That should work, but somehow doesn't for that specific package. There's some discussion of it a few posts up from here, and I'm slowly chipping away at it. There's something in the imagebuilders that is doing package filtering and even when you send it the proper list, it leaves that one out (or maybe some class of packages with the same default/top-level status?).
2 Likes
Yeah, I vaguely remember (didn't realize it was inconclusive).
The behavior does not seem to be entirely consistent, because after writing that post I did another update and this time, the package was included after all 
Well, that's odd...
What I did:
apk add libustream-mbedtls20201210apk add libustream-mbedtlsapk add libmbedtls21
Not sure whether it was pure coincidence or whether any one of those commands made it change behavior. (The result was always OK: 14 MiB in 106 packages as they were already installed of course.)
Could I bother you to post the output of from a couple of commands? The results might help me figure out what's going on...
grep mbedtls /etc/apk/world
apk list --installed '*mbedtls*'
Sure:
# grep mbedtls /etc/apk/world
apk-mbedtls
libmbedtls
libustream-mbedtls
libustream-mbedtls20201210
# apk list --installed '*mbedtls*'
apk-mbedtls-3.0.0_pre20250606-r2 mips_24kc {feeds/base/package/system/apk} (GPL-2.0-only) [installed]
libmbedtls21-3.6.4-r1 mips_24kc {feeds/base/package/libs/mbedtls} (GPL-2.0-or-later) [installed]
libustream-mbedtls20201210-2024.07.28~99bd3d2b-r1 mips_24kc {feeds/base/package/libs/ustream-ssl} (ISC) [installed]
1 Like
Here's mine too, hoping it's helpful (I had the same thing happen recently... owut seemingly did a successful update but then a bunch of stuff was broken upon reboot because the TLS library/libraries were missing).
The output below is the install I did from the official firmware selector site, after the failed owut update...
(I have not attempted to use owut again since this install because I'm afraid it'll happen again.)
root@OpenWrt:~# grep mbedtls /etc/apk/world
apk-mbedtls
wpad-basic-mbedtls
root@OpenWrt:~# apk list --installed '*mbedtls*'
apk-mbedtls-3.0.0_pre20250606-r2 aarch64_cortex-a53 {feeds/base/package/system/apk} (GPL-2.0-only) [installed]
libmbedtls21-3.6.4-r1 aarch64_cortex-a53 {feeds/base/package/libs/mbedtls} (GPL-2.0-or-later) [installed]
libustream-mbedtls20201210-2024.07.28~99bd3d2b-r1 aarch64_cortex-a53 {feeds/base/package/libs/ustream-ssl} (ISC) [installed]
px5g-mbedtls-11 aarch64_cortex-a53 {feeds/base/package/utils/px5g-mbedtls} (LGPL-2.1) [installed]
wpad-basic-mbedtls-2025.06.27~ea08700a-r1 aarch64_cortex-a53 {feeds/base/package/network/services/hostapd} (BSD-3-Clause) [installed]
1 Like
ASU server error =
Traceback (most recent call last):
File "/usr/local/lib/python3.12/site-packages/rq/worker.py", line 1688, in perform_job
return_value = job.perform()
^^^^^^^^^^^^^
File "/usr/local/lib/python3.12/site-packages/rq/job.py", line 1371, in perform
self._result = self._execute()
^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.12/site-packages/rq/job.py", line 1405, in _execute
result = self.func(*self.args, **self.kwargs)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/app/asu/build.py", line 180, in build
container.start()
File "/usr/local/lib/python3.12/site-packages/podman/domain/containers.py", line 420, in start
response.raise_for_status()
File "/usr/local/lib/python3.12/site-packages/podman/api/client.py", line 82, in raise_for_status
raise APIError(cause, response=self._response, explanation=message)
podman.errors.exceptions.APIError: 500 Server Error: Internal Server Error (crun: create keyring `be8db5a26c3138ac76d39172a217a3083735a5c12ee32f7b3e0b120f22eb8157`: Disk quota exceeded: OCI runtime error)
Server issue?
