devices with big flash sizes.
  • Improved support for WiFi6 (802.11ax) and initial support for WiFi7 (802.11be)
    • Not many Wifi7 devices are supported by OpenWrt yet
  • Improved Link Layer Discovery Protocol (LLDP) support
  • OpenWrt 24.10 uses OPKG only, APK packages are not supported. Only main branch was changed to APK.

Many new devices added

OpenWrt 24.10 supports over 1970 devices. Support for over 100 new devices was added in addition to the device support by OpenWrt 23.05.

Target changes

  • Added d1 target for AllWinner D1 RISC-V SoC
  • Added ixp4xx target for Intel XScale IXP4xx SoCs.
  • Added loongarch64 target for SoCs with Loongson LoongArch CPUs.
  • Added starfive target for StarFive JH71x0 (7100/7110) SoCs.
  • Added stm32 target for STMicroelectronics STM32 SoCs.
  • Renamed ipq807x target to qualcommax.
  • Removed ath25 target. It supported Atheros ieee80211g devices with maximum 16MB RAM
  • Removed bcm63xx target. It supported some Broadcom DSL MIPS SoCs and was replaced by the bmips target. The Broadcom DSL itself was never supported.
  • Removed octeontx target. It supported the Octeon-TX CN80XX/CN81XX based boards
  • Removed oxnas target. It supported the PLXTECH/Oxford NAS782x/OX8xx
  • The qoriq target for the NXP QorIQ (PowerPC) SoCs is built
  • The ipq806x target for Qualcomm Atheros IPQ806X SoCs was converted to DSA
  • Added support for Airoha AN8855 DSA Switch (Xiaomi AX3000T ship both Mediatek and Airoha Switch in the same revision)

Core components update

Core components have the following versions in 24.10.0:

  • Updated toolchain:
    • musl libc 1.2.5
    • glibc 2.38
    • gcc 13.3.0
    • binutils 2.42
  • Updated Linux kernel
    • 6.6.73 for all targets
  • Network:
    • hostapd master snapshot from September 2024, dnsmasq 2.90, dropbear 2024.86
    • cfg80211/mac80211 from kernel 6.12.6

Upgrading to 24.10

Sysupgrade can be used to upgrade a device from 23.05 to 24.10, and configuration will be preserved in most cases.

For for upgrades inside the OpenWrt 24.10 stable series for example from a OpenWrt 24.10 release candidate Attended Sysupgrade is supported in addition which allows preserving the installed packages too.

  • Sysupgrade from 22.03 to 24.10 is not officially supported.

  • There is no configuration migration path for users of the ipq806x target for Qualcomm Atheros IPQ806X SoCs because it switched to DSA. You have to upgrade without saving the configuration.
    ''Image version mismatch. image 1.1 device 1.0 Please wipe config during upgrade (force required) or reinstall. Config cannot be migrated from swconfig to DSA Image check failed''

  • User of the Linksys E8450 aka. Belkin RT3200 running OpenWrt 23.05 or earlier will need to run installer version v1.1.3 or later in order to reorganize the UBI layout for the 24.10 release. A detailed description is in the OpenWrt wiki. Updating without using the installer will break the device. Sysupgrade will show a warning before doing an incompatible upgrade.

  • Users of the Xiaomi AX3200 aka. Redmi AX6S running OpenWrt 23.05 or earlier have to follow a special upgrade procedure described in the wiki. This will increase the flash memory available for OpenWrt. Updating without following the guide in the wiki break the device. Sysupgrade will show a warning before doing an incompatible upgrade.

  • Users of Zyxel GS1900 series switches running OpenWrt 23.05 or earlier have to perform a new factory install with the initramfs image due to a changed partition layout. Sysupgrade will show a warning before doing an incompatible upgrade and is not possible.

