diff --git a/README.md b/README.md
index 32518b2..0f3ecda 100644
--- a/README.md
+++ b/README.md
@@ -22,6 +22,8 @@ olg-scratchpad
 ├── README.md
 ├── ucentral-client # uCentral client for OLG
 │   └── README.md
+│   └── Dockerfile # Dockerfile to create docker image of ucentral-client from rootfs
+│   └── rootfs/ # Contains the ucentral-client specific files from which docker image is created
 └── vyos # VyOS Gateway for OLG
     ├── README.md
     └── vyos_config # The host volume required to mount in VyOS container
diff --git a/ucentral-client/Dockerfile b/ucentral-client/Dockerfile
new file mode 100644
index 0000000..5d64fc8
--- /dev/null
+++ b/ucentral-client/Dockerfile
@@ -0,0 +1,13 @@
+FROM scratch
+COPY rootfs/bin/  /bin/
+COPY rootfs/sbin/ /sbin/
+COPY rootfs/usr/  /usr/
+COPY rootfs/lib/  /lib/
+COPY rootfs/etc/  /etc/
+RUN mkdir -p /var/run/
+RUN mkdir -p /var/lock/
+RUN mkdir -p /tmp
+ENV PATH=/bin:/sbin:/usr/bin:/usr/sbin
+ENV LD_LIBRARY_PATH=/lib:/usr/lib
+WORKDIR /
+CMD ["/bin/busybox","sleep","infinity"]
diff --git a/ucentral-client/README.md b/ucentral-client/README.md
index 89f45c1..d00cad9 100644
--- a/ucentral-client/README.md
+++ b/ucentral-client/README.md
@@ -1 +1,79 @@
-# uCentral Client
+# Ucentral Client
+This document explains how to build the container image for the **uCentral Client** from rootfs and also how to prepare the root filesystem (rootfs) build context.
+
+---
+
+## 🔨 Steps to Build RootFs & Prepare uCentral Client Docker Image
+
+### 1. Create workspace and fetch the OpenWiFi WLAN AP source  
+```bash
+mkdir WORKSPACE
+cd WORKSPACE
+mkdir OPENWIFI_WLANAP
+cd OPENWIFI_WLANAP
+git clone https://github.com/routerarchitects/ra-openwifi-wlan-ap.git
+git checkout -b release/v3.1.0
+./build.sh x64_vm
+```
+
+### 2. After the build completes, Set paths for image preparation 
+Set environment variables for source and destination paths:
+```bash
+ROOT=~/WORKSPACE/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/openwrt/build_dir/target-x86_64_musl/root-x86
+DEST=~/OLG-scrumpad/ucentral-client/rootfs/
+```
+### 3. Create the necessary directory structure in the destination
+```bash
+mkdir -p "$DEST"/{bin,sbin,usr/bin,usr/sbin,usr/share,lib,usr/lib,etc/ucentral,lib/config,lib/functions}
+```
+
+### 4. Copy required files for uCentral Client image
+```bash
+cp -a "$ROOT"/usr/sbin/ucentral      "$DEST"/usr/sbin/
+cp -a "$ROOT"/etc/group               "$DEST"/etc/
+cp -a "$ROOT"/etc/passwd              "$DEST"/etc/
+cp -a "$ROOT"/sbin/ubusd              "$DEST"/sbin/
+cp -a "$ROOT"/bin/ubus                "$DEST"/bin/
+cp -a "$ROOT"/usr/bin/curl            "$DEST"/usr/bin/
+```
+
+### 5. Add BusyBox and symlinks for common applets
+```bash
+cp -a "$ROOT"/bin/busybox "$DEST"/bin/
+( cd "$DEST/bin" && ln -sf busybox sh && ln -sf busybox ash )
+for a in ls ps ifconfig ping ip cat grep cut mkdir rm cp mv ln touch \
+         mount umount basename readlink vi date uname echo sleep dmesg logger flock; do
+  ln -sf busybox "$DEST/bin/$a"
+done
+# If BusyBox lacked a given applet, copy real ones if present:
+[ -f "$ROOT/usr/bin/logger" ] && cp -a "$ROOT/usr/bin/logger" "$DEST/usr/bin/"
+[ -f "$ROOT/usr/bin/flock"  ] && cp -a "$ROOT/usr/bin/flock"  "$DEST/usr/bin/"
+```
+
+### 6. Copy uCentral’s ucode scripts
+```bash
+cp -a "$ROOT"/usr/share/ucentral   "$DEST"/usr/share/        2>/dev/null || true
+cp -a "$ROOT"/usr/bin/ucode        "$DEST"/usr/bin/          2>/dev/null || true
+cp -a "$ROOT"/usr/lib/ucode        "$DEST"/usr/lib/          2>/dev/null || true
+```
+
+### 7. Copy all libraries
+```bash
+cp -a "$ROOT"/lib/*   "$DEST"/lib/
+cp -a "$ROOT"/usr/lib "$DEST"/usr/
+```
+
+### 8. Make executables runnable
+```bash
+chmod +x "$DEST"/bin/busybox \
+         "$DEST"/usr/sbin/ucentral \
+         "$DEST"/usr/bin/ucode 2>/dev/null || true
+```
+
+### 9. Build the Docker Image
+Once the rootfs/ directory is prepared, use the Dockerfile inside ucentral-client/ to build the container image.
+Typically you will run:
+```bash
+cd ucentral-client
+docker build -t ucentral-client:latest .
+```
diff --git a/ucentral-client/rootfs/bin/ash b/ucentral-client/rootfs/bin/ash
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/ash
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/basename b/ucentral-client/rootfs/bin/basename
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/basename
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/busybox b/ucentral-client/rootfs/bin/busybox
new file mode 100755
index 0000000..af234ba
Binary files /dev/null and b/ucentral-client/rootfs/bin/busybox differ
diff --git a/ucentral-client/rootfs/bin/cat b/ucentral-client/rootfs/bin/cat
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/cat
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/cp b/ucentral-client/rootfs/bin/cp
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/cp
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/cut b/ucentral-client/rootfs/bin/cut
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/cut
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/date b/ucentral-client/rootfs/bin/date
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/date
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/dmesg b/ucentral-client/rootfs/bin/dmesg
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/dmesg
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/echo b/ucentral-client/rootfs/bin/echo
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/echo
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/flock b/ucentral-client/rootfs/bin/flock
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/flock
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/grep b/ucentral-client/rootfs/bin/grep
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/grep
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/ifconfig b/ucentral-client/rootfs/bin/ifconfig
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/ifconfig
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/ip b/ucentral-client/rootfs/bin/ip
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/ip
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/ln b/ucentral-client/rootfs/bin/ln
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/ln
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/logger b/ucentral-client/rootfs/bin/logger
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/logger
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/ls b/ucentral-client/rootfs/bin/ls
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/ls
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/mkdir b/ucentral-client/rootfs/bin/mkdir
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/mkdir
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/mount b/ucentral-client/rootfs/bin/mount
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/mount
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/mv b/ucentral-client/rootfs/bin/mv
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/mv
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/ping b/ucentral-client/rootfs/bin/ping
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/ping
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/ps b/ucentral-client/rootfs/bin/ps
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/ps
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/readlink b/ucentral-client/rootfs/bin/readlink
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/readlink
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/rm b/ucentral-client/rootfs/bin/rm
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/rm
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/sh b/ucentral-client/rootfs/bin/sh
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/sh
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/sleep b/ucentral-client/rootfs/bin/sleep
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/sleep
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/touch b/ucentral-client/rootfs/bin/touch
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/touch
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/ubus b/ucentral-client/rootfs/bin/ubus
new file mode 100755
index 0000000..3c376b7
Binary files /dev/null and b/ucentral-client/rootfs/bin/ubus differ
diff --git a/ucentral-client/rootfs/bin/umount b/ucentral-client/rootfs/bin/umount
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/umount
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/uname b/ucentral-client/rootfs/bin/uname
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/uname
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/bin/vi b/ucentral-client/rootfs/bin/vi
new file mode 120000
index 0000000..c3fa810
--- /dev/null
+++ b/ucentral-client/rootfs/bin/vi
@@ -0,0 +1 @@
+busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/etc/group b/ucentral-client/rootfs/etc/group
new file mode 100644
index 0000000..e817e20
--- /dev/null
+++ b/ucentral-client/rootfs/etc/group
@@ -0,0 +1,16 @@
+root:x:0:
+daemon:x:1:
+adm:x:4:
+mail:x:8:
+dialout:x:20:
+audio:x:29:
+www-data:x:33:
+ftp:x:55:
+users:x:100:
+network:x:101:network
+nogroup:x:65534:
+ntp:x:123:ntp
+dnsmasq:x:453:dnsmasq
+lldp:x:129:lldp
+logd:x:514:logd
+ubus:x:81:ubus
diff --git a/ucentral-client/rootfs/etc/passwd b/ucentral-client/rootfs/etc/passwd
new file mode 100644
index 0000000..41e7289
--- /dev/null
+++ b/ucentral-client/rootfs/etc/passwd
@@ -0,0 +1,10 @@
+root:x:0:0:root:/root:/bin/ash
+daemon:*:1:1:daemon:/var:/bin/false
+ftp:*:55:55:ftp:/home/ftp:/bin/false
+network:*:101:101:network:/var:/bin/false
+nobody:*:65534:65534:nobody:/var:/bin/false
+ntp:x:123:123:ntp:/var/run/ntp:/bin/false
+dnsmasq:x:453:453:dnsmasq:/var/run/dnsmasq:/bin/false
+lldp:x:121:129:lldp:/var/run/lldp:/bin/false
+logd:x:514:514:logd:/var/run/logd:/bin/false
+ubus:x:81:81:ubus:/var/run/ubus:/bin/false
diff --git a/ucentral-client/rootfs/lib/bpf/bridger-bpf.o b/ucentral-client/rootfs/lib/bpf/bridger-bpf.o
new file mode 100644
index 0000000..d229ffa
Binary files /dev/null and b/ucentral-client/rootfs/lib/bpf/bridger-bpf.o differ
diff --git a/ucentral-client/rootfs/lib/bpf/mss.o b/ucentral-client/rootfs/lib/bpf/mss.o
new file mode 100644
index 0000000..429a463
Binary files /dev/null and b/ucentral-client/rootfs/lib/bpf/mss.o differ
diff --git a/ucentral-client/rootfs/lib/bpf/qosify-bpf.o b/ucentral-client/rootfs/lib/bpf/qosify-bpf.o
new file mode 100644
index 0000000..c7b3a82
Binary files /dev/null and b/ucentral-client/rootfs/lib/bpf/qosify-bpf.o differ
diff --git a/ucentral-client/rootfs/lib/bpf/spotfilter-bpf.o b/ucentral-client/rootfs/lib/bpf/spotfilter-bpf.o
new file mode 100644
index 0000000..b7523bb
Binary files /dev/null and b/ucentral-client/rootfs/lib/bpf/spotfilter-bpf.o differ
diff --git a/ucentral-client/rootfs/lib/bpf/udevstats.o b/ucentral-client/rootfs/lib/bpf/udevstats.o
new file mode 100644
index 0000000..ead486e
Binary files /dev/null and b/ucentral-client/rootfs/lib/bpf/udevstats.o differ
diff --git a/ucentral-client/rootfs/lib/config/uci.sh b/ucentral-client/rootfs/lib/config/uci.sh
new file mode 100644
index 0000000..6ebfb73
--- /dev/null
+++ b/ucentral-client/rootfs/lib/config/uci.sh
@@ -0,0 +1,163 @@
+# Shell script compatibility wrappers for /sbin/uci
+#
+# Copyright (C) 2008-2010  OpenWrt.org
+# Copyright (C) 2008  Felix Fietkau <nbd@nbd.name>
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+# General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
+
+CONFIG_APPEND=
+uci_load() {
+	local PACKAGE="$1"
+	local DATA
+	local RET
+	local VAR
+
+	_C=0
+	if [ -z "$CONFIG_APPEND" ]; then
+		for VAR in $CONFIG_LIST_STATE; do
+			export ${NO_EXPORT:+-n} CONFIG_${VAR}=
+			export ${NO_EXPORT:+-n} CONFIG_${VAR}_LENGTH=
+		done
+		export ${NO_EXPORT:+-n} CONFIG_LIST_STATE=
+		export ${NO_EXPORT:+-n} CONFIG_SECTIONS=
+		export ${NO_EXPORT:+-n} CONFIG_NUM_SECTIONS=0
+		export ${NO_EXPORT:+-n} CONFIG_SECTION=
+	fi
+
+	DATA="$(/sbin/uci ${UCI_CONFIG_DIR:+-c $UCI_CONFIG_DIR} ${LOAD_STATE:+-P /var/state} -S -n export "$PACKAGE" 2>/dev/null)"
+	RET="$?"
+	[ "$RET" != 0 -o -z "$DATA" ] || eval "$DATA"
+	unset DATA
+
+	${CONFIG_SECTION:+config_cb}
+	return "$RET"
+}
+
+uci_set_default() {
+	local PACKAGE="$1"
+	/sbin/uci ${UCI_CONFIG_DIR:+-c $UCI_CONFIG_DIR} -q show "$PACKAGE" > /dev/null && return 0
+	/sbin/uci ${UCI_CONFIG_DIR:+-c $UCI_CONFIG_DIR} import "$PACKAGE"
+	/sbin/uci ${UCI_CONFIG_DIR:+-c $UCI_CONFIG_DIR} commit "$PACKAGE"
+}
+
+uci_revert_state() {
+	local PACKAGE="$1"
+	local CONFIG="$2"
+	local OPTION="$3"
+
+	/sbin/uci ${UCI_CONFIG_DIR:+-c $UCI_CONFIG_DIR} -P /var/state revert "$PACKAGE${CONFIG:+.$CONFIG}${OPTION:+.$OPTION}"
+}
+
+uci_set_state() {
+	local PACKAGE="$1"
+	local CONFIG="$2"
+	local OPTION="$3"
+	local VALUE="$4"
+
+	[ "$#" = 4 ] || return 0
+	/sbin/uci ${UCI_CONFIG_DIR:+-c $UCI_CONFIG_DIR} -P /var/state set "$PACKAGE.$CONFIG${OPTION:+.$OPTION}=$VALUE"
+}
+
+uci_toggle_state() {
+	uci_revert_state "$1" "$2" "$3"
+	uci_set_state "$1" "$2" "$3" "$4"
+}
+
+uci_set() {
+	local PACKAGE="$1"
+	local CONFIG="$2"
+	local OPTION="$3"
+	local VALUE="$4"
+
+	/sbin/uci ${UCI_CONFIG_DIR:+-c $UCI_CONFIG_DIR} set "$PACKAGE.$CONFIG.$OPTION=$VALUE"
+}
+
+uci_add_list() {
+	local PACKAGE="$1"
+	local CONFIG="$2"
+	local OPTION="$3"
+	local VALUE="$4"
+
+	/sbin/uci ${UCI_CONFIG_DIR:+-c $UCI_CONFIG_DIR} add_list "$PACKAGE.$CONFIG.$OPTION=$VALUE"
+}
+
+uci_get_state() {
+	uci_get "$1" "$2" "$3" "$4" "/var/state"
+}
+
+uci_get() {
+	local PACKAGE="$1"
+	local CONFIG="$2"
+	local OPTION="$3"
+	local DEFAULT="$4"
+	local STATE="$5"
+
+	/sbin/uci ${UCI_CONFIG_DIR:+-c $UCI_CONFIG_DIR} ${STATE:+-P $STATE} -q get "$PACKAGE${CONFIG:+.$CONFIG}${OPTION:+.$OPTION}"
+	RET="$?"
+	[ "$RET" -ne 0 ] && [ -n "$DEFAULT" ] && echo "$DEFAULT"
+	return "$RET"
+}
+
+uci_add() {
+	local PACKAGE="$1"
+	local TYPE="$2"
+	local CONFIG="$3"
+
+	if [ -z "$CONFIG" ]; then
+		export ${NO_EXPORT:+-n} CONFIG_SECTION="$(/sbin/uci ${UCI_CONFIG_DIR:+-c $UCI_CONFIG_DIR} add "$PACKAGE" "$TYPE")"
+	else
+		/sbin/uci ${UCI_CONFIG_DIR:+-c $UCI_CONFIG_DIR} set "$PACKAGE.$CONFIG=$TYPE"
+		export ${NO_EXPORT:+-n} CONFIG_SECTION="$CONFIG"
+	fi
+}
+
+uci_rename() {
+	local PACKAGE="$1"
+	local CONFIG="$2"
+	local OPTION="$3"
+	local VALUE="$4"
+
+	/sbin/uci ${UCI_CONFIG_DIR:+-c $UCI_CONFIG_DIR} rename "$PACKAGE.$CONFIG${VALUE:+.$OPTION}=${VALUE:-$OPTION}"
+}
+
+uci_remove() {
+	local PACKAGE="$1"
+	local CONFIG="$2"
+	local OPTION="$3"
+
+	/sbin/uci ${UCI_CONFIG_DIR:+-c $UCI_CONFIG_DIR} del "$PACKAGE.$CONFIG${OPTION:+.$OPTION}"
+}
+
+uci_remove_list() {
+	local PACKAGE="$1"
+	local CONFIG="$2"
+	local OPTION="$3"
+	local VALUE="$4"
+
+	/sbin/uci ${UCI_CONFIG_DIR:+-c $UCI_CONFIG_DIR} del_list "$PACKAGE.$CONFIG.$OPTION=$VALUE"
+}
+
+uci_revert() {
+	local PACKAGE="$1"
+	local CONFIG="$2"
+	local OPTION="$3"
+
+	/sbin/uci ${UCI_CONFIG_DIR:+-c $UCI_CONFIG_DIR} revert "$PACKAGE${CONFIG:+.$CONFIG}${OPTION:+.$OPTION}"
+}
+
+uci_commit() {
+	local PACKAGE="$1"
+	/sbin/uci ${UCI_CONFIG_DIR:+-c $UCI_CONFIG_DIR} commit $PACKAGE
+}
diff --git a/ucentral-client/rootfs/lib/firmware/bnx2/bnx2-mips-06-6.2.3.fw b/ucentral-client/rootfs/lib/firmware/bnx2/bnx2-mips-06-6.2.3.fw
new file mode 100644
index 0000000..7e9e54b
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/bnx2/bnx2-mips-06-6.2.3.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/bnx2/bnx2-mips-09-6.2.1b.fw b/ucentral-client/rootfs/lib/firmware/bnx2/bnx2-mips-09-6.2.1b.fw
new file mode 100644
index 0000000..8bd1e79
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/bnx2/bnx2-mips-09-6.2.1b.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/bnx2/bnx2-rv2p-06-6.0.15.fw b/ucentral-client/rootfs/lib/firmware/bnx2/bnx2-rv2p-06-6.0.15.fw
new file mode 100644
index 0000000..4d756e1
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/bnx2/bnx2-rv2p-06-6.0.15.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/bnx2/bnx2-rv2p-09-6.0.17.fw b/ucentral-client/rootfs/lib/firmware/bnx2/bnx2-rv2p-09-6.0.17.fw
new file mode 100644
index 0000000..6693299
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/bnx2/bnx2-rv2p-09-6.0.17.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/bnx2/bnx2-rv2p-09ax-6.0.17.fw b/ucentral-client/rootfs/lib/firmware/bnx2/bnx2-rv2p-09ax-6.0.17.fw
new file mode 100644
index 0000000..e5738ce
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/bnx2/bnx2-rv2p-09ax-6.0.17.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/regulatory.db b/ucentral-client/rootfs/lib/firmware/regulatory.db
new file mode 100644
index 0000000..af9a39f
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/regulatory.db differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8105e-1.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8105e-1.fw
new file mode 100644
index 0000000..4c2cbd0
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8105e-1.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8106e-1.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8106e-1.fw
new file mode 100644
index 0000000..85694cb
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8106e-1.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8106e-2.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8106e-2.fw
new file mode 100644
index 0000000..ac04275
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8106e-2.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8107e-1.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8107e-1.fw
new file mode 100644
index 0000000..c071c2f
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8107e-1.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8107e-2.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8107e-2.fw
new file mode 100644
index 0000000..76fc054
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8107e-2.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8125a-3.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8125a-3.fw
new file mode 100644
index 0000000..fac6352
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8125a-3.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8125b-1.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8125b-1.fw
new file mode 100644
index 0000000..90191ab
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8125b-1.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8125b-2.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8125b-2.fw
new file mode 100644
index 0000000..dc753b5
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8125b-2.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168d-1.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168d-1.fw
new file mode 100644
index 0000000..99e002d
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168d-1.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168d-2.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168d-2.fw
new file mode 100644
index 0000000..7022ab0
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168d-2.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168e-1.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168e-1.fw
new file mode 100644
index 0000000..d203bd5
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168e-1.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168e-2.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168e-2.fw
new file mode 100644
index 0000000..7ea5984
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168e-2.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168e-3.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168e-3.fw
new file mode 100644
index 0000000..0f888a3
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168e-3.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168f-1.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168f-1.fw
new file mode 100644
index 0000000..bf78831
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168f-1.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168f-2.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168f-2.fw
new file mode 100644
index 0000000..c342492
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168f-2.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168fp-3.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168fp-3.fw
new file mode 100644
index 0000000..cc70384
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168fp-3.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168g-1.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168g-1.fw
new file mode 100644
index 0000000..2c628b0
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168g-1.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168g-2.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168g-2.fw
new file mode 100644
index 0000000..944d44e
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168g-2.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168g-3.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168g-3.fw
new file mode 100644
index 0000000..0c97d7e
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168g-3.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168h-1.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168h-1.fw
new file mode 100644
index 0000000..296813a
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168h-1.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168h-2.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168h-2.fw
new file mode 100644
index 0000000..df92848
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8168h-2.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8402-1.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8402-1.fw
new file mode 100644
index 0000000..82fa35d
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8402-1.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8411-1.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8411-1.fw
new file mode 100644
index 0000000..72772db
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8411-1.fw differ
diff --git a/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8411-2.fw b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8411-2.fw
new file mode 100644
index 0000000..e3789fe
Binary files /dev/null and b/ucentral-client/rootfs/lib/firmware/rtl_nic/rtl8411-2.fw differ
diff --git a/ucentral-client/rootfs/lib/functions.sh b/ucentral-client/rootfs/lib/functions.sh
new file mode 100644
index 0000000..87e2ede
--- /dev/null
+++ b/ucentral-client/rootfs/lib/functions.sh
@@ -0,0 +1,449 @@
+# Copyright (C) 2006-2014 OpenWrt.org
+# Copyright (C) 2006 Fokus Fraunhofer <carsten.tittel@fokus.fraunhofer.de>
+# Copyright (C) 2010 Vertical Communications
+
+
+debug () {
+	${DEBUG:-:} "$@"
+}
+
+# newline
+N="
+"
+
+_C=0
+NO_EXPORT=1
+LOAD_STATE=1
+LIST_SEP=" "
+
+# xor multiple hex values of the same length
+xor() {
+	local val
+	local ret="0x$1"
+	local retlen=${#1}
+
+	shift
+	while [ -n "$1" ]; do
+		val="0x$1"
+		ret=$((ret ^ val))
+		shift
+	done
+
+	printf "%0${retlen}x" "$ret"
+}
+
+find_mmc_part() {
+        local DEVNAME PARTNAME
+        if grep -q "$1" /proc/mtd; then
+                echo "" && return 0
+        fi
+
+        for DEVNAME in /sys/block/mmcblk*/mmcblk*p*; do
+                PARTNAME=$(grep PARTNAME ${DEVNAME}/uevent | cut -f2 -d'=')
+                [ "$PARTNAME" = "$1" ] && echo "/dev/$(basename $DEVNAME)" && return 0
+        done
+}
+
+
+append() {
+	local var="$1"
+	local value="$2"
+	local sep="${3:- }"
+
+	eval "export ${NO_EXPORT:+-n} -- \"$var=\${$var:+\${$var}\${value:+\$sep}}\$value\""
+}
+
+list_contains() {
+	local var="$1"
+	local str="$2"
+	local val
+
+	eval "val=\" \${$var} \""
+	[ "${val%% $str *}" != "$val" ]
+}
+
+config_load() {
+	[ -n "$IPKG_INSTROOT" ] && return 0
+	uci_load "$@"
+}
+
+reset_cb() {
+	config_cb() { return 0; }
+	option_cb() { return 0; }
+	list_cb() { return 0; }
+}
+reset_cb
+
+package() {
+	return 0
+}
+
+config () {
+	local cfgtype="$1"
+	local name="$2"
+
+	export ${NO_EXPORT:+-n} CONFIG_NUM_SECTIONS=$((CONFIG_NUM_SECTIONS + 1))
+	name="${name:-cfg$CONFIG_NUM_SECTIONS}"
+	append CONFIG_SECTIONS "$name"
+	export ${NO_EXPORT:+-n} CONFIG_SECTION="$name"
+	config_set "$CONFIG_SECTION" "TYPE" "${cfgtype}"
+	[ -n "$NO_CALLBACK" ] || config_cb "$cfgtype" "$name"
+}
+
+option () {
+	local varname="$1"; shift
+	local value="$*"
+
+	config_set "$CONFIG_SECTION" "${varname}" "${value}"
+	[ -n "$NO_CALLBACK" ] || option_cb "$varname" "$*"
+}
+
+list() {
+	local varname="$1"; shift
+	local value="$*"
+	local len
+
+	config_get len "$CONFIG_SECTION" "${varname}_LENGTH" 0
+	[ $len = 0 ] && append CONFIG_LIST_STATE "${CONFIG_SECTION}_${varname}"
+	len=$((len + 1))
+	config_set "$CONFIG_SECTION" "${varname}_ITEM$len" "$value"
+	config_set "$CONFIG_SECTION" "${varname}_LENGTH" "$len"
+	append "CONFIG_${CONFIG_SECTION}_${varname}" "$value" "$LIST_SEP"
+	[ -n "$NO_CALLBACK" ] || list_cb "$varname" "$*"
+}
+
+config_unset() {
+	config_set "$1" "$2" ""
+}
+
+# config_get <variable> <section> <option> [<default>]
+# config_get <section> <option>
+config_get() {
+	case "$2${3:-$1}" in
+		*[!A-Za-z0-9_]*) : ;;
+		*)
+			case "$3" in
+				"") eval echo "\"\${CONFIG_${1}_${2}:-\${4}}\"";;
+				*)  eval export ${NO_EXPORT:+-n} -- "${1}=\${CONFIG_${2}_${3}:-\${4}}";;
+			esac
+		;;
+	esac
+}
+
+# get_bool <value> [<default>]
+get_bool() {
+	local _tmp="$1"
+	case "$_tmp" in
+		1|on|true|yes|enabled) _tmp=1;;
+		0|off|false|no|disabled) _tmp=0;;
+		*) _tmp="$2";;
+	esac
+	echo -n "$_tmp"
+}
+
+# config_get_bool <variable> <section> <option> [<default>]
+config_get_bool() {
+	local _tmp
+	config_get _tmp "$2" "$3" "$4"
+	_tmp="$(get_bool "$_tmp" "$4")"
+	export ${NO_EXPORT:+-n} "$1=$_tmp"
+}
+
+config_set() {
+	local section="$1"
+	local option="$2"
+	local value="$3"
+
+	export ${NO_EXPORT:+-n} "CONFIG_${section}_${option}=${value}"
+}
+
+config_foreach() {
+	local ___function="$1"
+	[ "$#" -ge 1 ] && shift
+	local ___type="$1"
+	[ "$#" -ge 1 ] && shift
+	local section cfgtype
+
+	[ -z "$CONFIG_SECTIONS" ] && return 0
+	for section in ${CONFIG_SECTIONS}; do
+		config_get cfgtype "$section" TYPE
+		[ -n "$___type" ] && [ "x$cfgtype" != "x$___type" ] && continue
+		eval "$___function \"\$section\" \"\$@\""
+	done
+}
+
+config_list_foreach() {
+	[ "$#" -ge 3 ] || return 0
+	local section="$1"; shift
+	local option="$1"; shift
+	local function="$1"; shift
+	local val
+	local len
+	local c=1
+
+	config_get len "${section}" "${option}_LENGTH"
+	[ -z "$len" ] && return 0
+	while [ $c -le "$len" ]; do
+		config_get val "${section}" "${option}_ITEM$c"
+		eval "$function \"\$val\" \"\$@\""
+		c="$((c + 1))"
+	done
+}
+
+default_prerm() {
+	local root="${IPKG_INSTROOT}"
+	local pkgname="$(basename ${1%.*})"
+	local ret=0
+
+	if [ -f "$root/usr/lib/opkg/info/${pkgname}.prerm-pkg" ]; then
+		( . "$root/usr/lib/opkg/info/${pkgname}.prerm-pkg" )
+		ret=$?
+	fi
+
+	local shell="$(command -v bash)"
+	for i in $(grep -s "^/etc/init.d/" "$root/usr/lib/opkg/info/${pkgname}.list"); do
+		if [ -n "$root" ]; then
+			${shell:-/bin/sh} "$root/etc/rc.common" "$root$i" disable
+		else
+			if [ "$PKG_UPGRADE" != "1" ]; then
+				"$i" disable
+			fi
+			"$i" stop
+		fi
+	done
+
+	return $ret
+}
+
+add_group_and_user() {
+	local pkgname="$1"
+	local rusers="$(sed -ne 's/^Require-User: *//p' $root/usr/lib/opkg/info/${pkgname}.control 2>/dev/null)"
+
+	if [ -n "$rusers" ]; then
+		local tuple oIFS="$IFS"
+		for tuple in $rusers; do
+			local uid gid uname gname addngroups addngroup addngname addngid
+
+			IFS=":"
+			set -- $tuple; uname="$1"; gname="$2"; addngroups="$3"
+			IFS="="
+			set -- $uname; uname="$1"; uid="$2"
+			set -- $gname; gname="$1"; gid="$2"
+			IFS="$oIFS"
+
+			if [ -n "$gname" ] && [ -n "$gid" ]; then
+				group_exists "$gname" || group_add "$gname" "$gid"
+			elif [ -n "$gname" ]; then
+				gid="$(group_add_next "$gname")"
+			fi
+
+			if [ -n "$uname" ]; then
+				user_exists "$uname" || user_add "$uname" "$uid" "$gid"
+			fi
+
+			if [ -n "$uname" ] && [ -n "$gname" ]; then
+				group_add_user "$gname" "$uname"
+			fi
+
+			if [ -n "$uname" ] &&  [ -n "$addngroups" ]; then
+				oIFS="$IFS"
+				IFS=","
+				for addngroup in $addngroups ; do
+					IFS="="
+					set -- $addngroup; addngname="$1"; addngid="$2"
+					if [ -n "$addngid" ]; then
+						group_exists "$addngname" || group_add "$addngname" "$addngid"
+					else
+						group_add_next "$addngname"
+					fi
+
+					group_add_user "$addngname" "$uname"
+				done
+				IFS="$oIFS"
+			fi
+
+			unset uid gid uname gname addngroups addngroup addngname addngid
+		done
+	fi
+}
+
+default_postinst() {
+	local root="${IPKG_INSTROOT}"
+	local pkgname="$(basename ${1%.*})"
+	local filelist="/usr/lib/opkg/info/${pkgname}.list"
+	local ret=0
+
+	add_group_and_user "${pkgname}"
+
+	if [ -f "$root/usr/lib/opkg/info/${pkgname}.postinst-pkg" ]; then
+		( . "$root/usr/lib/opkg/info/${pkgname}.postinst-pkg" )
+		ret=$?
+	fi
+
+	if [ -d "$root/rootfs-overlay" ]; then
+		cp -R $root/rootfs-overlay/. $root/
+		rm -fR $root/rootfs-overlay/
+	fi
+
+	if [ -z "$root" ]; then
+		if grep -m1 -q -s "^/etc/modules.d/" "$filelist"; then
+			kmodloader
+		fi
+
+		if grep -m1 -q -s "^/etc/sysctl.d/" "$filelist"; then
+			/etc/init.d/sysctl restart
+		fi
+
+		if grep -m1 -q -s "^/etc/uci-defaults/" "$filelist"; then
+			[ -d /tmp/.uci ] || mkdir -p /tmp/.uci
+			for i in $(grep -s "^/etc/uci-defaults/" "$filelist"); do
+				( [ -f "$i" ] && cd "$(dirname $i)" && . "$i" ) && rm -f "$i"
+			done
+			uci commit
+		fi
+
+		rm -f /tmp/luci-indexcache
+	fi
+
+	local shell="$(command -v bash)"
+	for i in $(grep -s "^/etc/init.d/" "$root$filelist"); do
+		if [ -n "$root" ]; then
+			${shell:-/bin/sh} "$root/etc/rc.common" "$root$i" enable
+		else
+			if [ "$PKG_UPGRADE" != "1" ]; then
+				"$i" enable
+			fi
+			"$i" start
+		fi
+	done
+
+	return $ret
+}
+
+include() {
+	local file
+
+	for file in $(ls $1/*.sh 2>/dev/null); do
+		. $file
+	done
+}
+
+find_mtd_index() {
+	local PART="$(grep "\"$1\"" /proc/mtd | awk -F: '{print $1}')"
+	local INDEX="${PART##mtd}"
+
+	echo ${INDEX}
+}
+
+find_mtd_part() {
+	local INDEX=$(find_mtd_index "$1")
+	local PREFIX=/dev/mtdblock
+
+	[ -d /dev/mtdblock ] && PREFIX=/dev/mtdblock/
+	echo "${INDEX:+$PREFIX$INDEX}"
+}
+
+find_mmc_part() {
+	local DEVNAME PARTNAME ROOTDEV
+
+	if grep -q "$1" /proc/mtd; then
+		echo "" && return 0
+	fi
+
+	if [ -n "$2" ]; then
+		ROOTDEV="$2"
+	else
+		ROOTDEV="mmcblk*"
+	fi
+
+	for DEVNAME in /sys/block/$ROOTDEV/mmcblk*p*; do
+		PARTNAME="$(grep PARTNAME ${DEVNAME}/uevent | cut -f2 -d'=')"
+		[ "$PARTNAME" = "$1" ] && echo "/dev/$(basename $DEVNAME)" && return 0
+	done
+}
+
+group_add() {
+	local name="$1"
+	local gid="$2"
+	local rc
+	[ -f "${IPKG_INSTROOT}/etc/group" ] || return 1
+	[ -n "$IPKG_INSTROOT" ] || lock /var/lock/group
+	echo "${name}:x:${gid}:" >> ${IPKG_INSTROOT}/etc/group
+	[ -n "$IPKG_INSTROOT" ] || lock -u /var/lock/group
+}
+
+group_exists() {
+	grep -qs "^${1}:" ${IPKG_INSTROOT}/etc/group
+}
+
+group_add_next() {
+	local gid gids
+	gid=$(grep -s "^${1}:" ${IPKG_INSTROOT}/etc/group | cut -d: -f3)
+	if [ -n "$gid" ]; then
+		echo $gid
+		return
+	fi
+	gids=$(cut -d: -f3 ${IPKG_INSTROOT}/etc/group)
+	gid=65536
+	while echo "$gids" | grep -q "^$gid$"; do
+		gid=$((gid + 1))
+	done
+	group_add $1 $gid
+	echo $gid
+}
+
+group_add_user() {
+	local grp delim=","
+	grp=$(grep -s "^${1}:" ${IPKG_INSTROOT}/etc/group)
+	echo "$grp" | cut -d: -f4 | grep -q $2 && return
+	echo "$grp" | grep -q ":$" && delim=""
+	[ -n "$IPKG_INSTROOT" ] || lock /var/lock/passwd
+	sed -i "s/$grp/$grp$delim$2/g" ${IPKG_INSTROOT}/etc/group
+	if [ -z "$IPKG_INSTROOT" ] && [ -x /usr/sbin/selinuxenabled ] && selinuxenabled; then
+		restorecon /etc/group
+	fi
+	[ -n "$IPKG_INSTROOT" ] || lock -u /var/lock/passwd
+}
+
+user_add() {
+	local name="${1}"
+	local uid="${2}"
+	local gid="${3}"
+	local desc="${4:-$1}"
+	local home="${5:-/var/run/$1}"
+	local shell="${6:-/bin/false}"
+	local rc
+	[ -z "$uid" ] && {
+		uids=$(cut -d: -f3 ${IPKG_INSTROOT}/etc/passwd)
+		uid=65536
+		while echo "$uids" | grep -q "^$uid$"; do
+			uid=$((uid + 1))
+		done
+	}
+	[ -z "$gid" ] && gid=$uid
+	[ -f "${IPKG_INSTROOT}/etc/passwd" ] || return 1
+	[ -n "$IPKG_INSTROOT" ] || lock /var/lock/passwd
+	echo "${name}:x:${uid}:${gid}:${desc}:${home}:${shell}" >> ${IPKG_INSTROOT}/etc/passwd
+	echo "${name}:x:0:0:99999:7:::" >> ${IPKG_INSTROOT}/etc/shadow
+	[ -n "$IPKG_INSTROOT" ] || lock -u /var/lock/passwd
+}
+
+user_exists() {
+	grep -qs "^${1}:" ${IPKG_INSTROOT}/etc/passwd
+}
+
+board_name() {
+	[ -e /tmp/sysinfo/board_name ] && cat /tmp/sysinfo/board_name || echo "generic"
+}
+
+cmdline_get_var() {
+	local var=$1
+	local cmdlinevar tmp
+
+	for cmdlinevar in $(cat /proc/cmdline); do
+		tmp=${cmdlinevar##${var}}
+		[ "=" = "${tmp:0:1}" ] && echo ${tmp:1}
+	done
+}
+
+[ -z "$IPKG_INSTROOT" ] && [ -f /lib/config/uci.sh ] && . /lib/config/uci.sh
diff --git a/ucentral-client/rootfs/lib/functions/caldata.sh b/ucentral-client/rootfs/lib/functions/caldata.sh
new file mode 100644
index 0000000..d7b88c7
--- /dev/null
+++ b/ucentral-client/rootfs/lib/functions/caldata.sh
@@ -0,0 +1,184 @@
+# Copyright (C) 2019 OpenWrt.org
+
+. /lib/functions.sh
+. /lib/functions/system.sh
+
+caldata_dd() {
+	local source=$1
+	local target=$2
+	local count=$(($3))
+	local offset=$(($4))
+
+	dd if=$source of=$target iflag=skip_bytes,fullblock bs=$count skip=$offset count=1 2>/dev/null
+	return $?
+}
+
+caldata_die() {
+	echo "caldata: " "$*"
+	exit 1
+}
+
+caldata_extract() {
+	local part=$1
+	local offset=$(($2))
+	local count=$(($3))
+	local mtd
+
+	mtd=$(find_mtd_chardev $part)
+	[ -n "$mtd" ] || caldata_die "no mtd device found for partition $part"
+
+	caldata_dd $mtd /lib/firmware/$FIRMWARE $count $offset || \
+		caldata_die "failed to extract calibration data from $mtd"
+}
+
+caldata_extract_ubi() {
+	local part=$1
+	local offset=$(($2))
+	local count=$(($3))
+	local ubidev
+	local ubi
+
+	. /lib/upgrade/nand.sh
+
+	ubidev=$(nand_find_ubi $CI_UBIPART)
+	ubi=$(nand_find_volume $ubidev $part)
+	[ -n "$ubi" ] || caldata_die "no UBI volume found for $part"
+
+	caldata_dd /dev/$ubi /lib/firmware/$FIRMWARE $count $offset || \
+		caldata_die "failed to extract calibration data from $ubi"
+}
+
+caldata_extract_mmc() {
+	local part=$1
+	local offset=$(($2))
+	local count=$(($3))
+	local mmc_part
+
+	mmc_part=$(find_mmc_part $part)
+	[ -n "$mmc_part" ] || caldata_die "no mmc partition found for partition $part"
+
+	caldata_dd $mmc_part /lib/firmware/$FIRMWARE $count $offset || \
+		caldata_die "failed to extract calibration data from $mmc_part"
+}
+
+caldata_extract_reverse() {
+	local part=$1
+	local offset=$2
+	local count=$(($3))
+	local mtd
+	local reversed
+	local caldata
+
+	mtd=$(find_mtd_chardev "$part")
+	reversed=$(hexdump -v -s $offset -n $count -e '/1 "%02x "' $mtd)
+
+	for byte in $reversed; do
+		caldata="\x${byte}${caldata}"
+	done
+
+	printf "%b" "$caldata" > /lib/firmware/$FIRMWARE
+}
+
+caldata_from_file() {
+	local source=$1
+	local offset=$(($2))
+	local count=$(($3))
+	local target=$4
+
+	[ -n "$target" ] || target=/lib/firmware/$FIRMWARE
+
+	caldata_dd $source $target $count $offset || \
+		caldata_die "failed to extract calibration data from $source"
+}
+
+caldata_sysfsload_from_file() {
+	local source=$1
+	local offset=$(($2))
+	local count=$(($3))
+	local target_dir="/sys/$DEVPATH"
+	local target="$target_dir/data"
+
+	[ -d "$target_dir" ] || \
+		caldata_die "no sysfs dir to write: $target"
+
+	echo 1 > "$target_dir/loading"
+	caldata_dd $source $target $count $offset
+	if [ $? != 0 ]; then
+		echo 1 > "$target_dir/loading"
+		caldata_die "failed to extract calibration data from $source"
+	else
+		echo 0 > "$target_dir/loading"
+	fi
+}
+
+caldata_valid() {
+	local expected="$1"
+	local target=$2
+
+	[ -n "$target" ] || target=/lib/firmware/$FIRMWARE
+
+	magic=$(hexdump -v -n 2 -e '1/1 "%02x"' $target)
+	[ "$magic" = "$expected" ]
+	return $?
+}
+
+caldata_patch_chksum() {
+	local mac=$1
+	local mac_offset=$(($2))
+	local chksum_offset=$(($3))
+	local target=$4
+	local xor_mac
+	local xor_fw_mac
+	local xor_fw_chksum
+
+	xor_mac=${mac//:/}
+	xor_mac="${xor_mac:0:4} ${xor_mac:4:4} ${xor_mac:8:4}"
+
+	xor_fw_mac=$(hexdump -v -n 6 -s $mac_offset -e '/1 "%02x"' /lib/firmware/$FIRMWARE)
+	xor_fw_mac="${xor_fw_mac:0:4} ${xor_fw_mac:4:4} ${xor_fw_mac:8:4}"
+
+	xor_fw_chksum=$(hexdump -v -n 2 -s $chksum_offset -e '/1 "%02x"' /lib/firmware/$FIRMWARE)
+	xor_fw_chksum=$(xor $xor_fw_chksum $xor_fw_mac $xor_mac)
+
+	printf "%b" "\x${xor_fw_chksum:0:2}\x${xor_fw_chksum:2:2}" | \
+		dd of=$target conv=notrunc bs=1 seek=$chksum_offset count=2
+}
+
+caldata_patch_mac() {
+	local mac=$1
+	local mac_offset=$(($2))
+	local chksum_offset=$3
+	local target=$4
+
+	[ -z "$mac" -o -z "$mac_offset" ] && return
+
+	[ -n "$target" ] || target=/lib/firmware/$FIRMWARE
+
+	[ -n "$chksum_offset" ] && caldata_patch_chksum "$mac" "$mac_offset" "$chksum_offset" "$target"
+
+	macaddr_2bin $mac | dd of=$target conv=notrunc oflag=seek_bytes bs=6 seek=$mac_offset count=1 || \
+		caldata_die "failed to write MAC address to eeprom file"
+}
+
+ath9k_patch_mac() {
+	local mac=$1
+	local target=$2
+
+	caldata_patch_mac "$mac" 0x2 "" "$target"
+}
+
+ath9k_patch_mac_crc() {
+	local mac=$1
+	local mac_offset=$2
+	local chksum_offset=$((mac_offset - 10))
+	local target=$4
+
+	caldata_patch_mac "$mac" "$mac_offset" "$chksum_offset" "$target"
+}
+
+ath10k_patch_mac() {
+	local mac=$1
+	local target=$2
+
+	caldata_patch_mac "$mac" 0x6 0x2 "$target"
+}
diff --git a/ucentral-client/rootfs/lib/functions/dyn_vlan_switch.sh b/ucentral-client/rootfs/lib/functions/dyn_vlan_switch.sh
new file mode 100644
index 0000000..5901a15
--- /dev/null
+++ b/ucentral-client/rootfs/lib/functions/dyn_vlan_switch.sh
@@ -0,0 +1,33 @@
+
+configure_switch_dynamic_vlan(){
+vid=$1
+switch_dev=$2
+switch_wan_port=$3
+switch_cpu_port=$4
+debug "configured switch $switch_dev ports $switch_wan_port $switch_cpu_port for dynamic vlans $vid"
+swconfig dev ${switch_dev} vlan $vid set ports "${switch_wan_port} ${switch_cpu_port}"
+
+}
+
+
+configure_bridge_dyn_vlans () {
+interfaces=$(ls /sys/class/net/$1/brif)
+
+switch_dev=$2
+switch_wan_port=$3
+switch_cpu_port=$4
+
+# Convert the string into an array
+IFS=' ' set -- $interfaces
+
+# Loop through the array and print each element
+for interface in "$@"; do
+   case "$interface" in
+        wlan*-v*)
+            # Use parameter expansion to extract the part after "wlan*-v"
+            dyn_vlan_id="${interface#*wlan*-v}"
+	    configure_switch_dynamic_vlan $dyn_vlan_id $switch_dev $switch_wan_port $switch_cpu_port ;;
+    esac
+done
+}
+
diff --git a/ucentral-client/rootfs/lib/functions/fsck/e2fsck.sh b/ucentral-client/rootfs/lib/functions/fsck/e2fsck.sh
new file mode 100644
index 0000000..22031ed
--- /dev/null
+++ b/ucentral-client/rootfs/lib/functions/fsck/e2fsck.sh
@@ -0,0 +1,38 @@
+#!/bin/sh
+# Copyright 2010 Vertical Communications
+# Copyright 2012 OpenWrt.org
+# This is free software, licensed under the GNU General Public License v2.
+# See /LICENSE for more information.
+#
+
+fsck_e2fsck() {
+	set -o pipefail
+	e2fsck -p "$device" 2>&1 | logger -t "fstab: e2fsck ($device)"
+	local status="$?"
+	set +o pipefail
+	case "$status" in
+		0|1) ;; #success
+		2) reboot;;
+		4) echo "e2fsck ($device): Warning! Uncorrected errors."| logger -t fstab
+			return 1
+			;;
+		*) echo "e2fsck ($device): Error $status. Check not complete."| logger -t fstab;;
+	esac
+	return 0
+}
+
+fsck_ext2() {
+	fsck_e2fsck "$@"
+}
+
+fsck_ext3() {
+	fsck_e2fsck "$@"
+}
+
+fsck_ext4() {
+	fsck_e2fsck "$@"
+}
+
+append libmount_known_fsck "ext2"
+append libmount_known_fsck "ext3"
+append libmount_known_fsck "ext4"
diff --git a/ucentral-client/rootfs/lib/functions/leds.sh b/ucentral-client/rootfs/lib/functions/leds.sh
new file mode 100644
index 0000000..a7532fa
--- /dev/null
+++ b/ucentral-client/rootfs/lib/functions/leds.sh
@@ -0,0 +1,94 @@
+# Copyright (C) 2013 OpenWrt.org
+
+get_dt_led_path() {
+	local ledpath
+	local basepath="/proc/device-tree"
+	local nodepath="$basepath/aliases/led-$1"
+
+	[ -f "$nodepath" ] && ledpath=$(cat "$nodepath")
+	[ -n "$ledpath" ] && ledpath="$basepath$ledpath"
+
+	echo "$ledpath"
+}
+
+get_dt_led() {
+	local label
+	local ledpath=$(get_dt_led_path $1)
+
+	[ -n "$ledpath" ] && \
+		label=$(cat "$ledpath/label" 2>/dev/null) || \
+		label=$(cat "$ledpath/chan-name" 2>/dev/null) || \
+		label=$(basename "$ledpath")
+
+	echo "$label"
+}
+
+led_set_attr() {
+	[ -f "/sys/class/leds/$1/$2" ] && echo "$3" > "/sys/class/leds/$1/$2"
+}
+
+led_timer() {
+	led_set_attr $1 "trigger" "timer"
+	led_set_attr $1 "delay_on" "$2"
+	led_set_attr $1 "delay_off" "$3"
+}
+
+led_on() {
+	led_set_attr $1 "trigger" "none"
+	led_set_attr $1 "brightness" 255
+}
+
+led_off() {
+	led_set_attr $1 "trigger" "none"
+	led_set_attr $1 "brightness" 0
+}
+
+status_led_restore_trigger() {
+	local trigger
+	local ledpath=$(get_dt_led_path $1)
+
+	[ -n "$ledpath" ] && \
+		trigger=$(cat "$ledpath/linux,default-trigger" 2>/dev/null)
+
+	[ -n "$trigger" ] && \
+		led_set_attr "$(get_dt_led $1)" "trigger" "$trigger"
+}
+
+status_led_set_timer() {
+	led_timer $status_led "$1" "$2"
+	[ -n "$status_led2" ] && led_timer $status_led2 "$1" "$2"
+}
+
+status_led_set_heartbeat() {
+	led_set_attr $status_led "trigger" "heartbeat"
+}
+
+status_led_on() {
+	led_on $status_led
+	[ -n "$status_led2" ] && led_on $status_led2
+}
+
+status_led_off() {
+	led_off $status_led
+	[ -n "$status_led2" ] && led_off $status_led2
+}
+
+status_led_blink_slow() {
+	led_timer $status_led 1000 1000
+}
+
+status_led_blink_fast() {
+	led_timer $status_led 100 100
+}
+
+status_led_blink_preinit() {
+	led_timer $status_led 100 100
+}
+
+status_led_blink_failsafe() {
+	led_timer $status_led 50 50
+}
+
+status_led_blink_preinit_regular() {
+	led_timer $status_led 200 200
+}
diff --git a/ucentral-client/rootfs/lib/functions/migrations.sh b/ucentral-client/rootfs/lib/functions/migrations.sh
new file mode 100644
index 0000000..d43ea35
--- /dev/null
+++ b/ucentral-client/rootfs/lib/functions/migrations.sh
@@ -0,0 +1,67 @@
+. /lib/functions.sh
+
+migrate_led_sysfs() {
+	local cfg="$1"; shift
+	local tuples="$@"
+	local sysfs
+	local name
+
+	config_get sysfs ${cfg} sysfs
+	config_get name ${cfg} name
+
+	[ -z "${sysfs}" ] && return
+
+	for tuple in ${tuples}; do
+		local old=${tuple%=*}
+		local new=${tuple#*=}
+		local new_sysfs
+
+		new_sysfs=$(echo ${sysfs} | sed "s/${old}/${new}/")
+
+		[ "${new_sysfs}" = "${sysfs}" ] && continue
+
+		uci set system.${cfg}.sysfs="${new_sysfs}"
+
+		logger -t led-migration "sysfs option of LED \"${name}\" updated to ${new_sysfs}"
+	done;
+}
+
+remove_devicename_led_sysfs() {
+	local cfg="$1"; shift
+	local exceptions="$@"
+	local sysfs
+	local name
+	local new_sysfs
+
+	config_get sysfs ${cfg} sysfs
+	config_get name ${cfg} name
+
+	# only continue if two or more colons are present
+	echo "${sysfs}" | grep -q ":.*:" || return
+
+	for exception in ${exceptions}; do
+		# no change if exceptions provided as argument are found for devicename
+		echo "${sysfs}" | grep -q "^${exception}:" && return
+	done
+
+	new_sysfs=$(echo ${sysfs} | sed "s/^[^:]*://")
+
+	uci set system.${cfg}.sysfs="${new_sysfs}"
+
+	logger -t led-migration "sysfs option of LED \"${name}\" updated to ${new_sysfs}"
+}
+
+migrate_leds() {
+	config_load system
+	config_foreach migrate_led_sysfs led "$@"
+}
+
+remove_devicename_leds() {
+	config_load system
+	config_foreach remove_devicename_led_sysfs led "$@"
+}
+
+migrations_apply() {
+	local realm="$1"
+	[ -n "$(uci changes ${realm})" ] && uci -q commit ${realm}
+}
diff --git a/ucentral-client/rootfs/lib/functions/network.sh b/ucentral-client/rootfs/lib/functions/network.sh
new file mode 100644
index 0000000..4851a58
--- /dev/null
+++ b/ucentral-client/rootfs/lib/functions/network.sh
@@ -0,0 +1,325 @@
+# 1: destination variable
+# 2: interface
+# 3: path
+# 4: separator
+# 5: limit
+__network_ifstatus() {
+	local __tmp
+
+	[ -z "$__NETWORK_CACHE" ] && {
+		__tmp="$(ubus call network.interface dump 2>&1)"
+		case "$?" in
+			4) : ;;
+			0) export __NETWORK_CACHE="$__tmp" ;;
+			*) echo "$__tmp" >&2 ;;
+		esac
+	}
+
+	__tmp="$(jsonfilter ${4:+-F "$4"} ${5:+-l "$5"} -s "${__NETWORK_CACHE:-{}}" -e "$1=@.interface${2:+[@.interface='$2']}$3")"
+
+	[ -z "$__tmp" ] && \
+		unset "$1" && \
+		return 1
+
+	eval "$__tmp"
+}
+
+# determine first IPv4 address of given logical interface
+# 1: destination variable
+# 2: interface
+network_get_ipaddr() {
+	__network_ifstatus "$1" "$2" "['ipv4-address'][0].address";
+}
+
+# determine first IPv6 address of given logical interface
+# 1: destination variable
+# 2: interface
+network_get_ipaddr6() {
+	__network_ifstatus "$1" "$2" "['ipv6-address'][0].address" || \
+		__network_ifstatus "$1" "$2" "['ipv6-prefix-assignment'][0]['local-address'].address" || \
+		return 1
+}
+
+# determine first IPv4 subnet of given logical interface
+# 1: destination variable
+# 2: interface
+network_get_subnet() {
+	__network_ifstatus "$1" "$2" "['ipv4-address'][0]['address','mask']" "/"
+}
+
+# determine first IPv6 subnet of given logical interface
+# 1: destination variable
+# 2: interface
+network_get_subnet6() {
+	local __nets __addr
+
+	if network_get_subnets6 __nets "$2"; then
+		# Attempt to return first non-fe80::/10, non-fc::/7 range
+		for __addr in $__nets; do
+			case "$__addr" in fe[8ab]?:*|f[cd]??:*)
+				continue
+			esac
+			export "$1=$__addr"
+			return 0
+		done
+
+		# Attempt to return first non-fe80::/10 range
+		for __addr in $__nets; do
+			case "$__addr" in fe[8ab]?:*)
+				continue
+			esac
+			export "$1=$__addr"
+			return 0
+		done
+
+		# Return first item
+		for __addr in $__nets; do
+			export "$1=$__addr"
+			return 0
+		done
+	fi
+
+	unset "$1"
+	return 1
+}
+
+# determine first IPv6 prefix of given logical interface
+# 1: destination variable
+# 2: interface
+network_get_prefix6() {
+	__network_ifstatus "$1" "$2" "['ipv6-prefix'][0]['address','mask']" "/"
+}
+
+# determine first IPv6 prefix assignment of given logical interface
+# 1: destination variable
+# 2: interface
+network_get_prefix_assignment6() {
+	__network_ifstatus "$1" "$2" "['ipv6-prefix-assignment'][0]['address','mask']" "/"
+}
+
+# determine all IPv4 addresses of given logical interface
+# 1: destination variable
+# 2: interface
+network_get_ipaddrs() {
+	__network_ifstatus "$1" "$2" "['ipv4-address'][*].address"
+}
+
+# determine all IPv6 addresses of given logical interface
+# 1: destination variable
+# 2: interface
+network_get_ipaddrs6() {
+	local __addr
+	local __list=""
+
+	if __network_ifstatus "__addr" "$2" "['ipv6-address'][*].address"; then
+		for __addr in $__addr; do
+			__list="${__list:+$__list }${__addr}"
+		done
+	fi
+
+	if __network_ifstatus "__addr" "$2" "['ipv6-prefix-assignment'][*]['local-address'].address"; then
+		for __addr in $__addr; do
+			__list="${__list:+$__list }${__addr}"
+		done
+	fi
+
+	if [ -n "$__list" ]; then
+		export "$1=$__list"
+		return 0
+	fi
+
+	unset "$1"
+	return 1
+}
+
+# determine all IP addresses of given logical interface
+# 1: destination variable
+# 2: interface
+network_get_ipaddrs_all() {
+	local __addr __addr6
+
+	network_get_ipaddrs __addr "$2"
+	network_get_ipaddrs6 __addr6 "$2"
+
+	if [ -n "$__addr" -o -n "$__addr6" ]; then
+		export "$1=${__addr:+$__addr }$__addr6"
+		return 0
+	fi
+
+	unset "$1"
+	return 1
+}
+
+# determine all IPv4 subnets of given logical interface
+# 1: destination variable
+# 2: interface
+network_get_subnets() {
+	__network_ifstatus "$1" "$2" "['ipv4-address'][*]['address','mask']" "/ "
+}
+
+# determine all IPv6 subnets of given logical interface
+# 1: destination variable
+# 2: interface
+network_get_subnets6() {
+	local __addr __mask
+	local __list=""
+
+	if __network_ifstatus "__addr" "$2" "['ipv6-address'][*]['address','mask']" "/ "; then
+		for __addr in $__addr; do
+			__list="${__list:+$__list }${__addr}"
+		done
+	fi
+
+	if __network_ifstatus "__addr" "$2" "['ipv6-prefix-assignment'][*]['local-address'].address" && \
+	   __network_ifstatus "__mask" "$2" "['ipv6-prefix-assignment'][*].mask"; then
+		for __addr in $__addr; do
+			__list="${__list:+$__list }${__addr}/${__mask%% *}"
+			__mask="${__mask#* }"
+		done
+	fi
+
+	if [ -n "$__list" ]; then
+		export "$1=$__list"
+		return 0
+	fi
+
+	unset "$1"
+	return 1
+}
+
+# determine all IPv6 prefixes of given logical interface
+# 1: destination variable
+# 2: interface
+network_get_prefixes6() {
+	__network_ifstatus "$1" "$2" "['ipv6-prefix'][*]['address','mask']" "/ "
+}
+
+# determine all IPv6 prefix assignments of given logical interface
+# 1: destination variable
+# 2: interface
+network_get_prefix_assignments6() {
+	__network_ifstatus "$1" "$2" "['ipv6-prefix-assignment'][*]['address','mask']" "/ "
+}
+
+# determine IPv4 gateway of given logical interface
+# 1: destination variable
+# 2: interface
+# 3: consider inactive gateway if "true" (optional)
+network_get_gateway() {
+	__network_ifstatus "$1" "$2" ".route[@.target='0.0.0.0' && !@.table].nexthop" "" 1 && \
+		return 0
+
+	[ "$3" = 1 -o "$3" = "true" ] && \
+		__network_ifstatus "$1" "$2" ".inactive.route[@.target='0.0.0.0' && !@.table].nexthop" "" 1
+}
+
+# determine IPv6 gateway of given logical interface
+# 1: destination variable
+# 2: interface
+# 3: consider inactive gateway if "true" (optional)
+network_get_gateway6() {
+	__network_ifstatus "$1" "$2" ".route[@.target='::' && !@.table].nexthop" "" 1 && \
+		return 0
+
+	[ "$3" = 1 -o "$3" = "true" ] && \
+		__network_ifstatus "$1" "$2" ".inactive.route[@.target='::' && !@.table].nexthop" "" 1
+}
+
+# determine the DNS servers of the given logical interface
+# 1: destination variable
+# 2: interface
+# 3: consider inactive servers if "true" (optional)
+network_get_dnsserver() {
+	__network_ifstatus "$1" "$2" "['dns-server'][*]" && return 0
+
+	[ "$3" = 1 -o "$3" = "true" ] && \
+		__network_ifstatus "$1" "$2" ".inactive['dns-server'][*]"
+}
+
+# determine the domains of the given logical interface
+# 1: destination variable
+# 2: interface
+# 3: consider inactive domains if "true" (optional)
+network_get_dnssearch() {
+	__network_ifstatus "$1" "$2" "['dns-search'][*]" && return 0
+
+	[ "$3" = 1 -o "$3" = "true" ] && \
+		__network_ifstatus "$1" "$2" ".inactive['dns-search'][*]"
+}
+
+
+# 1: destination variable
+# 2: addr
+# 3: inactive
+__network_wan()
+{
+	__network_ifstatus "$1" "" \
+		"[@.route[@.target='$2' && !@.table]].interface" "" 1 && \
+			return 0
+
+	[ "$3" = 1 -o "$3" = "true" ] && \
+		__network_ifstatus "$1" "" \
+			"[@.inactive.route[@.target='$2' && !@.table]].interface" "" 1
+}
+
+# find the logical interface which holds the current IPv4 default route
+# 1: destination variable
+# 2: consider inactive default routes if "true" (optional)
+network_find_wan() { __network_wan "$1" "0.0.0.0" "$2"; }
+
+# find the logical interface which holds the current IPv6 default route
+# 1: destination variable
+# 2: consider inactive default routes if "true" (optional)
+network_find_wan6() { __network_wan "$1" "::" "$2"; }
+
+# test whether the given logical interface is running
+# 1: interface
+network_is_up()
+{
+	local __up
+	__network_ifstatus "__up" "$1" ".up" && [ "$__up" = 1 ]
+}
+
+# determine the protocol of the given logical interface
+# 1: destination variable
+# 2: interface
+network_get_protocol() { __network_ifstatus "$1" "$2" ".proto"; }
+
+# determine the uptime of the given logical interface
+# 1: destination variable
+# 2: interface
+network_get_uptime() { __network_ifstatus "$1" "$2" ".uptime"; }
+
+# determine the metric of the given logical interface
+# 1: destination variable
+# 2: interface
+network_get_metric() { __network_ifstatus "$1" "$2" ".metric"; }
+
+# determine the layer 3 linux network device of the given logical interface
+# 1: destination variable
+# 2: interface
+network_get_device() { __network_ifstatus "$1" "$2" ".l3_device"; }
+
+# determine the layer 2 linux network device of the given logical interface
+# 1: destination variable
+# 2: interface
+network_get_physdev() { __network_ifstatus "$1" "$2" ".device"; }
+
+# defer netifd actions on the given linux network device
+# 1: device name
+network_defer_device()
+{
+	ubus call network.device set_state \
+		"$(printf '{ "name": "%s", "defer": true }' "$1")" 2>/dev/null
+}
+
+# continue netifd actions on the given linux network device
+# 1: device name
+network_ready_device()
+{
+	ubus call network.device set_state \
+		"$(printf '{ "name": "%s", "defer": false }' "$1")" 2>/dev/null
+}
+
+# flush the internal value cache to force re-reading values from ubus
+network_flush_cache() { unset __NETWORK_CACHE; }
diff --git a/ucentral-client/rootfs/lib/functions/preinit.sh b/ucentral-client/rootfs/lib/functions/preinit.sh
new file mode 100644
index 0000000..591e810
--- /dev/null
+++ b/ucentral-client/rootfs/lib/functions/preinit.sh
@@ -0,0 +1,87 @@
+# Copyright (C) 2006-2013 OpenWrt.org
+# Copyright (C) 2010 Vertical Communications
+
+boot_hook_splice_start() {
+	export -n PI_HOOK_SPLICE=1
+}
+
+boot_hook_splice_finish() {
+	local hook
+	for hook in $PI_STACK_LIST; do
+		local v; eval "v=\${${hook}_splice:+\$${hook}_splice }$hook"
+		export -n "${hook}=${v% }"
+		export -n "${hook}_splice="
+	done
+	export -n PI_HOOK_SPLICE=
+}
+
+boot_hook_init() {
+	local hook="${1}_hook"
+	export -n "PI_STACK_LIST=${PI_STACK_LIST:+$PI_STACK_LIST }$hook"
+	export -n "$hook="
+}
+
+boot_hook_add() {
+	local hook="${1}_hook${PI_HOOK_SPLICE:+_splice}"
+	local func="${2}"
+
+	[ -n "$func" ] && {
+		local v; eval "v=\$$hook"
+		export -n "$hook=${v:+$v }$func"
+	}
+}
+
+boot_hook_shift() {
+	local hook="${1}_hook"
+	local rvar="${2}"
+
+	local v; eval "v=\$$hook"
+	[ -n "$v" ] && {
+		local first="${v%% *}"
+
+		[ "$v" != "${v#* }" ] && \
+			export -n "$hook=${v#* }" || \
+			export -n "$hook="
+
+		export -n "$rvar=$first"
+		return 0
+	}
+
+	return 1
+}
+
+boot_run_hook() {
+	local hook="$1"
+	local func
+
+	while boot_hook_shift "$hook" func; do
+		local ran; eval "ran=\$PI_RAN_$func"
+		[ -n "$ran" ] || {
+			export -n "PI_RAN_$func=1"
+			$func "$1" "$2"
+		}
+	done
+}
+
+pivot() { # <new_root> <old_root>
+	/bin/mount -o noatime,move /proc $1/proc && \
+	pivot_root $1 $1$2 && {
+		/bin/mount -o noatime,move $2/dev /dev
+		/bin/mount -o noatime,move $2/tmp /tmp
+		/bin/mount -o noatime,move $2/sys /sys 2>&-
+		/bin/mount -o noatime,move $2/overlay /overlay 2>&-
+		return 0
+	}
+}
+
+fopivot() { # <rw_root> <work_dir> <ro_root> <dupe?>
+	/bin/mount -o noatime,lowerdir=/,upperdir=$1,workdir=$2 -t overlay "overlayfs:$1" /mnt
+	pivot /mnt $3
+}
+
+ramoverlay() {
+	mkdir -p /tmp/root
+	/bin/mount -t tmpfs -o noatime,mode=0755 root /tmp/root
+	mkdir -p /tmp/root/root /tmp/root/work
+	fopivot /tmp/root/root /tmp/root/work /rom 1
+}
diff --git a/ucentral-client/rootfs/lib/functions/procd.sh b/ucentral-client/rootfs/lib/functions/procd.sh
new file mode 100644
index 0000000..5148b2f
--- /dev/null
+++ b/ucentral-client/rootfs/lib/functions/procd.sh
@@ -0,0 +1,655 @@
+# procd API:
+#
+# procd_open_service(name, [script]):
+#   Initialize a new procd command message containing a service with one or more instances
+#
+# procd_close_service()
+#   Send the command message for the service
+#
+# procd_open_instance([name]):
+#   Add an instance to the service described by the previous procd_open_service call
+#
+# procd_set_param(type, [value...])
+#   Available types:
+#     command: command line (array).
+#     respawn info: array with 3 values $fail_threshold $restart_timeout $max_fail
+#     env: environment variable (passed to the process)
+#     data: arbitrary name/value pairs for detecting config changes (table)
+#     file: configuration files (array)
+#     netdev: bound network device (detects ifindex changes)
+#     limits: resource limits (passed to the process)
+#     user: $username to run service as
+#     group: $groupname to run service as
+#     pidfile: file name to write pid into
+#     stdout: boolean whether to redirect commands stdout to syslog (default: 0)
+#     stderr: boolean whether to redirect commands stderr to syslog (default: 0)
+#     facility: syslog facility used when logging to syslog (default: daemon)
+#
+#   No space separation is done for arrays/tables - use one function argument per command line argument
+#
+# procd_close_instance():
+#   Complete the instance being prepared
+#
+# procd_running(service, [instance]):
+#   Checks if service/instance is currently running
+#
+# procd_kill(service, [instance]):
+#   Kill a service instance (or all instances)
+#
+# procd_send_signal(service, [instance], [signal])
+#   Send a signal to a service instance (or all instances)
+#
+
+. "$IPKG_INSTROOT/usr/share/libubox/jshn.sh"
+
+PROCD_RELOAD_DELAY=1000
+_PROCD_SERVICE=
+
+procd_lock() {
+	local basescript=$(readlink "$initscript")
+	local service_name="$(basename ${basescript:-$initscript})"
+
+	flock -n 1000 &> /dev/null
+	if [ "$?" != "0" ]; then
+		exec 1000>"$IPKG_INSTROOT/var/lock/procd_${service_name}.lock"
+		flock 1000
+		if [ "$?" != "0" ]; then
+			logger "warning: procd flock for $service_name failed"
+		fi
+	fi
+}
+
+_procd_call() {
+	local old_cb
+
+	json_set_namespace procd old_cb
+	"$@"
+	json_set_namespace $old_cb
+}
+
+_procd_wrapper() {
+	procd_lock
+	while [ -n "$1" ]; do
+		eval "$1() { _procd_call _$1 \"\$@\"; }"
+		shift
+	done
+}
+
+_procd_ubus_call() {
+	local cmd="$1"
+
+	[ -n "$PROCD_DEBUG" ] && json_dump >&2
+	ubus call service "$cmd" "$(json_dump)"
+	json_cleanup
+}
+
+_procd_open_service() {
+	local name="$1"
+	local script="$2"
+
+	_PROCD_SERVICE="$name"
+	_PROCD_INSTANCE_SEQ=0
+
+	json_init
+	json_add_string name "$name"
+	[ -n "$script" ] && json_add_string script "$script"
+	json_add_object instances
+}
+
+_procd_close_service() {
+	json_close_object
+	_procd_open_trigger
+	service_triggers
+	_procd_close_trigger
+	_procd_open_data
+	service_data
+	_procd_close_data
+	_procd_ubus_call ${1:-set}
+}
+
+_procd_add_array_data() {
+	while [ "$#" -gt 0 ]; do
+		json_add_string "" "$1"
+		shift
+	done
+}
+
+_procd_add_array() {
+	json_add_array "$1"
+	shift
+	_procd_add_array_data "$@"
+	json_close_array
+}
+
+_procd_add_table_data() {
+	while [ -n "$1" ]; do
+		local var="${1%%=*}"
+		local val="${1#*=}"
+		[ "$1" = "$val" ] && val=
+		json_add_string "$var" "$val"
+		shift
+	done
+}
+
+_procd_add_table() {
+	json_add_object "$1"
+	shift
+	_procd_add_table_data "$@"
+	json_close_object
+}
+
+_procd_open_instance() {
+	local name="$1"; shift
+
+	_PROCD_INSTANCE_SEQ="$(($_PROCD_INSTANCE_SEQ + 1))"
+	name="${name:-instance$_PROCD_INSTANCE_SEQ}"
+	json_add_object "$name"
+	[ -n "$TRACE_SYSCALLS" ] && json_add_boolean trace "1"
+}
+
+_procd_open_trigger() {
+	let '_procd_trigger_open = _procd_trigger_open + 1'
+	[ "$_procd_trigger_open" -gt 1 ] && return
+	json_add_array "triggers"
+}
+
+_procd_close_trigger() {
+	let '_procd_trigger_open = _procd_trigger_open - 1'
+	[ "$_procd_trigger_open" -lt 1 ] || return
+	json_close_array
+}
+
+_procd_open_data() {
+	let '_procd_data_open = _procd_data_open + 1'
+	[ "$_procd_data_open" -gt 1 ] && return
+	json_add_object "data"
+}
+
+_procd_close_data() {
+	let '_procd_data_open = _procd_data_open - 1'
+	[ "$_procd_data_open" -lt 1 ] || return
+	json_close_object
+}
+
+_procd_open_validate() {
+	json_select ..
+	json_add_array "validate"
+}
+
+_procd_close_validate() {
+	json_close_array
+	json_select triggers
+}
+
+_procd_add_jail() {
+	json_add_object "jail"
+	json_add_string name "$1"
+
+	shift
+	
+	for a in $@; do
+		case $a in
+		log)	json_add_boolean "log" "1";;
+		ubus)	json_add_boolean "ubus" "1";;
+		procfs)	json_add_boolean "procfs" "1";;
+		sysfs)	json_add_boolean "sysfs" "1";;
+		ronly)	json_add_boolean "ronly" "1";;
+		requirejail)	json_add_boolean "requirejail" "1";;
+		netns)	json_add_boolean "netns" "1";;
+		userns)	json_add_boolean "userns" "1";;
+		cgroupsns)	json_add_boolean "cgroupsns" "1";;
+		esac
+	done
+	json_add_object "mount"
+	json_close_object
+	json_close_object
+}
+
+_procd_add_jail_mount() {
+	local _json_no_warning=1
+
+	json_select "jail"
+	[ $? = 0 ] || return
+	json_select "mount"
+	[ $? = 0 ] || {
+		json_select ..
+		return
+	}
+	for a in $@; do
+		json_add_string "$a" "0"
+	done
+	json_select ..
+	json_select ..
+}
+
+_procd_add_jail_mount_rw() {
+	local _json_no_warning=1
+
+	json_select "jail"
+	[ $? = 0 ] || return
+	json_select "mount"
+	[ $? = 0 ] || {
+		json_select ..
+		return
+	}
+	for a in $@; do
+		json_add_string "$a" "1"
+	done
+	json_select ..
+	json_select ..
+}
+
+_procd_set_param() {
+	local type="$1"; shift
+
+	case "$type" in
+		env|data|limits)
+			_procd_add_table "$type" "$@"
+		;;
+		command|netdev|file|respawn|watch|watchdog)
+			_procd_add_array "$type" "$@"
+		;;
+		error)
+			json_add_array "$type"
+			json_add_string "" "$@"
+			json_close_array
+		;;
+		nice|term_timeout)
+			json_add_int "$type" "$1"
+		;;
+		reload_signal)
+			json_add_int "$type" $(kill -l "$1")
+		;;
+		pidfile|user|group|seccomp|capabilities|facility|\
+		extroot|overlaydir|tmpoverlaysize)
+			json_add_string "$type" "$1"
+		;;
+		stdout|stderr|no_new_privs)
+			json_add_boolean "$type" "$1"
+		;;
+	esac
+}
+
+_procd_add_timeout() {
+	[ "$PROCD_RELOAD_DELAY" -gt 0 ] && json_add_int "" "$PROCD_RELOAD_DELAY"
+	return 0
+}
+
+_procd_add_interface_trigger() {
+	json_add_array
+	_procd_add_array_data "$1"
+	shift
+
+	json_add_array
+	_procd_add_array_data "if"
+
+	json_add_array
+	_procd_add_array_data "eq" "interface" "$1"
+	shift
+	json_close_array
+
+	json_add_array
+	_procd_add_array_data "run_script" "$@"
+	json_close_array
+
+	json_close_array
+	_procd_add_timeout
+	json_close_array
+}
+
+_procd_add_reload_interface_trigger() {
+	local script=$(readlink "$initscript")
+	local name=$(basename ${script:-$initscript})
+
+	_procd_open_trigger
+	_procd_add_interface_trigger "interface.*" $1 /etc/init.d/$name reload
+	_procd_close_trigger
+}
+
+_procd_add_config_trigger() {
+	json_add_array
+	_procd_add_array_data "$1"
+	shift
+
+	json_add_array
+	_procd_add_array_data "if"
+
+	json_add_array
+	_procd_add_array_data "eq" "package" "$1"
+	shift
+	json_close_array
+
+	json_add_array
+	_procd_add_array_data "run_script" "$@"
+	json_close_array
+
+	json_close_array
+	_procd_add_timeout
+	json_close_array
+}
+
+_procd_add_mount_trigger() {
+	json_add_array
+	_procd_add_array_data "$1"
+	local action="$2"
+	local multi=0
+	shift ; shift
+
+	json_add_array
+	_procd_add_array_data "if"
+
+	if [ "$2" ]; then
+		json_add_array
+		_procd_add_array_data "or"
+		multi=1
+	fi
+
+	while [ "$1" ]; do
+		json_add_array
+		_procd_add_array_data "eq" "target" "$1"
+		shift
+		json_close_array
+	done
+
+	[ $multi = 1 ] && json_close_array
+
+	json_add_array
+	_procd_add_array_data "run_script" /etc/init.d/$name $action
+	json_close_array
+
+	json_close_array
+	_procd_add_timeout
+	json_close_array
+}
+
+_procd_add_action_mount_trigger() {
+	local action="$1"
+	shift
+	local mountpoints="$(procd_get_mountpoints "$@")"
+	[ "${mountpoints//[[:space:]]}" ] || return 0
+	local script=$(readlink "$initscript")
+	local name=$(basename ${script:-$initscript})
+
+	_procd_open_trigger
+	_procd_add_mount_trigger mount.add $action "$mountpoints"
+	_procd_close_trigger
+}
+
+procd_get_mountpoints() {
+	(
+		__procd_check_mount() {
+			local cfg="$1"
+			local path="${2%%/}/"
+			local target
+			config_get target "$cfg" target
+			target="${target%%/}/"
+			[ "$path" != "${path##$target}" ] && echo "${target%%/}"
+		}
+		local mpath
+		config_load fstab
+		for mpath in "$@"; do
+			config_foreach __procd_check_mount mount "$mpath"
+		done
+	) | sort -u
+}
+
+_procd_add_restart_mount_trigger() {
+	_procd_add_action_mount_trigger restart "$@"
+}
+
+_procd_add_reload_mount_trigger() {
+	_procd_add_action_mount_trigger reload "$@"
+}
+
+_procd_add_raw_trigger() {
+	json_add_array
+	_procd_add_array_data "$1"
+	shift
+	local timeout=$1
+	shift
+
+	json_add_array
+	json_add_array
+	_procd_add_array_data "run_script" "$@"
+	json_close_array
+	json_close_array
+
+	json_add_int "" "$timeout"
+
+	json_close_array
+}
+
+_procd_add_reload_trigger() {
+	local script=$(readlink "$initscript")
+	local name=$(basename ${script:-$initscript})
+	local file
+
+	_procd_open_trigger
+	for file in "$@"; do
+		_procd_add_config_trigger "config.change" "$file" /etc/init.d/$name reload
+	done
+	_procd_close_trigger
+}
+
+_procd_add_validation() {
+	_procd_open_validate
+	$@
+	_procd_close_validate
+}
+
+_procd_append_param() {
+	local type="$1"; shift
+	local _json_no_warning=1
+
+	json_select "$type"
+	[ $? = 0 ] || {
+		_procd_set_param "$type" "$@"
+		return
+	}
+	case "$type" in
+		env|data|limits)
+			_procd_add_table_data "$@"
+		;;
+		command|netdev|file|respawn|watch|watchdog)
+			_procd_add_array_data "$@"
+		;;
+		error)
+			json_add_string "" "$@"
+		;;
+	esac
+	json_select ..