Yeah, definitely a server issue. I'm seeing the same thing for any build attempts.
1 Like
I get the same error trying to upgrade with owut upgrade. Upgrade using LuCI is also impossible currently for me.
It doesn't work for anyone. Not even for the chosen ones.
ASU server offline for OOM error.
Check firmware selector topic for updates
Happy to report owut upgrade worked just fine today.
root@OpenWrt:~# owut upgrade -v
owut - OpenWrt Upgrade Tool 2025.08.15~93f2b06b-r1 (/usr/bin/owut)
ASU-Server https://sysupgrade.openwrt.org
Upstream https://downloads.openwrt.org
Target mediatek/mt7622
Profile linksys_e8450-ubi
Package-arch aarch64_cortex-a53
Root-FS-type squashfs
Sys-type sysupgrade
Version-from SNAPSHOT r30879-18077d22e9 (kernel 6.12.43)
Version-to SNAPSHOT r31062-e74cd41744 (kernel 6.12.45)
Build-commit https://git.openwrt.org/?p=openwrt/openwrt.git;a=shortlog;h=e74cd41744
Build-FS-type squashfs
Build-at 2025-09-14T11:13:39Z (~31 hours ago)
Image-prefix openwrt-mediatek-mt7622-linksys_e8450-ubi
Image-URL https://downloads.openwrt.org/snapshots/targets/mediatek/mt7622
Image-file openwrt-mediatek-mt7622-linksys_e8450-ubi-squashfs-sysupgrade.itb
Installed 203 packages
Top-level 112 packages
Default 33 packages
User-installed 82 packages (top-level only)
Package version changes:
base-files 1667~18077d22e9 1667~e74cd41744
hostapd-common 2025.06.27~ea08700a-r1 2025.08.26~ca266cc2-r1
kmod-cfg80211 6.12.43.6.16-r1 6.12.45.6.16-r1
kmod-crypto-acompress 6.12.43-r1 6.12.45-r1
kmod-crypto-aead 6.12.43-r1 6.12.45-r1
kmod-crypto-ccm 6.12.43-r1 6.12.45-r1
kmod-crypto-cmac 6.12.43-r1 6.12.45-r1
kmod-crypto-crc32c 6.12.43-r1 6.12.45-r1
kmod-crypto-ctr 6.12.43-r1 6.12.45-r1
kmod-crypto-gcm 6.12.43-r1 6.12.45-r1
kmod-crypto-geniv 6.12.43-r1 6.12.45-r1
kmod-crypto-gf128 6.12.43-r1 6.12.45-r1
kmod-crypto-ghash 6.12.43-r1 6.12.45-r1
kmod-crypto-hash 6.12.43-r1 6.12.45-r1
kmod-crypto-hmac 6.12.43-r1 6.12.45-r1
kmod-crypto-manager 6.12.43-r1 6.12.45-r1
kmod-crypto-null 6.12.43-r1 6.12.45-r1
kmod-crypto-rng 6.12.43-r1 6.12.45-r1
kmod-crypto-seqiv 6.12.43-r1 6.12.45-r1
kmod-crypto-sha3 6.12.43-r1 6.12.45-r1
kmod-crypto-sha512 6.12.43-r1 6.12.45-r1
kmod-gpio-button-hotplug 6.12.43-r5 6.12.45-r5
kmod-hwmon-core 6.12.43-r1 6.12.45-r1
kmod-i2c-core 6.12.43-r1 6.12.45-r1
kmod-ip6tables 6.12.43-r1 6.12.45-r1
kmod-ipt-conntrack 6.12.43-r1 6.12.45-r1
kmod-ipt-conntrack-extra 6.12.43-r1 6.12.45-r1
kmod-ipt-core 6.12.43-r1 6.12.45-r1
kmod-ipt-ipopt 6.12.43-r1 6.12.45-r1
kmod-ipt-ipset 6.12.43-r1 6.12.45-r1
kmod-leds-gpio 6.12.43-r1 6.12.45-r1
kmod-lib-crc-ccitt 6.12.43-r1 6.12.45-r1
kmod-lib-crc32c 6.12.43-r1 6.12.45-r1
kmod-lib-lzo 6.12.43-r1 6.12.45-r1
kmod-mac80211 6.12.43.6.16-r1 6.12.45.6.16-r1
kmod-mt76-connac 6.12.43.2025.08.14~5f61f340-r1 6.12.45.2025.09.09~a6559a00-r1