Known issues

  • LEDs for Airoha AN8855 are not yet supported. Devices like the Xiaomi AX3000T with an Airoha switch will have their switch LEDs powered off. This issue will be addressed in an upcoming OpenWrt SNAPSHOT and the OpenWrt 24.10 minor release.
  • 5GHz WiFi is non-functional on certain devices with ath10k chipsets. Affected models include the TP-Link Archer C60 v1, TP-Link Archer C6 v2, and possibly others. For details, see issue #14541.
  • Ethernet link instability on some MT7530 switches. Users experiencing unstable Ethernet connections should disable Energy-Efficient Ethernet (EEE) as a workaround. See issue #17351 for more information.
  • Kernel warning in ath10k-ct driver at startup. The warning WARNING: CPU: 3 PID: 1695 at backports-6.9.9/net/mac80211/main.c:270 ieee80211_do_open+0x4e8/0x5e0 [mac80211] appears during boot but is harmless and can be ignored. See issue #15959 for details.

Full release notes and upgrade instructions are available at
https://openwrt.org/releases/24.10/notes-24.10.0

In particular, make sure to read the regressions and known issues before upgrading:
https://openwrt.org/releases/24.10/notes-24.10.0#known_issues

For a detailed list of all changes since 24.10.0-rc7, refer to
https://openwrt.org/releases/24.10/changelog-24.10.0

To download the 24.10.0 images, navigate to:
https://downloads.openwrt.org/releases/24.10.0/targets/
Use OpenWrt Firmware Selector to download:
https://firmware-selector.openwrt.org?version=24.10.0

As always, a big thank you goes to all our active package maintainers, testers, documenters and supporters.

Have fun!

The OpenWrt Community


To stay informed of new OpenWrt releases and security advisories, there
are new channels available:

75 Likes

Happy February :wink:

4 Likes

Too bad I have both Belkin RT3200 and Redmi AX6S as well as a bunch of ipq806x. Gonna roll the dice and hope I don't make a mistake :smiley:

Thank you devs.

1 Like

Xiaomi AX3200 image build is broken (worked until RC7). Should be added to known issues and upgrade guide removed. Current image soft-bricks device.

4 Likes

Would I lose extroot if I reset and install the firmware?

Missing strongswan package should be added to known issues - that's why I am not upgrading my TP-Link Archer C7 V2.

Netgear WAX202 could not be upgraded:

root@Netgear:~# owut upgrade
owut - OpenWrt Upgrade Tool 2025.01.25~2bf45d50-r1 (/usr/bin/owut)
ASU-Server     https://sysupgrade.openwrt.org
Upstream       https://downloads.openwrt.org
Target         ramips/mt7621
Profile        netgear_wax202
Package-arch   mipsel_24kc
Root-FS-type   squashfs
Sys-type       sysupgrade
Version-from   24.10.0-rc7 r28417-daef29c75d (kernel 6.6.73)
Version-to     24.10.0 r28427-6df0e3d02a (kernel 6.6.73)
Build-FS-type  squashfs
Build-at       2025-02-03T23:09:37Z (~53 hours ago)
Image-prefix   openwrt-24.10.0-ramips-mt7621-netgear_wax202
Image-URL      https://downloads.openwrt.org/releases/24.10.0/targets/ramips/mt7621
Image-file     openwrt-24.10.0-ramips-mt7621-netgear_wax202-squashfs-sysupgrade.bin
Installed      178 packages
Top-level       39 packages
Default         30 packages
User-installed  16 packages (top-level only)

Package version changes:
  luci                           25.027.83426~170375e                       25.035.62793~4f7a183
  luci-app-attendedsysupgrade    25.027.83426~170375e                       25.035.62793~4f7a183
  luci-app-dawn                  25.027.83426~170375e                       25.035.62793~4f7a183
  luci-app-filemanager           25.027.83426~170375e                       25.035.62793~4f7a183
  luci-app-firewall              25.027.83426~170375e                       25.035.62793~4f7a183
  luci-app-package-manager       25.027.83426~170375e                       25.035.62793~4f7a183
  luci-base                      25.027.83426~170375e                       25.035.62793~4f7a183
  luci-light                     25.027.83426~170375e                       25.035.62793~4f7a183
  luci-mod-admin-full            25.027.83426~170375e                       25.035.62793~4f7a183
  luci-mod-network               25.027.83426~170375e                       25.035.62793~4f7a183
  luci-mod-status                25.027.83426~170375e                       25.035.62793~4f7a183
  luci-mod-system                25.027.83426~170375e                       25.035.62793~4f7a183
  luci-proto-ipv6                25.027.83426~170375e                       25.035.62793~4f7a183
  luci-proto-ppp                 25.027.83426~170375e                       25.035.62793~4f7a183
  luci-theme-bootstrap           25.027.83426~170375e                       25.035.62793~4f7a183
  owut                           2025.01.25~2bf45d50-r1                     2025.01.29~bced54ad-r1
16 packages are out-of-date