+}
+
+_procd_close_instance() {
+	local respawn_vals
+	_json_no_warning=1
+	if json_select respawn ; then
+		json_get_values respawn_vals
+		if [ -z "$respawn_vals" ]; then
+			local respawn_threshold=$(uci_get system.@service[0].respawn_threshold)
+			local respawn_timeout=$(uci_get system.@service[0].respawn_timeout)
+			local respawn_retry=$(uci_get system.@service[0].respawn_retry)
+			_procd_add_array_data ${respawn_threshold:-3600} ${respawn_timeout:-5} ${respawn_retry:-5}
+		fi
+		json_select ..
+	fi
+
+	json_close_object
+}
+
+_procd_add_instance() {
+	_procd_open_instance
+	_procd_set_param command "$@"
+	_procd_close_instance
+}
+
+procd_running() {
+	local service="$1"
+	local instance="${2:-*}"
+	[ "$instance" = "*" ] || instance="'$instance'"
+
+	json_init
+	json_add_string name "$service"
+	local running=$(_procd_ubus_call list | jsonfilter -l 1 -e "@['$service'].instances[$instance].running")
+
+	[ "$running" = "true" ]
+}
+
+_procd_kill() {
+	local service="$1"
+	local instance="$2"
+
+	json_init
+	[ -n "$service" ] && json_add_string name "$service"
+	[ -n "$instance" ] && json_add_string instance "$instance"
+	_procd_ubus_call delete
+}
+
+_procd_send_signal() {
+	local service="$1"
+	local instance="$2"
+	local signal="$3"
+
+	case "$signal" in
+		[A-Z]*)	signal="$(kill -l "$signal" 2>/dev/null)" || return 1;;
+	esac
+
+	json_init
+	json_add_string name "$service"
+	[ -n "$instance" -a "$instance" != "*" ] && json_add_string instance "$instance"
+	[ -n "$signal" ] && json_add_int signal "$signal"
+	_procd_ubus_call signal
+}
+
+_procd_status() {
+	local service="$1"
+	local instance="$2"
+	local data
+
+	json_init
+	[ -n "$service" ] && json_add_string name "$service"
+
+	data=$(_procd_ubus_call list | jsonfilter -e '@["'"$service"'"]')
+	[ -z "$data" ] && { echo "inactive"; return 3; }
+
+	data=$(echo "$data" | jsonfilter -e '$.instances')
+	if [ -z "$data" ]; then
+		[ -z "$instance" ] && { echo "active with no instances"; return 0; }
+		data="[]"
+	fi
+
+	[ -n "$instance" ] && instance="\"$instance\"" || instance='*'
+	if [ -z "$(echo "$data" | jsonfilter -e '$['"$instance"']')" ]; then
+		echo "unknown instance $instance"; return 4
+	else
+		echo "running"; return 0
+	fi
+}
+
+procd_open_data() {
+	local name="$1"
+	json_set_namespace procd __procd_old_cb
+	json_add_object data
+}
+
+procd_close_data() {
+	json_close_object
+	json_set_namespace $__procd_old_cb
+}
+
+_procd_set_config_changed() {
+	local package="$1"
+
+	json_init
+	json_add_string type config.change
+	json_add_object data
+	json_add_string package "$package"
+	json_close_object
+
+	ubus call service event "$(json_dump)"
+}
+
+procd_add_mdns_service() {
+	local service proto port
+	service=$1; shift
+	proto=$1; shift
+	port=$1; shift
+	json_add_object "${service}_$port"
+	json_add_string "service" "_$service._$proto.local"
+	json_add_int port "$port"
+	[ -n "$1" ] && {
+		json_add_array txt
+		for txt in "$@"; do json_add_string "" "$txt"; done
+		json_select ..
+	}
+	json_select ..
+}
+
+procd_add_mdns() {
+	procd_open_data
+	json_add_object "mdns"
+	procd_add_mdns_service "$@"
+	json_close_object
+	procd_close_data
+}
+
+uci_validate_section()
+{
+	local _package="$1"
+	local _type="$2"
+	local _name="$3"
+	local _result
+	local _error
+	shift; shift; shift
+	_result=$(/sbin/validate_data "$_package" "$_type" "$_name" "$@" 2> /dev/null)
+	_error=$?
+	eval "$_result"
+	[ "$_error" = "0" ] || $(/sbin/validate_data "$_package" "$_type" "$_name" "$@" 1> /dev/null)
+	return $_error
+}
+
+uci_load_validate() {
+	local _package="$1"
+	local _type="$2"
+	local _name="$3"
+	local _function="$4"
+	local _option
+	local _result
+	shift; shift; shift; shift
+	for _option in "$@"; do
+		eval "local ${_option%%:*}"
+	done
+	uci_validate_section "$_package" "$_type" "$_name" "$@"
+	_result=$?
+	[ -n "$_function" ] || return $_result
+	eval "$_function \"\$_name\" \"\$_result\""
+}
+
+_procd_wrapper \
+	procd_open_service \
+	procd_close_service \
+	procd_add_instance \
+	procd_add_raw_trigger \
+	procd_add_config_trigger \
+	procd_add_interface_trigger \
+	procd_add_mount_trigger \
+	procd_add_reload_trigger \
+	procd_add_reload_interface_trigger \
+	procd_add_action_mount_trigger \
+	procd_add_reload_mount_trigger \
+	procd_add_restart_mount_trigger \
+	procd_open_trigger \
+	procd_close_trigger \
+	procd_open_instance \
+	procd_close_instance \
+	procd_open_validate \
+	procd_close_validate \
+	procd_add_jail \
+	procd_add_jail_mount \
+	procd_add_jail_mount_rw \
+	procd_set_param \
+	procd_append_param \
+	procd_add_validation \
+	procd_set_config_changed \
+	procd_kill \
+	procd_send_signal
diff --git a/ucentral-client/rootfs/lib/functions/service.sh b/ucentral-client/rootfs/lib/functions/service.sh
new file mode 100644
index 0000000..3d08e14
--- /dev/null
+++ b/ucentral-client/rootfs/lib/functions/service.sh
@@ -0,0 +1,103 @@
+#
+# service: simple wrapper around start-stop-daemon
+#
+# Usage: service ACTION EXEC ARGS...
+#
+# Action:
+#   -C	check if EXEC is alive
+#   -S	start EXEC, passing it ARGS as its arguments
+#   -K	kill EXEC, sending it a TERM signal if not specified otherwise
+#
+# Environment variables exposed:
+#   SERVICE_DAEMONIZE	run EXEC in background
+#   SERVICE_WRITE_PID	create a pid-file and use it for matching
+#   SERVICE_MATCH_EXEC	use EXEC command-line for matching (default)
+#   SERVICE_MATCH_NAME	use EXEC process name for matching
+#   SERVICE_USE_PID	assume EXEC create its own pid-file and use it for matching
+#   SERVICE_NAME	process name to use (default to EXEC file part)
+#   SERVICE_PID_FILE	pid file to use (default to /var/run/$SERVICE_NAME.pid)
+#   SERVICE_SIG		signal to send when using -K
+#   SERVICE_SIG_RELOAD	default signal used when reloading
+#   SERVICE_SIG_STOP	default signal used when stopping
+#   SERVICE_STOP_TIME	time to wait for a process to stop gracefully before killing it
+#   SERVICE_UID		user EXEC should be run as
+#   SERVICE_GID		group EXEC should be run as
+#
+#   SERVICE_DEBUG	don't do anything, but show what would be done
+#   SERVICE_QUIET	don't print anything
+#
+
+SERVICE_QUIET=1
+SERVICE_SIG_RELOAD="HUP"
+SERVICE_SIG_STOP="TERM"
+SERVICE_STOP_TIME=5
+SERVICE_MATCH_EXEC=1
+
+service() {
+	local ssd
+	local exec
+	local name
+	local start
+	ssd="${SERVICE_DEBUG:+echo }start-stop-daemon${SERVICE_QUIET:+ -q}"
+	case "$1" in
+	  -C)
+		ssd="$ssd -K -t"
+		;;
+	  -S)
+		ssd="$ssd -S${SERVICE_DAEMONIZE:+ -b}${SERVICE_WRITE_PID:+ -m}"
+		start=1
+		;;
+	  -K)
+		ssd="$ssd -K${SERVICE_SIG:+ -s $SERVICE_SIG}"
+		;;
+	  *)
+		echo "service: unknown ACTION '$1'" 1>&2
+		return 1
+	esac
+	shift
+	exec="$1"
+	[ -n "$exec" ] || {
+		echo "service: missing argument" 1>&2
+		return 1
+	}
+	[ -x "$exec" ] || {
+		echo "service: file '$exec' is not executable" 1>&2
+		return 1
+	}
+	name="${SERVICE_NAME:-${exec##*/}}"
+	[ -z "$SERVICE_USE_PID$SERVICE_WRITE_PID$SERVICE_PID_FILE" ] \
+		|| ssd="$ssd -p ${SERVICE_PID_FILE:-/var/run/$name.pid}"
+	[ -z "$SERVICE_MATCH_NAME" ] || ssd="$ssd -n $name"
+	ssd="$ssd${SERVICE_UID:+ -c $SERVICE_UID${SERVICE_GID:+:$SERVICE_GID}}"
+	[ -z "$SERVICE_MATCH_EXEC$start" ] || ssd="$ssd -x $exec"
+	shift
+	$ssd${1:+ -- "$@"}
+}
+
+service_check() {
+	service -C "$@"
+}
+
+service_signal() {
+	SERVICE_SIG="${SERVICE_SIG:-USR1}" service -K "$@"
+}
+
+service_start() {
+	service -S "$@"
+}
+
+service_stop() {
+	local try
+	SERVICE_SIG="${SERVICE_SIG:-$SERVICE_SIG_STOP}" service -K "$@" || return 1
+	while [ $((try++)) -lt $SERVICE_STOP_TIME ]; do
+		service -C "$@" || return 0
+		sleep 1
+	done
+	SERVICE_SIG="KILL" service -K "$@"
+	sleep 1
+	! service -C "$@"
+}
+
+service_reload() {
+	SERVICE_SIG="${SERVICE_SIG:-$SERVICE_SIG_RELOAD}" service -K "$@"
+}
diff --git a/ucentral-client/rootfs/lib/functions/system.sh b/ucentral-client/rootfs/lib/functions/system.sh
new file mode 100644
index 0000000..d06354b
--- /dev/null
+++ b/ucentral-client/rootfs/lib/functions/system.sh
@@ -0,0 +1,302 @@
+# Copyright (C) 2006-2013 OpenWrt.org
+
+. /lib/functions.sh
+. /usr/share/libubox/jshn.sh
+
+get_mac_binary() {
+	local path="$1"
+	local offset="$2"
+
+	if ! [ -e "$path" ]; then
+		echo "get_mac_binary: file $path not found!" >&2
+		return
+	fi
+
+	hexdump -v -n 6 -s $offset -e '5/1 "%02x:" 1/1 "%02x"' $path 2>/dev/null
+}
+
+get_mac_label_dt() {
+	local basepath="/proc/device-tree"
+	local macdevice="$(cat "$basepath/aliases/label-mac-device" 2>/dev/null)"
+	local macaddr
+
+	[ -n "$macdevice" ] || return
+
+	macaddr=$(get_mac_binary "$basepath/$macdevice/mac-address" 0 2>/dev/null)
+	[ -n "$macaddr" ] || macaddr=$(get_mac_binary "$basepath/$macdevice/local-mac-address" 0 2>/dev/null)
+
+	echo $macaddr
+}
+
+get_mac_label_json() {
+	local cfg="/etc/board.json"
+	local macaddr
+
+	[ -s "$cfg" ] || return
+
+	json_init
+	json_load "$(cat $cfg)"
+	if json_is_a system object; then
+		json_select system
+			json_get_var macaddr label_macaddr
+		json_select ..
+	fi
+
+	echo $macaddr
+}
+
+get_mac_label() {
+	local macaddr=$(get_mac_label_dt)
+
+	[ -n "$macaddr" ] || macaddr=$(get_mac_label_json)
+
+	echo $macaddr
+}
+
+find_mtd_chardev() {
+	local INDEX=$(find_mtd_index "$1")
+	local PREFIX=/dev/mtd
+
+	[ -d /dev/mtd ] && PREFIX=/dev/mtd/
+	echo "${INDEX:+$PREFIX$INDEX}"
+}
+
+mtd_get_mac_ascii() {
+	local mtdname="$1"
+	local key="$2"
+	local part
+	local mac_dirty
+
+	part=$(find_mtd_part "$mtdname")
+	if [ -z "$part" ]; then
+		echo "mtd_get_mac_ascii: partition $mtdname not found!" >&2
+		return
+	fi
+
+	mac_dirty=$(strings "$part" | sed -n 's/^'"$key"'=//p')
+
+	# "canonicalize" mac
+	[ -n "$mac_dirty" ] && macaddr_canonicalize "$mac_dirty"
+}
+
+mtd_get_mac_encrypted_arcadyan() {
+	local iv="00000000000000000000000000000000"
+	local key="2A4B303D7644395C3B2B7053553C5200"
+	local mac_dirty
+	local mtdname="$1"
+	local part
+	local size
+
+	part=$(find_mtd_part "$mtdname")
+	if [ -z "$part" ]; then
+		echo "mtd_get_mac_encrypted_arcadyan: partition $mtdname not found!" >&2
+		return
+	fi
+
+	# Config decryption and getting mac. Trying uencrypt and openssl utils.
+	size=$((0x$(dd if=$part skip=9 bs=1 count=4 2>/dev/null | hexdump -v -e '1/4 "%08x"')))
+	if [[ -f  "/usr/bin/uencrypt" ]]; then
+		mac_dirty=$(dd if=$part bs=1 count=$size skip=$((0x100)) 2>/dev/null | \
+			uencrypt -d -n -k $key -i $iv | grep mac | cut -c 5-)
+	elif [[ -f  "/usr/bin/openssl" ]]; then
+		mac_dirty=$(dd if=$part bs=1 count=$size skip=$((0x100)) 2>/dev/null | \
+			openssl aes-128-cbc -d -nopad -K $key -iv $iv | grep mac | cut -c 5-)
+	else
+		echo "mtd_get_mac_encrypted_arcadyan: Neither uencrypt nor openssl was found!" >&2
+		return
+	fi
+
+	# "canonicalize" mac
+	[ -n "$mac_dirty" ] && macaddr_canonicalize "$mac_dirty"
+}
+
+mtd_get_mac_encrypted_deco() {
+	local mtdname="$1"
+
+	if ! [ -e "$mtdname" ]; then
+		echo "mtd_get_mac_encrypted_deco: file $mtdname not found!" >&2
+		return
+	fi
+
+	tplink_key="3336303032384339"
+
+	key=$(dd if=$mtdname bs=1 skip=16 count=8 2>/dev/null | \
+		uencrypt -n -d -k $tplink_key -c des-ecb | hexdump -v -n 8 -e '1/1 "%02x"')
+
+	macaddr=$(dd if=$mtdname bs=1 skip=32 count=8 2>/dev/null | \
+		uencrypt -n -d -k $key -c des-ecb | hexdump -v -n 6 -e '5/1 "%02x:" 1/1 "%02x"')
+
+	echo $macaddr
+}
+
+mtd_get_mac_uci_config_ubi() {
+	local volumename="$1"
+
+	. /lib/upgrade/nand.sh
+
+	local ubidev=$(nand_attach_ubi $CI_UBIPART)
+	local part=$(nand_find_volume $ubidev $volumename)
+
+	cat "/dev/$part" | sed -n 's/^\s*option macaddr\s*'"'"'\?\([0-9A-F:]\+\)'"'"'\?/\1/Ip'
+}
+
+mtd_get_mac_text() {
+	local mtdname="$1"
+	local offset=$((${2:-0}))
+	local length="${3:-17}"
+	local part
+
+	part=$(find_mtd_part "$mtdname")
+	if [ -z "$part" ]; then
+		echo "mtd_get_mac_text: partition $mtdname not found!" >&2
+		return
+	fi
+
+	[ $((offset + length)) -le $(mtd_get_part_size "$mtdname") ] || return
+
+	macaddr_canonicalize $(dd bs=1 if="$part" skip="$offset" count="$length" 2>/dev/null)
+}
+
+mtd_get_mac_binary() {
+	local mtdname="$1"
+	local offset="$2"
+	local part
+
+	part=$(find_mtd_part "$mtdname")
+	get_mac_binary "$part" "$offset"
+}
+
+mtd_get_mac_binary_ubi() {
+	local mtdname="$1"
+	local offset="$2"
+
+	. /lib/upgrade/nand.sh
+
+	local ubidev=$(nand_find_ubi $CI_UBIPART)
+	local part=$(nand_find_volume $ubidev $1)
+
+	get_mac_binary "/dev/$part" "$offset"
+}
+
+mtd_get_part_size() {
+	local part_name=$1
+	local first dev size erasesize name
+	while read dev size erasesize name; do
+		name=${name#'"'}; name=${name%'"'}
+		if [ "$name" = "$part_name" ]; then
+			echo $((0x$size))
+			break
+		fi
+	done < /proc/mtd
+}
+
+mmc_get_mac_binary() {
+	local part_name="$1"
+	local offset="$2"
+	local part
+
+	part=$(find_mmc_part "$part_name")
+	get_mac_binary "$part" "$offset"
+}
+
+macaddr_add() {
+	local mac=$1
+	local val=$2
+	local oui=${mac%:*:*:*}
+	local nic=${mac#*:*:*:}
+
+	nic=$(printf "%06x" $((0x${nic//:/} + val & 0xffffff)) | sed 's/^\(.\{2\}\)\(.\{2\}\)\(.\{2\}\)/\1:\2:\3/')
+	echo $oui:$nic
+}
+
+macaddr_generate_from_mmc_cid() {
+	local mmc_dev=$1
+
+	local sd_hash=$(sha256sum /sys/class/block/$mmc_dev/device/cid)
+	local mac_base=$(macaddr_canonicalize "$(echo "${sd_hash}" | dd bs=1 count=12 2>/dev/null)")
+	echo "$(macaddr_unsetbit_mc "$(macaddr_setbit_la "${mac_base}")")"
+}
+
+macaddr_geteui() {
+	local mac=$1
+	local sep=$2
+
+	echo ${mac:9:2}$sep${mac:12:2}$sep${mac:15:2}
+}
+
+macaddr_setbit() {
+	local mac=$1
+	local bit=${2:-0}
+
+	[ $bit -gt 0 -a $bit -le 48 ] || return
+
+	printf "%012x" $(( 0x${mac//:/} | 2**(48-bit) )) | sed -e 's/\(.\{2\}\)/\1:/g' -e 's/:$//'
+}
+
+macaddr_unsetbit() {
+	local mac=$1
+	local bit=${2:-0}
+
+	[ $bit -gt 0 -a $bit -le 48 ] || return
+
+	printf "%012x" $(( 0x${mac//:/} & ~(2**(48-bit)) )) | sed -e 's/\(.\{2\}\)/\1:/g' -e 's/:$//'
+}
+
+macaddr_setbit_la() {
+	macaddr_setbit $1 7
+}
+
+macaddr_unsetbit_mc() {
+	local mac=$1
+
+	printf "%02x:%s" $((0x${mac%%:*} & ~0x01)) ${mac#*:}
+}
+
+macaddr_random() {
+	local randsrc=$(get_mac_binary /dev/urandom 0)
+	
+	echo "$(macaddr_unsetbit_mc "$(macaddr_setbit_la "${randsrc}")")"
+}
+
+macaddr_2bin() {
+	local mac=$1
+
+	echo -ne \\x${mac//:/\\x}
+}
+
+macaddr_canonicalize() {
+	local mac="$1"
+	local canon=""
+
+	mac=$(echo -n $mac | tr -d \")
+	[ ${#mac} -gt 17 ] && return
+	[ -n "${mac//[a-fA-F0-9\.: -]/}" ] && return
+
+	for octet in ${mac//[\.:-]/ }; do
+		case "${#octet}" in
+		1)
+			octet="0${octet}"
+			;;
+		2)
+			;;
+		4)
+			octet="${octet:0:2} ${octet:2:2}"
+			;;
+		12)
+			octet="${octet:0:2} ${octet:2:2} ${octet:4:2} ${octet:6:2} ${octet:8:2} ${octet:10:2}"
+			;;
+		*)
+			return
+			;;
+		esac
+		canon=${canon}${canon:+ }${octet}
+	done
+
+	[ ${#canon} -ne 17 ] && return
+
+	printf "%02x:%02x:%02x:%02x:%02x:%02x" 0x${canon// / 0x} 2>/dev/null
+}
+
+dt_is_enabled() {
+	grep -q okay "/proc/device-tree/$1/status"
+}
diff --git a/ucentral-client/rootfs/lib/functions/uci-defaults.sh b/ucentral-client/rootfs/lib/functions/uci-defaults.sh
new file mode 100644
index 0000000..133181e
--- /dev/null
+++ b/ucentral-client/rootfs/lib/functions/uci-defaults.sh
@@ -0,0 +1,697 @@
+. /lib/functions.sh
+. /usr/share/libubox/jshn.sh
+
+json_select_array() {
+	local _json_no_warning=1
+
+	json_select "$1"
+	[ $? = 0 ] && return
+
+	json_add_array "$1"
+	json_close_array
+
+	json_select "$1"
+}
+
+json_select_object() {
+	local _json_no_warning=1
+
+	json_select "$1"
+	[ $? = 0 ] && return
+
+	json_add_object "$1"
+	json_close_object
+
+	json_select "$1"
+}
+
+ucidef_set_interface() {
+	local network=$1; shift
+
+	[ -z "$network" ] && return
+
+	json_select_object network
+	json_select_object "$network"
+
+	while [ -n "$1" ]; do
+		local opt=$1; shift
+		local val=$1; shift
+
+		[ -n "$opt" -a -n "$val" ] || break
+
+		[ "$opt" = "device" -a "$val" != "${val/ //}" ] && {
+			json_select_array "ports"
+			for e in $val; do json_add_string "" "$e"; done
+			json_close_array
+		} || {
+			json_add_string "$opt" "$val"
+		}
+	done
+
+	if ! json_is_a protocol string; then
+		case "$network" in
+			lan) json_add_string protocol static ;;
+			wan) json_add_string protocol dhcp ;;
+			*) json_add_string protocol none ;;
+		esac
+	fi
+
+	json_select ..
+	json_select ..
+}
+
+ucidef_set_board_id() {
+	json_select_object model
+	json_add_string id "$1"
+	json_select ..
+}
+
+ucidef_set_model_name() {
+	json_select_object model
+	json_add_string name "$1"
+	json_select ..
+}
+
+ucidef_set_compat_version() {
+	json_select_object system
+	json_add_string compat_version "${1:-1.0}"
+	json_select ..
+}
+
+ucidef_set_interface_lan() {
+	ucidef_set_interface "lan" device "$1" protocol "${2:-static}"
+}
+
+ucidef_set_interface_wan() {
+	ucidef_set_interface "wan" device "$1" protocol "${2:-dhcp}"
+}
+
+ucidef_set_interfaces_lan_wan() {
+	local lan_if="$1"
+	local wan_if="$2"
+
+	ucidef_set_interface_lan "$lan_if"
+	ucidef_set_interface_wan "$wan_if"
+}
+
+ucidef_set_bridge_device() {
+	json_select_object bridge
+	json_add_string name "${1:-switch0}"
+	json_select ..
+}
+
+ucidef_set_bridge_mac() {
+	json_select_object bridge
+	json_add_string macaddr "${1}"
+	json_select ..
+}
+
+ucidef_set_network_device_mac() {
+	json_select_object "network-device"
+	json_select_object "${1}"
+	json_add_string macaddr "${2}"
+	json_select ..
+	json_select ..
+}
+
+ucidef_set_network_device_path() {
+	json_select_object "network_device"
+	json_select_object "$1"
+	json_add_string path "$2"
+	json_select ..
+	json_select ..
+}
+
+_ucidef_add_switch_port() {
+	# inherited: $num $device $need_tag $want_untag $role $index $prev_role
+	# inherited: $n_cpu $n_ports $n_vlan $cpu0 $cpu1 $cpu2 $cpu3 $cpu4 $cpu5
+
+	n_ports=$((n_ports + 1))
+
+	json_select_array ports
+		json_add_object
+			json_add_int num "$num"
+			[ -n "$device"     ] && json_add_string  device     "$device"
+			[ -n "$need_tag"   ] && json_add_boolean need_tag   "$need_tag"
+			[ -n "$want_untag" ] && json_add_boolean want_untag "$want_untag"
+			[ -n "$role"       ] && json_add_string  role       "$role"
+			[ -n "$index"      ] && json_add_int     index      "$index"
+		json_close_object
+	json_select ..
+
+	# record pointer to cpu entry for lookup in _ucidef_finish_switch_roles()
+	[ -n "$device" ] && {
+		export "cpu$n_cpu=$n_ports"
+		n_cpu=$((n_cpu + 1))
+	}
+
+	# create/append object to role list
+	[ -n "$role" ] && {
+		json_select_array roles
+
+		if [ "$role" != "$prev_role" ]; then
+			json_add_object
+				json_add_string role "$role"
+				json_add_string ports "$num"
+			json_close_object
+
+			prev_role="$role"
+			n_vlan=$((n_vlan + 1))
+		else
+			json_select_object "$n_vlan"
+				json_get_var port ports
+				json_add_string ports "$port $num"
+			json_select ..
+		fi
+
+		json_select ..
+	}
+}
+
+_ucidef_finish_switch_roles() {
+	# inherited: $name $n_cpu $n_vlan $cpu0 $cpu1 $cpu2 $cpu3 $cpu4 $cpu5
+	local index role roles num device need_tag want_untag port ports
+
+	json_select switch
+		json_select "$name"
+			json_get_keys roles roles
+		json_select ..
+	json_select ..
+
+	for index in $roles; do
+		eval "port=\$cpu$(((index - 1) % n_cpu))"
+
+		json_select switch
+			json_select "$name"
+				json_select ports
+					json_select "$port"
+						json_get_vars num device need_tag want_untag
+					json_select ..
+				json_select ..
+
+				if [ ${need_tag:-0} -eq 1 -o ${want_untag:-0} -ne 1 ]; then
+					num="${num}t"
+					device="${device}.${index}"
+				fi
+
+				json_select roles
+					json_select "$index"
+						json_get_vars role ports
+						json_add_string ports "$ports $num"
+						json_add_string device "$device"
+					json_select ..
+				json_select ..
+			json_select ..
+		json_select ..
+
+		json_select_object network
+			local devices
+
+			json_select_object "$role"
+				# attach previous interfaces (for multi-switch devices)
+				json_get_var devices device
+				if ! list_contains devices "$device"; then
+					devices="${devices:+$devices }$device"
+				fi
+			json_select ..
+		json_select ..
+
+		ucidef_set_interface "$role" device "$devices"
+	done
+}
+
+ucidef_set_ar8xxx_switch_mib() {
+	local name="$1"
+	local type="$2"
+	local interval="$3"
+
+	json_select_object switch
+		json_select_object "$name"
+			json_add_int ar8xxx_mib_type $type
+			json_add_int ar8xxx_mib_poll_interval $interval
+		json_select ..
+	json_select ..
+}
+
+ucidef_add_switch() {
+	local name="$1"; shift
+	local port num role device index need_tag prev_role
+	local cpu0 cpu1 cpu2 cpu3 cpu4 cpu5
+	local n_cpu=0 n_vlan=0 n_ports=0
+
+	json_select_object switch
+		json_select_object "$name"
+			json_add_boolean enable 1
+			json_add_boolean reset 1
+
+			for port in "$@"; do
+				case "$port" in
+					[0-9]*@*)
+						num="${port%%@*}"
+						device="${port##*@}"
+						need_tag=0
+						want_untag=0
+						[ "${num%t}" != "$num" ] && {
+							num="${num%t}"
+							need_tag=1
+						}
+						[ "${num%u}" != "$num" ] && {
+							num="${num%u}"
+							want_untag=1
+						}
+					;;
+					[0-9]*:*:[0-9]*)
+						num="${port%%:*}"
+						index="${port##*:}"
+						role="${port#[0-9]*:}"; role="${role%:*}"
+					;;
+					[0-9]*:*)
+						num="${port%%:*}"
+						role="${port##*:}"
+					;;
+				esac
+
+				if [ -n "$num" ] && [ -n "$device$role" ]; then
+					_ucidef_add_switch_port
+				fi
+
+				unset num device role index need_tag want_untag
+			done
+		json_select ..
+	json_select ..
+
+	_ucidef_finish_switch_roles
+}
+
+ucidef_add_switch_attr() {
+	local name="$1"
+	local key="$2"
+	local val="$3"
+
+	json_select_object switch
+		json_select_object "$name"
+
+		case "$val" in
+			true|false) [ "$val" != "true" ]; json_add_boolean "$key" $? ;;
+			[0-9]) json_add_int "$key" "$val" ;;
+			*) json_add_string "$key" "$val" ;;
+		esac
+
+		json_select ..
+	json_select ..
+}
+
+ucidef_add_switch_port_attr() {
+	local name="$1"
+	local port="$2"
+	local key="$3"
+	local val="$4"
+	local ports i num
+
+	json_select_object switch
+	json_select_object "$name"
+
+	json_get_keys ports ports
+	json_select_array ports
+
+	for i in $ports; do
+		json_select "$i"
+		json_get_var num num
+
+		if [ -n "$num" ] && [ $num -eq $port ]; then
+			json_select_object attr
+
+			case "$val" in
+				true|false) [ "$val" != "true" ]; json_add_boolean "$key" $? ;;
+				[0-9]) json_add_int "$key" "$val" ;;
+				*) json_add_string "$key" "$val" ;;
+			esac
+
+			json_select ..
+		fi
+
+		json_select ..
+	done
+
+	json_select ..
+	json_select ..
+	json_select ..
+}
+
+ucidef_set_interface_macaddr() {
+	local network="$1"
+	local macaddr="$2"
+
+	ucidef_set_interface "$network" macaddr "$macaddr"
+}
+
+ucidef_set_label_macaddr() {
+	local macaddr="$1"
+
+	json_select_object system
+		json_add_string label_macaddr "$macaddr"
+	json_select ..
+}
+
+ucidef_add_atm_bridge() {
+	local vpi="$1"
+	local vci="$2"
+	local encaps="$3"
+	local payload="$4"
+	local nameprefix="$5"
+
+	json_select_object dsl
+		json_select_object atmbridge
+			json_add_int vpi "$vpi"
+			json_add_int vci "$vci"
+			json_add_string encaps "$encaps"
+			json_add_string payload "$payload"
+			json_add_string nameprefix "$nameprefix"
+		json_select ..
+	json_select ..
+}
+
+ucidef_add_adsl_modem() {
+	local annex="$1"
+	local firmware="$2"
+
+	json_select_object dsl
+		json_select_object modem
+			json_add_string type "adsl"
+			json_add_string annex "$annex"
+			json_add_string firmware "$firmware"
+		json_select ..
+	json_select ..
+}
+
+ucidef_add_vdsl_modem() {
+	local annex="$1"
+	local tone="$2"
+	local xfer_mode="$3"
+
+	json_select_object dsl
+		json_select_object modem
+			json_add_string type "vdsl"
+			json_add_string annex "$annex"
+			json_add_string tone "$tone"
+			json_add_string xfer_mode "$xfer_mode"
+		json_select ..
+	json_select ..
+}
+
+ucidef_set_led_ataport() {
+	_ucidef_set_led_trigger "$1" "$2" "$3" ata"$4"
+}
+
+_ucidef_set_led_common() {
+	local cfg="led_$1"
+	local name="$2"
+	local sysfs="$3"
+
+	json_select_object led
+
+	json_select_object "$1"
+	json_add_string name "$name"
+	json_add_string sysfs "$sysfs"
+}
+
+ucidef_set_led_default() {
+	local default="$4"
+
+	_ucidef_set_led_common "$1" "$2" "$3"
+
+	json_add_string default "$default"
+	json_select ..
+
+	json_select ..
+}
+
+ucidef_set_led_heartbeat() {
+	_ucidef_set_led_common "$1" "$2" "$3"
+
+	json_add_string trigger heartbeat
+	json_select ..
+
+	json_select ..
+}
+
+ucidef_set_led_gpio() {
+	local gpio="$4"
+	local inverted="$5"
+
+	_ucidef_set_led_common "$1" "$2" "$3"
+
+	json_add_string trigger "$trigger"
+	json_add_string type gpio
+	json_add_int gpio "$gpio"
+	json_add_boolean inverted "$inverted"
+	json_select ..
+
+	json_select ..
+}
+
+ucidef_set_led_ide() {
+	_ucidef_set_led_trigger "$1" "$2" "$3" disk-activity
+}
+
+ucidef_set_led_netdev() {
+	local dev="$4"
+	local mode="${5:-link tx rx}"
+
+	_ucidef_set_led_common "$1" "$2" "$3"
+
+	json_add_string type netdev
+	json_add_string device "$dev"
+	json_add_string mode "$mode"
+	json_select ..
+
+	json_select ..
+}
+
+ucidef_set_led_oneshot() {
+	_ucidef_set_led_timer $1 $2 $3 "oneshot" $4 $5
+}
+
+ucidef_set_led_portstate() {
+	local port_state="$4"
+
+	_ucidef_set_led_common "$1" "$2" "$3"
+
+	json_add_string trigger port_state
+	json_add_string type portstate
+	json_add_string port_state "$port_state"
+	json_select ..
+
+	json_select ..
+}
+
+ucidef_set_led_rssi() {
+	local iface="$4"
+	local minq="$5"
+	local maxq="$6"
+	local offset="${7:-0}"
+	local factor="${8:-1}"
+
+	_ucidef_set_led_common "$1" "$2" "$3"
+
+	json_add_string type rssi
+	json_add_string name "$name"
+	json_add_string iface "$iface"
+	json_add_string minq "$minq"
+	json_add_string maxq "$maxq"
+	json_add_string offset "$offset"
+	json_add_string factor "$factor"
+	json_select ..
+
+	json_select ..
+}
+
+ucidef_set_led_switch() {
+	local trigger_name="$4"
+	local port_mask="$5"
+	local speed_mask="$6"
+	local mode="$7"
+
+	_ucidef_set_led_common "$1" "$2" "$3"
+
+	json_add_string trigger "$trigger_name"
+	json_add_string type switch
+	json_add_string mode "$mode"
+	json_add_string port_mask "$port_mask"
+	json_add_string speed_mask "$speed_mask"
+	json_select ..
+
+	json_select ..
+}
+
+_ucidef_set_led_timer() {
+	local trigger_name="$4"
+	local delayon="$5"
+	local delayoff="$6"
+
+	_ucidef_set_led_common "$1" "$2" "$3"
+
+	json_add_string type "$trigger_name"
+	json_add_string trigger "$trigger_name"
+	json_add_int delayon "$delayon"
+	json_add_int delayoff "$delayoff"
+	json_select ..
+
+	json_select ..
+}
+
+ucidef_set_led_timer() {
+	_ucidef_set_led_timer $1 $2 $3 "timer" $4 $5
+}
+
+_ucidef_set_led_trigger() {
+	local trigger_name="$4"
+
+	_ucidef_set_led_common "$1" "$2" "$3"
+
+	json_add_string trigger "$trigger_name"
+	json_select ..
+
+	json_select ..
+}
+
+ucidef_set_led_usbdev() {
+	local dev="$4"
+
+	_ucidef_set_led_common "$1" "$2" "$3"
+
+	json_add_string type usb
+	json_add_string device "$dev"
+	json_select ..
+
+	json_select ..
+}
+
+ucidef_set_led_usbhost() {
+	_ucidef_set_led_trigger "$1" "$2" "$3" usb-host
+}
+
+ucidef_set_led_usbport() {
+	local obj="$1"
+	local name="$2"
+	local sysfs="$3"
+	shift
+	shift
+	shift
+
+	_ucidef_set_led_common "$obj" "$name" "$sysfs"
+
+	json_add_string type usbport
+	json_select_array ports
+		for port in "$@"; do
+			json_add_string port "$port"
+		done
+	json_select ..
+	json_select ..
+
+	json_select ..
+}
+
+ucidef_set_led_wlan() {
+	_ucidef_set_led_trigger "$1" "$2" "$3" "$4"
+}
+
+ucidef_set_rssimon() {
+	local dev="$1"
+	local refresh="$2"
+	local threshold="$3"
+
+	json_select_object rssimon
+
+	json_select_object "$dev"
+	[ -n "$refresh" ] && json_add_int refresh "$refresh"
+	[ -n "$threshold" ] && json_add_int threshold "$threshold"
+	json_select ..
+
+	json_select ..
+}
+
+ucidef_add_gpio_switch() {
+	local cfg="$1"
+	local name="$2"
+	local pin="$3"
+	local default="${4:-0}"
+
+	json_select_object gpioswitch
+		json_select_object "$cfg"
+			json_add_string name "$name"
+			json_add_string pin "$pin"
+			json_add_int default "$default"
+		json_select ..
+	json_select ..
+}
+
+ucidef_set_hostname() {
+	local hostname="$1"
+
+	json_select_object system
+		json_add_string hostname "$hostname"
+	json_select ..
+}
+
+ucidef_set_wifi_scanning() {
+	local path="$1"
+
+	json_select_object wifi
+		json_select_object $path
+			json_add_boolean scanning 1 
+		json_select ..
+	json_select ..
+}
+
+ucidef_set_wifi_country() {
+	json_select_object wifi
+		json_add_string country "$1"
+	json_select ..
+}
+
+ucidef_set_ntpserver() {
+	local server
+
+	json_select_object system
+		json_select_array ntpserver
+			for server in "$@"; do
+				json_add_string "" "$server"
+			done
+		json_select ..
+	json_select ..
+}
+
+ucidef_add_wlan() {
+	local path="$1"; shift
+
+	ucidef_wlan_idx=${ucidef_wlan_idx:-0}
+
+	json_select_object wlan
+	json_select_object "wl$ucidef_wlan_idx"
+	json_add_string path "$path"
+	json_add_fields "$@"
+	json_select ..
+	json_select ..
+
+	ucidef_wlan_idx="$((ucidef_wlan_idx + 1))"
+}
+
+board_config_update() {
+	json_init
+	[ -f ${CFG} ] && json_load "$(cat ${CFG})"
+
+	# auto-initialize model id and name if applicable
+	if ! json_is_a model object; then
+		json_select_object model
+			[ -f "/tmp/sysinfo/board_name" ] && \
+				json_add_string id "$(cat /tmp/sysinfo/board_name)"
+			[ -f "/tmp/sysinfo/model" ] && \
+				json_add_string name "$(cat /tmp/sysinfo/model)"
+		json_select ..
+	fi
+}
+
+board_config_flush() {
+	json_dump -i -o ${CFG}
+}
diff --git a/ucentral-client/rootfs/lib/ld-musl-x86_64.so.1 b/ucentral-client/rootfs/lib/ld-musl-x86_64.so.1
new file mode 120000
index 0000000..79ae2d5
--- /dev/null
+++ b/ucentral-client/rootfs/lib/ld-musl-x86_64.so.1
@@ -0,0 +1 @@
+libc.so
\ No newline at end of file
diff --git a/ucentral-client/rootfs/lib/libatomic.so.1 b/ucentral-client/rootfs/lib/libatomic.so.1
new file mode 120000
index 0000000..5841e4b
--- /dev/null
+++ b/ucentral-client/rootfs/lib/libatomic.so.1
@@ -0,0 +1 @@
+libatomic.so.1.2.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/lib/libatomic.so.1.2.0 b/ucentral-client/rootfs/lib/libatomic.so.1.2.0
new file mode 100755
index 0000000..e7d4ecc
Binary files /dev/null and b/ucentral-client/rootfs/lib/libatomic.so.1.2.0 differ
diff --git a/ucentral-client/rootfs/lib/libblobmsg_json.so.20240329 b/ucentral-client/rootfs/lib/libblobmsg_json.so.20240329
new file mode 100644
index 0000000..a3ff38e
Binary files /dev/null and b/ucentral-client/rootfs/lib/libblobmsg_json.so.20240329 differ
diff --git a/ucentral-client/rootfs/lib/libc.so b/ucentral-client/rootfs/lib/libc.so
new file mode 100755
index 0000000..9fd58ea
Binary files /dev/null and b/ucentral-client/rootfs/lib/libc.so differ
diff --git a/ucentral-client/rootfs/lib/libfstools.so b/ucentral-client/rootfs/lib/libfstools.so
new file mode 100644
index 0000000..c7f0a3d
Binary files /dev/null and b/ucentral-client/rootfs/lib/libfstools.so differ
diff --git a/ucentral-client/rootfs/lib/libgcc_s.so.1 b/ucentral-client/rootfs/lib/libgcc_s.so.1
new file mode 100644
index 0000000..dc62c8a
Binary files /dev/null and b/ucentral-client/rootfs/lib/libgcc_s.so.1 differ
diff --git a/ucentral-client/rootfs/lib/libjson_script.so.20240329 b/ucentral-client/rootfs/lib/libjson_script.so.20240329
new file mode 100644
index 0000000..39921fc
Binary files /dev/null and b/ucentral-client/rootfs/lib/libjson_script.so.20240329 differ
diff --git a/ucentral-client/rootfs/lib/libpreload-seccomp.so b/ucentral-client/rootfs/lib/libpreload-seccomp.so
new file mode 100644
index 0000000..0339c94
Binary files /dev/null and b/ucentral-client/rootfs/lib/libpreload-seccomp.so differ
diff --git a/ucentral-client/rootfs/lib/libpreload-trace.so b/ucentral-client/rootfs/lib/libpreload-trace.so
new file mode 100644
index 0000000..6c94f5f
Binary files /dev/null and b/ucentral-client/rootfs/lib/libpreload-trace.so differ
diff --git a/ucentral-client/rootfs/lib/libsetlbf.so b/ucentral-client/rootfs/lib/libsetlbf.so
new file mode 100644
index 0000000..fea9d11
Binary files /dev/null and b/ucentral-client/rootfs/lib/libsetlbf.so differ
diff --git a/ucentral-client/rootfs/lib/libubox.so.20240329 b/ucentral-client/rootfs/lib/libubox.so.20240329
new file mode 100644
index 0000000..8b91783
Binary files /dev/null and b/ucentral-client/rootfs/lib/libubox.so.20240329 differ
diff --git a/ucentral-client/rootfs/lib/libubus.so.20230605 b/ucentral-client/rootfs/lib/libubus.so.20230605
new file mode 100644
index 0000000..d4ee94b
Binary files /dev/null and b/ucentral-client/rootfs/lib/libubus.so.20230605 differ
diff --git a/ucentral-client/rootfs/lib/libuci.so b/ucentral-client/rootfs/lib/libuci.so
new file mode 100755
index 0000000..c4fe06d
Binary files /dev/null and b/ucentral-client/rootfs/lib/libuci.so differ
diff --git a/ucentral-client/rootfs/lib/libustream-ssl.so b/ucentral-client/rootfs/lib/libustream-ssl.so
new file mode 100644
index 0000000..a2c4e24
Binary files /dev/null and b/ucentral-client/rootfs/lib/libustream-ssl.so differ
diff --git a/ucentral-client/rootfs/lib/libvalidate.so b/ucentral-client/rootfs/lib/libvalidate.so
new file mode 100644
index 0000000..4c9abf8
Binary files /dev/null and b/ucentral-client/rootfs/lib/libvalidate.so differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/act_bpf.ko b/ucentral-client/rootfs/lib/modules/5.15.132/act_bpf.ko
new file mode 100644
index 0000000..035b286
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/act_bpf.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/act_csum.ko b/ucentral-client/rootfs/lib/modules/5.15.132/act_csum.ko
new file mode 100644
index 0000000..843ac0f
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/act_csum.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/act_gact.ko b/ucentral-client/rootfs/lib/modules/5.15.132/act_gact.ko
new file mode 100644
index 0000000..4f1b1e9
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/act_gact.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/act_mirred.ko b/ucentral-client/rootfs/lib/modules/5.15.132/act_mirred.ko
new file mode 100644
index 0000000..5edd819
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/act_mirred.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/act_pedit.ko b/ucentral-client/rootfs/lib/modules/5.15.132/act_pedit.ko
new file mode 100644
index 0000000..a5b8849
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/act_pedit.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/act_simple.ko b/ucentral-client/rootfs/lib/modules/5.15.132/act_simple.ko
new file mode 100644
index 0000000..e7aabbd
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/act_simple.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/act_skbedit.ko b/ucentral-client/rootfs/lib/modules/5.15.132/act_skbedit.ko
new file mode 100644
index 0000000..f377dab
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/act_skbedit.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/act_vlan.ko b/ucentral-client/rootfs/lib/modules/5.15.132/act_vlan.ko
new file mode 100644
index 0000000..b0a34b0
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/act_vlan.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/amd-xgbe.ko b/ucentral-client/rootfs/lib/modules/5.15.132/amd-xgbe.ko
new file mode 100644
index 0000000..d3331fb
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/amd-xgbe.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/batman-adv.ko b/ucentral-client/rootfs/lib/modules/5.15.132/batman-adv.ko
new file mode 100644
index 0000000..af72ec3
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/batman-adv.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/bnx2.ko b/ucentral-client/rootfs/lib/modules/5.15.132/bnx2.ko
new file mode 100644
index 0000000..97ecf1b
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/bnx2.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/button-hotplug.ko b/ucentral-client/rootfs/lib/modules/5.15.132/button-hotplug.ko
new file mode 100644
index 0000000..cf8af9e
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/button-hotplug.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/cdc-acm.ko b/ucentral-client/rootfs/lib/modules/5.15.132/cdc-acm.ko
new file mode 100644
index 0000000..3f6a80a
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/cdc-acm.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/cfg80211.ko b/ucentral-client/rootfs/lib/modules/5.15.132/cfg80211.ko
new file mode 100644
index 0000000..57e1c31
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/cfg80211.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/chacha-x86_64.ko b/ucentral-client/rootfs/lib/modules/5.15.132/chacha-x86_64.ko
new file mode 100644
index 0000000..bb4d5ed
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/chacha-x86_64.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/cls_basic.ko b/ucentral-client/rootfs/lib/modules/5.15.132/cls_basic.ko
new file mode 100644
index 0000000..b4bb052
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/cls_basic.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/cls_bpf.ko b/ucentral-client/rootfs/lib/modules/5.15.132/cls_bpf.ko
new file mode 100644
index 0000000..fbbd619
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/cls_bpf.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/cls_flow.ko b/ucentral-client/rootfs/lib/modules/5.15.132/cls_flow.ko
new file mode 100644
index 0000000..096df55
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/cls_flow.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/cls_flower.ko b/ucentral-client/rootfs/lib/modules/5.15.132/cls_flower.ko
new file mode 100644
index 0000000..50a48f6
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/cls_flower.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/cls_fw.ko b/ucentral-client/rootfs/lib/modules/5.15.132/cls_fw.ko
new file mode 100644
index 0000000..f3729f7
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/cls_fw.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/cls_matchall.ko b/ucentral-client/rootfs/lib/modules/5.15.132/cls_matchall.ko
new file mode 100644
index 0000000..2aee060
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/cls_matchall.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/cls_route.ko b/ucentral-client/rootfs/lib/modules/5.15.132/cls_route.ko
new file mode 100644
index 0000000..e2c4e59
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/cls_route.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/cls_u32.ko b/ucentral-client/rootfs/lib/modules/5.15.132/cls_u32.ko
new file mode 100644
index 0000000..7035a22
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/cls_u32.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/cmac.ko b/ucentral-client/rootfs/lib/modules/5.15.132/cmac.ko
new file mode 100644
index 0000000..7586674
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/cmac.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/compat.ko b/ucentral-client/rootfs/lib/modules/5.15.132/compat.ko
new file mode 100644
index 0000000..c46412f
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/compat.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/crc-ccitt.ko b/ucentral-client/rootfs/lib/modules/5.15.132/crc-ccitt.ko
new file mode 100644
index 0000000..9fa1175
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/crc-ccitt.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/curve25519-x86_64.ko b/ucentral-client/rootfs/lib/modules/5.15.132/curve25519-x86_64.ko
new file mode 100644
index 0000000..4180d57
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/curve25519-x86_64.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/drbg.ko b/ucentral-client/rootfs/lib/modules/5.15.132/drbg.ko
new file mode 100644
index 0000000..48fb853
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/drbg.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/e1000.ko b/ucentral-client/rootfs/lib/modules/5.15.132/e1000.ko
new file mode 100644
index 0000000..f1b5694
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/e1000.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/e1000e.ko b/ucentral-client/rootfs/lib/modules/5.15.132/e1000e.ko
new file mode 100644
index 0000000..0ab7218
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/e1000e.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/em_cmp.ko b/ucentral-client/rootfs/lib/modules/5.15.132/em_cmp.ko
new file mode 100644
index 0000000..9491bea
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/em_cmp.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/em_meta.ko b/ucentral-client/rootfs/lib/modules/5.15.132/em_meta.ko
new file mode 100644
index 0000000..fcca6b1
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/em_meta.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/em_nbyte.ko b/ucentral-client/rootfs/lib/modules/5.15.132/em_nbyte.ko
new file mode 100644
index 0000000..29e76a7
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/em_nbyte.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/em_text.ko b/ucentral-client/rootfs/lib/modules/5.15.132/em_text.ko
new file mode 100644
index 0000000..4385dc6
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/em_text.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/em_u32.ko b/ucentral-client/rootfs/lib/modules/5.15.132/em_u32.ko
new file mode 100644
index 0000000..de53b20
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/em_u32.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/ena.ko b/ucentral-client/rootfs/lib/modules/5.15.132/ena.ko
new file mode 100644
index 0000000..024a6d7
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/ena.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/fat.ko b/ucentral-client/rootfs/lib/modules/5.15.132/fat.ko
new file mode 100644
index 0000000..e148bbf
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/fat.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/forcedeth.ko b/ucentral-client/rootfs/lib/modules/5.15.132/forcedeth.ko
new file mode 100644
index 0000000..8a30008
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/forcedeth.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/gre.ko b/ucentral-client/rootfs/lib/modules/5.15.132/gre.ko
new file mode 100644
index 0000000..2fe4b3d
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/gre.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/hmac.ko b/ucentral-client/rootfs/lib/modules/5.15.132/hmac.ko
new file mode 100644
index 0000000..c8892e4
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/hmac.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/i2c-dev.ko b/ucentral-client/rootfs/lib/modules/5.15.132/i2c-dev.ko
new file mode 100644
index 0000000..5dcc3a7
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/i2c-dev.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/ifb.ko b/ucentral-client/rootfs/lib/modules/5.15.132/ifb.ko
new file mode 100644
index 0000000..c0bcfc2
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/ifb.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/igb.ko b/ucentral-client/rootfs/lib/modules/5.15.132/igb.ko
new file mode 100644
index 0000000..4c0db34
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/igb.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/igc.ko b/ucentral-client/rootfs/lib/modules/5.15.132/igc.ko
new file mode 100644
index 0000000..aac8d9f
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/igc.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/ip6_gre.ko b/ucentral-client/rootfs/lib/modules/5.15.132/ip6_gre.ko
new file mode 100644
index 0000000..93d1365
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/ip6_gre.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/ip6_tunnel.ko b/ucentral-client/rootfs/lib/modules/5.15.132/ip6_tunnel.ko
new file mode 100644
index 0000000..ae61cd5
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/ip6_tunnel.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/ip6_udp_tunnel.ko b/ucentral-client/rootfs/lib/modules/5.15.132/ip6_udp_tunnel.ko
new file mode 100644
index 0000000..2ee09e7
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/ip6_udp_tunnel.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/ip_gre.ko b/ucentral-client/rootfs/lib/modules/5.15.132/ip_gre.ko
new file mode 100644
index 0000000..e5f0411
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/ip_gre.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/ip_tables.ko b/ucentral-client/rootfs/lib/modules/5.15.132/ip_tables.ko
new file mode 100644
index 0000000..4d06f5a
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/ip_tables.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/ip_tunnel.ko b/ucentral-client/rootfs/lib/modules/5.15.132/ip_tunnel.ko
new file mode 100644
index 0000000..876de96
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/ip_tunnel.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/ipt_REJECT.ko b/ucentral-client/rootfs/lib/modules/5.15.132/ipt_REJECT.ko
new file mode 100644
index 0000000..e31f4c3
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/ipt_REJECT.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/iptable_filter.ko b/ucentral-client/rootfs/lib/modules/5.15.132/iptable_filter.ko
new file mode 100644
index 0000000..3065665
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/iptable_filter.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/iptable_mangle.ko b/ucentral-client/rootfs/lib/modules/5.15.132/iptable_mangle.ko
new file mode 100644
index 0000000..4cbf534
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/iptable_mangle.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/ixgbe.ko b/ucentral-client/rootfs/lib/modules/5.15.132/ixgbe.ko
new file mode 100644
index 0000000..6dfda01
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/ixgbe.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/jitterentropy_rng.ko b/ucentral-client/rootfs/lib/modules/5.15.132/jitterentropy_rng.ko
new file mode 100644
index 0000000..adb88ff
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/jitterentropy_rng.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/libchacha.ko b/ucentral-client/rootfs/lib/modules/5.15.132/libchacha.ko
new file mode 100644
index 0000000..e2681e6
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/libchacha.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/libchacha20poly1305.ko b/ucentral-client/rootfs/lib/modules/5.15.132/libchacha20poly1305.ko
new file mode 100644
index 0000000..ef1aa54
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/libchacha20poly1305.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/libcrc32c.ko b/ucentral-client/rootfs/lib/modules/5.15.132/libcrc32c.ko
new file mode 100644
index 0000000..1fb6275
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/libcrc32c.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/libcurve25519-generic.ko b/ucentral-client/rootfs/lib/modules/5.15.132/libcurve25519-generic.ko
new file mode 100644
index 0000000..8da23f8
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/libcurve25519-generic.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/libcurve25519.ko b/ucentral-client/rootfs/lib/modules/5.15.132/libcurve25519.ko
new file mode 100644
index 0000000..b299980
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/libcurve25519.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/libphy.ko b/ucentral-client/rootfs/lib/modules/5.15.132/libphy.ko
new file mode 100644
index 0000000..de409b6
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/libphy.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/libpoly1305.ko b/ucentral-client/rootfs/lib/modules/5.15.132/libpoly1305.ko
new file mode 100644
index 0000000..5f15100
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/libpoly1305.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/lzo-rle.ko b/ucentral-client/rootfs/lib/modules/5.15.132/lzo-rle.ko
new file mode 100644
index 0000000..4a2d61c
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/lzo-rle.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/lzo.ko b/ucentral-client/rootfs/lib/modules/5.15.132/lzo.ko
new file mode 100644
index 0000000..7ce179f
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/lzo.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/lzo_compress.ko b/ucentral-client/rootfs/lib/modules/5.15.132/lzo_compress.ko
new file mode 100644
index 0000000..728d718
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/lzo_compress.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/lzo_decompress.ko b/ucentral-client/rootfs/lib/modules/5.15.132/lzo_decompress.ko
new file mode 100644
index 0000000..d06dab4
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/lzo_decompress.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/mac80211.ko b/ucentral-client/rootfs/lib/modules/5.15.132/mac80211.ko
new file mode 100644
index 0000000..91d206c
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/mac80211.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/mdio.ko b/ucentral-client/rootfs/lib/modules/5.15.132/mdio.ko
new file mode 100644
index 0000000..1276e23
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/mdio.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/mdio_devres.ko b/ucentral-client/rootfs/lib/modules/5.15.132/mdio_devres.ko
new file mode 100644
index 0000000..4dea7e5
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/mdio_devres.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nf_conncount.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nf_conncount.ko
new file mode 100644
index 0000000..c7ca333
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nf_conncount.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nf_conntrack.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nf_conntrack.ko
new file mode 100644
index 0000000..a8cdfa1
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nf_conntrack.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nf_conntrack_netlink.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nf_conntrack_netlink.ko
new file mode 100644
index 0000000..f523da4
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nf_conntrack_netlink.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nf_defrag_ipv4.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nf_defrag_ipv4.ko
new file mode 100644
index 0000000..868eff7
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nf_defrag_ipv4.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nf_defrag_ipv6.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nf_defrag_ipv6.ko
new file mode 100644
index 0000000..044aed6
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nf_defrag_ipv6.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nf_flow_table.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nf_flow_table.ko
new file mode 100644
index 0000000..c0ee099
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nf_flow_table.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nf_flow_table_inet.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nf_flow_table_inet.ko
new file mode 100644
index 0000000..94832c8
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nf_flow_table_inet.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nf_flow_table_ipv4.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nf_flow_table_ipv4.ko
new file mode 100644
index 0000000..81f17be
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nf_flow_table_ipv4.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nf_flow_table_ipv6.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nf_flow_table_ipv6.ko
new file mode 100644
index 0000000..dc46cf6
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nf_flow_table_ipv6.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nf_log_syslog.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nf_log_syslog.ko
new file mode 100644
index 0000000..6eeec8f
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nf_log_syslog.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nf_nat.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nf_nat.ko
new file mode 100644
index 0000000..6bc434a
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nf_nat.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nf_reject_ipv4.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nf_reject_ipv4.ko
new file mode 100644
index 0000000..33f0008
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nf_reject_ipv4.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nf_reject_ipv6.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nf_reject_ipv6.ko
new file mode 100644
index 0000000..78abd92
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nf_reject_ipv6.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nf_tables.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nf_tables.ko
new file mode 100644
index 0000000..a21ecd0
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nf_tables.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nfnetlink.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nfnetlink.ko
new file mode 100644
index 0000000..e99b8fd
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nfnetlink.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_chain_nat.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_chain_nat.ko
new file mode 100644
index 0000000..1f33b36
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_chain_nat.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_counter.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_counter.ko
new file mode 100644
index 0000000..c25f44b
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_counter.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_ct.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_ct.ko
new file mode 100644
index 0000000..5780fa5
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_ct.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_fib.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_fib.ko
new file mode 100644
index 0000000..5bb2d0e
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_fib.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_fib_inet.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_fib_inet.ko
new file mode 100644
index 0000000..671a2d4
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_fib_inet.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_fib_ipv4.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_fib_ipv4.ko
new file mode 100644
index 0000000..36b04d1
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_fib_ipv4.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_fib_ipv6.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_fib_ipv6.ko
new file mode 100644
index 0000000..50e2bbe
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_fib_ipv6.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_flow_offload.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_flow_offload.ko
new file mode 100644
index 0000000..9fa78d3
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_flow_offload.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_hash.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_hash.ko
new file mode 100644
index 0000000..f70a719
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_hash.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_limit.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_limit.ko
new file mode 100644
index 0000000..764e7cb
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_limit.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_log.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_log.ko
new file mode 100644
index 0000000..1eecc13
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_log.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_masq.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_masq.ko
new file mode 100644
index 0000000..cdffd26
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_masq.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_nat.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_nat.ko
new file mode 100644
index 0000000..38ee818
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_nat.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_numgen.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_numgen.ko
new file mode 100644
index 0000000..0f9c8fa
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_numgen.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_objref.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_objref.ko
new file mode 100644
index 0000000..d075efe
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_objref.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_quota.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_quota.ko
new file mode 100644
index 0000000..4589ead
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_quota.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_redir.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_redir.ko
new file mode 100644
index 0000000..414eb33
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_redir.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_reject.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_reject.ko
new file mode 100644
index 0000000..f7972aa
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_reject.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_reject_inet.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_reject_inet.ko
new file mode 100644
index 0000000..bba759c
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_reject_inet.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_reject_ipv4.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_reject_ipv4.ko
new file mode 100644
index 0000000..2d89b1a
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_reject_ipv4.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nft_reject_ipv6.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nft_reject_ipv6.ko
new file mode 100644
index 0000000..e0acd82
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nft_reject_ipv6.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nls_cp437.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nls_cp437.ko
new file mode 100644
index 0000000..9689d76
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nls_cp437.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nls_iso8859-1.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nls_iso8859-1.ko
new file mode 100644
index 0000000..6530e76
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nls_iso8859-1.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/nls_utf8.ko b/ucentral-client/rootfs/lib/modules/5.15.132/nls_utf8.ko
new file mode 100644
index 0000000..a85004e
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/nls_utf8.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/poly1305-x86_64.ko b/ucentral-client/rootfs/lib/modules/5.15.132/poly1305-x86_64.ko
new file mode 100644
index 0000000..27a9a8b
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/poly1305-x86_64.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/ppp_async.ko b/ucentral-client/rootfs/lib/modules/5.15.132/ppp_async.ko
new file mode 100644
index 0000000..4ff2bf9
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/ppp_async.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/ppp_generic.ko b/ucentral-client/rootfs/lib/modules/5.15.132/ppp_generic.ko
new file mode 100644
index 0000000..6664aea
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/ppp_generic.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/pppoe.ko b/ucentral-client/rootfs/lib/modules/5.15.132/pppoe.ko
new file mode 100644
index 0000000..5661034
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/pppoe.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/pppox.ko b/ucentral-client/rootfs/lib/modules/5.15.132/pppox.ko
new file mode 100644
index 0000000..c38ee88
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/pppox.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/r8169.ko b/ucentral-client/rootfs/lib/modules/5.15.132/r8169.ko
new file mode 100644
index 0000000..ddf5c9b
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/r8169.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/realtek.ko b/ucentral-client/rootfs/lib/modules/5.15.132/realtek.ko
new file mode 100644
index 0000000..2e54134
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/realtek.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/sch_cake.ko b/ucentral-client/rootfs/lib/modules/5.15.132/sch_cake.ko
new file mode 100644
index 0000000..45486bb
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/sch_cake.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/sch_codel.ko b/ucentral-client/rootfs/lib/modules/5.15.132/sch_codel.ko
new file mode 100644
index 0000000..446f74c
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/sch_codel.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/sch_dsmark.ko b/ucentral-client/rootfs/lib/modules/5.15.132/sch_dsmark.ko
new file mode 100644
index 0000000..b611aef
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/sch_dsmark.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/sch_fq.ko b/ucentral-client/rootfs/lib/modules/5.15.132/sch_fq.ko
new file mode 100644
index 0000000..3ba991a
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/sch_fq.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/sch_gred.ko b/ucentral-client/rootfs/lib/modules/5.15.132/sch_gred.ko
new file mode 100644
index 0000000..ee4f8d2
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/sch_gred.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/sch_hfsc.ko b/ucentral-client/rootfs/lib/modules/5.15.132/sch_hfsc.ko
new file mode 100644
index 0000000..d0e3b5a
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/sch_hfsc.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/sch_htb.ko b/ucentral-client/rootfs/lib/modules/5.15.132/sch_htb.ko
new file mode 100644
index 0000000..8c433f0
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/sch_htb.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/sch_ingress.ko b/ucentral-client/rootfs/lib/modules/5.15.132/sch_ingress.ko
new file mode 100644
index 0000000..075b01f
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/sch_ingress.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/sch_multiq.ko b/ucentral-client/rootfs/lib/modules/5.15.132/sch_multiq.ko
new file mode 100644
index 0000000..0e34f08
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/sch_multiq.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/sch_sfq.ko b/ucentral-client/rootfs/lib/modules/5.15.132/sch_sfq.ko
new file mode 100644
index 0000000..14e5d8c
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/sch_sfq.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/sch_tbf.ko b/ucentral-client/rootfs/lib/modules/5.15.132/sch_tbf.ko
new file mode 100644
index 0000000..f2cda1b
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/sch_tbf.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/sch_teql.ko b/ucentral-client/rootfs/lib/modules/5.15.132/sch_teql.ko
new file mode 100644
index 0000000..d0de3e0
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/sch_teql.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/seqiv.ko b/ucentral-client/rootfs/lib/modules/5.15.132/seqiv.ko
new file mode 100644
index 0000000..390482d
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/seqiv.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/sha512-ssse3.ko b/ucentral-client/rootfs/lib/modules/5.15.132/sha512-ssse3.ko
new file mode 100644
index 0000000..58c7fbf
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/sha512-ssse3.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/sha512_generic.ko b/ucentral-client/rootfs/lib/modules/5.15.132/sha512_generic.ko
new file mode 100644
index 0000000..f858347
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/sha512_generic.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/slhc.ko b/ucentral-client/rootfs/lib/modules/5.15.132/slhc.ko
new file mode 100644
index 0000000..eef0393
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/slhc.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/tg3.ko b/ucentral-client/rootfs/lib/modules/5.15.132/tg3.ko
new file mode 100644
index 0000000..836c674
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/tg3.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/ts_bm.ko b/ucentral-client/rootfs/lib/modules/5.15.132/ts_bm.ko
new file mode 100644
index 0000000..7b1303d
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/ts_bm.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/ts_fsm.ko b/ucentral-client/rootfs/lib/modules/5.15.132/ts_fsm.ko
new file mode 100644
index 0000000..989fb3f
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/ts_fsm.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/ts_kmp.ko b/ucentral-client/rootfs/lib/modules/5.15.132/ts_kmp.ko
new file mode 100644
index 0000000..2236b8a
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/ts_kmp.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/tunnel6.ko b/ucentral-client/rootfs/lib/modules/5.15.132/tunnel6.ko
new file mode 100644
index 0000000..b106632
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/tunnel6.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/udp_tunnel.ko b/ucentral-client/rootfs/lib/modules/5.15.132/udp_tunnel.ko
new file mode 100644
index 0000000..9f3c806
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/udp_tunnel.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/vfat.ko b/ucentral-client/rootfs/lib/modules/5.15.132/vfat.ko
new file mode 100644
index 0000000..22fc3bd
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/vfat.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/vxlan.ko b/ucentral-client/rootfs/lib/modules/5.15.132/vxlan.ko
new file mode 100644
index 0000000..a5e3046
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/vxlan.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/wireguard.ko b/ucentral-client/rootfs/lib/modules/5.15.132/wireguard.ko
new file mode 100644
index 0000000..23f5630
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/wireguard.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/x_tables.ko b/ucentral-client/rootfs/lib/modules/5.15.132/x_tables.ko
new file mode 100644
index 0000000..fa8e2ff
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/x_tables.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/xt_LOG.ko b/ucentral-client/rootfs/lib/modules/5.15.132/xt_LOG.ko
new file mode 100644
index 0000000..a31d576
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/xt_LOG.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/xt_TCPMSS.ko b/ucentral-client/rootfs/lib/modules/5.15.132/xt_TCPMSS.ko
new file mode 100644
index 0000000..8407fc6
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/xt_TCPMSS.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/xt_comment.ko b/ucentral-client/rootfs/lib/modules/5.15.132/xt_comment.ko
new file mode 100644
index 0000000..05a13e7
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/xt_comment.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/xt_connbytes.ko b/ucentral-client/rootfs/lib/modules/5.15.132/xt_connbytes.ko
new file mode 100644
index 0000000..291d109
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/xt_connbytes.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/xt_connlimit.ko b/ucentral-client/rootfs/lib/modules/5.15.132/xt_connlimit.ko
new file mode 100644
index 0000000..5fd2f1b
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/xt_connlimit.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/xt_connmark.ko b/ucentral-client/rootfs/lib/modules/5.15.132/xt_connmark.ko
new file mode 100644
index 0000000..2d64c05
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/xt_connmark.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/xt_conntrack.ko b/ucentral-client/rootfs/lib/modules/5.15.132/xt_conntrack.ko
new file mode 100644
index 0000000..8fbacd0
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/xt_conntrack.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/xt_helper.ko b/ucentral-client/rootfs/lib/modules/5.15.132/xt_helper.ko
new file mode 100644
index 0000000..610edba
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/xt_helper.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/xt_limit.ko b/ucentral-client/rootfs/lib/modules/5.15.132/xt_limit.ko
new file mode 100644
index 0000000..2242f0a
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/xt_limit.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/xt_mac.ko b/ucentral-client/rootfs/lib/modules/5.15.132/xt_mac.ko
new file mode 100644
index 0000000..95aeb90
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/xt_mac.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/xt_mark.ko b/ucentral-client/rootfs/lib/modules/5.15.132/xt_mark.ko
new file mode 100644
index 0000000..c3533e8
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/xt_mark.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/xt_multiport.ko b/ucentral-client/rootfs/lib/modules/5.15.132/xt_multiport.ko
new file mode 100644
index 0000000..69b2548
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/xt_multiport.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/xt_recent.ko b/ucentral-client/rootfs/lib/modules/5.15.132/xt_recent.ko
new file mode 100644
index 0000000..6352821
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/xt_recent.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/xt_state.ko b/ucentral-client/rootfs/lib/modules/5.15.132/xt_state.ko
new file mode 100644
index 0000000..8a05d7c
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/xt_state.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/xt_tcpudp.ko b/ucentral-client/rootfs/lib/modules/5.15.132/xt_tcpudp.ko
new file mode 100644
index 0000000..20584a7
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/xt_tcpudp.ko differ
diff --git a/ucentral-client/rootfs/lib/modules/5.15.132/xt_time.ko b/ucentral-client/rootfs/lib/modules/5.15.132/xt_time.ko
new file mode 100644
index 0000000..e152413
Binary files /dev/null and b/ucentral-client/rootfs/lib/modules/5.15.132/xt_time.ko differ
diff --git a/ucentral-client/rootfs/lib/netifd/dhcp-get-server.sh b/ucentral-client/rootfs/lib/netifd/dhcp-get-server.sh
new file mode 100755
index 0000000..a1509ac
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/dhcp-get-server.sh
@@ -0,0 +1,2 @@
+#!/bin/sh
+[ "$1" = bound ] && echo "$serverid"
diff --git a/ucentral-client/rootfs/lib/netifd/dhcp.script b/ucentral-client/rootfs/lib/netifd/dhcp.script
new file mode 100755
index 0000000..29de85f
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/dhcp.script
@@ -0,0 +1,142 @@
+#!/bin/sh
+[ -z "$1" ] && echo "Error: should be run by udhcpc" && exit 1
+
+. /lib/functions.sh
+. /lib/netifd/netifd-proto.sh
+
+WORKING_PATH=/tmp/capwap
+DHCP_OPT_FILE=${WORKING_PATH}/dhcp_opt.txt
+DHCP_OPT_FILE_TMP=${WORKING_PATH}/dhcp_opt_tmp.txt
+
+set_capwap_ip()
+{
+	local ip
+	if [ ! -d "${WORKING_PATH}" ]; then
+		mkdir -p ${WORKING_PATH}
+	fi
+	for ip in ${capwap}; do
+		echo -n ${ip} >> ${DHCP_OPT_FILE_TMP}
+	done
+	if ! cmp -s "${DHCP_OPT_FILE}" "${DHCP_OPT_FILE_TMP}"; then
+		mv ${DHCP_OPT_FILE_TMP} ${DHCP_OPT_FILE}
+	fi
+}
+
+set_classless_routes() {
+	local max=128
+	while [ -n "$1" -a -n "$2" -a $max -gt 0 ]; do
+		proto_add_ipv4_route "${1%%/*}" "${1##*/}" "$2" "$ip"
+		max=$(($max-1))
+		shift 2
+	done
+}
+
+setup_interface () {
+	proto_init_update "*" 1
+	proto_add_ipv4_address "$ip" "${subnet:-255.255.255.0}"
+	# TODO: apply $broadcast
+
+	local ip_net
+	eval "$(ipcalc.sh "$ip/$mask")";ip_net="$NETWORK"
+
+	local i
+	for i in $router; do
+		local gw_net
+		eval "$(ipcalc.sh "$i/$mask")";gw_net="$NETWORK"
+
+		[ "$ip_net" != "$gw_net" ] && proto_add_ipv4_route "$i" 32 "" "$ip"
+		proto_add_ipv4_route 0.0.0.0 0 "$i" "$ip"
+
+		local r
+		for r in $CUSTOMROUTES; do
+			proto_add_ipv4_route "${r%%/*}" "${r##*/}" "$i" "$ip"
+		done
+	done
+
+	# CIDR STATIC ROUTES (rfc3442)
+	[ -n "$staticroutes" ] && set_classless_routes $staticroutes
+	[ -n "$msstaticroutes" ] && set_classless_routes $msstaticroutes
+
+	for i in $dns; do
+		proto_add_dns_server "$i"
+	done
+	for i in $domain; do
+		proto_add_dns_search "$i"
+	done
+
+	# TODO: Deprecate timesvr in favor of timesrv
+	if [ -n "$timesvr" -a -z "$timesrv" ]; then
+		timesrv="$timesvr"
+		echo "Environment variable 'timesvr' will be deprecated; use 'timesrv' instead."
