The OpenWrt Firmware Selector

These are "ssl" packages that i have got installed now:

libopenssl-conf
libopenssl1.1
libustream-wolfssl20201210
libwolfssl5.5.4.ee39414e
luci-ssl
nginx-ssl
nginx-ssl-util
openssl-util
openvpn-openssl
px5g-wolfssl
wpad-basic-wolfssl

If i ask sysupgrade for 22.03 version, the build will be generated, if i ask for 23.05 i got luci-ssl package error as i reported in my precedent post

If I understand correctly, customized images from OpenWrt Firmware Selector are built by official ImageBuilders.

Snapshot images built by official ImageBuilders are currently broken and will brick your device, I'm afraid.

See https://github.com/openwrt/openwrt/issues/16932

3 Likes

The defaults changed from wolfssl on 22.03 to mbedtls in 23.05, so if you are adding any wolfssl packages to the Firmware Selector package list, it will cause these issues. Both of auc and LuCI Attended Sysupgrade app should do the transition automatically.

Is this happening on 23.05.x or 24.10-SNAPSHOT or MAIN SNAPSHOT images?

Currently running: 22.03.5 - r20134-5f15225c1e

Search for firmware upgrade

Powered by LuCI openwrt-22.03 branch (git-23.119.80898-65ef406) / OpenWrt 22.03.5 r20134-5f15225c1e
Error building the firmware image
Server response: Error: Impossible package selection

Please report the error message and request
Request Data:

{
    "url": "https://sysupgrade.openwrt.org",
    "revision": "r20134-5f15225c1e",
    "advanced_mode": "1",
    "branch": "22.03",
    "efi": null,
    "profile": "tplink,archer-ax23-v1",
    "target": "ramips/mt7621",
    "version": "23.05.5",
    "packages": [
        "base-files",
        "bash",
        "busybox",
        "ca-bundle",
        "cgi-io",
        "curl",
        "ddns-scripts",
        "ddns-scripts-noip",
        "ddns-scripts-services",
        "dnsmasq",
        "dropbear",
        "firewall4",
        "fstools",
        "fwtool",
        "getrandom",
        "haproxy",
        "hostapd-common",
        "iwinfo",
        "jansson",
        "jshn",
        "jsonfilter",
        "kernel",
        "kmod-crypto-crc32c",
        "kmod-crypto-hash",
        "kmod-gpio-button-hotplug",
        "kmod-leds-gpio",
        "kmod-lib-crc-ccitt",
        "kmod-lib-crc32c",
        "kmod-mt7915e",
        "kmod-nf-conntrack",
        "kmod-nf-conntrack6",
        "kmod-nf-flow",
        "kmod-nf-log",
        "kmod-nf-log6",
        "kmod-nf-nat",
        "kmod-nf-reject",
        "kmod-nf-reject6",
        "kmod-nfnetlink",
        "kmod-nft-core",
        "kmod-nft-fib",
        "kmod-nft-nat",
        "kmod-nft-offload",
        "kmod-ppp",
        "kmod-pppoe",
        "kmod-pppox",
        "kmod-slhc",
        "libblobmsg-json",
        "libiwinfo",
        "libiwinfo-data",
        "libiwinfo-lua",
        "libjson-c",
        "libjson-script",
        "liblua",
        "liblucihttp",
        "liblucihttp-lua",
        "libmnl",
        "libnftnl",
        "libnl-tiny",
        "libopenssl",
        "libubox",
        "libubus",
        "libubus-lua",
        "libuci",
        "libuclient",
        "libucode",
        "libustream-wolfssl",
        "libwolfssl",
        "logd",
        "lua",
        "luci",
        "luci-app-attendedsysupgrade",
        "luci-app-ddns",
        "luci-app-firewall",
        "luci-app-openvpn",
        "luci-app-opkg",
        "luci-base",
        "luci-lib-base",
        "luci-lib-ip",
        "luci-lib-jsonc",
        "luci-lib-nixio",
        "luci-mod-admin-full",
        "luci-mod-network",
        "luci-mod-status",
        "luci-mod-system",
        "luci-proto-ipv6",
        "luci-proto-ppp",
        "luci-ssl",
        "luci-theme-bootstrap",
        "mtd",
        "nano",
        "netifd",
        "nftables-json",
        "odhcp6c",
        "odhcpd-ipv6only",
        "openssl-util",
        "openvpn-easy-rsa",
        "openvpn-openssl",
        "openwrt-keyring",
        "opkg",
        "ppp",
        "ppp-mod-pppoe",
        "procd",
        "procd-seccomp",
        "procd-ujail",
        "px5g-wolfssl",
        "rpcd",
        "rpcd-mod-file",
        "rpcd-mod-iwinfo",
        "rpcd-mod-luci",
        "rpcd-mod-rrdns",
        "ubi-utils",
        "ubox",
        "ubus",
        "ubusd",
        "uci",
        "uclient-fetch",
        "ucode",
        "ucode-mod-fs",
        "ucode-mod-ubus",
        "ucode-mod-uci",
        "uhttpd",
        "uhttpd-mod-ubus",
        "urandom-seed",
        "urngd",
        "usign",
        "wireless-regdb",
        "wpad-basic-wolfssl"
    ],
    "diff_packages": true,
    "filesystem": "squashfs",
    "client": "luci/git-23.093.42303-58b861d"
}
STDERR:
Generate local signing keys...
Generate local certificate...
Package list missing or not up-to-date, generating it.