Default package analysis:
  Default                        Provided-by
  nftables                       nftables-json
  wpad-basic-mbedtls             not installed

There are currently package build failures for 24.10.0 mipsel_24kc:
  Feed: packages
    python-bcrypt                Wed Feb  5 23:16:37 2025 - not installed
    qemu                         Wed Feb  5 23:10:26 2025 - not installed
    strongswan                   Wed Feb  5 23:16:10 2025 - not installed
  Feed: telephony
    freetdm                      Wed Feb  5 23:34:55 2025 - not installed
Failures don't affect this device, details at
  https://downloads.openwrt.org/releases/faillogs-24.10/mipsel_24kc/

Request:
  Version 24.10.0 r28427-6df0e3d02a (kernel 6.6.73)
Request hash:
  539c61181e1eb48765c41753fa79ca1f356cb64662e64cd45d313a7f73293eb8
--
Status:   queued - 0 ahead of you
Progress:   0s total =   0s in queue +   0s in build
--
Status:   container_setup
Progress:   2s total =   0s in queue +   2s in build
--
Status:   validate_manifest
Progress:  12s total =   0s in queue +  12s in build
--
Status:   Error: Impossible package selection
Progress:  18s total =   0s in queue +  18s in build

Build failed in  18s total =   0s in queue +  18s to build:
ASU server error =
Traceback (most recent call last):
  File "/usr/local/lib/python3.12/site-packages/rq/worker.py", line 1633, in perform_job
    return_value = job.perform()
                   ^^^^^^^^^^^^^
  File "/usr/local/lib/python3.12/site-packages/rq/job.py", line 1331, in perform
    self._result = self._execute()
                   ^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.12/site-packages/rq/job.py", line 1365, in _execute
    result = self.func(*self.args, **self.kwargs)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/app/asu/build.py", line 241, in build
    report_error(job, "Impossible package selection")
  File "/app/asu/util.py", line 298, in report_error
    raise RuntimeError(msg)
RuntimeError: Impossible package selection

ASU server stderr =
Generate local signing keys...
Generate local certificate...
Package list missing or not up-to-date, generating it.

Building package index...
Downloading http://downloads.openwrt.org/releases/24.10.0/targets/ramips/mt7621/packages/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_core
Downloading http://downloads.openwrt.org/releases/24.10.0/targets/ramips/mt7621/packages/Packages.sig
Signature check passed.
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/base/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_base
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/base/Packages.sig
Signature check passed.
Downloading http://downloads.openwrt.org/releases/24.10.0/targets/ramips/mt7621/kmods/6.6.73-1-3abe85def815b59c6c75ac1f92135cb6/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_kmods
Downloading http://downloads.openwrt.org/releases/24.10.0/targets/ramips/mt7621/kmods/6.6.73-1-3abe85def815b59c6c75ac1f92135cb6/Packages.sig
Signature check passed.
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/luci/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_luci
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/luci/Packages.sig
Signature check passed.
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/packages/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_packages
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/packages/Packages.sig
Signature check passed.
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/routing/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_routing
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/routing/Packages.sig
Signature check passed.
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/telephony/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_telephony
Downloading http://downloads.openwrt.org/releases/24.10.0/packages/mipsel_24kc/telephony/Packages.sig
Signature check passed.
Downloading file:packages/Packages
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/imagebuilder
Downloading file:packages/Packages.sig
Signature check passed.
Collected errors:
 * opkg_install_pkg: Checksum or size mismatch for package busybox. Either the opkg or the package index are corrupt. Try 'opkg update'.
 * opkg_install_cmd: Cannot install package base-files.
 * opkg_install_pkg: Checksum or size mismatch for package libelf1. Either the opkg or the package index are corrupt. Try 'opkg update'.
 * opkg_install_cmd: Cannot install package bridger.
make[2]: *** [Makefile:234: package_install] Error 255
make[1]: *** [Makefile:171: _call_manifest] Error 2
make: *** [Makefile:349: manifest] Error 2