+	fi
+
+	proto_add_data
+	[ -n "$ZONE" ]     && json_add_string zone "$ZONE"
+	[ -n "$ntpsrv" ]   && json_add_string ntpserver "$ntpsrv"
+	[ -n "$timesrv" ]  && json_add_string timeserver "$timesrv"
+	[ -n "$hostname" ] && json_add_string hostname "$hostname"
+	[ -n "$message" ]  && json_add_string message "$message"
+	[ -n "$timezone" ] && json_add_int timezone "$timezone"
+	[ -n "$lease" ]    && json_add_int leasetime "$lease"
+	[ -n "$serverid" ] && json_add_string dhcpserver "$serverid"
+	proto_close_data
+
+	proto_send_update "$INTERFACE"
+
+
+	if [ "$IFACE6RD" != 0 -a -n "$ip6rd" ]; then
+		local v4mask="${ip6rd%% *}"
+		ip6rd="${ip6rd#* }"
+		local ip6rdprefixlen="${ip6rd%% *}"
+		ip6rd="${ip6rd#* }"
+		local ip6rdprefix="${ip6rd%% *}"
+		ip6rd="${ip6rd#* }"
+		local ip6rdbr="${ip6rd%% *}"
+
+		[ -n "$ZONE" ] || ZONE=$(fw3 -q network $INTERFACE 2>/dev/null)
+		[ -z "$IFACE6RD" -o "$IFACE6RD" = 1 ] && IFACE6RD=${INTERFACE}_6
+
+		json_init
+		json_add_string name "$IFACE6RD"
+		json_add_string ifname "@$INTERFACE"
+		json_add_string proto "6rd"
+		json_add_string peeraddr "$ip6rdbr"
+		json_add_int ip4prefixlen "$v4mask"
+		json_add_string ip6prefix "$ip6rdprefix"
+		json_add_int ip6prefixlen "$ip6rdprefixlen"
+		json_add_string tunlink "$INTERFACE"
+		[ -n "$IFACE6RD_DELEGATE" ] && json_add_boolean delegate "$IFACE6RD_DELEGATE"
+		[ -n "$ZONE6RD" ] || ZONE6RD=$ZONE
+		[ -n "$ZONE6RD" ] && json_add_string zone "$ZONE6RD"
+		[ -n "$MTU6RD" ] && json_add_string mtu "$MTU6RD"
+		json_close_object
+
+		ubus call network add_dynamic "$(json_dump)"
+	fi
+}
+
+deconfig_interface() {
+	proto_init_update "*" 0
+	proto_send_update "$INTERFACE"
+}
+
+case "$1" in
+	deconfig)
+		deconfig_interface
+	;;
+	renew|bound)
+		setup_interface
+	;;
+esac
+
+if [ -n "${capwap}" ]; then
+	set_capwap_ip
+fi
+
+# user rules
+[ -f /etc/udhcpc.user ] && . /etc/udhcpc.user "$@"
+for f in /etc/udhcpc.user.d/*; do
+	[ -f "$f" ] && (. "$f" "$@")
+done
+
+exit 0
diff --git a/ucentral-client/rootfs/lib/netifd/dhcpv6.script b/ucentral-client/rootfs/lib/netifd/dhcpv6.script
new file mode 100755
index 0000000..b1a99ed
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/dhcpv6.script
@@ -0,0 +1,244 @@
+#!/bin/sh
+[ -z "$2" ] && echo "Error: should be run by odhcpc6c" && exit 1
+. /lib/functions.sh
+. /lib/netifd/netifd-proto.sh
+
+setup_interface () {
+	local device="$1"
+	local prefsig=""
+	local addrsig=""
+
+	# Apply IPv6 / ND configuration
+	HOPLIMIT=$(cat /proc/sys/net/ipv6/conf/$device/hop_limit)
+	[ -n "$RA_HOPLIMIT" -a -n "$HOPLIMIT" ] && [ "$RA_HOPLIMIT" -gt "$HOPLIMIT" ] && echo "$RA_HOPLIMIT" > /proc/sys/net/ipv6/conf/$device/hop_limit
+	[ -n "$RA_MTU" ] && [ "$RA_MTU" -ge 1280 ] && echo "$RA_MTU" > /proc/sys/net/ipv6/conf/$device/mtu 2>/dev/null
+	[ -n "$RA_REACHABLE" ] && [ "$RA_REACHABLE" -gt 0 ] && echo "$RA_REACHABLE" > /proc/sys/net/ipv6/neigh/$device/base_reachable_time_ms
+	[ -n "$RA_RETRANSMIT" ] && [ "$RA_RETRANSMIT" -gt 0 ] && echo "$RA_RETRANSMIT" > /proc/sys/net/ipv6/neigh/$device/retrans_time_ms
+
+	proto_init_update "*" 1
+
+	# Merge RA-DNS
+	for radns in $RA_DNS; do
+		local duplicate=0
+		for dns in $RDNSS; do
+			[ "$radns" = "$dns" ] && duplicate=1
+		done
+		[ "$duplicate" = 0 ] && RDNSS="$RDNSS $radns"
+	done
+
+	for dns in $RDNSS; do
+		proto_add_dns_server "$dns"
+	done
+
+	for radomain in $RA_DOMAINS; do
+		local duplicate=0
+		for domain in $DOMAINS; do
+			[ "$radomain" = "$domain" ] && duplicate=1
+		done
+		[ "$duplicate" = 0 ] && DOMAINS="$DOMAINS $radomain"
+	done
+
+	for domain in $DOMAINS; do
+		proto_add_dns_search "$domain"
+	done
+
+	for prefix in $PREFIXES; do
+		proto_add_ipv6_prefix "$prefix"
+		prefsig="$prefsig ${prefix%%,*}"
+		local entry="${prefix#*/}"
+		entry="${entry#*,}"
+		entry="${entry#*,}"
+		local valid="${entry%%,*}"
+
+		if [ -z "$RA_ADDRESSES" -a -z "$RA_ROUTES" -a \
+				-z "$RA_DNS" -a "$FAKE_ROUTES" = 1 ]; then
+			RA_ROUTES="::/0,$SERVER,$valid,4096"
+		fi
+	done
+
+	for prefix in $USERPREFIX; do
+		proto_add_ipv6_prefix "$prefix"
+	done
+
+	# Merge addresses
+	for entry in $RA_ADDRESSES; do
+		local duplicate=0
+		local addr="${entry%%/*}"
+		for dentry in $ADDRESSES; do
+			local daddr="${dentry%%/*}"
+			[ "$addr" = "$daddr" ] && duplicate=1
+		done
+		[ "$duplicate" = "0" ] && ADDRESSES="$ADDRESSES $entry"
+	done
+
+	for entry in $ADDRESSES; do
+		local addr="${entry%%/*}"
+		entry="${entry#*/}"
+		local mask="${entry%%,*}"
+		entry="${entry#*,}"
+		local preferred="${entry%%,*}"
+		entry="${entry#*,}"
+		local valid="${entry%%,*}"
+
+		proto_add_ipv6_address "$addr" "$mask" "$preferred" "$valid" 1
+		addrsig="$addrsig $addr/$mask"
+
+		if [ -z "$RA_ADDRESSES" -a -z "$RA_ROUTES" -a \
+				-z "$RA_DNS" -a "$FAKE_ROUTES" = 1 ]; then
+			RA_ROUTES="::/0,$SERVER,$valid,4096"
+		fi
+
+		# RFC 7278
+		if [ "$mask" -eq 64 -a -z "$PREFIXES" -a -n "$EXTENDPREFIX" ]; then
+			proto_add_ipv6_prefix "$addr/$mask,$preferred,$valid"
+
+			local raroutes=""
+			for route in $RA_ROUTES; do
+				local prefix="${route%%/*}"
+				local entry="${route#*/}"
+				local pmask="${entry%%,*}"
+				entry="${entry#*,}"
+				local gw="${entry%%,*}"
+
+				[ -z "$gw" -a "$mask" = "$pmask" ] && {
+					case "$addr" in
+						"${prefix%*::}"*) continue;;
+					esac
+				}
+				raroutes="$raroutes $route"
+			done
+			RA_ROUTES="$raroutes"
+		fi
+	done
+
+	for entry in $RA_ROUTES; do
+		local duplicate=$NOSOURCEFILTER
+		local addr="${entry%%/*}"
+		entry="${entry#*/}"
+		local mask="${entry%%,*}"
+		entry="${entry#*,}"
+		local gw="${entry%%,*}"
+		entry="${entry#*,}"
+		local valid="${entry%%,*}"
+		entry="${entry#*,}"
+		local metric="${entry%%,*}"
+
+		for xentry in $RA_ROUTES; do
+			local xprefix="${xentry%%,*}"
+			xentry="${xentry#*,}"
+			local xgw="${xentry%%,*}"
+
+			[ -n "$gw" -a -z "$xgw" -a "$addr/$mask" = "$xprefix" ] && duplicate=1
+		done
+
+		if [ -z "$gw" -o "$duplicate" = 1 ]; then
+			proto_add_ipv6_route "$addr" "$mask" "$gw" "$metric" "$valid"
+		else
+			for prefix in $PREFIXES $ADDRESSES; do
+				local paddr="${prefix%%,*}"
+				proto_add_ipv6_route "$addr" "$mask" "$gw" "$metric" "$valid" "$paddr"
+			done
+		fi
+	done
+
+	proto_add_data
+	[ -n "$CER" ] && json_add_string cer "$CER"
+	[ -n "$PASSTHRU" ] && json_add_string passthru "$PASSTHRU"
+	[ -n "$ZONE" ] && json_add_string zone "$ZONE"
+	proto_close_data
+
+	proto_send_update "$INTERFACE"
+
+	MAPTYPE=""
+	MAPRULE=""
+
+	if [ -n "$MAPE" -a -f /lib/netifd/proto/map.sh ]; then
+		MAPTYPE="map-e"
+		MAPRULE="$MAPE"
+	elif [ -n "$MAPT" -a -f /lib/netifd/proto/map.sh -a -f /proc/net/nat46/control ]; then
+		MAPTYPE="map-t"
+		MAPRULE="$MAPT"
+	elif [ -n "$LW4O6" -a -f /lib/netifd/proto/map.sh ]; then
+		MAPTYPE="lw4o6"
+		MAPRULE="$LW4O6"
+	fi
+
+	[ -n "$ZONE" ] || ZONE=$(fw3 -q network $INTERFACE 2>/dev/null)
+
+	if [ "$IFACE_MAP" != 0 -a -n "$MAPTYPE" -a -n "$MAPRULE" ]; then
+		[ -z "$IFACE_MAP" -o "$IFACE_MAP" = 1 ] && IFACE_MAP=${INTERFACE}_4
+		json_init
+		json_add_string name "$IFACE_MAP"
+		json_add_string ifname "@$INTERFACE"
+		json_add_string proto map
+		json_add_string type "$MAPTYPE"
+		json_add_string _prefsig "$prefsig"
+		[ "$MAPTYPE" = lw4o6 ] && json_add_string _addrsig "$addrsig"
+		json_add_string rule "$MAPRULE"
+		json_add_string tunlink "$INTERFACE"
+		[ -n "$ZONE_MAP" ] || ZONE_MAP=$ZONE
+		[ -n "$ZONE_MAP" ] && json_add_string zone "$ZONE_MAP"
+		[ -n "$ENCAPLIMIT_MAP" ] && json_add_string encaplimit "$ENCAPLIMIT_MAP"
+		[ -n "$IFACE_MAP_DELEGATE" ] && json_add_boolean delegate "$IFACE_MAP_DELEGATE"
+		json_close_object
+		ubus call network add_dynamic "$(json_dump)"
+	elif [ -n "$AFTR" -a "$IFACE_DSLITE" != 0 -a -f /lib/netifd/proto/dslite.sh ]; then
+		[ -z "$IFACE_DSLITE" -o "$IFACE_DSLITE" = 1 ] && IFACE_DSLITE=${INTERFACE}_4
+		json_init
+		json_add_string name "$IFACE_DSLITE"
+		json_add_string ifname "@$INTERFACE"
+		json_add_string proto "dslite"
+		json_add_string peeraddr "$AFTR"
+		json_add_string tunlink "$INTERFACE"
+		[ -n "$ZONE_DSLITE" ] || ZONE_DSLITE=$ZONE
+		[ -n "$ZONE_DSLITE" ] && json_add_string zone "$ZONE_DSLITE"
+		[ -n "$ENCAPLIMIT_DSLITE" ] && json_add_string encaplimit "$ENCAPLIMIT_DSLITE"
+		[ -n "$IFACE_DSLITE_DELEGATE" ] && json_add_boolean delegate "$IFACE_DSLITE_DELEGATE"
+		json_close_object
+		ubus call network add_dynamic "$(json_dump)"
+	elif [ "$IFACE_464XLAT" != 0 -a -f /lib/netifd/proto/464xlat.sh ]; then
+		[ -z "$IFACE_464XLAT" -o "$IFACE_464XLAT" = 1 ] && IFACE_464XLAT=${INTERFACE}_4
+		json_init
+		json_add_string name "$IFACE_464XLAT"
+		json_add_string ifname "@$INTERFACE"
+		json_add_string proto "464xlat"
+		json_add_string tunlink "$INTERFACE"
+		json_add_string _addrsig "$addrsig"
+		[ -n "$ZONE_464XLAT" ] || ZONE_464XLAT=$ZONE
+		[ -n "$ZONE_464XLAT" ] && json_add_string zone "$ZONE_464XLAT"
+		[ -n "$IFACE_464XLAT_DELEGATE" ] && json_add_boolean delegate "$IFACE_464XLAT_DELEGATE"
+		json_close_object
+		ubus call network add_dynamic "$(json_dump)"
+	fi
+
+	# TODO: $SNTP_IP $SIP_IP $SNTP_FQDN $SIP_DOMAIN
+}
+
+teardown_interface() {
+	proto_init_update "*" 0
+	proto_send_update "$INTERFACE"
+}
+
+case "$2" in
+	bound)
+		teardown_interface "$1"
+		setup_interface "$1"
+	;;
+	informed|updated|rebound)
+		setup_interface "$1"
+	;;
+	ra-updated)
+		[ -n "$ADDRESSES$RA_ADDRESSES$PREFIXES$USERPREFIX" ] && setup_interface "$1"
+	;;
+	started|stopped|unbound)
+		teardown_interface "$1"
+	;;
+esac
+
+# user rules
+[ -f /etc/odhcp6c.user ] && . /etc/odhcp6c.user "$@"
+for f in /etc/odhcp6c.user.d/*; do
+  [ -f "$f" ] && (. "$f" "$@")
+done
+
+exit 0
diff --git a/ucentral-client/rootfs/lib/netifd/hostapd.sh b/ucentral-client/rootfs/lib/netifd/hostapd.sh
new file mode 100644
index 0000000..958d5a9
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/hostapd.sh
@@ -0,0 +1,1657 @@
+. /lib/functions/network.sh
+. /lib/functions.sh
+
+wpa_supplicant_add_rate() {
+	local var="$1"
+	local val="$(($2 / 1000))"
+	local sub="$((($2 / 100) % 10))"
+	append $var "$val" ","
+	[ $sub -gt 0 ] && append $var "."
+}
+
+hostapd_add_rate() {
+	local var="$1"
+	local val="$(($2 / 100))"
+	append $var "$val" " "
+}
+
+hostapd_append_wep_key() {
+	local var="$1"
+
+	wep_keyidx=0
+	set_default key 1
+	case "$key" in
+		[1234])
+			for idx in 1 2 3 4; do
+				local zidx
+				zidx=$(($idx - 1))
+				json_get_var ckey "key${idx}"
+				[ -n "$ckey" ] && \
+					append $var "wep_key${zidx}=$(prepare_key_wep "$ckey")" "$N$T"
+			done
+			wep_keyidx=$((key - 1))
+		;;
+		*)
+			append $var "wep_key0=$(prepare_key_wep "$key")" "$N$T"
+		;;
+	esac
+}
+
+hostapd_append_wpa_key_mgmt() {
+	local auth_type_l="$(echo $auth_type | tr 'a-z' 'A-Z')"
+
+	case "$auth_type" in
+		psk|eap)
+			append wpa_key_mgmt "WPA-$auth_type_l"
+			[ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt "FT-${auth_type_l}"
+			[ "${ieee80211w:-0}" -gt 0 ] && append wpa_key_mgmt "WPA-${auth_type_l}-SHA256"
+		;;
+		eap192)
+			append wpa_key_mgmt "WPA-EAP-SUITE-B-192"
+			[ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt "FT-EAP"
+		;;
+		eap-eap2)
+			append wpa_key_mgmt "WPA-EAP"
+			append wpa_key_mgmt "WPA-EAP-SHA256"
+			[ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt "FT-EAP"
+		;;
+		eap2)
+			append wpa_key_mgmt "WPA-EAP-SHA256"
+			[ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt "FT-EAP"
+		;;
+		sae)
+			append wpa_key_mgmt "SAE"
+			[ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt "FT-SAE"
+		;;
+		psk-sae)
+			append wpa_key_mgmt "WPA-PSK"
+			[ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt "FT-PSK"
+			[ "${ieee80211w:-0}" -gt 0 ] && append wpa_key_mgmt "WPA-PSK-SHA256"
+			append wpa_key_mgmt "SAE"
+			[ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt "FT-SAE"
+		;;
+		owe)
+			append wpa_key_mgmt "OWE"
+		;;
+	esac
+
+	[ "$fils" -gt 0 ] && {
+		case "$auth_type" in
+			eap*)
+				append wpa_key_mgmt FILS-SHA256
+				[ "${ieee80211r:-0}" -gt 0 ] && append wpa_key_mgmt FT-FILS-SHA256
+			;;
+		esac
+	}
+
+	[ "$auth_osen" = "1" ] && append wpa_key_mgmt "OSEN"
+}
+
+hostapd_add_log_config() {
+	config_add_boolean \
+		log_80211 \
+		log_8021x \
+		log_radius \
+		log_wpa \
+		log_driver \
+		log_iapp \
+		log_mlme
+
+	config_add_int log_level
+}
+
+hostapd_common_add_device_config() {
+	config_add_array basic_rate
+	config_add_array supported_rates
+	config_add_string beacon_rate
+
+	config_add_string country country3
+	config_add_boolean country_ie doth
+	config_add_boolean spectrum_mgmt_required
+	config_add_int local_pwr_constraint
+	config_add_string require_mode
+	config_add_boolean legacy_rates
+	config_add_int cell_density
+	config_add_int rts_threshold
+	config_add_int rssi_reject_assoc_rssi
+	config_add_int rssi_ignore_probe_request
+	config_add_int maxassoc
+	config_add_boolean maxassoc_ignore_probe
+
+	config_add_string acs_chan_bias
+	config_add_boolean acs_exclude_dfs
+	config_add_array hostapd_options
+
+	config_add_int airtime_mode
+
+	config_add_boolean multiple_bssid rnr_beacon he_co_locate ema
+
+	hostapd_add_log_config
+}
+
+hostapd_prepare_device_config() {
+	local config="$1"
+	local driver="$2"
+
+	local base_cfg=
+
+	json_get_vars country country3 country_ie beacon_int:100 dtim_period:2 doth require_mode legacy_rates \
+		acs_chan_bias local_pwr_constraint spectrum_mgmt_required airtime_mode cell_density \
+		rts_threshold beacon_rate rssi_reject_assoc_rssi rssi_ignore_probe_request maxassoc \
+		multiple_bssid he_co_locate rnr_beacon ema acs_exclude_dfs \
+		maxassoc_ignore_probe
+
+	hostapd_set_log_options base_cfg
+
+	set_default country_ie 1
+	set_default spectrum_mgmt_required 0
+	set_default doth 1
+	set_default legacy_rates 0
+	set_default airtime_mode 0
+	set_default cell_density 0
+	set_default he_co_locate 0
+	set_default rnr_beacon 0
+	set_default multiple_bssid 0
+	set_default ema 0
+	set_default acs_exclude_dfs 0
+
+	[ -n "$country" ] && {
+		append base_cfg "country_code=$country" "$N"
+		[ -n "$country3" ] && append base_cfg "country3=$country3" "$N"
+
+		[ "$country_ie" -gt 0 ] && {
+			append base_cfg "ieee80211d=1" "$N"
+			[ -n "$local_pwr_constraint" ] && append base_cfg "local_pwr_constraint=$local_pwr_constraint" "$N"
+			[ "$spectrum_mgmt_required" -gt 0 ] && append base_cfg "spectrum_mgmt_required=$spectrum_mgmt_required" "$N"
+		}
+		[ "$hwmode" = "a" -a "$doth" -gt 0 ] && append base_cfg "ieee80211h=1" "$N"
+	}
+
+	[ -n "$acs_chan_bias" ] && append base_cfg "acs_chan_bias=$acs_chan_bias" "$N"
+
+	local brlist= br
+	json_get_values basic_rate_list basic_rate
+	local rlist= r
+	json_get_values rate_list supported_rates
+
+	[ -n "$hwmode" ] && append base_cfg "hw_mode=$hwmode" "$N"
+	if [ "$hwmode" = "g" ] || [ "$hwmode" = "a" ]; then
+		[ -n "$require_mode" ] && legacy_rates=0
+		case "$require_mode" in
+			n) append base_cfg "require_ht=1" "$N";;
+			ac) append base_cfg "require_vht=1" "$N";;
+		esac
+	fi
+	case "$hwmode" in
+		b)
+			if [ "$cell_density" -eq 1 ]; then
+				set_default rate_list "5500 11000"
+				set_default basic_rate_list "5500 11000"
+			elif [ "$cell_density" -ge 2 ]; then
+				set_default rate_list "11000"
+				set_default basic_rate_list "11000"
+			fi
+		;;
+		g)
+			if [ "$cell_density" -eq 0 ] || [ "$cell_density" -eq 1 ]; then
+				if [ "$legacy_rates" -eq 0 ]; then
+					set_default rate_list "6000 9000 12000 18000 24000 36000 48000 54000"
+					set_default basic_rate_list "6000 12000 24000"
+				elif [ "$cell_density" -eq 1 ]; then
+					set_default rate_list "5500 6000 9000 11000 12000 18000 24000 36000 48000 54000"
+					set_default basic_rate_list "5500 11000"
+				fi
+			elif [ "$cell_density" -ge 3 ] && [ "$legacy_rates" -ne 0 ] || [ "$cell_density" -eq 2 ]; then
+				if [ "$legacy_rates" -eq 0 ]; then
+					set_default rate_list "12000 18000 24000 36000 48000 54000"
+					set_default basic_rate_list "12000 24000"
+				else
+					set_default rate_list "11000 12000 18000 24000 36000 48000 54000"
+					set_default basic_rate_list "11000"
+				fi
+			elif [ "$cell_density" -ge 3 ]; then
+				set_default rate_list "24000 36000 48000 54000"
+				set_default basic_rate_list "24000"
+			fi
+		;;
+		a)
+			if [ "$cell_density" -eq 1 ]; then
+				set_default rate_list "6000 9000 12000 18000 24000 36000 48000 54000"
+				set_default basic_rate_list "6000 12000 24000"
+			elif [ "$cell_density" -eq 2 ]; then
+				set_default rate_list "12000 18000 24000 36000 48000 54000"
+				set_default basic_rate_list "12000 24000"
+			elif [ "$cell_density" -ge 3 ]; then
+				set_default rate_list "24000 36000 48000 54000"
+				set_default basic_rate_list "24000"
+			fi
+		;;
+	esac
+
+	for r in $rate_list; do
+		hostapd_add_rate rlist "$r"
+	done
+
+	for br in $basic_rate_list; do
+		hostapd_add_rate brlist "$br"
+	done
+
+	[ -n "$rssi_reject_assoc_rssi" ] && append base_cfg "rssi_reject_assoc_rssi=$rssi_reject_assoc_rssi" "$N"
+	[ -n "$rssi_ignore_probe_request" ] && append base_cfg "rssi_ignore_probe_request=$rssi_ignore_probe_request" "$N"
+	[ -n "$beacon_rate" ] && append base_cfg "beacon_rate=$beacon_rate" "$N"
+	[ -n "$rlist" ] && append base_cfg "supported_rates=$rlist" "$N"
+	[ -n "$brlist" ] && append base_cfg "basic_rates=$brlist" "$N"
+	append base_cfg "beacon_int=$beacon_int" "$N"
+	[ -n "$rts_threshold" ] && append base_cfg "rts_threshold=$rts_threshold" "$N"
+	append base_cfg "dtim_period=$dtim_period" "$N"
+	[ "$airtime_mode" -gt 0 ] && append base_cfg "airtime_mode=$airtime_mode" "$N"
+	[ -n "$maxassoc" ] && append base_cfg "iface_max_num_sta=$maxassoc" "$N"
+	[ "$maxassoc_ignore_probe" -gt 0 ] && append base_cfg "no_probe_resp_if_max_sta=1" "$N"
+	[ "$rnr_beacon" -gt 0 ] && append base_cfg "rnr_beacon=$rnr_beacon" "$N"
+	[ "$he_co_locate" -gt 0 ] && append base_cfg "he_co_locate=$he_co_locate" "$N"
+	[ "$multiple_bssid" -gt 0 ] && append base_cfg "multiple_bssid=$multiple_bssid" "$N"
+	[ "$ema" -gt 0 ] && append base_cfg "ema=$ema" "$N"
+	[ "$acs_exclude_dfs" -gt 0 ] && append base_cfg "acs_exclude_dfs=$acs_exclude_dfs" "$N"
+
+	json_get_values opts hostapd_options
+	for val in $opts; do
+		append base_cfg "$val" "$N"
+	done
+
+	cat > "$config" <<EOF
+driver=$driver
+$base_cfg
+EOF
+}
+
+hostapd_common_add_bss_config() {
+	config_add_string 'bssid:macaddr' 'ssid:string'
+	config_add_boolean wds wmm uapsd hidden utf8_ssid
+
+	config_add_int maxassoc max_inactivity
+	config_add_boolean disassoc_low_ack isolate short_preamble skip_inactivity_poll
+
+	config_add_int \
+		wep_rekey eap_reauth_period \
+		wpa_group_rekey wpa_pair_rekey wpa_master_rekey
+	config_add_boolean wpa_strict_rekey
+	config_add_boolean wpa_disable_eapol_key_retries
+
+	config_add_boolean tdls_prohibit
+
+	config_add_boolean rsn_preauth auth_cache
+	config_add_int ieee80211w
+	config_add_int eapol_version
+
+	config_add_string 'auth_server:host' 'server:host'
+	config_add_string auth_secret key
+	config_add_int 'auth_port:port' 'port:port'
+
+	config_add_string acct_server
+	config_add_string acct_secret
+	config_add_int acct_port
+
+	config_add_string acct_server_secondary
+	config_add_string acct_secret_secondary
+	config_add_int acct_port_secondary
+
+	config_add_int acct_interval
+
+	config_add_string auth_server_secondary
+	config_add_string auth_secret_secondary
+	config_add_int auth_port_secondary
+
+	config_add_int bss_load_update_period chan_util_avg_period
+
+	config_add_string dae_client
+	config_add_string dae_secret
+	config_add_int dae_port
+
+	config_add_string nasid
+	config_add_string ownip
+	config_add_string radius_client_addr
+	config_add_string iapp_interface
+	config_add_string eap_type ca_cert client_cert identity anonymous_identity auth priv_key priv_key_pwd
+	config_add_boolean ca_cert_usesystem ca_cert2_usesystem
+	config_add_string subject_match subject_match2
+	config_add_array altsubject_match altsubject_match2
+	config_add_array domain_match domain_match2 domain_suffix_match domain_suffix_match2
+	config_add_string ieee80211w_mgmt_cipher
+
+	config_add_int dynamic_vlan vlan_naming vlan_no_bridge
+	config_add_string vlan_tagged_interface vlan_bridge
+	config_add_string vlan_file
+
+	config_add_string 'key1:wepkey' 'key2:wepkey' 'key3:wepkey' 'key4:wepkey' 'password:wpakey'
+
+	config_add_string wpa_psk_file
+
+	config_add_int multi_ap
+
+	config_add_boolean wps_pushbutton wps_label ext_registrar wps_pbc_in_m1
+	config_add_int wps_ap_setup_locked wps_independent
+	config_add_string wps_device_type wps_device_name wps_manufacturer wps_pin
+	config_add_string multi_ap_backhaul_ssid multi_ap_backhaul_key
+
+	config_add_boolean wnm_sleep_mode wnm_sleep_mode_no_keys bss_transition
+	config_add_int time_advertisement
+	config_add_string time_zone
+	config_add_string vendor_elements
+
+	config_add_boolean ieee80211k rrm_neighbor_report rrm_beacon_report
+
+	config_add_boolean ftm_responder stationary_ap
+	config_add_string lci civic
+
+	config_add_boolean ieee80211r pmk_r1_push ft_psk_generate_local ft_over_ds
+	config_add_int r0_key_lifetime reassociation_deadline
+	config_add_string mobility_domain r1_key_holder
+	config_add_array r0kh r1kh
+
+	config_add_int ieee80211w_max_timeout ieee80211w_retry_timeout
+
+	config_add_string macfilter 'macfile:file'
+	config_add_array 'maclist:list(macaddr)'
+
+	config_add_array bssid_blacklist
+	config_add_array bssid_whitelist
+
+	config_add_int mcast_rate
+	config_add_array basic_rate
+	config_add_array supported_rates
+
+	config_add_boolean sae_require_mfp
+	config_add_int sae_pwe
+
+	config_add_string 'owe_transition_bssid:macaddr' 'owe_transition_ssid:string'
+	config_add_string owe_transition_ifname
+
+	config_add_boolean iw_enabled iw_internet iw_asra iw_esr iw_uesa
+	config_add_int iw_access_network_type iw_venue_group iw_venue_type
+	config_add_int iw_ipaddr_type_availability iw_gas_address3
+	config_add_string iw_hessid iw_network_auth_type iw_qos_map_set
+	config_add_array iw_roaming_consortium iw_domain_name iw_anqp_3gpp_cell_net iw_nai_realm
+	config_add_array iw_anqp_elem iw_venue_name iw_venue_url
+
+	config_add_boolean hs20 disable_dgaf osen
+	config_add_int anqp_domain_id
+	config_add_int hs20_deauth_req_timeout hs20_release
+	config_add_array hs20_oper_friendly_name
+	config_add_array osu_provider
+	config_add_array operator_icon
+	config_add_array hs20_conn_capab
+	config_add_string osu_ssid hs20_wan_metrics hs20_operating_class hs20_t_c_filename hs20_t_c_timestamp
+
+	config_add_string hs20_t_c_server_url
+
+	config_add_array airtime_sta_weight
+	config_add_int airtime_bss_weight airtime_bss_limit
+
+	config_add_boolean multicast_to_unicast multicast_to_unicast_all proxy_arp per_sta_vif
+
+	config_add_array hostapd_bss_options
+	config_add_boolean default_disabled
+
+	config_add_boolean request_cui
+	config_add_array radius_auth_req_attr
+	config_add_array radius_acct_req_attr
+
+	config_add_int eap_server
+	config_add_string eap_user_file ca_cert server_cert private_key private_key_passwd server_id
+
+	config_add_boolean fils
+	config_add_string fils_dhcp
+
+	config_add_boolean ratelimit
+
+	config_add_string uci_section
+
+	config_add_boolean dynamic_probe_resp
+}
+
+hostapd_set_vlan_file() {
+	local ifname="$1"
+	local vlan="$2"
+	json_get_vars name vid
+	echo "${vid} ${ifname}-${name}" >> /var/run/hostapd-${ifname}.vlan
+	wireless_add_vlan "${vlan}" "${ifname}-${name}"
+}
+
+hostapd_set_vlan() {
+	local ifname="$1"
+
+	rm -f /var/run/hostapd-${ifname}.vlan
+	for_each_vlan hostapd_set_vlan_file ${ifname}
+}
+
+hostapd_set_psk_file() {
+	local ifname="$1"
+	local vlan="$2"
+	local vlan_id=""
+
+	json_get_vars mac vid key
+	set_default mac "00:00:00:00:00:00"
+	[ -n "$vid" ] && vlan_id="vlanid=$vid "
+	echo "${vlan_id} ${mac} ${key}" >> /var/run/hostapd-${ifname}.psk
+}
+
+hostapd_set_psk() {
+	local ifname="$1"
+
+	rm -f /var/run/hostapd-${ifname}.psk
+	for_each_station hostapd_set_psk_file ${ifname}
+}
+
+append_iw_roaming_consortium() {
+	[ -n "$1" ] && append bss_conf "roaming_consortium=$1" "$N"
+}
+
+append_iw_domain_name() {
+	if [ -z "$iw_domain_name_conf" ]; then
+		iw_domain_name_conf="$1"
+	else
+		iw_domain_name_conf="$iw_domain_name_conf,$1"
+	fi
+}
+
+append_iw_anqp_3gpp_cell_net() {
+	if [ -z "$iw_anqp_3gpp_cell_net_conf" ]; then
+		iw_anqp_3gpp_cell_net_conf="$1"
+	else
+		iw_anqp_3gpp_cell_net_conf="$iw_anqp_3gpp_cell_net_conf;$1"
+	fi
+}
+
+append_iw_anqp_elem() {
+	[ -n "$1" ] && append bss_conf "anqp_elem=$1" "$N"
+}
+
+append_iw_nai_realm() {
+	[ -n "$1" ] && append bss_conf "nai_realm=$1" "$N"
+}
+
+append_iw_venue_name() {
+	append bss_conf "venue_name=$1" "$N"
+}
+
+append_iw_venue_url() {
+	append bss_conf "venue_url=$1" "$N"
+}
+
+append_hs20_oper_friendly_name() {
+	append bss_conf "hs20_oper_friendly_name=$1" "$N"
+}
+
+append_osu_provider_friendly_name() {
+	append bss_conf "osu_friendly_name=$1" "$N"
+}
+
+append_osu_provider_service_desc() {
+	append bss_conf "osu_service_desc=$1" "$N"
+}
+
+append_hs20_icon() {
+	local width height lang type path
+	config_get width "$1" width
+	config_get height "$1" height
+	config_get lang "$1" lang
+	config_get type "$1" type
+	config_get path "$1" path
+
+	append bss_conf "hs20_icon=$width:$height:$lang:$type:$1:$path" "$N"
+}
+
+append_hs20_icons() {
+	config_load wireless
+	config_foreach append_hs20_icon hs20-icon
+}
+
+append_operator_icon() {
+	append bss_conf "operator_icon=$1" "$N"
+}
+
+append_osu_icon() {
+	append bss_conf "osu_icon=$1" "$N"
+}
+
+append_osu_provider() {
+	local cfgtype osu_server_uri osu_friendly_name osu_nai osu_nai2 osu_method_list
+
+	config_load wireless
+	config_get cfgtype "$1" TYPE
+	[ "$cfgtype" != "osu-provider" ] && return
+
+	append bss_conf "# provider $1" "$N"
+	config_get osu_server_uri "$1" osu_server_uri
+	config_get osu_nai "$1" osu_nai
+	config_get osu_nai2 "$1" osu_nai2
+	config_get osu_method_list "$1" osu_method
+
+	append bss_conf "osu_server_uri=$osu_server_uri" "$N"
+	append bss_conf "osu_nai=$osu_nai" "$N"
+	append bss_conf "osu_nai2=$osu_nai2" "$N"
+	append bss_conf "osu_method_list=$osu_method_list" "$N"
+
+	config_list_foreach "$1" osu_service_desc append_osu_provider_service_desc
+	config_list_foreach "$1" osu_friendly_name append_osu_friendly_name
+	config_list_foreach "$1" osu_icon append_osu_icon
+
+	append bss_conf "$N"
+}
+
+append_hs20_conn_capab() {
+	[ -n "$1" ] && append bss_conf "hs20_conn_capab=$1" "$N"
+}
+
+append_radius_acct_req_attr() {
+	[ -n "$1" ] && append bss_conf "radius_acct_req_attr=$1" "$N"
+}
+
+append_radius_auth_req_attr() {
+	[ -n "$1" ] && append bss_conf "radius_auth_req_attr=$1" "$N"
+}
+
+append_airtime_sta_weight() {
+	[ -n "$1" ] && append bss_conf "airtime_sta_weight=$1" "$N"
+}
+
+append_radius_server() {
+
+	json_get_vars \
+		auth_server auth_secret auth_port \
+		auth_server_secondary auth_secret_secondary auth_port_secondary \
+		dae_client dae_secret dae_port \
+		dynamic_ownip ownip radius_client_addr \
+		eap_reauth_period request_cui \
+		erp_domain mobility_domain \
+		fils_realm fils_dhcp
+
+	set_default dynamic_ownip 1
+
+	# legacy compatibility
+	[ -n "$auth_server" ] || json_get_var auth_server server
+	[ -n "$auth_port" ] || json_get_var auth_port port
+	[ -n "$auth_secret" ] || json_get_var auth_secret key
+
+	[ "$fils" -gt 0 ] && {
+		set_default erp_domain "$mobility_domain"
+		set_default erp_domain "$(echo "$ssid" | md5sum | head -c 8)"
+		set_default fils_realm "$erp_domain"
+
+		append bss_conf "erp_send_reauth_start=1" "$N"
+		append bss_conf "erp_domain=$erp_domain" "$N"
+		append bss_conf "fils_realm=$fils_realm" "$N"
+		append bss_conf "fils_cache_id=$(echo "$fils_realm" | md5sum | head -c 4)" "$N"
+
+		[ "$fils_dhcp" = "*" ] && {
+			json_get_values network network
+			fils_dhcp=
+			for net in $network; do
+				fils_dhcp="$(ifstatus "$net" | jsonfilter -e '@.data.dhcpserver')"
+				[ -n "$fils_dhcp" ] && break
+			done
+
+			[ -z "$fils_dhcp" -a -n "$network_bridge" -a -n "$network_ifname" ] && \
+				fils_dhcp="$(udhcpc -B -n -q -s /lib/netifd/dhcp-get-server.sh -t 1 -i "$network_ifname" 2>/dev/null)"
+		}
+		[ -n "$fils_dhcp" ] && append bss_conf "dhcp_server=$fils_dhcp" "$N"
+	}
+
+	set_default auth_port 1812
+	set_default auth_port_secondary 1812
+	set_default dae_port 3799
+	set_default request_cui 0
+
+	[ "$eap_server" -eq 0 ] && {
+		append bss_conf "auth_server_addr=$auth_server" "$N"
+		append bss_conf "auth_server_port=$auth_port" "$N"
+		append bss_conf "auth_server_shared_secret=$auth_secret" "$N"
+	}
+
+	[ -n "$auth_server_secondary" ] && {
+		append bss_conf "auth_server_addr=$auth_server_secondary" "$N"
+		append bss_conf "auth_server_port=$auth_port_secondary" "$N"
+		[ -n "$auth_secret_secondary" ] && \
+			append bss_conf "auth_server_shared_secret=$auth_secret_secondary" "$N"
+	}
+
+	[ "$request_cui" -gt 0 ] && append bss_conf "radius_request_cui=$request_cui" "$N"
+	[ -n "$eap_reauth_period" ] && append bss_conf "eap_reauth_period=$eap_reauth_period" "$N"
+
+	[ -n "$dae_client" -a -n "$dae_secret" ] && {
+		append bss_conf "radius_das_port=$dae_port" "$N"
+		append bss_conf "radius_das_client=$dae_client $dae_secret" "$N"
+	}
+	json_for_each_item append_radius_auth_req_attr radius_auth_req_attr
+
+	if [ -n "$ownip" ]; then
+		append bss_conf "own_ip_addr=$ownip" "$N"
+	elif [ "$dynamic_ownip" -gt 0 ]; then
+		append bss_conf "dynamic_own_ip_addr=$dynamic_ownip" "$N"
+	fi
+
+	[ -n "$radius_client_addr" ] && append bss_conf "radius_client_addr=$radius_client_addr" "$N"
+	[ "$macfilter" = radius ] && append bss_conf "macaddr_acl=2" "$N"
+}
+
+hostapd_set_bss_options() {
+	local var="$1"
+	local phy="$2"
+	local vif="$3"
+
+	wireless_vif_parse_encryption
+
+	local bss_conf bss_md5sum
+	local wep_rekey wpa_group_rekey wpa_pair_rekey wpa_master_rekey wpa_key_mgmt
+
+	json_get_vars \
+		wep_rekey wpa_group_rekey wpa_pair_rekey wpa_master_rekey wpa_strict_rekey \
+		wpa_disable_eapol_key_retries tdls_prohibit \
+		maxassoc max_inactivity disassoc_low_ack isolate auth_cache \
+		wps_pushbutton wps_label ext_registrar wps_pbc_in_m1 wps_ap_setup_locked \
+		wps_independent wps_device_type wps_device_name wps_manufacturer wps_pin \
+		macfilter ssid utf8_ssid wmm uapsd hidden short_preamble rsn_preauth \
+		iapp_interface eapol_version dynamic_vlan ieee80211w nasid \
+		acct_server acct_secret acct_port acct_interval \
+		acct_server_secondary acct_secret_secondary acct_port_secondary \
+		bss_load_update_period chan_util_avg_period sae_require_mfp sae_pwe \
+		multi_ap multi_ap_backhaul_ssid multi_ap_backhaul_key skip_inactivity_poll \
+		airtime_bss_weight airtime_bss_limit airtime_sta_weight \
+		multicast_to_unicast_all proxy_arp per_sta_vif \
+		eap_server eap_user_file ca_cert server_cert private_key private_key_passwd server_id \
+		vendor_elements fils uci_section dynamic_probe_resp
+
+	set_default fils 0
+	set_default isolate 0
+	set_default maxassoc 0
+	set_default max_inactivity 0
+	set_default short_preamble 1
+	set_default disassoc_low_ack 1
+	set_default skip_inactivity_poll 0
+	set_default hidden 0
+	set_default wmm 1
+	set_default uapsd 1
+	set_default wpa_disable_eapol_key_retries 0
+	set_default tdls_prohibit 0
+	set_default eapol_version $((wpa & 1))
+	set_default acct_port 1813
+	set_default acct_port_secondary 1813
+	set_default bss_load_update_period 60
+	set_default chan_util_avg_period 600
+	set_default utf8_ssid 1
+	set_default multi_ap 0
+	set_default airtime_bss_weight 0
+	set_default airtime_bss_limit 0
+	set_default eap_server 0
+	set_default dynamic_probe_resp 0
+
+	/usr/sbin/hostapd -vfils || fils=0
+
+	append bss_conf "ctrl_interface=/var/run/hostapd"
+	if [ "$isolate" -gt 0 ]; then
+		append bss_conf "ap_isolate=$isolate" "$N"
+	fi
+	if [ "$maxassoc" -gt 0 ]; then
+		append bss_conf "max_num_sta=$maxassoc" "$N"
+	fi
+	if [ "$max_inactivity" -gt 0 ]; then
+		append bss_conf "ap_max_inactivity=$max_inactivity" "$N"
+	fi
+
+	[ "$airtime_bss_weight" -gt 0 ] && append bss_conf "airtime_bss_weight=$airtime_bss_weight" "$N"
+	[ "$airtime_bss_limit" -gt 0 ] && append bss_conf "airtime_bss_limit=$airtime_bss_limit" "$N"
+	json_for_each_item append_airtime_sta_weight airtime_sta_weight
+
+	append bss_conf "bss_load_update_period=$bss_load_update_period" "$N"
+	append bss_conf "chan_util_avg_period=$chan_util_avg_period" "$N"
+	append bss_conf "disassoc_low_ack=$disassoc_low_ack" "$N"
+	append bss_conf "skip_inactivity_poll=$skip_inactivity_poll" "$N"
+	append bss_conf "preamble=$short_preamble" "$N"
+	append bss_conf "wmm_enabled=$wmm" "$N"
+	append bss_conf "ignore_broadcast_ssid=$hidden" "$N"
+	append bss_conf "dynamic_probe_resp=$dynamic_probe_resp" "$N"
+	append bss_conf "uapsd_advertisement_enabled=$uapsd" "$N"
+	append bss_conf "utf8_ssid=$utf8_ssid" "$N"
+	append bss_conf "multi_ap=$multi_ap" "$N"
+	[ -n "$vendor_elements" ] && append bss_conf "vendor_elements=$vendor_elements" "$N"
+
+	[ "$tdls_prohibit" -gt 0 ] && append bss_conf "tdls_prohibit=$tdls_prohibit" "$N"
+
+	[ "$wpa" -gt 0 ] && {
+		[ -n "$wpa_group_rekey"  ] && append bss_conf "wpa_group_rekey=$wpa_group_rekey" "$N"
+		[ -n "$wpa_pair_rekey"   ] && append bss_conf "wpa_ptk_rekey=$wpa_pair_rekey"    "$N"
+		[ -n "$wpa_master_rekey" ] && append bss_conf "wpa_gmk_rekey=$wpa_master_rekey"  "$N"
+		[ -n "$wpa_strict_rekey" ] && append bss_conf "wpa_strict_rekey=$wpa_strict_rekey" "$N"
+	}
+
+	set_default nasid "${macaddr//\:}"
+	append bss_conf "nas_identifier=$nasid" "$N"
+
+	[ -n "$acct_server" ] && {
+		append bss_conf "acct_server_addr=$acct_server" "$N"
+		append bss_conf "acct_server_port=$acct_port" "$N"
+		[ -n "$acct_secret" ] && \
+			append bss_conf "acct_server_shared_secret=$acct_secret" "$N"
+		[ -n "$acct_interval" ] && \
+			append bss_conf "radius_acct_interim_interval=$acct_interval" "$N"
+		json_for_each_item append_radius_acct_req_attr radius_acct_req_attr
+	}
+
+	[ -n "$acct_server_secondary" ] && {
+		append bss_conf "acct_server_addr=$acct_server_secondary" "$N"
+		append bss_conf "acct_server_port=$acct_port_secondary" "$N"
+		[ -n "$acct_secret_secondary" ] && \
+			append bss_conf "acct_server_shared_secret=$acct_secret_secondary" "$N"
+	}
+
+	case "$auth_type" in
+		sae|owe|eap192|eap2)
+			set_default ieee80211w 2
+			set_default sae_require_mfp 1
+		;;
+		psk-sae|psk2-radius|eap-eap2)
+			set_default ieee80211w 1
+			set_default sae_require_mfp 1
+		;;
+	esac
+	[ -n "$sae_require_mfp" ] && append bss_conf "sae_require_mfp=$sae_require_mfp" "$N"
+	[ -n "$sae_pwe" ] && append bss_conf "sae_pwe=$sae_pwe" "$N"
+
+	local vlan_possible=""
+
+	case "$auth_type" in
+		none|owe)
+			json_get_vars owe_transition_bssid owe_transition_ssid owe_transition_ifname
+
+			[ -n "$owe_transition_ssid" ] && append bss_conf "owe_transition_ssid=\"$owe_transition_ssid\"" "$N"
+			[ -n "$owe_transition_bssid" ] && append bss_conf "owe_transition_bssid=$owe_transition_bssid" "$N"
+			[ -n "$owe_transition_ifname" ] && append bss_conf "owe_transition_ifname=$owe_transition_ifname" "$N"
+
+			wps_possible=1
+			# Here we make the assumption that if we're in open mode
+			# with WPS enabled, we got to be in unconfigured state.
+			wps_not_configured=1
+			vlan_possible=1
+			[ "$macfilter" = radius ] && {
+				append_radius_server
+			}
+		;;
+		psk|sae|psk-sae)
+			json_get_vars key wpa_psk_file
+			if [ ${#key} -eq 64 ]; then
+				append bss_conf "wpa_psk=$key" "$N"
+			elif [ ${#key} -ge 8 ] && [ ${#key} -le 63 ]; then
+				append bss_conf "wpa_passphrase=$key" "$N"
+			elif [ -n "$key" ] || [ -z "$wpa_psk_file" ]; then
+				wireless_setup_vif_failed INVALID_WPA_PSK
+				return 1
+			fi
+			[ -z "$wpa_psk_file" ] && set_default wpa_psk_file /var/run/hostapd-$ifname.psk
+			[ -n "$wpa_psk_file" ] && {
+				[ -e "$wpa_psk_file" ] || touch "$wpa_psk_file"
+				append bss_conf "wpa_psk_file=$wpa_psk_file" "$N"
+			}
+			[ "$eapol_version" -ge "1" -a "$eapol_version" -le "2" ] && append bss_conf "eapol_version=$eapol_version" "$N"
+
+			set_default dynamic_vlan 0
+			vlan_possible=1
+			wps_possible=1
+		;;
+		eap|eap192|eap-eap2|eap2)
+			append_radius_server
+			# radius can provide VLAN ID for clients
+			vlan_possible=1
+			append bss_conf "eapol_key_index_workaround=1" "$N"
+			append bss_conf "ieee8021x=1" "$N"
+
+			[ "$eapol_version" -ge "1" -a "$eapol_version" -le "2" ] && append bss_conf "eapol_version=$eapol_version" "$N"
+		;;
+		wep)
+			local wep_keyidx=0
+			json_get_vars key
+			hostapd_append_wep_key bss_conf
+			append bss_conf "wep_default_key=$wep_keyidx" "$N"
+			[ -n "$wep_rekey" ] && append bss_conf "wep_rekey_period=$wep_rekey" "$N"
+		;;
+		psk2-radius)
+			append bss_conf "wpa_psk_radius=3" "$N"
+			append_radius_server
+			vlan_possible=1
+		;;
+	esac
+
+	local auth_algs=$((($auth_mode_shared << 1) | $auth_mode_open))
+	append bss_conf "auth_algs=${auth_algs:-1}" "$N"
+	append bss_conf "wpa=$wpa" "$N"
+	[ -n "$wpa_pairwise" ] && append bss_conf "wpa_pairwise=$wpa_pairwise" "$N"
+
+	set_default wps_pushbutton 0
+	set_default wps_label 0
+	set_default wps_pbc_in_m1 0
+
+	config_methods=
+	[ "$wps_pushbutton" -gt 0 ] && append config_methods push_button
+	[ "$wps_label" -gt 0 ] && append config_methods label
+
+	# WPS not possible on Multi-AP backhaul-only SSID
+	[ "$multi_ap" = 1 ] && wps_possible=
+
+	[ -n "$wps_possible" -a -n "$config_methods" ] && {
+		set_default ext_registrar 0
+		set_default wps_device_type "6-0050F204-1"
+		set_default wps_device_name "OpenWrt AP"
+		set_default wps_manufacturer "www.openwrt.org"
+		set_default wps_independent 1
+
+		wps_state=2
+		[ -n "$wps_not_configured" ] && wps_state=1
+
+		[ "$ext_registrar" -gt 0 -a -n "$network_bridge" ] && append bss_conf "upnp_iface=$network_bridge" "$N"
+
+		append bss_conf "eap_server=1" "$N"
+		[ -n "$wps_pin" ] && append bss_conf "ap_pin=$wps_pin" "$N"
+		append bss_conf "wps_state=$wps_state" "$N"
+		append bss_conf "device_type=$wps_device_type" "$N"
+		append bss_conf "device_name=$wps_device_name" "$N"
+		append bss_conf "manufacturer=$wps_manufacturer" "$N"
+		append bss_conf "config_methods=$config_methods" "$N"
+		append bss_conf "wps_independent=$wps_independent" "$N"
+		[ -n "$wps_ap_setup_locked" ] && append bss_conf "ap_setup_locked=$wps_ap_setup_locked" "$N"
+		[ "$wps_pbc_in_m1" -gt 0 ] && append bss_conf "pbc_in_m1=$wps_pbc_in_m1" "$N"
+		[ "$multi_ap" -gt 0 ] && [ -n "$multi_ap_backhaul_ssid" ] && {
+			append bss_conf "multi_ap_backhaul_ssid=\"$multi_ap_backhaul_ssid\"" "$N"
+			if [ -z "$multi_ap_backhaul_key" ]; then
+				:
+			elif [ ${#multi_ap_backhaul_key} -lt 8 ]; then
+				wireless_setup_vif_failed INVALID_WPA_PSK
+				return 1
+			elif [ ${#multi_ap_backhaul_key} -eq 64 ]; then
+				append bss_conf "multi_ap_backhaul_wpa_psk=$multi_ap_backhaul_key" "$N"
+			else
+				append bss_conf "multi_ap_backhaul_wpa_passphrase=$multi_ap_backhaul_key" "$N"
+			fi
+		}
+	}
+
+	append bss_conf "ssid=$ssid" "$N"
+	[ -n "$network_bridge" ] && append bss_conf "bridge=$network_bridge${N}wds_bridge=" "$N"
+	[ -n "$network_ifname" ] && append bss_conf "snoop_iface=$network_ifname" "$N"
+	[ -n "$iapp_interface" ] && {
+		local ifname
+		network_get_device ifname "$iapp_interface" || ifname="$iapp_interface"
+		append bss_conf "iapp_interface=$ifname" "$N"
+	}
+
+	json_get_vars time_advertisement time_zone wnm_sleep_mode wnm_sleep_mode_no_keys bss_transition
+	set_default bss_transition 0
+	set_default wnm_sleep_mode 0
+	set_default wnm_sleep_mode_no_keys 0
+
+	[ -n "$time_advertisement" ] && append bss_conf "time_advertisement=$time_advertisement" "$N"
+	[ -n "$time_zone" ] && append bss_conf "time_zone=$time_zone" "$N"
+	if [ "$wnm_sleep_mode" -eq "1" ]; then
+		append bss_conf "wnm_sleep_mode=1" "$N"
+		[ "$wnm_sleep_mode_no_keys" -eq "1" ] && append bss_conf "wnm_sleep_mode_no_keys=1" "$N"
+	fi
+	[ "$bss_transition" -eq "1" ] && append bss_conf "bss_transition=1" "$N"
+
+	json_get_vars ieee80211k rrm_neighbor_report rrm_beacon_report
+	set_default ieee80211k 0
+	if [ "$ieee80211k" -eq "1" ]; then
+		set_default rrm_neighbor_report 1
+		set_default rrm_beacon_report 1
+	else
+		set_default rrm_neighbor_report 0
+		set_default rrm_beacon_report 0
+	fi
+
+	[ "$rrm_neighbor_report" -eq "1" ] && append bss_conf "rrm_neighbor_report=1" "$N"
+	[ "$rrm_beacon_report" -eq "1" ] && append bss_conf "rrm_beacon_report=1" "$N"
+
+	json_get_vars ftm_responder stationary_ap lci civic
+	set_default ftm_responder 0
+	if [ "$ftm_responder" -eq "1" ]; then
+		set_default stationary_ap 0
+		iw phy "$phy" info | grep -q "ENABLE_FTM_RESPONDER" && {
+			append bss_conf "ftm_responder=1" "$N"
+			[ "$stationary_ap" -eq "1" ] && append bss_conf "stationary_ap=1" "$N"
+			[ -n "$lci" ] && append bss_conf "lci=$lci" "$N"
+			[ -n "$civic" ] && append bss_conf "civic=$civic" "$N"
+		}
+	fi
+
+	if [ "$wpa" -ge "1" ]; then
+		json_get_vars ieee80211r
+		set_default ieee80211r 0
+
+		if [ "$ieee80211r" -gt "0" ]; then
+			json_get_vars mobility_domain ft_psk_generate_local ft_over_ds reassociation_deadline
+
+			set_default mobility_domain "$(echo "$ssid" | md5sum | head -c 4)"
+			set_default ft_over_ds 1
+			set_default reassociation_deadline 1000
+			skip_kh_setup=0
+
+			case "$auth_type" in
+				psk|psk-sae)
+					set_default ft_psk_generate_local 1
+					skip_kh_setup="$ft_psk_generate_local"
+				;;
+				*)
+					set_default ft_psk_generate_local 0
+				;;
+			esac
+
+			case "$auth_type" in
+				*sae*) skip_kh_setup=0;;
+			esac
+
+			[ -n "$network_ifname" ] && append bss_conf "ft_iface=$network_ifname" "$N"
+			append bss_conf "mobility_domain=$mobility_domain" "$N"
+			append bss_conf "ft_psk_generate_local=$ft_psk_generate_local" "$N"
+			append bss_conf "ft_over_ds=$ft_over_ds" "$N"
+			append bss_conf "reassociation_deadline=$reassociation_deadline" "$N"
+
+			if [ "$skip_kh_setup" -eq "0" ]; then
+				json_get_vars r0_key_lifetime r1_key_holder pmk_r1_push
+				json_get_values r0kh r0kh
+				json_get_values r1kh r1kh
+
+				set_default r0_key_lifetime 10000
+				set_default pmk_r1_push 0
+
+				[ -n "$r0kh" -a -n "$r1kh" ] || {
+					key=`echo -n "$mobility_domain/$auth_secret" | md5sum | awk '{print $1}'`
+
+					set_default r0kh "ff:ff:ff:ff:ff:ff,*,$key"
+					set_default r1kh "00:00:00:00:00:00,00:00:00:00:00:00,$key"
+				}
+
+				[ -n "$r1_key_holder" ] && append bss_conf "r1_key_holder=$r1_key_holder" "$N"
+				append bss_conf "r0_key_lifetime=$r0_key_lifetime" "$N"
+				append bss_conf "pmk_r1_push=$pmk_r1_push" "$N"
+
+				for kh in $r0kh; do
+					append bss_conf "r0kh=${kh//,/ }" "$N"
+				done
+				for kh in $r1kh; do
+					append bss_conf "r1kh=${kh//,/ }" "$N"
+				done
+			fi
+		fi
+		if [ "$fils" -gt 0 ]; then
+			json_get_vars fils_realm
+			set_default fils_realm "$(echo "$ssid" | md5sum | head -c 8)"
+		fi
+
+		append bss_conf "wpa_disable_eapol_key_retries=$wpa_disable_eapol_key_retries" "$N"
+
+		hostapd_append_wpa_key_mgmt
+		[ -n "$wpa_key_mgmt" ] && append bss_conf "wpa_key_mgmt=$wpa_key_mgmt" "$N"
+	fi
+
+	if [ "$wpa" -ge "2" ]; then
+		if [ -n "$network_bridge" -a "$rsn_preauth" = 1 ]; then
+			set_default auth_cache 1
+			append bss_conf "rsn_preauth=1" "$N"
+			append bss_conf "rsn_preauth_interfaces=$network_bridge" "$N"
+		else
+			case "$auth_type" in
+			sae|psk-sae|owe)
+				set_default auth_cache 1
+			;;
+			*)
+				set_default auth_cache 0
+			;;
+			esac
+		fi
+
+		append bss_conf "okc=$auth_cache" "$N"
+		[ "$auth_cache" = 0 -a "$fils" = 0 ] && append bss_conf "disable_pmksa_caching=1" "$N"
+
+		# RSN -> allow management frame protection
+		case "$ieee80211w" in
+			[012])
+				json_get_vars ieee80211w_mgmt_cipher ieee80211w_max_timeout ieee80211w_retry_timeout
+				append bss_conf "ieee80211w=$ieee80211w" "$N"
+				[ "$ieee80211w" -gt "0" ] && {
+					case "$auth_type" in
+					eap192)
+						append bss_conf "group_mgmt_cipher=BIP-GMAC-256" "$N"
+						append bss_conf "group_cipher=GCMP-256" "$N"
+						;;
+					*)
+						append bss_conf "group_mgmt_cipher=${ieee80211w_mgmt_cipher:-AES-128-CMAC}" "$N"
+						;;
+					esac
+
+					[ -n "$ieee80211w_max_timeout" ] && \
+						append bss_conf "assoc_sa_query_max_timeout=$ieee80211w_max_timeout" "$N"
+					[ -n "$ieee80211w_retry_timeout" ] && \
+						append bss_conf "assoc_sa_query_retry_timeout=$ieee80211w_retry_timeout" "$N"
+				}
+			;;
+		esac
+	fi
+
+	_macfile="/var/run/hostapd-$ifname.maclist"
+	case "$macfilter" in
+		allow)
+			append bss_conf "macaddr_acl=1" "$N"
+			append bss_conf "accept_mac_file=$_macfile" "$N"
+			# accept_mac_file can be used to set MAC to VLAN ID mapping
+			vlan_possible=1
+		;;
+		deny)
+			append bss_conf "macaddr_acl=0" "$N"
+			append bss_conf "deny_mac_file=$_macfile" "$N"
+		;;
+		*)
+			_macfile=""
+		;;
+	esac
+
+	[ -n "$_macfile" ] && {
+		json_get_vars macfile
+		json_get_values maclist maclist
+
+		rm -f "$_macfile"
+		(
+			for mac in $maclist; do
+				echo "$mac"
+			done
+			[ -n "$macfile" -a -f "$macfile" ] && cat "$macfile"
+		) > "$_macfile"
+	}
+
+	[ -n "$vlan_possible" -a -n "$dynamic_vlan" ] && {
+		json_get_vars vlan_naming vlan_tagged_interface vlan_bridge vlan_file vlan_no_bridge
+		set_default vlan_naming 1
+		[ -z "$vlan_file" ] && set_default vlan_file /var/run/hostapd-$ifname.vlan
+		append bss_conf "dynamic_vlan=$dynamic_vlan" "$N"
+		append bss_conf "vlan_naming=$vlan_naming" "$N"
+		if [ -n "$vlan_bridge" ]; then
+			append bss_conf "vlan_bridge=$vlan_bridge" "$N"
+		else
+			set_default vlan_no_bridge 1
+		fi
+		append bss_conf "vlan_no_bridge=$vlan_no_bridge" "$N"
+		[ -n "$vlan_tagged_interface" ] && \
+			append bss_conf "vlan_tagged_interface=$vlan_tagged_interface" "$N"
+		[ -n "$vlan_file" ] && {
+			[ -e "$vlan_file" ] || touch "$vlan_file"
+			append bss_conf "vlan_file=$vlan_file" "$N"
+		}
+	}
+
+	json_get_vars iw_enabled iw_internet iw_asra iw_esr iw_uesa iw_access_network_type
+	json_get_vars iw_hessid iw_venue_group iw_venue_type iw_network_auth_type
+	json_get_vars iw_roaming_consortium iw_domain_name iw_anqp_3gpp_cell_net iw_nai_realm
+	json_get_vars iw_anqp_elem iw_qos_map_set iw_ipaddr_type_availability iw_gas_address3
+	json_get_vars iw_venue_name iw_venue_url
+
+	set_default iw_enabled 0
+	if [ "$iw_enabled" = "1" ]; then
+		append bss_conf "interworking=1" "$N"
+		set_default iw_internet 1
+		set_default iw_asra 0
+		set_default iw_esr 0
+		set_default iw_uesa 0
+
+		append bss_conf "internet=$iw_internet" "$N"
+		append bss_conf "asra=$iw_asra" "$N"
+		append bss_conf "esr=$iw_esr" "$N"
+		append bss_conf "uesa=$iw_uesa" "$N"
+
+		[ -n "$iw_access_network_type" ] && \
+			append bss_conf "access_network_type=$iw_access_network_type" "$N"
+		[ -n "$iw_hessid" ] && append bss_conf "hessid=$iw_hessid" "$N"
+		[ -n "$iw_venue_group" ] && \
+			append bss_conf "venue_group=$iw_venue_group" "$N"
+		[ -n "$iw_venue_type" ] && append bss_conf "venue_type=$iw_venue_type" "$N"
+		[ -n "$iw_network_auth_type" ] && \
+			append bss_conf "network_auth_type=$iw_network_auth_type" "$N"
+		[ -n "$iw_gas_address3" ] && append bss_conf "gas_address3=$iw_gas_address3" "$N"
+
+		json_for_each_item append_iw_roaming_consortium iw_roaming_consortium
+		json_for_each_item append_iw_anqp_elem iw_anqp_elem
+		json_for_each_item append_iw_nai_realm iw_nai_realm
+		json_for_each_item append_iw_venue_name iw_venue_name
+		json_for_each_item append_iw_venue_url iw_venue_url
+
+		iw_domain_name_conf=
+		json_for_each_item append_iw_domain_name iw_domain_name
+		[ -n "$iw_domain_name_conf" ] && \
+			append bss_conf "domain_name=$iw_domain_name_conf" "$N"
+
+		iw_anqp_3gpp_cell_net_conf=
+		json_for_each_item append_iw_anqp_3gpp_cell_net iw_anqp_3gpp_cell_net
+		[ -n "$iw_anqp_3gpp_cell_net_conf" ] && \
+			append bss_conf "anqp_3gpp_cell_net=$iw_anqp_3gpp_cell_net_conf" "$N"
+	fi
+
+	set_default iw_qos_map_set 0,0,2,16,1,1,255,255,18,22,24,38,40,40,44,46,48,56
+	case "$iw_qos_map_set" in
+		*,*);;
+		*) iw_qos_map_set="";;
+	esac
+	[ -n "$iw_qos_map_set" ] && append bss_conf "qos_map_set=$iw_qos_map_set" "$N"
+
+	local hs20 disable_dgaf osen anqp_domain_id hs20_deauth_req_timeout \
+		osu_ssid hs20_wan_metrics hs20_operating_class hs20_t_c_filename hs20_t_c_timestamp \
+		hs20_t_c_server_url hs20_release
+	json_get_vars hs20 disable_dgaf osen anqp_domain_id hs20_deauth_req_timeout \
+		osu_ssid hs20_wan_metrics hs20_operating_class hs20_t_c_filename hs20_t_c_timestamp \
+		hs20_t_c_server_url hs20_release
+
+	set_default hs20 0
+	set_default hs20_release  1
+	set_default disable_dgaf $hs20
+	set_default osen 0
+	set_default anqp_domain_id 0
+	set_default hs20_deauth_req_timeout 60
+	if [ "$hs20" = "1" ]; then
+		append bss_conf "hs20=1" "$N"
+		append_hs20_icons
+		append bss_conf "hs20_release=$hs20_release" "$N"
+		append bss_conf "disable_dgaf=$disable_dgaf" "$N"
+		append bss_conf "osen=$osen" "$N"
+		append bss_conf "anqp_domain_id=$anqp_domain_id" "$N"
+		append bss_conf "hs20_deauth_req_timeout=$hs20_deauth_req_timeout" "$N"
+		[ -n "$osu_ssid" ] && append bss_conf "osu_ssid=$osu_ssid" "$N"
+		[ -n "$hs20_wan_metrics" ] && append bss_conf "hs20_wan_metrics=$hs20_wan_metrics" "$N"
+		[ -n "$hs20_operating_class" ] && append bss_conf "hs20_operating_class=$hs20_operating_class" "$N"
+		[ -n "$hs20_t_c_filename" ] && append bss_conf "hs20_t_c_filename=$hs20_t_c_filename" "$N"
+		[ -n "$hs20_t_c_timestamp" ] && append bss_conf "hs20_t_c_timestamp=$hs20_t_c_timestamp" "$N"
+		[ -n "$hs20_t_c_server_url" ] && append bss_conf "hs20_t_c_server_url=$hs20_t_c_server_url" "$N"
+		json_for_each_item append_hs20_oper_friendly_name hs20_oper_friendly_name
+		json_for_each_item append_hs20_conn_capab hs20_conn_capab
+		json_for_each_item append_osu_provider osu_provider
+		json_for_each_item append_operator_icon operator_icon
+	fi
+
+	if [ "$eap_server" = "1" ]; then
+		append bss_conf "eap_server=1" "$N"
+		append bss_conf "eap_server_erp=1" "$N"
+		[ -n "$eap_user_file" ] && append bss_conf "eap_user_file=$eap_user_file" "$N"
+		[ -n "$ca_cert" ] && append bss_conf "ca_cert=$ca_cert" "$N"
+		[ -n "$server_cert" ] && append bss_conf "server_cert=$server_cert" "$N"
+		[ -n "$private_key" ] && append bss_conf "private_key=$private_key" "$N"
+		[ -n "$private_key_passwd" ] && append bss_conf "private_key_passwd=$private_key_passwd" "$N"
+		[ -n "$server_id" ] && append bss_conf "server_id=$server_id" "$N"
+	fi
+
+	set_default multicast_to_unicast_all 0
+	if [ "$multicast_to_unicast_all" -gt 0 ]; then
+		append bss_conf "multicast_to_unicast=$multicast_to_unicast_all" "$N"
+	fi
+	set_default proxy_arp 0
+	if [ "$proxy_arp" -gt 0 ]; then
+		append bss_conf "proxy_arp=$proxy_arp" "$N"
+	fi
+
+	set_default per_sta_vif 0
+	if [ "$per_sta_vif" -gt 0 ]; then
+		append bss_conf "per_sta_vif=$per_sta_vif" "$N"
+	fi
+
+	[ -n "$uci_section" ] && append bss_conf "uci_section=$uci_section" "$N"
+
+	json_get_values opts hostapd_bss_options
+	for val in $opts; do
+		append bss_conf "$val" "$N"
+	done
+
+	append "$var" "$bss_conf" "$N"
+	return 0
+}
+
+hostapd_set_log_options() {
+	local var="$1"
+
+	local log_level log_80211 log_8021x log_radius log_wpa log_driver log_iapp log_mlme
+	json_get_vars log_level log_80211 log_8021x log_radius log_wpa log_driver log_iapp log_mlme
+
+	set_default log_level 2
+	set_default log_80211  1
+	set_default log_8021x  1
+	set_default log_radius 1
+	set_default log_wpa    1
+	set_default log_driver 1
+	set_default log_iapp   1
+	set_default log_mlme   1
+
+	local log_mask=$(( \
+		($log_80211  << 0) | \
+		($log_8021x  << 1) | \
+		($log_radius << 2) | \
+		($log_wpa    << 3) | \
+		($log_driver << 4) | \
+		($log_iapp   << 5) | \
+		($log_mlme   << 6)   \
+	))
+
+	append "$var" "logger_syslog=$log_mask" "$N"
+	append "$var" "logger_syslog_level=$log_level" "$N"
+	append "$var" "logger_stdout=$log_mask" "$N"
+	append "$var" "logger_stdout_level=$log_level" "$N"
+
+	return 0
+}
+
+_wpa_supplicant_common() {
+	local ifname="$1"
+
+	_rpath="/var/run/wpa_supplicant"
+	_config="${_rpath}-$ifname.conf"
+}
+
+wpa_supplicant_teardown_interface() {
+	_wpa_supplicant_common "$1"
+	rm -rf "$_rpath/$1" "$_config"
+}
+
+wpa_supplicant_prepare_interface() {
+	local ifname="$1"
+	_w_driver="$2"
+
+	_wpa_supplicant_common "$1"
+
+	json_get_vars mode wds multi_ap
+
+	[ -n "$network_bridge" ] && {
+		fail=
+		case "$mode" in
+			adhoc)
+				fail=1
+			;;
+			sta)
+				[ "$wds" = 1 -o "$multi_ap" = 1 ] || fail=1
+			;;
+		esac
+
+		[ -n "$fail" ] && {
+			wireless_setup_vif_failed BRIDGE_NOT_ALLOWED
+			return 1
+		}
+	}
+
+	local ap_scan=
+
+	_w_mode="$mode"
+
+	[ "$mode" = adhoc ] && {
+		ap_scan="ap_scan=2"
+	}
+
+	local country_str=
+	[ -n "$country" ] && {
+		country_str="country=$country"
+	}
+
+	multiap_flag_file="${_config}.is_multiap"
+	if [ "$multi_ap" = "1" ]; then
+		touch "$multiap_flag_file"
+	else
+		[ -e "$multiap_flag_file" ] && rm "$multiap_flag_file"
+	fi
+	wpa_supplicant_teardown_interface "$ifname"
+	cat > "$_config" <<EOF
+${scan_list:+freq_list=$scan_list}
+$ap_scan
+$country_str
+EOF
+	return 0
+}
+
+wpa_supplicant_set_fixed_freq() {
+	local freq="$1"
+	local htmode="$2"
+
+	append network_data "fixed_freq=1" "$N$T"
+	append network_data "frequency=$freq" "$N$T"
+	case "$htmode" in
+		NOHT) append network_data "disable_ht=1" "$N$T";;
+		HE20|HT20|VHT20) append network_data "disable_ht40=1" "$N$T";;
+		HT40*|VHT40|VHT80|VHT160|HE40|HE80|HE160) append network_data "ht40=1" "$N$T";;
+	esac
+	case "$htmode" in
+		VHT*) append network_data "vht=1" "$N$T";;
+	esac
+	case "$htmode" in
+		HE80|VHT80) append network_data "max_oper_chwidth=1" "$N$T";;
+		HE160|VHT160) append network_data "max_oper_chwidth=2" "$N$T";;
+		HE20|HE40|VHT20|VHT40) append network_data "max_oper_chwidth=0" "$N$T";;
+		*) append network_data "disable_vht=1" "$N$T";;
+	esac
+}
+
+wpa_supplicant_add_network() {
+	local ifname="$1"
+	local freq="$2"
+	local htmode="$3"
+	local noscan="$4"
+
+	_wpa_supplicant_common "$1"
+	wireless_vif_parse_encryption
+
+	json_get_vars \
+		ssid bssid key \
+		basic_rate mcast_rate \
+		ieee80211w ieee80211r fils \
+		multi_ap \
+		default_disabled
+
+	case "$auth_type" in
+		sae|owe|eap-eap2)
+			set_default ieee80211w 2
+		;;
+		psk-sae|eap192|eap2)
+			set_default ieee80211w 1
+		;;
+	esac
+
+	set_default ieee80211r 0
+	set_default multi_ap 0
+	set_default default_disabled 0
+
+	local key_mgmt='NONE'
+	local network_data=
+	local T="	"
+
+	local scan_ssid="scan_ssid=1"
+	local freq wpa_key_mgmt
+
+	[ "$_w_mode" = "adhoc" ] && {
+		append network_data "mode=1" "$N$T"
+		[ -n "$freq" ] && wpa_supplicant_set_fixed_freq "$freq" "$htmode"
+		[ "$noscan" = "1" ] && append network_data "noscan=1" "$N$T"
+
+		scan_ssid="scan_ssid=0"
+
+		[ "$_w_driver" = "nl80211" ] ||	append wpa_key_mgmt "WPA-NONE"
+	}
+
+	[ "$_w_mode" = "mesh" ] && {
+		json_get_vars mesh_id mesh_fwding mesh_rssi_threshold
+		[ -n "$mesh_id" ] && ssid="${mesh_id}"
+
+		append network_data "mode=5" "$N$T"
+		[ -n "$mesh_fwding" ] && append network_data "mesh_fwding=${mesh_fwding}" "$N$T"
+		[ -n "$mesh_rssi_threshold" ] && append network_data "mesh_rssi_threshold=${mesh_rssi_threshold}" "$N$T"
+		[ -n "$freq" ] && wpa_supplicant_set_fixed_freq "$freq" "$htmode"
+		[ "$noscan" = "1" ] && append network_data "noscan=1" "$N$T"
+		append wpa_key_mgmt "SAE"
+		scan_ssid=""
+	}
+
+	[ "$_w_mode" = "sta" ] && {
+		[ "$multi_ap" = 1 ] && append network_data "multi_ap_backhaul_sta=1" "$N$T"
+		[ "$default_disabled" = 1 ] && append network_data "disabled=1" "$N$T"
+	}
+
+	case "$auth_type" in
+		none) ;;
+		owe)
+			hostapd_append_wpa_key_mgmt
+			key_mgmt="$wpa_key_mgmt"
+		;;
+		wep)
+			local wep_keyidx=0
+			hostapd_append_wep_key network_data
+			append network_data "wep_tx_keyidx=$wep_keyidx" "$N$T"
+		;;
+		wps)
+			key_mgmt='WPS'
+		;;
+		psk|sae|psk-sae)
+			local passphrase
+
+			if [ "$_w_mode" != "mesh" ]; then
+				hostapd_append_wpa_key_mgmt
+			fi
+
+			key_mgmt="$wpa_key_mgmt"
+
+			if [ ${#key} -eq 64 ]; then
+				passphrase="psk=${key}"
+			else
+				if [ "$_w_mode" = "mesh" ]; then
+					passphrase="sae_password=\"${key}\""
+				else
+					passphrase="psk=\"${key}\""
+				fi
+			fi
+			append network_data "$passphrase" "$N$T"
+		;;
+		eap|eap192|eap-eap2|eap2)
+			hostapd_append_wpa_key_mgmt
+			key_mgmt="$wpa_key_mgmt"
+
+			json_get_vars eap_type identity anonymous_identity ca_cert ca_cert_usesystem
+
+			[ "$fils" -gt 0 ] && append network_data "erp=1" "$N$T"
+			if [ "$ca_cert_usesystem" -eq "1" -a -f "/etc/ssl/certs/ca-certificates.crt" ]; then
+				append network_data "ca_cert=\"/etc/ssl/certs/ca-certificates.crt\"" "$N$T"
+			else
+				[ -n "$ca_cert" ] && append network_data "ca_cert=\"$ca_cert\"" "$N$T"
+			fi
+			[ -n "$identity" ] && append network_data "identity=\"$identity\"" "$N$T"
+			[ -n "$anonymous_identity" ] && append network_data "anonymous_identity=\"$anonymous_identity\"" "$N$T"
+			case "$eap_type" in
+				tls)
+					json_get_vars client_cert priv_key priv_key_pwd
+					append network_data "client_cert=\"$client_cert\"" "$N$T"
+					append network_data "private_key=\"$priv_key\"" "$N$T"
+					append network_data "private_key_passwd=\"$priv_key_pwd\"" "$N$T"
+
+					json_get_vars subject_match
+					[ -n "$subject_match" ] && append network_data "subject_match=\"$subject_match\"" "$N$T"
+
+					json_get_values altsubject_match altsubject_match
+					if [ -n "$altsubject_match" ]; then
+						local list=
+						for x in $altsubject_match; do
+							append list "$x" ";"
+						done
+						append network_data "altsubject_match=\"$list\"" "$N$T"
+					fi
+
+					json_get_values domain_match domain_match
+					if [ -n "$domain_match" ]; then
+						local list=
+						for x in $domain_match; do
+							append list "$x" ";"
+						done
+						append network_data "domain_match=\"$list\"" "$N$T"
+					fi
+
+					json_get_values domain_suffix_match domain_suffix_match
+					if [ -n "$domain_suffix_match" ]; then
+						local list=
+						for x in $domain_suffix_match; do
+							append list "$x" ";"
+						done
+						append network_data "domain_suffix_match=\"$list\"" "$N$T"
+					fi
+				;;
+				fast|peap|ttls)
+					json_get_vars auth password ca_cert2 ca_cert2_usesystem client_cert2 priv_key2 priv_key2_pwd
+					set_default auth MSCHAPV2
+
+					if [ "$auth" = "EAP-TLS" ]; then
+						if [ "$ca_cert2_usesystem" -eq "1" -a -f "/etc/ssl/certs/ca-certificates.crt" ]; then
+							append network_data "ca_cert2=\"/etc/ssl/certs/ca-certificates.crt\"" "$N$T"
+						else
+							[ -n "$ca_cert2" ] && append network_data "ca_cert2=\"$ca_cert2\"" "$N$T"
+						fi
+						append network_data "client_cert2=\"$client_cert2\"" "$N$T"
+						append network_data "private_key2=\"$priv_key2\"" "$N$T"
+						append network_data "private_key2_passwd=\"$priv_key2_pwd\"" "$N$T"
+					else
+						append network_data "password=\"$password\"" "$N$T"
+					fi
+
+					json_get_vars subject_match
+					[ -n "$subject_match" ] && append network_data "subject_match=\"$subject_match\"" "$N$T"
+
+					json_get_values altsubject_match altsubject_match
+					if [ -n "$altsubject_match" ]; then
+						local list=
+						for x in $altsubject_match; do
+							append list "$x" ";"
+						done
+						append network_data "altsubject_match=\"$list\"" "$N$T"
+					fi
+
+					json_get_values domain_match domain_match
+					if [ -n "$domain_match" ]; then
+						local list=
+						for x in $domain_match; do
+							append list "$x" ";"
+						done
+						append network_data "domain_match=\"$list\"" "$N$T"
+					fi
+
+					json_get_values domain_suffix_match domain_suffix_match
+					if [ -n "$domain_suffix_match" ]; then
+						local list=
+						for x in $domain_suffix_match; do
+							append list "$x" ";"
+						done
+						append network_data "domain_suffix_match=\"$list\"" "$N$T"
+					fi
+
+					phase2proto="auth="
+					case "$auth" in
+						"auth"*)
+							phase2proto=""
+						;;
+						"EAP-"*)
+							auth="$(echo $auth | cut -b 5- )"
+							[ "$eap_type" = "ttls" ] &&
+								phase2proto="autheap="
+							json_get_vars subject_match2
+							[ -n "$subject_match2" ] && append network_data "subject_match2=\"$subject_match2\"" "$N$T"
+
+							json_get_values altsubject_match2 altsubject_match2
+							if [ -n "$altsubject_match2" ]; then
+								local list=
+								for x in $altsubject_match2; do
+									append list "$x" ";"
+								done
+								append network_data "altsubject_match2=\"$list\"" "$N$T"
+							fi
+
+							json_get_values domain_match2 domain_match2
+							if [ -n "$domain_match2" ]; then
+								local list=
+								for x in $domain_match2; do
+									append list "$x" ";"
+								done
+								append network_data "domain_match2=\"$list\"" "$N$T"
+							fi
+
+							json_get_values domain_suffix_match2 domain_suffix_match2
+							if [ -n "$domain_suffix_match2" ]; then
+								local list=
+								for x in $domain_suffix_match2; do
+									append list "$x" ";"
+								done
+								append network_data "domain_suffix_match2=\"$list\"" "$N$T"
+							fi
+						;;
+					esac
+					append network_data "phase2=\"$phase2proto$auth\"" "$N$T"
+				;;
+			esac
+			append network_data "eap=$(echo $eap_type | tr 'a-z' 'A-Z')" "$N$T"
+		;;
+	esac
+
+	[ "$wpa_cipher" = GCMP ] && {
+		append network_data "pairwise=GCMP" "$N$T"
+		append network_data "group=GCMP" "$N$T"
+	}
+
+	[ "$mode" = mesh ] || {
+		case "$wpa" in
+			1)
+				append network_data "proto=WPA" "$N$T"
+			;;
+			2)
+				append network_data "proto=RSN" "$N$T"
+			;;
+		esac
+
+		case "$ieee80211w" in
+			[012])
+				[ "$wpa" -ge 2 ] && append network_data "ieee80211w=$ieee80211w" "$N$T"
+			;;
+		esac
+	}
+	[ -n "$bssid" ] && append network_data "bssid=$bssid" "$N$T"
+	[ -n "$beacon_int" ] && append network_data "beacon_int=$beacon_int" "$N$T"
+
+	local bssid_blacklist bssid_whitelist
+	json_get_values bssid_blacklist bssid_blacklist
+	json_get_values bssid_whitelist bssid_whitelist
+
+	[ -n "$bssid_blacklist" ] && append network_data "bssid_blacklist=$bssid_blacklist" "$N$T"
+	[ -n "$bssid_whitelist" ] && append network_data "bssid_whitelist=$bssid_whitelist" "$N$T"
+
+	[ -n "$basic_rate" ] && {
+		local br rate_list=
+		for br in $basic_rate; do
+			wpa_supplicant_add_rate rate_list "$br"
+		done
+		[ -n "$rate_list" ] && append network_data "rates=$rate_list" "$N$T"
+	}
+
+	[ -n "$mcast_rate" ] && {
+		local mc_rate=
+		wpa_supplicant_add_rate mc_rate "$mcast_rate"
+		append network_data "mcast_rate=$mc_rate" "$N$T"
+	}
+
+	if [ "$key_mgmt" = "WPS" ]; then
+		echo "wps_cred_processing=1" >> "$_config"
+	else
+		cat >> "$_config" <<EOF
+network={
+	$scan_ssid
+	ssid="$ssid"
+	key_mgmt=$key_mgmt
+	$network_data
+}
+EOF
+	fi
+	return 0
+}
+
+wpa_supplicant_run() {
+	local ifname="$1"
+	local hostapd_ctrl="$2"
+
+	_wpa_supplicant_common "$ifname"
+
+	ubus wait_for wpa_supplicant
+	local supplicant_res="$(ubus call wpa_supplicant config_add "{ \
+		\"driver\": \"${_w_driver:-wext}\", \"ctrl\": \"$_rpath\", \
+		\"iface\": \"$ifname\", \"config\": \"$_config\" \
+		${network_bridge:+, \"bridge\": \"$network_bridge\"} \
+		${hostapd_ctrl:+, \"hostapd_ctrl\": \"$hostapd_ctrl\"} \
+		}")"
+
+	ret="$?"