kmod-mt76-core 6.12.43.2025.08.14~5f61f340-r1 6.12.45.2025.09.09~a6559a00-r1
kmod-mt7615-common 6.12.43.2025.08.14~5f61f340-r1 6.12.45.2025.09.09~a6559a00-r1
kmod-mt7615e 6.12.43.2025.08.14~5f61f340-r1 6.12.45.2025.09.09~a6559a00-r1
kmod-mt7622-firmware 6.12.43.2025.08.14~5f61f340-r1 6.12.45.2025.09.09~a6559a00-r1
kmod-mt7915-firmware 6.12.43.2025.08.14~5f61f340-r1 6.12.45.2025.09.09~a6559a00-r1
kmod-mt7915e 6.12.43.2025.08.14~5f61f340-r1 6.12.45.2025.09.09~a6559a00-r1
kmod-nf-conncount 6.12.43-r1 6.12.45-r1
kmod-nf-conntrack 6.12.43-r1 6.12.45-r1
kmod-nf-conntrack6 6.12.43-r1 6.12.45-r1
kmod-nf-flow 6.12.43-r1 6.12.45-r1
kmod-nf-ipt 6.12.43-r1 6.12.45-r1
kmod-nf-ipt6 6.12.43-r1 6.12.45-r1
kmod-nf-log 6.12.43-r1 6.12.45-r1
kmod-nf-log6 6.12.43-r1 6.12.45-r1
kmod-nf-nat 6.12.43-r1 6.12.45-r1
kmod-nf-reject 6.12.43-r1 6.12.45-r1
kmod-nf-reject6 6.12.43-r1 6.12.45-r1
kmod-nfnetlink 6.12.43-r1 6.12.45-r1
kmod-nft-compat 6.12.43-r1 6.12.45-r1
kmod-nft-core 6.12.43-r1 6.12.45-r1
kmod-nft-fib 6.12.43-r1 6.12.45-r1
kmod-nft-nat 6.12.43-r1 6.12.45-r1
kmod-nft-offload 6.12.43-r1 6.12.45-r1
kmod-nls-base 6.12.43-r1 6.12.45-r1
kmod-ppp 6.12.43-r1 6.12.45-r1
kmod-pppoe 6.12.43-r1 6.12.45-r1
kmod-pppox 6.12.43-r1 6.12.45-r1
kmod-slhc 6.12.43-r1 6.12.45-r1
kmod-thermal 6.12.43-r1 6.12.45-r1
kmod-usb-common 6.12.43-r1 6.12.45-r1
kmod-usb-core 6.12.43-r1 6.12.45-r1
kmod-usb-xhci-hcd 6.12.43-r1 6.12.45-r1
kmod-usb-xhci-mtk 6.12.43-r1 6.12.45-r1
kmod-usb3 6.12.43-r1 6.12.45-r1
luci 25.238.26984~983ecab 25.253.73204~220531f
luci-app-firewall 25.238.26984~983ecab 25.253.73204~220531f
luci-app-mwan3 25.238.26984~983ecab 25.253.73204~220531f
luci-app-package-manager 25.238.26984~983ecab 25.253.73204~220531f
luci-app-statistics 25.238.26984~983ecab 25.253.73204~220531f
luci-base 25.238.26984~983ecab 25.253.73204~220531f
luci-light 25.238.26984~983ecab 25.253.73204~220531f
luci-mod-admin-full 25.238.26984~983ecab 25.253.73204~220531f
luci-mod-network 25.238.26984~983ecab 25.253.73204~220531f
luci-mod-status 25.238.26984~983ecab 25.253.73204~220531f
luci-mod-system 25.238.26984~983ecab 25.253.73204~220531f
luci-proto-ipv6 25.238.26984~983ecab 25.253.73204~220531f
luci-proto-ppp 25.238.26984~983ecab 25.253.73204~220531f
luci-ssl 25.238.26984~983ecab 25.253.73204~220531f
luci-theme-bootstrap 25.238.26984~983ecab 25.253.73204~220531f
mwan3 2.12.0-r2 2.12.0-r3
netifd 2025.08.14~8c139e18-r1 2025.09.12~2a85440b-r1
odhcpd-ipv6only 2024.05.08~a2988231-r1 2025.08.26~6e1ad492-r1
owut 2025.08.15~93f2b06b-r1 2025.09.03~49e9bce7-r1
wpad-basic-mbedtls 2025.06.27~ea08700a-r1 2025.08.26~ca266cc2-r1
90 packages are out-of-date
Default package analysis:
Default Provided-by
nftables nftables-json
There are currently package build failures for SNAPSHOT aarch64_cortex-a53:
Feed: packages
augeas Sun Sep 14 16:26:08 2025 - not installed
dcwapd Sun Sep 14 18:39:19 2025 - not installed
