liminix, branch HEAD

extract extneder example to a "profile"

2024-02-27T22:39:07Z

commit 9d6e50cbbcd565a0a8c61c527ec1dcdc5048620c parent 94dbc565956e2613b1efa35689b37ef0ea215480 Author: Daniel Barlow Date: Tue, 27 Feb 2024 22:39:07 +0000 extract extneder example to a "profile" this is a bit of an experiment to reduce the copy-paste in examples by turning them into "application" modules. planning to follow up with another module for "wifi router"

fix doc

2024-02-27T20:08:30Z

commit 94dbc565956e2613b1efa35689b37ef0ea215480 parent 2cd7f932ebbd67a579229a5fc24ef5e091df80d9 Author: Daniel Barlow Date: Tue, 27 Feb 2024 20:08:30 +0000 fix doc

alignment may be null

2024-02-27T19:47:46Z

commit 2cd7f932ebbd67a579229a5fc24ef5e091df80d9 parent 3ca0d87c2722aa2581caac16f7977429cf73e73d Author: Daniel Barlow Date: Tue, 27 Feb 2024 19:47:46 +0000 alignment may be null

ci.nix: alphabetise systems

2024-02-21T19:49:14Z

commit 3ca0d87c2722aa2581caac16f7977429cf73e73d parent 8f30db58ae75988cea8896921eaf076bcc7aed3f Author: Daniel Barlow Date: Wed, 21 Feb 2024 19:49:14 +0000 ci.nix: alphabetise systems

New port to Zyxel NWA50AX: update NEWS and ci.nix

2024-02-21T19:32:50Z

commit 8f30db58ae75988cea8896921eaf076bcc7aed3f parent f9ab0590a67483cc9668557fca6d2ce1f5829f45 Author: Daniel Barlow Date: Wed, 21 Feb 2024 19:32:50 +0000 New port to Zyxel NWA50AX: update NEWS and ci.nix

Merge remote-tracking branch 'raito/nwa50ax'

2024-02-21T19:27:23Z

commit f9ab0590a67483cc9668557fca6d2ce1f5829f45 parent 84fa8d65f4d4fc1acf96e3883693237b0ed1aea1 Author: Daniel Barlow Date: Wed, 21 Feb 2024 19:27:23 +0000 Merge remote-tracking branch 'raito/nwa50ax'

fennel: system: verbose log of command that was run

2024-02-21T19:27:14Z

commit 84fa8d65f4d4fc1acf96e3883693237b0ed1aea1 parent 9b0149ecb7f7a8e84c9503e5f1df97ab944967b1 Author: Daniel Barlow Date: Wed, 21 Feb 2024 19:27:14 +0000 fennel: system: verbose log of command that was run

deep thoughts

2024-02-21T19:26:33Z

commit 9b0149ecb7f7a8e84c9503e5f1df97ab944967b1 parent d14ee41325841005e3d2c222b30cdcf7f8439e5e Author: Daniel Barlow Date: Wed, 21 Feb 2024 19:26:33 +0000 deep thoughts

devices/zyxel-nwa50ax: fix dual image mgmt after DTB expansion

2024-02-19T02:13:35Z

commit baf3cf741301e696a5f614f8fb98d182a0ab0f1d parent c5145b5fc9359d6ac6ddfe86fd16d3272872473d Author: Raito Bezarius Date: Mon, 19 Feb 2024 03:13:35 +0100 devices/zyxel-nwa50ax: fix dual image mgmt after DTB expansion Signed-off-by: Raito Bezarius

devices/zyxel-nwa50ax: make `zyxel-bootconfig` executable

2024-02-19T02:07:34Z

commit c5145b5fc9359d6ac6ddfe86fd16d3272872473d parent 628f4dfdbe9487f5bb05ed23fbf3fcb4ab77ef43 Author: Raito Bezarius Date: Mon, 19 Feb 2024 03:07:34 +0100 devices/zyxel-nwa50ax: make `zyxel-bootconfig` executable Otherwise, it doesn't work well… Signed-off-by: Raito Bezarius

devices/zyxel-nwa50ax: developer todo

2024-02-19T02:05:22Z

commit 628f4dfdbe9487f5bb05ed23fbf3fcb4ab77ef43 parent da59e2a34946984a3410f26088c37d8211824f51 Author: Raito Bezarius Date: Mon, 19 Feb 2024 03:05:22 +0100 devices/zyxel-nwa50ax: developer todo Signed-off-by: Raito Bezarius

devices/zyxel-nwa50ax: complete documentation

2024-02-19T01:57:29Z

commit da59e2a34946984a3410f26088c37d8211824f51 parent c0a9571a1305fe3006e60c7dbdc109d2bda98753 Author: Raito Bezarius Date: Mon, 19 Feb 2024 02:57:29 +0100 devices/zyxel-nwa50ax: complete documentation It covers everything I know more or less. Signed-off-by: Raito Bezarius

devices/zyxel-nwa50ax: upgrade MT7915 firmware from OpenWRT repository

2024-02-19T01:48:40Z

commit c0a9571a1305fe3006e60c7dbdc109d2bda98753 parent d6ffdd7be69889e7375ebb1a91b5991c9f382603 Author: Raito Bezarius Date: Mon, 19 Feb 2024 02:48:40 +0100 devices/zyxel-nwa50ax: upgrade MT7915 firmware from OpenWRT repository Signed-off-by: Raito Bezarius