+
+	[ "$ret" != 0 -o -z "$supplicant_res" ] && wireless_setup_vif_failed WPA_SUPPLICANT_FAILED
+
+	wireless_add_process "$(jsonfilter -s "$supplicant_res" -l 1 -e @.pid)" "/usr/sbin/wpa_supplicant" 1 1
+
+	return $ret
+}
+
+hostapd_common_cleanup() {
+	killall meshd-nl80211
+}
diff --git a/ucentral-client/rootfs/lib/netifd/netifd-proto.sh b/ucentral-client/rootfs/lib/netifd/netifd-proto.sh
new file mode 100644
index 0000000..87d337d
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/netifd-proto.sh
@@ -0,0 +1,478 @@
+NETIFD_MAIN_DIR="${NETIFD_MAIN_DIR:-/lib/netifd}"
+PROTO_DEFAULT_OPTIONS="defaultroute peerdns metric"
+
+. /usr/share/libubox/jshn.sh
+. $NETIFD_MAIN_DIR/utils.sh
+
+proto_config_add_int() {
+	config_add_int "$@"
+}
+
+proto_config_add_string() {
+	config_add_string "$@"
+}
+
+proto_config_add_boolean() {
+	config_add_boolean "$@"
+}
+
+proto_config_add_array() {
+	config_add_array "$@"
+}
+
+proto_config_add_defaults() {
+	proto_config_add_boolean "defaultroute"
+	proto_config_add_boolean "peerdns"
+	proto_config_add_int "metric"
+}
+
+proto_add_dynamic_defaults() {
+	[ -n "$defaultroute" ] && json_add_boolean defaultroute "$defaultroute"
+	[ -n "$peerdns" ] && json_add_boolean peerdns "$peerdns"
+	[ -n "$metric" ] && json_add_int metric "$metric"
+}
+
+_proto_do_teardown() {
+	json_load "$data"
+	eval "proto_$1_teardown \"$interface\" \"$ifname\""
+}
+
+_proto_do_renew() {
+	json_load "$data"
+	eval "proto_$1_renew \"$interface\" \"$ifname\""
+}
+
+_proto_do_setup() {
+	json_load "$data"
+	_EXPORT_VAR=0
+	_EXPORT_VARS=
+	eval "proto_$1_setup \"$interface\" \"$ifname\""
+}
+
+proto_init_update() {
+	local ifname="$1"
+	local up="$2"
+	local external="$3"
+
+	PROTO_KEEP=0
+	PROTO_INIT=1
+	PROTO_TUNNEL_OPEN=
+	PROTO_IPADDR=
+	PROTO_IP6ADDR=
+	PROTO_ROUTE=
+	PROTO_ROUTE6=
+	PROTO_PREFIX6=
+	PROTO_DNS=
+	PROTO_DNS_SEARCH=
+	PROTO_NEIGHBOR=
+	PROTO_NEIGHBOR6=
+	json_init
+	json_add_int action 0
+	[ -n "$ifname" -a "*" != "$ifname" ] && json_add_string "ifname" "$ifname"
+	json_add_boolean "link-up" "$up"
+	[ -n "$3" ] && json_add_boolean "address-external" "$external"
+}
+
+proto_set_keep() {
+	PROTO_KEEP="$1"
+}
+
+proto_close_nested() {
+	[ -n "$PROTO_NESTED_OPEN" ] && json_close_object
+	PROTO_NESTED_OPEN=
+}
+
+proto_add_nested() {
+	PROTO_NESTED_OPEN=1
+	json_add_object "$1"
+}
+
+proto_add_tunnel() {
+	proto_add_nested "tunnel"
+}
+
+proto_close_tunnel() {
+	proto_close_nested
+}
+
+proto_add_data() {
+	proto_add_nested "data"
+}
+
+proto_close_data() {
+	proto_close_nested
+}
+
+proto_add_dns_server() {
+	local address="$1"
+
+	append PROTO_DNS "$address"
+}
+
+proto_add_dns_search() {
+	local address="$1"
+
+	append PROTO_DNS_SEARCH "$address"
+}
+
+proto_add_ipv4_address() {
+	local address="$1"
+	local mask="$2"
+	local broadcast="$3"
+	local ptp="$4"
+
+	append PROTO_IPADDR "$address/$mask/$broadcast/$ptp"
+}
+
+proto_add_ipv6_address() {
+	local address="$1"
+	local mask="$2"
+	local preferred="$3"
+	local valid="$4"
+	local offlink="$5"
+	local class="$6"
+
+	append PROTO_IP6ADDR "$address/$mask/$preferred/$valid/$offlink/$class"
+}
+
+proto_add_ipv4_neighbor(){
+	local address="$1"
+	local mac="$2"
+	local proxy="$3"
+
+	append PROTO_NEIGHBOR "$address/$mac/$proxy"
+}
+
+proto_add_ipv6_neighbor(){
+	local address="$1"
+	local mac="$2"
+	local proxy="$3"
+	local router="$4"
+
+	append PROTO_NEIGHBOR6 "$address/$mac/$proxy/$router"
+}
+
+proto_add_ipv4_route() {
+	local target="$1"
+	local mask="$2"
+	local gw="$3"
+	local source="$4"
+	local metric="$5"
+
+	append PROTO_ROUTE "$target/$mask/$gw/$metric///$source"
+}
+
+proto_add_ipv6_route() {
+	local target="$1"
+	local mask="$2"
+	local gw="$3"
+	local metric="$4"
+	local valid="$5"
+	local source="$6"
+	local table="$7"
+
+	append PROTO_ROUTE6 "$target/$mask/$gw/$metric/$valid/$table/$source"
+}
+
+proto_add_ipv6_prefix() {
+	local prefix="$1"
+	local valid="$2"
+	local preferred="$3"
+
+	if [ -z "$valid" ]; then
+		append PROTO_PREFIX6 "$prefix"
+	else
+		[ -z "$preferred" ] && preferred="$valid"
+		append PROTO_PREFIX6 "$prefix,$valid,$preferred"
+	fi
+}
+
+_proto_push_ipv4_addr() {
+	local str="$1"
+	local address mask broadcast ptp
+
+	address="${str%%/*}"
+	str="${str#*/}"
+	mask="${str%%/*}"
+	str="${str#*/}"
+	broadcast="${str%%/*}"
+	str="${str#*/}"
+	ptp="$str"
+
+	json_add_object ""
+	json_add_string ipaddr "$address"
+	[ -n "$mask" ] && json_add_string mask "$mask"
+	[ -n "$broadcast" ] && json_add_string broadcast "$broadcast"
+	[ -n "$ptp" ] && json_add_string ptp "$ptp"
+	json_close_object
+}
+
+_proto_push_ipv6_addr() {
+	local str="$1"
+	local address mask preferred valid offlink
+
+	address="${str%%/*}"
+	str="${str#*/}"
+	mask="${str%%/*}"
+	str="${str#*/}"
+	preferred="${str%%/*}"
+	str="${str#*/}"
+	valid="${str%%/*}"
+	str="${str#*/}"
+	offlink="${str%%/*}"
+	str="${str#*/}"
+	class="${str%%/*}"
+
+	json_add_object ""
+	json_add_string ipaddr "$address"
+	[ -n "$mask" ] && json_add_string mask "$mask"
+	[ -n "$preferred" ] && json_add_int preferred "$preferred"
+	[ -n "$valid" ] && json_add_int valid "$valid"
+	[ -n "$offlink" ] && json_add_boolean offlink "$offlink"
+	[ -n "$class" ] && json_add_string class "$class"
+	json_close_object
+}
+
+_proto_push_string() {
+	json_add_string "" "$1"
+}
+
+_proto_push_ipv4_neighbor(){
+	local str="$1"
+	local address mac proxy
+
+	address="${str%%/*}"
+	str="${str#*/}"
+	mac="${str%%/*}"
+	str="${str#*/}"
+	proxy="${str%%/*}"
+
+	json_add_object ""
+	json_add_string ipaddr "$address"
+	[ -n "$mac" ] && json_add_string mac "$mac"
+	[ -n "$proxy" ] && json_add_boolean proxy "$proxy"
+	json_close_object
+}
+
+_proto_push_ipv6_neighbor(){
+	local str="$1"
+	local address mac proxy router
+
+	address="${str%%/*}"
+	str="${str#*/}"
+	mac="${str%%/*}"
+	str="${str#*/}"
+	proxy="${str%%/*}"
+	str="${str#*/}"
+	router="${str%%/*}"
+
+	json_add_object ""
+	json_add_string ipaddr "$address"
+	[ -n "$mac" ] && json_add_string mac "$mac"
+	[ -n "$proxy" ] && json_add_boolean proxy "$proxy"
+	[ -n "$router" ] && json_add_boolean router "$router"
+	json_close_object
+}
+
+_proto_push_route() {
+	local str="$1";
+	local target="${str%%/*}"
+	str="${str#*/}"
+	local mask="${str%%/*}"
+	str="${str#*/}"
+	local gw="${str%%/*}"
+	str="${str#*/}"
+	local metric="${str%%/*}"
+	str="${str#*/}"
+	local valid="${str%%/*}"
+	str="${str#*/}"
+	local table="${str%%/*}"
+	str="${str#*/}"
+	local source="${str}"
+
+	json_add_object ""
+	json_add_string target "$target"
+	json_add_string netmask "$mask"
+	[ -n "$gw" ] && json_add_string gateway "$gw"
+	[ -n "$metric" ] && json_add_int metric "$metric"
+	[ -n "$valid" ] && json_add_int valid "$valid"
+	[ -n "$source" ] && json_add_string source "$source"
+	[ -n "$table" ] && json_add_string table "$table"
+	json_close_object
+}
+
+_proto_push_array() {
+	local name="$1"
+	local val="$2"
+	local cb="$3"
+
+	[ -n "$val" ] || return 0
+	json_add_array "$name"
+	for item in $val; do
+		eval "$cb \"\$item\""
+	done
+	json_close_array
+}
+
+_proto_notify() {
+	local interface="$1"
+	local options="$2"
+	json_add_string "interface" "$interface"
+	ubus $options call network.interface notify_proto "$(json_dump)"
+}
+
+proto_send_update() {
+	local interface="$1"
+
+	proto_close_nested
+	json_add_boolean keep "$PROTO_KEEP"
+	_proto_push_array "ipaddr" "$PROTO_IPADDR" _proto_push_ipv4_addr
+	_proto_push_array "ip6addr" "$PROTO_IP6ADDR" _proto_push_ipv6_addr
+	_proto_push_array "routes" "$PROTO_ROUTE" _proto_push_route
+	_proto_push_array "routes6" "$PROTO_ROUTE6" _proto_push_route
+	_proto_push_array "ip6prefix" "$PROTO_PREFIX6" _proto_push_string
+	_proto_push_array "dns" "$PROTO_DNS" _proto_push_string
+	_proto_push_array "dns_search" "$PROTO_DNS_SEARCH" _proto_push_string
+	_proto_push_array "neighbor" "$PROTO_NEIGHBOR" _proto_push_ipv4_neighbor
+	_proto_push_array "neighbor6" "$PROTO_NEIGHBOR6" _proto_push_ipv6_neighbor
+	_proto_notify "$interface"
+}
+
+proto_export() {
+	local var="VAR${_EXPORT_VAR}"
+	_EXPORT_VAR="$(($_EXPORT_VAR + 1))"
+	export -- "$var=$1"
+	append _EXPORT_VARS "$var"
+}
+
+proto_run_command() {
+	local interface="$1"; shift
+
+	json_init
+	json_add_int action 1
+	json_add_array command
+	while [ $# -gt 0 ]; do
+		json_add_string "" "$1"
+		shift
+	done
+	json_close_array
+	[ -n "$_EXPORT_VARS" ] && {
+		json_add_array env
+		for var in $_EXPORT_VARS; do
+			eval "json_add_string \"\" \"\${$var}\""
+		done
+		json_close_array
+	}
+	_proto_notify "$interface"
+}
+
+proto_kill_command() {
+	local interface="$1"; shift
+
+	json_init
+	json_add_int action 2
+	[ -n "$1" ] && json_add_int signal "$1"
+	_proto_notify "$interface"
+}
+
+proto_notify_error() {
+	local interface="$1"; shift
+
+	json_init
+	json_add_int action 3
+	json_add_array error
+	while [ $# -gt 0 ]; do
+		json_add_string "" "$1"
+		shift
+	done
+	json_close_array
+	_proto_notify "$interface"
+}
+
+proto_block_restart() {
+	local interface="$1"; shift
+
+	json_init
+	json_add_int action 4
+	_proto_notify "$interface"
+}
+
+proto_set_available() {
+	local interface="$1"
+	local state="$2"
+	json_init
+	json_add_int action 5
+	json_add_boolean available "$state"
+	_proto_notify "$interface"
+}
+
+proto_add_host_dependency() {
+	local interface="$1"
+	local host="$2"
+	local ifname="$3"
+
+	# execute in subshell to not taint callers env
+	# see tickets #11046, #11545, #11570
+	(
+		json_init
+		json_add_int action 6
+		json_add_string host "$host"
+		[ -n "$ifname" ] && json_add_string ifname "$ifname"
+		_proto_notify "$interface" -S
+	)
+}
+
+proto_setup_failed() {
+	local interface="$1"
+	json_init
+	json_add_int action 7
+	_proto_notify "$interface"
+}
+
+init_proto() {
+	proto="$1"; shift
+	cmd="$1"; shift
+
+	case "$cmd" in
+		dump)
+			add_protocol() {
+				no_device=0
+				no_proto_task=0
+				available=0
+				renew_handler=0
+				teardown_on_l3_link_down=0
+
+				add_default_handler "proto_$1_init_config"
+
+				json_init
+				json_add_string "name" "$1"
+				json_add_array "config"
+				eval "proto_$1_init_config"
+				json_close_array
+				json_add_boolean no-device "$no_device"
+				json_add_boolean no-proto-task "$no_proto_task"
+				json_add_boolean available "$available"
+				json_add_boolean renew-handler "$renew_handler"
+				json_add_boolean lasterror "$lasterror"
+				json_add_boolean teardown-on-l3-link-down "$teardown_on_l3_link_down"
+				json_dump
+			}
+		;;
+		setup|teardown|renew)
+			interface="$1"; shift
+			data="$1"; shift
+			ifname="$1"; shift
+
+			add_protocol() {
+				[[ "$proto" == "$1" ]] || return 0
+
+				case "$cmd" in
+					setup) _proto_do_setup "$1";;
+					teardown) _proto_do_teardown "$1" ;;
+					renew) _proto_do_renew "$1" ;;
+					*) return 1 ;;
+				esac
+			}
+		;;
+	esac
+}
diff --git a/ucentral-client/rootfs/lib/netifd/netifd-wireless.sh b/ucentral-client/rootfs/lib/netifd/netifd-wireless.sh
new file mode 100644
index 0000000..9dcb906
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/netifd-wireless.sh
@@ -0,0 +1,442 @@
+NETIFD_MAIN_DIR="${NETIFD_MAIN_DIR:-/lib/netifd}"
+
+. /usr/share/libubox/jshn.sh
+. $NETIFD_MAIN_DIR/utils.sh
+
+CMD_UP=0
+CMD_SET_DATA=1
+CMD_PROCESS_ADD=2
+CMD_PROCESS_KILL_ALL=3
+CMD_SET_RETRY=4
+
+add_driver() {
+	return
+}
+
+wireless_setup_vif_failed() {
+	local error="$1"
+	echo "Interface $_w_iface setup failed: $error"
+}
+
+wireless_setup_failed() {
+	local error="$1"
+
+	echo "Device setup failed: $error"
+	wireless_set_retry 0
+}
+
+prepare_key_wep() {
+	local key="$1"
+	local hex=1
+
+	echo -n "$key" | grep -qE "[^a-fA-F0-9]" && hex=0
+	[ "${#key}" -eq 10 -a $hex -eq 1 ] || \
+	[ "${#key}" -eq 26 -a $hex -eq 1 ] || {
+		[ "${key:0:2}" = "s:" ] && key="${key#s:}"
+		key="$(echo -n "$key" | hexdump -ve '1/1 "%02x" ""')"
+	}
+	echo "$key"
+}
+
+_wdev_prepare_channel() {
+	json_get_vars channel band hwmode
+
+	auto_channel=0
+	enable_ht=0
+	htmode=
+	hwmode="${hwmode##11}"
+
+	case "$channel" in
+		""|0|auto)
+			channel=0
+			auto_channel=1
+		;;
+		[0-9]*) ;;
+		*)
+			wireless_setup_failed "INVALID_CHANNEL"
+		;;
+	esac
+
+	case "$hwmode" in
+		a|b|g|ad) ;;
+		*)
+			if [ "$channel" -gt 14 ]; then
+				hwmode=a
+			else
+				hwmode=g
+			fi
+		;;
+	esac
+
+	case "$band" in
+		2g) hwmode=g;;
+		5g|6g) hwmode=a;;
+		60g) hwmode=ad;;
+		*)
+			case "$hwmode" in
+				*a) band=5g;;
+				*ad) band=60g;;
+				*b|*g) band=2g;;
+			esac
+		;;
+	esac
+}
+
+_wdev_handler() {
+	json_load "$data"
+
+	json_select config
+	_wdev_prepare_channel
+	json_select ..
+
+	eval "drv_$1_$2 \"$interface\""
+}
+
+_wdev_msg_call() {
+	local old_cb
+
+	json_set_namespace wdev old_cb
+	"$@"
+	json_set_namespace $old_cb
+}
+
+_wdev_wrapper() {
+	while [ -n "$1" ]; do
+		eval "$1() { _wdev_msg_call _$1 \"\$@\"; }"
+		shift
+	done
+}
+
+_wdev_notify_init() {
+	local command="$1"; shift;
+
+	json_init
+	json_add_int "command" "$command"
+	json_add_string "device" "$__netifd_device"
+	while [ -n "$1" ]; do
+		local name="$1"; shift
+		local value="$1"; shift
+		json_add_string "$name" "$value"
+	done
+	json_add_object "data"
+}
+
+_wdev_notify() {
+	local options="$1"
+
+	json_close_object
+	ubus $options call network.wireless notify "$(json_dump)"
+}
+
+_wdev_add_variables() {
+	while [ -n "$1" ]; do
+		local var="${1%%=*}"
+		local val="$1"
+		shift
+		[[ "$var" = "$val" ]] && continue
+		val="${val#*=}"
+		json_add_string "$var" "$val"
+	done
+}
+
+_wireless_add_vif() {
+	local name="$1"; shift
+	local ifname="$1"; shift
+
+	_wdev_notify_init $CMD_SET_DATA "interface" "$name"
+	json_add_string "ifname" "$ifname"
+	_wdev_add_variables "$@"
+	_wdev_notify
+}
+
+_wireless_add_vlan() {
+	local name="$1"; shift
+	local ifname="$1"; shift
+
+	_wdev_notify_init $CMD_SET_DATA interface "$__cur_interface" "vlan" "$name"
+	json_add_string "ifname" "$ifname"
+	_wdev_add_variables "$@"
+	_wdev_notify
+}
+
+_wireless_set_up() {
+	_wdev_notify_init $CMD_UP
+	_wdev_notify
+}
+
+_wireless_set_data() {
+	_wdev_notify_init $CMD_SET_DATA
+	_wdev_add_variables "$@"
+	_wdev_notify
+}
+
+_wireless_add_process() {
+	_wdev_notify_init $CMD_PROCESS_ADD
+	local exe="$2"
+	[ -L "$exe" ] && exe="$(readlink -f "$exe")"
+	json_add_int pid "$1"
+	json_add_string exe "$exe"
+	[ -n "$3" ] && json_add_boolean required 1
+	[ -n "$4" ] && json_add_boolean keep 1
+	exe2="$(readlink -f /proc/$1/exe)"
+	[ "$exe" != "$exe2" ] && echo "WARNING (wireless_add_process): executable path $exe does not match process $1 path ($exe2)"
+	_wdev_notify
+}
+
+_wireless_process_kill_all() {
+	_wdev_notify_init $CMD_PROCESS_KILL_ALL
+	[ -n "$1" ] && json_add_int signal "$1"
+	_wdev_notify
+}
+
+_wireless_set_retry() {
+	_wdev_notify_init $CMD_SET_RETRY
+	json_add_int retry "$1"
+	_wdev_notify
+}
+
+_wdev_wrapper \
+	wireless_add_vif \
+	wireless_add_vlan \
+	wireless_set_up \
+	wireless_set_data \
+	wireless_add_process \
+	wireless_process_kill_all \
+	wireless_set_retry \
+
+wireless_vif_parse_encryption() {
+	json_get_vars encryption
+	set_default encryption none
+
+	auth_mode_open=1
+	auth_mode_shared=0
+	auth_type=none
+
+	if [ "$hwmode" = "ad" ]; then
+		wpa_cipher="GCMP"
+	else
+		wpa_cipher="CCMP"
+	fi
+
+	case "$encryption" in
+		*tkip+aes|*tkip+ccmp|*aes+tkip|*ccmp+tkip) wpa_cipher="CCMP TKIP";;
+		*ccmp256) wpa_cipher="CCMP-256";;
+		*aes|*ccmp) wpa_cipher="CCMP";;
+		*tkip) wpa_cipher="TKIP";;
+		*gcmp256) wpa_cipher="GCMP-256";;
+		*gcmp) wpa_cipher="GCMP";;
+		wpa3-192*) wpa_cipher="GCMP-256";;
+	esac
+
+	# 802.11n requires CCMP for WPA
+	[ "$enable_ht:$wpa_cipher" = "1:TKIP" ] && wpa_cipher="CCMP TKIP"
+
+	# Examples:
+	# psk-mixed/tkip    => WPA1+2 PSK, TKIP
+	# wpa-psk2/tkip+aes => WPA2 PSK, CCMP+TKIP
+	# wpa2/tkip+aes     => WPA2 RADIUS, CCMP+TKIP
+
+	case "$encryption" in
+		wpa2*|wpa3*|*psk2*|psk3*|sae*|owe*)
+			wpa=2
+		;;
+		wpa*mixed*|*psk*mixed*)
+			wpa=3
+		;;
+		wpa*|*psk*)
+			wpa=1
+		;;
+		*)
+			wpa=0
+			wpa_cipher=
+		;;
+	esac
+	wpa_pairwise="$wpa_cipher"
+
+	case "$encryption" in
+		owe*)
+			auth_type=owe
+		;;
+		wpa3-192*)
+			auth_type=eap192
+		;;
+		wpa3-mixed*)
+			auth_type=eap-eap2
+		;;
+		wpa3*)
+			auth_type=eap2
+		;;
+		psk2-radius*)
+			auth_type=psk2-radius
+		;;
+		psk3-mixed*|sae-mixed*)
+			auth_type=psk-sae
+		;;
+		psk3*|sae*)
+			auth_type=sae
+		;;
+		*psk*)
+			auth_type=psk
+		;;
+		*wpa*|*8021x*)
+			auth_type=eap
+		;;
+		*wep*)
+			auth_type=wep
+			case "$encryption" in
+				*shared*)
+					auth_mode_open=0
+					auth_mode_shared=1
+				;;
+				*mixed*)
+					auth_mode_shared=1
+				;;
+			esac
+		;;
+	esac
+
+	case "$encryption" in
+		*osen*)
+			auth_osen=1
+		;;
+	esac
+}
+
+_wireless_set_brsnoop_isolation() {
+	local multicast_to_unicast="$1"
+	local isolate
+
+	json_get_vars isolate proxy_arp
+
+	[ ${isolate:-0} -gt 0 -o -z "$network_bridge" ] && return
+	[ ${multicast_to_unicast:-1} -gt 0 -o ${proxy_arp:-0} -gt 0 ] && json_add_boolean isolate 1
+}
+
+for_each_interface() {
+	local _w_types="$1"; shift
+	local _w_ifaces _w_iface
+	local _w_type
+	local _w_found
+
+	local multicast_to_unicast
+
+	json_get_keys _w_ifaces interfaces
+	json_select interfaces
+	for _w_iface in $_w_ifaces; do
+		json_select "$_w_iface"
+		if [ -n "$_w_types" ]; then
+			json_get_var network_bridge bridge
+			json_get_var network_ifname bridge-ifname
+			json_get_var multicast_to_unicast multicast_to_unicast
+			json_select config
+			_wireless_set_brsnoop_isolation "$multicast_to_unicast"
+			json_get_var _w_type mode
+			json_select ..
+			_w_types=" $_w_types "
+			[[ "${_w_types%$_w_type*}" = "$_w_types" ]] && {
+				json_select ..
+				continue
+			}
+		fi
+		__cur_interface="$_w_iface"
+		"$@" "$_w_iface"
+		json_select ..
+	done
+	json_select ..
+}
+
+for_each_vlan() {
+	local _w_vlans _w_vlan
+
+	json_get_keys _w_vlans vlans
+	json_select vlans
+	for _w_vlan in $_w_vlans; do
+		json_select "$_w_vlan"
+		json_select config
+		"$@" "$_w_vlan"
+		json_select ..
+		json_select ..
+	done
+	json_select ..
+}
+
+for_each_station() {
+	local _w_stas _w_sta
+
+	json_get_keys _w_stas stas
+	json_select stas
+	for _w_sta in $_w_stas; do
+		json_select "$_w_sta"
+		json_select config
+		"$@" "$_w_sta"
+		json_select ..
+		json_select ..
+	done
+	json_select ..
+}
+
+_wdev_common_device_config() {
+	config_add_string channel hwmode band htmode noscan
+}
+
+_wdev_common_iface_config() {
+	config_add_string mode ssid encryption 'key:wpakey'
+	config_add_boolean bridge_isolate
+}
+
+_wdev_common_vlan_config() {
+	config_add_string name vid iface
+	config_add_boolean bridge_isolate
+}
+
+_wdev_common_station_config() {
+	config_add_string mac key vid iface
+}
+
+init_wireless_driver() {
+	name="$1"; shift
+	cmd="$1"; shift
+
+	case "$cmd" in
+		dump)
+			add_driver() {
+				eval "drv_$1_cleanup"
+
+				json_init
+				json_add_string name "$1"
+
+				json_add_array device
+				_wdev_common_device_config
+				eval "drv_$1_init_device_config"
+				json_close_array
+
+				json_add_array iface
+				_wdev_common_iface_config
+				eval "drv_$1_init_iface_config"
+				json_close_array
+
+				json_add_array vlan
+				_wdev_common_vlan_config
+				eval "drv_$1_init_vlan_config"
+				json_close_array
+
+				json_add_array station
+				_wdev_common_station_config
+				eval "drv_$1_init_station_config"
+				json_close_array
+
+				json_dump
+			}
+		;;
+		setup|teardown)
+			interface="$1"; shift
+			data="$1"; shift
+			export __netifd_device="$interface"
+
+			add_driver() {
+				[[ "$name" == "$1" ]] || return 0
+				_wdev_handler "$1" "$cmd"
+			}
+		;;
+	esac
+}
diff --git a/ucentral-client/rootfs/lib/netifd/ppp-down b/ucentral-client/rootfs/lib/netifd/ppp-down
new file mode 100755
index 0000000..94cefc4
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/ppp-down
@@ -0,0 +1,13 @@
+#!/bin/sh
+PPP_IPPARAM="$6"
+
+. /lib/netifd/netifd-proto.sh
+proto_init_update "$IFNAME" 0
+proto_send_update "$PPP_IPPARAM"
+
+[ -d /etc/ppp/ip-down.d ] && {
+	for SCRIPT in /etc/ppp/ip-down.d/*
+	do
+		[ -x "$SCRIPT" ] && "$SCRIPT" "$@"
+	done
+}
diff --git a/ucentral-client/rootfs/lib/netifd/ppp-up b/ucentral-client/rootfs/lib/netifd/ppp-up
new file mode 100755
index 0000000..18c32f0
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/ppp-up
@@ -0,0 +1,20 @@
+#!/bin/sh
+PPP_IPPARAM="$6"
+
+. /lib/netifd/netifd-proto.sh
+proto_init_update "$IFNAME" 1 1
+proto_set_keep 1
+[ -n "$PPP_IPPARAM" ] && {
+	[ -n "$IPLOCAL" ] && proto_add_ipv4_address "$IPLOCAL" 32 "" "${IPREMOTE:-2.2.2.2}"
+	[ -n "$IPREMOTE" ] && proto_add_ipv4_route 0.0.0.0 0 "$IPREMOTE"
+	[ -n "$DNS1" ] && proto_add_dns_server "$DNS1"
+	[ -n "$DNS2" -a "$DNS1" != "$DNS2" ] && proto_add_dns_server "$DNS2"
+}
+proto_send_update "$PPP_IPPARAM"
+
+[ -d /etc/ppp/ip-up.d ] && {
+	for SCRIPT in /etc/ppp/ip-up.d/*
+	do
+		[ -x "$SCRIPT" ] && "$SCRIPT" "$@"
+	done
+}
diff --git a/ucentral-client/rootfs/lib/netifd/ppp6-up b/ucentral-client/rootfs/lib/netifd/ppp6-up
new file mode 100755
index 0000000..3852bf6
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/ppp6-up
@@ -0,0 +1,32 @@
+#!/bin/sh
+PPP_IPPARAM="$6"
+
+. /lib/netifd/netifd-proto.sh
+proto_init_update "$IFNAME" 1 1
+proto_set_keep 1
+[ -n "$PPP_IPPARAM" ] && {
+	[ -n "$LLLOCAL" ] && proto_add_ipv6_address "$LLLOCAL" 128
+}
+proto_send_update "$PPP_IPPARAM"
+
+[ -d /etc/ppp/ip-up.d ] && {
+	for SCRIPT in /etc/ppp/ip-up.d/*
+	do
+		[ -x "$SCRIPT" ] && "$SCRIPT" "$@"
+	done
+}
+
+if [ -n "$AUTOIPV6" ]; then
+	ZONE=$(fw3 -q network $PPP_IPPARAM 2>/dev/null)
+
+	json_init
+	json_add_string name "${PPP_IPPARAM}_6"
+	json_add_string ifname "@$PPP_IPPARAM"
+	json_add_string proto "dhcpv6"
+	[ -n "$ZONE" ] && json_add_string zone "$ZONE"
+	[ -n "$EXTENDPREFIX" ] && json_add_string extendprefix 1
+	[ -n "$IP6TABLE" ] && json_add_string ip6table $IP6TABLE
+	[ -n "$PEERDNS" ] && json_add_boolean peerdns $PEERDNS
+	json_close_object
+	ubus call network add_dynamic "$(json_dump)"
+fi
diff --git a/ucentral-client/rootfs/lib/netifd/proto/batadv.sh b/ucentral-client/rootfs/lib/netifd/proto/batadv.sh
new file mode 100755
index 0000000..edc14f4
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/proto/batadv.sh
@@ -0,0 +1,123 @@
+#!/bin/sh
+
+[ -n "$INCLUDE_ONLY" ] || {
+	. /lib/functions.sh
+	. ../netifd-proto.sh
+	init_proto "$@"
+}
+
+proto_batadv_init_config() {
+	no_device=1
+	available=1
+
+	proto_config_add_boolean 'aggregated_ogms:bool'
+	proto_config_add_boolean 'ap_isolation:bool'
+	proto_config_add_boolean 'bonding:bool'
+	proto_config_add_boolean 'bridge_loop_avoidance:bool'
+	proto_config_add_boolean 'distributed_arp_table:bool'
+	proto_config_add_boolean 'fragmentation:bool'
+	proto_config_add_string 'gw_bandwidth'
+	proto_config_add_string 'gw_mode'
+	proto_config_add_int 'gw_sel_class'
+	proto_config_add_int 'hop_penalty'
+	proto_config_add_string 'isolation_mark'
+	proto_config_add_string 'log_level'
+	proto_config_add_int 'multicast_fanout'
+	proto_config_add_boolean 'multicast_mode:bool'
+	proto_config_add_boolean 'network_coding:bool'
+	proto_config_add_int 'orig_interval'
+	proto_config_add_string 'routing_algo'
+}
+
+proto_batadv_setup() {
+	local config="$1"
+	local iface="$config"
+
+	local aggregated_ogms
+	local ap_isolation
+	local bonding
+	local bridge_loop_avoidance
+	local distributed_arp_table
+	local fragmentation
+	local gw_bandwidth
+	local gw_mode
+	local gw_sel_class
+	local hop_penalty
+	local isolation_mark
+	local log_level
+	local multicast_fanout
+	local multicast_mode
+	local network_coding
+	local orig_interval
+	local routing_algo
+
+	json_get_vars aggregated_ogms
+	json_get_vars ap_isolation
+	json_get_vars bonding
+	json_get_vars bridge_loop_avoidance
+	json_get_vars distributed_arp_table
+	json_get_vars fragmentation
+	json_get_vars gw_bandwidth
+	json_get_vars gw_mode
+	json_get_vars gw_sel_class
+	json_get_vars hop_penalty
+	json_get_vars isolation_mark
+	json_get_vars log_level
+	json_get_vars multicast_fanout
+	json_get_vars multicast_mode
+	json_get_vars network_coding
+	json_get_vars orig_interval
+	json_get_vars routing_algo
+
+	set_default routing_algo 'BATMAN_IV'
+
+	batctl routing_algo "$routing_algo"
+	batctl meshif "$iface" interface create
+
+	[ -n "$aggregated_ogms" ] && batctl meshif "$iface" aggregation "$aggregated_ogms"
+	[ -n "$ap_isolation" ] && batctl meshif "$iface" ap_isolation "$ap_isolation"
+	[ -n "$bonding" ] && batctl meshif "$iface" bonding "$bonding"
+	[ -n "$bridge_loop_avoidance" ] &&  batctl meshif "$iface" bridge_loop_avoidance "$bridge_loop_avoidance" 2>&-
+	[ -n "$distributed_arp_table" ] && batctl meshif "$iface" distributed_arp_table "$distributed_arp_table" 2>&-
+	[ -n "$fragmentation" ] && batctl meshif "$iface" fragmentation "$fragmentation"
+
+	case "$gw_mode" in
+	server)
+		if [ -n "$gw_bandwidth" ]; then
+			batctl meshif "$iface" gw_mode "server" "$gw_bandwidth"
+		else
+			batctl meshif "$iface" gw_mode "server"
+		fi
+		;;
+	client)
+		if [ -n "$gw_sel_class" ]; then
+			batctl meshif "$iface" gw_mode "client" "$gw_sel_class"
+		else
+			batctl meshif "$iface" gw_mode "client"
+		fi
+		;;
+	*)
+		batctl meshif "$iface" gw_mode "off"
+		;;
+	esac
+
+	[ -n "$hop_penalty" ] && batctl meshif "$iface" hop_penalty "$hop_penalty"
+	[ -n "$isolation_mark" ] && batctl meshif "$iface" isolation_mark "$isolation_mark"
+	[ -n "$multicast_fanout" ] && batctl meshif "$iface" multicast_fanout "$multicast_fanout"
+	[ -n "$multicast_mode" ] && batctl meshif "$iface" multicast_mode "$multicast_mode" 2>&-
+	[ -n "$network_coding" ] && batctl meshif "$iface" network_coding "$network_coding" 2>&-
+	[ -n "$log_level" ] && batctl meshif "$iface" loglevel "$log_level" 2>&-
+	[ -n "$orig_interval" ] && batctl meshif "$iface" orig_interval "$orig_interval"
+
+	proto_init_update "$iface" 1
+	proto_send_update "$config"
+}
+
+proto_batadv_teardown() {
+	local config="$1"
+	local iface="$config"
+
+	batctl meshif "$iface" interface destroy
+}
+
+add_protocol batadv
diff --git a/ucentral-client/rootfs/lib/netifd/proto/batadv_hardif.sh b/ucentral-client/rootfs/lib/netifd/proto/batadv_hardif.sh
new file mode 100755
index 0000000..b2f87dd
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/proto/batadv_hardif.sh
@@ -0,0 +1,53 @@
+#!/bin/sh
+
+[ -n "$INCLUDE_ONLY" ] || {
+	. /lib/functions.sh
+	. ../netifd-proto.sh
+	init_proto "$@"
+}
+
+proto_batadv_hardif_init_config() {
+	proto_config_add_int 'elp_interval'
+	proto_config_add_int 'hop_penalty'
+	proto_config_add_string "master"
+	proto_config_add_string 'throughput_override'
+}
+
+proto_batadv_hardif_setup() {
+	local config="$1"
+	local iface="$2"
+
+	local elp_interval
+	local hop_penalty
+	local master
+	local throughput_override
+
+	json_get_vars elp_interval
+	json_get_vars hop_penalty
+	json_get_vars master
+	json_get_vars throughput_override
+
+	( proto_add_host_dependency "$config" '' "$master" )
+
+	batctl meshif "$master" interface -M add "$iface"
+
+	[ -n "$elp_interval" ] && batctl hardif "$iface" elp_interval "$elp_interval"
+	[ -n "$hop_penalty" ] && batctl hardif "$iface" hop_penalty "$hop_penalty"
+	[ -n "$throughput_override" ] && batctl hardif "$iface" throughput_override "$throughput_override"
+
+	proto_init_update "$iface" 1
+	proto_send_update "$config"
+}
+
+proto_batadv_hardif_teardown() {
+	local config="$1"
+	local iface="$2"
+
+	local master
+
+	json_get_vars master
+
+	batctl meshif "$master" interface -M del "$iface" || true
+}
+
+add_protocol batadv_hardif
diff --git a/ucentral-client/rootfs/lib/netifd/proto/batadv_vlan.sh b/ucentral-client/rootfs/lib/netifd/proto/batadv_vlan.sh
new file mode 100755
index 0000000..5b0c76f
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/proto/batadv_vlan.sh
@@ -0,0 +1,29 @@
+#!/bin/sh
+
+. /lib/functions.sh
+. ../netifd-proto.sh
+init_proto "$@"
+
+proto_batadv_vlan_init_config() {
+	proto_config_add_boolean 'ap_isolation:bool'
+}
+
+proto_batadv_vlan_setup() {
+	local config="$1"
+	local iface="$2"
+
+	# batadv_vlan options
+	local ap_isolation
+
+	json_get_vars ap_isolation
+
+	[ -n "$ap_isolation" ] && batctl vlan "$iface" ap_isolation "$ap_isolation"
+	proto_init_update "$iface" 1
+	proto_send_update "$config"
+}
+
+proto_batadv_vlan_teardown() {
+	local cfg="$1"
+}
+
+add_protocol batadv_vlan
diff --git a/ucentral-client/rootfs/lib/netifd/proto/dhcp.sh b/ucentral-client/rootfs/lib/netifd/proto/dhcp.sh
new file mode 100755
index 0000000..18a9aaf
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/proto/dhcp.sh
@@ -0,0 +1,89 @@
+#!/bin/sh
+
+[ -x /sbin/udhcpc ] || exit 0
+
+. /lib/functions.sh
+. ../netifd-proto.sh
+init_proto "$@"
+
+proto_dhcp_init_config() {
+	renew_handler=1
+
+	proto_config_add_string 'ipaddr:ipaddr'
+	proto_config_add_string 'hostname:hostname'
+	proto_config_add_string clientid
+	proto_config_add_string vendorid
+	proto_config_add_boolean 'broadcast:bool'
+	proto_config_add_boolean 'norelease:bool'
+	proto_config_add_string 'reqopts:list(string)'
+	proto_config_add_boolean 'defaultreqopts:bool'
+	proto_config_add_string iface6rd
+	proto_config_add_array 'sendopts:list(string)'
+	proto_config_add_boolean delegate
+	proto_config_add_string zone6rd
+	proto_config_add_string zone
+	proto_config_add_string mtu6rd
+	proto_config_add_string customroutes
+	proto_config_add_boolean classlessroute
+}
+
+proto_dhcp_add_sendopts() {
+	[ -n "$1" ] && append "$3" "-x $1"
+}
+
+proto_dhcp_setup() {
+	local config="$1"
+	local iface="$2"
+
+	local ipaddr hostname clientid vendorid broadcast norelease reqopts defaultreqopts iface6rd sendopts delegate zone6rd zone mtu6rd customroutes classlessroute
+	json_get_vars ipaddr hostname clientid vendorid broadcast norelease reqopts defaultreqopts iface6rd delegate zone6rd zone mtu6rd customroutes classlessroute
+
+	local opt dhcpopts
+	for opt in $reqopts; do
+		append dhcpopts "-O $opt"
+	done
+
+	json_for_each_item proto_dhcp_add_sendopts sendopts dhcpopts
+
+	[ -z "$hostname" ] && hostname="$(cat /proc/sys/kernel/hostname)"
+	[ "$hostname" = "*" ] && hostname=
+
+	[ "$defaultreqopts" = 0 ] && defaultreqopts="-o" || defaultreqopts=
+	[ "$broadcast" = 1 ] && broadcast="-B" || broadcast=
+	[ "$norelease" = 1 ] && norelease="" || norelease="-R"
+	[ -n "$clientid" ] && clientid="-x 0x3d:${clientid//:/}" || clientid="-C"
+	[ -n "$iface6rd" ] && proto_export "IFACE6RD=$iface6rd"
+	[ "$iface6rd" != 0 -a -f /lib/netifd/proto/6rd.sh ] && append dhcpopts "-O 212"
+	[ -n "$zone6rd" ] && proto_export "ZONE6RD=$zone6rd"
+	[ -n "$zone" ] && proto_export "ZONE=$zone"
+	[ -n "$mtu6rd" ] && proto_export "MTU6RD=$mtu6rd"
+	[ -n "$customroutes" ] && proto_export "CUSTOMROUTES=$customroutes"
+	[ "$delegate" = "0" ] && proto_export "IFACE6RD_DELEGATE=0"
+	# Request classless route option (see RFC 3442) by default
+	[ "$classlessroute" = "0" ] || append dhcpopts "-O 121"
+	append dhcpopts "-O 138"
+
+	proto_export "INTERFACE=$config"
+	proto_run_command "$config" udhcpc \
+		-p /var/run/udhcpc-$iface.pid \
+		-s /lib/netifd/dhcp.script \
+		-f -t 0 -i "$iface" \
+		${ipaddr:+-r ${ipaddr/\/*/}} \
+		${hostname:+-x "hostname:$hostname"} \
+		${vendorid:+-V "$vendorid"} \
+		$clientid $defaultreqopts $broadcast $norelease $dhcpopts
+}
+
+proto_dhcp_renew() {
+	local interface="$1"
+	# SIGUSR1 forces udhcpc to renew its lease
+	local sigusr1="$(kill -l SIGUSR1)"
+	[ -n "$sigusr1" ] && proto_kill_command "$interface" $sigusr1
+}
+
+proto_dhcp_teardown() {
+	local interface="$1"
+	proto_kill_command "$interface"
+}
+
+add_protocol dhcp
diff --git a/ucentral-client/rootfs/lib/netifd/proto/dhcpv6.sh b/ucentral-client/rootfs/lib/netifd/proto/dhcpv6.sh
new file mode 100755
index 0000000..18c24fe
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/proto/dhcpv6.sh
@@ -0,0 +1,144 @@
+#!/bin/sh
+
+. /lib/functions.sh
+. ../netifd-proto.sh
+init_proto "$@"
+
+proto_dhcpv6_init_config() {
+	renew_handler=1
+
+	proto_config_add_string 'reqaddress:or("try","force","none")'
+	proto_config_add_string 'reqprefix:or("auto","no",range(0, 64))'
+	proto_config_add_string clientid
+	proto_config_add_string 'reqopts:list(uinteger)'
+	proto_config_add_string 'defaultreqopts:bool'
+	proto_config_add_string 'noslaaconly:bool'
+	proto_config_add_string 'forceprefix:bool'
+	proto_config_add_string 'extendprefix:bool'
+	proto_config_add_string 'norelease:bool'
+	proto_config_add_string 'noserverunicast:bool'
+	proto_config_add_string 'noclientfqdn:bool'
+	proto_config_add_string 'noacceptreconfig:bool'
+	proto_config_add_array 'ip6prefix:list(ip6addr)'
+	proto_config_add_string iface_dslite
+	proto_config_add_string zone_dslite
+	proto_config_add_string encaplimit_dslite
+	proto_config_add_string iface_map
+	proto_config_add_string zone_map
+	proto_config_add_string encaplimit_map
+	proto_config_add_string iface_464xlat
+	proto_config_add_string zone_464xlat
+	proto_config_add_string zone
+	proto_config_add_string 'ifaceid:ip6addr'
+	proto_config_add_string "userclass"
+	proto_config_add_string "vendorclass"
+	proto_config_add_array "sendopts:list(string)"
+	proto_config_add_boolean delegate
+	proto_config_add_int skpriority
+	proto_config_add_int "soltimeout"
+	proto_config_add_boolean fakeroutes
+	proto_config_add_boolean sourcefilter
+	proto_config_add_boolean keep_ra_dnslifetime
+	proto_config_add_int "ra_holdoff"
+	proto_config_add_boolean verbose
+}
+
+proto_dhcpv6_add_prefix() {
+	append "$3" "$1"
+}
+
+proto_dhcpv6_add_sendopts() {
+	[ -n "$1" ] && append "$3" "-x$1"
+}
+
+proto_dhcpv6_setup() {
+	local config="$1"
+	local iface="$2"
+
+	local reqaddress reqprefix clientid reqopts defaultreqopts noslaaconly forceprefix extendprefix norelease noserverunicast noclientfqdn noacceptreconfig ip6prefix ip6prefixes iface_dslite iface_map iface_464xlat ifaceid userclass vendorclass sendopts delegate zone_dslite zone_map zone_464xlat zone encaplimit_dslite encaplimit_map skpriority soltimeout fakeroutes sourcefilter keep_ra_dnslifetime ra_holdoff verbose
+	json_get_vars reqaddress reqprefix clientid reqopts defaultreqopts noslaaconly forceprefix extendprefix norelease noserverunicast noclientfqdn noacceptreconfig iface_dslite iface_map iface_464xlat ifaceid userclass vendorclass delegate zone_dslite zone_map zone_464xlat zone encaplimit_dslite encaplimit_map skpriority soltimeout fakeroutes sourcefilter keep_ra_dnslifetime ra_holdoff verbose
+	json_for_each_item proto_dhcpv6_add_prefix ip6prefix ip6prefixes
+
+	# Configure
+	local opts=""
+	[ -n "$reqaddress" ] && append opts "-N$reqaddress"
+
+	[ -z "$reqprefix" -o "$reqprefix" = "auto" ] && reqprefix=0
+	[ "$reqprefix" != "no" ] && append opts "-P$reqprefix"
+
+	[ -n "$clientid" ] && append opts "-c$clientid"
+
+	[ "$defaultreqopts" = "0" ] && append opts "-R"
+
+	[ "$noslaaconly" = "1" ] && append opts "-S"
+
+	[ "$forceprefix" = "1" ] && append opts "-F"
+
+	[ "$norelease" = "1" ] && append opts "-k"
+
+	[ "$noserverunicast" = "1" ] && append opts "-U"
+
+	[ "$noclientfqdn" = "1" ] && append opts "-f"
+
+	[ "$noacceptreconfig" = "1" ] && append opts "-a"
+
+	[ -n "$ifaceid" ] && append opts "-i$ifaceid"
+
+	[ -n "$vendorclass" ] && append opts "-V$vendorclass"
+
+	[ -n "$userclass" ] && append opts "-u$userclass"
+
+	[ "$keep_ra_dnslifetime" = "1" ] && append opts "-L"
+
+	[ -n "$skpriority" ] && append opts "-K$skpriority"
+
+	[ -n "$ra_holdoff" ] && append opts "-m$ra_holdoff"
+
+	[ "$verbose" = "1" ] && append opts "-v"
+
+	local opt
+	for opt in $reqopts; do
+		append opts "-r$opt"
+	done
+
+	json_for_each_item proto_dhcpv6_add_sendopts sendopts opts
+
+	append opts "-t${soltimeout:-120}"
+
+	[ -n "$ip6prefixes" ] && proto_export "USERPREFIX=$ip6prefixes"
+	[ -n "$iface_dslite" ] && proto_export "IFACE_DSLITE=$iface_dslite"
+	[ -n "$iface_map" ] && proto_export "IFACE_MAP=$iface_map"
+	[ -n "$iface_464xlat" ] && proto_export "IFACE_464XLAT=$iface_464xlat"
+	[ "$delegate" = "0" ] && proto_export "IFACE_DSLITE_DELEGATE=0"
+	[ "$delegate" = "0" ] && proto_export "IFACE_MAP_DELEGATE=0"
+	[ "$delegate" = "0" ] && proto_export "IFACE_464XLAT_DELEGATE=0"
+	[ -n "$zone_dslite" ] && proto_export "ZONE_DSLITE=$zone_dslite"
+	[ -n "$zone_map" ] && proto_export "ZONE_MAP=$zone_map"
+	[ -n "$zone_464xlat" ] && proto_export "ZONE_464XLAT=$zone_464xlat"
+	[ -n "$zone" ] && proto_export "ZONE=$zone"
+	[ -n "$encaplimit_dslite" ] && proto_export "ENCAPLIMIT_DSLITE=$encaplimit_dslite"
+	[ -n "$encaplimit_map" ] && proto_export "ENCAPLIMIT_MAP=$encaplimit_map"
+	[ "$fakeroutes" != "0" ] && proto_export "FAKE_ROUTES=1"
+	[ "$sourcefilter" = "0" ] && proto_export "NOSOURCEFILTER=1"
+	[ "$extendprefix" = "1" ] && proto_export "EXTENDPREFIX=1"
+
+	proto_export "INTERFACE=$config"
+	proto_run_command "$config" odhcp6c \
+		-s /lib/netifd/dhcpv6.script \
+		$opts $iface
+}
+
+proto_dhcpv6_renew() {
+	local interface="$1"
+	# SIGUSR1 forces odhcp6c to renew its lease
+	local sigusr1="$(kill -l SIGUSR1)"
+	[ -n "$sigusr1" ] && proto_kill_command "$interface" $sigusr1
+}
+
+proto_dhcpv6_teardown() {
+	local interface="$1"
+	proto_kill_command "$interface"
+}
+
+add_protocol dhcpv6
+
diff --git a/ucentral-client/rootfs/lib/netifd/proto/gre.sh b/ucentral-client/rootfs/lib/netifd/proto/gre.sh
new file mode 100755
index 0000000..b57d5d4
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/proto/gre.sh
@@ -0,0 +1,296 @@
+#!/bin/sh
+
+[ -n "$INCLUDE_ONLY" ] || {
+	. /lib/functions.sh
+	. /lib/functions/network.sh
+	. ../netifd-proto.sh
+	init_proto "$@"
+}
+
+gre_generic_setup() {
+	local cfg="$1"
+	local mode="$2"
+	local local="$3"
+	local remote="$4"
+	local link="$5"
+	local mtu ipv6 ttl tos zone ikey okey icsum ocsum iseqno oseqno multicast
+	json_get_vars mtu ipv6 ttl tos zone ikey okey icsum ocsum iseqno oseqno multicast
+
+	[ -z "$multicast" ] && multicast=1
+
+	proto_init_update "$link" 1
+
+	proto_add_tunnel
+	json_add_string mode "$mode"
+	json_add_int mtu "${mtu:-1280}"
+	json_add_boolean ipv6 "${ipv6:-1}"
+	[ -n "$df" ] && json_add_boolean df "$df"
+	[ -n "$ttl" ] && json_add_int ttl "$ttl"
+	[ -n "$tos" ] && json_add_string tos "$tos"
+	json_add_boolean multicast "$multicast"
+	json_add_string local "$local"
+	json_add_string remote "$remote"
+	[ -n "$tunlink" ] && json_add_string link "$tunlink"
+
+	json_add_object 'data'
+	[ -n "$ikey" ] && json_add_int ikey "$ikey"
+	[ -n "$okey" ] && json_add_int okey "$okey"
+	[ -n "$icsum" ] && json_add_boolean icsum "$icsum"
+	[ -n "$ocsum" ] && json_add_boolean ocsum "$ocsum"
+	[ -n "$iseqno" ] && json_add_boolean iseqno "$iseqno"
+	[ -n "$oseqno" ] && json_add_boolean oseqno "$oseqno"
+	[ -n "$encaplimit" ] && json_add_string encaplimit "$encaplimit"
+	json_close_object
+
+	proto_close_tunnel
+
+	proto_add_data
+	[ -n "$zone" ] && json_add_string zone "$zone"
+	proto_close_data
+
+	proto_send_update "$cfg"
+}
+
+gre_setup() {
+	local cfg="$1"
+	local mode="$2"
+	local remoteip
+
+	local ipaddr peeraddr
+	json_get_vars df ipaddr peeraddr tunlink nohostroute
+
+	[ -z "$peeraddr" ] && {
+		proto_notify_error "$cfg" "MISSING_PEER_ADDRESS"
+		proto_block_restart "$cfg"
+		exit
+	}
+
+	remoteip=$(resolveip -t 10 -4 "$peeraddr")
+
+	if [ -z "$remoteip" ]; then
+		proto_notify_error "$cfg" "PEER_RESOLVE_FAIL"
+		exit
+	fi
+
+	for ip in $remoteip; do
+		peeraddr=$ip
+		break
+	done
+
+	if [ "${nohostroute}" != "1" ]; then
+		( proto_add_host_dependency "$cfg" "$peeraddr" "$tunlink" )
+	fi
+
+	[ -z "$ipaddr" ] && {
+		local wanif="$tunlink"
+		if [ -z $wanif ] && ! network_find_wan wanif; then
+			proto_notify_error "$cfg" "NO_WAN_LINK"
+			exit
+		fi
+
+		if ! network_get_ipaddr ipaddr "$wanif"; then
+			proto_notify_error "$cfg" "NO_WAN_LINK"
+			exit
+		fi
+	}
+
+	[ -z "$df" ] && df="1"
+
+	case "$mode" in
+		gretapip)
+			gre_generic_setup $cfg $mode $ipaddr $peeraddr "gre4t-$cfg"
+			;;
+		*)
+			gre_generic_setup $cfg $mode $ipaddr $peeraddr "gre4-$cfg"
+			;;
+	esac
+}
+
+proto_gre_setup() {
+	local cfg="$1"
+
+	gre_setup $cfg "greip"
+}
+
+proto_gretap_setup() {
+	local cfg="$1"
+
+	local network
+	json_get_vars network
+
+	gre_setup $cfg "gretapip"
+
+	json_init
+	json_add_string name "gre4t-$cfg"
+	json_add_boolean link-ext 0
+	json_close_object
+
+	for i in $network; do
+		ubus call network.interface."$i" add_device "$(json_dump)"
+	done
+}
+
+grev6_setup() {
+	local cfg="$1"
+	local mode="$2"
+	local remoteip6
+
+	local ip6addr peer6addr weakif
+	json_get_vars ip6addr peer6addr tunlink weakif encaplimit nohostroute
+
+	[ -z "$peer6addr" ] && {
+		proto_notify_error "$cfg" "MISSING_PEER_ADDRESS"
+		proto_block_restart "$cfg"
+		exit
+	}
+
+	remoteip6=$(resolveip -t 10 -6 "$peer6addr")
+
+	if [ -z "$remoteip6" ]; then
+		proto_notify_error "$cfg" "PEER_RESOLVE_FAIL"
+		exit
+	fi
+
+	for ip6 in $remoteip6; do
+		peer6addr=$ip6
+		break
+	done
+
+	if [ "${nohostroute}" != "1" ]; then
+		( proto_add_host_dependency "$cfg" "$peer6addr" "$tunlink" )
+	fi
+
+	[ -z "$ip6addr" ] && {
+		local wanif="$tunlink"
+		if [ -z $wanif ] && ! network_find_wan6 wanif; then
+			proto_notify_error "$cfg" "NO_WAN_LINK"
+			exit
+		fi
+
+		if ! network_get_ipaddr6 ip6addr "$wanif"; then
+			[ -z "$weakif" ] && weakif="lan"
+			if ! network_get_ipaddr6 ip6addr "$weakif"; then
+				proto_notify_error "$cfg" "NO_WAN_LINK"
+				exit
+			fi
+		fi
+	}
+
+	case "$mode" in
+		gretapip6)
+			gre_generic_setup $cfg $mode $ip6addr $peer6addr "gre6t-$cfg"
+			;;
+		*)
+			gre_generic_setup $cfg $mode $ip6addr $peer6addr "gre6-$cfg"
+			;;
+	esac
+}
+
+proto_grev6_setup() {
+	local cfg="$1"
+
+	grev6_setup $cfg "greip6"
+}
+
+proto_grev6tap_setup() {
+	local cfg="$1"
+
+	local network
+	json_get_vars network
+
+	grev6_setup $cfg "gretapip6"
+
+	json_init
+	json_add_string name "gre6t-$cfg"
+	json_add_boolean link-ext 0
+	json_close_object
+
+	for i in $network; do
+		ubus call network.interface."$i" add_device "$(json_dump)"
+	done
+}
+
+gretap_generic_teardown() {
+	local network
+	json_get_vars network
+
+	json_init
+	json_add_string name "$1"
+	json_add_boolean link-ext 0
+	json_close_object
+
+	for i in $network; do
+		ubus call network.interface."$i" remove_device "$(json_dump)"
+	done
+}
+
+proto_gre_teardown() {
+	local cfg="$1"
+}
+
+proto_gretap_teardown() {
+	local cfg="$1"
+
+	gretap_generic_teardown "gre4t-$cfg"
+}
+
+proto_grev6_teardown() {
+	local cfg="$1"
+}
+
+proto_grev6tap_teardown() {
+	local cfg="$1"
+
+	gretap_generic_teardown "gre6t-$cfg"
+}
+
+gre_generic_init_config() {
+	no_device=1
+	available=1
+
+	proto_config_add_int "mtu"
+	proto_config_add_boolean "ipv6"
+	proto_config_add_int "ttl"
+	proto_config_add_string "tos"
+	proto_config_add_string "tunlink"
+	proto_config_add_string "zone"
+	proto_config_add_int "ikey"
+	proto_config_add_int "okey"
+	proto_config_add_boolean "icsum"
+	proto_config_add_boolean "ocsum"
+	proto_config_add_boolean "iseqno"
+	proto_config_add_boolean "oseqno"
+	proto_config_add_boolean "multicast"
+}
+
+proto_gre_init_config() {
+	gre_generic_init_config
+	proto_config_add_string "ipaddr"
+	proto_config_add_string "peeraddr"
+	proto_config_add_boolean "df"
+	proto_config_add_boolean "nohostroute"
+}
+
+proto_gretap_init_config() {
+	proto_gre_init_config
+	proto_config_add_string "network"
+}
+
+proto_grev6_init_config() {
+	gre_generic_init_config
+	proto_config_add_string "ip6addr"
+	proto_config_add_string "peer6addr"
+	proto_config_add_string "weakif"
+	proto_config_add_string "encaplimit"
+	proto_config_add_boolean "nohostroute"
+}
+
+proto_grev6tap_init_config() {
+	proto_grev6_init_config
+	proto_config_add_string "network"
+}
+
+[ -n "$INCLUDE_ONLY" ] || {
+	[ -d /sys/module/ip_gre ] && { add_protocol gre; add_protocol gretap; }
+	[ -d /sys/module/ip6_gre ] && { add_protocol grev6; add_protocol grev6tap; }
+}
diff --git a/ucentral-client/rootfs/lib/netifd/proto/ppp.sh b/ucentral-client/rootfs/lib/netifd/proto/ppp.sh
new file mode 100755
index 0000000..6d3a8e2
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/proto/ppp.sh
@@ -0,0 +1,328 @@
+#!/bin/sh
+
+[ -x /usr/sbin/pppd ] || exit 0
+
+[ -n "$INCLUDE_ONLY" ] || {
+	. /lib/functions.sh
+	. /lib/functions/network.sh
+	. ../netifd-proto.sh
+	init_proto "$@"
+}
+
+ppp_select_ipaddr()
+{
+	local subnets=$1
+	local res
+	local res_mask
+
+	for subnet in $subnets; do
+		local addr="${subnet%%/*}"
+		local mask="${subnet#*/}"
+
+		if [ -n "$res_mask" -a "$mask" != 32 ]; then
+			[ "$mask" -gt "$res_mask" ] || [ "$res_mask" = 32 ] && {
+				res="$addr"
+				res_mask="$mask"
+			}
+		elif [ -z "$res_mask" ]; then
+			res="$addr"
+			res_mask="$mask"
+		fi
+	done
+
+	echo "$res"
+}
+
+ppp_exitcode_tostring()
+{
+	local errorcode=$1
+	[ -n "$errorcode" ] || errorcode=5
+
+	case "$errorcode" in
+		0) echo "OK" ;;
+		1) echo "FATAL_ERROR" ;;
+		2) echo "OPTION_ERROR" ;;
+		3) echo "NOT_ROOT" ;;
+		4) echo "NO_KERNEL_SUPPORT" ;;
+		5) echo "USER_REQUEST" ;;
+		6) echo "LOCK_FAILED" ;;
+		7) echo "OPEN_FAILED" ;;
+		8) echo "CONNECT_FAILED" ;;
+		9) echo "PTYCMD_FAILED" ;;
+		10) echo "NEGOTIATION_FAILED" ;;
+		11) echo "PEER_AUTH_FAILED" ;;
+		12) echo "IDLE_TIMEOUT" ;;
+		13) echo "CONNECT_TIME" ;;
+		14) echo "CALLBACK" ;;
+		15) echo "PEER_DEAD" ;;
+		16) echo "HANGUP" ;;
+		17) echo "LOOPBACK" ;;
+		18) echo "INIT_FAILED" ;;
+		19) echo "AUTH_TOPEER_FAILED" ;;
+		20) echo "TRAFFIC_LIMIT" ;;
+		21) echo "CNID_AUTH_FAILED";;
+		*) echo "UNKNOWN_ERROR" ;;
+	esac
+}
+
+ppp_generic_init_config() {
+	proto_config_add_string username
+	proto_config_add_string password
+	proto_config_add_string keepalive
+	proto_config_add_boolean keepalive_adaptive
+	proto_config_add_int demand
+	proto_config_add_string pppd_options
+	proto_config_add_string 'connect:file'
+	proto_config_add_string 'disconnect:file'
+	[ -e /proc/sys/net/ipv6 ] && proto_config_add_string ipv6
+	proto_config_add_boolean authfail
+	proto_config_add_int mtu
+	proto_config_add_string pppname
+	proto_config_add_string unnumbered
+	proto_config_add_boolean persist
+	proto_config_add_int maxfail
+	proto_config_add_int holdoff
+}
+
+ppp_generic_setup() {
+	local config="$1"; shift
+	local localip
+
+	json_get_vars ip6table demand keepalive keepalive_adaptive username password pppd_options pppname unnumbered persist maxfail holdoff peerdns
+
+	[ ! -e /proc/sys/net/ipv6 ] && ipv6=0 || json_get_var ipv6 ipv6
+
+	if [ "$ipv6" = 0 ]; then
+		ipv6=""
+	elif [ -z "$ipv6" -o "$ipv6" = auto ]; then
+		ipv6=1
+		autoipv6=1
+	fi
+
+	if [ "${demand:-0}" -gt 0 ]; then
+		demand="precompiled-active-filter /etc/ppp/filter demand idle $demand"
+	else
+		demand=""
+	fi
+	if [ -n "$persist" ]; then
+		[ "${persist}" -lt 1 ] && persist="nopersist" || persist="persist"
+	fi
+	if [ -z "$maxfail" ]; then
+		[ "$persist" = "persist" ] && maxfail=0 || maxfail=1
+	fi
+	[ -n "$mtu" ] || json_get_var mtu mtu
+	[ -n "$pppname" ] || pppname="${proto:-ppp}-$config"
+	[ -n "$unnumbered" ] && {
+		local subnets
+		( proto_add_host_dependency "$config" "" "$unnumbered" )
+		network_get_subnets subnets "$unnumbered"
+		localip=$(ppp_select_ipaddr "$subnets")
+		[ -n "$localip" ] || {
+			proto_block_restart "$config"
+			return
+		}
+	}
+
+	[ -n "$keepalive" ] || keepalive="5 1"
+
+	local lcp_failure="${keepalive%%[, ]*}"
+	local lcp_interval="${keepalive##*[, ]}"
+	local lcp_adaptive="lcp-echo-adaptive"
+	[ "${lcp_failure:-0}" -lt 1 ] && lcp_failure=""
+	[ "$lcp_interval" != "$keepalive" ] || lcp_interval=5
+	[ "${keepalive_adaptive:-1}" -lt 1 ] && lcp_adaptive=""
+	[ -n "$connect" ] || json_get_var connect connect
+	[ -n "$disconnect" ] || json_get_var disconnect disconnect
+
+	proto_run_command "$config" /usr/sbin/pppd \
+		nodetach ipparam "$config" \
+		ifname "$pppname" \
+		${localip:+$localip:} \
+		${lcp_failure:+lcp-echo-interval $lcp_interval lcp-echo-failure $lcp_failure $lcp_adaptive} \
+		${ipv6:++ipv6} \
+		${autoipv6:+set AUTOIPV6=1} \
+		${ip6table:+set IP6TABLE=$ip6table} \
+		${peerdns:+set PEERDNS=$peerdns} \
+		nodefaultroute \
+		usepeerdns \
+		$demand $persist maxfail $maxfail \
+		${holdoff:+holdoff "$holdoff"} \
+		${username:+user "$username" password "$password"} \
+		${connect:+connect "$connect"} \
+		${disconnect:+disconnect "$disconnect"} \
+		ip-up-script /lib/netifd/ppp-up \
+		${ipv6:+ipv6-up-script /lib/netifd/ppp6-up} \
+		ip-down-script /lib/netifd/ppp-down \
+		${ipv6:+ipv6-down-script /lib/netifd/ppp-down} \
+		${mtu:+mtu $mtu mru $mtu} \
+		"$@" $pppd_options
+}
+
+ppp_generic_teardown() {
+	local interface="$1"
+	local errorstring=$(ppp_exitcode_tostring $ERROR)
+
+	case "$ERROR" in
+		0)
+		;;
+		2)
+			proto_notify_error "$interface" "$errorstring"
+			proto_block_restart "$interface"
+		;;
+		11|19)
+			json_get_var authfail authfail
+			proto_notify_error "$interface" "$errorstring"
+			if [ "${authfail:-0}" -gt 0 ]; then
+				proto_block_restart "$interface"
+			fi
+		;;
+		*)
+			proto_notify_error "$interface" "$errorstring"
+		;;
+	esac
+
+	proto_kill_command "$interface"
+}
+
+# PPP on serial device
+
+proto_ppp_init_config() {
+	proto_config_add_string "device"
+	ppp_generic_init_config
+	no_device=1
+	available=1
+	lasterror=1
+}
+
+proto_ppp_setup() {
+	local config="$1"
+
+	json_get_var device device
+	ppp_generic_setup "$config" "$device"
+}
+
+proto_ppp_teardown() {
+	ppp_generic_teardown "$@"
+}
+
+proto_pppoe_init_config() {
+	ppp_generic_init_config
+	proto_config_add_string "ac"
+	proto_config_add_string "service"
+	proto_config_add_string "host_uniq"
+	proto_config_add_int "padi_attempts"
+	proto_config_add_int "padi_timeout"
+
+	lasterror=1
+}
+
+proto_pppoe_setup() {
+	local config="$1"
+	local iface="$2"
+
+	/sbin/modprobe -qa slhc ppp_generic pppox pppoe
+
+	json_get_var mtu mtu
+	mtu="${mtu:-1492}"
+
+	json_get_var ac ac
+	json_get_var service service
+	json_get_var host_uniq host_uniq
+	json_get_var padi_attempts padi_attempts
+	json_get_var padi_timeout padi_timeout
+
+	ppp_generic_setup "$config" \
+		plugin pppoe.so \
+		${ac:+rp_pppoe_ac "$ac"} \
+		${service:+rp_pppoe_service "$service"} \
+		${host_uniq:+host-uniq "$host_uniq"} \
+		${padi_attempts:+pppoe-padi-attempts $padi_attempts} \
+		${padi_timeout:+pppoe-padi-timeout $padi_timeout} \
+		"nic-$iface"
+}
+
+proto_pppoe_teardown() {
+	ppp_generic_teardown "$@"
+}
+
+proto_pppoa_init_config() {
+	ppp_generic_init_config
+	proto_config_add_int "atmdev"
+	proto_config_add_int "vci"
+	proto_config_add_int "vpi"
+	proto_config_add_string "encaps"
+	no_device=1
+	available=1
+	lasterror=1
+}
+
+proto_pppoa_setup() {
+	local config="$1"
+	local iface="$2"
+
+	/sbin/modprobe -qa slhc ppp_generic pppox pppoatm
+
+	json_get_vars atmdev vci vpi encaps
+
+	case "$encaps" in
+		1|vc) encaps="vc-encaps" ;;
+		*) encaps="llc-encaps" ;;
+	esac
+
+	ppp_generic_setup "$config" \
+		plugin pppoatm.so \
+		${atmdev:+$atmdev.}${vpi:-8}.${vci:-35} \
+		${encaps}
+}
+
+proto_pppoa_teardown() {
+	ppp_generic_teardown "$@"
+}
+
+proto_pptp_init_config() {
+	ppp_generic_init_config
+	proto_config_add_string "server"
+	proto_config_add_string "interface"
+	available=1
+	no_device=1
+	lasterror=1
+}
+
+proto_pptp_setup() {
+	local config="$1"
+	local iface="$2"
+
+	local ip serv_addr server interface
+	json_get_vars interface server
+	[ -n "$server" ] && {
+		for ip in $(resolveip -t 5 "$server"); do
+			( proto_add_host_dependency "$config" "$ip" $interface )
+			serv_addr=1
+		done
+	}
+	[ -n "$serv_addr" ] || {
+		echo "Could not resolve server address"
+		sleep 5
+		proto_setup_failed "$config"
+		exit 1
+	}
+
+	/sbin/modprobe -qa slhc ppp_generic ppp_async ppp_mppe ip_gre gre pptp
+	sleep 1
+
+	ppp_generic_setup "$config" \
+		plugin pptp.so \
+		pptp_server $server \
+		file /etc/ppp/options.pptp
+}
+
+proto_pptp_teardown() {
+	ppp_generic_teardown "$@"
+}
+
+[ -n "$INCLUDE_ONLY" ] || {
+	add_protocol ppp
+	[ -f /usr/lib/pppd/*/pppoe.so ] && add_protocol pppoe
+	[ -f /usr/lib/pppd/*/pppoatm.so ] && add_protocol pppoa
+	[ -f /usr/lib/pppd/*/pptp.so ] && add_protocol pptp
+}
diff --git a/ucentral-client/rootfs/lib/netifd/proto/unetd.sh b/ucentral-client/rootfs/lib/netifd/proto/unetd.sh
new file mode 100755
index 0000000..2e99ae2
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/proto/unetd.sh
@@ -0,0 +1,77 @@
+#!/bin/sh
+
+[ -x /usr/sbin/unetd ] || exit 0
+
+. /lib/functions.sh
+. /lib/functions/network.sh
+. ../netifd-proto.sh
+
+init_proto "$@"
+
+proto_unet_init_config() {
+	proto_config_add_string device
+	proto_config_add_string type
+	proto_config_add_string key
+	proto_config_add_string file
+	proto_config_add_int keepalive
+	proto_config_add_string domain
+	proto_config_add_string "tunnels:list(string)"
+	no_device=1
+	available=1
+	no_proto_task=1
+}
+
+proto_unet_setup() {
+	local config="$1"
+
+	local device type key file keepalive domain tunnels
+	json_get_vars device type key file keepalive domain tunnels
+	device="${device:-$config}"
+
+	[ -n "$file" ] && type="${type:-file}"
+
+	json_init
+	json_add_string name "$device"
+	json_add_string type "$type"
+	json_add_string interface "$config"
+	json_add_string key "$key"
+	json_add_string file "$file"
+	[ -n "$keepalive" ] && json_add_int keepalive "$keepalive"
+	json_add_string domain "$domain"
+
+	json_add_object tunnels
+	for t in $tunnels; do
+		local ifname="${t%%=*}"
+		local service="${t#*=}"
+		[ -n "$ifname" -a -n "$service" -a "$ifname" != "$t" ] || continue
+		json_add_string "$ifname" "$service"
+	done
+	json_close_object
+
+	ip link del dev "$device" >/dev/null 2>&1
+	ip link add dev "$device" type wireguard || {
+		echo "Could not create wireguard device $device"
+		proto_setup_failed "$config"
+		exit 1
+	}
+
+	ubus call unetd network_add "$(json_dump)"
+}
+
+proto_unet_teardown() {
+	local config="$1"
+	local iface="$2"
+
+	local device
+	json_get_vars device
+	device="${device:-$iface}"
+
+	json_init
+	json_add_string name "$device"
+
+	ip link del dev "$device"
+
+	ubus call unetd network_del "$(json_dump)"
+}
+
+add_protocol unet
diff --git a/ucentral-client/rootfs/lib/netifd/proto/vxlan.sh b/ucentral-client/rootfs/lib/netifd/proto/vxlan.sh
new file mode 100755
index 0000000..a087c4a
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/proto/vxlan.sh
@@ -0,0 +1,195 @@
+#!/bin/sh
+
+[ -n "$INCLUDE_ONLY" ] || {
+	. /lib/functions.sh
+	. /lib/functions/network.sh
+	. ../netifd-proto.sh
+	init_proto "$@"
+}
+
+proto_vxlan_setup_peer() {
+	type bridge &> /dev/null || {
+		proto_notify_error "$cfg" "MISSING_BRIDGE_COMMAND"
+		exit
+	}
+
+	local peer_config="$1"
+
+	local vxlan
+	local lladdr
+	local dst
+	local src_vni
+	local vni
+	local port
+	local via
+
+	config_get vxlan   "${peer_config}" "vxlan"
+	config_get lladdr  "${peer_config}" "lladdr"
+	config_get dst     "${peer_config}" "dst"
+	config_get src_vni "${peer_config}" "src_vni"
+	config_get vni     "${peer_config}" "vni"
+	config_get port    "${peer_config}" "port"
+	config_get via     "${peer_config}" "via"
+
+	[ "$cfg" = "$vxlan" ] || {
+		# This peer section belongs to another device
+		return
+	}
+
+	[ -n "${dst}" ] || {
+		proto_notify_error "$cfg" "MISSING_PEER_ADDRESS"
+		exit
+	}
+
+	bridge fdb append \
+		${lladdr:-00:00:00:00:00:00} \
+		dev ${cfg}                   \
+		dst ${dst}                   \
+		${src_vni:+src_vni $src_vni} \
+		${vni:+vni $vni}             \
+		${port:+port $port}          \
+		${via:+via $via}
+}
+
+vxlan_generic_setup() {
+	local cfg="$1"
+	local mode="$2"
+	local local="$3"
+	local remote="$4"
+
+	local link="$cfg"
+
+	local port vid ttl tos mtu macaddr zone rxcsum txcsum srcportmin srcportmax ageing maxaddress learning rsc proxy l2miss l3miss gbp
+	json_get_vars port vid ttl tos mtu macaddr zone rxcsum txcsum srcportmin srcportmax ageing maxaddress learning rsc proxy l2miss l3miss gbp
+
+	proto_init_update "$link" 1
+
+	proto_add_tunnel
+	json_add_string mode "$mode"
+
+	[ -n "$tunlink" ] && json_add_string link "$tunlink"
+	[ -n "$local" ] && json_add_string local "$local"
+	[ -n "$remote" ] && json_add_string remote "$remote"
+
+	[ -n "$ttl" ] && json_add_int ttl "$ttl"
+	[ -n "$tos" ] && json_add_string tos "$tos"
+	[ -n "$mtu" ] && json_add_int mtu "$mtu"
+
+	json_add_object 'data'
+	[ -n "$port" ] && json_add_int port "$port"
+	[ -n "$vid" ] && json_add_int id "$vid"
+	[ -n "$srcportmin" ] && json_add_int srcportmin "$srcportmin"
+	[ -n "$srcportmax" ] && json_add_int srcportmax "$srcportmax"
+	[ -n "$ageing" ] && json_add_int ageing "$ageing"
+	[ -n "$maxaddress" ] && json_add_int maxaddress "$maxaddress"
+	[ -n "$macaddr" ] && json_add_string macaddr "$macaddr"
+	[ -n "$rxcsum" ] && json_add_boolean rxcsum "$rxcsum"
+	[ -n "$txcsum" ] && json_add_boolean txcsum "$txcsum"
+	[ -n "$learning" ] && json_add_boolean learning "$learning"
+	[ -n "$rsc" ] && json_add_boolean rsc "$rsc"
+	[ -n "$proxy" ] && json_add_boolean proxy "$proxy"
+	[ -n "$l2miss" ] && json_add_boolean l2miss "$l2miss"
+	[ -n "$l3miss" ] && json_add_boolean l3miss "$l3miss"
+	[ -n "$gbp" ] && json_add_boolean gbp "$gbp"
+
+	json_close_object
+
+	proto_close_tunnel
+
+	proto_add_data
+	[ -n "$zone" ] && json_add_string zone "$zone"
+	proto_close_data
+
+	proto_send_update "$cfg"
+
+	config_load network
+	config_foreach proto_vxlan_setup_peer "vxlan_peer"
+}
+
+proto_vxlan_setup() {
+	local cfg="$1"
+
+	local ipaddr peeraddr
+	json_get_vars ipaddr peeraddr tunlink
+
+	( proto_add_host_dependency "$cfg" '' "$tunlink" )
+
+	case "$ipaddr" in
+		"auto"|"")
+			ipaddr="0.0.0.0"
+			;;
+	esac
+
+	vxlan_generic_setup "$cfg" 'vxlan' "$ipaddr" "$peeraddr"
+}
+
+proto_vxlan6_setup() {
+	local cfg="$1"
+
+	local ip6addr peer6addr
+	json_get_vars ip6addr peer6addr tunlink
+
+	( proto_add_host_dependency "$cfg" '' "$tunlink" )
+
+	case "$ip6addr" in
+		"auto"|"")
+			# ensure tunnel via ipv6
+			ip6addr="::"
+			;;
+	esac
+
+	vxlan_generic_setup "$cfg" 'vxlan6' "$ip6addr" "$peer6addr"
+}
+
+proto_vxlan_teardown() {
+	local cfg="$1"
+}
+
+proto_vxlan6_teardown() {
+	local cfg="$1"
+}
+
+vxlan_generic_init_config() {
+	no_device=1
+	available=1
+
+	proto_config_add_string "tunlink"
+	proto_config_add_string "zone"
+
+	proto_config_add_int "vid"
+	proto_config_add_int "port"
+	proto_config_add_int "ttl"
+	proto_config_add_int "tos"
+	proto_config_add_int "mtu"
+	proto_config_add_int "srcportmin"
+	proto_config_add_int "srcportmax"
+	proto_config_add_int "ageing"
+	proto_config_add_int "maxaddress"
+	proto_config_add_boolean "rxcsum"
+	proto_config_add_boolean "txcsum"
+	proto_config_add_boolean "learning"
+	proto_config_add_boolean "rsc"
+	proto_config_add_boolean "proxy"
+	proto_config_add_boolean "l2miss"
+	proto_config_add_boolean "l3miss"
+	proto_config_add_boolean "gbp"
+	proto_config_add_string "macaddr"
+
+}
+
+proto_vxlan_init_config() {
+	vxlan_generic_init_config
+	proto_config_add_string "ipaddr"
+	proto_config_add_string "peeraddr"
+}
+
+proto_vxlan6_init_config() {
+	vxlan_generic_init_config
+	proto_config_add_string "ip6addr"
+	proto_config_add_string "peer6addr"
+}
+
+[ -n "$INCLUDE_ONLY" ] || {
+	add_protocol vxlan
+	add_protocol vxlan6
+}
diff --git a/ucentral-client/rootfs/lib/netifd/proto/wireguard.sh b/ucentral-client/rootfs/lib/netifd/proto/wireguard.sh
new file mode 100755
index 0000000..f6ad967
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/proto/wireguard.sh
@@ -0,0 +1,217 @@
+#!/bin/sh
+# Copyright 2016-2017 Dan Luedtke <mail@danrl.com>
+# Licensed to the public under the Apache License 2.0.
