[SOLVED] Make menuconfig won't update configuration (TP-Link WR841N V11, 4 MB Flash)

For Developers
1

Hello, I'm trying to build the firmware for my TP-LINK WR841N V11.1 and would like to know why when I run make it will still compile dnscrypt proxy even if I left it out. I would also like to know why I can't remove opkg anymore since I could do that some weeks ago.(useless on this router since it has 4 MB of flash)
Right now I can't build the firmware since it exceeds 4 MB.

make[1] world
 make[2] target/compile
 make[3] -C target/linux compile
 make[2] diffconfig
 make[2] package/cleanup
 make[2] package/compile
 make[3] -C package/libs/libjson-c host-compile
 make[3] -C package/libs/libubox host-compile
 make[3] -C package/system/opkg host-compile
 make[3] -C package/libs/toolchain compile
 make[3] -C package/libs/libnl-tiny compile
 make[3] -C package/libs/libjson-c compile
 make[3] -C package/utils/lua compile
 make[3] -C package/libs/libubox compile
 make[3] -C package/system/ubus compile
 make[3] -C package/system/uci compile
 make[3] -C package/network/config/netifd compile
 make[3] -C package/firmware/linux-firmware compile
 make[3] -C package/firmware/prism54-firmware compile
 make[3] -C package/kernel/linux compile
 make[3] -C package/system/ubox compile
 make[3] -C package/libs/ncurses host-compile
 make[3] -C package/libs/zlib compile
 make[3] -C package/libs/ncurses compile
 make[3] -C package/utils/util-linux compile
 make[3] -C package/system/fstools compile
 make[3] -C package/system/fwtool host-compile
 make[3] -C package/system/fwtool compile
 make[3] -C package/system/procd compile
 make[3] -C package/system/usign host-compile
 make[3] -C package/system/ucert host-compile
 make[3] -C package/utils/jsonfilter compile
 make[3] -C package/system/openwrt-keyring compile
 make[3] -C package/system/usign compile
 make[3] -C package/base-files compile
 make[3] -C package/boot/uboot-envtools compile
 make[3] -C feeds/luci/modules/luci-base host-compile
 make[3] -C package/network/utils/iptables compile
 make[3] -C package/network/config/firewall compile
 make[3] -C package/utils/lua host-compile
 make[3] -C feeds/luci/applications/luci-app-firewall compile
 make[3] -C package/libs/mbedtls compile
 make[3] -C package/libs/ustream-ssl compile
 make[3] -C package/libs/uclient compile
 make[3] -C package/system/opkg compile
 make[3] -C feeds/luci/applications/luci-app-opkg compile
 make[3] -C feeds/luci/libs/luci-lib-ip compile
 make[3] -C feeds/luci/libs/luci-lib-jsonc compile
 make[3] -C feeds/luci/libs/luci-lib-nixio compile
 make[3] -C feeds/luci/contrib/package/lucihttp compile
 make[3] -C package/network/utils/iwinfo compile
 make[3] -C package/system/rpcd compile
 make[3] -C feeds/luci/modules/luci-base compile
 make[3] -C feeds/luci/modules/luci-mod-network compile
 make[3] -C feeds/luci/modules/luci-mod-status compile
 make[3] -C feeds/luci/modules/luci-mod-system compile
 make[3] -C feeds/luci/modules/luci-mod-admin-full compile
 make[3] -C feeds/luci/protocols/luci-proto-ppp compile
 make[3] -C feeds/luci/themes/luci-theme-bootstrap compile
 make[3] -C feeds/luci/libs/rpcd-mod-rrdns compile
 make[3] -C package/network/services/uhttpd compile
 make[3] -C feeds/luci/collections/luci compile
 make[3] -C feeds/luci/libs/luci-lib-httpprotoutils compile
 make[3] -C package/utils/px5g compile
 make[3] -C feeds/luci/collections/luci-ssl compile
 make[3] -C package/libs/gettext compile
 make[3] -C package/libs/libiconv compile
 make[3] -C package/libs/libtool compile
 make[3] -C feeds/packages/libs/libsodium compile
 make[3] -C feeds/packages/net/dnscrypt-proxy compile
 make[3] -C package/firmware/wireless-regdb compile
 make[3] -C package/kernel/gpio-button-hotplug compile
 make[3] -C package/firmware/b43legacy-firmware compile
 make[3] -C package/libs/openssl compile
 make[3] -C package/libs/wolfssl compile
 make[3] -C package/network/services/hostapd compile
 make[3] -C package/network/utils/iw compile
 make[3] -C package/kernel/mac80211 compile
 make[3] -C package/libs/lzo compile
 make[3] -C package/network/config/swconfig compile
 make[3] -C package/network/services/dnsmasq compile
 make[3] -C package/network/services/dropbear compile
 make[3] -C package/network/services/openvpn compile
 make[3] -C package/libs/libpcap compile
 make[3] -C package/network/utils/linux-atm compile
 make[3] -C package/network/utils/resolveip compile
 make[3] -C package/network/services/ppp compile
 make[3] -C package/system/mtd compile
 make[3] -C package/utils/busybox compile
 make[2] package/install
 make[2] target/install
 make[3] -C target/linux install
 make[2] package/index
 make[2] checksum
user@debian:~/openwrt$
2