devices/zyxel-nwa50ax: expose primary and secondary images

2024-02-19T01:48:15Z

commit d6ffdd7be69889e7375ebb1a91b5991c9f382603 parent 985f982435ce35a70b07fb1ca101d9ff8f822861 Author: Raito Bezarius Date: Mon, 19 Feb 2024 02:48:15 +0100 devices/zyxel-nwa50ax: expose primary and secondary images To support A/B a bit better. Signed-off-by: Raito Bezarius

examples/nwa50ax-ap: support bridge between lan and ethernet

2024-02-19T00:37:30Z

commit 985f982435ce35a70b07fb1ca101d9ff8f822861 parent a893c0dc4c0956f5b9b4db025bfc641362ad95a2 Author: Raito Bezarius Date: Mon, 19 Feb 2024 01:37:30 +0100 examples/nwa50ax-ap: support bridge between lan and ethernet Signed-off-by: Raito Bezarius

devices/zyxel-nwa50ax: use our own more advanced DTB

2024-02-19T00:19:46Z

commit a893c0dc4c0956f5b9b4db025bfc641362ad95a2 parent 3ec29dc1b9b871fe47a2841b92267da95756851b Author: Raito Bezarius Date: Mon, 19 Feb 2024 01:19:46 +0100 devices/zyxel-nwa50ax: use our own more advanced DTB OpenWRT had a DTB for the NWA50AX LEDs that I didn't pick up. Anyway, we need to include our own special DTB for the NWA platform in general to support A/B operations, because OpenWRT original one just mark everything else read-only. Signed-off-by: Raito Bezarius

examples/nwa50ax-ap: ensure `mtdutils` is available for further flashing

2024-02-19T00:20:31Z

commit 3ec29dc1b9b871fe47a2841b92267da95756851b parent 0e81953b670e3806e8f07c5ab02d12ecb8c59b46 Author: Raito Bezarius Date: Mon, 19 Feb 2024 01:20:31 +0100 examples/nwa50ax-ap: ensure `mtdutils` is available for further flashing Signed-off-by: Raito Bezarius

devices/zyxel-nwa50ax: cleanup of `flash` attribute and `rootDevice`

2024-02-19T00:20:19Z

commit 0e81953b670e3806e8f07c5ab02d12ecb8c59b46 parent 3c70a0d037c7e85380bd4b8e2aea1d147808012c Author: Raito Bezarius Date: Mon, 19 Feb 2024 01:20:19 +0100 devices/zyxel-nwa50ax: cleanup of `flash` attribute and `rootDevice` Signed-off-by: Raito Bezarius

devices/zyxel-nwa50ax: ensure bridge is always available

2024-02-19T00:20:01Z

commit 3c70a0d037c7e85380bd4b8e2aea1d147808012c parent 422f3edab1136871f79b8579643fe0fb922fac3a Author: Raito Bezarius Date: Mon, 19 Feb 2024 01:20:01 +0100 devices/zyxel-nwa50ax: ensure bridge is always available Signed-off-by: Raito Bezarius

modules/zyxel-dual-image: init

2024-02-18T21:35:27Z

commit 422f3edab1136871f79b8579643fe0fb922fac3a parent c14b2f6356b7718742cc66f0e5b494288627ef54 Author: Raito Bezarius Date: Sun, 18 Feb 2024 22:35:27 +0100 modules/zyxel-dual-image: init This adds a simple boot blessing module, to be used, with the Zyxel NWA50AX. There's a lot of elephant in the rooms: how do you upgrade kernel, etc. Signed-off-by: Raito Bezarius

modules/busybox: add `dhcprelay`

2024-02-18T19:30:07Z

commit c14b2f6356b7718742cc66f0e5b494288627ef54 parent cdafff2095421d4c3b6c04de08eb7efc58864570 Author: Raito Bezarius Date: Sun, 18 Feb 2024 20:30:07 +0100 modules/busybox: add `dhcprelay` This enables to run a DHCP relay from multiple interfaces. Signed-off-by: Raito Bezarius

examples/nwa50ax-ap: init

2024-02-17T03:34:30Z

commit cdafff2095421d4c3b6c04de08eb7efc58864570 parent 13f1bb9f5284e1d9c0bf4ffd9b8a13852a0745ff Author: Raito Bezarius Date: Sat, 17 Feb 2024 04:34:30 +0100 examples/nwa50ax-ap: init This is a quite comprehensive example using maximally the hardware available to reach nice performance. In the future, I will even add RADIUS examples. Signed-off-by: Raito Bezarius

devices/zyxel-nwa50ax: init

2023-12-03T00:23:17Z

commit 13f1bb9f5284e1d9c0bf4ffd9b8a13852a0745ff parent 019fef6929007c7ab0bec2912190afe2a24348f3 Author: Raito Bezarius Date: Sun, 3 Dec 2023 01:23:17 +0100 devices/zyxel-nwa50ax: init

zyxel-bootconfig: init at no version

2023-12-04T15:04:24Z

commit 019fef6929007c7ab0bec2912190afe2a24348f3 parent 63007859c26c6c1d7210cab5b04f88b5e2d62243 Author: Raito Bezarius Date: Mon, 4 Dec 2023 16:04:24 +0100 zyxel-bootconfig: init at no version This tool is useful for manipulating the A/B boot status of the image.