+
+WG=/usr/bin/wg
+if [ ! -x $WG ]; then
+	logger -t "wireguard" "error: missing wireguard-tools (${WG})"
+	exit 0
+fi
+
+[ -n "$INCLUDE_ONLY" ] || {
+	. /lib/functions.sh
+	. ../netifd-proto.sh
+	init_proto "$@"
+}
+
+proto_wireguard_init_config() {
+	proto_config_add_string "private_key"
+	proto_config_add_int "listen_port"
+	proto_config_add_int "mtu"
+	proto_config_add_string "fwmark"
+	available=1
+	no_proto_task=1
+}
+
+proto_wireguard_setup_peer() {
+	local peer_config="$1"
+
+	local disabled
+	local public_key
+	local preshared_key
+	local allowed_ips
+	local route_allowed_ips
+	local endpoint_host
+	local endpoint_port
+	local persistent_keepalive
+
+	config_get_bool disabled "${peer_config}" "disabled" 0
+	config_get public_key "${peer_config}" "public_key"
+	config_get preshared_key "${peer_config}" "preshared_key"
+	config_get allowed_ips "${peer_config}" "allowed_ips"
+	config_get_bool route_allowed_ips "${peer_config}" "route_allowed_ips" 0
+	config_get endpoint_host "${peer_config}" "endpoint_host"
+	config_get endpoint_port "${peer_config}" "endpoint_port"
+	config_get persistent_keepalive "${peer_config}" "persistent_keepalive"
+
+	if [ "${disabled}" -eq 1 ]; then
+		# skip disabled peers
+		return 0
+	fi
+
+	if [ -z "$public_key" ]; then
+		echo "Skipping peer config $peer_config because public key is not defined."
+		return 0
+	fi
+
+	echo "[Peer]" >> "${wg_cfg}"
+	echo "PublicKey=${public_key}" >> "${wg_cfg}"
+	if [ "${preshared_key}" ]; then
+		echo "PresharedKey=${preshared_key}" >> "${wg_cfg}"
+	fi
+	for allowed_ip in $allowed_ips; do
+		echo "AllowedIPs=${allowed_ip}" >> "${wg_cfg}"
+	done
+	if [ "${endpoint_host}" ]; then
+		case "${endpoint_host}" in
+			*:*)
+				endpoint="[${endpoint_host}]"
+				;;
+			*)
+				endpoint="${endpoint_host}"
+				;;
+		esac
+		if [ "${endpoint_port}" ]; then
+			endpoint="${endpoint}:${endpoint_port}"
+		else
+			endpoint="${endpoint}:51820"
+		fi
+		echo "Endpoint=${endpoint}" >> "${wg_cfg}"
+	fi
+	if [ "${persistent_keepalive}" ]; then
+		echo "PersistentKeepalive=${persistent_keepalive}" >> "${wg_cfg}"
+	fi
+
+	if [ ${route_allowed_ips} -ne 0 ]; then
+		for allowed_ip in ${allowed_ips}; do
+			case "${allowed_ip}" in
+				*:*/*)
+					proto_add_ipv6_route "${allowed_ip%%/*}" "${allowed_ip##*/}"
+					;;
+				*.*/*)
+					proto_add_ipv4_route "${allowed_ip%%/*}" "${allowed_ip##*/}"
+					;;
+				*:*)
+					proto_add_ipv6_route "${allowed_ip%%/*}" "128"
+					;;
+				*.*)
+					proto_add_ipv4_route "${allowed_ip%%/*}" "32"
+					;;
+			esac
+		done
+	fi
+}
+
+ensure_key_is_generated() {
+	local private_key
+	private_key="$(uci get network."$1".private_key)"
+
+	if [ "$private_key" == "generate" ]; then
+		local ucitmp
+		oldmask="$(umask)"
+		umask 077
+		ucitmp="$(mktemp -d)"
+		private_key="$("${WG}" genkey)"
+		uci -q -t "$ucitmp" set network."$1".private_key="$private_key" && \
+			uci -q -t "$ucitmp" commit network
+		rm -rf "$ucitmp"
+		umask "$oldmask"
+	fi
+}
+
+proto_wireguard_setup() {
+	local config="$1"
+	local wg_dir="/tmp/wireguard"
+	local wg_cfg="${wg_dir}/${config}"
+
+	local private_key
+	local listen_port
+	local mtu
+
+	ensure_key_is_generated "${config}"
+
+	config_load network
+	config_get private_key "${config}" "private_key"
+	config_get listen_port "${config}" "listen_port"
+	config_get addresses "${config}" "addresses"
+	config_get mtu "${config}" "mtu"
+	config_get fwmark "${config}" "fwmark"
+	config_get ip6prefix "${config}" "ip6prefix"
+	config_get nohostroute "${config}" "nohostroute"
+	config_get tunlink "${config}" "tunlink"
+
+	ip link del dev "${config}" 2>/dev/null
+	ip link add dev "${config}" type wireguard
+
+	if [ "${mtu}" ]; then
+		ip link set mtu "${mtu}" dev "${config}"
+	fi
+
+	proto_init_update "${config}" 1
+
+	umask 077
+	mkdir -p "${wg_dir}"
+	echo "[Interface]" > "${wg_cfg}"
+	echo "PrivateKey=${private_key}" >> "${wg_cfg}"
+	if [ "${listen_port}" ]; then
+		echo "ListenPort=${listen_port}" >> "${wg_cfg}"
+	fi
+	if [ "${fwmark}" ]; then
+		echo "FwMark=${fwmark}" >> "${wg_cfg}"
+	fi
+	config_foreach proto_wireguard_setup_peer "wireguard_${config}"
+
+	# apply configuration file
+	${WG} setconf ${config} "${wg_cfg}"
+	WG_RETURN=$?
+
+	rm -f "${wg_cfg}"
+
+	if [ ${WG_RETURN} -ne 0 ]; then
+		sleep 5
+		proto_setup_failed "${config}"
+		exit 1
+	fi
+
+	for address in ${addresses}; do
+		case "${address}" in
+			*:*/*)
+				proto_add_ipv6_address "${address%%/*}" "${address##*/}"
+				;;
+			*.*/*)
+				proto_add_ipv4_address "${address%%/*}" "${address##*/}"
+				;;
+			*:*)
+				proto_add_ipv6_address "${address%%/*}" "128"
+				;;
+			*.*)
+				proto_add_ipv4_address "${address%%/*}" "32"
+				;;
+		esac
+	done
+
+	for prefix in ${ip6prefix}; do
+		proto_add_ipv6_prefix "$prefix"
+	done
+
+	# endpoint dependency
+	if [ "${nohostroute}" != "1" ]; then
+		wg show "${config}" endpoints | \
+		sed -E 's/\[?([0-9.:a-f]+)\]?:([0-9]+)/\1 \2/' | \
+		while IFS=$'\t ' read -r key address port; do
+			[ -n "${port}" ] || continue
+			proto_add_host_dependency "${config}" "${address}" "${tunlink}"
+		done
+	fi
+
+	proto_send_update "${config}"
+}
+
+proto_wireguard_teardown() {
+	local config="$1"
+	ip link del dev "${config}" >/dev/null 2>&1
+}
+
+[ -n "$INCLUDE_ONLY" ] || {
+	add_protocol wireguard
+}
diff --git a/ucentral-client/rootfs/lib/netifd/utils.sh b/ucentral-client/rootfs/lib/netifd/utils.sh
new file mode 100644
index 0000000..60470a5
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/utils.sh
@@ -0,0 +1,50 @@
+N="
+"
+
+append() {
+	local var="$1"
+	local value="$2"
+	local sep="${3:- }"
+
+	eval "export -- \"$var=\${$var:+\${$var}\${value:+\$sep}}\$value\""
+}
+
+add_default_handler() {
+	case "$(type $1 2>/dev/null)" in
+		*function*) return;;
+		*) eval "$1() { return; }"
+	esac
+}
+
+set_default() {
+	local __s_var="$1"
+	local __s_val="$2"
+	eval "export -- \"$__s_var=\${$__s_var:-\$__s_val}\""
+}
+
+_config_add_generic() {
+	local type="$1"; shift
+
+	for name in "$@"; do
+		json_add_array ""
+		json_add_string "" "$name"
+		json_add_int "" "$type"
+		json_close_array
+	done
+}
+
+config_add_int() {
+	_config_add_generic 5 "$@"
+}
+
+config_add_array() {
+	_config_add_generic 1 "$@"
+}
+
+config_add_string() {
+	_config_add_generic 3 "$@"
+}
+
+config_add_boolean() {
+	_config_add_generic 7 "$@"
+}
diff --git a/ucentral-client/rootfs/lib/netifd/wireless/mac80211.sh b/ucentral-client/rootfs/lib/netifd/wireless/mac80211.sh
new file mode 100755
index 0000000..5dd780b
--- /dev/null
+++ b/ucentral-client/rootfs/lib/netifd/wireless/mac80211.sh
@@ -0,0 +1,1173 @@
+#!/bin/sh
+. /lib/netifd/netifd-wireless.sh
+. /lib/netifd/hostapd.sh
+. /lib/functions/system.sh
+
+init_wireless_driver "$@"
+
+MP_CONFIG_INT="mesh_retry_timeout mesh_confirm_timeout mesh_holding_timeout mesh_max_peer_links
+	       mesh_max_retries mesh_ttl mesh_element_ttl mesh_hwmp_max_preq_retries
+	       mesh_path_refresh_time mesh_min_discovery_timeout mesh_hwmp_active_path_timeout
+	       mesh_hwmp_preq_min_interval mesh_hwmp_net_diameter_traversal_time mesh_hwmp_rootmode
+	       mesh_hwmp_rann_interval mesh_gate_announcements mesh_sync_offset_max_neighor
+	       mesh_rssi_threshold mesh_hwmp_active_path_to_root_timeout mesh_hwmp_root_interval
+	       mesh_hwmp_confirmation_interval mesh_awake_window mesh_plink_timeout"
+MP_CONFIG_BOOL="mesh_auto_open_plinks mesh_fwding"
+MP_CONFIG_STRING="mesh_power_mode"
+
+wdev_tool() {
+	ucode /usr/share/hostap/wdev.uc "$@"
+}
+
+drv_mac80211_init_device_config() {
+	hostapd_common_add_device_config
+
+	config_add_string path phy 'macaddr:macaddr'
+	config_add_string tx_burst
+	config_add_string distance
+	config_add_int beacon_int chanbw frag rts
+	config_add_int rxantenna txantenna txpower min_tx_power
+	config_add_int num_global_macaddr multiple_bssid
+	config_add_boolean noscan ht_coex acs_exclude_dfs background_radar
+	config_add_array ht_capab
+	config_add_array channels
+	config_add_array scan_list
+	config_add_boolean \
+		rxldpc \
+		short_gi_80 \
+		short_gi_160 \
+		tx_stbc_2by1 \
+		su_beamformer \
+		su_beamformee \
+		mu_beamformer \
+		mu_beamformee \
+		he_su_beamformer \
+		he_su_beamformee \
+		he_mu_beamformer \
+		vht_txop_ps \
+		htc_vht \
+		rx_antenna_pattern \
+		tx_antenna_pattern \
+		he_spr_sr_control \
+		he_spr_psr_enabled \
+		he_bss_color_enabled \
+		he_twt_required
+	config_add_int \
+		beamformer_antennas \
+		beamformee_antennas \
+		vht_max_a_mpdu_len_exp \
+		vht_max_mpdu \
+		vht_link_adapt \
+		vht160 \
+		rx_stbc \
+		tx_stbc \
+		he_bss_color \
+		he_spr_non_srg_obss_pd_max_offset
+	config_add_boolean \
+		ldpc \
+		greenfield \
+		short_gi_20 \
+		short_gi_40 \
+		max_amsdu \
+		dsss_cck_40
+}
+
+drv_mac80211_init_iface_config() {
+	hostapd_common_add_bss_config
+
+	config_add_string 'macaddr:macaddr' ifname
+
+	config_add_boolean wds powersave enable
+	config_add_string wds_bridge
+	config_add_int maxassoc
+	config_add_int max_listen_int
+	config_add_int dtim_period
+	config_add_int start_disabled
+
+	# mesh
+	config_add_string mesh_id
+	config_add_int $MP_CONFIG_INT
+	config_add_boolean $MP_CONFIG_BOOL
+	config_add_string $MP_CONFIG_STRING
+}
+
+mac80211_add_capabilities() {
+	local __var="$1"; shift
+	local __mask="$1"; shift
+	local __out= oifs
+
+	oifs="$IFS"
+	IFS=:
+	for capab in "$@"; do
+		set -- $capab
+
+		[ "$(($4))" -gt 0 ] || continue
+		[ "$(($__mask & $2))" -eq "$((${3:-$2}))" ] || continue
+		__out="$__out[$1]"
+	done
+	IFS="$oifs"
+
+	export -n -- "$__var=$__out"
+}
+
+mac80211_add_he_capabilities() {
+	local __out= oifs
+
+	oifs="$IFS"
+	IFS=:
+	for capab in "$@"; do
+		set -- $capab
+		[ "$(($4))" -gt 0 ] || continue
+		[ "$(((0x$2) & $3))" -gt 0 ] || {
+			eval "$1=0"
+			continue
+		}
+		append base_cfg "$1=1" "$N"
+	done
+	IFS="$oifs"
+}
+
+mac80211_hostapd_setup_base() {
+	local phy="$1"
+
+	json_select config
+
+	[ "$auto_channel" -gt 0 ] && channel=0
+
+	[ "$auto_channel" -gt 0 ] && json_get_vars acs_exclude_dfs
+	[ -n "$acs_exclude_dfs" ] && [ "$acs_exclude_dfs" -gt 0 ] &&
+		append base_cfg "acs_exclude_dfs=1" "$N"
+
+	json_get_vars noscan ht_coex min_tx_power:0 tx_burst
+	json_get_values ht_capab_list ht_capab
+	json_get_values channel_list channels
+
+	[ "$auto_channel" = 0 ] && [ -z "$channel_list" ] && \
+		channel_list="$channel"
+
+	[ "$min_tx_power" -gt 0 ] && append base_cfg "min_tx_power=$min_tx_power"
+
+	set_default noscan 0
+
+	[ "$noscan" -gt 0 ] && hostapd_noscan=1
+	[ "$tx_burst" = 0 ] && tx_burst=
+
+	chan_ofs=0
+	[ "$band" = "6g" ] && chan_ofs=1
+
+	ieee80211n=1
+	ht_capab=
+	case "$htmode" in
+		VHT20|HT20|HE20) ;;
+		HT40*|VHT40|VHT80|VHT160|HE40|HE80|HE160)
+			case "$hwmode" in
+				a)
+					case "$(( (($channel / 4) + $chan_ofs) % 2 ))" in
+						1) ht_capab="[HT40+]";;
+						0) ht_capab="[HT40-]";;
+					esac
+				;;
+				*)
+					case "$htmode" in
+						HT40+) ht_capab="[HT40+]";;
+						HT40-) ht_capab="[HT40-]";;
+						*)
+							if [ "$channel" -lt 7 ]; then
+								ht_capab="[HT40+]"
+							else
+								ht_capab="[HT40-]"
+							fi
+						;;
+					esac
+				;;
+			esac
+			[ "$auto_channel" -gt 0 ] && ht_capab="[HT40+]"
+		;;
+		*) ieee80211n= ;;
+	esac
+
+	[ -n "$ieee80211n" ] && {
+		append base_cfg "ieee80211n=1" "$N"
+
+		set_default ht_coex 0
+		append base_cfg "ht_coex=$ht_coex" "$N"
+
+		json_get_vars \
+			ldpc:1 \
+			greenfield:0 \
+			short_gi_20:1 \
+			short_gi_40:1 \
+			tx_stbc:1 \
+			rx_stbc:3 \
+			max_amsdu:1 \
+			dsss_cck_40:1
+
+		ht_cap_mask=0
+		for cap in $(iw phy "$phy" info | grep 'Capabilities:' | cut -d: -f2); do
+			ht_cap_mask="$(($ht_cap_mask | $cap))"
+		done
+
+		cap_rx_stbc=$((($ht_cap_mask >> 8) & 3))
+		[ "$rx_stbc" -lt "$cap_rx_stbc" ] && cap_rx_stbc="$rx_stbc"
+		ht_cap_mask="$(( ($ht_cap_mask & ~(0x300)) | ($cap_rx_stbc << 8) ))"
+
+		mac80211_add_capabilities ht_capab_flags $ht_cap_mask \
+			LDPC:0x1::$ldpc \
+			GF:0x10::$greenfield \
+			SHORT-GI-20:0x20::$short_gi_20 \
+			SHORT-GI-40:0x40::$short_gi_40 \
+			TX-STBC:0x80::$tx_stbc \
+			RX-STBC1:0x300:0x100:1 \
+			RX-STBC12:0x300:0x200:1 \
+			RX-STBC123:0x300:0x300:1 \
+			MAX-AMSDU-7935:0x800::$max_amsdu \
+			DSSS_CCK-40:0x1000::$dsss_cck_40
+
+		ht_capab="$ht_capab$ht_capab_flags"
+		[ -n "$ht_capab" ] && append base_cfg "ht_capab=$ht_capab" "$N"
+	}
+
+	# 802.11ac
+	enable_ac=0
+	vht_oper_chwidth=0
+	vht_center_seg0=
+
+	idx="$channel"
+	case "$htmode" in
+		VHT20|HE20) enable_ac=1;;
+		VHT40|HE40)
+			case "$(( (($channel / 4) + $chan_ofs) % 2 ))" in
+				1) idx=$(($channel + 2));;
+				0) idx=$(($channel - 2));;
+			esac
+			enable_ac=1
+			vht_center_seg0=$idx
+		;;
+		VHT80|HE80)
+			case "$(( (($channel / 4) + $chan_ofs) % 4 ))" in
+				1) idx=$(($channel + 6));;
+				2) idx=$(($channel + 2));;
+				3) idx=$(($channel - 2));;
+				0) idx=$(($channel - 6));;
+			esac
+			enable_ac=1
+			vht_oper_chwidth=1
+			vht_center_seg0=$idx
+		;;
+		VHT160|HE160)
+			if [ "$band" = "6g" ]; then
+				case "$channel" in
+					1|5|9|13|17|21|25|29) idx=15;;
+					33|37|41|45|49|53|57|61) idx=47;;
+					65|69|73|77|81|85|89|93) idx=79;;
+					97|101|105|109|113|117|121|125) idx=111;;
+					129|133|137|141|145|149|153|157) idx=143;;
+					161|165|169|173|177|181|185|189) idx=175;;
+					193|197|201|205|209|213|217|221) idx=207;;
+				esac
+			else
+				case "$channel" in
+					36|40|44|48|52|56|60|64) idx=50;;
+					100|104|108|112|116|120|124|128) idx=114;;
+				esac
+			fi
+			enable_ac=1
+			vht_oper_chwidth=2
+			vht_center_seg0=$idx
+		;;
+	esac
+	[ "$band" = "5g" ] && {
+		json_get_vars background_radar:0
+
+		[ "$background_radar" -eq 1 ] && append base_cfg "enable_background_radar=1" "$N"
+	}
+	[ "$band" = "6g" ] && {
+		op_class=
+		case "$htmode" in
+			HE20) op_class=131;;
+			HE*) op_class=$((132 + $vht_oper_chwidth))
+		esac
+		[ -n "$op_class" ] && append base_cfg "op_class=$op_class" "$N"
+	}
+	[ "$hwmode" = "a" ] || enable_ac=0
+
+	if [ "$enable_ac" != "0" ]; then
+		json_get_vars \
+			rxldpc:1 \
+			short_gi_80:1 \
+			short_gi_160:1 \
+			tx_stbc_2by1:1 \
+			su_beamformer:1 \
+			su_beamformee:1 \
+			mu_beamformer:1 \
+			mu_beamformee:1 \
+			vht_txop_ps:1 \
+			htc_vht:1 \
+			beamformee_antennas:4 \
+			beamformer_antennas:4 \
+			rx_antenna_pattern:1 \
+			tx_antenna_pattern:1 \
+			vht_max_a_mpdu_len_exp:7 \
+			vht_max_mpdu:11454 \
+			rx_stbc:4 \
+			vht_link_adapt:3 \
+			vht160:2
+
+		set_default tx_burst 2.0
+		append base_cfg "ieee80211ac=1" "$N"
+		vht_cap=0
+		for cap in $(iw phy "$phy" info | awk -F "[()]" '/VHT Capabilities/ { print $2 }'); do
+			vht_cap="$(($vht_cap | $cap))"
+		done
+
+		append base_cfg "vht_oper_chwidth=$vht_oper_chwidth" "$N"
+		append base_cfg "vht_oper_centr_freq_seg0_idx=$vht_center_seg0" "$N"
+
+		cap_rx_stbc=$((($vht_cap >> 8) & 7))
+		[ "$rx_stbc" -lt "$cap_rx_stbc" ] && cap_rx_stbc="$rx_stbc"
+		vht_cap="$(( ($vht_cap & ~(0x700)) | ($cap_rx_stbc << 8) ))"
+
+		mac80211_add_capabilities vht_capab $vht_cap \
+			RXLDPC:0x10::$rxldpc \
+			SHORT-GI-80:0x20::$short_gi_80 \
+			SHORT-GI-160:0x40::$short_gi_160 \
+			TX-STBC-2BY1:0x80::$tx_stbc_2by1 \
+			SU-BEAMFORMER:0x800::$su_beamformer \
+			SU-BEAMFORMEE:0x1000::$su_beamformee \
+			MU-BEAMFORMER:0x80000::$mu_beamformer \
+			MU-BEAMFORMEE:0x100000::$mu_beamformee \
+			VHT-TXOP-PS:0x200000::$vht_txop_ps \
+			HTC-VHT:0x400000::$htc_vht \
+			RX-ANTENNA-PATTERN:0x10000000::$rx_antenna_pattern \
+			TX-ANTENNA-PATTERN:0x20000000::$tx_antenna_pattern \
+			RX-STBC-1:0x700:0x100:1 \
+			RX-STBC-12:0x700:0x200:1 \
+			RX-STBC-123:0x700:0x300:1 \
+			RX-STBC-1234:0x700:0x400:1 \
+
+		[ "$(($vht_cap & 0x800))" -gt 0 -a "$su_beamformer" -gt 0 ] && {
+			cap_ant="$(( ( ($vht_cap >> 16) & 3 ) + 1 ))"
+			[ "$cap_ant" -gt "$beamformer_antennas" ] && cap_ant="$beamformer_antennas"
+			[ "$cap_ant" -gt 1 ] && vht_capab="$vht_capab[SOUNDING-DIMENSION-$cap_ant]"
+		}
+
+		[ "$(($vht_cap & 0x1000))" -gt 0 -a "$su_beamformee" -gt 0 ] && {
+			cap_ant="$(( ( ($vht_cap >> 13) & 3 ) + 1 ))"
+			[ "$cap_ant" -gt "$beamformee_antennas" ] && cap_ant="$beamformee_antennas"
+			[ "$cap_ant" -gt 1 ] && vht_capab="$vht_capab[BF-ANTENNA-$cap_ant]"
+		}
+
+		# supported Channel widths
+		vht160_hw=0
+		[ "$(($vht_cap & 12))" -eq 4 -a 1 -le "$vht160" ] && \
+			vht160_hw=1
+		[ "$(($vht_cap & 12))" -eq 8 -a 2 -le "$vht160" ] && \
+			vht160_hw=2
+		[ "$vht160_hw" = 1 ] && vht_capab="$vht_capab[VHT160]"
+		[ "$vht160_hw" = 2 ] && vht_capab="$vht_capab[VHT160-80PLUS80]"
+
+		# maximum MPDU length
+		vht_max_mpdu_hw=3895
+		[ "$(($vht_cap & 3))" -ge 1 -a 7991 -le "$vht_max_mpdu" ] && \
+			vht_max_mpdu_hw=7991
+		[ "$(($vht_cap & 3))" -ge 2 -a 11454 -le "$vht_max_mpdu" ] && \
+			vht_max_mpdu_hw=11454
+		[ "$vht_max_mpdu_hw" != 3895 ] && \
+			vht_capab="$vht_capab[MAX-MPDU-$vht_max_mpdu_hw]"
+
+		# maximum A-MPDU length exponent
+		vht_max_a_mpdu_len_exp_hw=0
+		[ "$(($vht_cap & 58720256))" -ge 8388608 -a 1 -le "$vht_max_a_mpdu_len_exp" ] && \
+			vht_max_a_mpdu_len_exp_hw=1
+		[ "$(($vht_cap & 58720256))" -ge 16777216 -a 2 -le "$vht_max_a_mpdu_len_exp" ] && \
+			vht_max_a_mpdu_len_exp_hw=2
+		[ "$(($vht_cap & 58720256))" -ge 25165824 -a 3 -le "$vht_max_a_mpdu_len_exp" ] && \
+			vht_max_a_mpdu_len_exp_hw=3
+		[ "$(($vht_cap & 58720256))" -ge 33554432 -a 4 -le "$vht_max_a_mpdu_len_exp" ] && \
+			vht_max_a_mpdu_len_exp_hw=4
+		[ "$(($vht_cap & 58720256))" -ge 41943040 -a 5 -le "$vht_max_a_mpdu_len_exp" ] && \
+			vht_max_a_mpdu_len_exp_hw=5
+		[ "$(($vht_cap & 58720256))" -ge 50331648 -a 6 -le "$vht_max_a_mpdu_len_exp" ] && \
+			vht_max_a_mpdu_len_exp_hw=6
+		[ "$(($vht_cap & 58720256))" -ge 58720256 -a 7 -le "$vht_max_a_mpdu_len_exp" ] && \
+			vht_max_a_mpdu_len_exp_hw=7
+		vht_capab="$vht_capab[MAX-A-MPDU-LEN-EXP$vht_max_a_mpdu_len_exp_hw]"
+
+		# whether or not the STA supports link adaptation using VHT variant
+		vht_link_adapt_hw=0
+		[ "$(($vht_cap & 201326592))" -ge 134217728 -a 2 -le "$vht_link_adapt" ] && \
+			vht_link_adapt_hw=2
+		[ "$(($vht_cap & 201326592))" -ge 201326592 -a 3 -le "$vht_link_adapt" ] && \
+			vht_link_adapt_hw=3
+		[ "$vht_link_adapt_hw" != 0 ] && \
+			vht_capab="$vht_capab[VHT-LINK-ADAPT-$vht_link_adapt_hw]"
+
+		[ -n "$vht_capab" ] && append base_cfg "vht_capab=$vht_capab" "$N"
+	fi
+
+	# 802.11ax
+	enable_ax=0
+	case "$htmode" in
+		HE*) enable_ax=1 ;;
+	esac
+
+	if [ "$enable_ax" != "0" ]; then
+		json_get_vars \
+			he_su_beamformer:1 \
+			he_su_beamformee:1 \
+			he_mu_beamformer:1 \
+			he_twt_required:0 \
+			he_spr_sr_control:3 \
+			he_spr_psr_enabled:0 \
+			he_spr_non_srg_obss_pd_max_offset:0 \
+			he_bss_color:128 \
+			he_bss_color_enabled:1
+
+		he_phy_cap=$(iw phy "$phy" info | sed -n '/HE Iftypes: AP/,$p' | awk -F "[()]" '/HE PHY Capabilities/ { print $2 }' | head -1)
+		he_phy_cap=${he_phy_cap:2}
+		he_mac_cap=$(iw phy "$phy" info | sed -n '/HE Iftypes: AP/,$p' | awk -F "[()]" '/HE MAC Capabilities/ { print $2 }' | head -1)
+		he_mac_cap=${he_mac_cap:2}
+
+		append base_cfg "ieee80211ax=1" "$N"
+		[ "$hwmode" = "a" ] && {
+			append base_cfg "he_oper_chwidth=$vht_oper_chwidth" "$N"
+			append base_cfg "he_oper_centr_freq_seg0_idx=$vht_center_seg0" "$N"
+		}
+
+		mac80211_add_he_capabilities \
+			he_su_beamformer:${he_phy_cap:6:2}:0x80:$he_su_beamformer \
+			he_su_beamformee:${he_phy_cap:8:2}:0x1:$he_su_beamformee \
+			he_mu_beamformer:${he_phy_cap:8:2}:0x2:$he_mu_beamformer \
+			he_spr_psr_enabled:${he_phy_cap:14:2}:0x1:$he_spr_psr_enabled \
+			he_twt_required:${he_mac_cap:0:2}:0x6:$he_twt_required
+
+		if [ "$he_bss_color_enabled" -gt 0 ]; then
+			append base_cfg "he_bss_color=$he_bss_color" "$N"
+			[ "$he_spr_non_srg_obss_pd_max_offset" -gt 0 ] && { \
+				append base_cfg "he_spr_non_srg_obss_pd_max_offset=$he_spr_non_srg_obss_pd_max_offset" "$N"
+				he_spr_sr_control=$((he_spr_sr_control | (1 << 2)))
+			}
+			[ "$he_spr_psr_enabled" -gt 0 ] || he_spr_sr_control=$((he_spr_sr_control | (1 << 0)))
+			append base_cfg "he_spr_sr_control=$he_spr_sr_control" "$N"
+		else
+			append base_cfg "he_bss_color_disabled=1" "$N"
+		fi
+
+
+		append base_cfg "he_default_pe_duration=4" "$N"
+		append base_cfg "he_rts_threshold=1023" "$N"
+		append base_cfg "he_mu_edca_qos_info_param_count=0" "$N"
+		append base_cfg "he_mu_edca_qos_info_q_ack=0" "$N"
+		append base_cfg "he_mu_edca_qos_info_queue_request=0" "$N"
+		append base_cfg "he_mu_edca_qos_info_txop_request=0" "$N"
+		append base_cfg "he_mu_edca_ac_be_aifsn=8" "$N"
+		append base_cfg "he_mu_edca_ac_be_aci=0" "$N"
+		append base_cfg "he_mu_edca_ac_be_ecwmin=9" "$N"
+		append base_cfg "he_mu_edca_ac_be_ecwmax=10" "$N"
+		append base_cfg "he_mu_edca_ac_be_timer=255" "$N"
+		append base_cfg "he_mu_edca_ac_bk_aifsn=15" "$N"
+		append base_cfg "he_mu_edca_ac_bk_aci=1" "$N"
+		append base_cfg "he_mu_edca_ac_bk_ecwmin=9" "$N"
+		append base_cfg "he_mu_edca_ac_bk_ecwmax=10" "$N"
+		append base_cfg "he_mu_edca_ac_bk_timer=255" "$N"
+		append base_cfg "he_mu_edca_ac_vi_ecwmin=5" "$N"
+		append base_cfg "he_mu_edca_ac_vi_ecwmax=7" "$N"
+		append base_cfg "he_mu_edca_ac_vi_aifsn=5" "$N"
+		append base_cfg "he_mu_edca_ac_vi_aci=2" "$N"
+		append base_cfg "he_mu_edca_ac_vi_timer=255" "$N"
+		append base_cfg "he_mu_edca_ac_vo_aifsn=5" "$N"
+		append base_cfg "he_mu_edca_ac_vo_aci=3" "$N"
+		append base_cfg "he_mu_edca_ac_vo_ecwmin=5" "$N"
+		append base_cfg "he_mu_edca_ac_vo_ecwmax=7" "$N"
+		append base_cfg "he_mu_edca_ac_vo_timer=255" "$N"
+	fi
+
+	hostapd_prepare_device_config "$hostapd_conf_file" nl80211
+	cat >> "$hostapd_conf_file" <<EOF
+${channel:+channel=$channel}
+${channel_list:+chanlist=$channel_list}
+${hostapd_noscan:+noscan=1}
+${tx_burst:+tx_queue_data2_burst=$tx_burst}
+${multiple_bssid:+mbssid=$multiple_bssid}
+#num_global_macaddr=$num_global_macaddr
+$base_cfg
+
+EOF
+	json_select ..
+}
+
+mac80211_hostapd_setup_bss() {
+	local phy="$1"
+	local ifname="$2"
+	local macaddr="$3"
+	local type="$4"
+
+	hostapd_cfg=
+	append hostapd_cfg "$type=$ifname" "$N"
+
+	hostapd_set_bss_options hostapd_cfg "$phy" "$vif" || return 1
+	json_get_vars wds wds_bridge dtim_period max_listen_int start_disabled
+
+	set_default wds 0
+	set_default start_disabled 0
+
+	[ "$wds" -gt 0 ] && {
+		append hostapd_cfg "wds_sta=1" "$N"
+		[ -n "$wds_bridge" ] && append hostapd_cfg "wds_bridge=$wds_bridge" "$N"
+	}
+	[ "$staidx" -gt 0 -o "$start_disabled" -eq 1 ] && append hostapd_cfg "start_disabled=1" "$N"
+
+	cat >> /var/run/hostapd-$phy.conf <<EOF
+$hostapd_cfg
+bssid=$macaddr
+${default_macaddr:+#default_macaddr}
+${dtim_period:+dtim_period=$dtim_period}
+${max_listen_int:+max_listen_interval=$max_listen_int}
+EOF
+}
+
+mac80211_get_addr() {
+	local phy="$1"
+	local idx="$(($2 + 1))"
+
+	head -n $idx /sys/class/ieee80211/${phy}/addresses | tail -n1
+}
+
+mac80211_generate_mac() {
+	local phy="$1"
+	local id="${macidx:-0}"
+
+	wdev_tool "$phy" get_macaddr id=$id num_global=$num_global_macaddr mbssid=${multiple_bssid:-0}
+}
+
+get_board_phy_name() (
+	local path="$1"
+	local fallback_phy=""
+
+	__check_phy() {
+		local val="$1"
+		local key="$2"
+		local ref_path="$3"
+
+		json_select "$key"
+		json_get_values path
+		json_select ..
+
+		[ "${ref_path%+*}" = "$path" ] && fallback_phy=$key
+		[ "$ref_path" = "$path" ] || return 0
+
+		echo "$key"
+		exit
+	}
+
+	json_load_file /etc/board.json
+	json_for_each_item __check_phy wlan "$path"
+	[ -n "$fallback_phy" ] && echo "${fallback_phy}.${path##*+}"
+)
+
+rename_board_phy_by_path() {
+	local path="$1"
+
+	local new_phy="$(get_board_phy_name "$path")"
+	[ -z "$new_phy" -o "$new_phy" = "$phy" ] && return
+
+	iw "$phy" set name "$new_phy" && phy="$new_phy"
+}
+
+rename_board_phy_by_name() (
+	local phy="$1"
+	local suffix="${phy##*.}"
+	[ "$suffix" = "$phy" ] && suffix=
+
+	json_load_file /etc/board.json
+	json_select wlan
+	json_select "${phy%.*}" || return 0
+	json_get_values path
+
+	prev_phy="$(iwinfo nl80211 phyname "path=$path${suffix:++$suffix}")"
+	[ -n "$prev_phy" ] || return 0
+
+	[ "$prev_phy" = "$phy" ] && return 0
+
+	iw "$prev_phy" set name "$phy"
+)
+
+find_phy() {
+	[ -n "$phy" ] && {
+		rename_board_phy_by_name "$phy"
+		[ -d /sys/class/ieee80211/$phy ] && return 0
+	}
+	[ -n "$path" ] && {
+		phy="$(iwinfo nl80211 phyname "path=$path")"
+		[ -n "$phy" ] && {
+			rename_board_phy_by_path "$path"
+			return 0
+		}
+	}
+	[ -n "$macaddr" ] && {
+		for phy in $(ls /sys/class/ieee80211 2>/dev/null); do
+			grep -i -q "$macaddr" "/sys/class/ieee80211/${phy}/macaddress" && {
+				path="$(iwinfo nl80211 path "$phy")"
+				rename_board_phy_by_path "$path"
+				return 0
+			}
+		done
+	}
+	return 1
+}
+
+mac80211_check_ap() {
+	has_ap=1
+}
+
+mac80211_prepare_vif() {
+	json_select config
+
+	json_get_vars ifname mode ssid wds powersave macaddr enable wpa_psk_file vlan_file
+
+	[ -n "$ifname" ] || ifname="wlan${phy#phy}${if_idx:+-$if_idx}"
+	if_idx=$((${if_idx:-0} + 1))
+
+	append active_ifnames "$ifname"
+	set_default wds 0
+	set_default powersave 0
+	json_add_string _ifname "$ifname"
+
+	default_macaddr=
+	if [ -z "$macaddr" ]; then
+		macaddr="$(mac80211_generate_mac $phy)"
+		macidx="$(($macidx + 1))"
+		default_macaddr=1
+	elif [ "$macaddr" = 'random' ]; then
+		macaddr="$(macaddr_random)"
+	fi
+	json_add_string _macaddr "$macaddr"
+	json_add_string _default_macaddr "$default_macaddr"
+	json_select ..
+
+
+	[ "$mode" == "ap" ] && {
+		[ -z "$wpa_psk_file" ] && hostapd_set_psk "$ifname"
+		[ -z "$vlan_file" ] && hostapd_set_vlan "$ifname"
+	}
+
+	json_select config
+
+	# It is far easier to delete and create the desired interface
+	case "$mode" in
+		ap)
+			# Hostapd will handle recreating the interface and
+			# subsequent virtual APs belonging to the same PHY
+			if [ -n "$hostapd_ctrl" ]; then
+				type=bss
+			else
+				type=interface
+			fi
+
+			mac80211_hostapd_setup_bss "$phy" "$ifname" "$macaddr" "$type" || return
+
+			[ -n "$hostapd_ctrl" ] || {
+				ap_ifname="${ifname}"
+				hostapd_ctrl="${hostapd_ctrl:-/var/run/hostapd/$ifname}"
+			}
+		;;
+	esac
+
+	json_select ..
+}
+
+mac80211_prepare_iw_htmode() {
+	case "$htmode" in
+		VHT20|HT20|HE20) iw_htmode=HT20;;
+		HT40*|VHT40|VHT160|HE40)
+			case "$band" in
+				2g)
+					case "$htmode" in
+						HT40+) iw_htmode="HT40+";;
+						HT40-) iw_htmode="HT40-";;
+						*)
+							if [ "$channel" -lt 7 ]; then
+								iw_htmode="HT40+"
+							else
+								iw_htmode="HT40-"
+							fi
+						;;
+					esac
+				;;
+				*)
+					case "$(( ($channel / 4) % 2 ))" in
+						1) iw_htmode="HT40+" ;;
+						0) iw_htmode="HT40-";;
+					esac
+				;;
+			esac
+			[ "$auto_channel" -gt 0 ] && iw_htmode="HT40+"
+		;;
+		VHT80|HE80)
+			iw_htmode="80MHZ"
+		;;
+		NONE|NOHT)
+			iw_htmode="NOHT"
+		;;
+		*) iw_htmode="" ;;
+	esac
+}
+
+mac80211_add_mesh_params() {
+	for var in $MP_CONFIG_INT $MP_CONFIG_BOOL $MP_CONFIG_STRING; do
+		eval "mp_val=\"\$$var\""
+		[ -n "$mp_val" ] && json_add_string "$var" "$mp_val"
+	done
+}
+
+mac80211_setup_adhoc() {
+	local enable=$1
+	json_get_vars bssid ssid key mcast_rate
+
+	NEWUMLIST="${NEWUMLIST}$ifname "
+
+	[ "$enable" = 0 ] && {
+		ip link set dev "$ifname" down
+		return 0
+	}
+
+	keyspec=
+	[ "$auth_type" = "wep" ] && {
+		set_default key 1
+		case "$key" in
+			[1234])
+				local idx
+				for idx in 1 2 3 4; do
+					json_get_var ikey "key$idx"
+
+					[ -n "$ikey" ] && {
+						ikey="$(($idx - 1)):$(prepare_key_wep "$ikey")"
+						[ $idx -eq $key ] && ikey="d:$ikey"
+						append keyspec "$ikey"
+					}
+				done
+			;;
+			*)
+				append keyspec "d:0:$(prepare_key_wep "$key")"
+			;;
+		esac
+	}
+
+	brstr=
+	for br in $basic_rate_list; do
+		wpa_supplicant_add_rate brstr "$br"
+	done
+
+	mcval=
+	[ -n "$mcast_rate" ] && wpa_supplicant_add_rate mcval "$mcast_rate"
+
+	local prev
+	json_set_namespace wdev_uc prev
+
+	json_add_object "$ifname"
+	json_add_string mode adhoc
+	[ -n "$default_macaddr" ] || json_add_string macaddr "$macaddr"
+	json_add_string ssid "$ssid"
+	json_add_string freq "$freq"
+	json_add_string htmode "$iw_htmode"
+	[ -n "$bssid" ] && json_add_string bssid "$bssid"
+	json_add_int beacon-interval "$beacon_int"
+	[ -n "$brstr" ] && json_add_string basic-rates "$brstr"
+	[ -n "$mcval" ] && json_add_string mcast-rate "$mcval"
+	[ -n "$keyspec" ] && json_add_string keys "$keyspec"
+	json_close_object
+
+	json_set_namespace "$prev"
+}
+
+mac80211_setup_mesh() {
+	json_get_vars ssid mesh_id mcast_rate
+
+	mcval=
+	[ -n "$mcast_rate" ] && wpa_supplicant_add_rate mcval "$mcast_rate"
+	[ -n "$mesh_id" ] && ssid="$mesh_id"
+
+	local prev
+	json_set_namespace wdev_uc prev
+
+	json_add_object "$ifname"
+	json_add_string mode mesh
+	[ -n "$default_macaddr" ] || json_add_string macaddr "$macaddr"
+	json_add_string ssid "$ssid"
+	json_add_string freq "$freq"
+	json_add_string htmode "$iw_htmode"
+	[ -n "$mcval" ] && json_add_string mcast-rate "$mcval"
+	json_add_int beacon-interval "$beacon_int"
+	mac80211_add_mesh_params
+
+	json_close_object
+
+	json_set_namespace "$prev"
+}
+
+mac80211_setup_monitor() {
+	local prev
+	json_set_namespace wdev_uc prev
+
+	json_add_object "$ifname"
+	json_add_string mode monitor
+	[ -n "$freq" ] && json_add_string freq "$freq"
+	json_add_string htmode "$iw_htmode"
+	json_close_object
+
+	json_set_namespace "$prev"
+}
+
+mac80211_set_vif_txpower() {
+	local name="$1"
+
+	json_select config
+	json_get_var ifname _ifname
+	json_get_vars vif_txpower
+	json_select ..
+
+	[ -z "$vif_txpower" ] || iw dev "$ifname" set txpower fixed "${vif_txpower%%.*}00"
+}
+
+wpa_supplicant_init_config() {
+	json_set_namespace wpa_supp prev
+
+	json_init
+	json_add_array config
+
+	json_set_namespace "$prev"
+}
+
+wpa_supplicant_add_interface() {
+	local ifname="$1"
+	local mode="$2"
+	local prev
+
+	_wpa_supplicant_common "$ifname"
+
+	json_set_namespace wpa_supp prev
+
+	json_add_object
+	json_add_string ctrl "$_rpath"
+	json_add_string iface "$ifname"
+	json_add_string mode "$mode"
+	json_add_string config "$_config"
+	[ -n "$default_macaddr" ] || json_add_string macaddr "$macaddr"
+	[ -n "$network_bridge" ] && json_add_string bridge "$network_bridge"
+	[ -n "$wds" ] && json_add_boolean 4addr "$wds"
+	json_add_boolean powersave "$powersave"
+	[ "$mode" = "mesh" ] && mac80211_add_mesh_params
+	json_close_object
+
+	json_set_namespace "$prev"
+
+	wpa_supp_init=1
+}
+
+wpa_supplicant_set_config() {
+	local phy="$1"
+	local prev
+
+	json_set_namespace wpa_supp prev
+	json_close_array
+	json_add_string phy "$phy"
+	json_add_boolean defer 1
+	local data="$(json_dump)"
+
+	json_cleanup
+	json_set_namespace "$prev"
+
+	ubus -S -t 0 wait_for wpa_supplicant || {
+		[ -n "$wpa_supp_init" ] || return 0
+
+		ubus wait_for wpa_supplicant
+	}
+
+	local supplicant_res="$(ubus call wpa_supplicant config_set "$data")"
+	ret="$?"
+	[ "$ret" != 0 -o -z "$supplicant_res" ] && wireless_setup_vif_failed WPA_SUPPLICANT_FAILED
+
+	wireless_add_process "$(jsonfilter -s "$supplicant_res" -l 1 -e @.pid)" "/usr/sbin/wpa_supplicant" 1 1
+
+}
+
+hostapd_set_config() {
+	[ -n "$hostapd_ctrl" ] || {
+		ubus call hostapd config_set '{ "phy": "'"$phy"'", "config": "", "prev_config": "'"${hostapd_conf_file}.prev"'" }' > /dev/null
+		return 0;
+	}
+
+	ubus wait_for hostapd
+	local hostapd_res="$(ubus call hostapd config_set "{ \"phy\": \"$phy\", \"config\":\"${hostapd_conf_file}\", \"prev_config\": \"${hostapd_conf_file}.prev\"}")"
+	ret="$?"
+	[ "$ret" != 0 -o -z "$hostapd_res" ] && {
+		wireless_setup_failed HOSTAPD_START_FAILED
+		return
+	}
+	wireless_add_process "$(jsonfilter -s "$hostapd_res" -l 1 -e @.pid)" "/usr/sbin/hostapd" 1 1
+}
+
+
+wpa_supplicant_start() {
+	local phy="$1"
+
+	[ -n "$wpa_supp_init" ] || return 0
+
+	ubus call wpa_supplicant config_set '{ "phy": "'"$phy"'" }' > /dev/null
+}
+
+mac80211_setup_supplicant() {
+	local enable=$1
+	local add_sp=0
+
+	wpa_supplicant_prepare_interface "$ifname" nl80211 || return 1
+
+	if [ "$mode" = "sta" ]; then
+		wpa_supplicant_add_network "$ifname"
+	else
+		wpa_supplicant_add_network "$ifname" "$freq" "$htmode" "$noscan"
+	fi
+
+	wpa_supplicant_add_interface "$ifname" "$mode"
+
+	return 0
+}
+
+mac80211_setup_vif() {
+	local name="$1"
+	local failed
+
+	json_select config
+	json_get_var ifname _ifname
+	json_get_var macaddr _macaddr
+	json_get_var default_macaddr _default_macaddr
+	json_get_vars mode wds powersave
+
+	set_default powersave 0
+	set_default wds 0
+
+	case "$mode" in
+		mesh)
+			json_get_vars $MP_CONFIG_INT $MP_CONFIG_BOOL $MP_CONFIG_STRING
+			wireless_vif_parse_encryption
+			[ -z "$htmode" ] && htmode="NOHT";
+			if wpa_supplicant -vmesh; then
+				mac80211_setup_supplicant || failed=1
+			else
+				mac80211_setup_mesh
+			fi
+		;;
+		adhoc)
+			wireless_vif_parse_encryption
+			if [ "$wpa" -gt 0 -o "$auto_channel" -gt 0 ]; then
+				mac80211_setup_supplicant || failed=1
+			else
+				mac80211_setup_adhoc
+			fi
+		;;
+		sta)
+			mac80211_setup_supplicant || failed=1
+		;;
+		monitor)
+			mac80211_setup_monitor
+		;;
+	esac
+
+	json_select ..
+	[ -n "$failed" ] || wireless_add_vif "$name" "$ifname"
+}
+
+get_freq() {
+	local phy="$1"
+	local channel="$2"
+	local band="$3"
+
+	case "$band" in
+		2g) band="1:";;
+		5g) band="2:";;
+		60g) band="3:";;
+		6g) band="4:";;
+	esac
+
+	iw "$phy" info | awk -v band="$band" -v channel="[$channel]" '
+
+$1 ~ /Band/ {
+	band_match = band == $2
+}
+
+band_match && $3 == "MHz" && $4 == channel {
+	print $2
+	exit
+}
+'
+}
+
+chan_is_dfs() {
+	local phy="$1"
+	local chan="$2"
+	iw "$phy" info | grep -E -m1 "(\* ${chan:-....} MHz${chan:+|\\[$chan\\]})" | grep -q "MHz.*radar detection"
+	return $!
+}
+
+mac80211_set_noscan() {
+	hostapd_noscan=1
+}
+
+drv_mac80211_cleanup() {
+	hostapd_common_cleanup
+}
+
+mac80211_reset_config() {
+	local phy="$1"
+
+	hostapd_conf_file="/var/run/hostapd-$phy.conf"
+	ubus call hostapd config_set '{ "phy": "'"$phy"'", "config": "", "prev_config": "'"$hostapd_conf_file"'" }' > /dev/null
+	ubus call wpa_supplicant config_set '{ "phy": "'"$phy"'", "config": [] }' > /dev/null
+	wdev_tool "$phy" set_config '{}'
+}
+
+drv_mac80211_setup() {
+	json_select config
+	json_get_vars \
+		phy macaddr path \
+		country chanbw distance \
+		txpower \
+		rxantenna txantenna \
+		frag rts beacon_int:100 htmode \
+		num_global_macaddr:1 multiple_bssid
+	json_get_values basic_rate_list basic_rate
+	json_get_values scan_list scan_list
+	json_select ..
+
+	json_select data && {
+		json_get_var prev_rxantenna rxantenna
+		json_get_var prev_txantenna txantenna
+		json_select ..
+	}
+
+	find_phy || {
+		echo "Could not find PHY for device '$1'"
+		wireless_set_retry 0
+		return 1
+	}
+
+	local wdev
+	local cwdev
+	local found
+
+	# convert channel to frequency
+	[ "$auto_channel" -gt 0 ] || freq="$(get_freq "$phy" "$channel" "$band")"
+
+	[ -n "$country" ] && {
+		iw reg get | grep -q "^country $country:" || {
+			iw reg set "$country"
+			sleep 1
+		}
+	}
+
+	hostapd_conf_file="/var/run/hostapd-$phy.conf"
+
+	macidx=0
+	staidx=0
+
+	[ -n "$chanbw" ] && {
+		for file in /sys/kernel/debug/ieee80211/$phy/ath9k*/chanbw /sys/kernel/debug/ieee80211/$phy/ath5k/bwmode; do
+			[ -f "$file" ] && echo "$chanbw" > "$file"
+		done
+	}
+
+	set_default rxantenna 0xffffffff
+	set_default txantenna 0xffffffff
+	set_default distance 0
+
+	[ "$txantenna" = "all" ] && txantenna=0xffffffff
+	[ "$rxantenna" = "all" ] && rxantenna=0xffffffff
+
+	[ "$rxantenna" = "$prev_rxantenna" -a "$txantenna" = "$prev_txantenna" ] || mac80211_reset_config "$phy"
+	wireless_set_data phy="$phy" txantenna="$txantenna" rxantenna="$rxantenna"
+
+	iw phy "$phy" set antenna $txantenna $rxantenna >/dev/null 2>&1
+	iw phy "$phy" set distance "$distance" >/dev/null 2>&1
+
+	if [ -n "$txpower" ]; then
+		iw phy "$phy" set txpower fixed "${txpower%%.*}00"
+	else
+		iw phy "$phy" set txpower auto
+	fi
+
+	[ -n "$frag" ] && iw phy "$phy" set frag "${frag%%.*}"
+	[ -n "$rts" ] && iw phy "$phy" set rts "${rts%%.*}"
+
+	has_ap=
+	hostapd_ctrl=
+	ap_ifname=
+	hostapd_noscan=
+	wpa_supp_init=
+	for_each_interface "ap" mac80211_check_ap
+
+	[ -f "$hostapd_conf_file" ] && mv "$hostapd_conf_file" "$hostapd_conf_file.prev"
+
+	for_each_interface "sta adhoc mesh" mac80211_set_noscan
+	[ -n "$has_ap" ] && mac80211_hostapd_setup_base "$phy"
+
+	local prev
+	json_set_namespace wdev_uc prev
+	json_init
+	json_set_namespace "$prev"
+
+	wpa_supplicant_init_config
+
+	mac80211_prepare_iw_htmode
+	active_ifnames=
+	for_each_interface "ap sta adhoc mesh monitor" mac80211_prepare_vif
+	for_each_interface "ap sta adhoc mesh monitor" mac80211_setup_vif
+
+	[ -x /usr/sbin/wpa_supplicant ] && wpa_supplicant_set_config "$phy"
+	[ -x /usr/sbin/hostapd ] && hostapd_set_config "$phy"
+
+	[ -x /usr/sbin/wpa_supplicant ] && wpa_supplicant_start "$phy"
+
+	json_set_namespace wdev_uc prev
+	wdev_tool "$phy" set_config "$(json_dump)" $active_ifnames
+	json_set_namespace "$prev"
+
+	for_each_interface "ap sta adhoc mesh monitor" mac80211_set_vif_txpower
+	wireless_set_up
+}
+
+_list_phy_interfaces() {
+	local phy="$1"
+	if [ -d "/sys/class/ieee80211/${phy}/device/net" ]; then
+		ls "/sys/class/ieee80211/${phy}/device/net" 2>/dev/null;
+	else
+		ls "/sys/class/ieee80211/${phy}/device" 2>/dev/null | grep net: | sed -e 's,net:,,g'
+	fi
+}
+
+list_phy_interfaces() {
+	local phy="$1"
+
+	for dev in $(_list_phy_interfaces "$phy"); do
+		readlink "/sys/class/net/${dev}/phy80211" | grep -q "/${phy}\$" || continue
+		echo "$dev"
+	done
+}
+
+drv_mac80211_teardown() {
+	json_select data
+	json_get_vars phy
+	json_select ..
+	[ -n "$phy" ] || {
+		echo "Bug: PHY is undefined for device '$1'"
+		return 1
+	}
+
+	mac80211_reset_config "$phy"
+
+	for wdev in $(list_phy_interfaces "$phy"); do
+		ip link set dev "$wdev" down
+		iw dev "$wdev" del
+	done
+}
+
+add_driver mac80211
diff --git a/ucentral-client/rootfs/lib/network/config.sh b/ucentral-client/rootfs/lib/network/config.sh
new file mode 100755
index 0000000..4cd28e4
--- /dev/null
+++ b/ucentral-client/rootfs/lib/network/config.sh
@@ -0,0 +1,76 @@
+#!/bin/sh
+# Copyright (C) 2011 OpenWrt.org
+
+. /usr/share/libubox/jshn.sh
+
+find_config() {
+	local device="$1"
+	local ifdev ifl3dev ifobj
+	for ifobj in $(ubus list network.interface.\*); do
+		interface="${ifobj##network.interface.}"
+		(
+			json_load "$(ifstatus $interface)"
+			json_get_var ifdev device
+			json_get_var ifl3dev l3_device
+			if [ "$device" = "$ifdev" ] || [ "$device" = "$ifl3dev" ]; then
+				echo "$interface"
+				exit 0
+			else
+				exit 1
+			fi
+		) && return
+	done
+}
+
+unbridge() {
+	return
+}
+
+ubus_call() {
+	json_init
+	local _data="$(ubus -S call "$1" "$2")"
+	[ -z "$_data" ] && return 1
+	json_load "$_data"
+	return 0
+}
+
+
+fixup_interface() {
+	local config="$1"
+	local ifname type device l3dev
+
+	config_get type "$config" type
+	config_get ifname "$config" ifname
+	[ "bridge" = "$type" ] && ifname="br-$config"
+	ubus_call "network.interface.$config" status || return 0
+	json_get_var l3dev l3_device
+	[ -n "$l3dev" ] && ifname="$l3dev"
+	json_init
+	config_set "$config" ifname "$ifname"
+}
+
+scan_interfaces() {
+	config_load network
+	config_foreach fixup_interface interface
+}
+
+prepare_interface_bridge() {
+	local config="$1"
+
+	[ -n "$config" ] || return 0
+	ubus call network.interface."$config" prepare
+}
+
+setup_interface() {
+	local iface="$1"
+	local config="$2"
+
+	[ -n "$config" ] || return 0
+	ubus call network.interface."$config" add_device "{ \"name\": \"$iface\" }"
+}
+
+do_sysctl() {
+	[ -n "$2" ] && \
+		sysctl -n -e -w "$1=$2" >/dev/null || \
+		sysctl -n -e "$1"
+}
diff --git a/ucentral-client/rootfs/lib/preinit/00_preinit.conf b/ucentral-client/rootfs/lib/preinit/00_preinit.conf
new file mode 100644
index 0000000..0126b0d
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/00_preinit.conf
@@ -0,0 +1,13 @@
+pi_suppress_stderr="y"
+fs_failsafe_wait_timeout=2
+pi_init_path="/usr/sbin:/usr/bin:/sbin:/bin"
+pi_init_env=""
+pi_init_cmd="/sbin/init"
+pi_init_suppress_stderr="y"
+pi_ifname=""
+pi_ip="192.168.1.1"
+pi_netmask="255.255.255.0"
+pi_broadcast="192.168.1.255"
+pi_preinit_net_messages=""
+pi_preinit_no_failsafe_netmsg=""
+pi_preinit_no_failsafe="y"
diff --git a/ucentral-client/rootfs/lib/preinit/01_sysinfo b/ucentral-client/rootfs/lib/preinit/01_sysinfo
new file mode 100644
index 0000000..0714a9a
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/01_sysinfo
@@ -0,0 +1,65 @@
+sanitize_name_x86() {
+	sed -e '
+		y/ABCDEFGHIJKLMNOPQRSTUVWXYZ/abcdefghijklmnopqrstuvwxyz/;
+		s/[^a-z0-9_-]\+/-/g;
+		s/^-//;
+		s/-$//;
+	' "$@"
+}
+
+do_sysinfo_x86() {
+	local vendor product file
+
+	for file in sys_vendor board_vendor; do
+		vendor="$(cat /sys/devices/virtual/dmi/id/$file 2>/dev/null)"
+		case "$vendor" in
+		empty | \
+		System\ manufacturer | \
+		To\ [bB]e\ [fF]illed\ [bB]y\ O\.E\.M\.)
+			continue
+			;;
+		esac
+		[ -n "$vendor" ] && break
+	done
+
+	for file in product_name board_name; do
+		product="$(cat /sys/devices/virtual/dmi/id/$file 2>/dev/null)"
+		case "$vendor:$product" in
+		?*:empty | \
+		?*:System\ Product\ Name | \
+		?*:To\ [bB]e\ [fF]illed\ [bB]y\ O\.E\.M\.)
+			continue
+			;;
+		"PC Engines:APU")
+			product="apu1"
+			break
+			;;
+		"Sophos:SG"|"Sophos:XG")
+			local product_version
+			product_version="$(cat /sys/devices/virtual/dmi/id/product_version 2>/dev/null)"
+			case "$product_version" in
+			105*|115*|125*|135*|85*|86*)
+				product="${product}-${product_version}"
+				break
+				;;
+			esac
+			;;
+		"Supermicro:Super Server")
+			continue
+			;;
+		?*:?*)
+			break
+			;;
+		esac
+	done
+
+	[ -n "$vendor" -a -n "$product" ] || return
+
+	mkdir -p /tmp/sysinfo
+
+	echo "$vendor $product" > /tmp/sysinfo/model
+
+	sanitize_name_x86 /tmp/sysinfo/model > /tmp/sysinfo/board_name
+}
+
+boot_hook_add preinit_main do_sysinfo_x86
diff --git a/ucentral-client/rootfs/lib/preinit/02_default_set_state b/ucentral-client/rootfs/lib/preinit/02_default_set_state
new file mode 100644
index 0000000..28d5f1d
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/02_default_set_state
@@ -0,0 +1,5 @@
+define_default_set_state() {
+	. /etc/diag.sh
+}
+
+boot_hook_add preinit_main define_default_set_state
diff --git a/ucentral-client/rootfs/lib/preinit/02_load_x86_ucode b/ucentral-client/rootfs/lib/preinit/02_load_x86_ucode
new file mode 100644
index 0000000..9db3b58
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/02_load_x86_ucode
@@ -0,0 +1,9 @@
+# Copyright (C) 2018 OpenWrt.org
+
+do_load_x86_ucode() {
+	if [ -e "/sys/devices/system/cpu/microcode/reload" ]; then
+		echo 1 > /sys/devices/system/cpu/microcode/reload
+	fi
+}
+
+boot_hook_add preinit_main do_load_x86_ucode
diff --git a/ucentral-client/rootfs/lib/preinit/02_sysinfo b/ucentral-client/rootfs/lib/preinit/02_sysinfo
new file mode 100644
index 0000000..65b5096
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/02_sysinfo
@@ -0,0 +1,10 @@
+do_sysinfo_generic() {
+	[ -d /proc/device-tree ] || return
+	mkdir -p /tmp/sysinfo
+	[ -e /tmp/sysinfo/board_name ] || \
+		echo "$(strings /proc/device-tree/compatible | head -1)" > /tmp/sysinfo/board_name
+	[ ! -e /tmp/sysinfo/model -a -e /proc/device-tree/model ] && \
+		echo "$(cat /proc/device-tree/model)" > /tmp/sysinfo/model
+}
+
+boot_hook_add preinit_main do_sysinfo_generic
diff --git a/ucentral-client/rootfs/lib/preinit/10_indicate_failsafe b/ucentral-client/rootfs/lib/preinit/10_indicate_failsafe
new file mode 100644
index 0000000..7bf5e02
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/10_indicate_failsafe
@@ -0,0 +1,17 @@
+# Copyright (C) 2006 OpenWrt.org
+# Copyright (C) 2010 Vertical Communications
+
+# commands for emitting messages to network in failsafe mode
+
+indicate_failsafe_led () {
+	set_state failsafe
+}
+
+indicate_failsafe() {
+	[ "$pi_preinit_no_failsafe" = "y" ] && return
+	echo "- failsafe -"
+	preinit_net_echo "Entering Failsafe!\n"
+	indicate_failsafe_led
+}
+
+boot_hook_add failsafe indicate_failsafe
diff --git a/ucentral-client/rootfs/lib/preinit/10_indicate_preinit b/ucentral-client/rootfs/lib/preinit/10_indicate_preinit
new file mode 100644
index 0000000..a8f7758
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/10_indicate_preinit
@@ -0,0 +1,207 @@
+# Copyright (C) 2006 OpenWrt.org
+# Copyright (C) 2010 Vertical Communications
+
+preinit_ip_config() {
+	local netdev vid
+
+	netdev=${1%\.*}
+	vid=${1#*\.}
+
+	if [ "$vid" = "$netdev" ]; then
+		vid=
+	fi
+
+	grep -q "$netdev" /proc/net/dev || return
+
+	if [ -n "$vid" ]; then
+		ip link add link $netdev name $1 type vlan id $vid
+	fi
+
+	ip link set dev $netdev up
+	if [ -n "$vid" ]; then
+		ip link set dev $1 up
+	fi
+	ip -4 address add $pi_ip/$pi_netmask broadcast $pi_broadcast dev $1
+}
+
+preinit_config_switch() {
+	local role roles ports device enable reset
+
+	local name=$1
+	local lan_if=$2
+
+	json_select switch
+	json_select $name
+
+	json_get_vars enable reset
+
+	if [ "$reset" -eq "1" ]; then
+		swconfig dev $name set reset
+	fi
+	swconfig dev $name set enable_vlan $enable
+
+	if json_is_a roles array; then
+		json_get_keys roles roles
+		json_select roles
+
+		for role in $roles; do
+			json_select "$role"
+			json_get_vars ports device
+			json_select ..
+
+			if [ "$device" = "$lan_if" ]; then
+				swconfig dev $name vlan $role set ports "$ports"
+			fi
+		done
+
+		json_select ..
+	fi
+
+	swconfig dev $name set apply
+
+	json_select ..
+	json_select ..
+}
+
+preinit_config_port() {
+	local original
+
+	local netdev="$1"
+	local path="$2"
+
+	[ -d "/sys/devices/$path/net" ] || return
+	original="$(ls "/sys/devices/$path/net" | head -1)"
+
+	[ "$netdev" = "$original" ] && return
+
+	ip link set "$original" name "$netdev"
+}
+
+preinit_config_board() {
+	/bin/board_detect /tmp/board.json
+
+	[ -f "/tmp/board.json" ] || return
+
+	. /usr/share/libubox/jshn.sh
+
+	json_init
+	json_load "$(cat /tmp/board.json)"
+
+	# Find the current highest eth*
+	max_eth=$(grep -o '^ *eth[0-9]*:' /proc/net/dev | tr -dc '[0-9]\n' | sort -n | tail -1)
+	# Find and move netdevs using eth*s we are configuring
+	json_get_keys keys "network_device"
+	for netdev in $keys; do
+		json_select "network_device"
+			json_select "$netdev"
+				json_get_vars path path
+				if [ -n "$path" -a -h "/sys/class/net/$netdev" ]; then
+					ip link set "$netdev" down
+					ip link set "$netdev" name eth$((++max_eth))
+				fi
+			json_select ..
+		json_select ..
+	done
+
+	# Move interfaces by path to their netdev name
+	json_get_keys keys "network_device"
+	for netdev in $keys; do
+		json_select "network_device"
+			json_select "$netdev"
+				json_get_vars path path
+				[ -n "$path" ] && preinit_config_port "$netdev" "$path"
+			json_select ..
+		json_select ..
+	done
+
+	json_select network
+		json_select "lan"
+			json_get_vars device
+			json_get_values ports ports
+		json_select ..
+	json_select ..