Building package index...
Downloading https://downloads.openwrt.org/releases/23.05.5/targets/ramips/mt7621/packages/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_core
Downloading https://downloads.openwrt.org/releases/23.05.5/targets/ramips/mt7621/packages/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/23.05.5/packages/mipsel_24kc/base/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_base
Downloading https://downloads.openwrt.org/releases/23.05.5/packages/mipsel_24kc/base/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/23.05.5/packages/mipsel_24kc/luci/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_luci
Downloading https://downloads.openwrt.org/releases/23.05.5/packages/mipsel_24kc/luci/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/23.05.5/packages/mipsel_24kc/packages/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_packages
Downloading https://downloads.openwrt.org/releases/23.05.5/packages/mipsel_24kc/packages/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/23.05.5/packages/mipsel_24kc/routing/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_routing
Downloading https://downloads.openwrt.org/releases/23.05.5/packages/mipsel_24kc/routing/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/23.05.5/packages/mipsel_24kc/telephony/Packages.gz
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/openwrt_telephony
Downloading https://downloads.openwrt.org/releases/23.05.5/packages/mipsel_24kc/telephony/Packages.sig
Signature check passed.
Downloading file:packages/Packages
Updated list of available packages in /builder/build_dir/target-mipsel_24kc_musl/root-ramips/../../../../builder/dl/imagebuilder
Downloading file:packages/Packages.sig
Signature check passed.
Collected errors:
 * check_data_file_clashes: Package libustream-mbedtls20201210 wants to install file /builder/build_dir/target-mipsel_24kc_musl/root-ramips/lib/libustream-ssl.so
	But that file is already provided by package  * libustream-wolfssl20201210
 * opkg_install_cmd: Cannot install package luci-ssl.
make[2]: *** [Makefile:189: package_install] Error 255
make[1]: *** [Makefile:154: _call_manifest] Error 2
make: *** [Makefile:274: manifest] Error 2

I tried to remove libustream-wolfssl20201210 packages instead of luci-ssl and got another error relative to px5g-wolfssl package. I Deleted It also and i got the image builded.

I have other wolfssl package in attended sysupgrade list, like: libwolfssl and wpad-basic-wolfsslb that not causes compiling problems..

Can i leave It in the list or i must remove all wolfssl packages, also if no errors occours during creating sysupgrade image?

Only main snapshots are affected it seems.

1 Like

I am not a dev so I might be wrong.

@nbd FYI.

I think the commit 44598c2 removed "busybox", "procd" and "procd-seccomp" packages from the default list of packages, which is why the Imagebuilder generated default config images are not booting.

I just pushed a fix. Sorry about the breakage - next round of builds should be fine.

4 Likes

I have an mt-2500 and I have always used a snapshot. Now, when I try to form an FW, I get an error about opkg. Without opgk, FW is formed, but then how do I install ipk packages? How to use apk instead of opkg - is there any instruction? For example, I need to install luci-app-homeproxy and internet-detector and these are ipk files, and when I try to install them, I get a message about the absence of a signature.

Another container for assembling the installation file.
Wait until the authors start packing in the "new" format, or someone writes a utility to convert from one format to another.
It's like different types of archives, for example .zip & .rar

1 Like

Custom image. I just removed ppp support and add a theme. Nothing fancy.
I recovered the device with nmrpflash right away.

I'm up and running on r28062 snapshot with all my packages added manually...
Just for grins I tried building the same build with all my customized packages using the OpenWrt Firmware Selector...Built the image and then flashed it...
Bricked!!!...Had to rebuild manually again (Restore Luci, manually install packages and then restore my already saved config from r28062...
Back up on r28062...I'll stay on this for a while.

is there a way to list only the packages that i (user) installed in my current version , so i can create an clean sysupgrade img file adding only the few packages i need ? Because the attended sysupgrade get all actual packages and merge it with the the newer in 23.05

My favorite version of the magic handshake that works with older versions of OpenWrt is

eval $(ubus call rpc-sys packagelist | jsonfilter -e 'packages=$.*') && echo $packages

The default output from the packagelist rpc call is just those top-level packages you have currently installed, this gives you one line of output that you can paste into FS (or PACKAGES="..." in imagebuilder).

Note that it does not handle replaced packages properly, so if you've got, say, dnsmasq-full replacing base dnsmasq, you need to remove dnsmasq manually from the default file list in FS.

3 Likes

@efahl Do you think it's now safe to sysupgrade a latest custom build created with FS? I've managed to obtain a successful build 28072 just now, but I'm wondering if it will brick the device...

Is this issue still facing all , or me only ?

also updating packages have issue

Please read a couple of posts above your post.
TL:DR, it affects everyone.

1 Like

My Friend @Bartvz
I couldn't understand very well if the problem is with me or with other peoples also ...( before writing this post I tried to read their msg but no luck )
Because like 3-5 days i'm stuck in this case ( can't update and install packages) .

I would still wait a while for snapshots, if you can use 23.05, that would be much safer. There was a broken build yesterday that needs to filter through (and there are still a handful of ongoing apk issues being worked on right now). I can't even guess how long "a while" is at this point.

4 Likes

This is approximately how it should look...