modules/outputs/zyxel-nwa-fit: init

2024-02-17T01:21:50Z

commit 63007859c26c6c1d7210cab5b04f88b5e2d62243 parent e9ab8d71837c6b16295578dbcbeb7375ea31fb69 Author: Raito Bezarius Date: Sat, 17 Feb 2024 02:21:50 +0100 modules/outputs/zyxel-nwa-fit: init Zyxel "firmware" format is just… a FIT with some metadata on the models. This FIT is like this: -------------------------- uImage FIT header -------------------------- Linux kernel -------------------------- FDT DTB -------------------------- Padding so that this makes 8192kb [1] -------------------------- UBI volume as a root filesystem -------------------------- We just reproduce this in a very brutal and naive way. In the future, this seems worth to generalize and modularize this idea so that zyxel-nwa-fit is just an instance of a more general output. [1]: https://git.openwrt.org/?p=openwrt/openwrt.git;a=blob;f=target/linux/ramips/image/mt7621.mk;h=ab1b829ba0086cb9fc9ca8cbbf3cbc14735034d6;hb=refs/heads/main#l3097 Signed-off-by: Raito Bezarius

modules/outputs/ubivolume: introduce ubinization

2023-12-04T13:08:13Z

commit e9ab8d71837c6b16295578dbcbeb7375ea31fb69 parent 3dc58de0eb343d058c082388069bc5659a610216 Author: Raito Bezarius Date: Mon, 4 Dec 2023 14:08:13 +0100 modules/outputs/ubivolume: introduce ubinization It creates an UBI image based on an UBI volume configuration. For now, it creates only an empty rootfs.

modules/outputs: expose `commandLineDtbNode` option

2024-02-17T01:16:57Z

commit 3dc58de0eb343d058c082388069bc5659a610216 parent dde8386f7583cbb4145b9b484c39c737cb3c1578 Author: Raito Bezarius Date: Sat, 17 Feb 2024 02:16:57 +0100 modules/outputs: expose `commandLineDtbNode` option We allow `bootargs` and `bootargs-override` for now only. Signed-off-by: Raito Bezarius

builders/uimage: support aligning the FIT

2023-12-04T13:07:30Z

commit dde8386f7583cbb4145b9b484c39c737cb3c1578 parent c59364d6239c6e7f514a22289498d484a5d433f9 Author: Raito Bezarius Date: Mon, 4 Dec 2023 14:07:30 +0100 builders/uimage: support aligning the FIT This is necessary when writing to a MTD partition with a certain erasesize.

modules/outputs/ubifs: expose `rootubifs` rather than `rootfs`

2024-02-17T01:18:09Z

commit c59364d6239c6e7f514a22289498d484a5d433f9 parent b76c5b4abef377d8cffeca8165843c4f8abf86fc Author: Raito Bezarius Date: Sat, 17 Feb 2024 02:18:09 +0100 modules/outputs/ubifs: expose `rootubifs` rather than `rootfs` I believe there should be another module exposing `rootubifs` as `rootfs` or let any other module just subsume that component like `zyxel-nwa-fit` output. Signed-off-by: Raito Bezarius

modules/ubifs: revamp to offer directly access to the UBIfs partition

2023-12-04T13:11:53Z

commit b76c5b4abef377d8cffeca8165843c4f8abf86fc parent 0a8343be664bf4af0ec56df9daa7e30b999fe61b Author: Raito Bezarius Date: Mon, 4 Dec 2023 14:11:53 +0100 modules/ubifs: revamp to offer directly access to the UBIfs partition Adds the LEB and PEB option and let the user remove the boot image in case where U-Boot does not support UBI boot.

pkgs/kernel/uimage: introduce `commandLineDtbNode`

2024-02-17T01:16:20Z

commit 0a8343be664bf4af0ec56df9daa7e30b999fe61b parent d14ee41325841005e3d2c222b30cdcf7f8439e5e Author: Raito Bezarius Date: Sat, 17 Feb 2024 02:16:20 +0100 pkgs/kernel/uimage: introduce `commandLineDtbNode` Certain devices like the Zyxel NWA50AX will pass information on the command-line to explain what is the current image (`bootImage=1` vs. `bootImage=0`). Unfortunately, if we set the `chosen/bootargs` node, this will be overridden forcibly by U-Boot. To avoid this problem, it's easier to simply just use another DTB node like `bootargs-override` which is what OpenWRT does [1]. [1]: https://git.openwrt.org/?p=openwrt/openwrt.git;a=blob;f=target/linux/ramips/patches-5.15/314-MIPS-add-bootargs-override-property.patch;h=e7dca7af886e8c0b69ba2b23f5855ddfeeb0d4a1;hb=refs/heads/main Signed-off-by: Raito Bezarius

liminix-rebuild: use `-f` flag to reboot effectively

2024-02-17T03:34:22Z

commit d14ee41325841005e3d2c222b30cdcf7f8439e5e parent 8f814658fea81eec1c59a9f0fcb3c39fc862bcfd Author: Raito Bezarius Date: Sat, 17 Feb 2024 04:34:22 +0100 liminix-rebuild: use `-f` flag to reboot effectively My AP does not reboot upon `reboot` but `reboot -f`… why? Signed-off-by: Raito Bezarius

hostapd: enable 802.11ax

2024-02-17T03:34:00Z

commit 8f814658fea81eec1c59a9f0fcb3c39fc862bcfd parent 60508f4d4eb2264fb2d7759bba9bf5137c2c7b90 Author: Raito Bezarius Date: Sat, 17 Feb 2024 04:34:00 +0100 hostapd: enable 802.11ax For people enjoying WiFi 6 heaven… :> Signed-off-by: Raito Bezarius

update NEWS

2024-02-16T21:00:59Z

commit 60508f4d4eb2264fb2d7759bba9bf5137c2c7b90 parent ca64e9035e0e9792059faa5fcaaee2b959bed458 Author: Daniel Barlow Date: Fri, 16 Feb 2024 21:00:59 +0000 update NEWS * Turris Omnia * possible wifi regressions

gl-ar750 ath9k needs cal data from MTD

2024-02-16T20:44:56Z

commit ca64e9035e0e9792059faa5fcaaee2b959bed458 parent 4bcc3d5b2802a46903ff0799d6054a79f5a23ae5 Author: Daniel Barlow Date: Fri, 16 Feb 2024 20:44:56 +0000 gl-ar750 ath9k needs cal data from MTD

dhcpc6 scripts: simplify (and improve correctness)