+
+	[ -n "$device" -o -n "$ports" ] || return
+
+	# swconfig uses $device and DSA uses ports
+	[ -z "$ports" ] && {
+		ports="$device"
+	}
+
+	# only use the first one
+	ifname=${ports%% *}
+
+	if [ -x /sbin/swconfig ]; then
+		# configure the switch, if present
+
+		json_get_keys keys switch
+		for key in $keys; do
+			preinit_config_switch $key $ifname
+		done
+	else
+		# trim any vlan ids
+		ifname=${ifname%\.*}
+		# trim any vlan modifiers like :t
+		ifname=${ifname%\:*}
+	fi
+
+	pi_ifname=$ifname
+
+	preinit_ip_config $pi_ifname
+}
+
+preinit_ip() {
+	[ "$pi_preinit_no_failsafe" = "y" ] && return
+
+	# if the preinit interface isn't specified and ifname is set in
+	# preinit.arch use that interface
+	if [ -z "$pi_ifname" ]; then
+		pi_ifname=$ifname
+	fi
+
+	if [ -n "$pi_ifname" ]; then
+		preinit_ip_config $pi_ifname
+	elif [ -d "/etc/board.d/" ]; then
+		preinit_config_board
+	fi
+
+	preinit_net_echo "Doing OpenWrt Preinit\n"
+}
+
+preinit_ip_deconfig() {
+	[ -n "$pi_ifname" ] && grep -q "$pi_ifname" /proc/net/dev && {
+		local netdev vid
+
+		netdev=${pi_ifname%\.*}
+		vid=${pi_ifname#*\.}
+
+		if [ "$vid" = "$netdev" ]; then
+			vid=
+		fi
+
+		ip -4 address flush dev $pi_ifname
+		ip link set dev $netdev down
+
+		if [ -n "$vid" ]; then
+			ip link delete $pi_ifname
+		fi
+	}
+}
+
+preinit_net_echo() {
+	[ -n "$pi_ifname" ] && grep -q "$pi_ifname" /proc/net/dev && {
+		{
+			[ "$pi_preinit_net_messages" = "y" ] || {
+				[ "$pi_failsafe_net_message" = "true" ] &&
+					[ "$pi_preinit_no_failsafe_netmsg" != "y" ]
+			}
+		} && netmsg $pi_broadcast "$1"
+	}
+}
+
+pi_indicate_preinit() {
+	set_state preinit
+}
+
+boot_hook_add preinit_main preinit_ip
+boot_hook_add preinit_main pi_indicate_preinit
diff --git a/ucentral-client/rootfs/lib/preinit/15_essential_fs_x86 b/ucentral-client/rootfs/lib/preinit/15_essential_fs_x86
new file mode 100644
index 0000000..78501d4
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/15_essential_fs_x86
@@ -0,0 +1,7 @@
+# Copyright (C) 2006-2010 OpenWrt.org
+# Copyright (C) 2010 Vertical Communications
+
+do_mount_procfs() {
+	mount -o noatime -t proc none /proc
+}
+
diff --git a/ucentral-client/rootfs/lib/preinit/20_check_iso b/ucentral-client/rootfs/lib/preinit/20_check_iso
new file mode 100644
index 0000000..beff6eb
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/20_check_iso
@@ -0,0 +1,5 @@
+check_for_iso() {
+	grep -qE '/dev/root.*iso9660' /proc/mounts && ramoverlay
+}
+
+boot_hook_add preinit_mount_root check_for_iso
diff --git a/ucentral-client/rootfs/lib/preinit/30_failsafe_wait b/ucentral-client/rootfs/lib/preinit/30_failsafe_wait
new file mode 100644
index 0000000..9ab2e8b
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/30_failsafe_wait
@@ -0,0 +1,102 @@
+# Copyright (C) 2006-2010 OpenWrt.org
+# Copyright (C) 2010 Vertical Communications
+
+fs_wait_for_key () {
+	local timeout=$3
+	local timer
+	local do_keypress
+	local keypress_true="$(mktemp)"
+	local keypress_wait="$(mktemp)"
+	local keypress_sec="$(mktemp)"
+	if [ -z "$keypress_wait" ]; then
+		keypress_wait=/tmp/.keypress_wait
+		touch $keypress_wait
+	fi
+	if [ -z "$keypress_true" ]; then
+		keypress_true=/tmp/.keypress_true
+		touch $keypress_true
+	fi
+	if [ -z "$keypress_sec" ]; then
+		keypress_sec=/tmp/.keypress_sec
+		touch $keypress_sec
+	fi
+
+	trap "echo 'true' >$keypress_true; lock -u $keypress_wait ; rm -f $keypress_wait" INT
+	trap "echo 'true' >$keypress_true; lock -u $keypress_wait ; rm -f $keypress_wait" USR1
+
+	[ -n "$timeout" ] || timeout=1
+	[ $timeout -ge 1 ] || timeout=1
+	timer=$timeout
+	lock $keypress_wait
+	{
+		while [ $timer -gt 0 ]; do
+			pi_failsafe_net_message=true \
+				preinit_net_echo "Please press button now to enter failsafe"
+			echo "$timer" >$keypress_sec
+			timer=$(($timer - 1))
+			sleep 1
+		done
+		lock -u $keypress_wait
+		rm -f $keypress_wait
+	} &
+
+	local consoles="$(sed -e 's/ /\n/g' /proc/cmdline | grep '^console=' | sed -e 's/^console=//' -e 's/,.*//')"
+	[ -n "$consoles" ] || consoles=console
+	for console in $consoles; do
+		[ -c "/dev/$console" ] || continue
+		[ "$pi_preinit_no_failsafe" != "y" ] && echo "Press the [$1] key and hit [enter] $2" > "/dev/$console"
+		echo "Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level" > "/dev/$console"
+		{
+			while [ -r $keypress_wait ]; do
+				timer="$(cat $keypress_sec)"
+
+				[ -n "$timer" ] || timer=1
+				timer="${timer%%\ *}"
+				[ $timer -ge 1 ] || timer=1
+				do_keypress=""
+				{
+					read -t "$timer" do_keypress < "/dev/$console"
+					case "$do_keypress" in
+					$1)
+						echo "true" >$keypress_true
+						;;
+					1 | 2 | 3 | 4)
+						echo "$do_keypress" >/tmp/debug_level
+						;;
+					*)
+						continue;
+						;;
+					esac
+					lock -u $keypress_wait
+					rm -f $keypress_wait
+				}
+			done
+		} &
+	done
+	lock -w $keypress_wait
+
+	keypressed=1
+	[ "$(cat $keypress_true)" = "true" ] && keypressed=0
+
+	rm -f $keypress_true
+	rm -f $keypress_wait
+	rm -f $keypress_sec
+
+	return $keypressed
+}
+
+failsafe_wait() {
+	FAILSAFE=
+	[ "$pi_preinit_no_failsafe" = "y" ] && {
+		fs_wait_for_key "" "" $fs_failsafe_wait_timeout
+		return
+	}
+	grep -q 'failsafe=' /proc/cmdline && FAILSAFE=true && export FAILSAFE
+	if [ "$FAILSAFE" != "true" ]; then
+		fs_wait_for_key f 'to enter failsafe mode' $fs_failsafe_wait_timeout && FAILSAFE=true
+		[ -f "/tmp/failsafe_button" ] && FAILSAFE=true && echo "- failsafe button "$(cat /tmp/failsafe_button)" was pressed -"
+		[ "$FAILSAFE" = "true" ] && export FAILSAFE && touch /tmp/failsafe
+	fi
+}
+
+boot_hook_add preinit_main failsafe_wait
diff --git a/ucentral-client/rootfs/lib/preinit/40_run_failsafe_hook b/ucentral-client/rootfs/lib/preinit/40_run_failsafe_hook
new file mode 100644
index 0000000..e3f769a
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/40_run_failsafe_hook
@@ -0,0 +1,16 @@
+# Copyright (C) 2006-2010 OpenWrt.org
+# Copyright (C) 2010 Vertical Communications
+
+run_failsafe_hook() {
+    [ "$pi_preinit_no_failsafe" = "y" ] && return
+    if [ "$FAILSAFE" = "true" ]; then
+	lock /tmp/.failsafe
+	boot_run_hook failsafe
+	while [ ! -e /tmp/sysupgrade ]; do
+	    lock -w /tmp/.failsafe
+	done
+	exit
+    fi
+}
+
+boot_hook_add preinit_main run_failsafe_hook
diff --git a/ucentral-client/rootfs/lib/preinit/45_mount_xenfs b/ucentral-client/rootfs/lib/preinit/45_mount_xenfs
new file mode 100644
index 0000000..e57e354
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/45_mount_xenfs
@@ -0,0 +1,8 @@
+# Copyright (C) 2010 OpenWrt.org
+
+do_mount_xenfs() {
+	grep -q xenfs /proc/filesystems && \
+		mount -o noatime -t xenfs none /proc/xen
+}
+
+boot_hook_add preinit_mount_root do_mount_xenfs
diff --git a/ucentral-client/rootfs/lib/preinit/50_indicate_regular_preinit b/ucentral-client/rootfs/lib/preinit/50_indicate_regular_preinit
new file mode 100644
index 0000000..f4afcdd
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/50_indicate_regular_preinit
@@ -0,0 +1,9 @@
+# Copyright (C) 2006 OpenWrt.org
+# Copyright (C) 2010 Vertical Communications
+
+indicate_regular_preinit() {
+	preinit_net_echo "Continuing with Regular Preinit\n"
+	set_state preinit_regular
+}
+
+boot_hook_add preinit_main indicate_regular_preinit
diff --git a/ucentral-client/rootfs/lib/preinit/70_initramfs_test b/ucentral-client/rootfs/lib/preinit/70_initramfs_test
new file mode 100644
index 0000000..c5aae98
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/70_initramfs_test
@@ -0,0 +1,12 @@
+# Copyright (C) 2006 OpenWrt.org
+# Copyright (C) 2010 Vertical Communications
+
+initramfs_test() {
+	if [ -n "$INITRAMFS" ]; then
+		boot_run_hook initramfs
+		preinit_ip_deconfig
+		break
+	fi
+}
+
+boot_hook_add preinit_main initramfs_test
diff --git a/ucentral-client/rootfs/lib/preinit/75_certificates b/ucentral-client/rootfs/lib/preinit/75_certificates
new file mode 100644
index 0000000..8f0b459
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/75_certificates
@@ -0,0 +1,18 @@
+generate_certificate_volume() {
+	grep certificates /proc/mtd > /dev/null
+	[ $? -eq 0 ] && return
+
+	ls /dev/ubi0 > /dev/null
+	[ $? -eq 0 ] || return
+
+	ubinfo /dev/ubi0 -N certificates > /dev/null
+	[ $? -eq 0 ] || {
+		ubinfo /dev/ubi0 -N wifi_fw > /dev/null
+		[ $? -eq 0 ] && ubirmvol /dev/ubi0 -N wifi_fw
+
+		ubirsvol /dev/ubi0 -N rootfs_data -s 10MiB
+		ubimkvol /dev/ubi0 -N certificates -S 20
+	}
+}
+
+boot_hook_add preinit_main generate_certificate_volume
diff --git a/ucentral-client/rootfs/lib/preinit/79_move_config b/ucentral-client/rootfs/lib/preinit/79_move_config
new file mode 100644
index 0000000..444cd75
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/79_move_config
@@ -0,0 +1,19 @@
+# Copyright (C) 2012-2015 OpenWrt.org
+
+move_config() {
+	local partdev parttype=ext4
+
+	. /lib/upgrade/common.sh
+
+	if export_bootdevice && export_partdevice partdev 1; then
+		mkdir -p /boot
+		part_magic_fat "/dev/$partdev" && parttype=vfat
+		mount -t $parttype -o rw,noatime "/dev/$partdev" /boot
+		if [ -f "/boot/$BACKUP_FILE" ]; then
+			mv -f "/boot/$BACKUP_FILE" /
+		fi
+		mount --bind /boot/boot /boot
+	fi
+}
+
+boot_hook_add preinit_mount_root move_config
diff --git a/ucentral-client/rootfs/lib/preinit/80_mount_root b/ucentral-client/rootfs/lib/preinit/80_mount_root
new file mode 100644
index 0000000..c3816c2
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/80_mount_root
@@ -0,0 +1,35 @@
+# Copyright (C) 2006 OpenWrt.org
+# Copyright (C) 2010 Vertical Communications
+
+missing_lines() {
+	local file1 file2 line
+	file1="$1"
+	file2="$2"
+	oIFS="$IFS"
+	IFS=":"
+	while read line; do
+		set -- $line
+		grep -q "^$1:" "$file2" || echo "$*"
+	done < "$file1"
+	IFS="$oIFS"
+}
+
+do_mount_root() {
+	mount_root
+	boot_run_hook preinit_mount_root
+	[ -f /sysupgrade.tgz -o -f /tmp/sysupgrade.tar ] && {
+		echo "- config restore -"
+		cp /etc/passwd /etc/group /etc/shadow /tmp
+		cd /
+		[ -f /sysupgrade.tgz ] && tar xzf /sysupgrade.tgz
+		[ -f /tmp/sysupgrade.tar ] && tar xf /tmp/sysupgrade.tar
+		missing_lines /tmp/passwd /etc/passwd >> /etc/passwd
+		missing_lines /tmp/group /etc/group >> /etc/group
+		missing_lines /tmp/shadow /etc/shadow >> /etc/shadow
+		rm /tmp/passwd /tmp/group /tmp/shadow
+		# Prevent configuration corruption on a power loss
+		sync
+	}
+}
+
+[ "$INITRAMFS" = "1" ] || boot_hook_add preinit_main do_mount_root
diff --git a/ucentral-client/rootfs/lib/preinit/81_urandom_seed b/ucentral-client/rootfs/lib/preinit/81_urandom_seed
new file mode 100644
index 0000000..2adc6c4
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/81_urandom_seed
@@ -0,0 +1,22 @@
+log_urandom_seed() {
+    echo "urandom-seed: $1" > /dev/kmsg
+}
+
+_do_urandom_seed() {
+    [ -f "$1" ] || { log_urandom_seed "Seed file not found ($1)"; return; }
+    [ -O "$1" -a -G "$1" -a ! -x "$1" ] || { log_urandom_seed "Wrong owner / permissions for $1"; return; }
+
+    log_urandom_seed "Seeding with $1"
+    cat "$1" > /dev/urandom
+}
+
+do_urandom_seed() {
+    [ -c /dev/urandom ] || { log_urandom_seed "Something is wrong with /dev/urandom"; return; }
+
+    _do_urandom_seed "/etc/urandom.seed"
+
+    SEED="$(uci -q get system.@system[0].urandom_seed)"
+    [ "${SEED:0:1}" = "/" -a "$SEED" != "/etc/urandom.seed" ] && _do_urandom_seed "$SEED"
+}
+
+boot_hook_add preinit_main do_urandom_seed
diff --git a/ucentral-client/rootfs/lib/preinit/99_10_failsafe_dropbear b/ucentral-client/rootfs/lib/preinit/99_10_failsafe_dropbear
new file mode 100644
index 0000000..97bd12d
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/99_10_failsafe_dropbear
@@ -0,0 +1,9 @@
+#!/bin/sh
+
+failsafe_dropbear () {
+	dropbearkey -t rsa -s 1024 -f /tmp/dropbear_rsa_failsafe_host_key
+	dropbearkey -t ed25519 -f /tmp/dropbear_ed25519_failsafe_host_key
+	dropbear -r /tmp/dropbear_rsa_failsafe_host_key -r /tmp/dropbear_ed25519_failsafe_host_key <> /dev/null 2>&1
+}
+
+boot_hook_add failsafe failsafe_dropbear
diff --git a/ucentral-client/rootfs/lib/preinit/99_10_failsafe_login b/ucentral-client/rootfs/lib/preinit/99_10_failsafe_login
new file mode 100644
index 0000000..6f4af3f
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/99_10_failsafe_login
@@ -0,0 +1,15 @@
+# Copyright (C) 2006-2015 OpenWrt.org
+# Copyright (C) 2010 Vertical Communications
+
+failsafe_shell() {
+	local consoles="$(sed -e 's/ /\n/g' /proc/cmdline | grep '^console=' | sed -e 's/^console=//' -e 's/,.*//')"
+	[ -n "$consoles" ] || consoles=console
+	for console in $consoles; do
+		[ -c "/dev/$console" ] && while true; do
+			ash --login <"/dev/$console" >"/dev/$console" 2>"/dev/$console"
+			sleep 1
+		done &
+	done
+}
+
+boot_hook_add failsafe failsafe_shell
diff --git a/ucentral-client/rootfs/lib/preinit/99_10_run_init b/ucentral-client/rootfs/lib/preinit/99_10_run_init
new file mode 100644
index 0000000..ebf77b0
--- /dev/null
+++ b/ucentral-client/rootfs/lib/preinit/99_10_run_init
@@ -0,0 +1,8 @@
+# Copyright (C) 2006 OpenWrt.org
+# Copyright (C) 2010 Vertical Communications
+
+run_init() {
+	preinit_ip_deconfig
+}
+
+boot_hook_add preinit_main run_init
diff --git a/ucentral-client/rootfs/lib/upgrade/common.sh b/ucentral-client/rootfs/lib/upgrade/common.sh
new file mode 100644
index 0000000..af1182c
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/common.sh
@@ -0,0 +1,317 @@
+RAM_ROOT=/tmp/root
+
+export BACKUP_FILE=sysupgrade.tgz	# file extracted by preinit
+
+[ -x /usr/bin/ldd ] || ldd() { LD_TRACE_LOADED_OBJECTS=1 $*; }
+libs() { ldd $* 2>/dev/null | sed -E 's/(.* => )?(.*) .*/\2/'; }
+
+install_file() { # <file> [ <file> ... ]
+	local target dest dir
+	for file in "$@"; do
+		if [ -L "$file" ]; then
+			target="$(readlink -f "$file")"
+			dest="$RAM_ROOT/$file"
+			[ ! -f "$dest" ] && {
+				dir="$(dirname "$dest")"
+				mkdir -p "$dir"
+				ln -s "$target" "$dest"
+			}
+			file="$target"
+		fi
+		dest="$RAM_ROOT/$file"
+		[ -f "$file" -a ! -f "$dest" ] && {
+			dir="$(dirname "$dest")"
+			mkdir -p "$dir"
+			cp "$file" "$dest"
+		}
+	done
+}
+
+install_bin() {
+	local src files
+	src=$1
+	files=$1
+	[ -x "$src" ] && files="$src $(libs $src)"
+	install_file $files
+}
+
+run_hooks() {
+	local arg="$1"; shift
+	for func in "$@"; do
+		eval "$func $arg"
+	done
+}
+
+ask_bool() {
+	local default="$1"; shift;
+	local answer="$default"
+
+	[ "$INTERACTIVE" -eq 1 ] && {
+		case "$default" in
+			0) echo -n "$* (y/N): ";;
+			*) echo -n "$* (Y/n): ";;
+		esac
+		read answer
+		case "$answer" in
+			y*) answer=1;;
+			n*) answer=0;;
+			*) answer="$default";;
+		esac
+	}
+	[ "$answer" -gt 0 ]
+}
+
+_v() {
+	[ -n "$VERBOSE" ] && [ "$VERBOSE" -ge 1 ] && echo "$*" >&2
+}
+
+v() {
+	_v "$(date) upgrade: $@"
+	logger -p info -t upgrade "$@"
+}
+
+json_string() {
+	local v="$1"
+	v="${v//\\/\\\\}"
+	v="${v//\"/\\\"}"
+	echo "\"$v\""
+}
+
+rootfs_type() {
+	/bin/mount | awk '($3 ~ /^\/$/) && ($5 !~ /rootfs/) { print $5 }'
+}
+
+get_image() { # <source> [ <command> ]
+	local from="$1"
+	local cmd="$2"
+
+	if [ -z "$cmd" ]; then
+		local magic="$(dd if="$from" bs=2 count=1 2>/dev/null | hexdump -n 2 -e '1/1 "%02x"')"
+		case "$magic" in
+			1f8b) cmd="busybox zcat";;
+			*) cmd="cat";;
+		esac
+	fi
+
+	$cmd <"$from"
+}
+
+get_image_dd() {
+	local from="$1"; shift
+
+	(
+		exec 3>&2
+		( exec 3>&2; get_image "$from" 2>&1 1>&3 | grep -v -F ' Broken pipe'     ) 2>&1 1>&3 \
+			| ( exec 3>&2; dd "$@" 2>&1 1>&3 | grep -v -E ' records (in|out)') 2>&1 1>&3
+		exec 3>&-
+	)
+}
+
+get_magic_word() {
+	(get_image "$@" | dd bs=2 count=1 | hexdump -v -n 2 -e '1/1 "%02x"') 2>/dev/null
+}
+
+get_magic_long() {
+	(get_image "$@" | dd bs=4 count=1 | hexdump -v -n 4 -e '1/1 "%02x"') 2>/dev/null
+}
+
+get_magic_gpt() {
+	(get_image "$@" | dd bs=8 count=1 skip=64) 2>/dev/null
+}
+
+get_magic_vfat() {
+	(get_image "$@" | dd bs=3 count=1 skip=18) 2>/dev/null
+}
+
+get_magic_fat32() {
+	(get_image "$@" | dd bs=1 count=5 skip=82) 2>/dev/null
+}
+
+identify_magic_long() {
+	local magic=$1
+	case "$magic" in
+		"55424923")
+			echo "ubi"
+			;;
+		"31181006")
+			echo "ubifs"
+			;;
+		"68737173")
+			echo "squashfs"
+			;;
+		"d00dfeed")
+			echo "fit"
+			;;
+		"4349"*)
+			echo "combined"
+			;;
+		"1f8b"*)
+			echo "gzip"
+			;;
+		*)
+			echo "unknown $magic"
+			;;
+	esac
+}
+
+part_magic_efi() {
+	local magic=$(get_magic_gpt "$@")
+	[ "$magic" = "EFI PART" ]
+}
+
+part_magic_fat() {
+	local magic=$(get_magic_vfat "$@")
+	local magic_fat32=$(get_magic_fat32 "$@")
+	[ "$magic" = "FAT" ] || [ "$magic_fat32" = "FAT32" ]
+}
+
+export_bootdevice() {
+	local cmdline uuid blockdev uevent line class
+	local MAJOR MINOR DEVNAME DEVTYPE
+	local rootpart="$(cmdline_get_var root)"
+
+	case "$rootpart" in
+		PARTUUID=[a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9][a-f0-9]-[a-f0-9][a-f0-9])
+			uuid="${rootpart#PARTUUID=}"
+			uuid="${uuid%-[a-f0-9][a-f0-9]}"
+			for blockdev in $(find /dev -type b); do
+				set -- $(dd if=$blockdev bs=1 skip=440 count=4 2>/dev/null | hexdump -v -e '4/1 "%02x "')
+				if [ "$4$3$2$1" = "$uuid" ]; then
+					uevent="/sys/class/block/${blockdev##*/}/uevent"
+					break
+				fi
+			done
+		;;
+		PARTUUID=????????-????-????-????-??????????0?/PARTNROFF=1 | \
+		PARTUUID=????????-????-????-????-??????????02)
+			uuid="${rootpart#PARTUUID=}"
+			uuid="${uuid%/PARTNROFF=1}"
+			uuid="${uuid%0?}00"
+			for disk in $(find /dev -type b); do
+				set -- $(dd if=$disk bs=1 skip=568 count=16 2>/dev/null | hexdump -v -e '8/1 "%02x "" "2/1 "%02x""-"6/1 "%02x"')
+				if [ "$4$3$2$1-$6$5-$8$7-$9" = "$uuid" ]; then
+					uevent="/sys/class/block/${disk##*/}/uevent"
+					break
+				fi
+			done
+		;;
+		/dev/*)
+			uevent="/sys/class/block/${rootpart##*/}/../uevent"
+		;;
+		0x[a-f0-9][a-f0-9][a-f0-9] | 0x[a-f0-9][a-f0-9][a-f0-9][a-f0-9] | \
+		[a-f0-9][a-f0-9][a-f0-9] | [a-f0-9][a-f0-9][a-f0-9][a-f0-9])
+			rootpart=0x${rootpart#0x}
+			for class in /sys/class/block/*; do
+				while read line; do
+					export -n "$line"
+				done < "$class/uevent"
+				if [ $((rootpart/256)) = $MAJOR -a $((rootpart%256)) = $MINOR ]; then
+					uevent="$class/../uevent"
+				fi
+			done
+		;;
+	esac
+
+	if [ -e "$uevent" ]; then
+		while read line; do
+			export -n "$line"
+		done < "$uevent"
+		export BOOTDEV_MAJOR=$MAJOR
+		export BOOTDEV_MINOR=$MINOR
+		return 0
+	fi
+
+	return 1
+}
+
+export_partdevice() {
+	local var="$1" offset="$2"
+	local uevent line MAJOR MINOR DEVNAME DEVTYPE
+
+	for uevent in /sys/class/block/*/uevent; do
+		while read line; do
+			export -n "$line"
+		done < "$uevent"
+		if [ "$BOOTDEV_MAJOR" = "$MAJOR" -a $(($BOOTDEV_MINOR + $offset)) = "$MINOR" -a -b "/dev/$DEVNAME" ]; then
+			export "$var=$DEVNAME"
+			return 0
+		fi
+	done
+
+	return 1
+}
+
+hex_le32_to_cpu() {
+	[ "$(echo 01 | hexdump -v -n 2 -e '/2 "%x"')" = "3031" ] && {
+		echo "${1:0:2}${1:8:2}${1:6:2}${1:4:2}${1:2:2}"
+		return
+	}
+	echo "$@"
+}
+
+get_partitions() { # <device> <filename>
+	local disk="$1"
+	local filename="$2"
+
+	if [ -b "$disk" -o -f "$disk" ]; then
+		v "Reading partition table from $filename..."
+
+		local magic=$(dd if="$disk" bs=2 count=1 skip=255 2>/dev/null)
+		if [ "$magic" != $'\x55\xAA' ]; then
+			v "Invalid partition table on $disk"
+			exit
+		fi
+
+		rm -f "/tmp/partmap.$filename"
+
+		local part
+		part_magic_efi "$disk" && {
+			#export_partdevice will fail when partition number is greater than 15, as
+			#the partition major device number is not equal to the disk major device number
+			for part in 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15; do
+				set -- $(hexdump -v -n 48 -s "$((0x380 + $part * 0x80))" -e '4/4 "%08x"" "4/4 "%08x"" "4/4 "0x%08X "' "$disk")
+
+				local type="$1"
+				local lba="$(( $(hex_le32_to_cpu $4) * 0x100000000 + $(hex_le32_to_cpu $3) ))"
+				local end="$(( $(hex_le32_to_cpu $6) * 0x100000000 + $(hex_le32_to_cpu $5) ))"
+				local num="$(( $end - $lba + 1 ))"
+
+				[ "$type" = "00000000000000000000000000000000" ] && continue
+
+				printf "%2d %5d %7d\n" $part $lba $num >> "/tmp/partmap.$filename"
+			done
+		} || {
+			for part in 1 2 3 4; do
+				set -- $(hexdump -v -n 12 -s "$((0x1B2 + $part * 16))" -e '3/4 "0x%08X "' "$disk")
+
+				local type="$(( $(hex_le32_to_cpu $1) % 256))"
+				local lba="$(( $(hex_le32_to_cpu $2) ))"
+				local num="$(( $(hex_le32_to_cpu $3) ))"
+
+				[ $type -gt 0 ] || continue
+
+				printf "%2d %5d %7d\n" $part $lba $num >> "/tmp/partmap.$filename"
+			done
+		}
+	fi
+}
+
+indicate_upgrade() {
+	. /etc/diag.sh
+	set_state upgrade
+}
+
+# Flash firmware to MTD partition
+#
+# $(1): path to image
+# $(2): (optional) pipe command to extract firmware, e.g. dd bs=n skip=m
+default_do_upgrade() {
+	sync
+	echo 3 > /proc/sys/vm/drop_caches
+	if [ -n "$UPGRADE_BACKUP" ]; then
+		get_image "$1" "$2" | mtd $MTD_ARGS $MTD_CONFIG_ARGS -j "$UPGRADE_BACKUP" write - "${PART_NAME:-image}"
+	else
+		get_image "$1" "$2" | mtd $MTD_ARGS write - "${PART_NAME:-image}"
+	fi
+	[ $? -ne 0 ] && exit 1
+}
diff --git a/ucentral-client/rootfs/lib/upgrade/do_stage2 b/ucentral-client/rootfs/lib/upgrade/do_stage2
new file mode 100755
index 0000000..0e32445
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/do_stage2
@@ -0,0 +1,25 @@
+#!/bin/sh
+
+. /lib/functions.sh
+
+include /lib/upgrade
+
+v "Performing system upgrade..."
+if type 'platform_do_upgrade' >/dev/null 2>/dev/null; then
+	platform_do_upgrade "$IMAGE"
+else
+	default_do_upgrade "$IMAGE"
+fi
+
+if [ -n "$UPGRADE_BACKUP" ] && type 'platform_copy_config' >/dev/null 2>/dev/null; then
+	platform_copy_config
+fi
+
+v "Upgrade completed"
+sleep 1
+
+v "Rebooting system..."
+umount -a
+reboot -f
+sleep 5
+echo b 2>/dev/null >/proc/sysrq-trigger
diff --git a/ucentral-client/rootfs/lib/upgrade/fwtool.sh b/ucentral-client/rootfs/lib/upgrade/fwtool.sh
new file mode 100644
index 0000000..8bd00a3
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/fwtool.sh
@@ -0,0 +1,93 @@
+fwtool_check_signature() {
+	[ $# -gt 1 ] && return 1
+
+	[ ! -x /usr/bin/ucert ] && {
+		if [ "$REQUIRE_IMAGE_SIGNATURE" = 1 ]; then
+			return 1
+		else
+			return 0
+		fi
+	}
+
+	if ! fwtool -q -s /tmp/sysupgrade.ucert "$1"; then
+		v "Image signature not present"
+		[ "$REQUIRE_IMAGE_SIGNATURE" = 1 -a "$FORCE" != 1 ] && {
+			v "Use sysupgrade -F to override this check when downgrading or flashing to vendor firmware"
+		}
+		[ "$REQUIRE_IMAGE_SIGNATURE" = 1 ] && return 1
+		return 0
+	fi
+
+	fwtool -q -T -s /dev/null "$1" | \
+		ucert -V -m - -c "/tmp/sysupgrade.ucert" -P /etc/opkg/keys
+
+	return $?
+}
+
+fwtool_check_image() {
+	[ $# -gt 1 ] && return 1
+
+	. /usr/share/libubox/jshn.sh
+
+	if ! fwtool -q -i /tmp/sysupgrade.meta "$1"; then
+		v "Image metadata not present"
+		[ "$REQUIRE_IMAGE_METADATA" = 1 -a "$FORCE" != 1 ] && {
+			v "Use sysupgrade -F to override this check when downgrading or flashing to vendor firmware"
+		}
+		[ "$REQUIRE_IMAGE_METADATA" = 1 ] && return 1
+		return 0
+	fi
+
+	json_load "$(cat /tmp/sysupgrade.meta)" || {
+		v "Invalid image metadata"
+		return 1
+	}
+
+	device="$(cat /tmp/sysinfo/board_name)"
+	devicecompat="$(uci -q get system.@system[0].compat_version)"
+	[ -n "$devicecompat" ] || devicecompat="1.0"
+
+	json_get_var imagecompat compat_version
+	json_get_var compatmessage compat_message
+	[ -n "$imagecompat" ] || imagecompat="1.0"
+
+	# select correct supported list based on compat_version
+	# (using this ensures that compatibility check works for devices
+	#  not knowing about compat-version)
+	local supported=supported_devices
+	[ "$imagecompat" != "1.0" ] && supported=new_supported_devices
+	json_select $supported || return 1
+
+	json_get_keys dev_keys
+	for k in $dev_keys; do
+		json_get_var dev "$k"
+		if [ "$dev" = "$device" ]; then
+			# major compat version -> no sysupgrade
+			if [ "${devicecompat%.*}" != "${imagecompat%.*}" ]; then
+				v "The device is supported, but this image is incompatible for sysupgrade based on the image version ($devicecompat->$imagecompat)."
+				[ -n "$compatmessage" ] && v "$compatmessage"
+				return 1
+			fi
+
+			# minor compat version -> sysupgrade with -n required
+			if [ "${devicecompat#.*}" != "${imagecompat#.*}" ] && [ "$SAVE_CONFIG" = "1" ]; then
+				[ "$IGNORE_MINOR_COMPAT" = 1 ] && return 0
+				v "The device is supported, but the config is incompatible to the new image ($devicecompat->$imagecompat). Please upgrade without keeping config (sysupgrade -n)."
+				[ -n "$compatmessage" ] && v "$compatmessage"
+				return 1
+			fi
+
+			return 0
+		fi
+	done
+
+	v "Device $device not supported by this image"
+	local devices="Supported devices:"
+	for k in $dev_keys; do
+		json_get_var dev "$k"
+		devices="$devices $dev"
+	done
+	v "$devices"
+
+	return 1
+}
diff --git a/ucentral-client/rootfs/lib/upgrade/keep.d/base-files b/ucentral-client/rootfs/lib/upgrade/keep.d/base-files
new file mode 100644
index 0000000..f3b1a94
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/keep.d/base-files
@@ -0,0 +1,5 @@
+/etc/config/
+/etc/config/network
+/etc/config/system
+/etc/dropbear/
+/etc/profile.d
diff --git a/ucentral-client/rootfs/lib/upgrade/keep.d/base-files-essential b/ucentral-client/rootfs/lib/upgrade/keep.d/base-files-essential
new file mode 100644
index 0000000..7a7a253
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/keep.d/base-files-essential
@@ -0,0 +1,11 @@
+# Essential files that will be always kept
+/etc/hosts
+/etc/inittab
+/etc/group
+/etc/passwd
+/etc/profile
+/etc/shadow
+/etc/shells
+/etc/shinit
+/etc/sysctl.conf
+/etc/rc.local
diff --git a/ucentral-client/rootfs/lib/upgrade/keep.d/busybox b/ucentral-client/rootfs/lib/upgrade/keep.d/busybox
new file mode 100644
index 0000000..346ee5d
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/keep.d/busybox
@@ -0,0 +1 @@
+/etc/crontabs/
diff --git a/ucentral-client/rootfs/lib/upgrade/keep.d/dnsmasq-full b/ucentral-client/rootfs/lib/upgrade/keep.d/dnsmasq-full
new file mode 100644
index 0000000..eb4483e
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/keep.d/dnsmasq-full
@@ -0,0 +1 @@
+/etc/dnsmasq.d/
diff --git a/ucentral-client/rootfs/lib/upgrade/keep.d/firewall4 b/ucentral-client/rootfs/lib/upgrade/keep.d/firewall4
new file mode 100644
index 0000000..da3d5d9
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/keep.d/firewall4
@@ -0,0 +1 @@
+/etc/nftables.d/
diff --git a/ucentral-client/rootfs/lib/upgrade/keep.d/kmod-batman-adv b/ucentral-client/rootfs/lib/upgrade/keep.d/kmod-batman-adv
new file mode 100644
index 0000000..264011b
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/keep.d/kmod-batman-adv
@@ -0,0 +1 @@
+/etc/config/batman-adv
diff --git a/ucentral-client/rootfs/lib/upgrade/keep.d/luci-base b/ucentral-client/rootfs/lib/upgrade/keep.d/luci-base
new file mode 100644
index 0000000..fe3953f
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/keep.d/luci-base
@@ -0,0 +1 @@
+/etc/luci-uploads
diff --git a/ucentral-client/rootfs/lib/upgrade/keep.d/netifd b/ucentral-client/rootfs/lib/upgrade/keep.d/netifd
new file mode 100644
index 0000000..ad2ae1e
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/keep.d/netifd
@@ -0,0 +1 @@
+/etc/udhcpc.user.d/
diff --git a/ucentral-client/rootfs/lib/upgrade/keep.d/odhcp6c b/ucentral-client/rootfs/lib/upgrade/keep.d/odhcp6c
new file mode 100644
index 0000000..ed94206
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/keep.d/odhcp6c
@@ -0,0 +1 @@
+/etc/odhcp6c.user.d/
diff --git a/ucentral-client/rootfs/lib/upgrade/keep.d/opkg b/ucentral-client/rootfs/lib/upgrade/keep.d/opkg
new file mode 100644
index 0000000..7996194
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/keep.d/opkg
@@ -0,0 +1 @@
+/etc/opkg/keys/
diff --git a/ucentral-client/rootfs/lib/upgrade/keep.d/ppp b/ucentral-client/rootfs/lib/upgrade/keep.d/ppp
new file mode 100644
index 0000000..b914f2a
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/keep.d/ppp
@@ -0,0 +1,4 @@
+/etc/ppp/ip-down
+/etc/ppp/ip-up
+/etc/ppp/ipv6-down
+/etc/ppp/ipv6-up
diff --git a/ucentral-client/rootfs/lib/upgrade/keep.d/ufp b/ucentral-client/rootfs/lib/upgrade/keep.d/ufp
new file mode 100644
index 0000000..d1101a2
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/keep.d/ufp
@@ -0,0 +1 @@
+/etc/config/ufp
diff --git a/ucentral-client/rootfs/lib/upgrade/keep.d/uhttpd b/ucentral-client/rootfs/lib/upgrade/keep.d/uhttpd
new file mode 100644
index 0000000..b2d07bf
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/keep.d/uhttpd
@@ -0,0 +1,2 @@
+/etc/uhttpd.crt
+/etc/uhttpd.key
diff --git a/ucentral-client/rootfs/lib/upgrade/keep.d/wpad-openssl b/ucentral-client/rootfs/lib/upgrade/keep.d/wpad-openssl
new file mode 100644
index 0000000..fcd7f65
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/keep.d/wpad-openssl
@@ -0,0 +1 @@
+/etc/radius
diff --git a/ucentral-client/rootfs/lib/upgrade/luci-add-conffiles.sh b/ucentral-client/rootfs/lib/upgrade/luci-add-conffiles.sh
new file mode 100644
index 0000000..d5117f9
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/luci-add-conffiles.sh
@@ -0,0 +1,27 @@
+add_luci_conffiles()
+{
+	add_luci_conffiles_helper()
+	{
+		[ ! -f "$1" ] && return
+		grep -q "$1" "$2" && return
+		echo "$1" >> "$2"
+	}
+
+	local filelist="$1"
+
+	# save ssl certs
+	if [ -d /etc/nixio ]; then
+		find /etc/nixio -type f | while read ff; do
+			add_luci_conffiles_helper "$ff" "$filelist"
+		done
+	fi
+
+	# save uhttpd certs
+	add_luci_conffiles_helper /etc/uhttpd.key "$filelist"
+	add_luci_conffiles_helper /etc/uhttpd.crt "$filelist"
+
+	unset -f add_luci_conffiles_helper
+}
+
+sysupgrade_init_conffiles="$sysupgrade_init_conffiles add_luci_conffiles"
+
diff --git a/ucentral-client/rootfs/lib/upgrade/platform.sh b/ucentral-client/rootfs/lib/upgrade/platform.sh
new file mode 100644
index 0000000..5dad7a5
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/platform.sh
@@ -0,0 +1,130 @@
+RAMFS_COPY_BIN='grub-bios-setup'
+
+platform_check_image() {
+	local diskdev partdev diff
+	[ "$#" -gt 1 ] && return 1
+
+	case "$(get_magic_word "$1")" in
+		eb48|eb63) ;;
+		*)
+			v "Invalid image type"
+			return 1
+		;;
+	esac
+
+	export_bootdevice && export_partdevice diskdev 0 || {
+		v "Unable to determine upgrade device"
+		return 1
+	}
+
+	get_partitions "/dev/$diskdev" bootdisk
+
+	v "Extract boot sector from the image"
+	get_image_dd "$1" of=/tmp/image.bs count=63 bs=512b
+
+	get_partitions /tmp/image.bs image
+
+	#compare tables
+	diff="$(grep -F -x -v -f /tmp/partmap.bootdisk /tmp/partmap.image)"
+
+	rm -f /tmp/image.bs /tmp/partmap.bootdisk /tmp/partmap.image
+
+	if [ -n "$diff" ]; then
+		v "Partition layout has changed. Full image will be written."
+		ask_bool 0 "Abort" && exit 1
+		return 0
+	fi
+}
+
+platform_copy_config() {
+	local partdev parttype=ext4
+
+	if export_partdevice partdev 1; then
+		part_magic_fat "/dev/$partdev" && parttype=vfat
+		mount -t $parttype -o rw,noatime "/dev/$partdev" /mnt
+		cp -af "$UPGRADE_BACKUP" "/mnt/$BACKUP_FILE"
+		umount /mnt
+	fi
+}
+
+platform_do_bootloader_upgrade() {
+	local bootpart parttable=msdos
+	local diskdev="$1"
+
+	if export_partdevice bootpart 1; then
+		mkdir -p /tmp/boot
+		mount -o rw,noatime "/dev/$bootpart" /tmp/boot
+		echo "(hd0) /dev/$diskdev" > /tmp/device.map
+		part_magic_efi "/dev/$diskdev" && parttable=gpt
+
+		v "Upgrading bootloader on /dev/$diskdev..."
+		grub-bios-setup \
+			-m "/tmp/device.map" \
+			-d "/tmp/boot/boot/grub" \
+			-r "hd0,${parttable}1" \
+			"/dev/$diskdev"
+
+		umount /tmp/boot
+	fi
+}
+
+platform_do_upgrade() {
+	local diskdev partdev diff
+
+	export_bootdevice && export_partdevice diskdev 0 || {
+		v "Unable to determine upgrade device"
+		return 1
+	}
+
+	sync
+
+	if [ "$UPGRADE_OPT_SAVE_PARTITIONS" = "1" ]; then
+		get_partitions "/dev/$diskdev" bootdisk
+
+		v "Extract boot sector from the image"
+		get_image_dd "$1" of=/tmp/image.bs count=63 bs=512b
+
+		get_partitions /tmp/image.bs image
+
+		#compare tables
+		diff="$(grep -F -x -v -f /tmp/partmap.bootdisk /tmp/partmap.image)"
+	else
+		diff=1
+	fi
+
+	if [ -n "$diff" ]; then
+		get_image_dd "$1" of="/dev/$diskdev" bs=4096 conv=fsync
+
+		# Separate removal and addtion is necessary; otherwise, partition 1
+		# will be missing if it overlaps with the old partition 2
+		partx -d - "/dev/$diskdev"
+		partx -a - "/dev/$diskdev"
+
+		return 0
+	fi
+
+	#iterate over each partition from the image and write it to the boot disk
+	while read part start size; do
+		if export_partdevice partdev $part; then
+			v "Writing image to /dev/$partdev..."
+			get_image_dd "$1" of="/dev/$partdev" ibs=512 obs=1M skip="$start" count="$size" conv=fsync
+		else
+			v "Unable to find partition $part device, skipped."
+		fi
+	done < /tmp/partmap.image
+
+	v "Writing new UUID to /dev/$diskdev..."
+	get_image_dd "$1" of="/dev/$diskdev" bs=1 skip=440 count=4 seek=440 conv=fsync
+
+	platform_do_bootloader_upgrade "$diskdev"
+	local parttype=ext4
+	part_magic_efi "/dev/$diskdev" || return 0
+
+	if export_partdevice partdev 1; then
+		part_magic_fat "/dev/$partdev" && parttype=vfat
+		mount -t $parttype -o rw,noatime "/dev/$partdev" /mnt
+		set -- $(dd if="/dev/$diskdev" bs=1 skip=1168 count=16 2>/dev/null | hexdump -v -e '8/1 "%02x "" "2/1 "%02x""-"6/1 "%02x"')
+		sed -i "s/\(PARTUUID=\)[a-f0-9-]\+/\1$4$3$2$1-$6$5-$8$7-$9/ig" /mnt/boot/grub/grub.cfg
+		umount /mnt
+	fi
+}
diff --git a/ucentral-client/rootfs/lib/upgrade/stage2 b/ucentral-client/rootfs/lib/upgrade/stage2
new file mode 100755
index 0000000..5ce0b35
--- /dev/null
+++ b/ucentral-client/rootfs/lib/upgrade/stage2
@@ -0,0 +1,175 @@
+#!/bin/sh
+
+. /lib/functions.sh
+. /lib/functions/system.sh
+
+export IMAGE="$1"
+COMMAND="$2"
+
+export INTERACTIVE=0
+export VERBOSE=1
+export CONFFILES=/tmp/sysupgrade.conffiles
+
+RAMFS_COPY_BIN=		# extra programs for temporary ramfs root
+RAMFS_COPY_DATA=	# extra data files
+
+include /lib/upgrade
+
+
+supivot() { # <new_root> <old_root>
+	/bin/mount | grep "on $1 type" 2>&- 1>&- || /bin/mount -o bind $1 $1
+	mkdir -p $1$2 $1/proc $1/sys $1/dev $1/tmp $1/overlay && \
+	/bin/mount -o noatime,move /proc $1/proc && \
+	pivot_root $1 $1$2 || {
+		/bin/umount -l $1 $1
+		return 1
+	}
+
+	/bin/mount -o noatime,move $2/sys /sys
+	/bin/mount -o noatime,move $2/dev /dev
+	/bin/mount -o noatime,move $2/tmp /tmp
+	/bin/mount -o noatime,move $2/overlay /overlay 2>&-
+	return 0
+}
+
+switch_to_ramfs() {
+	RAMFS_COPY_LOSETUP="$(command -v /usr/sbin/losetup)"
+	RAMFS_COPY_LVM="$(command -v lvm)"
+
+	for binary in \
+		/bin/busybox /bin/ash /bin/sh /bin/mount /bin/umount	\
+		pivot_root mount_root reboot sync kill sleep		\
+		md5sum hexdump cat zcat dd tar gzip			\
+		ls basename find cp mv rm mkdir rmdir mknod touch chmod \
+		'[' printf wc grep awk sed cut sort tail		\
+		mtd partx losetup mkfs.ext4 nandwrite flash_erase	\
+		ubiupdatevol ubiattach ubiblock ubiformat		\
+		ubidetach ubirsvol ubirmvol ubimkvol			\
+		snapshot snapshot_tool date logger			\
+		/usr/sbin/fw_printenv /usr/bin/fwtool			\
+		$RAMFS_COPY_LOSETUP $RAMFS_COPY_LVM			\
+		$RAMFS_COPY_BIN
+	do
+		local file="$(command -v "$binary" 2>/dev/null)"
+		[ -n "$file" ] && install_bin "$file"
+	done
+	install_file /etc/resolv.conf /lib/*.sh /lib/functions/*.sh	\
+		/lib/upgrade/*.sh /lib/upgrade/do_stage2 		\
+		/usr/share/libubox/jshn.sh /usr/sbin/fw_setenv		\
+		/etc/fw_env.config $RAMFS_COPY_DATA
+
+	mkdir -p $RAM_ROOT/var/lock
+
+	[ -L "/lib64" ] && ln -s /lib $RAM_ROOT/lib64
+
+	supivot $RAM_ROOT /mnt || {
+		v "Failed to switch over to ramfs. Please reboot."
+		exit 1
+	}
+
+	/bin/mount -o remount,ro /mnt
+	/bin/umount -l /mnt
+
+	grep -e "^/dev/dm-.*" -e "^/dev/loop.*" /proc/mounts | while read bdev mp _r; do
+		umount $mp
+	done
+
+	[ "$RAMFS_COPY_LOSETUP" ] && losetup -D
+	[ "$RAMFS_COPY_LVM" ] && {
+		mkdir -p /tmp/lvm/cache
+		$RAMFS_COPY_LVM vgchange -aln --ignorelockingfailure
+	}
+
+	grep /overlay /proc/mounts > /dev/null && {
+		/bin/mount -o noatime,remount,ro /overlay
+		/bin/umount -l /overlay
+	}
+}
+
+kill_remaining() { # [ <signal> [ <loop> ] ]
+	local loop_limit=10
+
+	local sig="${1:-TERM}"
+	local loop="${2:-0}"
+	local run=true
+	local stat
+	local proc_ppid=$(cut -d' ' -f4  /proc/$$/stat)
+
+	v "Sending $sig to remaining processes ..."
+
+	while $run; do
+		run=false
+		for stat in /proc/[0-9]*/stat; do
+			[ -f "$stat" ] || continue
+
+			local pid name state ppid rest
+			read pid rest < $stat
+			name="${rest#\(}" ; rest="${name##*\) }" ; name="${name%\)*}"
+			set -- $rest ; state="$1" ; ppid="$2"
+
+			# Skip PID1, our parent, ourself and our children
+			[ $pid -ne 1 -a $pid -ne $proc_ppid -a $pid -ne $$ -a $ppid -ne $$ ] || continue
+
+			[ -f "/proc/$pid/cmdline" ] || continue
+
+			local cmdline
+			read cmdline < /proc/$pid/cmdline
+
+			# Skip kernel threads
+			[ -n "$cmdline" ] || continue
+
+			v "Sending signal $sig to $name ($pid)"
+			kill -$sig $pid 2>/dev/null
+
+			[ $loop -eq 1 ] && sleep 2 && run=true
+		done
+
+		let loop_limit--
+		[ $loop_limit -eq 0 ] && {
+			v "Failed to kill all processes."
+			exit 1
+		}
+	done
+}
+
+indicate_upgrade
+
+while read -r a b c; do
+	case "$a" in
+		MemT*) mem="$b" ;; esac
+done < /proc/meminfo
+
+[ "$mem" -gt 32768 ] && \
+	skip_services="dnsmasq log network"
+for service in /etc/init.d/*; do
+	service=${service##*/}
+
+	case " $skip_services " in
+		*" $service "*) continue ;; esac
+
+	ubus call service delete '{ "name": "'"$service"'" }' 2>/dev/null
+done
+
+killall -9 telnetd 2>/dev/null
+killall -9 dropbear 2>/dev/null
+killall -9 ash 2>/dev/null
+
+kill_remaining TERM
+sleep 4
+kill_remaining KILL 1
+
+sleep 6
+
+echo 3 > /proc/sys/vm/drop_caches
+
+if [ -n "$IMAGE" ] && type 'platform_pre_upgrade' >/dev/null 2>/dev/null; then
+	platform_pre_upgrade "$IMAGE"
+fi
+
+if [ -n "$(rootfs_type)" ]; then
+	v "Switching to ramdisk..."
+	switch_to_ramfs
+fi
+
+# Exec new shell from ramfs
+exec /bin/busybox ash -c "$COMMAND"
diff --git a/ucentral-client/rootfs/lib/wifi/mac80211.sh b/ucentral-client/rootfs/lib/wifi/mac80211.sh
new file mode 100644
index 0000000..e24a2a6
--- /dev/null
+++ b/ucentral-client/rootfs/lib/wifi/mac80211.sh
@@ -0,0 +1,217 @@
+#!/bin/sh
+
+append DRIVERS "mac80211"
+
+check_mac80211_device() {
+	local device="$1"
+	local path="$2"
+	local macaddr="$3"
+
+	[ -n "$found" ] && return 0
+
+	phy_path=
+	config_get phy "$device" phy
+	json_select wlan
+	[ -n "$phy" ] && case "$phy" in
+		phy*)
+			[ -d /sys/class/ieee80211/$phy ] && \
+				phy_path="$(iwinfo nl80211 path "$dev")"
+		;;
+		*)
+			if json_is_a "$phy" object; then
+				json_select "$phy"
+				json_get_var phy_path path
+				json_select ..
+			elif json_is_a "${phy%.*}" object; then
+				json_select "${phy%.*}"
+				json_get_var phy_path path
+				json_select ..
+				phy_path="$phy_path+${phy##*.}"
+			fi
+		;;
+	esac
+	json_select ..
+	[ -n "$phy_path" ] || config_get phy_path "$device" path
+	[ -n "$path" -a "$phy_path" = "$path" ] && {
+		found=1
+		return 0
+	}
+
+	config_get dev_macaddr "$device" macaddr
+
+	[ -n "$macaddr" -a "$dev_macaddr" = "$macaddr" ] && found=1
+
+	return 0
+}
+
+
+__get_band_defaults() {
+	local phy="$1"
+
+	( iw phy "$phy" info; echo ) | awk '
+BEGIN {
+        bands = ""
+}
+
+($1 == "Band" || $1 == "") && band {
+        if (channel) {
+		mode="NOHT"
+		if (ht) mode="HT20"
+		if (vht && band != "1:") mode="VHT80"
+		if (he) mode="HE80"
+		if (he && band == "1:") mode="HE20"
+                sub("\\[", "", channel)
+                sub("\\]", "", channel)
+                bands = bands band channel ":" mode " "
+        }
+        band=""
+}
+
+$1 == "Band" {
+        band = $2
+        channel = ""
+	vht = ""
+	ht = ""
+	he = ""
+}
+
+$0 ~ "Capabilities:" {
+	ht=1
+}
+
+$0 ~ "VHT Capabilities" {
+	vht=1
+}
+
+$0 ~ "HE Iftypes" {
+	he=1
+}
+
+$1 == "*" && $3 == "MHz" && $0 !~ /disabled/ && band && !channel {
+        channel = $4
+}
+
+END {
+        print bands
+}'
+}
+
+get_band_defaults() {
+	local phy="$1"
+
+	for c in $(__get_band_defaults "$phy"); do
+		local band="${c%%:*}"
+		c="${c#*:}"
+		local chan="${c%%:*}"
+		c="${c#*:}"
+		local mode="${c%%:*}"
+
+		case "$band" in
+			1) band=2g;;
+			2) band=5g;;
+			3) band=60g;;
+			4) band=6g;;
+			*) band="";;
+		esac
+
+		[ -n "$band" ] || continue
+		[ -n "$mode_band" -a "$band" = "6g" ] && return
+
+		mode_band="$band"
+		channel="$chan"
+		htmode="$mode"
+	done
+}
+
+check_devidx() {
+	case "$1" in
+	radio[0-9]*)
+		local idx="${1#radio}"
+		[ "$devidx" -ge "${1#radio}" ] && devidx=$((idx + 1))
+		;;
+	esac
+}
+
+check_board_phy() {
+	local name="$2"
+
+	json_select "$name"
+	json_get_var phy_path path
+	json_select ..
+
+	if [ "$path" = "$phy_path" ]; then
+		board_dev="$name"
+	elif [ "${path%+*}" = "$phy_path" ]; then
+		fallback_board_dev="$name.${path#*+}"
+	fi
+}
+
+detect_mac80211() {
+	devidx=0
+	config_load wireless
+	config_foreach check_devidx wifi-device
+
+	json_load_file /etc/board.json
+
+	for _dev in /sys/class/ieee80211/*; do
+		[ -e "$_dev" ] || continue
+
+		dev="${_dev##*/}"
+
+		mode_band=""
+		channel=""
+		htmode=""
+		ht_capab=""
+
+		get_band_defaults "$dev"
+
+		path="$(iwinfo nl80211 path "$dev")"
+		macaddr="$(cat /sys/class/ieee80211/${dev}/macaddress)"
+
+		# work around phy rename related race condition
+		[ -n "$path" -o -n "$macaddr" ] || continue
+
+		board_dev=
+		fallback_board_dev=
+		json_for_each_item check_board_phy wlan
+		[ -n "$board_dev" ] || board_dev="$fallback_board_dev"
+		[ -n "$board_dev" ] && dev="$board_dev"
+
+		found=
+		config_foreach check_mac80211_device wifi-device "$path" "$macaddr"
+		[ -n "$found" ] && continue
+
+		name="radio${devidx}"
+		devidx=$(($devidx + 1))
+		case "$dev" in
+			phy*)
+				if [ -n "$path" ]; then
+					dev_id="set wireless.${name}.path='$path'"
+				else
+					dev_id="set wireless.${name}.macaddr='$macaddr'"
+				fi
+				;;
+			*)
+				dev_id="set wireless.${name}.phy='$dev'"
+				;;
+		esac
+
+		uci -q batch <<-EOF
+			set wireless.${name}=wifi-device
+			set wireless.${name}.type=mac80211
+			${dev_id}
+			set wireless.${name}.channel=${channel}
+			set wireless.${name}.band=${mode_band}
+			set wireless.${name}.htmode=$htmode
+			set wireless.${name}.disabled=1
+
+			set wireless.default_${name}=wifi-iface
+			set wireless.default_${name}.device=${name}
+			set wireless.default_${name}.network=lan
+			set wireless.default_${name}.mode=ap
+			set wireless.default_${name}.ssid=OpenWrt
+			set wireless.default_${name}.encryption=none
+EOF
+		uci -q commit wireless
+	done
+}
diff --git a/ucentral-client/rootfs/sbin/ubusd b/ucentral-client/rootfs/sbin/ubusd
new file mode 100755
index 0000000..67f79de
Binary files /dev/null and b/ucentral-client/rootfs/sbin/ubusd differ
diff --git a/ucentral-client/rootfs/usr/bin/curl b/ucentral-client/rootfs/usr/bin/curl
new file mode 100755
index 0000000..c338a81
Binary files /dev/null and b/ucentral-client/rootfs/usr/bin/curl differ
diff --git a/ucentral-client/rootfs/usr/bin/flock b/ucentral-client/rootfs/usr/bin/flock
new file mode 120000
index 0000000..f948f1a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/bin/flock
@@ -0,0 +1 @@
+../../bin/busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/bin/logger b/ucentral-client/rootfs/usr/bin/logger
new file mode 120000
index 0000000..f948f1a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/bin/logger
@@ -0,0 +1 @@
+../../bin/busybox
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/bin/ucode b/ucentral-client/rootfs/usr/bin/ucode
new file mode 100755
index 0000000..5c84353
Binary files /dev/null and b/ucentral-client/rootfs/usr/bin/ucode differ
diff --git a/ucentral-client/rootfs/usr/lib/dnsmasq/dhcp-script.sh b/ucentral-client/rootfs/usr/lib/dnsmasq/dhcp-script.sh
new file mode 100755
index 0000000..470097b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/dnsmasq/dhcp-script.sh
@@ -0,0 +1,53 @@
+#!/bin/sh
+
+[ -f "$USER_DHCPSCRIPT" ] && . "$USER_DHCPSCRIPT" "$@"
+
+. /usr/share/libubox/jshn.sh
+
+json_init
+json_add_array env
+hotplugobj=""
+
+case "$1" in
+	add | del | old | arp-add | arp-del)
+		json_add_string "" "MACADDR=$2"
+		json_add_string "" "IPADDR=$3"
+	;;
+esac
+
+case "$1" in
+	add)
+		json_add_string "" "ACTION=add"
+		json_add_string "" "HOSTNAME=$4"
+		hotplugobj="dhcp"
+	;;
+	del)
+		json_add_string "" "ACTION=remove"
+		json_add_string "" "HOSTNAME=$4"
+		hotplugobj="dhcp"
+	;;
+	old)
+		json_add_string "" "ACTION=update"
+		json_add_string "" "HOSTNAME=$4"
+		hotplugobj="dhcp"
+	;;
+	arp-add)
+		json_add_string "" "ACTION=add"
+		hotplugobj="neigh"
+	;;
+	arp-del)
+		json_add_string "" "ACTION=remove"
+		hotplugobj="neigh"
+	;;
+	tftp)
+		json_add_string "" "ACTION=add"
+		json_add_string "" "TFTP_SIZE=$2"
+		json_add_string "" "TFTP_ADDR=$3"
+		json_add_string "" "TFTP_PATH=$4"
+		hotplugobj="tftp"
+	;;
+esac
+
+json_close_array env
+
+[ -n "$hotplugobj" ] && ubus call hotplug.${hotplugobj} call "$(json_dump)"
diff --git a/ucentral-client/rootfs/usr/lib/iptables/libxt_CONNMARK.so b/ucentral-client/rootfs/usr/lib/iptables/libxt_CONNMARK.so
new file mode 100755
index 0000000..529a3ac
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/iptables/libxt_CONNMARK.so differ
diff --git a/ucentral-client/rootfs/usr/lib/iptables/libxt_connbytes.so b/ucentral-client/rootfs/usr/lib/iptables/libxt_connbytes.so
new file mode 100755
index 0000000..a4f2e5c
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/iptables/libxt_connbytes.so differ
diff --git a/ucentral-client/rootfs/usr/lib/iptables/libxt_connlimit.so b/ucentral-client/rootfs/usr/lib/iptables/libxt_connlimit.so
new file mode 100755
index 0000000..9d046e0
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/iptables/libxt_connlimit.so differ
diff --git a/ucentral-client/rootfs/usr/lib/iptables/libxt_connmark.so b/ucentral-client/rootfs/usr/lib/iptables/libxt_connmark.so
new file mode 100755
index 0000000..dd2792f
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/iptables/libxt_connmark.so differ
diff --git a/ucentral-client/rootfs/usr/lib/iptables/libxt_helper.so b/ucentral-client/rootfs/usr/lib/iptables/libxt_helper.so
new file mode 100755
index 0000000..fd8e8f2
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/iptables/libxt_helper.so differ
diff --git a/ucentral-client/rootfs/usr/lib/iptables/libxt_recent.so b/ucentral-client/rootfs/usr/lib/iptables/libxt_recent.so
new file mode 100755
index 0000000..a690e32
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/iptables/libxt_recent.so differ
diff --git a/ucentral-client/rootfs/usr/lib/libbind9-9.18.37.so b/ucentral-client/rootfs/usr/lib/libbind9-9.18.37.so
new file mode 100755
index 0000000..2a0a9f1
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libbind9-9.18.37.so differ
diff --git a/ucentral-client/rootfs/usr/lib/libbind9.so b/ucentral-client/rootfs/usr/lib/libbind9.so
new file mode 120000
index 0000000..53bd6ae
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libbind9.so
@@ -0,0 +1 @@
+libbind9-9.18.37.so
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libblkid.so.1 b/ucentral-client/rootfs/usr/lib/libblkid.so.1
new file mode 120000
index 0000000..e4f69c7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libblkid.so.1
@@ -0,0 +1 @@
+libblkid.so.1.1.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libblkid.so.1.1.0 b/ucentral-client/rootfs/usr/lib/libblkid.so.1.1.0
new file mode 100755
index 0000000..24ed566
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libblkid.so.1.1.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libbpf.so.1 b/ucentral-client/rootfs/usr/lib/libbpf.so.1
new file mode 120000
index 0000000..582e7b5
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libbpf.so.1
@@ -0,0 +1 @@
+libbpf.so.1.2.2
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libbpf.so.1.2.2 b/ucentral-client/rootfs/usr/lib/libbpf.so.1.2.2
new file mode 100755
index 0000000..05bfc8f
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libbpf.so.1.2.2 differ
diff --git a/ucentral-client/rootfs/usr/lib/libcap.so b/ucentral-client/rootfs/usr/lib/libcap.so
new file mode 120000
index 0000000..3df1f69
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libcap.so
@@ -0,0 +1 @@
+libcap.so.2
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libcap.so.2 b/ucentral-client/rootfs/usr/lib/libcap.so.2
new file mode 120000
index 0000000..56d66c6
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libcap.so.2
@@ -0,0 +1 @@
+libcap.so.2.69
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libcap.so.2.69 b/ucentral-client/rootfs/usr/lib/libcap.so.2.69
new file mode 100755
index 0000000..8d26879
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libcap.so.2.69 differ
diff --git a/ucentral-client/rootfs/usr/lib/libcjson.so b/ucentral-client/rootfs/usr/lib/libcjson.so
new file mode 120000
index 0000000..0026d72
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libcjson.so
@@ -0,0 +1 @@
+libcjson.so.1
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libcjson.so.1 b/ucentral-client/rootfs/usr/lib/libcjson.so.1
new file mode 120000
index 0000000..ee90626
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libcjson.so.1
@@ -0,0 +1 @@
+libcjson.so.1.7.15
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libcjson.so.1.7.15 b/ucentral-client/rootfs/usr/lib/libcjson.so.1.7.15
new file mode 100644
index 0000000..d933b23
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libcjson.so.1.7.15 differ
diff --git a/ucentral-client/rootfs/usr/lib/libcom_err.so.0 b/ucentral-client/rootfs/usr/lib/libcom_err.so.0
new file mode 120000
index 0000000..2c9cc10
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libcom_err.so.0
@@ -0,0 +1 @@
+libcom_err.so.0.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libcom_err.so.0.0 b/ucentral-client/rootfs/usr/lib/libcom_err.so.0.0
new file mode 100755
index 0000000..8bedccb
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libcom_err.so.0.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libcrypto.so.3 b/ucentral-client/rootfs/usr/lib/libcrypto.so.3
new file mode 100644
index 0000000..7de9fc5
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libcrypto.so.3 differ
diff --git a/ucentral-client/rootfs/usr/lib/libcurl.so.4 b/ucentral-client/rootfs/usr/lib/libcurl.so.4
new file mode 120000
index 0000000..07ae53a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libcurl.so.4
@@ -0,0 +1 @@
+libcurl.so.4.8.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libcurl.so.4.8.0 b/ucentral-client/rootfs/usr/lib/libcurl.so.4.8.0
new file mode 100755
index 0000000..d8791a1
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libcurl.so.4.8.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libdns-9.18.37.so b/ucentral-client/rootfs/usr/lib/libdns-9.18.37.so
new file mode 100755
index 0000000..6bec116
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libdns-9.18.37.so differ
diff --git a/ucentral-client/rootfs/usr/lib/libdns.so b/ucentral-client/rootfs/usr/lib/libdns.so
new file mode 120000
index 0000000..fed5649
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libdns.so
@@ -0,0 +1 @@
+libdns-9.18.37.so
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libe2p.so.2 b/ucentral-client/rootfs/usr/lib/libe2p.so.2
new file mode 120000
index 0000000..177bc5c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libe2p.so.2
@@ -0,0 +1 @@
+libe2p.so.2.3
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libe2p.so.2.3 b/ucentral-client/rootfs/usr/lib/libe2p.so.2.3
new file mode 100755
index 0000000..e8a85c5
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libe2p.so.2.3 differ
diff --git a/ucentral-client/rootfs/usr/lib/libelf-0.189.so b/ucentral-client/rootfs/usr/lib/libelf-0.189.so
new file mode 100755
index 0000000..70793ea
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libelf-0.189.so differ
diff --git a/ucentral-client/rootfs/usr/lib/libelf.so.1 b/ucentral-client/rootfs/usr/lib/libelf.so.1
new file mode 120000
index 0000000..097f0ea
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libelf.so.1
@@ -0,0 +1 @@
+libelf-0.189.so
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libev.so b/ucentral-client/rootfs/usr/lib/libev.so
new file mode 120000
index 0000000..be209f0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libev.so
@@ -0,0 +1 @@
+libev.so.4.0.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libev.so.4 b/ucentral-client/rootfs/usr/lib/libev.so.4
new file mode 120000
index 0000000..be209f0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libev.so.4
@@ -0,0 +1 @@
+libev.so.4.0.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libev.so.4.0.0 b/ucentral-client/rootfs/usr/lib/libev.so.4.0.0
new file mode 100755
index 0000000..c680fd4
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libev.so.4.0.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libevent-2.1.so.7 b/ucentral-client/rootfs/usr/lib/libevent-2.1.so.7
new file mode 120000
index 0000000..472f459
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libevent-2.1.so.7
@@ -0,0 +1 @@
+libevent-2.1.so.7.0.1
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libevent-2.1.so.7.0.1 b/ucentral-client/rootfs/usr/lib/libevent-2.1.so.7.0.1
new file mode 100644
index 0000000..c433507
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libevent-2.1.so.7.0.1 differ
diff --git a/ucentral-client/rootfs/usr/lib/libext2fs.so.2 b/ucentral-client/rootfs/usr/lib/libext2fs.so.2
new file mode 120000
index 0000000..60d5fb9
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libext2fs.so.2
@@ -0,0 +1 @@
+libext2fs.so.2.4
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libext2fs.so.2.4 b/ucentral-client/rootfs/usr/lib/libext2fs.so.2.4
new file mode 100755
index 0000000..28e9117
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libext2fs.so.2.4 differ
diff --git a/ucentral-client/rootfs/usr/lib/libf2fs.so.10 b/ucentral-client/rootfs/usr/lib/libf2fs.so.10
new file mode 120000
index 0000000..a8f804f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libf2fs.so.10
@@ -0,0 +1 @@
+libf2fs.so.10.0.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libf2fs.so.10.0.0 b/ucentral-client/rootfs/usr/lib/libf2fs.so.10.0.0
new file mode 100755
index 0000000..a9bcfc6
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libf2fs.so.10.0.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libform.so.6 b/ucentral-client/rootfs/usr/lib/libform.so.6
new file mode 120000
index 0000000..a778b98
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libform.so.6
@@ -0,0 +1 @@
+libformw.so.6
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libform.so.6.4 b/ucentral-client/rootfs/usr/lib/libform.so.6.4
new file mode 120000
index 0000000..5b36ec9
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libform.so.6.4
@@ -0,0 +1 @@
+libformw.so.6.4
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libformw.so.6 b/ucentral-client/rootfs/usr/lib/libformw.so.6
new file mode 120000
index 0000000..5b36ec9
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libformw.so.6
@@ -0,0 +1 @@
+libformw.so.6.4
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libformw.so.6.4 b/ucentral-client/rootfs/usr/lib/libformw.so.6.4
new file mode 100755
index 0000000..c3c0ab7
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libformw.so.6.4 differ
diff --git a/ucentral-client/rootfs/usr/lib/libgmp.so.10 b/ucentral-client/rootfs/usr/lib/libgmp.so.10
new file mode 120000
index 0000000..a609cfa
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libgmp.so.10
@@ -0,0 +1 @@
+libgmp.so.10.4.1
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libgmp.so.10.4.1 b/ucentral-client/rootfs/usr/lib/libgmp.so.10.4.1
new file mode 100755
index 0000000..00116fa
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libgmp.so.10.4.1 differ
diff --git a/ucentral-client/rootfs/usr/lib/libhogweed.so.6 b/ucentral-client/rootfs/usr/lib/libhogweed.so.6
new file mode 120000
index 0000000..d481054
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libhogweed.so.6
@@ -0,0 +1 @@
+libhogweed.so.6.8
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libhogweed.so.6.8 b/ucentral-client/rootfs/usr/lib/libhogweed.so.6.8
new file mode 100644
index 0000000..5c21bf5
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libhogweed.so.6.8 differ
diff --git a/ucentral-client/rootfs/usr/lib/libirs-9.18.37.so b/ucentral-client/rootfs/usr/lib/libirs-9.18.37.so
new file mode 100755
index 0000000..f14f582
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libirs-9.18.37.so differ
diff --git a/ucentral-client/rootfs/usr/lib/libirs.so b/ucentral-client/rootfs/usr/lib/libirs.so
new file mode 120000
index 0000000..4f7695d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libirs.so
@@ -0,0 +1 @@
+libirs-9.18.37.so
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libisc-9.18.37.so b/ucentral-client/rootfs/usr/lib/libisc-9.18.37.so
new file mode 100755
index 0000000..4f32d44
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libisc-9.18.37.so differ
diff --git a/ucentral-client/rootfs/usr/lib/libisc.so b/ucentral-client/rootfs/usr/lib/libisc.so
new file mode 120000
index 0000000..9e5c0da
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libisc.so
@@ -0,0 +1 @@
+libisc-9.18.37.so
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libisccc-9.18.37.so b/ucentral-client/rootfs/usr/lib/libisccc-9.18.37.so
new file mode 100755
index 0000000..8ddfe7d
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libisccc-9.18.37.so differ
diff --git a/ucentral-client/rootfs/usr/lib/libisccc.so b/ucentral-client/rootfs/usr/lib/libisccc.so
new file mode 120000
index 0000000..27dbe9c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libisccc.so
@@ -0,0 +1 @@
+libisccc-9.18.37.so
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libisccfg-9.18.37.so b/ucentral-client/rootfs/usr/lib/libisccfg-9.18.37.so
new file mode 100755
index 0000000..9cde07e
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libisccfg-9.18.37.so differ
diff --git a/ucentral-client/rootfs/usr/lib/libisccfg.so b/ucentral-client/rootfs/usr/lib/libisccfg.so
new file mode 120000
index 0000000..5c8e5a2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libisccfg.so
@@ -0,0 +1 @@
+libisccfg-9.18.37.so
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libiwinfo.so.20230701 b/ucentral-client/rootfs/usr/lib/libiwinfo.so.20230701
new file mode 100755
index 0000000..f7456c6
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libiwinfo.so.20230701 differ
diff --git a/ucentral-client/rootfs/usr/lib/libjansson.so.4 b/ucentral-client/rootfs/usr/lib/libjansson.so.4
new file mode 120000
index 0000000..df006f1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libjansson.so.4
@@ -0,0 +1 @@
+libjansson.so.4.14.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libjansson.so.4.14.0 b/ucentral-client/rootfs/usr/lib/libjansson.so.4.14.0
new file mode 100644
index 0000000..eacea86
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libjansson.so.4.14.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libjson-c.so.5 b/ucentral-client/rootfs/usr/lib/libjson-c.so.5
new file mode 120000
index 0000000..75a1310
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libjson-c.so.5
@@ -0,0 +1 @@
+libjson-c.so.5.2.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libjson-c.so.5.2.0 b/ucentral-client/rootfs/usr/lib/libjson-c.so.5.2.0
new file mode 100644
index 0000000..5d0ac87
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libjson-c.so.5.2.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/liblldpctl.so b/ucentral-client/rootfs/usr/lib/liblldpctl.so
new file mode 120000
index 0000000..7021cda
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/liblldpctl.so
@@ -0,0 +1 @@
+liblldpctl.so.4.8.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/liblldpctl.so.4 b/ucentral-client/rootfs/usr/lib/liblldpctl.so.4
new file mode 120000
index 0000000..7021cda
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/liblldpctl.so.4
@@ -0,0 +1 @@
+liblldpctl.so.4.8.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/liblldpctl.so.4.8.0 b/ucentral-client/rootfs/usr/lib/liblldpctl.so.4.8.0
new file mode 100755
index 0000000..82656e2
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/liblldpctl.so.4.8.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/liblua.so.5.1.5 b/ucentral-client/rootfs/usr/lib/liblua.so.5.1.5
new file mode 100644
index 0000000..6de1e8d
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/liblua.so.5.1.5 differ
diff --git a/ucentral-client/rootfs/usr/lib/liblucihttp.so.0 b/ucentral-client/rootfs/usr/lib/liblucihttp.so.0
new file mode 120000
index 0000000..5aa2150
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/liblucihttp.so.0
@@ -0,0 +1 @@
+liblucihttp.so.0.1
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/liblucihttp.so.0.1 b/ucentral-client/rootfs/usr/lib/liblucihttp.so.0.1
new file mode 100644
index 0000000..692255a
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/liblucihttp.so.0.1 differ
diff --git a/ucentral-client/rootfs/usr/lib/libmenu.so.6 b/ucentral-client/rootfs/usr/lib/libmenu.so.6
new file mode 120000
index 0000000..05b1542
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libmenu.so.6
@@ -0,0 +1 @@
+libmenuw.so.6
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libmenu.so.6.4 b/ucentral-client/rootfs/usr/lib/libmenu.so.6.4
new file mode 120000
index 0000000..db4dba1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libmenu.so.6.4
@@ -0,0 +1 @@
+libmenuw.so.6.4
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libmenuw.so.6 b/ucentral-client/rootfs/usr/lib/libmenuw.so.6
new file mode 120000
index 0000000..db4dba1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libmenuw.so.6
@@ -0,0 +1 @@
+libmenuw.so.6.4
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libmenuw.so.6.4 b/ucentral-client/rootfs/usr/lib/libmenuw.so.6.4
new file mode 100755
index 0000000..7b6a142
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libmenuw.so.6.4 differ
diff --git a/ucentral-client/rootfs/usr/lib/libmnl.so.0 b/ucentral-client/rootfs/usr/lib/libmnl.so.0
new file mode 120000
index 0000000..6a9695f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libmnl.so.0
@@ -0,0 +1 @@
+libmnl.so.0.2.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libmnl.so.0.2.0 b/ucentral-client/rootfs/usr/lib/libmnl.so.0.2.0
new file mode 100755
index 0000000..91cedc1
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libmnl.so.0.2.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libmsgpack-c.so b/ucentral-client/rootfs/usr/lib/libmsgpack-c.so
new file mode 120000
index 0000000..78370d5
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libmsgpack-c.so
@@ -0,0 +1 @@
+libmsgpack-c.so.2
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libmsgpack-c.so.2 b/ucentral-client/rootfs/usr/lib/libmsgpack-c.so.2
new file mode 120000
index 0000000..4db85e4
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libmsgpack-c.so.2
@@ -0,0 +1 @@
+libmsgpack-c.so.2.0.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libmsgpack-c.so.2.0.0 b/ucentral-client/rootfs/usr/lib/libmsgpack-c.so.2.0.0
new file mode 100644
index 0000000..f15295f
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libmsgpack-c.so.2.0.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libncurses.so.6 b/ucentral-client/rootfs/usr/lib/libncurses.so.6
new file mode 120000
index 0000000..02706d2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libncurses.so.6
@@ -0,0 +1 @@
+libncursesw.so.6
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libncurses.so.6.4 b/ucentral-client/rootfs/usr/lib/libncurses.so.6.4
new file mode 120000
index 0000000..e51ca4c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libncurses.so.6.4
@@ -0,0 +1 @@
+libncursesw.so.6.4
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libncursesw.so.6 b/ucentral-client/rootfs/usr/lib/libncursesw.so.6
new file mode 120000
index 0000000..e51ca4c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libncursesw.so.6
@@ -0,0 +1 @@
+libncursesw.so.6.4
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libncursesw.so.6.4 b/ucentral-client/rootfs/usr/lib/libncursesw.so.6.4
new file mode 100755
index 0000000..6d00d42
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libncursesw.so.6.4 differ
diff --git a/ucentral-client/rootfs/usr/lib/libnetfilter_conntrack.so.3 b/ucentral-client/rootfs/usr/lib/libnetfilter_conntrack.so.3
new file mode 120000
index 0000000..72391ed
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libnetfilter_conntrack.so.3
@@ -0,0 +1 @@
+libnetfilter_conntrack.so.3.8.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libnetfilter_conntrack.so.3.8.0 b/ucentral-client/rootfs/usr/lib/libnetfilter_conntrack.so.3.8.0
new file mode 100755
index 0000000..2a6460c
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libnetfilter_conntrack.so.3.8.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libnetfilter_cthelper.so.0 b/ucentral-client/rootfs/usr/lib/libnetfilter_cthelper.so.0
new file mode 120000
index 0000000..cbfbff9
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libnetfilter_cthelper.so.0
@@ -0,0 +1 @@
+libnetfilter_cthelper.so.0.0.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libnetfilter_cthelper.so.0.0.0 b/ucentral-client/rootfs/usr/lib/libnetfilter_cthelper.so.0.0.0
new file mode 100755
index 0000000..fa3b841
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libnetfilter_cthelper.so.0.0.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libnetfilter_cttimeout.so.1 b/ucentral-client/rootfs/usr/lib/libnetfilter_cttimeout.so.1
new file mode 120000
index 0000000..58f0cce
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libnetfilter_cttimeout.so.1
@@ -0,0 +1 @@
+libnetfilter_cttimeout.so.1.0.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libnetfilter_cttimeout.so.1.0.0 b/ucentral-client/rootfs/usr/lib/libnetfilter_cttimeout.so.1.0.0
new file mode 100755
index 0000000..5272018
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libnetfilter_cttimeout.so.1.0.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libnetfilter_queue.so.1 b/ucentral-client/rootfs/usr/lib/libnetfilter_queue.so.1
new file mode 120000
index 0000000..228e64b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libnetfilter_queue.so.1
@@ -0,0 +1 @@
+libnetfilter_queue.so.1.5.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libnetfilter_queue.so.1.5.0 b/ucentral-client/rootfs/usr/lib/libnetfilter_queue.so.1.5.0
new file mode 100755
index 0000000..b6bcf15
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libnetfilter_queue.so.1.5.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libnettle.so.8 b/ucentral-client/rootfs/usr/lib/libnettle.so.8
new file mode 120000
index 0000000..37cd930
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libnettle.so.8
@@ -0,0 +1 @@
+libnettle.so.8.8
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libnettle.so.8.8 b/ucentral-client/rootfs/usr/lib/libnettle.so.8.8
new file mode 100644
index 0000000..454c5f4
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libnettle.so.8.8 differ
diff --git a/ucentral-client/rootfs/usr/lib/libnfnetlink.so.0 b/ucentral-client/rootfs/usr/lib/libnfnetlink.so.0
new file mode 120000
index 0000000..a86cce7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libnfnetlink.so.0
@@ -0,0 +1 @@
+libnfnetlink.so.0.2.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libnfnetlink.so.0.2.0 b/ucentral-client/rootfs/usr/lib/libnfnetlink.so.0.2.0
new file mode 100755
index 0000000..6b28836
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libnfnetlink.so.0.2.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libnftables.so b/ucentral-client/rootfs/usr/lib/libnftables.so
new file mode 120000
index 0000000..dac3fb2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libnftables.so
@@ -0,0 +1 @@
+libnftables.so.1.1.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libnftables.so.1 b/ucentral-client/rootfs/usr/lib/libnftables.so.1
new file mode 120000
index 0000000..dac3fb2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libnftables.so.1
@@ -0,0 +1 @@
+libnftables.so.1.1.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libnftables.so.1.1.0 b/ucentral-client/rootfs/usr/lib/libnftables.so.1.1.0
new file mode 100755
index 0000000..da5e3e5
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libnftables.so.1.1.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libnftnl.so.11 b/ucentral-client/rootfs/usr/lib/libnftnl.so.11
new file mode 120000
index 0000000..de830d2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libnftnl.so.11
@@ -0,0 +1 @@
+libnftnl.so.11.6.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libnftnl.so.11.6.0 b/ucentral-client/rootfs/usr/lib/libnftnl.so.11.6.0
new file mode 100755
index 0000000..2296fc9
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libnftnl.so.11.6.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libnghttp2.so.14 b/ucentral-client/rootfs/usr/lib/libnghttp2.so.14
new file mode 120000
index 0000000..a60948f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libnghttp2.so.14
@@ -0,0 +1 @@
+libnghttp2.so.14.25.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libnghttp2.so.14.25.0 b/ucentral-client/rootfs/usr/lib/libnghttp2.so.14.25.0
new file mode 100644
index 0000000..61220ab
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libnghttp2.so.14.25.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libnl-tiny.so.1 b/ucentral-client/rootfs/usr/lib/libnl-tiny.so.1
new file mode 100644
index 0000000..cb68fe9
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libnl-tiny.so.1 differ
diff --git a/ucentral-client/rootfs/usr/lib/libns-9.18.37.so b/ucentral-client/rootfs/usr/lib/libns-9.18.37.so
new file mode 100755
index 0000000..60cf8ef
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libns-9.18.37.so differ
diff --git a/ucentral-client/rootfs/usr/lib/libns.so b/ucentral-client/rootfs/usr/lib/libns.so
new file mode 120000
index 0000000..a043542
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libns.so
@@ -0,0 +1 @@
+libns-9.18.37.so
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/liboping.so.0 b/ucentral-client/rootfs/usr/lib/liboping.so.0
new file mode 120000
index 0000000..3c86a31
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/liboping.so.0
@@ -0,0 +1 @@
+liboping.so.0.3.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/liboping.so.0.3.0 b/ucentral-client/rootfs/usr/lib/liboping.so.0.3.0
new file mode 100755
index 0000000..0aab397
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/liboping.so.0.3.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libpanel.so.6 b/ucentral-client/rootfs/usr/lib/libpanel.so.6
new file mode 120000
index 0000000..7be0148
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libpanel.so.6
@@ -0,0 +1 @@
+libpanelw.so.6
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libpanel.so.6.4 b/ucentral-client/rootfs/usr/lib/libpanel.so.6.4
new file mode 120000
index 0000000..7126e87
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libpanel.so.6.4
@@ -0,0 +1 @@
+libpanelw.so.6.4
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libpanelw.so.6 b/ucentral-client/rootfs/usr/lib/libpanelw.so.6
new file mode 120000
index 0000000..7126e87
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libpanelw.so.6
@@ -0,0 +1 @@
+libpanelw.so.6.4
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libpanelw.so.6.4 b/ucentral-client/rootfs/usr/lib/libpanelw.so.6.4
new file mode 100755
index 0000000..c6a52b0
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libpanelw.so.6.4 differ
diff --git a/ucentral-client/rootfs/usr/lib/libpcap.so.1 b/ucentral-client/rootfs/usr/lib/libpcap.so.1
new file mode 120000
index 0000000..09043b3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libpcap.so.1
@@ -0,0 +1 @@
+libpcap.so.1.10.4
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libpcap.so.1.10.4 b/ucentral-client/rootfs/usr/lib/libpcap.so.1.10.4
new file mode 100644
index 0000000..65ce6ff
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libpcap.so.1.10.4 differ
diff --git a/ucentral-client/rootfs/usr/lib/libradcli.so.5 b/ucentral-client/rootfs/usr/lib/libradcli.so.5
new file mode 120000
index 0000000..f0c84d5
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libradcli.so.5
@@ -0,0 +1 @@
+libradcli.so.5.3.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libradcli.so.5.3.0 b/ucentral-client/rootfs/usr/lib/libradcli.so.5.3.0
new file mode 100755
index 0000000..c2bcc90
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libradcli.so.5.3.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libsmartcols.so.1 b/ucentral-client/rootfs/usr/lib/libsmartcols.so.1
new file mode 120000
index 0000000..76ec8b6
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libsmartcols.so.1
@@ -0,0 +1 @@
+libsmartcols.so.1.1.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libsmartcols.so.1.1.0 b/ucentral-client/rootfs/usr/lib/libsmartcols.so.1.1.0
new file mode 100755
index 0000000..28a6bca
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libsmartcols.so.1.1.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libss.so.2 b/ucentral-client/rootfs/usr/lib/libss.so.2
new file mode 120000
index 0000000..9839f3a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libss.so.2
@@ -0,0 +1 @@
+libss.so.2.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libss.so.2.0 b/ucentral-client/rootfs/usr/lib/libss.so.2.0
new file mode 100755
index 0000000..66041a6
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libss.so.2.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libssh.so b/ucentral-client/rootfs/usr/lib/libssh.so
new file mode 120000
index 0000000..68e122b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libssh.so
@@ -0,0 +1 @@
+libssh.so.4
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libssh.so.4 b/ucentral-client/rootfs/usr/lib/libssh.so.4
new file mode 120000
index 0000000..7327b1c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libssh.so.4
@@ -0,0 +1 @@
+libssh.so.4.9.4
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libssh.so.4.9.4 b/ucentral-client/rootfs/usr/lib/libssh.so.4.9.4
new file mode 100644
index 0000000..a631e68
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libssh.so.4.9.4 differ
diff --git a/ucentral-client/rootfs/usr/lib/libssl.so.3 b/ucentral-client/rootfs/usr/lib/libssl.so.3
new file mode 100644
index 0000000..b084a23
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libssl.so.3 differ
diff --git a/ucentral-client/rootfs/usr/lib/libuclient.so b/ucentral-client/rootfs/usr/lib/libuclient.so
new file mode 100644
index 0000000..fd18278
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libuclient.so differ
diff --git a/ucentral-client/rootfs/usr/lib/libucode.so.20230711 b/ucentral-client/rootfs/usr/lib/libucode.so.20230711
new file mode 100644
index 0000000..385745d
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libucode.so.20230711 differ
diff --git a/ucentral-client/rootfs/usr/lib/libunet.so b/ucentral-client/rootfs/usr/lib/libunet.so
new file mode 100644
index 0000000..a6f92f1
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libunet.so differ
diff --git a/ucentral-client/rootfs/usr/lib/libuuid.so.1 b/ucentral-client/rootfs/usr/lib/libuuid.so.1
new file mode 120000
index 0000000..774fbfe
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libuuid.so.1
@@ -0,0 +1 @@
+libuuid.so.1.3.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libuuid.so.1.3.0 b/ucentral-client/rootfs/usr/lib/libuuid.so.1.3.0
new file mode 100755
index 0000000..ae1fd80
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libuuid.so.1.3.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libuv.so b/ucentral-client/rootfs/usr/lib/libuv.so
new file mode 120000
index 0000000..ac45c56
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libuv.so
@@ -0,0 +1 @@
+libuv.so.1
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libuv.so.1 b/ucentral-client/rootfs/usr/lib/libuv.so.1
new file mode 120000
index 0000000..7776377
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libuv.so.1
@@ -0,0 +1 @@
+libuv.so.1.0.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libuv.so.1.0.0 b/ucentral-client/rootfs/usr/lib/libuv.so.1.0.0
new file mode 100644
index 0000000..eadd7f0
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libuv.so.1.0.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libwebsockets.so b/ucentral-client/rootfs/usr/lib/libwebsockets.so
new file mode 120000
index 0000000..e79c259
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libwebsockets.so
@@ -0,0 +1 @@
+libwebsockets.so.17
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libwebsockets.so.17 b/ucentral-client/rootfs/usr/lib/libwebsockets.so.17
new file mode 100644
index 0000000..8ba525e
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libwebsockets.so.17 differ
diff --git a/ucentral-client/rootfs/usr/lib/libxtables.so.12 b/ucentral-client/rootfs/usr/lib/libxtables.so.12
new file mode 120000
index 0000000..4d601f1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libxtables.so.12
@@ -0,0 +1 @@
+libxtables.so.12.6.0
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libxtables.so.12.6.0 b/ucentral-client/rootfs/usr/lib/libxtables.so.12.6.0
new file mode 100755
index 0000000..43ae6be
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libxtables.so.12.6.0 differ
diff --git a/ucentral-client/rootfs/usr/lib/libz.so b/ucentral-client/rootfs/usr/lib/libz.so
new file mode 120000
index 0000000..35fdc8b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libz.so
@@ -0,0 +1 @@
+libz.so.1
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libz.so.1 b/ucentral-client/rootfs/usr/lib/libz.so.1
new file mode 120000
index 0000000..997f52c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/libz.so.1
@@ -0,0 +1 @@
+libz.so.1.2.13
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/libz.so.1.2.13 b/ucentral-client/rootfs/usr/lib/libz.so.1.2.13
new file mode 100644
index 0000000..cb37366
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/libz.so.1.2.13 differ
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/cacheloader.lua b/ucentral-client/rootfs/usr/lib/lua/luci/cacheloader.lua
new file mode 100644
index 0000000..7ef971d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/cacheloader.lua
@@ -0,0 +1,12 @@
+-- Copyright 2008 Steven Barth <steven@midlink.org>
+-- Copyright 2008 Jo-Philipp Wich <jow@openwrt.org>
+-- Licensed to the public under the Apache License 2.0.
