Pi 3B - Cannot install OpenVSwitch on OpenWrt

theio · December 9, 2020, 2:57pm

Hello,

I've managed to get OpenWRT 19.07.4 installed on a Raspberry Pi 3B and got it connected to the internet. I am able to reach several sites, such as Google and the OpenWRT website, using ping. I'm now trying to install OpenVSwitch on it, which I managed to do directly onto the Pi OS but am now attempting to do onto OpenWRT.

But it's unable to do so. opkg install openvswitch returns an unknown package error. opkg update attempts to download a number of files, but for every single one of them returns, in all cases, Failed to send request: Operation not permitted. I am able to ping the IP addresses associated with every single link successfully from the device. But it claims that it is not permitted to download them. And I am executing as root.

Why is opkg not permitted to download? How do I install OpenVSwitch onto it?

trendy · December 9, 2020, 3:52pm

Did you do an opkg update first ?

theio · December 10, 2020, 9:24am

"Did you do an okpg update first?"

opkg update attempts to download a number of files, but for every single one of them returns, in all cases, Failed to send request: Operation not permitted.

As I said in the post, I did do an opkg update first. As I also said in the post immediately afterwards, it didn't work.

trendy · December 10, 2020, 10:03am

I suppose you have not configured the network yet.

theio · December 10, 2020, 11:57am

I had configured the network. It was connecting to my wireless from my home router. I was able to ping distant websites on the internet such as google.com and openwrt.org. I was also able to SSH to the device from a different laptop.

Then I followed your advice and it broke the network connection. Your so-called "network configuration" took away its ability to connect to the internet.

trendy · December 10, 2020, 12:04pm

If it was working you didn't have to apply the changes.
Roll back the changes as you had them before and post the following:

ubus call system board
head -n -0 /etc/opkg.conf
head -n -0 /etc/opkg/*
which wget
ls -la /usr/bin/wget*
which curl
ls -la /usr/bin/curl
ping -c 3 downloads.openwrt.org

theio · December 10, 2020, 12:27pm

login as: root

 

 

BusyBox v1.30.1 () built-in shell (ash)

 

  _______                     ________        __

|       |.-----.-----.-----.|  |  |  |.----.|  |_

|   -   ||  _  |  -__|     ||  |  |  ||   _||   _|

|_______||   __|_____|__|__||________||__|  |____|

          |__| W I R E L E S S   F R E E D O M

-----------------------------------------------------

OpenWrt 19.07.5, r11257-5090152ae3

-----------------------------------------------------

=== WARNING! =====================================

There is no root password defined on this device!

Use the "passwd" command to set up a new password

in order to prevent unauthorized SSH logins.

--------------------------------------------------

root@OpenWrt:~# ubus call system board

{

        "kernel": "4.14.209",

        "hostname": "OpenWrt",

        "model": "Raspberry Pi 3 Model B Rev 1.2",

        "board_name": "raspberrypi,3-model-b",

        "release": {

                "distribution": "OpenWrt",

                "version": "19.07.5",

                "revision": "r11257-5090152ae3",

                "target": "brcm2708/bcm2710",

                "description": "OpenWrt 19.07.5 r11257-5090152ae3"

        }

}

root@OpenWrt:~# head -n -0 /etc/opkg.conf

dest root /

dest ram /tmp

lists_dir ext /var/opkg-lists

option overlay_root /overlay

option check_signature

root@OpenWrt:~# head -n -0 /etc/opkg/*

==> /etc/opkg/customfeeds.conf <==

# add your custom package feeds here

#

# src/gz example_feed_name http://www.example.com/path/to/files

 

==> /etc/opkg/distfeeds.conf <==

src/gz openwrt_core http://downloads.openwrt.org/releases/19.07.5/targets/brcm2708/bcm2710/packages

src/gz openwrt_kmods http://downloads.openwrt.org/releases/19.07.5/targets/brcm2708/bcm2710/kmods/4.14.209-1-ae418ed2395263358bbe7536d318ae28

src/gz openwrt_base http://downloads.openwrt.org/releases/19.07.5/packages/aarch64_cortex-a53/base

src/gz openwrt_freifunk http://downloads.openwrt.org/releases/19.07.5/packages/aarch64_cortex-a53/freifunk

src/gz openwrt_luci http://downloads.openwrt.org/releases/19.07.5/packages/aarch64_cortex-a53/luci

src/gz openwrt_packages http://downloads.openwrt.org/releases/19.07.5/packages/aarch64_cortex-a53/packages

src/gz openwrt_routing http://downloads.openwrt.org/releases/19.07.5/packages/aarch64_cortex-a53/routing

src/gz openwrt_telephony http://downloads.openwrt.org/releases/19.07.5/packages/aarch64_cortex-a53/telephony