2024-02-16T18:47:12Z

commit 4bcc3d5b2802a46903ff0799d6054a79f5a23ae5 parent 28fe37d555d8110f7389280b72c7890f95d79041 Author: Daniel Barlow Date: Fri, 16 Feb 2024 18:47:12 +0000 dhcpc6 scripts: simplify (and improve correctness)

deep thoughts

2024-02-16T18:30:54Z

commit 28fe37d555d8110f7389280b72c7890f95d79041 parent 175db9f6046e01c2484673ac005ca64daa9b1620 Author: Daniel Barlow Date: Fri, 16 Feb 2024 18:30:54 +0000 deep thoughts

tail -F for rotuer

2024-02-16T18:30:24Z

commit 175db9f6046e01c2484673ac005ca64daa9b1620 parent b5722a01530ec7b42ee160ae790fe72e150b353a Author: Daniel Barlow Date: Fri, 16 Feb 2024 18:30:24 +0000 tail -F for rotuer

gl-ar750: ath10k wireless depends on firmware

2024-02-16T00:38:36Z

commit b5722a01530ec7b42ee160ae790fe72e150b353a parent c373152673aedc0621ba5d5ee8b5304d98559bdd Author: Daniel Barlow Date: Fri, 16 Feb 2024 00:38:36 +0000 gl-ar750: ath10k wireless depends on firmware so make sure the firmware is present _first_ the ath10k is still broken anyway, looking into why

make tftpboot work on devices with old u-boot

2024-02-15T20:12:03Z

commit c373152673aedc0621ba5d5ee8b5304d98559bdd parent 7e7171556f92b2aa297c0aff5d9137024f36efaa Author: Daniel Barlow Date: Thu, 15 Feb 2024 20:12:03 +0000 make tftpboot work on devices with old u-boot Some devices have a U-boot variant that does not accept a third parameter on the "bootm" command, meaning we can't override the dtb in the bootloader so have to smush it back into the kernel image This doesn't work in QEMU but I think the problem is with the U-Boot configuration for QEMU. It does work on at least one hardware device so I'm pushing it anyway Based on https://gti.telent.net/raboof/liminix/src/branch/tftp-old-uboot Co-authored-by: Arnout Engelen

subdue dnsmasq logs

2024-02-15T23:32:10Z

commit 7e7171556f92b2aa297c0aff5d9137024f36efaa parent 6920ee765db56d6fc1de7355655fcbee7dac1da8 Author: Daniel Barlow Date: Thu, 15 Feb 2024 23:32:10 +0000 subdue dnsmasq logs we need to find a better way of doing this. people might _want_ to have All The Logs from evey dns query

deep thoughts

2024-02-15T09:11:54Z

commit 6920ee765db56d6fc1de7355655fcbee7dac1da8 parent 71a1ef286e9b45ea8b9c8ed10e94e10ea713a3fe Author: Daniel Barlow Date: Thu, 15 Feb 2024 09:11:54 +0000 deep thoughts

deep thoughts

2024-02-13T22:32:57Z

commit 71a1ef286e9b45ea8b9c8ed10e94e10ea713a3fe parent ffe0e9d26bf16512ffe0241dd212cfc0ef1ab3d0 Author: Daniel Barlow Date: Tue, 13 Feb 2024 22:32:57 +0000 deep thoughts

use mkstate for dropbear keys

2024-02-13T22:12:26Z

commit ffe0e9d26bf16512ffe0241dd212cfc0ef1ab3d0 parent 2b22c7aa9179d1442626192da4077e266c2bfcab Author: Daniel Barlow Date: Tue, 13 Feb 2024 22:12:26 +0000 use mkstate for dropbear keys

dnsmasq: store dhcp lease file on /persist

2024-02-13T21:54:45Z

commit 2b22c7aa9179d1442626192da4077e266c2bfcab parent 3c950704e1cc430cf36db88cebf9bdf8780f9cb1 Author: Daniel Barlow Date: Tue, 13 Feb 2024 21:54:45 +0000 dnsmasq: store dhcp lease file on /persist

rename /run/service-state to /run/services/outputs

2024-02-13T21:41:43Z

commit 3c950704e1cc430cf36db88cebf9bdf8780f9cb1 parent 8578a554c76dd8e293591910e2ed9f3ceb4f5eb5 Author: Daniel Barlow Date: Tue, 13 Feb 2024 21:41:43 +0000 rename /run/service-state to /run/services/outputs

deep thoughts

2024-02-13T21:11:30Z

commit 8578a554c76dd8e293591910e2ed9f3ceb4f5eb5 parent 3851698d35e355c2a4d2758ecc9cc9636e669588 Author: Daniel Barlow Date: Tue, 13 Feb 2024 21:11:30 +0000 deep thoughts

fix tftpboot compressed rootfs

2024-02-13T18:16:17Z

commit 3851698d35e355c2a4d2758ecc9cc9636e669588 parent f69ebbb6f5174b93c35888ae1abdd8af95512773 Author: Daniel Barlow Date: Tue, 13 Feb 2024 18:16:17 +0000 fix tftpboot compressed rootfs