+
+local config = require "luci.config"
+local ccache = require "luci.ccache"
+
+module "luci.cacheloader"
+
+if config.ccache and config.ccache.enable == "1" then
+	ccache.cache_ondemand()
+end
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/ccache.lua b/ucentral-client/rootfs/usr/lib/lua/luci/ccache.lua
new file mode 100644
index 0000000..d3be7cb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/ccache.lua
@@ -0,0 +1,76 @@
+-- Copyright 2008 Steven Barth <steven@midlink.org>
+-- Copyright 2008 Jo-Philipp Wich <jow@openwrt.org>
+-- Licensed to the public under the Apache License 2.0.
+
+local io = require "io"
+local fs = require "nixio.fs"
+local util = require "luci.util"
+local nixio = require "nixio"
+local debug = require "debug"
+local string = require "string"
+local package = require "package"
+
+local type, loadfile = type, loadfile
+
+
+module "luci.ccache"
+
+function cache_ondemand(...)
+	if debug.getinfo(1, 'S').source ~= "=?" then
+		cache_enable(...)
+	end
+end
+
+function cache_enable(cachepath, mode)
+	cachepath = cachepath or "/tmp/luci-modulecache"
+	mode = mode or "r--r--r--"
+
+	local loader = package.loaders[2]
+	local uid    = nixio.getuid()
+
+	if not fs.stat(cachepath) then
+		fs.mkdir(cachepath)
+	end
+
+	local function _encode_filename(name)
+		local encoded = ""
+		for i=1, #name do
+			encoded = encoded .. ("%2X" % string.byte(name, i))
+		end
+		return encoded
+	end
+
+	local function _load_sane(file)
+		local stat = fs.stat(file)
+		if stat and stat.uid == uid and stat.modestr == mode then
+			return loadfile(file)
+		end
+	end
+
+	local function _write_sane(file, func)
+		if nixio.getuid() == uid then
+			local fp = io.open(file, "w")
+			if fp then
+				fp:write(util.get_bytecode(func))
+				fp:close()
+				fs.chmod(file, mode)
+			end
+		end
+	end
+
+	package.loaders[2] = function(mod)
+		local encoded = cachepath .. "/" .. _encode_filename(mod)
+		local modcons = _load_sane(encoded)
+
+		if modcons then
+			return modcons
+		end
+
+		-- No cachefile
+		modcons = loader(mod)
+		if type(modcons) == "function" then
+			_write_sane(encoded, modcons)
+		end
+		return modcons
+	end
+end
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/config.lua b/ucentral-client/rootfs/usr/lib/lua/luci/config.lua
new file mode 100644
index 0000000..d01153f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/config.lua
@@ -0,0 +1,18 @@
+-- Copyright 2008 Steven Barth <steven@midlink.org>
+-- Licensed to the public under the Apache License 2.0.
+
+local util = require "luci.util"
+module("luci.config",
+		function(m)
+			if pcall(require, "luci.model.uci") then
+				local config = util.threadlocal()
+				setmetatable(m, {
+					__index = function(tbl, key)
+						if not config[key] then
+							config[key] = luci.model.uci.cursor():get_all("luci", key)
+						end
+						return config[key]
+					end
+				})
+			end
+		end)
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/debug.lua b/ucentral-client/rootfs/usr/lib/lua/luci/debug.lua
new file mode 100644
index 0000000..8ff1bb6
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/debug.lua
@@ -0,0 +1,37 @@
+local debug = require "debug"
+local io = require "io"
+local collectgarbage, floor = collectgarbage, math.floor
+
+module "luci.debug"
+__file__ = debug.getinfo(1, 'S').source:sub(2)
+
+-- Enables the memory tracer with given flags and returns a function to disable the tracer again
+function trap_memtrace(flags, dest)
+	flags = flags or "clr"
+	local tracefile = io.open(dest or "/tmp/memtrace", "w")
+	local peak = 0
+
+	local function trap(what, line)
+		local info = debug.getinfo(2, "Sn")
+		local size = floor(collectgarbage("count"))
+		if size > peak then
+			peak = size
+		end
+		if tracefile then
+			tracefile:write(
+				"[", what, "] ", info.source, ":", (line or "?"), "\t",
+				(info.namewhat or ""), "\t",
+				(info.name or ""), "\t",
+				size, " (", peak, ")\n"
+			)
+		end
+	end
+
+	debug.sethook(trap, flags)
+
+	return function()
+		debug.sethook()
+		tracefile:close()
+	end
+end
+
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/dispatcher.lua b/ucentral-client/rootfs/usr/lib/lua/luci/dispatcher.lua
new file mode 100644
index 0000000..bbe7600
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/dispatcher.lua
@@ -0,0 +1,484 @@
+-- Copyright 2008 Steven Barth <steven@midlink.org>
+-- Copyright 2008-2015 Jo-Philipp Wich <jow@openwrt.org>
+-- Licensed to the public under the Apache License 2.0.
+
+module("luci.dispatcher", package.seeall)
+
+local http = _G.L.http
+
+context = setmetatable({}, {
+	__index = function(t, k)
+		if k == "request" or k == "requestpath" then
+			return _G.L.ctx.request_path
+		elseif k == "requestargs" then
+			return _G.L.ctx.request_args
+		else
+			return _G.L.ctx[k]
+		end
+	end
+})
+
+uci = require "luci.model.uci"
+uci:set_session_id(_G.L.ctx.authsession)
+
+i18n = require "luci.i18n"
+i18n.setlanguage(_G.L.dispatcher.lang)
+
+build_url = _G.L.dispatcher.build_url
+menu_json = _G.L.dispatcher.menu_json
+error404 = _G.L.dispatcher.error404
+error500 = _G.L.dispatcher.error500
+
+function is_authenticated(auth)
+	local session = _G.L.dispatcher.is_authenticated(auth)
+	if session then
+		return session.sid, session.data, session.acls
+	end
+end
+
+function assign(path, clone, title, order)
+	local obj  = node(unpack(path))
+
+	obj.title = title
+	obj.order = order
+
+	setmetatable(obj, {__index = node(unpack(clone))})
+
+	return obj
+end
+
+function entry(path, target, title, order)
+	local c = node(unpack(path))
+
+	c.title  = title
+	c.order  = order
+	c.action = target
+
+	return c
+end
+
+-- enabling the node.
+function get(...)
+	return node(...)
+end
+
+function node(...)
+	local p = table.concat({ ... }, "/")
+
+	if not __entries[p] then
+		__entries[p] = {}
+	end
+
+	return __entries[p]
+end
+
+function lookup(...)
+	local i, path = nil, {}
+	for i = 1, select('#', ...) do
+		local name, arg = nil, tostring(select(i, ...))
+		for name in arg:gmatch("[^/]+") do
+			path[#path+1] = name
+		end
+	end
+
+	local node = menu_json()
+	for i = 1, #path do
+		node = node.children[path[i]]
+
+		if not node then
+			return nil
+		elseif node.leaf then
+			break
+		end
+	end
+
+	return node, build_url(unpack(path))
+end
+
+
+function process_lua_controller(path)
+	local base = "/usr/lib/lua/luci/controller/"
+	local modname = "luci.controller." .. path:sub(#base+1, #path-4):gsub("/", ".")
+	local mod = require(modname)
+	assert(mod ~= true,
+	       "Invalid controller file found\n" ..
+	       "The file '" .. path .. "' contains an invalid module line.\n" ..
+	       "Please verify whether the module name is set to '" .. modname ..
+	       "' - It must correspond to the file path!")
+
+	local idx = mod.index
+	if type(idx) ~= "function" then
+		return nil
+	end
+
+	local entries = {}
+
+	__entries = entries
+	__controller = modname
+
+	setfenv(idx,  setmetatable({}, { __index = luci.dispatcher }))()
+
+	__entries = nil
+	__controller = nil
+
+	-- fixup gathered node specs
+	for path, entry in pairs(entries) do
+		if entry.leaf then
+			entry.wildcard = true
+		end
+
+		if type(entry.file_depends) == "table" then
+			for _, v in ipairs(entry.file_depends) do
+				entry.depends = entry.depends or {}
+				entry.depends.fs = entry.depends.fs or {}
+
+				local ft = fs.stat(v, "type")
+				if ft == "dir" then
+					entry.depends.fs[v] = "directory"
+				elseif v:match("/s?bin/") then
+					entry.depends.fs[v] = "executable"
+				else
+					entry.depends.fs[v] = "file"
+				end
+			end
+		end
+
+		if type(entry.uci_depends) == "table" then
+			for k, v in pairs(entry.uci_depends) do
+				entry.depends = entry.depends or {}
+				entry.depends.uci = entry.depends.uci or {}
+				entry.depends.uci[k] = v
+			end
+		end
+
+		if type(entry.acl_depends) == "table" then
+			for _, acl in ipairs(entry.acl_depends) do
+				entry.depends = entry.depends or {}
+				entry.depends.acl = entry.depends.acl or {}
+				entry.depends.acl[#entry.depends.acl + 1] = acl
+			end
+		end
+
+		if (entry.sysauth_authenticator ~= nil) or
+		   (entry.sysauth ~= nil and entry.sysauth ~= false)
+		then
+			if entry.sysauth_authenticator == "htmlauth" then
+				entry.auth = {
+					login = true,
+					methods = { "cookie:sysauth_https", "cookie:sysauth_http" }
+				}
+			elseif path == "rpc" and modname == "luci.controller.rpc" then
+				entry.auth = {
+					login = false,
+					methods = { "query:auth", "cookie:sysauth_https", "cookie:sysauth_http", "cookie:sysauth" }
+				}
+			elseif modname == "luci.controller.admin.uci" then
+				entry.auth = {
+					login = false,
+					methods = { "param:sid" }
+				}
+			end
+		elseif entry.sysauth == false then
+			entry.auth = {}
+		end
+
+		if entry.action == nil and type(entry.target) == "table" then
+			entry.action = entry.target
+			entry.target = nil
+		end
+
+		entry.leaf = nil
+
+		entry.file_depends = nil
+		entry.uci_depends = nil
+		entry.acl_depends = nil
+
+		entry.sysauth = nil
+		entry.sysauth_authenticator = nil
+	end
+
+	return entries
+end
+
+function invoke_cbi_action(model, config, ...)
+	local cbi = require "luci.cbi"
+	local tpl = require "luci.template"
+	local util = require "luci.util"
+
+	if not config then
+		config = {}
+	end
+
+	local maps = cbi.load(model, ...)
+
+	local state = nil
+
+	local function has_uci_access(config, level)
+		local rv = util.ubus("session", "access", {
+			ubus_rpc_session = context.authsession,
+			scope = "uci", object = config,
+			["function"] = level
+		})
+
+		return (type(rv) == "table" and rv.access == true) or false
+	end
+
+	local i, res
+	for i, res in ipairs(maps) do
+		if util.instanceof(res, cbi.SimpleForm) then
+			io.stderr:write("Model %s returns SimpleForm but is dispatched via cbi(),\n"
+				% model)
+
+			io.stderr:write("please change %s to use the form() action instead.\n"
+				% table.concat(context.request, "/"))
+		end
+
+		res.flow = config
+		local cstate = res:parse()
+		if cstate and (not state or cstate < state) then
+			state = cstate
+		end
+	end
+
+	local function _resolve_path(path)
+		return type(path) == "table" and build_url(unpack(path)) or path
+	end
+
+	if config.on_valid_to and state and state > 0 and state < 2 then
+		http:redirect(_resolve_path(config.on_valid_to))
+		return
+	end
+
+	if config.on_changed_to and state and state > 1 then
+		http:redirect(_resolve_path(config.on_changed_to))
+		return
+	end
+
+	if config.on_success_to and state and state > 0 then
+		http:redirect(_resolve_path(config.on_success_to))
+		return
+	end
+
+	if config.state_handler then
+		if not config.state_handler(state, maps) then
+			return
+		end
+	end
+
+	http:header("X-CBI-State", state or 0)
+
+	if not config.noheader then
+		_G.L.include("cbi/header", {state = state})
+	end
+
+	local redirect
+	local messages
+	local applymap   = false
+	local pageaction = true
+	local parsechain = { }
+	local writable   = false
+
+	for i, res in ipairs(maps) do
+		if res.apply_needed and res.parsechain then
+			local c
+			for _, c in ipairs(res.parsechain) do
+				parsechain[#parsechain+1] = c
+			end
+			applymap = true
+		end
+
+		if res.redirect then
+			redirect = redirect or res.redirect
+		end
+
+		if res.pageaction == false then
+			pageaction = false
+		end
+
+		if res.message then
+			messages = messages or { }
+			messages[#messages+1] = res.message
+		end
+	end
+
+	for i, res in ipairs(maps) do
+		local is_readable_map = has_uci_access(res.config, "read")
+		local is_writable_map = has_uci_access(res.config, "write")
+
+		writable = writable or is_writable_map
+
+		res:render({
+			firstmap   = (i == 1),
+			redirect   = redirect,
+			messages   = messages,
+			pageaction = pageaction,
+			parsechain = parsechain,
+			readable   = is_readable_map,
+			writable   = is_writable_map
+		})
+	end
+
+	if not config.nofooter then
+		_G.L.include("cbi/footer", {
+			flow          = config,
+			pageaction    = pageaction,
+			redirect      = redirect,
+			state         = state,
+			autoapply     = config.autoapply,
+			trigger_apply = applymap,
+			writable      = writable
+		})
+	end
+end
+
+function invoke_form_action(model, ...)
+	local cbi = require "luci.cbi"
+	local tpl = require "luci.template"
+
+	local maps = luci.cbi.load(model, ...)
+	local state = nil
+
+	local i, res
+	for i, res in ipairs(maps) do
+		local cstate = res:parse()
+		if cstate and (not state or cstate < state) then
+			state = cstate
+		end
+	end
+
+	http:header("X-CBI-State", state or 0)
+	_G.L.include("header")
+	for i, res in ipairs(maps) do
+		res:render()
+	end
+	_G.L.include("footer")
+end
+
+function render_lua_template(path)
+	local tpl = require "luci.template"
+
+	tpl.render(path, getfenv(1))
+end
+
+function test_post_security()
+	if http:getenv("REQUEST_METHOD") ~= "POST" then
+		http:status(405, "Method Not Allowed")
+		http:header("Allow", "POST")
+		return false
+	end
+
+	if http:formvalue("token") ~= context.authtoken then
+		http:status(403, "Forbidden")
+		_G.L.include("csrftoken")
+		return false
+	end
+
+	return true
+end
+
+
+function call(name, ...)
+	return {
+		["type"] = "call",
+		["module"] = __controller,
+		["function"] = name,
+		["parameters"] = select('#', ...) > 0 and {...} or nil
+	}
+end
+
+function post_on(params, name, ...)
+	return {
+		["type"] = "call",
+		["module"] = __controller,
+		["function"] = name,
+		["parameters"] = select('#', ...) > 0 and {...} or nil,
+		["post"] = params
+	}
+end
+
+function post(...)
+	return post_on(true, ...)
+end
+
+function view(name)
+	return {
+		["type"] = "view",
+		["path"] = name
+	}
+end
+
+function template(name)
+	return {
+		["type"] = "template",
+		["path"] = name
+	}
+end
+
+function cbi(model, config)
+	return {
+		["type"] = "call",
+		["module"] = "luci.dispatcher",
+		["function"] = "invoke_cbi_action",
+		["parameters"] = { model, config or {} },
+		["post"] = {
+			["cbi.submit"] = true
+		}
+	}
+end
+
+function form(model)
+	return {
+		["type"] = "call",
+		["module"] = "luci.dispatcher",
+		["function"] = "invoke_form_action",
+		["parameters"] = { model },
+		["post"] = {
+			["cbi.submit"] = true
+		}
+	}
+end
+
+function firstchild()
+	return {
+		["type"] = "firstchild"
+	}
+end
+
+function firstnode()
+	return {
+		["type"] = "firstchild",
+		["recurse"] = true
+	}
+end
+
+function arcombine(trg1, trg2)
+	return {
+		["type"] = "arcombine",
+		["targets"] = { trg1, trg2 } --,
+		--env = getfenv(),
+	}
+end
+
+function alias(...)
+	return {
+		["type"] = "alias",
+		["path"] = table.concat({ ... }, "/")
+	}
+end
+
+function rewrite(n, ...)
+	return {
+		["type"] = "rewrite",
+		["path"] = table.concat({ ... }, "/"),
+		["remove"] = n
+	}
+end
+
+
+translate = i18n.translate
+
+-- This function does not actually translate the given argument but
+-- is used by build/i18n-scan.pl to find translatable entries.
+function _(text)
+	return text
+end
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/http.lua b/ucentral-client/rootfs/usr/lib/lua/luci/http.lua
new file mode 100644
index 0000000..882b71c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/http.lua
@@ -0,0 +1,145 @@
+-- Copyright 2008 Steven Barth <steven@midlink.org>
+-- Copyright 2010-2018 Jo-Philipp Wich <jo@mein.io>
+-- Licensed to the public under the Apache License 2.0.
+
+local util  = require "luci.util"
+local coroutine = require "coroutine"
+local table = require "table"
+local lhttp = require "lucihttp"
+
+local L, table, ipairs, pairs, type, error = _G.L, table, ipairs, pairs, type, error
+
+module "luci.http"
+
+HTTP_MAX_CONTENT      = 1024*100		-- 100 kB maximum content size
+
+function close()
+	L.http:close()
+end
+
+function content()
+	return L.http:content()
+end
+
+function formvalue(name, noparse)
+	return L.http:formvalue(name, noparse)
+end
+
+function formvaluetable(prefix)
+	return L.http:formvaluetable(prefix)
+end
+
+function getcookie(name)
+	return L.http:getcookie(name)
+end
+
+-- or the environment table itself.
+function getenv(name)
+	return L.http:getenv(name)
+end
+
+function setfilehandler(callback)
+	return L.http:setfilehandler(callback)
+end
+
+function header(key, value)
+	L.http:header(key, value)
+end
+
+function prepare_content(mime)
+	L.http:prepare_content(mime)
+end
+
+function source()
+	return L.http.input
+end
+
+function status(code, message)
+	L.http:status(code, message)
+end
+
+-- This function is as a valid LTN12 sink.
+-- If the content chunk is nil this function will automatically invoke close.
+function write(content, src_err)
+	if src_err then
+		error(src_err)
+	end
+
+	return L.print(content)
+end
+
+function splice(fd, size)
+	coroutine.yield(6, fd, size)
+end
+
+function redirect(url)
+	L.http:redirect(url)
+end
+
+function build_querystring(q)
+	local s, n, k, v = {}, 1, nil, nil
+
+	for k, v in pairs(q) do
+		s[n+0] = (n == 1) and "?" or "&"
+		s[n+1] = util.urlencode(k)
+		s[n+2] = "="
+		s[n+3] = util.urlencode(v)
+		n = n + 4
+	end
+
+	return table.concat(s, "")
+end
+
+urldecode = util.urldecode
+
+urlencode = util.urlencode
+
+function write_json(x)
+	L.printf('%J', x)
+end
+
+-- separated by "&". Tables are encoded as parameters with multiple values by
+-- repeating the parameter name with each value.
+function urlencode_params(tbl)
+	local k, v
+	local n, enc = 1, {}
+	for k, v in pairs(tbl) do
+		if type(v) == "table" then
+			local i, v2
+			for i, v2 in ipairs(v) do
+				if enc[1] then
+					enc[n] = "&"
+					n = n + 1
+				end
+
+				enc[n+0] = lhttp.urlencode(k)
+				enc[n+1] = "="
+				enc[n+2] = lhttp.urlencode(v2)
+				n = n + 3
+			end
+		else
+			if enc[1] then
+				enc[n] = "&"
+				n = n + 1
+			end
+
+			enc[n+0] = lhttp.urlencode(k)
+			enc[n+1] = "="
+			enc[n+2] = lhttp.urlencode(v)
+			n = n + 3
+		end
+	end
+
+	return table.concat(enc, "")
+end
+
+context = {
+	request = {
+		formvalue      = function(self, ...) return formvalue(...)      end;
+		formvaluetable = function(self, ...) return formvaluetable(...) end;
+		content        = function(self, ...) return content(...)        end;
+		getcookie      = function(self, ...) return getcookie(...)      end;
+		setfilehandler = function(self, ...) return setfilehandler(...) end;
+		message        = L and L.http.message
+	}
+}
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/i18n.lua b/ucentral-client/rootfs/usr/lib/lua/luci/i18n.lua
new file mode 100644
index 0000000..323912b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/i18n.lua
@@ -0,0 +1,55 @@
+-- Copyright 2008 Steven Barth <steven@midlink.org>
+-- Licensed to the public under the Apache License 2.0.
+
+local tparser  = require "luci.template.parser"
+local util     = require "luci.util"
+local tostring = tostring
+
+module "luci.i18n"
+
+i18ndir = util.libpath() .. "/i18n/"
+context = util.threadlocal()
+default = "en"
+
+
+function setlanguage(lang)
+	local code, subcode = lang:match("^([A-Za-z][A-Za-z])[%-_]([A-Za-z][A-Za-z])$")
+	if not (code and subcode) then
+		subcode = lang:match("^([A-Za-z][A-Za-z])$")
+		if not subcode then
+			return nil
+		end
+	end
+
+	context.parent = code and code:lower()
+	context.lang   = context.parent and context.parent.."-"..subcode:lower() or subcode:lower()
+
+	if tparser.load_catalog(context.lang, i18ndir) and
+	   tparser.change_catalog(context.lang)
+	then
+		return context.lang
+
+	elseif context.parent then
+		if tparser.load_catalog(context.parent, i18ndir) and
+		   tparser.change_catalog(context.parent)
+		then
+			return context.parent
+		end
+	end
+
+	return nil
+end
+
+function translate(key)
+	return tparser.translate(key) or key
+end
+
+function translatef(key, ...)
+	return tostring(translate(key)):format(...)
+end
+
+function dump()
+	local rv = {}
+	tparser.get_translations(function(k, v) rv[k] = v end)
+	return rv
+end
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/ip.so b/ucentral-client/rootfs/usr/lib/lua/luci/ip.so
new file mode 100755
index 0000000..a78d4c2
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/lua/luci/ip.so differ
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/jsonc.so b/ucentral-client/rootfs/usr/lib/lua/luci/jsonc.so
new file mode 100755
index 0000000..58f2ed4
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/lua/luci/jsonc.so differ
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/ltn12.lua b/ucentral-client/rootfs/usr/lib/lua/luci/ltn12.lua
new file mode 100644
index 0000000..3a7268c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/ltn12.lua
@@ -0,0 +1,316 @@
+--[[
+LuaSocket 2.0.2 license
+Copyright � 2004-2007 Diego Nehab
+
+Permission is hereby granted, free of charge, to any person obtaining a
+copy of this software and associated documentation files (the "Software"),
+to deal in the Software without restriction, including without limitation
+the rights to use, copy, modify, merge, publish, distribute, sublicense,
+and/or sell copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+DEALINGS IN THE SOFTWARE.
+]]--
+--[[
+	Changes made by LuCI project:
+		* Renamed to luci.ltn12 to avoid collisions with luasocket
+		* Added inline documentation
+]]--
+-----------------------------------------------------------------------------
+-- LTN12 - Filters, sources, sinks and pumps.
+-- LuaSocket toolkit.
+-- Author: Diego Nehab
+-- RCS ID: $Id$
+-----------------------------------------------------------------------------
+
+-----------------------------------------------------------------------------
+-- Declare module
+-----------------------------------------------------------------------------
+local string = require("string")
+local table = require("table")
+local base = _G
+
+-- See http://lua-users.org/wiki/FiltersSourcesAndSinks for design concepts 
+module("luci.ltn12")
+
+filter = {}
+source = {}
+sink = {}
+pump = {}
+
+-- 2048 seems to be better in windows...
+BLOCKSIZE = 2048
+_VERSION = "LTN12 1.0.1"
+
+-----------------------------------------------------------------------------
+-- Filter stuff
+-----------------------------------------------------------------------------
+
+
+-- by passing it each chunk and updating a context between calls. 
+function filter.cycle(low, ctx, extra)
+    base.assert(low)
+    return function(chunk)
+        local ret
+        ret, ctx = low(ctx, chunk, extra)
+        return ret
+    end
+end
+
+-- (thanks to Wim Couwenberg)
+function filter.chain(...)
+    local n = table.getn(arg)
+    local top, index = 1, 1
+    local retry = ""
+    return function(chunk)
+        retry = chunk and retry
+        while true do
+            if index == top then
+                chunk = arg[index](chunk)
+                if chunk == "" or top == n then return chunk
+                elseif chunk then index = index + 1
+                else
+                    top = top+1
+                    index = top
+                end
+            else
+                chunk = arg[index](chunk or "")
+                if chunk == "" then
+                    index = index - 1
+                    chunk = retry
+                elseif chunk then
+                    if index == n then return chunk
+                    else index = index + 1 end
+                else base.error("filter returned inappropriate nil") end
+            end
+        end
+    end
+end
+
+-----------------------------------------------------------------------------
+-- Source stuff
+-----------------------------------------------------------------------------
+
+
+-- create an empty source
+local function empty()
+    return nil
+end
+
+function source.empty()
+    return empty
+end
+
+function source.error(err)
+    return function()
+        return nil, err
+    end
+end
+
+function source.file(handle, io_err)
+    if handle then
+        return function()
+            local chunk = handle:read(BLOCKSIZE)
+            if chunk and chunk:len() == 0 then chunk = nil end
+            if not chunk then handle:close() end
+            return chunk
+        end
+    else return source.error(io_err or "unable to open file") end
+end
+
+function source.simplify(src)
+    base.assert(src)
+    return function()
+        local chunk, err_or_new = src()
+        src = err_or_new or src
+        if not chunk then return nil, err_or_new
+        else return chunk end
+    end
+end
+
+function source.string(s)
+    if s then
+        local i = 1
+        return function()
+            local chunk = string.sub(s, i, i+BLOCKSIZE-1)
+            i = i + BLOCKSIZE
+            if chunk ~= "" then return chunk
+            else return nil end
+        end
+    else return source.empty() end
+end
+
+function source.rewind(src)
+    base.assert(src)
+    local t = {}
+    return function(chunk)
+        if not chunk then
+            chunk = table.remove(t)
+            if not chunk then return src()
+            else return chunk end
+        else
+            t[#t+1] = chunk
+        end
+    end
+end
+
+function source.chain(src, f)
+    base.assert(src and f)
+    local last_in, last_out = "", ""
+    local state = "feeding"
+    local err
+    return function()
+        if not last_out then
+            base.error('source is empty!', 2)
+        end
+        while true do
+            if state == "feeding" then
+                last_in, err = src()
+                if err then return nil, err end
+                last_out = f(last_in)
+                if not last_out then
+                    if last_in then
+                        base.error('filter returned inappropriate nil')
+                    else
+                        return nil
+                    end
+                elseif last_out ~= "" then
+                    state = "eating"
+                    if last_in then last_in = "" end
+                    return last_out
+                end
+            else
+                last_out = f(last_in)
+                if last_out == "" then
+                    if last_in == "" then
+                        state = "feeding"
+                    else
+                        base.error('filter returned ""')
+                    end
+                elseif not last_out then
+                    if last_in then
+                        base.error('filter returned inappropriate nil')
+                    else
+                        return nil
+                    end
+                else
+                    return last_out
+                end
+            end
+        end
+    end
+end
+
+-- Sources will be used one after the other, as if they were concatenated
+-- (thanks to Wim Couwenberg)
+function source.cat(...)
+    local src = table.remove(arg, 1)
+    return function()
+        while src do
+            local chunk, err = src()
+            if chunk then return chunk end
+            if err then return nil, err end
+            src = table.remove(arg, 1)
+        end
+    end
+end
+
+-----------------------------------------------------------------------------
+-- Sink stuff
+-----------------------------------------------------------------------------
+
+
+function sink.table(t)
+    t = t or {}
+    local f = function(chunk, err)
+        if chunk then t[#t+1] = chunk end
+        return 1
+    end
+    return f, t
+end
+
+function sink.simplify(snk)
+    base.assert(snk)
+    return function(chunk, err)
+        local ret, err_or_new = snk(chunk, err)
+        if not ret then return nil, err_or_new end
+        snk = err_or_new or snk
+        return 1
+    end
+end
+
+function sink.file(handle, io_err)
+    if handle then
+        return function(chunk, err)
+            if not chunk then
+                handle:close()
+                return 1
+            else return handle:write(chunk) end
+        end
+    else return sink.error(io_err or "unable to open file") end
+end
+
+-- creates a sink that discards data
+local function null()
+    return 1
+end
+
+function sink.null()
+    return null
+end
+
+function sink.error(err)
+    return function()
+        return nil, err
+    end
+end
+
+function sink.chain(f, snk)
+    base.assert(f and snk)
+    return function(chunk, err)
+        if chunk ~= "" then
+            local filtered = f(chunk)
+            local done = chunk and ""
+            while true do
+                local ret, snkerr = snk(filtered, err)
+                if not ret then return nil, snkerr end
+                if filtered == done then return 1 end
+                filtered = f(done)
+            end
+        else return 1 end
+    end
+end
+
+-----------------------------------------------------------------------------
+-- Pump stuff
+-----------------------------------------------------------------------------
+
+
+function pump.step(src, snk)
+    local chunk, src_err = src()
+    local ret, snk_err = snk(chunk, src_err)
+    if chunk and ret then return 1
+    else return nil, src_err or snk_err end
+end
+
+function pump.all(src, snk, step)
+    base.assert(src and snk)
+    step = step or pump.step
+    while true do
+        local ret, err = step(src, snk)
+        if not ret then
+            if err then return nil, err
+            else return 1 end
+        end
+    end
+end
+
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/model/uci.lua b/ucentral-client/rootfs/usr/lib/lua/luci/model/uci.lua
new file mode 100644
index 0000000..816f6f2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/model/uci.lua
@@ -0,0 +1,508 @@
+-- Copyright 2008 Steven Barth <steven@midlink.org>
+-- Licensed to the public under the Apache License 2.0.
+
+local os    = require "os"
+local util  = require "luci.util"
+local table = require "table"
+
+
+local setmetatable, rawget, rawset = setmetatable, rawget, rawset
+local require, getmetatable, assert = require, getmetatable, assert
+local error, pairs, ipairs, select = error, pairs, ipairs, select
+local type, tostring, tonumber, unpack = type, tostring, tonumber, unpack
+
+-- The typical workflow for UCI is:  Get a cursor instance from the
+-- cursor factory, modify data (via Cursor.add, Cursor.delete, etc.),
+-- save the changes to the staging area via Cursor.save and finally
+-- Cursor.commit the data to the actual config files.
+-- LuCI then needs to Cursor.apply the changes so daemons etc. are
+-- reloaded.
+module "luci.model.uci"
+
+local ERRSTR = {
+	"Invalid command",
+	"Invalid argument",
+	"Method not found",
+	"Entry not found",
+	"No data",
+	"Permission denied",
+	"Timeout",
+	"Not supported",
+	"Unknown error",
+	"Connection failed"
+}
+
+local session_id = nil
+
+local function call(cmd, args)
+	if type(args) == "table" and session_id then
+		args.ubus_rpc_session = session_id
+	end
+	return util.ubus("uci", cmd, args)
+end
+
+
+function cursor()
+	return _M
+end
+
+function cursor_state()
+	return _M
+end
+
+function substate(self)
+	return self
+end
+
+
+function get_confdir(self)
+	return "/etc/config"
+end
+
+function get_savedir(self)
+	return "/tmp/.uci"
+end
+
+function get_session_id(self)
+	return session_id
+end
+
+function set_confdir(self, directory)
+	return false
+end
+
+function set_savedir(self, directory)
+	return false
+end
+
+function set_session_id(self, id)
+	session_id = id
+	return true
+end
+
+
+function load(self, config)
+	return true
+end
+
+function save(self, config)
+	return true
+end
+
+function unload(self, config)
+	return true
+end
+
+
+function changes(self, config)
+	local rv, err = call("changes", { config = config })
+
+	if type(rv) == "table" and type(rv.changes) == "table" then
+		return rv.changes
+	elseif err then
+		return nil, ERRSTR[err]
+	else
+		return { }
+	end
+end
+
+
+function revert(self, config)
+	local _, err = call("revert", { config = config })
+	return (err == nil), ERRSTR[err]
+end
+
+function commit(self, config)
+	local _, err = call("commit", { config = config })
+	return (err == nil), ERRSTR[err]
+end
+
+function apply(self, rollback)
+	local _, err
+
+	if rollback then
+		local sys = require "luci.sys"
+		local conf = require "luci.config"
+		local timeout = tonumber(conf and conf.apply and conf.apply.rollback or 90) or 0
+
+		_, err = call("apply", {
+			timeout = (timeout > 90) and timeout or 90,
+			rollback = true
+		})
+
+		if not err then
+			local now = os.time()
+			local token = sys.uniqueid(16)
+
+			util.ubus("session", "set", {
+				ubus_rpc_session = "00000000000000000000000000000000",
+				values = {
+					rollback = {
+						token   = token,
+						session = session_id,
+						timeout = now + timeout
+					}
+				}
+			})
+
+			return token
+		end
+	else
+		_, err = call("changes", {})
+
+		if not err then
+			if type(_) == "table" and type(_.changes) == "table" then
+				local k, v
+				for k, v in pairs(_.changes) do
+					_, err = call("commit", { config = k })
+					if err then
+						break
+					end
+				end
+			end
+		end
+
+		if not err then
+			_, err = call("apply", { rollback = false })
+		end
+	end
+
+	return (err == nil), ERRSTR[err]
+end
+
+function confirm(self, token)
+	local is_pending, time_remaining, rollback_sid, rollback_token = self:rollback_pending()
+
+	if is_pending then
+		if token ~= rollback_token then
+			return false, "Permission denied"
+		end
+
+		local _, err = util.ubus("uci", "confirm", {
+			ubus_rpc_session = rollback_sid
+		})
+
+		if not err then
+			util.ubus("session", "set", {
+				ubus_rpc_session = "00000000000000000000000000000000",
+				values = { rollback = {} }
+			})
+		end
+
+		return (err == nil), ERRSTR[err]
+	end
+
+	return false, "No data"
+end
+
+function rollback(self)
+	local is_pending, time_remaining, rollback_sid = self:rollback_pending()
+
+	if is_pending then
+		local _, err = util.ubus("uci", "rollback", {
+			ubus_rpc_session = rollback_sid
+		})
+
+		if not err then
+			util.ubus("session", "set", {
+				ubus_rpc_session = "00000000000000000000000000000000",
+				values = { rollback = {} }
+			})
+		end
+
+		return (err == nil), ERRSTR[err]
+	end
+
+	return false, "No data"
+end
+
+function rollback_pending(self)
+	local rv, err = util.ubus("session", "get", {
+		ubus_rpc_session = "00000000000000000000000000000000",
+		keys = { "rollback" }
+	})
+
+	local now = os.time()
+
+	if type(rv) == "table" and
+	   type(rv.values) == "table" and
+	   type(rv.values.rollback) == "table" and
+	   type(rv.values.rollback.token) == "string" and
+	   type(rv.values.rollback.session) == "string" and
+	   type(rv.values.rollback.timeout) == "number" and
+	   rv.values.rollback.timeout > now
+	then
+		return true,
+			rv.values.rollback.timeout - now,
+			rv.values.rollback.session,
+			rv.values.rollback.token
+	end
+
+	return false, ERRSTR[err]
+end
+
+
+function foreach(self, config, stype, callback)
+	if type(callback) == "function" then
+		local rv, err = call("get", {
+			config = config,
+			type   = stype
+		})
+
+		if type(rv) == "table" and type(rv.values) == "table" then
+			local sections = { }
+			local res = false
+			local index = 1
+
+			local _, section
+			for _, section in pairs(rv.values) do
+				section[".index"] = section[".index"] or index
+				sections[index] = section
+				index = index + 1
+			end
+
+			table.sort(sections, function(a, b)
+				return a[".index"] < b[".index"]
+			end)
+
+			for _, section in ipairs(sections) do
+				local continue = callback(section)
+				res = true
+				if continue == false then
+					break
+				end
+			end
+			return res
+		else
+			return false, ERRSTR[err] or "No data"
+		end
+	else
+		return false, "Invalid argument"
+	end
+end
+
+local function _get(self, operation, config, section, option)
+	if section == nil then
+		return nil
+	elseif type(option) == "string" and option:byte(1) ~= 46 then
+		local rv, err = call(operation, {
+			config  = config,
+			section = section,
+			option  = option
+		})
+
+		if type(rv) == "table" then
+			return rv.value or nil
+		elseif err then
+			return false, ERRSTR[err]
+		else
+			return nil
+		end
+	elseif option == nil then
+		local values = self:get_all(config, section)
+		if values then
+			return values[".type"], values[".name"]
+		else
+			return nil
+		end
+	else
+		return false, "Invalid argument"
+	end
+end
+
+function get(self, ...)
+	return _get(self, "get", ...)
+end
+
+function get_state(self, ...)
+	return _get(self, "state", ...)
+end
+
+function get_all(self, config, section)
+	local rv, err = call("get", {
+		config  = config,
+		section = section
+	})
+
+	if type(rv) == "table" and type(rv.values) == "table" then
+		return rv.values
+	elseif err then
+		return false, ERRSTR[err]
+	else
+		return nil
+	end
+end
+
+function get_bool(self, ...)
+	local val = self:get(...)
+	return (val == "1" or val == "true" or val == "yes" or val == "on")
+end
+
+function get_first(self, config, stype, option, default)
+	local rv = default
+
+	self:foreach(config, stype, function(s)
+		local val = not option and s[".name"] or s[option]
+
+		if type(default) == "number" then
+			val = tonumber(val)
+		elseif type(default) == "boolean" then
+			val = (val == "1" or val == "true" or
+			       val == "yes" or val == "on")
+		end
+
+		if val ~= nil then
+			rv = val
+			return false
+		end
+	end)
+
+	return rv
+end
+
+function get_list(self, config, section, option)
+	if config and section and option then
+		local val = self:get(config, section, option)
+		return (type(val) == "table" and val or { val })
+	end
+	return { }
+end
+
+
+function section(self, config, stype, name, values)
+	local rv, err = call("add", {
+		config = config,
+		type   = stype,
+		name   = name,
+		values = values
+	})
+
+	if type(rv) == "table" then
+		return rv.section
+	elseif err then
+		return false, ERRSTR[err]
+	else
+		return nil
+	end
+end
+
+
+function add(self, config, stype)
+	return self:section(config, stype)
+end
+
+function set(self, config, section, option, ...)
+	if select('#', ...) == 0 then
+		local sname, err = self:section(config, option, section)
+		return (not not sname), err
+	else
+		local _, err = call("set", {
+			config  = config,
+			section = section,
+			values  = { [option] = select(1, ...) }
+		})
+		return (err == nil), ERRSTR[err]
+	end
+end
+
+function set_list(self, config, section, option, value)
+	if section == nil or option == nil then
+		return false
+	elseif value == nil or (type(value) == "table" and #value == 0) then
+		return self:delete(config, section, option)
+	elseif type(value) == "table" then
+		return self:set(config, section, option, value)
+	else
+		return self:set(config, section, option, { value })
+	end
+end
+
+function tset(self, config, section, values)
+	local _, err = call("set", {
+		config  = config,
+		section = section,
+		values  = values
+	})
+	return (err == nil), ERRSTR[err]
+end
+
+function reorder(self, config, section, index)
+	local sections
+
+	if type(section) == "string" and type(index) == "number" then
+		local pos = 0
+
+		sections = { }
+
+		self:foreach(config, nil, function(s)
+			if pos == index then
+				pos = pos + 1
+			end
+
+			if s[".name"] ~= section then
+				pos = pos + 1
+				sections[pos] = s[".name"]
+			else
+				sections[index + 1] = section
+			end
+		end)
+	elseif type(section) == "table" then
+		sections = section
+	else
+		return false, "Invalid argument"
+	end
+
+	local _, err = call("order", {
+		config   = config,
+		sections = sections
+	})
+
+	return (err == nil), ERRSTR[err]
+end
+
+
+function delete(self, config, section, option)
+	local _, err = call("delete", {
+		config  = config,
+		section = section,
+		option  = option
+	})
+	return (err == nil), ERRSTR[err]
+end
+
+function delete_all(self, config, stype, comparator)
+	local _, err
+	if type(comparator) == "table" then
+		_, err = call("delete", {
+			config = config,
+			type   = stype,
+			match  = comparator
+		})
+	elseif type(comparator) == "function" then
+		local rv = call("get", {
+			config = config,
+			type   = stype
+		})
+
+		if type(rv) == "table" and type(rv.values) == "table" then
+			local sname, section
+			for sname, section in pairs(rv.values) do
+				if comparator(section) then
+					_, err = call("delete", {
+						config  = config,
+						section = sname
+					})
+				end
+			end
+		end
+	elseif comparator == nil then
+		_, err = call("delete", {
+			config  = config,
+			type    = stype
+		})
+	else
+		return false, "Invalid argument"
+	end
+
+	return (err == nil), ERRSTR[err]
+end
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/store.lua b/ucentral-client/rootfs/usr/lib/lua/luci/store.lua
new file mode 100644
index 0000000..a735981
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/store.lua
@@ -0,0 +1,6 @@
+-- Copyright 2009 Steven Barth <steven@midlink.org>
+-- Copyright 2009 Jo-Philipp Wich <jow@openwrt.org>
+-- Licensed to the public under the Apache License 2.0.
+
+local util = require "luci.util"
+module("luci.store", util.threadlocal)
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/sys.lua b/ucentral-client/rootfs/usr/lib/lua/luci/sys.lua
new file mode 100644
index 0000000..e6eb762
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/sys.lua
@@ -0,0 +1,615 @@
+-- Copyright 2008 Steven Barth <steven@midlink.org>
+-- Licensed to the public under the Apache License 2.0.
+
+local io     = require "io"
+local os     = require "os"
+local table  = require "table"
+local nixio  = require "nixio"
+local fs     = require "nixio.fs"
+local uci    = require "luci.model.uci"
+
+local luci  = {}
+luci.util   = require "luci.util"
+luci.ip     = require "luci.ip"
+
+local tonumber, ipairs, pairs, pcall, type, next, setmetatable, require, select, unpack =
+	tonumber, ipairs, pairs, pcall, type, next, setmetatable, require, select, unpack
+
+
+module "luci.sys"
+
+function call(...)
+	return os.execute(...) / 256
+end
+
+exec = luci.util.exec
+
+-- containing the whole environment is returned otherwise this function returns
+-- the corresponding string value for the given name or nil if no such variable
+-- exists.
+getenv = nixio.getenv
+
+function hostname(newname)
+	if type(newname) == "string" and #newname > 0 then
+		fs.writefile( "/proc/sys/kernel/hostname", newname )
+		return newname
+	else
+		return nixio.uname().nodename
+	end
+end
+
+function httpget(url, stream, target)
+	if not target then
+		local source = stream and io.popen or luci.util.exec
+		return source("wget -qO- %s" % luci.util.shellquote(url))
+	else
+		return os.execute("wget -qO %s %s" %
+			{luci.util.shellquote(target), luci.util.shellquote(url)})
+	end
+end
+
+function reboot()
+	return os.execute("reboot >/dev/null 2>&1")
+end
+
+function syslog()
+	return luci.util.exec("logread")
+end
+
+function dmesg()
+	return luci.util.exec("dmesg")
+end
+
+function uniqueid(bytes)
+	local rand = fs.readfile("/dev/urandom", bytes)
+	return rand and nixio.bin.hexlify(rand)
+end
+
+function uptime()
+	return nixio.sysinfo().uptime
+end
+
+
+net = {}
+
+local function _nethints(what, callback)
+	local _, k, e, mac, ip, name, duid, iaid
+	local cur = uci.cursor()
+	local ifn = { }
+	local hosts = { }
+	local lookup = { }
+
+	local function _add(i, ...)
+		local k = select(i, ...)
+		if k then
+			if not hosts[k] then hosts[k] = { } end
+			hosts[k][1] = select(1, ...) or hosts[k][1]
+			hosts[k][2] = select(2, ...) or hosts[k][2]
+			hosts[k][3] = select(3, ...) or hosts[k][3]
+			hosts[k][4] = select(4, ...) or hosts[k][4]
+		end
+	end
+
+	luci.ip.neighbors(nil, function(neigh)
+		if neigh.mac and neigh.family == 4 then
+			_add(what, neigh.mac:string(), neigh.dest:string(), nil, nil)
+		elseif neigh.mac and neigh.family == 6 then
+			_add(what, neigh.mac:string(), nil, neigh.dest:string(), nil)
+		end
+	end)
+
+	if fs.access("/etc/ethers") then
+		for e in io.lines("/etc/ethers") do
+			mac, name = e:match("^([a-fA-F0-9:-]+)%s+(%S+)")
+			mac = luci.ip.checkmac(mac)
+			if mac and name then
+				if luci.ip.checkip4(name) then
+					_add(what, mac, name, nil, nil)
+				else
+					_add(what, mac, nil, nil, name)
+				end
+			end
+		end
+	end
+
+	cur:foreach("dhcp", "dnsmasq",
+		function(s)
+			if s.leasefile and fs.access(s.leasefile) then
+				for e in io.lines(s.leasefile) do
+					mac, ip, name = e:match("^%d+ (%S+) (%S+) (%S+)")
+					mac = luci.ip.checkmac(mac)
+					if mac and ip then
+						_add(what, mac, ip, nil, name ~= "*" and name)
+					end
+				end
+			end
+		end
+	)
+
+	cur:foreach("dhcp", "odhcpd",
+		function(s)
+			if type(s.leasefile) == "string" and fs.access(s.leasefile) then
+				for e in io.lines(s.leasefile) do
+					duid, iaid, name, _, ip = e:match("^# %S+ (%S+) (%S+) (%S+) (-?%d+) %S+ %S+ ([0-9a-f:.]+)/[0-9]+")
+					mac = net.duid_to_mac(duid)
+					if mac then
+						if ip and iaid == "ipv4" then
+							_add(what, mac, ip, nil, name ~= "*" and name)
+						elseif ip then
+							_add(what, mac, nil, ip, name ~= "*" and name)
+						end
+					end
+				end
+			end
+		end
+	)
+
+	cur:foreach("dhcp", "host",
+		function(s)
+			for mac in luci.util.imatch(s.mac) do
+				mac = luci.ip.checkmac(mac)
+				if mac then
+					_add(what, mac, s.ip, nil, s.name)
+				end
+			end
+		end)
+
+	for _, e in ipairs(nixio.getifaddrs()) do
+		if e.name ~= "lo" then
+			ifn[e.name] = ifn[e.name] or { }
+			if e.family == "packet" and e.addr and #e.addr == 17 then
+				ifn[e.name][1] = e.addr:upper()
+			elseif e.family == "inet" then
+				ifn[e.name][2] = e.addr
+			elseif e.family == "inet6" then
+				ifn[e.name][3] = e.addr
+			end
+		end
+	end
+
+	for _, e in pairs(ifn) do
+		if e[what] and (e[2] or e[3]) then
+			_add(what, e[1], e[2], e[3], e[4])
+		end
+	end
+
+	for _, e in pairs(hosts) do
+		lookup[#lookup+1] = (what > 1) and e[what] or (e[2] or e[3])
+	end
+
+	if #lookup > 0 then
+		lookup = luci.util.ubus("network.rrdns", "lookup", {
+			addrs   = lookup,
+			timeout = 250,
+			limit   = 1000
+		}) or { }
+	end
+
+	for _, e in luci.util.kspairs(hosts) do
+		callback(e[1], e[2], e[3], lookup[e[2]] or lookup[e[3]] or e[4])
+	end
+end
+
+--          Each entry contains the values in the following order:
+--          [ "mac", "name" ]
+function net.mac_hints(callback)
+	if callback then
+		_nethints(1, function(mac, v4, v6, name)
+			name = name or v4
+			if name and name ~= mac then
+				callback(mac, name or v4)
+			end
+		end)
+	else
+		local rv = { }
+		_nethints(1, function(mac, v4, v6, name)
+			name = name or v4
+			if name and name ~= mac then
+				rv[#rv+1] = { mac, name or v4 }
+			end
+		end)
+		return rv
+	end
+end
+
+--          Each entry contains the values in the following order:
+--          [ "ip", "name" ]
+function net.ipv4_hints(callback)
+	if callback then
+		_nethints(2, function(mac, v4, v6, name)
+			name = name or mac
+			if name and name ~= v4 then
+				callback(v4, name)
+			end
+		end)
+	else
+		local rv = { }
+		_nethints(2, function(mac, v4, v6, name)
+			name = name or mac
+			if name and name ~= v4 then
+				rv[#rv+1] = { v4, name }
+			end
+		end)
+		return rv
+	end
+end
+
+--          Each entry contains the values in the following order:
+--          [ "ip", "name" ]
+function net.ipv6_hints(callback)
+	if callback then
+		_nethints(3, function(mac, v4, v6, name)
+			name = name or mac
+			if name and name ~= v6 then
+				callback(v6, name)
+			end
+		end)
+	else
+		local rv = { }
+		_nethints(3, function(mac, v4, v6, name)
+			name = name or mac
+			if name and name ~= v6 then
+				rv[#rv+1] = { v6, name }
+			end
+		end)
+		return rv
+	end
+end
+
+function net.host_hints(callback)
+	if callback then
+		_nethints(1, function(mac, v4, v6, name)
+			if mac and mac ~= "00:00:00:00:00:00" and (v4 or v6 or name) then
+				callback(mac, v4, v6, name)
+			end
+		end)
+	else
+		local rv = { }
+		_nethints(1, function(mac, v4, v6, name)
+			if mac and mac ~= "00:00:00:00:00:00" and (v4 or v6 or name) then
+				local e = { }
+				if v4   then e.ipv4 = v4   end
+				if v6   then e.ipv6 = v6   end
+				if name then e.name = name end
+				rv[mac] = e
+			end
+		end)
+		return rv
+	end
+end
+
+function net.conntrack(callback)
+	local ok, nfct = pcall(io.lines, "/proc/net/nf_conntrack")
+	if not ok or not nfct then
+		return nil
+	end
+
+	local line, connt = nil, (not callback) and { }
+	for line in nfct do
+		local fam, l3, l4, rest =
+			line:match("^(ipv[46]) +(%d+) +%S+ +(%d+) +(.+)$")
+
+		local timeout, tuples = rest:match("^(%d+) +(.+)$")
+
+		if not tuples then
+			tuples = rest
+		end
+
+		if fam and l3 and l4 and not tuples:match("^TIME_WAIT ") then
+			l4 = nixio.getprotobynumber(l4)
+
+			local entry = {
+				bytes = 0,
+				packets = 0,
+				layer3 = fam,
+				layer4 = l4 and l4.name or "unknown",
+				timeout = tonumber(timeout, 10)
+			}
+
+			local key, val
+			for key, val in tuples:gmatch("(%w+)=(%S+)") do
+				if key == "bytes" or key == "packets" then
+					entry[key] = entry[key] + tonumber(val, 10)
+				elseif key == "src" or key == "dst" then
+					if entry[key] == nil then
+						entry[key] = luci.ip.new(val):string()
+					end
+				elseif key == "sport" or key == "dport" then
+					if entry[key] == nil then
+						entry[key] = val
+					end
+				elseif val then
+					entry[key] = val
+				end
+			end
+
+			if callback then
+				callback(entry)
+			else
+				connt[#connt+1] = entry
+			end
+		end
+	end
+
+	return callback and true or connt
+end
+
+function net.devices()
+	local devs = {}
+	local seen = {}
+	for k, v in ipairs(nixio.getifaddrs()) do
+		if v.name and not seen[v.name] then
+			seen[v.name] = true
+			devs[#devs+1] = v.name
+		end
+	end
+	return devs
+end
+
+function net.duid_to_mac(duid)
+	local b1, b2, b3, b4, b5, b6
+
+	if type(duid) == "string" then
+		-- DUID-LLT / Ethernet
+		if #duid == 28 then
+			b1, b2, b3, b4, b5, b6 = duid:match("^00010001(%x%x)(%x%x)(%x%x)(%x%x)(%x%x)(%x%x)%x%x%x%x%x%x%x%x$")
+
+		-- DUID-LL / Ethernet
+		elseif #duid == 20 then
+			b1, b2, b3, b4, b5, b6 = duid:match("^00030001(%x%x)(%x%x)(%x%x)(%x%x)(%x%x)(%x%x)$")
+
+		-- DUID-LL / Ethernet (Without Header)
+		elseif #duid == 12 then
+			b1, b2, b3, b4, b5, b6 = duid:match("^(%x%x)(%x%x)(%x%x)(%x%x)(%x%x)(%x%x)$")
+		end
+	end
+
+	return b1 and luci.ip.checkmac(table.concat({ b1, b2, b3, b4, b5, b6 }, ":"))
+end
+
+process = {}
+
+function process.info(key)
+	local s = {uid = nixio.getuid(), gid = nixio.getgid()}
+	return not key and s or s[key]
+end
+
+function process.list()
+	local data = {}
+	local k
+	local ps = luci.util.execi("/bin/busybox top -bn1")
+
+	if not ps then
+		return
+	end
+
+	for line in ps do
+		local pid, ppid, user, stat, vsz, mem, cpu, cmd = line:match(
+			"^ *(%d+) +(%d+) +(%S.-%S) +([RSDZTW][<NW ][<N ]) +(%d+m?) +(%d+%%) +(%d+%%) +(.+)"
+		)
+
+		local idx = tonumber(pid)
+		if idx and not cmd:match("top %-bn1") then
+			data[idx] = {
+				['PID']     = pid,
+				['PPID']    = ppid,
+				['USER']    = user,
+				['STAT']    = stat,
+				['VSZ']     = vsz,
+				['%MEM']    = mem,
+				['%CPU']    = cpu,
+				['COMMAND'] = cmd
+			}
+		end
+	end
+
+	return data
+end
+
+function process.setgroup(gid)
+	return nixio.setgid(gid)
+end
+
+function process.setuser(uid)
+	return nixio.setuid(uid)
+end
+
+process.signal = nixio.kill
+
+local function xclose(fd)
+	if fd and fd:fileno() > 2 then
+		fd:close()
+	end
+end
+
+function process.exec(command, stdout, stderr, nowait)
+	local out_r, out_w, err_r, err_w
+	if stdout then out_r, out_w = nixio.pipe() end
+	if stderr then err_r, err_w = nixio.pipe() end
+
+	local pid = nixio.fork()
+	if pid == 0 then
+		nixio.chdir("/")
+
+		local null = nixio.open("/dev/null", "w+")
+		if null then
+			nixio.dup(out_w or null, nixio.stdout)
+			nixio.dup(err_w or null, nixio.stderr)
+			nixio.dup(null, nixio.stdin)
+			xclose(out_w)
+			xclose(out_r)
+			xclose(err_w)
+			xclose(err_r)
+			xclose(null)
+		end
+
+		nixio.exec(unpack(command))
+		os.exit(-1)
+	end
+
+	local _, pfds, rv = nil, {}, { code = -1, pid = pid }
+
+	xclose(out_w)
+	xclose(err_w)
+
+	if out_r then
+		pfds[#pfds+1] = {
+			fd = out_r,
+			cb = type(stdout) == "function" and stdout,
+			name = "stdout",
+			events = nixio.poll_flags("in", "err", "hup")
+		}
+	end
+
+	if err_r then
+		pfds[#pfds+1] = {
+			fd = err_r,
+			cb = type(stderr) == "function" and stderr,
+			name = "stderr",
+			events = nixio.poll_flags("in", "err", "hup")
+		}
+	end
+
+	while #pfds > 0 do
+		local nfds, err = nixio.poll(pfds, -1)
+		if not nfds and err ~= nixio.const.EINTR then
+			break
+		end
+
+		local i
+		for i = #pfds, 1, -1 do
+			local rfd = pfds[i]
+			if rfd.revents > 0 then
+				local chunk, err = rfd.fd:read(4096)
+				if chunk and #chunk > 0 then
+					if rfd.cb then
+						rfd.cb(chunk)
+					else
+						rfd.buf = rfd.buf or {}
+						rfd.buf[#rfd.buf + 1] = chunk
+					end
+				else
+					table.remove(pfds, i)
+					if rfd.buf then
+						rv[rfd.name] = table.concat(rfd.buf, "")
+					end
+					rfd.fd:close()
+				end
+			end
+		end
+	end
+
+	if not nowait then
+		_, _, rv.code = nixio.waitpid(pid)
+	end
+
+	return rv
+end
+
+
+user = {}
+
+--				{ "uid", "gid", "name", "passwd", "dir", "shell", "gecos" }
+user.getuser = nixio.getpw
+
+function user.getpasswd(username)
+	local pwe = nixio.getsp and nixio.getsp(username) or nixio.getpw(username)
+	local pwh = pwe and (pwe.pwdp or pwe.passwd)
+	if not pwh or #pwh < 1 then
+		return nil, pwe
+	else
+		return pwh, pwe
+	end
+end
+
+function user.checkpasswd(username, pass)
+	local pwh, pwe = user.getpasswd(username)
+	if pwe then
+		return (pwh == nil or nixio.crypt(pass, pwh) == pwh)
+	end
+	return false
+end
+
+function user.setpasswd(username, password)
+	return os.execute("(echo %s; sleep 1; echo %s) | passwd %s >/dev/null 2>&1" %{
+		luci.util.shellquote(password),
+		luci.util.shellquote(password),
+		luci.util.shellquote(username)
+	})
+end
+
+
+wifi = {}
+
+function wifi.getiwinfo(ifname)
+	local ntm = require "luci.model.network"
+
+	ntm.init()
+
+	local wnet = ntm:get_wifinet(ifname)
+	if wnet and wnet.iwinfo then
+		return wnet.iwinfo
+	end
+
+	local wdev = ntm:get_wifidev(ifname)
+	if wdev and wdev.iwinfo then
+		return wdev.iwinfo
+	end
+
+	return { ifname = ifname }
+end
+
+
+init = {}
+init.dir = "/etc/init.d/"
+
+function init.names()
+	local names = { }
+	for name in fs.glob(init.dir.."*") do
+		names[#names+1] = fs.basename(name)
+	end
+	return names
+end
+
+function init.index(name)
+	name = fs.basename(name)
+	if fs.access(init.dir..name) then
+		return call("env -i sh -c 'source %s%s enabled; exit ${START:-255}' >/dev/null"
+			%{ init.dir, name })
+	end
+end
+
+local function init_action(action, name)
+	name = fs.basename(name)
+	if fs.access(init.dir..name) then
+		return call("env -i %s%s %s >/dev/null" %{ init.dir, name, action })
+	end
+end
+
+function init.enabled(name)
+	return (init_action("enabled", name) == 0)
+end
+
+function init.enable(name)
+	return (init_action("enable", name) == 0)
+end
+
+function init.disable(name)
+	return (init_action("disable", name) == 0)
+end
+
+function init.start(name)
+	return (init_action("start", name) == 0)
+end
+
+function init.stop(name)
+	return (init_action("stop", name) == 0)
+end
+
+function init.restart(name)
+	return (init_action("restart", name) == 0)
+end
+
+function init.reload(name)
+	return (init_action("reload", name) == 0)
+end
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/sys/zoneinfo.lua b/ucentral-client/rootfs/usr/lib/lua/luci/sys/zoneinfo.lua
new file mode 100644
index 0000000..aa054a2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/sys/zoneinfo.lua
@@ -0,0 +1,19 @@
+-- Licensed to the public under the Apache License 2.0.
+
+local setmetatable, require, rawget, rawset = setmetatable, require, rawget, rawset
+
+module "luci.sys.zoneinfo"
+
+setmetatable(_M, {
+	__index = function(t, k)
+		if k == "TZ" and not rawget(t, k) then
+			local m = require "luci.sys.zoneinfo.tzdata"
+			rawset(t, k, rawget(m, k))
+		elseif k == "OFFSET" and not rawget(t, k) then
+			local m = require "luci.sys.zoneinfo.tzoffset"
+			rawset(t, k, rawget(m, k))
+		end
+
+		return rawget(t, k)
+	end
+})
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/sys/zoneinfo/tzdata.lua b/ucentral-client/rootfs/usr/lib/lua/luci/sys/zoneinfo/tzdata.lua
new file mode 100644
index 0000000..3ef2f4c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/sys/zoneinfo/tzdata.lua
@@ -0,0 +1,455 @@
+-- Licensed to the public under the Apache License 2.0.