(Moved to the For Developers section.)

3

Most likely its a dependency for something else you included.

4

Based on that log, opkg is not your main problem. There are so many packages that fitting them into 4 MB will be hard/impossible in any case.

For example, you seem to try cramming three different SSL libraries into a 4 MB router's firmware, you will definitely run into problems:

You should show the output of ./scripts/diffconfig.sh instead of the highlevel build log, which does not tell much.

in addition to "opkg" you seem to have also have the new luci-app-opkg, which pulls opkg as dependency. That might be the reason why opkg gets included. @jow added that new default app a few days ago into luci as default, and that causes opkg to be forced into the build, I guess. You could avoid that by not selecting the meta-package "luci", but by selecting individually the other packages from "luci". See the list in
https://github.com/openwrt/luci/blob/4bbe32548c407ec6ae104934b3f1fe53539de9f6/collections/luci/Makefile

1 Like
5

Thanks for the detailed answer!

I used to able to compile the firmware with luci-app-dnscrypt and mbetls but now it seems that package also includes the opkg packges which I can't exclude. In a router with 4 MB of flash and not much memory I can't do much with them so could you please tell me how one could exclude them?
All I would like to have inside the image is the LuCI GUI with the firewall, dnscrypt, openvpn apps and ppoe funcionality.

I created a new configuration file and both openssl and wolfssl seem to be excluded so I don't which package made it include them.
Right now I'm compiling the firmware and even though they are unchecked in the menuconfig I still get

make[3] -C tools/libressl compile

Is it supposed to be like this?