fix doc CI target

2024-02-13T13:02:32Z

commit f69ebbb6f5174b93c35888ae1abdd8af95512773 parent 16e4b05653643e7981c471269a6ddc0025e1b249 Author: Daniel Barlow Date: Tue, 13 Feb 2024 13:02:32 +0000 fix doc CI target

dhcp6c: set preferred and valid address lifetimes

2024-02-13T12:57:41Z

commit 16e4b05653643e7981c471269a6ddc0025e1b249 parent 8ac848b1e66a04d133d58ab3bf7e92e701512456 Author: Daniel Barlow Date: Tue, 13 Feb 2024 12:57:41 +0000 dhcp6c: set preferred and valid address lifetimes also workaround a bug in rebinding/updates where we get an error from "ip addr add" trying to add an address that's already present

ath10k_pci: wifi modules must be modules

2024-02-13T12:56:03Z

commit 8ac848b1e66a04d133d58ab3bf7e92e701512456 parent b7efbd3e21c9aa5c3229c783a2d815b4a60d6fa6 Author: Daniel Barlow Date: Tue, 13 Feb 2024 12:56:03 +0000 ath10k_pci: wifi modules must be modules

update NEWS file

2024-02-12T21:10:52Z

commit b7efbd3e21c9aa5c3229c783a2d815b4a60d6fa6 parent a654577ac2a35b2ffc998698ee3c19b94a4562ef Author: Daniel Barlow Date: Mon, 12 Feb 2024 21:10:52 +0000 update NEWS file

improve port-forwarding comment

2024-02-12T21:05:01Z

commit a654577ac2a35b2ffc998698ee3c19b94a4562ef parent c50423f68974ab2e587d2379ae126291b3d57599 Author: Daniel Barlow Date: Mon, 12 Feb 2024 21:05:01 +0000 improve port-forwarding comment

turris omnia: upgrade to mainline 6.7.4 kernel

2024-02-12T20:42:07Z

commit c50423f68974ab2e587d2379ae126291b3d57599 parent 65479e206b62a9b269d3825f8cc5e9d660d583ec Author: Daniel Barlow Date: Mon, 12 Feb 2024 20:42:07 +0000 turris omnia: upgrade to mainline 6.7.4 kernel On this device we don't need the openwrt kernel or patches. The newer kernel also fixes the weird one minute pause at boot when it was doing something with either mmc or switch.

use regular kernel not backports for mac80211

2024-02-12T20:41:10Z

commit 65479e206b62a9b269d3825f8cc5e9d660d583ec parent 79926c6fe714ac0e3b5eb2ddcbd57d082c9b12c0 Author: Daniel Barlow Date: Mon, 12 Feb 2024 20:41:10 +0000 use regular kernel not backports for mac80211 the kernel on most devices is now newer than the version that the backported drivers were backported from

remove call to deleted package

2024-02-12T14:56:12Z

commit 79926c6fe714ac0e3b5eb2ddcbd57d082c9b12c0 parent ae4856ea7c76017c6b9b5ce8db6d5925d9d27472 Author: Daniel Barlow Date: Mon, 12 Feb 2024 14:56:12 +0000 remove call to deleted package

improve firewall comment

2024-02-12T13:56:56Z

commit ae4856ea7c76017c6b9b5ce8db6d5925d9d27472 parent b9c0d93670275e69df24902b05bf4aa4f0fcbe96 Author: Daniel Barlow Date: Mon, 12 Feb 2024 13:56:56 +0000 improve firewall comment

build modules at same time as main kernel vmlinux

2024-02-11T23:47:11Z

commit b9c0d93670275e69df24902b05bf4aa4f0fcbe96 parent 11287a8436e0700b65d3a3edef48f9344500bbd6 Author: Daniel Barlow Date: Sun, 11 Feb 2024 23:47:11 +0000 build modules at same time as main kernel vmlinux This changes the practice for building kernel modules: now we expect that the appropriate Kconfig symbols are set to =m in config.kernel.config, and then use pkgs.kmodloader to create a service that loads and unloads all the modules depended on by a particular requirement. Note that modules won't be installed on the target device just by virue of having been built: only the modules that are referenced by a kmodloader package will be in the closure. An example may make this clearer: see modules/firewall/default.nix in this commit. Why? If you have a compiled Linux kernel source tree and you change some symbol from "is not set" to m and then run make modules, you cannot in general expect that newly compiled module to work. This is because there are places in the build of the main kernel where it looks to see which modules _may_ be defined and uses that information to accommodate them. For example in an in-kernel build of https://github.com/torvalds/linux/blob/master/net/netfilter/core.c#L689 some symbols are defined only if CONFIG_NF_CONNTRACK is set, meaning this code won't work if we have it unset initially then try later to enable it and build modules only. Or see https://github.com/torvalds/linux/blob/master/include/linux/netdevice.h#L160

allow lan dns queries (ipv6)