domoticz Sun Sep 14 18:56:03 2025 - not installed
hamlib Sun Sep 14 16:34:17 2025 - not installed
i2pd Sun Sep 14 18:56:18 2025 - not installed
kea Sun Sep 14 18:56:22 2025 - not installed
mpack Sun Sep 14 16:56:26 2025 - not installed
openvswitch Sun Sep 14 18:44:14 2025 - not installed
ovn Sun Sep 14 18:53:30 2025 - not installed
perl-www-curl Sun Sep 14 17:26:25 2025 - not installed
powertop Sun Sep 14 17:17:40 2025 - not installed
privoxy Sun Sep 14 16:23:02 2025 - not installed
pv Sun Sep 14 16:58:35 2025 - not installed
python-augeas Sun Sep 14 18:53:36 2025 - not installed
python-gevent Sun Sep 14 18:53:51 2025 - not installed
schroot Sun Sep 14 18:54:13 2025 - not installed
Feed: routing
cjdns Sun Sep 14 17:28:25 2025 - not installed
oonf-dlep-proxy Sun Sep 14 17:28:40 2025 - not installed
oonf-dlep-radio Sun Sep 14 17:28:40 2025 - not installed
Feed: telephony
asterisk Sun Sep 14 18:38:55 2025 - not installed
asterisk-chan-dongle Sun Sep 14 18:39:12 2025 - not installed
asterisk-chan-sccp Sun Sep 14 18:39:15 2025 - not installed
asterisk-g72x Sun Sep 14 18:39:15 2025 - not installed
asterisk-opus Sun Sep 14 18:39:16 2025 - not installed
freeswitch Sun Sep 14 18:51:49 2025 - not installed
freeswitch-mod-bcg729 Sun Sep 14 18:54:24 2025 - not installed
freetdm Sun Sep 14 18:54:26 2025 - not installed
miax Sun Sep 14 17:02:07 2025 - not installed
rtpengine Sun Sep 14 18:52:02 2025 - not installed
rtpproxy Sun Sep 14 17:40:07 2025 - not installed
siproxd Sun Sep 14 17:19:31 2025 - not installed
sofia-sip Sun Sep 14 17:38:42 2025 - not installed
Feed: video
cog Sun Sep 14 19:15:25 2025 - not installed
qt5base Sun Sep 14 19:14:12 2025 - not installed
qt5quick Sun Sep 14 19:14:13 2025 - not installed
qt5quick-controls Sun Sep 14 19:14:18 2025 - not installed
qt5script Sun Sep 14 19:14:14 2025 - not installed
qt5svg Sun Sep 14 19:14:14 2025 - not installed
qt5translations Sun Sep 14 19:43:54 2025 - not installed
qt5virtualkeyboard Sun Sep 14 19:43:54 2025 - not installed
wpewebkit Sun Sep 14 19:15:19 2025 - not installed
Failures don't affect this device, details at
https://downloads.openwrt.org/snapshots/faillogs/aarch64_cortex-a53/
Request:
Version SNAPSHOT r31062-e74cd41744 (kernel 6.12.45)
Request hash:
927e6aee1979bbda007cf73f2b1ceb9398f375bee86cd6c465085406634da42e
--
Status: queued - 0 ahead of you
Progress: 0s total = 0s in queue + 0s in build
--
Status: container_setup
Progress: 4s total = 0s in queue + 4s in build
--
Status: validate_manifest
Progress: 14s total = 0s in queue + 14s in build
--
Status: building_image
Progress: 25s total = 0s in queue + 25s in build
--
Status: done
Progress: 29s total = 0s in queue + 29s in build
Build succeeded in 29s total = 0s in queue + 29s to build:
version_number = SNAPSHOT
version_code = r31062-e74cd41744 (requested r31062-e74cd41744)