Output of ./script/diffconfig.sh

> CONFIG_TARGET_ar71xx=y
> CONFIG_TARGET_ar71xx_tiny=y
> CONFIG_TARGET_ar71xx_tiny_DEVICE_tl-wr841-v11=y
> # CONFIG_BUSYBOX_DEFAULT_FEATURE_IPV6 is not set
> CONFIG_CLEAN_IPKG=y
> # CONFIG_IPV6 is not set
> CONFIG_KERNEL_CC_OPTIMIZE_FOR_PERFORMANCE=y
> # CONFIG_KERNEL_CC_OPTIMIZE_FOR_SIZE is not set
> # CONFIG_KERNEL_CRASHLOG is not set
> # CONFIG_KERNEL_DEBUG_FS is not set
> # CONFIG_KERNEL_IPV6 is not set
> # CONFIG_KERNEL_IP_MROUTE is not set
> # CONFIG_KERNEL_MAGIC_SYSRQ is not set
> # CONFIG_KERNEL_PRINTK is not set
> # CONFIG_KERNEL_PRINTK_TIME is not set
> CONFIG_KERNEL_SQUASHFS_FRAGMENT_CACHE_SIZE=3
> CONFIG_LIBSODIUM_MINIMAL=y
> CONFIG_LUCI_SRCDIET=y
> # CONFIG_PACKAGE_MAC80211_DEBUGFS is not set
> CONFIG_PACKAGE_dnscrypt-proxy=y
> CONFIG_PACKAGE_dnscrypt-proxy-resolvers=y
> CONFIG_PACKAGE_kmod-nls-base=y
> CONFIG_PACKAGE_libiwinfo-lua=y
> CONFIG_PACKAGE_liblua=y
> CONFIG_PACKAGE_liblucihttp=y
> CONFIG_PACKAGE_liblucihttp-lua=y
> CONFIG_PACKAGE_libmbedtls=y
> CONFIG_PACKAGE_libsodium=y
> CONFIG_PACKAGE_libubus-lua=y
> CONFIG_PACKAGE_libustream-mbedtls=y
> CONFIG_PACKAGE_lua=y
> CONFIG_PACKAGE_luci=y
> CONFIG_PACKAGE_luci-app-dnscrypt-proxy=y
> CONFIG_PACKAGE_luci-app-firewall=y
> CONFIG_PACKAGE_luci-app-opkg=y
> CONFIG_PACKAGE_luci-base=y
> CONFIG_PACKAGE_luci-lib-httpprotoutils=y
> CONFIG_PACKAGE_luci-lib-ip=y
> CONFIG_PACKAGE_luci-lib-jsonc=y
> CONFIG_PACKAGE_luci-lib-nixio=y
> CONFIG_PACKAGE_luci-mod-admin-full=y
> CONFIG_PACKAGE_luci-mod-network=y
> CONFIG_PACKAGE_luci-mod-status=y
> CONFIG_PACKAGE_luci-mod-system=y
> CONFIG_PACKAGE_luci-proto-ppp=y
> CONFIG_PACKAGE_luci-ssl=y
> CONFIG_PACKAGE_luci-theme-bootstrap=y
> CONFIG_PACKAGE_px5g-mbedtls=y
> CONFIG_PACKAGE_rpcd=y
> CONFIG_PACKAGE_rpcd-mod-rrdns=y
> CONFIG_PACKAGE_uhttpd=y
> CONFIG_PACKAGE_wpad-basic=y
> # CONFIG_PACKAGE_wpad-mini is not set
> CONFIG_STRIP_KERNEL_EXPORTS=y
> CONFIG_USE_MKLIBS=y
> CONFIG_PACKAGE_kmod-nf-ipt6=y
> CONFIG_PACKAGE_libip6tc=y
6

I already told you that.

Instead of selecting "luci" or "luci-ssl" collection meta-package, just select the individual components, except those that you do not want.

LUCI_DEPENDS:= \
+uhttpd +luci-mod-admin-full +luci-theme-bootstrap \
+luci-app-firewall +luci-app-opkg +luci-proto-ppp +libiwinfo-lua +IPV6:luci-proto-ipv6 \
+rpcd-mod-rrdns

Select in your .config the other shown packages, but NOT luci-app-opkg

The easiest long-term approach is to save that diffconfig output as something like .config.seed, and then edit it by the removing luci and luci-ssl packages and also luci-app-opkg . You can then copy that as a new .config, and use "make menuconfig" to expand it to a normal full .config file with all the selection. At that point you could de-select opkg itself. (and add that line to your .config.seed for future use. The line is likely

# CONFIG_PACKAGE_opkg is not set
1 Like
7

My bad for not reading.

I forgot to mention I would like to have LuCI with TLS
This is my .config as of right now