2024-02-11T23:31:15Z

commit 11287a8436e0700b65d3a3edef48f9344500bbd6 parent 57aece07090b61f724b71c5ed4a84f96ac184d15 Author: Daniel Barlow Date: Sun, 11 Feb 2024 23:31:15 +0000 allow lan dns queries (ipv6)

rotuer: don't forward queries for local domain

2024-02-11T23:30:12Z

commit 57aece07090b61f724b71c5ed4a84f96ac184d15 parent c1d285a2204daba7908775bfc38d7c264e3e36d0 Author: Daniel Barlow Date: Sun, 11 Feb 2024 23:30:12 +0000 rotuer: don't forward queries for local domain

rotuer: network debugging tools

2024-02-11T23:30:46Z

commit c1d285a2204daba7908775bfc38d7c264e3e36d0 parent dce983ec79f8be2cd8ab49eb78abcd8d41c55931 Author: Daniel Barlow Date: Sun, 11 Feb 2024 23:30:46 +0000 rotuer: network debugging tools

move kernel module to its own subdir

2024-02-11T18:15:55Z

commit dce983ec79f8be2cd8ab49eb78abcd8d41c55931 parent 812f4976608b45f3cd2fef474e2cd76ac0cf42b1 Author: Daniel Barlow Date: Sun, 11 Feb 2024 18:15:55 +0000 move kernel module to its own subdir

add kernel.version param to allow for version-specific patches

2024-02-11T16:19:52Z

commit 812f4976608b45f3cd2fef474e2cd76ac0cf42b1 parent 1206d022008fd9d23e5d29aef12a2371f20b170d Author: Daniel Barlow Date: Sun, 11 Feb 2024 16:19:52 +0000 add kernel.version param to allow for version-specific patches default to 5.15.137 to avoid breaking the devices that don't declare it

rotuer-secrets: remove root_password, add wifi ssid and domainName

2024-02-11T09:10:03Z

commit 1206d022008fd9d23e5d29aef12a2371f20b170d parent 7c196bf9b4a78d70f2a378788b9a46f4d000a8ea Author: Daniel Barlow Date: Sun, 11 Feb 2024 09:10:03 +0000 rotuer-secrets: remove root_password, add wifi ssid and domainName this is step one towards getting rid of rotuer-secrets completely and turning rotuer into a "profile" module that can be less hackily customised for other people's networks

rotuer: make 5GHz wifi faster

2024-02-11T15:24:08Z

commit 7c196bf9b4a78d70f2a378788b9a46f4d000a8ea parent 86d19c54b35212e3447161ffdf1cdc387bd009fc Author: Daniel Barlow Date: Sun, 11 Feb 2024 15:24:08 +0000 rotuer: make 5GHz wifi faster VHT doesn't work unless HT is enabled, apparently

turris omnia kernel: add RTC, i2c mux, eeprom

2024-02-09T22:34:46Z

commit 86d19c54b35212e3447161ffdf1cdc387bd009fc parent aca3e116311143371facd4413007d826f88721a1 Author: Daniel Barlow Date: Fri, 9 Feb 2024 22:34:46 +0000 turris omnia kernel: add RTC, i2c mux, eeprom

firewall: make ipv4 work

2024-02-08T22:59:47Z

commit aca3e116311143371facd4413007d826f88721a1 parent 273c66b2d3d2b79d3d94afe34d4d41a248b278a6 Author: Daniel Barlow Date: Thu, 8 Feb 2024 22:59:47 +0000 firewall: make ipv4 work

Merge pull request 'Add support for TP-Link Archer AX23' (#6) from raboof/liminix:add-archer-ax23-v1-bak into main

2024-02-08T17:47:46Z

commit 273c66b2d3d2b79d3d94afe34d4d41a248b278a6 parent 87f6a31a063f774ce434fd6cbfee12e89b493642 Author: dan Date: Thu, 8 Feb 2024 17:47:46 +0000 Merge pull request 'Add support for TP-Link Archer AX23' (#6) from raboof/liminix:add-archer-ax23-v1-bak into main Reviewed-on: https://gti.telent.net/dan/liminix/pulls/6

improve firewall log format

2024-02-08T17:21:26Z

commit 87f6a31a063f774ce434fd6cbfee12e89b493642 parent a9ea01428e6e696072c708f2c09a531587fd51b5 Author: Daniel Barlow Date: Thu, 8 Feb 2024 17:21:26 +0000 improve firewall log format

firewall: don't drop in conntrack rule

2024-02-08T17:20:39Z

commit a9ea01428e6e696072c708f2c09a531587fd51b5 parent 92b0bec038f4ea55ba64deec7202f9f6ea038ef2 Author: Daniel Barlow Date: Thu, 8 Feb 2024 17:20:39 +0000 firewall: don't drop in conntrack rule as there are other rules following that might want to accept

rotuer: add schnapps and the rest of the lan interfaces

2024-02-07T23:48:10Z

commit 92b0bec038f4ea55ba64deec7202f9f6ea038ef2 parent 82537bbe68e641d91a9ab77fc25a2da2486e066d Author: Daniel Barlow Date: Wed, 7 Feb 2024 23:48:10 +0000 rotuer: add schnapps and the rest of the lan interfaces

delete commented-out code

2024-02-07T23:47:38Z

commit 82537bbe68e641d91a9ab77fc25a2da2486e066d parent efb29c5901aad3b73ea7c525774a692f53fe6be6 Author: Daniel Barlow Date: Wed, 7 Feb 2024 23:47:38 +0000 delete commented-out code

demo-firewall: add some rules for ipv4

2024-02-07T23:47:09Z

commit efb29c5901aad3b73ea7c525774a692f53fe6be6 parent 29e61be26cbde3f9ffdec4e0e22ce4d753709fa7 Author: Daniel Barlow Date: Wed, 7 Feb 2024 23:47:09 +0000 demo-firewall: add some rules for ipv4

rotuer: get lan rfc1918 prefix from secrets

2024-02-07T23:46:16Z

commit 29e61be26cbde3f9ffdec4e0e22ce4d753709fa7 parent 6f1f9d6f20f2c5fd1bf26b206f718716e94c81e5 Author: Daniel Barlow Date: Wed, 7 Feb 2024 23:46:16 +0000 rotuer: get lan rfc1918 prefix from secrets