 

==> /etc/opkg/keys <==

head: /etc/opkg/keys: I/O error

root@OpenWrt:~# which wget

/usr/bin/wget

root@OpenWrt:~# ls -la /usr/bin/wget*

lrwxrwxrwx    1 root     root            18 Dec  6 07:31 /usr/bin/wget -> /bin/uclient-fetch

root@OpenWrt:~# which curl

root@OpenWrt:~# ls -la /usr/bin/curl

ls: /usr/bin/curl: No such file or directory

root@OpenWrt:~# ping -c 3 downloads.openwrt.org

PING downloads.openwrt.org (168.119.138.211): 56 data bytes

64 bytes from 168.119.138.211: seq=0 ttl=53 time=40.249 ms

64 bytes from 168.119.138.211: seq=1 ttl=53 time=30.002 ms

64 bytes from 168.119.138.211: seq=2 ttl=53 time=31.218 ms

 

--- downloads.openwrt.org ping statistics ---

3 packets transmitted, 3 packets received, 0% packet loss

round-trip min/avg/max = 30.002/33.823/40.249 ms

root@OpenWrt:~#

trendy · December 10, 2020, 12:32pm

ls -la /bin/uclient-fetch; uci export firewall ?

theio · December 10, 2020, 12:34pm



root@OpenWrt:~# ls -la /bin/uclient-fetch

-rwxr-xr-x    1 root     root         16409 Dec  6 07:31 /bin/uclient-fetch

root@OpenWrt:~# uci export firewall

package firewall

 

config defaults

        option syn_flood '1'

        option input 'ACCEPT'

        option output 'ACCEPT'

        option forward 'REJECT'

 

config zone

        option name 'lan'

        option input 'ACCEPT'

        option output 'ACCEPT'

        option forward 'ACCEPT'

        option network 'lan'

 

config zone

        option name 'wan'

        option input 'REJECT'

        option output 'ACCEPT'

        option forward 'REJECT'

        option masq '1'

        option mtu_fix '1'

        option network 'wan wan6 wwan'

 

config forwarding

        option src 'lan'

        option dest 'wan'

 

config rule

        option name 'Allow-DHCP-Renew'

        option src 'wan'

        option proto 'udp'

        option dest_port '68'

        option target 'ACCEPT'

        option family 'ipv4'

 

config rule

        option name 'Allow-Ping'

        option src 'wan'

        option proto 'icmp'

        option icmp_type 'echo-request'

        option family 'ipv4'

        option target 'ACCEPT'

 

config rule

        option name 'Allow-IGMP'

        option src 'wan'

        option proto 'igmp'

        option family 'ipv4'

        option target 'ACCEPT'

 

config rule

        option name 'Allow-DHCPv6'

        option src 'wan'

        option proto 'udp'

        option src_ip 'fc00::/6'

        option dest_ip 'fc00::/6'

        option dest_port '546'

        option family 'ipv6'

        option target 'ACCEPT'

 

config rule

        option name 'Allow-MLD'

        option src 'wan'

        option proto 'icmp'

        option src_ip 'fe80::/10'

        list icmp_type '130/0'

        list icmp_type '131/0'

        list icmp_type '132/0'

        list icmp_type '143/0'

        option family 'ipv6'

        option target 'ACCEPT'

 

config rule

        option name 'Allow-ICMPv6-Input'

        option src 'wan'

        option proto 'icmp'

        list icmp_type 'echo-request'

        list icmp_type 'echo-reply'

        list icmp_type 'destination-unreachable'

        list icmp_type 'packet-too-big'

        list icmp_type 'time-exceeded'

        list icmp_type 'bad-header'

        list icmp_type 'unknown-header-type'

        list icmp_type 'router-solicitation'

        list icmp_type 'neighbour-solicitation'

        list icmp_type 'router-advertisement'

        list icmp_type 'neighbour-advertisement'

        option limit '1000/sec'

        option family 'ipv6'

        option target 'ACCEPT'