CONFIG_TARGET_ar71xx=y
CONFIG_TARGET_ar71xx_tiny=y
CONFIG_TARGET_ar71xx_tiny_DEVICE_tl-wr841-v11=y
# CONFIG_BUSYBOX_DEFAULT_FEATURE_IPV6 is not set
CONFIG_CLEAN_IPKG=y
# CONFIG_IPV6 is not set
CONFIG_KERNEL_CC_OPTIMIZE_FOR_PERFORMANCE=y
# CONFIG_KERNEL_CC_OPTIMIZE_FOR_SIZE is not set
# CONFIG_KERNEL_CRASHLOG is not set
# CONFIG_KERNEL_DEBUG_FS is not set
# CONFIG_KERNEL_IPV6 is not set
# CONFIG_KERNEL_IP_MROUTE is not setcp
# CONFIG_KERNEL_MAGIC_SYSRQ is not set
# CONFIG_KERNEL_PRINTK is not set
# CONFIG_KERNEL_PRINTK_TIME is not set
CONFIG_KERNEL_SQUASHFS_FRAGMENT_CACHE_SIZE=3
CONFIG_LIBSODIUM_MINIMAL=y
CONFIG_LUCI_SRCDIET=y
# CONFIG_PACKAGE_MAC80211_DEBUGFS is not set
CONFIG_PACKAGE_dnscrypt-proxy=y
CONFIG_PACKAGE_dnscrypt-proxy-resolvers=y
CONFIG_PACKAGE_kmod-nls-base=y
CONFIG_PACKAGE_liblua=y
CONFIG_PACKAGE_liblucihttp=y
CONFIG_PACKAGE_liblucihttp-lua=y
CONFIG_PACKAGE_libmbedtls=y
CONFIG_PACKAGE_libsodium=y
CONFIG_PACKAGE_libubus-lua=y
CONFIG_PACKAGE_lua=y
CONFIG_PACKAGE_luci-app-dnscrypt-proxy=y
CONFIG_PACKAGE_luci-app-firewall=y
CONFIG_PACKAGE_luci-app-openvpn=y
CONFIG_PACKAGE_luci-base=y
CONFIG_PACKAGE_luci-lib-httpprotoutils=y
CONFIG_PACKAGE_luci-lib-ip=y
CONFIG_PACKAGE_luci-lib-jsonc=y
CONFIG_PACKAGE_luci-lib-nixio=y
# CONFIG_PACKAGE_opkg is not set
CONFIG_PACKAGE_rpcd=y
CONFIG_PACKAGE_wpad-basic=y
# CONFIG_PACKAGE_wpad-mini is not set
CONFIG_STRIP_KERNEL_EXPORTS=y
CONFIG_USE_MKLIBS=y
CONFIG_PACKAGE_kmod-nf-ipt6=y
CONFIG_PACKAGE_libip6tc=y
CONFIG_PACKAGE_libpthread=y

Is there a way to only add LuCI with TLS?
If so can I remove liblucihttp and liblucihttplua?

8

Juts add the two packages from luci-ssl to the list above:
+libustream-mbedtls +px5g

Deviating from the standard requires some homework regarding the packages and the source code...

1 Like
9

heh without you I wouldn't be able to do all of this...

By searching px5g I find these 3 packages:

luci-lib-px5g
px5g-mbedtls
px5g-standalone

Which one is the right one?
I am selecting them from (libustream-mbedtls and px5g) from make menuconfig, is that what you meant by adding them to .config?

10 
px5g-mbedtls

if you take +libustream-mbedtls

1 Like
12

I compiled the image and everything went fine (3.38 MB) but I can't access LuCI, it says connection refused when I browse 192.168.1.1. I can only access via SSH.
This is the config.seed (./scripts/diffconfig.sh) in the /bin/targets/ar71xx/tiny folder

CONFIG_TARGET_ar71xx=y
CONFIG_TARGET_ar71xx_tiny=y
CONFIG_TARGET_ar71xx_tiny_DEVICE_tl-wr841-v11=y
# CONFIG_BUSYBOX_DEFAULT_FEATURE_IPV6 is not set
CONFIG_CLEAN_IPKG=y
# CONFIG_IPV6 is not set
CONFIG_KERNEL_CC_OPTIMIZE_FOR_PERFORMANCE=y
# CONFIG_KERNEL_CC_OPTIMIZE_FOR_SIZE is not set
# CONFIG_KERNEL_CRASHLOG is not set
# CONFIG_KERNEL_DEBUG_FS is not set
# CONFIG_KERNEL_IPV6 is not set
# CONFIG_KERNEL_IP_MROUTE is not set
# CONFIG_KERNEL_MAGIC_SYSRQ is not set
# CONFIG_KERNEL_PRINTK is not set
# CONFIG_KERNEL_PRINTK_TIME is not set
CONFIG_KERNEL_SQUASHFS_FRAGMENT_CACHE_SIZE=3
CONFIG_LIBSODIUM_MINIMAL=y
CONFIG_LUCI_SRCDIET=y
# CONFIG_PACKAGE_MAC80211_DEBUGFS is not set
CONFIG_PACKAGE_dnscrypt-proxy=y
CONFIG_PACKAGE_dnscrypt-proxy-resolvers=y
# CONFIG_PACKAGE_kmod-nf-ipt6 is not set
CONFIG_PACKAGE_kmod-nls-base=y
# CONFIG_PACKAGE_libip6tc is not set
CONFIG_PACKAGE_liblua=y
CONFIG_PACKAGE_liblucihttp=y
CONFIG_PACKAGE_liblucihttp-lua=y
CONFIG_PACKAGE_libmbedtls=y
CONFIG_PACKAGE_libsodium=y
CONFIG_PACKAGE_libubus-lua=y
CONFIG_PACKAGE_libustream-mbedtls=y
CONFIG_PACKAGE_lua=y
CONFIG_PACKAGE_luci-app-dnscrypt-proxy=y
CONFIG_PACKAGE_luci-app-firewall=y
CONFIG_PACKAGE_luci-app-openvpn=y
CONFIG_PACKAGE_luci-base=y
CONFIG_PACKAGE_luci-lib-httpprotoutils=y
CONFIG_PACKAGE_luci-lib-ip=y
CONFIG_PACKAGE_luci-lib-jsonc=y
CONFIG_PACKAGE_luci-lib-nixio=y
# CONFIG_PACKAGE_opkg is not set
CONFIG_PACKAGE_px5g-mbedtls=y
CONFIG_PACKAGE_rpcd=y
CONFIG_PACKAGE_wpad-basic=y
# CONFIG_PACKAGE_wpad-mini is not set
CONFIG_STRIP_KERNEL_EXPORTS=y
CONFIG_USE_MKLIBS=y
CONFIG_PACKAGE_libpthread=y