firewall: fix module loading

2024-02-07T23:43:41Z

commit 6f1f9d6f20f2c5fd1bf26b206f718716e94c81e5 parent 34291292c0cfb04cb1649903822e4d9a1f78e45b Author: Daniel Barlow Date: Wed, 7 Feb 2024 23:43:41 +0000 firewall: fix module loading

fix dependency on kernel moduels in firewall service

2024-02-07T16:21:14Z

commit 34291292c0cfb04cb1649903822e4d9a1f78e45b parent c9e4c1b0da6598a6800c419e809e64d69d9b8cf5 Author: Daniel Barlow Date: Wed, 7 Feb 2024 16:21:14 +0000 fix dependency on kernel moduels in firewall service

kernel-modules: use linuxArch instead of case expression

2024-02-07T16:20:34Z

commit c9e4c1b0da6598a6800c419e809e64d69d9b8cf5 parent 891d6e5f206b5d436a2ec5d6de71f7630a37e243 Author: Daniel Barlow Date: Wed, 7 Feb 2024 16:20:34 +0000 kernel-modules: use linuxArch instead of case expression

Add support for TP-Link Archer AX23

2024-01-30T10:23:29Z

commit 63e3f2aa58a9226e1a1b9ec9bff3b29669444f66 parent 61494fdc0cd699af7730e43ee9059a8600345313 Author: Arnout Engelen Date: Tue, 30 Jan 2024 11:23:29 +0100 Add support for TP-Link Archer AX23

Add tplink module for creating 'safeloader' images

2024-01-30T10:20:57Z

commit 61494fdc0cd699af7730e43ee9059a8600345313 parent 84ce618213129c42b4a026342534f588d55de1ec Author: Arnout Engelen Date: Tue, 30 Jan 2024 11:20:57 +0100 Add tplink module for creating 'safeloader' images

thenk

2024-02-05T19:20:13Z

commit 891d6e5f206b5d436a2ec5d6de71f7630a37e243 parent c4041b00f6734f15a28bfd55533d364b7c6e565b Author: Daniel Barlow Date: Mon, 5 Feb 2024 19:20:13 +0000 thenk

Merge pull request 'docs: add hardware recommendation' (#2) from raboof/liminix:hardware-recommendations into main

2024-02-05T15:56:07Z

commit c4041b00f6734f15a28bfd55533d364b7c6e565b parent f875622100045e52894ed16147eee3bb91cb8c3f Author: dan Date: Mon, 5 Feb 2024 15:56:07 +0000 Merge pull request 'docs: add hardware recommendation' (#2) from raboof/liminix:hardware-recommendations into main Reviewed-on: https://gti.telent.net/dan/liminix/pulls/2

improve formatting

2024-02-04T18:24:01Z

commit f875622100045e52894ed16147eee3bb91cb8c3f parent 49ec4a296101af199e6e85886d7082e1db0ed365 Author: Daniel Barlow Date: Sun, 4 Feb 2024 18:24:01 +0000 improve formatting

installation instructions for Turris Omnia

2024-02-04T18:20:04Z

commit 49ec4a296101af199e6e85886d7082e1db0ed365 parent c8154a2db99f0d0c6b5e47c279d6b83d8e69cb8f Author: Daniel Barlow Date: Sun, 4 Feb 2024 18:20:04 +0000 installation instructions for Turris Omnia feels like a milestone, or at least a big step towards one

kernel: add "conditional" config

2024-02-04T18:12:15Z

commit c8154a2db99f0d0c6b5e47c279d6b83d8e69cb8f parent 02cf2c6b807913f90f6ca831213eace4799a6765 Author: Daniel Barlow Date: Sun, 4 Feb 2024 18:12:15 +0000 kernel: add "conditional" config imagine: you are using a device that requires CONFIG_MYDEVICE_FROBOZZ_DRIVER but only if CONFIG_FROBOZZ has been specified elsewhere. Because we check that every requested config symbol actually appears in .config then it can't be added unconditionally or the build will fail if CONFIG_FROBOZZ wasn't asked for. I'm not 100% happy about this design but it's the best I've thought of so far.

add ssh keys in recovry image

2024-02-04T18:10:58Z

commit 02cf2c6b807913f90f6ca831213eace4799a6765 parent b0709a644345a84c3458d7f987495d4a9995f6f0 Author: Daniel Barlow Date: Sun, 4 Feb 2024 18:10:58 +0000 add ssh keys in recovry image

systemconfig: fix missing backslashes on env vars

2024-02-04T17:19:03Z

commit b0709a644345a84c3458d7f987495d4a9995f6f0 parent 86f5c9b568f6ef72e73563c42e782ca7df58448e Author: Daniel Barlow Date: Sun, 4 Feb 2024 17:19:03 +0000 systemconfig: fix missing backslashes on env vars

schnapps needs util-linux for mount

2024-02-04T15:50:25Z

commit 86f5c9b568f6ef72e73563c42e782ca7df58448e parent ef707de8b13b240fad2ec3d58003d6ad17419e20 Author: Daniel Barlow Date: Sun, 4 Feb 2024 15:50:25 +0000 schnapps needs util-linux for mount specifically, it expects mount /dev/foo -o blah /dest to work, but busybox mount expects options to precede all the other command line args

add extlinux in recovery example

2024-02-02T19:51:41Z

commit ef707de8b13b240fad2ec3d58003d6ad17419e20 parent 89c88dd47242f46adf58304965661d189aa7d91b Author: Daniel Barlow Date: Fri, 2 Feb 2024 19:51:41 +0000 add extlinux in recovery example this needlessly bloats the TFTP image, which is a shame, but is needed for installing onto usb stick