kernel_version = 6.12.45
rootfs_size_mb = default
init-script = no-init-script
Image source: https://sysupgrade.openwrt.org/store/927e6aee1979bbda007cf73f2b1ceb9398f375bee86cd6c465085406634da42e/openwrt-722566f3b204-mediatek-mt7622-linksys_e8450-ubi-squashfs-sysupgrade.itb
Image saved : /tmp/firmware.bin
Manifest : /tmp/firmware-manifest.json
Verifying : /tmp/firmware.bin (12665535 bytes) against /tmp/firmware.sha256sums
Saved sha256 matches
Signature check OK
Checks complete, image is valid.
Installing /tmp/firmware.bin and rebooting...
1 Like
I broke out a new section in the docs listing alternative ASU servers and how to find configuration details about them.
1 Like
root@meraki-mr12:~# grep mbedtls /etc/apk/world
apk-mbedtls
wpad-basic-mbedtls
root@meraki-mr12:~# apk list --installed '*mbedtls*'
apk-mbedtls-3.0.0_pre20250606-r2 mips_24kc {feeds/base/package/system/apk} (GPL-2.0-only) [installed]
libmbedtls21-3.6.4-r1 mips_24kc {feeds/base/package/libs/mbedtls} (GPL-2.0-or-later) [installed]
wpad-basic-mbedtls-2025.08.26~ca266cc2-r1 mips_24kc {feeds/base/package/network/services/hostapd} (BSD-3-Clause) [installed]
root@meraki-mr12:~#
My device is the following:
Model: ASUS RT-AX53U
Architecture: MediaTek MT7621 ver:1 eco:3
Target Platform: ramips/mt7621
Firmware Version: OpenWrt 24.10.2 r28739-d9340319c6 / LuCI openwrt-24.10 branch 25.245.48024~b8bc15b
After running the “owut check” command I received the following message:
root@wifi-1stfloor:~# owut check
owut - OpenWrt Upgrade Tool 2025.09.03~49e9bce7-r1 (/usr/bin/owut)
ERROR: Response status 404 while downloading
https://downloads.openwrt.org/releases/24.10.3/targets/ramips/mt7621/profiles.json
ERROR: Unsupported target 'ramips/mt7621'
Has any of you encountered such issue before?
Best regards
WT
24.10.3 is still being built, use 24.10-SNAPSHOT for now.
1 Like
Thanks for the rapid reply. I just noticed that owut wants to download content from the 24.10.3 branch and I don't know why it does this, because I didn't set the 24.10.3 version exclusively. The owut option -V option says "Specify the target version, defaults to the installed version". When I entered “owut check -V 24.10.2” everything went just normal.
Ah, sorry for assuming. That is a question for efahl then. I think owut picks up that 24.10.3 has been tagged, but not that it has not really been built and released yet.
2 Likes
Right, this is all due to the build system getting ahead of itself and announcing an unbuilt build. 
If you look at the versions file, you can see what is "available", but .3 is only halfway there and hence the messages from owut (and Firmware Selector and LuCI ASU app) about "can't find version".
More details on why owut picked 24.10.3 here: https://openwrt.org/docs/guide-user/installation/sysupgrade.owut#selecting_a_version
2 Likes