What am I doing wrong?

13

I do not see some of the key packages of the luci contects list:
web server - uhttpd
main luci - luci-mod-admin-full
luci UI theme files - luci-theme-bootstrap

Looks like you have left out a few key pieces...

The list again:

LUCI_DEPENDS:= \
+uhttpd +luci-mod-admin-full +luci-theme-bootstrap \
+luci-app-firewall +luci-app-opkg +luci-proto-ppp +libiwinfo-lua +IPV6:luci-proto-ipv6 \
+rpcd-mod-rrdns

Just leave the luci-app-opkg out and take the others.

And you might first test without SSL just to make sure that the normal http connection works ok.

14

I can see different uhttpd packages:

uhttpd
libuhttpd-mbedtls
luci-app-httpd
uhttpd-mod-lua
uhttpd-mod-ubus

Which one is the right one for accessing LuCI over mbedTLS? How does choose to use http or https? Isn't it better to completely disable/remove the packages that enable http web server from a security point of view?

I added the missing packages (uhttpd, luci-mod-admin-full, luci-theme-bootstrap, rcpd-mod-rrdns) to .config and am compiling. I'm sorry for all the hassle but I was used to selecting just the LuCI meta package. Hopefully this thread will be useful to someone else.

EDIT: It's working :slight_smile: thank you!!!
This is the final config.seed
GNU nano 2.7.4 File: config.seed