ERROR: Build failed with status 500
The above errors are often due to the upgrade server lagging behind the
build server, first suggestion is to wait a while and try again.

Packages:

root@Netgear:~# owut list
diffutils kmod-nf-nat6 procps-ng-watch bridger luci-app-filemanager tcpdump ethtool luci-app-dawn luci-app-attendedsysupgrade irqbalance wpad-mbedtls ip-tiny htop luci owut iperf3 -nftables -wpad-basic-mbedtls

Dropping bridger allowed it to proceed, and I was able to reinstall bridger manually later.

Linksys E8450 UBI was upgraded, but failed to immediately bring up DHCPv4. The laptop says:

[aep@dell-laptop ~]$ ip a
...
2: wlp2s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 10:51:07:8e:75:60 brd ff:ff:ff:ff:ff:ff
    altname wlx1051078e7560
    inet6 2001:fd8:XXXX:XXXX:4aee:255c:875:cb73/64 scope global dynamic noprefixroute 
       valid_lft 54092sec preferred_lft 330sec
    inet6 fd7b:7d49:XXXX:XXXX:c4a2:f899:9ce5:2212/64 scope global noprefixroute 
       valid_lft forever preferred_lft 330sec
    inet6 fe80::e7fb:d034:4fb8:e29f/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
...

After waiting a few minutes, it went back to normal without any manual intervention.

not exactly missing:
https://downloads.openwrt.org/releases/faillogs-24.10/x86_64/packages/strongswan/

1 Like

Installed on WRT3200ACM and EAP615-wall

I will reply back in the future if there is any problem.

1 Like

Inpressive, firewall mtu bug is finally fixed after blazing 23 months of intensest testing.

3 Likes

Hello Community,

I had the build and mostly worked with exception of Wireguard it did not allow wireguard tools it said something incorrect version. I was coming from 24.10.0 rc7.I also tried attended Sysupgrade.

I installed the new release on GL-MT6000 10 minutes ago. With Firmware Selector with the packages luci-proto-wireguard luci-app-https-dns-proxy luci-app-sqm and after a very short test I don`t see a single problem.

Many thanks to the developers and the many testers.

4 Likes

Dynalink DL-WRX36
owut sysupgrade all working fine!

:+1: Thumbs up to everyone involved!

2 Likes

Thanks to devs and testers!

Two devices here, sysupgraded from 23.05.5 through -rc{5,6,7} and on to 24.10.0 as of a little over 24 hours ago (built from source locally).

  • Netgear WAX206
  • Buffalo WZR-HP-AG300H

Both working without issues, kept configs from previous version(s).

The only regression I've seen is this old almost-cosmetic one coming back from the dead - mesh encryption falsely reported as None. Who can reopen this so that it's tracked better?

1 Like

No issues on TP-Link Archer C7 v2 with non-CT firmware after one day :+1:

1 Like

I figure it out. I used attended Sysupgrade and removed the package it was complaining about.

2 Likes

what firewall MTU bug? is there a github ticket/issue for this?

Also, does anyone have wiki access, can we include this (NAT66 performance degradation) to the list of known issues when upgrading from v23 to v24, or has this been fixed already?? Based from the ticket, it affects multiple platforms

Congratulations and thank you to all involved. :tada:

All my devices updated smoothly from rc7.

owut upgraded my Archer AX23, everything is working perfectly. Btw, how much flash storage to use Multipath TCP on 24.10 ?