 

config rule

        option name 'Allow-ICMPv6-Forward'

        option src 'wan'

        option dest '*'

        option proto 'icmp'

        list icmp_type 'echo-request'

        list icmp_type 'echo-reply'

        list icmp_type 'destination-unreachable'

        list icmp_type 'packet-too-big'

        list icmp_type 'time-exceeded'

        list icmp_type 'bad-header'

        list icmp_type 'unknown-header-type'

        option limit '1000/sec'

        option family 'ipv6'

        option target 'ACCEPT'

 

config rule

        option name 'Allow-IPSec-ESP'

        option src 'wan'

        option dest 'lan'

        option proto 'esp'

        option target 'ACCEPT'

 

config rule

        option name 'Allow-ISAKMP'

        option src 'wan'

        option dest 'lan'

        option dest_port '500'

        option proto 'udp'

        option target 'ACCEPT'

 

config include

        option path '/etc/firewall.user'

trendy · December 10, 2020, 1:31pm

Can you run again the opkg update and paste here the whole output? There is usually an error code when it fails.

theio · December 10, 2020, 1:35pm

I've just given it a try and it's done this, which I think is good?

root@OpenWrt:~# opkg update

Downloading http://downloads.openwrt.org/releases/19.07.5/targets/brcm2708/bcm2710/packages/Packages.gz

Updated list of available packages in /var/opkg-lists/openwrt_core

Downloading http://downloads.openwrt.org/releases/19.07.5/targets/brcm2708/bcm2710/packages/Packages.sig

Signature check passed.

Downloading http://downloads.openwrt.org/releases/19.07.5/targets/brcm2708/bcm2710/kmods/4.14.209-1-ae418ed2395263358

Updated list of available packages in /var/opkg-lists/openwrt_kmods

Downloading http://downloads.openwrt.org/releases/19.07.5/targets/brcm2708/bcm2710/kmods/4.14.209-1-ae418ed2395263358

Signature check passed.

Downloading http://downloads.openwrt.org/releases/19.07.5/packages/aarch64_cortex-a53/base/Packages.gz

Updated list of available packages in /var/opkg-lists/openwrt_base

Downloading http://downloads.openwrt.org/releases/19.07.5/packages/aarch64_cortex-a53/base/Packages.sig

Signature check passed.

Downloading http://downloads.openwrt.org/releases/19.07.5/packages/aarch64_cortex-a53/freifunk/Packages.gz

Updated list of available packages in /var/opkg-lists/openwrt_freifunk

Downloading http://downloads.openwrt.org/releases/19.07.5/packages/aarch64_cortex-a53/freifunk/Packages.sig

Signature check passed.

Downloading http://downloads.openwrt.org/releases/19.07.5/packages/aarch64_cortex-a53/luci/Packages.gz

Updated list of available packages in /var/opkg-lists/openwrt_luci

Downloading http://downloads.openwrt.org/releases/19.07.5/packages/aarch64_cortex-a53/luci/Packages.sig

Signature check passed.

Downloading http://downloads.openwrt.org/releases/19.07.5/packages/aarch64_cortex-a53/packages/Packages.gz

Updated list of available packages in /var/opkg-lists/openwrt_packages

Downloading http://downloads.openwrt.org/releases/19.07.5/packages/aarch64_cortex-a53/packages/Packages.sig

Signature check passed.

Downloading http://downloads.openwrt.org/releases/19.07.5/packages/aarch64_cortex-a53/routing/Packages.gz

Updated list of available packages in /var/opkg-lists/openwrt_routing

Downloading http://downloads.openwrt.org/releases/19.07.5/packages/aarch64_cortex-a53/routing/Packages.sig

Signature check passed.

Downloading http://downloads.openwrt.org/releases/19.07.5/packages/aarch64_cortex-a53/telephony/Packages.gz

Updated list of available packages in /var/opkg-lists/openwrt_telephony

Downloading http://downloads.openwrt.org/releases/19.07.5/packages/aarch64_cortex-a53/telephony/Packages.sig

Signature check passed.

trendy · December 10, 2020, 1:40pm

Yup, you can try to install vswitch now.