CONFIG_TARGET_ar71xx=y
CONFIG_TARGET_ar71xx_tiny=y
CONFIG_TARGET_ar71xx_tiny_DEVICE_tl-wr841-v11=y
# CONFIG_BUSYBOX_DEFAULT_FEATURE_IPV6 is not set
CONFIG_CLEAN_IPKG=y
# CONFIG_IPV6 is not set
CONFIG_KERNEL_CC_OPTIMIZE_FOR_PERFORMANCE=y
# CONFIG_KERNEL_CC_OPTIMIZE_FOR_SIZE is not set
# CONFIG_KERNEL_CRASHLOG is not set
# CONFIG_KERNEL_DEBUG_FS is not set
# CONFIG_KERNEL_IPV6 is not set
# CONFIG_KERNEL_IP_MROUTE is not set
# CONFIG_KERNEL_MAGIC_SYSRQ is not set
# CONFIG_KERNEL_PRINTK is not set
# CONFIG_KERNEL_PRINTK_TIME is not set
CONFIG_KERNEL_SQUASHFS_FRAGMENT_CACHE_SIZE=3
CONFIG_LIBSODIUM_MINIMAL=y
CONFIG_LUCI_SRCDIET=y
# CONFIG_PACKAGE_MAC80211_DEBUGFS is not set
CONFIG_PACKAGE_dnscrypt-proxy=y
CONFIG_PACKAGE_dnscrypt-proxy-resolvers=y
# CONFIG_PACKAGE_kmod-nf-ipt6 is not set
CONFIG_PACKAGE_kmod-nls-base=y
# CONFIG_PACKAGE_libip6tc is not set
CONFIG_PACKAGE_libiwinfo-lua=y
CONFIG_PACKAGE_liblua=y
CONFIG_PACKAGE_liblucihttp=y
CONFIG_PACKAGE_liblucihttp-lua=y
CONFIG_PACKAGE_libmbedtls=y
CONFIG_PACKAGE_libsodium=y
CONFIG_PACKAGE_libubus-lua=y
CONFIG_PACKAGE_libustream-mbedtls=y
CONFIG_PACKAGE_lua=y
CONFIG_PACKAGE_luci-app-dnscrypt-proxy=y
CONFIG_PACKAGE_luci-app-firewall=y
CONFIG_PACKAGE_luci-app-openvpn=y
CONFIG_PACKAGE_luci-base=y
CONFIG_PACKAGE_luci-lib-httpprotoutils=y
CONFIG_PACKAGE_luci-lib-ip=y
CONFIG_PACKAGE_luci-lib-jsonc=y
CONFIG_PACKAGE_luci-lib-nixio=y
CONFIG_PACKAGE_luci-mod-admin-full=y
CONFIG_PACKAGE_luci-mod-network=y
CONFIG_PACKAGE_luci-mod-status=y
CONFIG_PACKAGE_luci-mod-system=y
CONFIG_PACKAGE_luci-theme-bootstrap=y
# CONFIG_PACKAGE_opkg is not set
CONFIG_PACKAGE_px5g-mbedtls=y
CONFIG_PACKAGE_rpcd=y
CONFIG_PACKAGE_rpcd-mod-rrdns=y
CONFIG_PACKAGE_uhttpd=y
CONFIG_PACKAGE_wpad-basic=y
# CONFIG_PACKAGE_wpad-mini is not set
CONFIG_STRIP_KERNEL_EXPORTS=y
CONFIG_USE_MKLIBS=y
CONFIG_PACKAGE_libpthread=y

For some reason the wan option is not showing up in Luci > Interfaces > Wan

[Album] Imgur: The magic of the Internet

here the images for TP-Link WR841N V11 with openvpn, dnscrypt, firewall and LuCI over SSL and kinda broken pppoe (need to ssh and user vi /etc/config/network)
https://mega.nz/#F!n3AA1YZa!cGkphk6J8iUY00tUo0T-Yg

15

@hnyman I'm trying to build openwrt for WR940N V6 EU. I only need LuCI GUI over TLS and openvpn with mbedTLS
I'm getting this when I run make -j1 V=s

rm -f /home/user/openwrt/build_dir/target-mips_24kc_musl/linux-ar71xx_tiny/tmp/openwrt-ar71xx-tiny-tl-wr940n-v6-squashfs-factory-br.bin
[mktplinkfw] rootfs offset aligned to 0x1211044
[mktplinkfw] *** error: images are too big by 1718 bytes