specify type for rootDevice module option

2024-02-02T19:50:13Z

commit 89c88dd47242f46adf58304965661d189aa7d91b parent c1ad1393103a64c68d1f5a127aea83dba0b07c51 Author: Daniel Barlow Date: Fri, 2 Feb 2024 19:50:13 +0000 specify type for rootDevice module option

whitespace

2024-02-02T19:43:34Z

commit c1ad1393103a64c68d1f5a127aea83dba0b07c51 parent f682b26c29f8dfebdbf3b9e01dbced9ee3ce46ed Author: Daniel Barlow Date: Fri, 2 Feb 2024 19:43:34 +0000 whitespace

omnia seems very fussy about tftp load address

2024-02-02T19:36:11Z

commit f682b26c29f8dfebdbf3b9e01dbced9ee3ce46ed parent 84ce618213129c42b4a026342534f588d55de1ec Author: Daniel Barlow Date: Fri, 2 Feb 2024 19:36:11 +0000 omnia seems very fussy about tftp load address when loading with 0x1000000 base address, something was getting corrupted in the uncompressed rootfs $ head -c $(printf "%d" 0x2be0000) rootfs | sha1sum 142571fe0436c18191727d1d4c2fd32163c1f2e1 - => sha1sum 0x1000000 2be0000 sha1 for 01000000 ... 03bdffff ==> 142571fe0436c18191727d1d4c2fd32163c1f2e1 but! $ head -c $(printf "%d" 0x2bf0000) rootfs | sha1sum 7aa004ba87c6772bade491fbade164e2dfe100f9 - => sha1sum 0x1000000 2bf0000 sha1 for 01000000 ... 03beffff ==> 1a0923a94784d0c0b86006c5e6fff1649770dad3

recovery: grow fs to partition size before starting sshd

2024-01-28T11:30:19Z

commit 84ce618213129c42b4a026342534f588d55de1ec parent 9e199c695724a88fafe57135a64df3f36b5466b6 Author: Daniel Barlow Date: Sun, 28 Jan 2024 11:30:19 +0000 recovery: grow fs to partition size before starting sshd sshd expects there to be space in /persist/secrets that it can use to write host keys, but when we make ext4fs images we don't put any free space in them

tftpboot: compute dtbSize after changing dtb

2024-01-26T22:51:58Z

commit 9e199c695724a88fafe57135a64df3f36b5466b6 parent c8e3d84bf429569941d602e553373b37c6e0563b Author: Daniel Barlow Date: Fri, 26 Jan 2024 22:51:58 +0000 tftpboot: compute dtbSize *after* changing dtb Adding the reserved-memory node to the dtb can cause it to grow by enough that it needs an extra page - this will overlap the start of the kernel image if we calculate offsets based on the original size Reported-by: sinavir Authored-by: sinavir

think

2024-01-26T22:46:18Z

commit c8e3d84bf429569941d602e553373b37c6e0563b parent dd8ec18881789c09dd971979570786bfcc34f988 Author: Daniel Barlow Date: Fri, 26 Jan 2024 22:46:18 +0000 think

restore boot.tftp.freeSpaceBytes

2024-01-26T22:45:59Z

commit dd8ec18881789c09dd971979570786bfcc34f988 parent 1730cf07b17738fa82fc9477a9a49d71f83025e1 Author: Daniel Barlow Date: Fri, 26 Jan 2024 22:45:59 +0000 restore boot.tftp.freeSpaceBytes

bug workaround

2024-01-23T12:00:19Z

commit 1730cf07b17738fa82fc9477a9a49d71f83025e1 parent de51bfe13d0264705ed96ebfe4586192953678ac Author: Daniel Barlow Date: Tue, 23 Jan 2024 12:00:19 +0000 bug workaround If we set squashfs rootfsType, the image doesn't rebuild when the kernel config is changed. Need to figure out why

default root device in recovery to sda1

2024-01-23T11:58:00Z

commit de51bfe13d0264705ed96ebfe4586192953678ac parent b09723345c16de8a76686e07882a544b731349df Author: Daniel Barlow Date: Tue, 23 Jan 2024 11:58:00 +0000 default root device in recovery to sda1 It will probably work fine for USB-stick boot (except in the case where there is > 1 usb device plugged in, so maybe don't do that) It doesn't matter for TFTP boot because boot.scr overrides the root= param anyway

don't put all of util-linux in recovery

2024-01-23T11:57:06Z

commit b09723345c16de8a76686e07882a544b731349df parent 1781d4b6e45e546cf14cba376204d2e9c81e67a8 Author: Daniel Barlow Date: Tue, 23 Jan 2024 11:57:06 +0000 don't put all of util-linux in recovery it adds ~ 5MB to the image size

add lzma to buildenv

2024-01-23T11:56:34Z

commit 1781d4b6e45e546cf14cba376204d2e9c81e67a8 parent c219350d7cd4c2965d7a689f81f94bc86461bd9f Author: Daniel Barlow Date: Tue, 23 Jan 2024 11:56:34 +0000 add lzma to buildenv

add usb storage for turris omnia

2024-01-23T11:55:59Z

commit c219350d7cd4c2965d7a689f81f94bc86461bd9f parent 6f83282ff53005e68213a66624bceb2184dc0c35 Author: Daniel Barlow Date: Tue, 23 Jan 2024 11:55:59 +0000 add usb storage for turris omnia ideally we would make this a module instead of compiling in directly