this is the config.seed output:
user@debian:~/openwrt$ ./scripts/diffconfig.sh

CONFIG_TARGET_ar71xx=y
CONFIG_TARGET_ar71xx_tiny=y
CONFIG_TARGET_ar71xx_tiny_DEVICE_tl-wr940n-v6=y
# CONFIG_BUSYBOX_DEFAULT_FEATURE_IPV6 is not set
CONFIG_CLEAN_IPKG=y
# CONFIG_IPV6 is not set
CONFIG_KERNEL_CC_OPTIMIZE_FOR_PERFORMANCE=y
# CONFIG_KERNEL_CC_OPTIMIZE_FOR_SIZE is not set
# CONFIG_KERNEL_CRASHLOG is not set
# CONFIG_KERNEL_DEBUG_FS is not set
# CONFIG_KERNEL_IPV6 is not set
# CONFIG_KERNEL_IP_MROUTE is not set
# CONFIG_KERNEL_MAGIC_SYSRQ is not set
# CONFIG_KERNEL_PRINTK is not set
# CONFIG_KERNEL_PRINTK_TIME is not set
CONFIG_KERNEL_SQUASHFS_FRAGMENT_CACHE_SIZE=3
CONFIG_LIBSODIUM_MINIMAL=y
CONFIG_LUCI_SRCDIET=y
CONFIG_OPENVPN_mbedtls_ENABLE_DEF_AUTH=y
CONFIG_OPENVPN_mbedtls_ENABLE_FRAGMENT=y
CONFIG_OPENVPN_mbedtls_ENABLE_HTTP=y
CONFIG_OPENVPN_mbedtls_ENABLE_LZ4=y
CONFIG_OPENVPN_mbedtls_ENABLE_LZO=y
CONFIG_OPENVPN_mbedtls_ENABLE_MULTIHOME=y
CONFIG_OPENVPN_mbedtls_ENABLE_PF=y
CONFIG_OPENVPN_mbedtls_ENABLE_PORT_SHARE=y
CONFIG_OPENVPN_mbedtls_ENABLE_SERVER=y
CONFIG_OPENVPN_mbedtls_ENABLE_SMALL=y
CONFIG_OPENVPN_mbedtls_ENABLE_SOCKS=y
# CONFIG_PACKAGE_MAC80211_DEBUGFS is not set
# CONFIG_PACKAGE_kmod-nf-ipt6 is not set
CONFIG_PACKAGE_kmod-nls-base=y
# CONFIG_PACKAGE_kmod-pppoe is not set
# CONFIG_PACKAGE_kmod-pppox is not set
CONFIG_PACKAGE_kmod-tun=y
# CONFIG_PACKAGE_libip6tc is not set
CONFIG_PACKAGE_libiwinfo-lua=y
CONFIG_PACKAGE_liblua=y
CONFIG_PACKAGE_liblucihttp=y
CONFIG_PACKAGE_liblucihttp-lua=y
CONFIG_PACKAGE_liblzo=y
CONFIG_PACKAGE_libmbedtls=y
CONFIG_PACKAGE_libsodium=y
CONFIG_PACKAGE_libubus-lua=y
CONFIG_PACKAGE_libustream-mbedtls=y
CONFIG_PACKAGE_lua=y
CONFIG_PACKAGE_luci-app-firewall=y
CONFIG_PACKAGE_luci-app-openvpn=y
CONFIG_PACKAGE_luci-base=y
CONFIG_PACKAGE_luci-lib-httpprotoutils=y
CONFIG_PACKAGE_luci-lib-ip=y
CONFIG_PACKAGE_luci-lib-jsonc=y
CONFIG_PACKAGE_luci-lib-nixio=y
CONFIG_PACKAGE_luci-mod-admin-full=y
CONFIG_PACKAGE_luci-mod-network=y
CONFIG_PACKAGE_luci-mod-status=y
CONFIG_PACKAGE_luci-mod-system=y
CONFIG_PACKAGE_luci-theme-bootstrap=y
CONFIG_PACKAGE_openvpn-mbedtls=y
# CONFIG_PACKAGE_opkg is not set
# CONFIG_PACKAGE_ppp-mod-pppoe is not set
CONFIG_PACKAGE_px5g-mbedtls=y
CONFIG_PACKAGE_rpcd=y
CONFIG_PACKAGE_rpcd-mod-rrdns=y
CONFIG_PACKAGE_uhttpd=y
CONFIG_PACKAGE_wpad-basic=y
# CONFIG_PACKAGE_wpad-mini is not set
CONFIG_STRIP_KERNEL_EXPORTS=y
CONFIG_USE_MKLIBS=y
CONFIG_PACKAGE_libpthread=y

Can I exclude any of those packages? For ex. are luci-lib-httpprotoutils, liblucihttp-lua, liblucihttp need if I only want LuCI to run over TLS?

16

There are other things you can do to save space, see https://openwrt.org/docs/guide-user/additional-software/saving_space.

17

I did look at that link I just don't know which packages I can remove from the output of diffconfig.
I don't know if these packages are dependencies for other packages and are needed for what I need (openwrt with mbedTLS, basic networking and firewalling, LuCI over HTTPS)

> user@debian:~/openwrt$ ./scripts/diffconfig.sh
> CONFIG_TARGET_ar71xx=y
> CONFIG_TARGET_ar71xx_tiny=y
> CONFIG_TARGET_ar71xx_tiny_DEVICE_tl-wr940n-v6=y
> # CONFIG_BUSYBOX_DEFAULT_FEATURE_IPV6 is not set
> CONFIG_CLEAN_IPKG=y
> # CONFIG_IPV6 is not set
> CONFIG_KERNEL_CC_OPTIMIZE_FOR_PERFORMANCE=y
> # CONFIG_KERNEL_CC_OPTIMIZE_FOR_SIZE is not set
> # CONFIG_KERNEL_CRASHLOG is not set
> # CONFIG_KERNEL_DEBUG_FS is not set
> # CONFIG_KERNEL_IPV6 is not set
> # CONFIG_KERNEL_IP_MROUTE is not set
> # CONFIG_KERNEL_MAGIC_SYSRQ is not set
> # CONFIG_KERNEL_PRINTK is not set
> # CONFIG_KERNEL_PRINTK_TIME is not set
> CONFIG_KERNEL_SQUASHFS_FRAGMENT_CACHE_SIZE=3
> CONFIG_LIBSODIUM_MINIMAL=y
> CONFIG_LUCI_SRCDIET=y
> CONFIG_OPENVPN_mbedtls_ENABLE_DEF_AUTH=y
> CONFIG_OPENVPN_mbedtls_ENABLE_FRAGMENT=y
> CONFIG_OPENVPN_mbedtls_ENABLE_HTTP=y
> CONFIG_OPENVPN_mbedtls_ENABLE_LZ4=y
> CONFIG_OPENVPN_mbedtls_ENABLE_LZO=y
> CONFIG_OPENVPN_mbedtls_ENABLE_MULTIHOME=y
> CONFIG_OPENVPN_mbedtls_ENABLE_PF=y
> CONFIG_OPENVPN_mbedtls_ENABLE_PORT_SHARE=y
> CONFIG_OPENVPN_mbedtls_ENABLE_SERVER=y
> CONFIG_OPENVPN_mbedtls_ENABLE_SMALL=y
> CONFIG_OPENVPN_mbedtls_ENABLE_SOCKS=y
> # CONFIG_PACKAGE_MAC80211_DEBUGFS is not set
> # CONFIG_PACKAGE_kmod-nf-ipt6 is not set
> CONFIG_PACKAGE_kmod-nls-base=y
> # CONFIG_PACKAGE_kmod-pppoe is not set
> # CONFIG_PACKAGE_kmod-pppox is not set
> CONFIG_PACKAGE_kmod-tun=y
> # CONFIG_PACKAGE_libip6tc is not set
> CONFIG_PACKAGE_libiwinfo-lua=y
> CONFIG_PACKAGE_liblua=y
> CONFIG_PACKAGE_liblucihttp=y
> CONFIG_PACKAGE_liblucihttp-lua=y
> CONFIG_PACKAGE_liblzo=y
> CONFIG_PACKAGE_libmbedtls=y
> CONFIG_PACKAGE_libsodium=y
> CONFIG_PACKAGE_libubus-lua=y
> CONFIG_PACKAGE_libustream-mbedtls=y
> CONFIG_PACKAGE_lua=y
> CONFIG_PACKAGE_luci-app-firewall=y
> CONFIG_PACKAGE_luci-app-openvpn=y
> CONFIG_PACKAGE_luci-base=y
> CONFIG_PACKAGE_luci-lib-httpprotoutils=y
> CONFIG_PACKAGE_luci-lib-ip=y
> CONFIG_PACKAGE_luci-lib-jsonc=y
> CONFIG_PACKAGE_luci-lib-nixio=y
> CONFIG_PACKAGE_luci-mod-admin-full=y
> CONFIG_PACKAGE_luci-mod-network=y
> CONFIG_PACKAGE_luci-mod-status=y
> CONFIG_PACKAGE_luci-mod-system=y
> CONFIG_PACKAGE_luci-theme-bootstrap=y
> CONFIG_PACKAGE_openvpn-mbedtls=y
> # CONFIG_PACKAGE_opkg is not set
> # CONFIG_PACKAGE_ppp-mod-pppoe is not set
> CONFIG_PACKAGE_px5g-mbedtls=y
> CONFIG_PACKAGE_rpcd=y
> CONFIG_PACKAGE_rpcd-mod-rrdns=y
> CONFIG_PACKAGE_uhttpd=y
> CONFIG_PACKAGE_wpad-basic=y
> # CONFIG_PACKAGE_wpad-mini is not set
> CONFIG_STRIP_KERNEL_EXPORTS=y
> CONFIG_USE_MKLIBS=y
> CONFIG_PACKAGE_libpthread=y

EDIT: solved by unchecking Kernel Modules > wireless drivers > mac801 > compile for mesh support

18

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.