+
+module "luci.sys.zoneinfo.tzdata"
+
+TZ = {
+	{ 'Africa/Abidjan', 'GMT0' },
+	{ 'Africa/Accra', 'GMT0' },
+	{ 'Africa/Addis Ababa', 'EAT-3' },
+	{ 'Africa/Algiers', 'CET-1' },
+	{ 'Africa/Asmara', 'EAT-3' },
+	{ 'Africa/Bamako', 'GMT0' },
+	{ 'Africa/Bangui', 'WAT-1' },
+	{ 'Africa/Banjul', 'GMT0' },
+	{ 'Africa/Bissau', 'GMT0' },
+	{ 'Africa/Blantyre', 'CAT-2' },
+	{ 'Africa/Brazzaville', 'WAT-1' },
+	{ 'Africa/Bujumbura', 'CAT-2' },
+	{ 'Africa/Cairo', 'EET-2' },
+	{ 'Africa/Casablanca', '<+01>-1' },
+	{ 'Africa/Ceuta', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Africa/Conakry', 'GMT0' },
+	{ 'Africa/Dakar', 'GMT0' },
+	{ 'Africa/Dar es Salaam', 'EAT-3' },
+	{ 'Africa/Djibouti', 'EAT-3' },
+	{ 'Africa/Douala', 'WAT-1' },
+	{ 'Africa/El Aaiun', '<+01>-1' },
+	{ 'Africa/Freetown', 'GMT0' },
+	{ 'Africa/Gaborone', 'CAT-2' },
+	{ 'Africa/Harare', 'CAT-2' },
+	{ 'Africa/Johannesburg', 'SAST-2' },
+	{ 'Africa/Juba', 'CAT-2' },
+	{ 'Africa/Kampala', 'EAT-3' },
+	{ 'Africa/Khartoum', 'CAT-2' },
+	{ 'Africa/Kigali', 'CAT-2' },
+	{ 'Africa/Kinshasa', 'WAT-1' },
+	{ 'Africa/Lagos', 'WAT-1' },
+	{ 'Africa/Libreville', 'WAT-1' },
+	{ 'Africa/Lome', 'GMT0' },
+	{ 'Africa/Luanda', 'WAT-1' },
+	{ 'Africa/Lubumbashi', 'CAT-2' },
+	{ 'Africa/Lusaka', 'CAT-2' },
+	{ 'Africa/Malabo', 'WAT-1' },
+	{ 'Africa/Maputo', 'CAT-2' },
+	{ 'Africa/Maseru', 'SAST-2' },
+	{ 'Africa/Mbabane', 'SAST-2' },
+	{ 'Africa/Mogadishu', 'EAT-3' },
+	{ 'Africa/Monrovia', 'GMT0' },
+	{ 'Africa/Nairobi', 'EAT-3' },
+	{ 'Africa/Ndjamena', 'WAT-1' },
+	{ 'Africa/Niamey', 'WAT-1' },
+	{ 'Africa/Nouakchott', 'GMT0' },
+	{ 'Africa/Ouagadougou', 'GMT0' },
+	{ 'Africa/Porto-Novo', 'WAT-1' },
+	{ 'Africa/Sao Tome', 'GMT0' },
+	{ 'Africa/Tripoli', 'EET-2' },
+	{ 'Africa/Tunis', 'CET-1' },
+	{ 'Africa/Windhoek', 'CAT-2' },
+	{ 'America/Adak', 'HST10HDT,M3.2.0,M11.1.0' },
+	{ 'America/Anchorage', 'AKST9AKDT,M3.2.0,M11.1.0' },
+	{ 'America/Anguilla', 'AST4' },
+	{ 'America/Antigua', 'AST4' },
+	{ 'America/Araguaina', '<-03>3' },
+	{ 'America/Argentina/Buenos Aires', '<-03>3' },
+	{ 'America/Argentina/Catamarca', '<-03>3' },
+	{ 'America/Argentina/Cordoba', '<-03>3' },
+	{ 'America/Argentina/Jujuy', '<-03>3' },
+	{ 'America/Argentina/La Rioja', '<-03>3' },
+	{ 'America/Argentina/Mendoza', '<-03>3' },
+	{ 'America/Argentina/Rio Gallegos', '<-03>3' },
+	{ 'America/Argentina/Salta', '<-03>3' },
+	{ 'America/Argentina/San Juan', '<-03>3' },
+	{ 'America/Argentina/San Luis', '<-03>3' },
+	{ 'America/Argentina/Tucuman', '<-03>3' },
+	{ 'America/Argentina/Ushuaia', '<-03>3' },
+	{ 'America/Aruba', 'AST4' },
+	{ 'America/Asuncion', '<-04>4<-03>,M10.1.0/0,M3.4.0/0' },
+	{ 'America/Atikokan', 'EST5' },
+	{ 'America/Bahia', '<-03>3' },
+	{ 'America/Bahia Banderas', 'CST6CDT,M4.1.0,M10.5.0' },
+	{ 'America/Barbados', 'AST4' },
+	{ 'America/Belem', '<-03>3' },
+	{ 'America/Belize', 'CST6' },
+	{ 'America/Blanc-Sablon', 'AST4' },
+	{ 'America/Boa Vista', '<-04>4' },
+	{ 'America/Bogota', '<-05>5' },
+	{ 'America/Boise', 'MST7MDT,M3.2.0,M11.1.0' },
+	{ 'America/Cambridge Bay', 'MST7MDT,M3.2.0,M11.1.0' },
+	{ 'America/Campo Grande', '<-04>4' },
+	{ 'America/Cancun', 'EST5' },
+	{ 'America/Caracas', '<-04>4' },
+	{ 'America/Cayenne', '<-03>3' },
+	{ 'America/Cayman', 'EST5' },
+	{ 'America/Chicago', 'CST6CDT,M3.2.0,M11.1.0' },
+	{ 'America/Chihuahua', 'MST7MDT,M4.1.0,M10.5.0' },
+	{ 'America/Costa Rica', 'CST6' },
+	{ 'America/Creston', 'MST7' },
+	{ 'America/Cuiaba', '<-04>4' },
+	{ 'America/Curacao', 'AST4' },
+	{ 'America/Danmarkshavn', 'GMT0' },
+	{ 'America/Dawson', 'MST7' },
+	{ 'America/Dawson Creek', 'MST7' },
+	{ 'America/Denver', 'MST7MDT,M3.2.0,M11.1.0' },
+	{ 'America/Detroit', 'EST5EDT,M3.2.0,M11.1.0' },
+	{ 'America/Dominica', 'AST4' },
+	{ 'America/Edmonton', 'MST7MDT,M3.2.0,M11.1.0' },
+	{ 'America/Eirunepe', '<-05>5' },
+	{ 'America/El Salvador', 'CST6' },
+	{ 'America/Fort Nelson', 'MST7' },
+	{ 'America/Fortaleza', '<-03>3' },
+	{ 'America/Glace Bay', 'AST4ADT,M3.2.0,M11.1.0' },
+	{ 'America/Goose Bay', 'AST4ADT,M3.2.0,M11.1.0' },
+	{ 'America/Grand Turk', 'EST5EDT,M3.2.0,M11.1.0' },
+	{ 'America/Grenada', 'AST4' },
+	{ 'America/Guadeloupe', 'AST4' },
+	{ 'America/Guatemala', 'CST6' },
+	{ 'America/Guayaquil', '<-05>5' },
+	{ 'America/Guyana', '<-04>4' },
+	{ 'America/Halifax', 'AST4ADT,M3.2.0,M11.1.0' },
+	{ 'America/Havana', 'CST5CDT,M3.2.0/0,M11.1.0/1' },
+	{ 'America/Hermosillo', 'MST7' },
+	{ 'America/Indiana/Indianapolis', 'EST5EDT,M3.2.0,M11.1.0' },
+	{ 'America/Indiana/Knox', 'CST6CDT,M3.2.0,M11.1.0' },
+	{ 'America/Indiana/Marengo', 'EST5EDT,M3.2.0,M11.1.0' },
+	{ 'America/Indiana/Petersburg', 'EST5EDT,M3.2.0,M11.1.0' },
+	{ 'America/Indiana/Tell City', 'CST6CDT,M3.2.0,M11.1.0' },
+	{ 'America/Indiana/Vevay', 'EST5EDT,M3.2.0,M11.1.0' },
+	{ 'America/Indiana/Vincennes', 'EST5EDT,M3.2.0,M11.1.0' },
+	{ 'America/Indiana/Winamac', 'EST5EDT,M3.2.0,M11.1.0' },
+	{ 'America/Inuvik', 'MST7MDT,M3.2.0,M11.1.0' },
+	{ 'America/Iqaluit', 'EST5EDT,M3.2.0,M11.1.0' },
+	{ 'America/Jamaica', 'EST5' },
+	{ 'America/Juneau', 'AKST9AKDT,M3.2.0,M11.1.0' },
+	{ 'America/Kentucky/Louisville', 'EST5EDT,M3.2.0,M11.1.0' },
+	{ 'America/Kentucky/Monticello', 'EST5EDT,M3.2.0,M11.1.0' },
+	{ 'America/Kralendijk', 'AST4' },
+	{ 'America/La Paz', '<-04>4' },
+	{ 'America/Lima', '<-05>5' },
+	{ 'America/Los Angeles', 'PST8PDT,M3.2.0,M11.1.0' },
+	{ 'America/Lower Princes', 'AST4' },
+	{ 'America/Maceio', '<-03>3' },
+	{ 'America/Managua', 'CST6' },
+	{ 'America/Manaus', '<-04>4' },
+	{ 'America/Marigot', 'AST4' },
+	{ 'America/Martinique', 'AST4' },
+	{ 'America/Matamoros', 'CST6CDT,M3.2.0,M11.1.0' },
+	{ 'America/Mazatlan', 'MST7MDT,M4.1.0,M10.5.0' },
+	{ 'America/Menominee', 'CST6CDT,M3.2.0,M11.1.0' },
+	{ 'America/Merida', 'CST6CDT,M4.1.0,M10.5.0' },
+	{ 'America/Metlakatla', 'AKST9AKDT,M3.2.0,M11.1.0' },
+	{ 'America/Mexico City', 'CST6CDT,M4.1.0,M10.5.0' },
+	{ 'America/Miquelon', '<-03>3<-02>,M3.2.0,M11.1.0' },
+	{ 'America/Moncton', 'AST4ADT,M3.2.0,M11.1.0' },
+	{ 'America/Monterrey', 'CST6CDT,M4.1.0,M10.5.0' },
+	{ 'America/Montevideo', '<-03>3' },
+	{ 'America/Montserrat', 'AST4' },
+	{ 'America/Nassau', 'EST5EDT,M3.2.0,M11.1.0' },
+	{ 'America/New York', 'EST5EDT,M3.2.0,M11.1.0' },
+	{ 'America/Nipigon', 'EST5EDT,M3.2.0,M11.1.0' },
+	{ 'America/Nome', 'AKST9AKDT,M3.2.0,M11.1.0' },
+	{ 'America/Noronha', '<-02>2' },
+	{ 'America/North Dakota/Beulah', 'CST6CDT,M3.2.0,M11.1.0' },
+	{ 'America/North Dakota/Center', 'CST6CDT,M3.2.0,M11.1.0' },
+	{ 'America/North Dakota/New Salem', 'CST6CDT,M3.2.0,M11.1.0' },
+	{ 'America/Nuuk', '<-03>3<-02>,M3.5.0/-2,M10.5.0/-1' },
+	{ 'America/Ojinaga', 'MST7MDT,M3.2.0,M11.1.0' },
+	{ 'America/Panama', 'EST5' },
+	{ 'America/Pangnirtung', 'EST5EDT,M3.2.0,M11.1.0' },
+	{ 'America/Paramaribo', '<-03>3' },
+	{ 'America/Phoenix', 'MST7' },
+	{ 'America/Port of Spain', 'AST4' },
+	{ 'America/Port-au-Prince', 'EST5EDT,M3.2.0,M11.1.0' },
+	{ 'America/Porto Velho', '<-04>4' },
+	{ 'America/Puerto Rico', 'AST4' },
+	{ 'America/Punta Arenas', '<-03>3' },
+	{ 'America/Rainy River', 'CST6CDT,M3.2.0,M11.1.0' },
+	{ 'America/Rankin Inlet', 'CST6CDT,M3.2.0,M11.1.0' },
+	{ 'America/Recife', '<-03>3' },
+	{ 'America/Regina', 'CST6' },
+	{ 'America/Resolute', 'CST6CDT,M3.2.0,M11.1.0' },
+	{ 'America/Rio Branco', '<-05>5' },
+	{ 'America/Santarem', '<-03>3' },
+	{ 'America/Santiago', '<-04>4<-03>,M9.1.6/24,M4.1.6/24' },
+	{ 'America/Santo Domingo', 'AST4' },
+	{ 'America/Sao Paulo', '<-03>3' },
+	{ 'America/Scoresbysund', '<-01>1<+00>,M3.5.0/0,M10.5.0/1' },
+	{ 'America/Sitka', 'AKST9AKDT,M3.2.0,M11.1.0' },
+	{ 'America/St Barthelemy', 'AST4' },
+	{ 'America/St Johns', 'NST3:30NDT,M3.2.0,M11.1.0' },
+	{ 'America/St Kitts', 'AST4' },
+	{ 'America/St Lucia', 'AST4' },
+	{ 'America/St Thomas', 'AST4' },
+	{ 'America/St Vincent', 'AST4' },
+	{ 'America/Swift Current', 'CST6' },
+	{ 'America/Tegucigalpa', 'CST6' },
+	{ 'America/Thule', 'AST4ADT,M3.2.0,M11.1.0' },
+	{ 'America/Thunder Bay', 'EST5EDT,M3.2.0,M11.1.0' },
+	{ 'America/Tijuana', 'PST8PDT,M3.2.0,M11.1.0' },
+	{ 'America/Toronto', 'EST5EDT,M3.2.0,M11.1.0' },
+	{ 'America/Tortola', 'AST4' },
+	{ 'America/Vancouver', 'PST8PDT,M3.2.0,M11.1.0' },
+	{ 'America/Whitehorse', 'MST7' },
+	{ 'America/Winnipeg', 'CST6CDT,M3.2.0,M11.1.0' },
+	{ 'America/Yakutat', 'AKST9AKDT,M3.2.0,M11.1.0' },
+	{ 'America/Yellowknife', 'MST7MDT,M3.2.0,M11.1.0' },
+	{ 'Antarctica/Casey', '<+11>-11' },
+	{ 'Antarctica/Davis', '<+07>-7' },
+	{ 'Antarctica/DumontDUrville', '<+10>-10' },
+	{ 'Antarctica/Macquarie', 'AEST-10AEDT,M10.1.0,M4.1.0/3' },
+	{ 'Antarctica/Mawson', '<+05>-5' },
+	{ 'Antarctica/McMurdo', 'NZST-12NZDT,M9.5.0,M4.1.0/3' },
+	{ 'Antarctica/Palmer', '<-03>3' },
+	{ 'Antarctica/Rothera', '<-03>3' },
+	{ 'Antarctica/Syowa', '<+03>-3' },
+	{ 'Antarctica/Troll', '<+00>0<+02>-2,M3.5.0/1,M10.5.0/3' },
+	{ 'Antarctica/Vostok', '<+06>-6' },
+	{ 'Arctic/Longyearbyen', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Asia/Aden', '<+03>-3' },
+	{ 'Asia/Almaty', '<+06>-6' },
+	{ 'Asia/Amman', '<+03>-3' },
+	{ 'Asia/Anadyr', '<+12>-12' },
+	{ 'Asia/Aqtau', '<+05>-5' },
+	{ 'Asia/Aqtobe', '<+05>-5' },
+	{ 'Asia/Ashgabat', '<+05>-5' },
+	{ 'Asia/Atyrau', '<+05>-5' },
+	{ 'Asia/Baghdad', '<+03>-3' },
+	{ 'Asia/Bahrain', '<+03>-3' },
+	{ 'Asia/Baku', '<+04>-4' },
+	{ 'Asia/Bangkok', '<+07>-7' },
+	{ 'Asia/Barnaul', '<+07>-7' },
+	{ 'Asia/Beirut', 'EET-2EEST,M3.5.0/0,M10.5.0/0' },
+	{ 'Asia/Bishkek', '<+06>-6' },
+	{ 'Asia/Brunei', '<+08>-8' },
+	{ 'Asia/Chita', '<+09>-9' },
+	{ 'Asia/Choibalsan', '<+08>-8' },
+	{ 'Asia/Colombo', '<+0530>-5:30' },
+	{ 'Asia/Damascus', '<+03>-3' },
+	{ 'Asia/Dhaka', '<+06>-6' },
+	{ 'Asia/Dili', '<+09>-9' },
+	{ 'Asia/Dubai', '<+04>-4' },
+	{ 'Asia/Dushanbe', '<+05>-5' },
+	{ 'Asia/Famagusta', 'EET-2EEST,M3.5.0/3,M10.5.0/4' },
+	{ 'Asia/Gaza', 'EET-2EEST,M3.4.4/50,M10.4.4/50' },
+	{ 'Asia/Hebron', 'EET-2EEST,M3.4.4/50,M10.4.4/50' },
+	{ 'Asia/Ho Chi Minh', '<+07>-7' },
+	{ 'Asia/Hong Kong', 'HKT-8' },
+	{ 'Asia/Hovd', '<+07>-7' },
+	{ 'Asia/Irkutsk', '<+08>-8' },
+	{ 'Asia/Jakarta', 'WIB-7' },
+	{ 'Asia/Jayapura', 'WIT-9' },
+	{ 'Asia/Jerusalem', 'IST-2IDT,M3.4.4/26,M10.5.0' },
+	{ 'Asia/Kabul', '<+0430>-4:30' },
+	{ 'Asia/Kamchatka', '<+12>-12' },
+	{ 'Asia/Karachi', 'PKT-5' },
+	{ 'Asia/Kathmandu', '<+0545>-5:45' },
+	{ 'Asia/Khandyga', '<+09>-9' },
+	{ 'Asia/Kolkata', 'IST-5:30' },
+	{ 'Asia/Krasnoyarsk', '<+07>-7' },
+	{ 'Asia/Kuala Lumpur', '<+08>-8' },
+	{ 'Asia/Kuching', '<+08>-8' },
+	{ 'Asia/Kuwait', '<+03>-3' },
+	{ 'Asia/Macau', 'CST-8' },
+	{ 'Asia/Magadan', '<+11>-11' },
+	{ 'Asia/Makassar', 'WITA-8' },
+	{ 'Asia/Manila', 'PST-8' },
+	{ 'Asia/Muscat', '<+04>-4' },
+	{ 'Asia/Nicosia', 'EET-2EEST,M3.5.0/3,M10.5.0/4' },
+	{ 'Asia/Novokuznetsk', '<+07>-7' },
+	{ 'Asia/Novosibirsk', '<+07>-7' },
+	{ 'Asia/Omsk', '<+06>-6' },
+	{ 'Asia/Oral', '<+05>-5' },
+	{ 'Asia/Phnom Penh', '<+07>-7' },
+	{ 'Asia/Pontianak', 'WIB-7' },
+	{ 'Asia/Pyongyang', 'KST-9' },
+	{ 'Asia/Qatar', '<+03>-3' },
+	{ 'Asia/Qostanay', '<+06>-6' },
+	{ 'Asia/Qyzylorda', '<+05>-5' },
+	{ 'Asia/Riyadh', '<+03>-3' },
+	{ 'Asia/Sakhalin', '<+11>-11' },
+	{ 'Asia/Samarkand', '<+05>-5' },
+	{ 'Asia/Seoul', 'KST-9' },
+	{ 'Asia/Shanghai', 'CST-8' },
+	{ 'Asia/Singapore', '<+08>-8' },
+	{ 'Asia/Srednekolymsk', '<+11>-11' },
+	{ 'Asia/Taipei', 'CST-8' },
+	{ 'Asia/Tashkent', '<+05>-5' },
+	{ 'Asia/Tbilisi', '<+04>-4' },
+	{ 'Asia/Tehran', '<+0330>-3:30' },
+	{ 'Asia/Thimphu', '<+06>-6' },
+	{ 'Asia/Tokyo', 'JST-9' },
+	{ 'Asia/Tomsk', '<+07>-7' },
+	{ 'Asia/Ulaanbaatar', '<+08>-8' },
+	{ 'Asia/Urumqi', '<+06>-6' },
+	{ 'Asia/Ust-Nera', '<+10>-10' },
+	{ 'Asia/Vientiane', '<+07>-7' },
+	{ 'Asia/Vladivostok', '<+10>-10' },
+	{ 'Asia/Yakutsk', '<+09>-9' },
+	{ 'Asia/Yangon', '<+0630>-6:30' },
+	{ 'Asia/Yekaterinburg', '<+05>-5' },
+	{ 'Asia/Yerevan', '<+04>-4' },
+	{ 'Atlantic/Azores', '<-01>1<+00>,M3.5.0/0,M10.5.0/1' },
+	{ 'Atlantic/Bermuda', 'AST4ADT,M3.2.0,M11.1.0' },
+	{ 'Atlantic/Canary', 'WET0WEST,M3.5.0/1,M10.5.0' },
+	{ 'Atlantic/Cape Verde', '<-01>1' },
+	{ 'Atlantic/Faroe', 'WET0WEST,M3.5.0/1,M10.5.0' },
+	{ 'Atlantic/Madeira', 'WET0WEST,M3.5.0/1,M10.5.0' },
+	{ 'Atlantic/Reykjavik', 'GMT0' },
+	{ 'Atlantic/South Georgia', '<-02>2' },
+	{ 'Atlantic/St Helena', 'GMT0' },
+	{ 'Atlantic/Stanley', '<-03>3' },
+	{ 'Australia/Adelaide', 'ACST-9:30ACDT,M10.1.0,M4.1.0/3' },
+	{ 'Australia/Brisbane', 'AEST-10' },
+	{ 'Australia/Broken Hill', 'ACST-9:30ACDT,M10.1.0,M4.1.0/3' },
+	{ 'Australia/Darwin', 'ACST-9:30' },
+	{ 'Australia/Eucla', '<+0845>-8:45' },
+	{ 'Australia/Hobart', 'AEST-10AEDT,M10.1.0,M4.1.0/3' },
+	{ 'Australia/Lindeman', 'AEST-10' },
+	{ 'Australia/Lord Howe', '<+1030>-10:30<+11>-11,M10.1.0,M4.1.0' },
+	{ 'Australia/Melbourne', 'AEST-10AEDT,M10.1.0,M4.1.0/3' },
+	{ 'Australia/Perth', 'AWST-8' },
+	{ 'Australia/Sydney', 'AEST-10AEDT,M10.1.0,M4.1.0/3' },
+	{ 'Etc/GMT', 'GMT0' },
+	{ 'Etc/GMT+1', '<-01>1' },
+	{ 'Etc/GMT+10', '<-10>10' },
+	{ 'Etc/GMT+11', '<-11>11' },
+	{ 'Etc/GMT+12', '<-12>12' },
+	{ 'Etc/GMT+2', '<-02>2' },
+	{ 'Etc/GMT+3', '<-03>3' },
+	{ 'Etc/GMT+4', '<-04>4' },
+	{ 'Etc/GMT+5', '<-05>5' },
+	{ 'Etc/GMT+6', '<-06>6' },
+	{ 'Etc/GMT+7', '<-07>7' },
+	{ 'Etc/GMT+8', '<-08>8' },
+	{ 'Etc/GMT+9', '<-09>9' },
+	{ 'Etc/GMT-1', '<+01>-1' },
+	{ 'Etc/GMT-10', '<+10>-10' },
+	{ 'Etc/GMT-11', '<+11>-11' },
+	{ 'Etc/GMT-12', '<+12>-12' },
+	{ 'Etc/GMT-13', '<+13>-13' },
+	{ 'Etc/GMT-14', '<+14>-14' },
+	{ 'Etc/GMT-2', '<+02>-2' },
+	{ 'Etc/GMT-3', '<+03>-3' },
+	{ 'Etc/GMT-4', '<+04>-4' },
+	{ 'Etc/GMT-5', '<+05>-5' },
+	{ 'Etc/GMT-6', '<+06>-6' },
+	{ 'Etc/GMT-7', '<+07>-7' },
+	{ 'Etc/GMT-8', '<+08>-8' },
+	{ 'Etc/GMT-9', '<+09>-9' },
+	{ 'Europe/Amsterdam', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Andorra', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Astrakhan', '<+04>-4' },
+	{ 'Europe/Athens', 'EET-2EEST,M3.5.0/3,M10.5.0/4' },
+	{ 'Europe/Belgrade', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Berlin', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Bratislava', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Brussels', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Bucharest', 'EET-2EEST,M3.5.0/3,M10.5.0/4' },
+	{ 'Europe/Budapest', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Busingen', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Chisinau', 'EET-2EEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Copenhagen', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Dublin', 'IST-1GMT0,M10.5.0,M3.5.0/1' },
+	{ 'Europe/Gibraltar', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Guernsey', 'GMT0BST,M3.5.0/1,M10.5.0' },
+	{ 'Europe/Helsinki', 'EET-2EEST,M3.5.0/3,M10.5.0/4' },
+	{ 'Europe/Isle of Man', 'GMT0BST,M3.5.0/1,M10.5.0' },
+	{ 'Europe/Istanbul', '<+03>-3' },
+	{ 'Europe/Jersey', 'GMT0BST,M3.5.0/1,M10.5.0' },
+	{ 'Europe/Kaliningrad', 'EET-2' },
+	{ 'Europe/Kirov', '<+03>-3' },
+	{ 'Europe/Kyiv', 'EET-2EEST,M3.5.0/3,M10.5.0/4' },
+	{ 'Europe/Lisbon', 'WET0WEST,M3.5.0/1,M10.5.0' },
+	{ 'Europe/Ljubljana', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/London', 'GMT0BST,M3.5.0/1,M10.5.0' },
+	{ 'Europe/Luxembourg', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Madrid', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Malta', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Mariehamn', 'EET-2EEST,M3.5.0/3,M10.5.0/4' },
+	{ 'Europe/Minsk', '<+03>-3' },
+	{ 'Europe/Monaco', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Moscow', 'MSK-3' },
+	{ 'Europe/Oslo', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Paris', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Podgorica', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Prague', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Riga', 'EET-2EEST,M3.5.0/3,M10.5.0/4' },
+	{ 'Europe/Rome', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Samara', '<+04>-4' },
+	{ 'Europe/San Marino', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Sarajevo', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Saratov', '<+04>-4' },
+	{ 'Europe/Simferopol', 'MSK-3' },
+	{ 'Europe/Skopje', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Sofia', 'EET-2EEST,M3.5.0/3,M10.5.0/4' },
+	{ 'Europe/Stockholm', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Tallinn', 'EET-2EEST,M3.5.0/3,M10.5.0/4' },
+	{ 'Europe/Tirane', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Ulyanovsk', '<+04>-4' },
+	{ 'Europe/Vaduz', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Vatican', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Vienna', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Vilnius', 'EET-2EEST,M3.5.0/3,M10.5.0/4' },
+	{ 'Europe/Volgograd', '<+03>-3' },
+	{ 'Europe/Warsaw', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Zagreb', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Europe/Zurich', 'CET-1CEST,M3.5.0,M10.5.0/3' },
+	{ 'Indian/Antananarivo', 'EAT-3' },
+	{ 'Indian/Chagos', '<+06>-6' },
+	{ 'Indian/Christmas', '<+07>-7' },
+	{ 'Indian/Cocos', '<+0630>-6:30' },
+	{ 'Indian/Comoro', 'EAT-3' },
+	{ 'Indian/Kerguelen', '<+05>-5' },
+	{ 'Indian/Mahe', '<+04>-4' },
+	{ 'Indian/Maldives', '<+05>-5' },
+	{ 'Indian/Mauritius', '<+04>-4' },
+	{ 'Indian/Mayotte', 'EAT-3' },
+	{ 'Indian/Reunion', '<+04>-4' },
+	{ 'Pacific/Apia', '<+13>-13' },
+	{ 'Pacific/Auckland', 'NZST-12NZDT,M9.5.0,M4.1.0/3' },
+	{ 'Pacific/Bougainville', '<+11>-11' },
+	{ 'Pacific/Chatham', '<+1245>-12:45<+1345>,M9.5.0/2:45,M4.1.0/3:45' },
+	{ 'Pacific/Chuuk', '<+10>-10' },
+	{ 'Pacific/Easter', '<-06>6<-05>,M9.1.6/22,M4.1.6/22' },
+	{ 'Pacific/Efate', '<+11>-11' },
+	{ 'Pacific/Fakaofo', '<+13>-13' },
+	{ 'Pacific/Fiji', '<+12>-12<+13>,M11.2.0,M1.2.3/99' },
+	{ 'Pacific/Funafuti', '<+12>-12' },
+	{ 'Pacific/Galapagos', '<-06>6' },
+	{ 'Pacific/Gambier', '<-09>9' },
+	{ 'Pacific/Guadalcanal', '<+11>-11' },
+	{ 'Pacific/Guam', 'ChST-10' },
+	{ 'Pacific/Honolulu', 'HST10' },
+	{ 'Pacific/Kanton', '<+13>-13' },
+	{ 'Pacific/Kiritimati', '<+14>-14' },
+	{ 'Pacific/Kosrae', '<+11>-11' },
+	{ 'Pacific/Kwajalein', '<+12>-12' },
+	{ 'Pacific/Majuro', '<+12>-12' },
+	{ 'Pacific/Marquesas', '<-0930>9:30' },
+	{ 'Pacific/Midway', 'SST11' },
+	{ 'Pacific/Nauru', '<+12>-12' },
+	{ 'Pacific/Niue', '<-11>11' },
+	{ 'Pacific/Norfolk', '<+11>-11<+12>,M10.1.0,M4.1.0/3' },
+	{ 'Pacific/Noumea', '<+11>-11' },
+	{ 'Pacific/Pago Pago', 'SST11' },
+	{ 'Pacific/Palau', '<+09>-9' },
+	{ 'Pacific/Pitcairn', '<-08>8' },
+	{ 'Pacific/Pohnpei', '<+11>-11' },
+	{ 'Pacific/Port Moresby', '<+10>-10' },
+	{ 'Pacific/Rarotonga', '<-10>10' },
+	{ 'Pacific/Saipan', 'ChST-10' },
+	{ 'Pacific/Tahiti', '<-10>10' },
+	{ 'Pacific/Tarawa', '<+12>-12' },
+	{ 'Pacific/Tongatapu', '<+13>-13' },
+	{ 'Pacific/Wake', '<+12>-12' },
+	{ 'Pacific/Wallis', '<+12>-12' },
+}
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/sys/zoneinfo/tzoffset.lua b/ucentral-client/rootfs/usr/lib/lua/luci/sys/zoneinfo/tzoffset.lua
new file mode 100644
index 0000000..caee1d2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/sys/zoneinfo/tzoffset.lua
@@ -0,0 +1,46 @@
+-- Licensed to the public under the Apache License 2.0.
+
+module "luci.sys.zoneinfo.tzoffset"
+
+OFFSET = {
+	gmt   =      0,	-- GMT
+	eat   =  10800,	-- EAT
+	cet   =   3600,	-- CET
+	wat   =   3600,	-- WAT
+	cat   =   7200,	-- CAT
+	eet   =   7200,	-- EET
+	sast  =   7200,	-- SAST
+	hst   = -36000,	-- HST
+	hdt   = -32400,	-- HDT
+	akst  = -32400,	-- AKST
+	akdt  = -28800,	-- AKDT
+	ast   = -14400,	-- AST
+	est   = -18000,	-- EST
+	cst   = -21600,	-- CST
+	cdt   = -18000,	-- CDT
+	mst   = -25200,	-- MST
+	mdt   = -21600,	-- MDT
+	pst   = -28800,	-- PST
+	pdt   = -25200,	-- PDT
+	nst   = -12600,	-- NST
+	ndt   =  -9000,	-- NDT
+	aest  =  36000,	-- AEST
+	aedt  =  39600,	-- AEDT
+	nzst  =  43200,	-- NZST
+	nzdt  =  46800,	-- NZDT
+	hkt   =  28800,	-- HKT
+	wib   =  25200,	-- WIB
+	wit   =  32400,	-- WIT
+	ist   =   7200,	-- IST
+	idt   =  10800,	-- IDT
+	pkt   =  18000,	-- PKT
+	wita  =  28800,	-- WITA
+	kst   =  32400,	-- KST
+	jst   =  32400,	-- JST
+	wet   =      0,	-- WET
+	acst  =  34200,	-- ACST
+	acdt  =  37800,	-- ACDT
+	awst  =  28800,	-- AWST
+	msk   =  10800,	-- MSK
+	sst   = -39600,	-- SST
+}
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/template.lua b/ucentral-client/rootfs/usr/lib/lua/luci/template.lua
new file mode 100644
index 0000000..b6b9af0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/template.lua
@@ -0,0 +1,184 @@
+-- Copyright 2008 Steven Barth <steven@midlink.org>
+-- Licensed to the public under the Apache License 2.0.
+
+local util = require "luci.util"
+local config = require "luci.config"
+local tparser = require "luci.template.parser"
+
+local tostring, pairs, loadstring = tostring, pairs, loadstring
+local setmetatable, loadfile = setmetatable, loadfile
+local getfenv, setfenv, rawget = getfenv, setfenv, rawget
+local assert, type, error = assert, type, error
+local table, string, unpack = table, string, unpack
+
+
+---
+--- bootstrap
+---
+local _G = _G
+local L = _G.L
+
+local http = _G.L.http
+
+local disp = require "luci.dispatcher"
+local i18n = require "luci.i18n"
+local xml = require "luci.xml"
+local fs = require "nixio.fs"
+
+
+--- LuCI template library.
+module "luci.template"
+
+config.template = config.template or {}
+viewdir = config.template.viewdir or util.libpath() .. "/view"
+
+
+-- Define the namespace for template modules
+context = {} --util.threadlocal()
+
+--- Render a certain template.
+-- @param name		Template name
+-- @param scope		Scope to assign to template (optional)
+function render(name, scope)
+	return Template(name):render(scope or getfenv(2))
+end
+
+--- Render a template from a string.
+-- @param template	Template string
+-- @param scope		Scope to assign to template (optional)
+function render_string(template, scope)
+	return Template(nil, template):render(scope or getfenv(2))
+end
+
+
+-- Template class
+Template = util.class()
+
+-- Shared template cache to store templates in to avoid unnecessary reloading
+Template.cache = setmetatable({}, {__mode = "v"})
+
+
+
+local function _ifattr(cond, key, val, noescape)
+	if cond then
+		local env = getfenv(3)
+		local scope = (type(env.self) == "table") and env.self
+		if type(val) == "table" then
+			if not next(val) then
+				return ''
+			else
+				val = util.serialize_json(val)
+			end
+		end
+
+		val = tostring(val or
+			(type(env[key]) ~= "function" and env[key]) or
+			(scope and type(scope[key]) ~= "function" and scope[key]) or "")
+
+		if noescape ~= true then
+			val = xml.pcdata(val)
+		end
+
+		return string.format(' %s="%s"', tostring(key), val)
+	else
+		return ''
+	end
+end
+
+context.viewns = setmetatable({
+	include     = function(name)
+		if fs.access(viewdir .. "/" .. name .. ".htm") then
+			Template(name):render(getfenv(2))
+		else
+			L.include(name, getfenv(2))
+		end
+	end;
+	translate   = i18n.translate;
+	translatef  = i18n.translatef;
+	export      = function(k, v) if context.viewns[k] == nil then context.viewns[k] = v end end;
+	striptags   = xml.striptags;
+	pcdata      = xml.pcdata;
+	ifattr      = function(...) return _ifattr(...) end;
+	attr        = function(...) return _ifattr(true, ...) end;
+	url         = disp.build_url;
+}, {__index=function(tbl, key)
+	if key == "controller" then
+		return disp.build_url()
+	elseif key == "REQUEST_URI" then
+		return disp.build_url(unpack(disp.context.requestpath))
+	elseif key == "FULL_REQUEST_URI" then
+		local url = { http:getenv("SCRIPT_NAME") or "", http:getenv("PATH_INFO") }
+		local query = http:getenv("QUERY_STRING")
+		if query and #query > 0 then
+			url[#url+1] = "?"
+			url[#url+1] = query
+		end
+		return table.concat(url, "")
+	elseif key == "token" then
+		return disp.context.authtoken
+	elseif key == "theme" then
+		return L.media and fs.basename(L.media) or tostring(L)
+	elseif key == "resource" then
+		return L.config.main.resourcebase
+	else
+		return rawget(tbl, key) or _G[key] or L[key]
+	end
+end})
+
+
+-- Constructor - Reads and compiles the template on-demand
+function Template.__init__(self, name, template)
+	if name then
+		self.template = self.cache[name]
+		self.name = name
+	else
+		self.name = "[string]"
+	end
+
+	-- Create a new namespace for this template
+	self.viewns = context.viewns
+
+	-- If we have a cached template, skip compiling and loading
+	if not self.template then
+
+		-- Compile template
+		local err
+		local sourcefile
+
+		if name then
+			sourcefile = viewdir .. "/" .. name .. ".htm"
+			self.template, _, err = tparser.parse(sourcefile)
+		else
+			sourcefile = "[string]"
+			self.template, _, err = tparser.parse_string(template)
+		end
+
+		-- If we have no valid template throw error, otherwise cache the template
+		if not self.template then
+			error("Failed to load template '" .. self.name .. "'.\n" ..
+			      "Error while parsing template '" .. sourcefile .. "':\n" ..
+			      (err or "Unknown syntax error"))
+		elseif name then
+			self.cache[name] = self.template
+		end
+	end
+end
+
+
+-- Renders a template
+function Template.render(self, scope)
+	scope = scope or getfenv(2)
+
+	-- Put our predefined objects in the scope of the template
+	setfenv(self.template, setmetatable({}, {__index =
+		function(tbl, key)
+			return rawget(tbl, key) or self.viewns[key] or scope[key]
+		end}))
+
+	-- Now finally render the thing
+	local stat, err = util.copcall(self.template)
+	if not stat then
+		error("Failed to execute template '" .. self.name .. "'.\n" ..
+		      "A runtime error occurred: " .. tostring(err or "(nil)"))
+	end
+end
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/template/parser.so b/ucentral-client/rootfs/usr/lib/lua/luci/template/parser.so
new file mode 100755
index 0000000..ace8c7d
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/lua/luci/template/parser.so differ
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/ucodebridge.lua b/ucentral-client/rootfs/usr/lib/lua/luci/ucodebridge.lua
new file mode 100644
index 0000000..d36b974
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/ucodebridge.lua
@@ -0,0 +1,54 @@
+-- Copyright 2022 Jo-Philipp Wich <jo@mein.io>
+-- Licensed to the public under the Apache License 2.0.
+
+local coroutine, assert, error, type, require = coroutine, assert, error, type, require
+local tmpl  = require "luci.template"
+local util  = require "luci.util"
+local http  = require "luci.http"
+local sys   = require "luci.sys"
+local ltn12 = require "luci.ltn12"
+
+
+--- LuCI ucode bridge library.
+module "luci.ucodebridge"
+
+local function run(fn, ...)
+	local co = coroutine.create(fn)
+	local ok, ret
+
+	while coroutine.status(co) ~= "dead" do
+		ok, ret = coroutine.resume(co, ...)
+
+		if not ok then
+			error(ret)
+		end
+	end
+
+	return ret
+end
+
+function compile(path)
+	run(function(path)
+		return tmpl.Template(path)
+	end, path)
+end
+
+function render(path, scope)
+	run(tmpl.render, path, scope)
+end
+
+function call(modname, method, ...)
+	return run(function(module, method, ...)
+		local mod = require(modname)
+		local func = mod[method]
+
+		assert(func ~= nil,
+		       'Cannot resolve function "' .. method .. '". Is it misspelled or local?')
+
+		assert(type(func) == "function",
+		       'The symbol "' .. method .. '" does not refer to a function but data ' ..
+		       'of type "' .. type(func) .. '".')
+
+		return func(...)
+	end, modname, method, ...)
+end
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/util.lua b/ucentral-client/rootfs/usr/lib/lua/luci/util.lua
new file mode 100644
index 0000000..8001317
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/util.lua
@@ -0,0 +1,757 @@
+-- Copyright 2008 Steven Barth <steven@midlink.org>
+-- Licensed to the public under the Apache License 2.0.
+
+local io = require "io"
+local math = require "math"
+local table = require "table"
+local debug = require "debug"
+local ldebug = require "luci.debug"
+local string = require "string"
+local coroutine = require "coroutine"
+local tparser = require "luci.template.parser"
+local json = require "luci.jsonc"
+local lhttp = require "lucihttp"
+
+local _ubus = require "ubus"
+local _ubus_connection = nil
+
+local getmetatable, setmetatable = getmetatable, setmetatable
+local rawget, rawset, unpack, select = rawget, rawset, unpack, select
+local tostring, type, assert, error = tostring, type, assert, error
+local ipairs, pairs, next, loadstring = ipairs, pairs, next, loadstring
+local require, pcall, xpcall = require, pcall, xpcall
+local collectgarbage, get_memory_limit = collectgarbage, get_memory_limit
+
+module "luci.util"
+
+--
+-- Pythonic string formatting extension
+--
+getmetatable("").__mod = function(a, b)
+	local ok, res
+
+	if not b then
+		return a
+	elseif type(b) == "table" then
+		local k, _
+		for k, _ in pairs(b) do if type(b[k]) == "userdata" then b[k] = tostring(b[k]) end end
+
+		ok, res = pcall(a.format, a, unpack(b))
+		if not ok then
+			error(res, 2)
+		end
+		return res
+	else
+		if type(b) == "userdata" then b = tostring(b) end
+
+		ok, res = pcall(a.format, a, b)
+		if not ok then
+			error(res, 2)
+		end
+		return res
+	end
+end
+
+
+--
+-- Class helper routines
+--
+
+-- Instantiates a class
+local function _instantiate(class, ...)
+	local inst = setmetatable({}, {__index = class})
+
+	if inst.__init__ then
+		inst:__init__(...)
+	end
+
+	return inst
+end
+
+-- The class object can be instantiated by calling itself.
+-- Any class functions or shared parameters can be attached to this object.
+-- Attaching a table to the class object makes this table shared between
+-- all instances of this class. For object parameters use the __init__ function.
+-- Classes can inherit member functions and values from a base class.
+-- Class can be instantiated by calling them. All parameters will be passed
+-- to the __init__ function of this class - if such a function exists.
+-- The __init__ function must be used to set any object parameters that are not shared
+-- with other objects of this class. Any return values will be ignored.
+function class(base)
+	return setmetatable({}, {
+		__call  = _instantiate,
+		__index = base
+	})
+end
+
+function instanceof(object, class)
+	local meta = getmetatable(object)
+	while meta and meta.__index do
+		if meta.__index == class then
+			return true
+		end
+		meta = getmetatable(meta.__index)
+	end
+	return false
+end
+
+
+--
+-- Scope manipulation routines
+--
+
+function threadlocal(tbl)
+	return tbl or {}
+end
+
+
+--
+-- Debugging routines
+--
+
+function perror(obj)
+	return io.stderr:write(tostring(obj) .. "\n")
+end
+
+function dumptable(t, maxdepth, i, seen)
+	i = i or 0
+	seen = seen or setmetatable({}, {__mode="k"})
+
+	for k,v in pairs(t) do
+		perror(string.rep("\t", i) .. tostring(k) .. "\t" .. tostring(v))
+		if type(v) == "table" and (not maxdepth or i < maxdepth) then
+			if not seen[v] then
+				seen[v] = true
+				dumptable(v, maxdepth, i+1, seen)
+			else
+				perror(string.rep("\t", i) .. "*** RECURSION ***")
+			end
+		end
+	end
+end
+
+
+--
+-- String and data manipulation routines
+--
+
+-- compatibility wrapper for xml.pcdata
+function pcdata(value)
+	local xml = require "luci.xml"
+
+	perror("luci.util.pcdata() has been replaced by luci.xml.pcdata() - Please update your code.")
+	return xml.pcdata(value)
+end
+
+function urlencode(value)
+	if value ~= nil then
+		local str = tostring(value)
+		return lhttp.urlencode(str, lhttp.ENCODE_IF_NEEDED + lhttp.ENCODE_FULL)
+			or str
+	end
+	return nil
+end
+
+function urldecode(value, decode_plus)
+	if value ~= nil then
+		local flag = decode_plus and lhttp.DECODE_PLUS or 0
+		local str = tostring(value)
+		return lhttp.urldecode(str, lhttp.DECODE_IF_NEEDED + flag)
+			or str
+	end
+	return nil
+end
+
+-- compatibility wrapper for xml.striptags
+function striptags(value)
+	local xml = require "luci.xml"
+
+	perror("luci.util.striptags() has been replaced by luci.xml.striptags() - Please update your code.")
+	return xml.striptags(value)
+end
+
+function shellquote(value)
+	return string.format("'%s'", string.gsub(value or "", "'", "'\\''"))
+end
+
+-- for bash, ash and similar shells single-quoted strings are taken
+-- literally except for single quotes (which terminate the string)
+-- (and the exception noted below for dash (-) at the start of a
+-- command line parameter).
+function shellsqescape(value)
+   local res
+   res, _ = string.gsub(value, "'", "'\\''")
+   return res
+end
+
+-- bash, ash and other similar shells interpret a dash (-) at the start
+-- of a command-line parameters as an option indicator regardless of
+-- whether it is inside a single-quoted string.  It must be backlash
+-- escaped to resolve this.  This requires in some funky special-case
+-- handling.  It may actually be a property of the getopt function
+-- rather than the shell proper.
+function shellstartsqescape(value)
+   res, _ = string.gsub(value, "^%-", "\\-")
+   return shellsqescape(res)
+end
+
+-- containing the resulting substrings. The optional max parameter specifies
+-- the number of bytes to process, regardless of the actual length of the given
+-- string. The optional last parameter, regex, specifies whether the separator
+-- sequence is interpreted as regular expression.
+--					pattern as regular expression (optional, default is false)
+function split(str, pat, max, regex)
+	pat = pat or "\n"
+	max = max or #str
+
+	local t = {}
+	local c = 1
+
+	if #str == 0 then
+		return {""}
+	end
+
+	if #pat == 0 then
+		return nil
+	end
+
+	if max == 0 then
+		return str
+	end
+
+	repeat
+		local s, e = str:find(pat, c, not regex)
+		max = max - 1
+		if s and max < 0 then
+			t[#t+1] = str:sub(c)
+		else
+			t[#t+1] = str:sub(c, s and s - 1)
+		end
+		c = e and e + 1 or #str + 1
+	until not s or max < 0
+
+	return t
+end
+
+function trim(str)
+	return (str:gsub("^%s*(.-)%s*$", "%1"))
+end
+
+function cmatch(str, pat)
+	local count = 0
+	for _ in str:gmatch(pat) do count = count + 1 end
+	return count
+end
+
+-- one token per invocation, the tokens are separated by whitespace. If the
+-- input value is a table, it is transformed into a string first. A nil value
+-- will result in a valid iterator which aborts with the first invocation.
+function imatch(v)
+	if type(v) == "table" then
+		local k = nil
+		return function()
+			k = next(v, k)
+			return v[k]
+		end
+
+	elseif type(v) == "number" or type(v) == "boolean" then
+		local x = true
+		return function()
+			if x then
+				x = false
+				return tostring(v)
+			end
+		end
+
+	elseif type(v) == "userdata" or type(v) == "string" then
+		return tostring(v):gmatch("%S+")
+	end
+
+	return function() end
+end
+
+-- value or 0 if the unit is unknown. Upper- or lower case is irrelevant.
+-- Recognized units are:
+--	o "y"	- one year   (60*60*24*366)
+--  o "m"	- one month  (60*60*24*31)
+--  o "w"	- one week   (60*60*24*7)
+--  o "d"	- one day    (60*60*24)
+--  o "h"	- one hour	 (60*60)
+--  o "min"	- one minute (60)
+--  o "kb"  - one kilobyte (1024)
+--  o "mb"	- one megabyte (1024*1024)
+--  o "gb"	- one gigabyte (1024*1024*1024)
+--  o "kib" - one si kilobyte (1000)
+--  o "mib"	- one si megabyte (1000*1000)
+--  o "gib"	- one si gigabyte (1000*1000*1000)
+function parse_units(ustr)
+
+	local val = 0
+
+	-- unit map
+	local map = {
+		-- date stuff
+		y   = 60 * 60 * 24 * 366,
+		m   = 60 * 60 * 24 * 31,
+		w   = 60 * 60 * 24 * 7,
+		d   = 60 * 60 * 24,
+		h   = 60 * 60,
+		min = 60,
+
+		-- storage sizes
+		kb  = 1024,
+		mb  = 1024 * 1024,
+		gb  = 1024 * 1024 * 1024,
+
+		-- storage sizes (si)
+		kib = 1000,
+		mib = 1000 * 1000,
+		gib = 1000 * 1000 * 1000
+	}
+
+	-- parse input string
+	for spec in ustr:lower():gmatch("[0-9%.]+[a-zA-Z]*") do
+
+		local num = spec:gsub("[^0-9%.]+$","")
+		local spn = spec:gsub("^[0-9%.]+", "")
+
+		if map[spn] or map[spn:sub(1,1)] then
+			val = val + num * ( map[spn] or map[spn:sub(1,1)] )
+		else
+			val = val + num
+		end
+	end
+
+
+	return val
+end
+
+-- also register functions above in the central string class for convenience
+string.split       = split
+string.trim        = trim
+string.cmatch      = cmatch
+string.parse_units = parse_units
+
+
+function append(src, ...)
+	for i, a in ipairs({...}) do
+		if type(a) == "table" then
+			for j, v in ipairs(a) do
+				src[#src+1] = v
+			end
+		else
+			src[#src+1] = a
+		end
+	end
+	return src
+end
+
+function combine(...)
+	return append({}, ...)
+end
+
+function contains(table, value)
+	for k, v in pairs(table) do
+		if value == v then
+			return k
+		end
+	end
+	return false
+end
+
+-- Both table are - in fact - merged together.
+function update(t, updates)
+	for k, v in pairs(updates) do
+		t[k] = v
+	end
+end
+
+function keys(t)
+	local keys = { }
+	if t then
+		for k, _ in kspairs(t) do
+			keys[#keys+1] = k
+		end
+	end
+	return keys
+end
+
+function clone(object, deep)
+	local copy = {}
+
+	for k, v in pairs(object) do
+		if deep and type(v) == "table" then
+			v = clone(v, deep)
+		end
+		copy[k] = v
+	end
+
+	return setmetatable(copy, getmetatable(object))
+end
+
+
+-- Serialize the contents of a table value.
+function _serialize_table(t, seen)
+	assert(not seen[t], "Recursion detected.")
+	seen[t] = true
+
+	local data  = ""
+	local idata = ""
+	local ilen  = 0
+
+	for k, v in pairs(t) do
+		if type(k) ~= "number" or k < 1 or math.floor(k) ~= k or ( k - #t ) > 3 then
+			k = serialize_data(k, seen)
+			v = serialize_data(v, seen)
+			data = data .. ( #data > 0 and ", " or "" ) ..
+				'[' .. k .. '] = ' .. v
+		elseif k > ilen then
+			ilen = k
+		end
+	end
+
+	for i = 1, ilen do
+		local v = serialize_data(t[i], seen)
+		idata = idata .. ( #idata > 0 and ", " or "" ) .. v
+	end
+
+	return idata .. ( #data > 0 and #idata > 0 and ", " or "" ) .. data
+end
+
+-- with loadstring().
+function serialize_data(val, seen)
+	seen = seen or setmetatable({}, {__mode="k"})
+
+	if val == nil then
+		return "nil"
+	elseif type(val) == "number" then
+		return val
+	elseif type(val) == "string" then
+		return "%q" % val
+	elseif type(val) == "boolean" then
+		return val and "true" or "false"
+	elseif type(val) == "function" then
+		return "loadstring(%q)" % get_bytecode(val)
+	elseif type(val) == "table" then
+		return "{ " .. _serialize_table(val, seen) .. " }"
+	else
+		return '"[unhandled data type:' .. type(val) .. ']"'
+	end
+end
+
+function restore_data(str)
+	return loadstring("return " .. str)()
+end
+
+
+--
+-- Byte code manipulation routines
+--
+
+-- will be stripped before it is returned.
+function get_bytecode(val)
+	local code
+
+	if type(val) == "function" then
+		code = string.dump(val)
+	else
+		code = string.dump( loadstring( "return " .. serialize_data(val) ) )
+	end
+
+	return code -- and strip_bytecode(code)
+end
+
+-- numbers and debugging numbers will be discarded. Original version by
+-- Peter Cawley (http://lua-users.org/lists/lua-l/2008-02/msg01158.html)
+function strip_bytecode(code)
+	local version, format, endian, int, size, ins, num, lnum = code:byte(5, 12)
+	local subint
+	if endian == 1 then
+		subint = function(code, i, l)
+			local val = 0
+			for n = l, 1, -1 do
+				val = val * 256 + code:byte(i + n - 1)
+			end
+			return val, i + l
+		end
+	else
+		subint = function(code, i, l)
+			local val = 0
+			for n = 1, l, 1 do
+				val = val * 256 + code:byte(i + n - 1)
+			end
+			return val, i + l
+		end
+	end
+
+	local function strip_function(code)
+		local count, offset = subint(code, 1, size)
+		local stripped = { string.rep("\0", size) }
+		local dirty = offset + count
+		offset = offset + count + int * 2 + 4
+		offset = offset + int + subint(code, offset, int) * ins
+		count, offset = subint(code, offset, int)
+		for n = 1, count do
+			local t
+			t, offset = subint(code, offset, 1)
+			if t == 1 then
+				offset = offset + 1
+			elseif t == 4 then
+				offset = offset + size + subint(code, offset, size)
+			elseif t == 3 then
+				offset = offset + num
+			elseif t == 254 or t == 9 then
+				offset = offset + lnum
+			end
+		end
+		count, offset = subint(code, offset, int)
+		stripped[#stripped+1] = code:sub(dirty, offset - 1)
+		for n = 1, count do
+			local proto, off = strip_function(code:sub(offset, -1))
+			stripped[#stripped+1] = proto
+			offset = offset + off - 1
+		end
+		offset = offset + subint(code, offset, int) * int + int
+		count, offset = subint(code, offset, int)
+		for n = 1, count do
+			offset = offset + subint(code, offset, size) + size + int * 2
+		end
+		count, offset = subint(code, offset, int)
+		for n = 1, count do
+			offset = offset + subint(code, offset, size) + size
+		end
+		stripped[#stripped+1] = string.rep("\0", int * 3)
+		return table.concat(stripped), offset
+	end
+
+	return code:sub(1,12) .. strip_function(code:sub(13,-1))
+end
+
+
+--
+-- Sorting iterator functions
+--
+
+function _sortiter( t, f )
+	local keys = { }
+
+	local k, v
+	for k, v in pairs(t) do
+		keys[#keys+1] = k
+	end
+
+	local _pos = 0
+
+	table.sort( keys, f )
+
+	return function()
+		_pos = _pos + 1
+		if _pos <= #keys then
+			return keys[_pos], t[keys[_pos]], _pos
+		end
+	end
+end
+
+-- the provided callback function.
+function spairs(t,f)
+	return _sortiter( t, f )
+end
+
+-- The table pairs are sorted by key.
+function kspairs(t)
+	return _sortiter( t )
+end
+
+-- The table pairs are sorted by value.
+function vspairs(t)
+	return _sortiter( t, function (a,b) return t[a] < t[b] end )
+end
+
+
+--
+-- System utility functions
+--
+
+function bigendian()
+	return string.byte(string.dump(function() end), 7) == 0
+end
+
+function exec(command)
+	local pp   = io.popen(command)
+	local data = pp:read("*a")
+	pp:close()
+
+	return data
+end
+
+function execi(command)
+	local pp = io.popen(command)
+
+	return pp and function()
+		local line = pp:read()
+
+		if not line then
+			pp:close()
+		end
+
+		return line
+	end
+end
+
+-- Deprecated
+function execl(command)
+	local pp   = io.popen(command)
+	local line = ""
+	local data = {}
+
+	while true do
+		line = pp:read()
+		if (line == nil) then break end
+		data[#data+1] = line
+	end
+	pp:close()
+
+	return data
+end
+
+
+local ubus_codes = {
+	"INVALID_COMMAND",
+	"INVALID_ARGUMENT",
+	"METHOD_NOT_FOUND",
+	"NOT_FOUND",
+	"NO_DATA",
+	"PERMISSION_DENIED",
+	"TIMEOUT",
+	"NOT_SUPPORTED",
+	"UNKNOWN_ERROR",
+	"CONNECTION_FAILED"
+}
+
+local function ubus_return(...)
+	if select('#', ...) == 2 then
+		local rv, err = select(1, ...), select(2, ...)
+		if rv == nil and type(err) == "number" then
+			return nil, err, ubus_codes[err]
+		end
+	end
+
+	return ...
+end
+
+function ubus(object, method, data, path, timeout)
+	if not _ubus_connection then
+		_ubus_connection = _ubus.connect(path, timeout)
+		assert(_ubus_connection, "Unable to establish ubus connection")
+	end
+
+	if object and method then
+		if type(data) ~= "table" then
+			data = { }
+		end
+		return ubus_return(_ubus_connection:call(object, method, data))
+	elseif object then
+		return _ubus_connection:signatures(object)
+	else
+		return _ubus_connection:objects()
+	end
+end
+
+function serialize_json(x, cb)
+	local js = json.stringify(x)
+	if type(cb) == "function" then
+		cb(js)
+	else
+		return js
+	end
+end
+
+
+function libpath()
+	return require "nixio.fs".dirname(ldebug.__file__)
+end
+
+function checklib(fullpathexe, wantedlib)
+	local fs = require "nixio.fs"
+	local haveldd = fs.access('/usr/bin/ldd')
+	local haveexe = fs.access(fullpathexe)
+	if not haveldd or not haveexe then
+		return false
+	end
+	local libs = exec(string.format("/usr/bin/ldd %s", shellquote(fullpathexe)))
+	if not libs then
+		return false
+	end
+	for k, v in ipairs(split(libs)) do
+		if v:find(wantedlib) then
+			return true
+		end
+	end
+	return false
+end
+
+-------------------------------------------------------------------------------
+-- Coroutine safe xpcall and pcall versions
+--
+-- Encapsulates the protected calls with a coroutine based loop, so errors can
+-- be dealed without the usual Lua 5.x pcall/xpcall issues with coroutines
+-- yielding inside the call to pcall or xpcall.
+--
+-- Authors: Roberto Ierusalimschy and Andre Carregal
+-- Contributors: Thomas Harning Jr., Ignacio Burgueño, Fabio Mascarenhas
+--
+-- Copyright 2005 - Kepler Project
+--
+-- $Id: coxpcall.lua,v 1.13 2008/05/19 19:20:02 mascarenhas Exp $
+-------------------------------------------------------------------------------
+
+-------------------------------------------------------------------------------
+-- Implements xpcall with coroutines
+-------------------------------------------------------------------------------
+local coromap = setmetatable({}, { __mode = "k" })
+
+local function handleReturnValue(err, co, status, ...)
+	if not status then
+		return false, err(debug.traceback(co, (...)), ...)
+	end
+	if coroutine.status(co) == 'suspended' then
+		return performResume(err, co, coroutine.yield(...))
+	else
+		return true, ...
+	end
+end
+
+function performResume(err, co, ...)
+	return handleReturnValue(err, co, coroutine.resume(co, ...))
+end
+
+local function id(trace, ...)
+	return trace
+end
+
+function coxpcall(f, err, ...)
+	local current = coroutine.running()
+	if not current then
+		if err == id then
+			return pcall(f, ...)
+		else
+			if select("#", ...) > 0 then
+				local oldf, params = f, { ... }
+				f = function() return oldf(unpack(params)) end
+			end
+			return xpcall(f, err)
+		end
+	else
+		local res, co = pcall(coroutine.create, f)
+		if not res then
+			local newf = function(...) return f(...) end
+			co = coroutine.create(newf)
+		end
+		coromap[co] = current
+		return performResume(err, co, ...)
+	end
+end
+
+function copcall(f, ...)
+	return coxpcall(f, id, ...)
+end
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/version.lua b/ucentral-client/rootfs/usr/lib/lua/luci/version.lua
new file mode 100644
index 0000000..815055d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/version.lua
@@ -0,0 +1,20 @@
+local pcall, dofile, _G = pcall, dofile, _G
+
+module "luci.version"
+
+if pcall(dofile, "/etc/openwrt_release") and _G.DISTRIB_DESCRIPTION then
+	distname    = ""
+	distversion = _G.DISTRIB_DESCRIPTION
+	if _G.DISTRIB_REVISION then
+		distrevision = _G.DISTRIB_REVISION
+		if not distversion:find(distrevision,1,true) then
+			distversion = distversion .. " " .. distrevision
+		end
+	end
+else
+	distname    = "OpenWrt"
+	distversion = "Development Snapshot"
+end
+
+luciname    = "LuCI openwrt-23.05 branch"
+luciversion = "git-25.222.75657-7ce34fe"
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/view/admin_status/luaindex.htm b/ucentral-client/rootfs/usr/lib/lua/luci/view/admin_status/luaindex.htm
new file mode 100644
index 0000000..ef664ed
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/view/admin_status/luaindex.htm
@@ -0,0 +1,18 @@
+<%-
+	local util = require "luci.util"
+	local fs = require "nixio.fs"
+
+	local incdir = util.libpath() .. "/view/admin_status/index/"
+	if fs.access(incdir) then
+		local _, inc
+		local includes = {}
+		for inc in fs.dir(incdir) do
+			if inc:match("%.htm$") then
+				includes[#includes + 1] = inc:gsub("%.htm$", "")
+			end
+		end
+		for _, inc in luci.util.vspairs(includes) do
+			include("admin_status/index/" .. inc)
+		end
+	end
+-%>
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/view/empty_node_placeholder.htm b/ucentral-client/rootfs/usr/lib/lua/luci/view/empty_node_placeholder.htm
new file mode 100644
index 0000000..b7e276b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/view/empty_node_placeholder.htm
@@ -0,0 +1,11 @@
+<%#
+ Copyright 2010 Jo-Philipp Wich <jow@openwrt.org>
+ Copyright 2018 Daniel F. Dickinson <cshored@thecshore.com>
+ Licensed to the public under the Apache License 2.0.
+-%>
+
+<%+header%>
+
+<p>Component not present.</p>
+
+<%+footer%>
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/view/indexer.htm b/ucentral-client/rootfs/usr/lib/lua/luci/view/indexer.htm
new file mode 100644
index 0000000..28fc3de
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/view/indexer.htm
@@ -0,0 +1,7 @@
+<%#
+ Copyright 2008 Steven Barth <steven@midlink.org>
+ Copyright 2008 Jo-Philipp Wich <jow@openwrt.org>
+ Licensed to the public under the Apache License 2.0.
+-%>
+
+<% include("themes/" .. theme .. "/indexer") %>
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/view/themes/ucentral/footer.htm b/ucentral-client/rootfs/usr/lib/lua/luci/view/themes/ucentral/footer.htm
new file mode 100644
index 0000000..83e4d46
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/view/themes/ucentral/footer.htm
@@ -0,0 +1,13 @@
+<%#
+ Copyright 2021 Jo-Philipp Wich <jo@mein.io>
+ Licensed to the public under the Apache License 2.0.
+-%>
+
+</div>
+</div>
+</div>
+
+<script type="text/javascript">L.require('menu-ucentral')</script>
+
+</body>
+</html>
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/view/themes/ucentral/header.htm b/ucentral-client/rootfs/usr/lib/lua/luci/view/themes/ucentral/header.htm
new file mode 100644
index 0000000..a91e6df
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/view/themes/ucentral/header.htm
@@ -0,0 +1,67 @@
+<%#
+ Copyright 2021 Jo-Philipp Wich <jo@mein.io>
+ Licensed to the public under the Apache License 2.0.
+-%>
+
+<%
+	local sys  = require "luci.sys"
+	local util = require "luci.util"
+	local http = require "luci.http"
+	local disp = require "luci.dispatcher"
+	local ver  = require "luci.version"
+
+	local boardinfo = util.ubus("system", "board") or { }
+
+	local node = disp.context.dispatched
+	local path = table.concat(disp.context.path, "-")
+
+	http.prepare_content("text/html; charset=UTF-8")
+-%>
+<!DOCTYPE html>
+<html lang="<%=luci.i18n.context.lang%>">
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+<meta http-equiv="Content-Script-Type" content="text/javascript" />
+<meta name="viewport" content="width=device-width, initial-scale=1" />
+<link rel="stylesheet" type="text/css" media="screen" href="<%=media%>/cascade.css?v=git-23.271.46227-2c6cc0d" />
+<link rel="icon" href="<%=media%>/logo.svg" type="image/svg+xml" />
+<script type="text/javascript" src="<%=url('admin/translations', luci.i18n.context.lang)%>?v=git-23.271.46227-2c6cc0d"></script>
+<script type="text/javascript" src="<%=resource%>/cbi.js?v=git-23.271.46227-2c6cc0d"></script>
+<title><%=striptags( (boardinfo.hostname or "?") .. ( (node and node.title) and ' - ' .. translate(node.title) or '')) %> - LuCI</title>
+<% if css then %><style title="text/css">
+<%= css %>
+</style>
+<% end -%>
+</head>
+<body class="lang_<%=luci.i18n.context.lang%>" data-page="<%= pcdata(path) %>">
+
+<p class="skiplink">
+<span id="skiplink1"><a href="#navigation"><%:Skip to navigation%></a></span>
+<span id="skiplink2"><a href="#content"><%:Skip to content%></a></span>
+</p>
+
+
+<div id="page">
+	<div id="menubar">
+		<h2 class="navigation" style="visibility:hidden"><a id="navigation" name="navigation"><%:Navigation%></a></h2>
+		<img src="<%=media%>/logo.svg" />
+		<span id="indicators"></span>
+	</div>
+
+	<div id="modemenu" style="display:none"></div>
+
+	<div id="maincontainer">
+		<div id="mainmenu"></div>
+
+		<div id="maincontent">
+			<%- if luci.sys.process.info("uid") == 0 and luci.sys.user.getuser("root") and not luci.sys.user.getpasswd("root") and path ~= "admin-system-admin-password" then -%>
+			<div class="alert-message warning">
+				<h4><%:No password set!%></h4>
+				<p><%:There is no password set on this router. Please configure a root password to protect the web interface.%></p>
+				<% if disp.lookup("admin/system/admin") then %>
+					<div class="right"><a class="btn" href="<%=url("admin/system/admin")%>"><%:Go to password configuration...%></a></div>
+				<% end %>
+			</div>
+			<%- end -%>
+
+			<div id="tabmenu" style="display:none"></div>
diff --git a/ucentral-client/rootfs/usr/lib/lua/luci/xml.lua b/ucentral-client/rootfs/usr/lib/lua/luci/xml.lua
new file mode 100644
index 0000000..30b3721
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/luci/xml.lua
@@ -0,0 +1,26 @@
+-- Copyright 2008 Steven Barth <steven@midlink.org>
+-- Licensed to the public under the Apache License 2.0.
+
+local tparser = require "luci.template.parser"
+local string = require "string"
+
+local tostring = tostring
+
+module "luci.xml"
+
+--
+-- String and data manipulation routines
+--
+
+function pcdata(value)
+	return value and tparser.pcdata(tostring(value))
+end
+
+function striptags(value)
+	return value and tparser.striptags(tostring(value))
+end
+
+
+-- also register functions above in the central string class for convenience
+string.pcdata      = pcdata
+string.striptags   = striptags
diff --git a/ucentral-client/rootfs/usr/lib/lua/lucihttp.so b/ucentral-client/rootfs/usr/lib/lua/lucihttp.so
new file mode 100644
index 0000000..3fbadc2
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/lua/lucihttp.so differ
diff --git a/ucentral-client/rootfs/usr/lib/lua/nixio.so b/ucentral-client/rootfs/usr/lib/lua/nixio.so
new file mode 100755
index 0000000..f5d5be4
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/lua/nixio.so differ
diff --git a/ucentral-client/rootfs/usr/lib/lua/nixio/fs.lua b/ucentral-client/rootfs/usr/lib/lua/nixio/fs.lua
new file mode 100644
index 0000000..8883835
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/nixio/fs.lua
@@ -0,0 +1,175 @@
+--[[
+nixio - Linux I/O library for lua
+
+Copyright 2009 Steven Barth <steven@midlink.org>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+http://www.apache.org/licenses/LICENSE-2.0
+
+$Id$
+]]--
+
+local table = require "table"
+local nixio = require "nixio"
+local type, ipairs, setmetatable = type, ipairs, setmetatable
+require "nixio.util"
+
+
+module ("nixio.fs", function(m) setmetatable(m, {__index = nixio.fs}) end)
+
+
+function readfile(path, limit)
+	local fd, code, msg = nixio.open(path, "r")
+	local data
+	if not fd then
+		return nil, code, msg
+	end
+	
+	data, code, msg = fd:readall(limit)
+	
+	fd:close()
+	return data, code, msg
+end
+
+
+function writefile(path, data)
+	local fd, code, msg, stat = nixio.open(path, "w")
+	if not fd then
+		return nil, code, msg
+	end
+	
+	stat, code, msg = fd:writeall(data)
+	
+	fd:close()
+	return stat, code, msg
+end
+
+function datacopy(src, dest, size)
+	local fdin, code, msg = nixio.open(src, "r")
+	if not fdin then
+		return nil, code, msg
+	end
+	
+	local fdout, code, msg = nixio.open(dest, "w")
+	if not fdout then
+		return nil, code, msg
+	end	
+	
+	local stat, code, msg, sent = fdin:copy(fdout, size)
+	fdin:close()
+	fdout:close()
+
+	return stat, code, msg, sent
+end
+
+function copy(src, dest)
+	local stat, code, msg, res = nixio.fs.lstat(src)
+	if not stat then
+		return nil, code, msg
+	end
+	
+	if stat.type == "dir" then
+		if nixio.fs.stat(dest, type) ~= "dir" then
+			res, code, msg = nixio.fs.mkdir(dest)
+		else
+			stat = true
+		end
+	elseif stat.type == "lnk" then
+		res, code, msg = nixio.fs.symlink(nixio.fs.readlink(src), dest)
+	elseif stat.type == "reg" then
+		res, code, msg = datacopy(src, dest)
+	end
+	
+	if not res then
+		return nil, code, msg
+	end
+	
+	nixio.fs.utimes(dest, stat.atime, stat.mtime)
+	
+	if nixio.fs.lchown then
+		nixio.fs.lchown(dest, stat.uid, stat.gid)
+	end
+	
+	if stat.type ~= "lnk" then
+		nixio.fs.chmod(dest, stat.modedec)
+	end
+	
+	return true
+end
+
+function move(src, dest)
+	local stat, code, msg = nixio.fs.rename(src, dest)
+	if not stat and code == nixio.const.EXDEV then
+		stat, code, msg = copy(src, dest)
+		if stat then
+			stat, code, msg = nixio.fs.unlink(src)
+		end
+	end
+	return stat, code, msg
+end
+
+function mkdirr(dest, mode)
+	if nixio.fs.stat(dest, "type") == "dir" then
+		return true
+	else
+		local stat, code, msg = nixio.fs.mkdir(dest, mode)
+		if not stat and code == nixio.const.ENOENT then
+			stat, code, msg = mkdirr(nixio.fs.dirname(dest), mode)
+			if stat then
+				stat, code, msg = nixio.fs.mkdir(dest, mode)
+			end
+		end
+		return stat, code, msg
+	end
+end
+
+local function _recurse(cb, src, dest)
+	local type = nixio.fs.lstat(src, "type")
+	if type ~= "dir" then
+		return cb(src, dest)
+	else
+		local stat, se, code, msg, s, c, m = true, nixio.const.sep
+		if dest then
+			s, c, m = cb(src, dest)
+			stat, code, msg = stat and s, c or code, m or msg
+		end
+
+		for e in nixio.fs.dir(src) do
+			if dest then
+				s, c, m = _recurse(cb, src .. se .. e, dest .. se .. e)
+			else
+				s, c, m = _recurse(cb, src .. se .. e)
+			end
+			stat, code, msg = stat and s, c or code, m or msg
+		end
+
+		if not dest then							-- Postfix
+			s, c, m = cb(src)
+			stat, code, msg = stat and s, c or code, m or msg
+		end
+
+		return stat, code, msg
+	end
+end
+
+function copyr(src, dest)
+	return _recurse(copy, src, dest)
+end
+
+function mover(src, dest)
+	local stat, code, msg = nixio.fs.rename(src, dest)
+	if not stat and code == nixio.const.EXDEV then
+		stat, code, msg = _recurse(copy, src, dest)
+		if stat then
+			stat, code, msg = _recurse(nixio.fs.remove, src)
+		end
+	end
+	return stat, code, msg
+end
+
+function remover(src)
+	return _recurse(nixio.fs.remove, src)
+end
\ No newline at end of file
diff --git a/ucentral-client/rootfs/usr/lib/lua/nixio/util.lua b/ucentral-client/rootfs/usr/lib/lua/nixio/util.lua
new file mode 100644
index 0000000..63d2f62
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/lua/nixio/util.lua
@@ -0,0 +1,270 @@
+--[[
+nixio - Linux I/O library for lua
+
+Copyright 2009 Steven Barth <steven@midlink.org>
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+http://www.apache.org/licenses/LICENSE-2.0
+
+$Id$
+]]--
+
+local table = require "table"
+local nixio = require "nixio"
+local getmetatable, assert, pairs, type = getmetatable, assert, pairs, type
+local tostring = tostring
+
+module "nixio.util"
+
+local BUFFERSIZE = nixio.const.buffersize
+local ZIOBLKSIZE = 65536
+local socket = nixio.meta_socket
+local tls_socket = nixio.meta_tls_socket
+local file = nixio.meta_file
+local uname = nixio.uname()
+local ZBUG = uname.sysname == "Linux" and uname.release:sub(1, 3) == "2.4"
+
+function consume(iter, append)
+	local tbl = append or {}
+	if iter then
+		for obj in iter do
+			tbl[#tbl+1] = obj
+		end
+	end
+	return tbl
+end
+
+local meta = {}
+
+function meta.is_socket(self)
+	return (getmetatable(self) == socket)
+end
+
+function meta.is_tls_socket(self)
+	return (getmetatable(self) == tls_socket)
+end
+
+function meta.is_file(self)
+	return (getmetatable(self) == file)
+end
+
+function meta.readall(self, len)
+	local block, code, msg = self:read(len or BUFFERSIZE)
+
+	if not block then
+		return nil, code, msg, ""
+	elseif #block == 0 then
+		return "", nil, nil, ""
+	end
+
+	local data, total = {block}, #block
+
+	while not len or len > total do
+		block, code, msg = self:read(len and (len - total) or BUFFERSIZE)
+
+		if not block then
+			return nil, code, msg, table.concat(data)
+		elseif #block == 0 then
+			break
+		end
+
+		data[#data+1], total = block, total + #block
+	end
+
+	local data = #data > 1 and table.concat(data) or data[1]
+	return data, nil, nil, data
+end
+meta.recvall = meta.readall
+
+function meta.writeall(self, data)
+	data = tostring(data)
+	local sent, code, msg = self:write(data)
+
+	if not sent then
+		return nil, code, msg, 0
+	end
+
+	local total = sent 
+
+	while total < #data do
+		sent, code, msg = self:write(data, total)
+
+		if not sent then
+			return nil, code, msg, total
+		end
+
+		total = total + sent
+	end
+	
+	return total, nil, nil, total
+end
+meta.sendall = meta.writeall
+
+function meta.linesource(self, limit)
+	limit = limit or BUFFERSIZE
+	local buffer = ""
+	local bpos = 0
+	return function(flush)
+		local line, endp, _
+		
+		if flush then
+			line = buffer:sub(bpos + 1)
+			buffer = type(flush) == "string" and flush or ""
+			bpos = 0
+			return line
+		end
+
+		while not line do
+			_, endp, line = buffer:find("(.-)\r?\n", bpos + 1)
+			if line then
+				bpos = endp
+				return line
+			elseif #buffer < limit + bpos then
+				local newblock, code, msg = self:read(limit + bpos - #buffer)
+				if not newblock then
+					return nil, code, msg
+				elseif #newblock == 0 then
+					return nil
+				end
+				buffer = buffer:sub(bpos + 1) .. newblock
+				bpos = 0
+			else
+				return nil, 0
+			end
+		end
+	end
+end
+
+function meta.blocksource(self, bs, limit)
+	bs = bs or BUFFERSIZE
+	return function()
+		local toread = bs
+		if limit then
+			if limit < 1 then
+				return nil
+			elseif limit < toread then
+				toread = limit
+			end
+		end
+
+		local block, code, msg = self:read(toread)
+
+		if not block then
+			return nil, code, msg
+		elseif #block == 0 then
+			return nil
+		else
+			if limit then
+				limit = limit - #block
+			end
+
+			return block
+		end
+	end
+end
+
+function meta.sink(self, close)
+	return function(chunk, src_err)
+		if not chunk and not src_err and close then
+			if self.shutdown then
+				self:shutdown()
+			end
+			self:close()
+		elseif chunk and #chunk > 0 then
+			return self:writeall(chunk)
+		end
+		return true
+	end
+end
+
+function meta.copy(self, fdout, size)
+	local source = self:blocksource(nil, size)
+	local sink = fdout:sink()
+	local sent, chunk, code, msg = 0
+	
+	repeat
+		chunk, code, msg = source()
+		sink(chunk, code, msg)
+		sent = chunk and (sent + #chunk) or sent
+	until not chunk
+	return not code and sent or nil, code, msg, sent
+end
+
+function meta.copyz(self, fd, size)
+	local sent, lsent, code, msg = 0
+	local splicable
+
+	if not ZBUG and self:is_file() then
+		local ftype = self:stat("type")
+		if nixio.sendfile and fd:is_socket() and ftype == "reg" then
+			repeat
+				lsent, code, msg = nixio.sendfile(fd, self, size or ZIOBLKSIZE)
+				if lsent then
+					sent = sent + lsent
+					size = size and (size - lsent)
+				end
+			until (not lsent or lsent == 0 or (size and size == 0))
+			if lsent or (not lsent and sent == 0 and
+			 code ~= nixio.const.ENOSYS and code ~= nixio.const.EINVAL) then
+				return lsent and sent, code, msg, sent
+			end
+		elseif nixio.splice and not fd:is_tls_socket() and ftype == "fifo" then 
+			splicable = true
+		end
+	end
+
+	if nixio.splice and fd:is_file() and not splicable then
+		splicable = not self:is_tls_socket() and fd:stat("type") == "fifo"
+	end
+
+	if splicable then
+		repeat
+			lsent, code, msg = nixio.splice(self, fd, size or ZIOBLKSIZE)
+			if lsent then
+				sent = sent + lsent
+				size = size and (size - lsent)
+			end
+		until (not lsent or lsent == 0 or (size and size == 0))
+		if lsent or (not lsent and sent == 0 and
+		 code ~= nixio.const.ENOSYS and code ~= nixio.const.EINVAL) then
+			return lsent and sent, code, msg, sent
+		end		
+	end
+
+	return self:copy(fd, size)
+end
+
+if tls_socket then
+	function tls_socket.close(self)
+		return self.socket:close()
+	end
+
+	function tls_socket.getsockname(self)
+		return self.socket:getsockname()
+	end
+
+	function tls_socket.getpeername(self)
+		return self.socket:getpeername()
+	end
+
+	function tls_socket.getsockopt(self, ...)
+		return self.socket:getsockopt(...)
+	end
+	tls_socket.getopt = tls_socket.getsockopt
+
+	function tls_socket.setsockopt(self, ...)
+		return self.socket:setsockopt(...)
+	end
+	tls_socket.setopt = tls_socket.setsockopt
+end
+
+for k, v in pairs(meta) do
+	file[k] = v
+	socket[k] = v
+	if tls_socket then
+		tls_socket[k] = v
+	end
+end
diff --git a/ucentral-client/rootfs/usr/lib/lua/ubus.so b/ucentral-client/rootfs/usr/lib/lua/ubus.so
new file mode 100755
index 0000000..cdc1c13
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/lua/ubus.so differ
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/atfpolicy.control b/ucentral-client/rootfs/usr/lib/opkg/info/atfpolicy.control
new file mode 100644
index 0000000..de17109
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/atfpolicy.control
@@ -0,0 +1,12 @@
+Package: atfpolicy
+Version: 1
+Depends: libc, libubox20240329, libubus20230605, libnl-tiny1
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/atfpolicy
+SourceName: atfpolicy
+License: GPL-2.0
+Section: net
+SourceDateEpoch: 1671451309
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 5145
+Description:  A simple daemon for handling airtime fairness prioritization
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/atfpolicy.list b/ucentral-client/rootfs/usr/lib/opkg/info/atfpolicy.list
new file mode 100644
index 0000000..cabe548
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/atfpolicy.list
@@ -0,0 +1,3 @@
+/usr/sbin/atfpolicy
+/etc/config/atfpolicy
+/etc/init.d/atfpolicy
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/atfpolicy.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/atfpolicy.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/atfpolicy.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/base-files.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/base-files.conffiles
new file mode 100644
index 0000000..0a2427b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/base-files.conffiles
@@ -0,0 +1,16 @@
+/etc/ethers
+/etc/group
+/etc/hosts
+/etc/inittab
+/etc/iproute2/rt_protos
+/etc/iproute2/rt_tables
+/etc/passwd
+/etc/profile
+/etc/protocols
+/etc/rc.local
+/etc/services
+/etc/shadow
+/etc/shells
+/etc/shinit
+/etc/sysctl.conf
+/etc/sysupgrade.conf
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/base-files.control b/ucentral-client/rootfs/usr/lib/opkg/info/base-files.control
new file mode 100644
index 0000000..1aa25e1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/base-files.control
@@ -0,0 +1,11 @@
+Package: base-files
+Version: 1557-r23485+66-e92cf0c46f
+Depends: libc, netifd, jsonfilter, usign, openwrt-keyring, fstools, fwtool
+Source: package/base-files
+SourceName: base-files
+License: GPL-2.0
+Section: base
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 48200
+Description:  This package contains a base filesystem and system scripts for OpenWrt.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/base-files.list b/ucentral-client/rootfs/usr/lib/opkg/info/base-files.list
new file mode 100644
index 0000000..4757c09
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/base-files.list
@@ -0,0 +1,104 @@
+/etc/openwrt_version
+/etc/resolv.conf
+/etc/board.d/01_leds
+/etc/init.d/done
+/bin/config_generate
+/var
+/lib/preinit/00_preinit.conf
+/etc/init.d/system
+/etc/preinit
+/lib/preinit/79_move_config
+/lib/preinit/01_sysinfo
+/etc/localtime
+/lib/upgrade/platform.sh
+/lib/preinit/45_mount_xenfs
+/etc/shells
+/lib/functions/caldata.sh
+/lib64
+/lib/preinit/70_initramfs_test
+/etc/rc.button/reboot
+/etc/device_info
+/usr/lib64
+/etc/protocols
+/etc/uci-defaults/12_network-generate-ula
+/lib/preinit/10_indicate_preinit
+/usr/libexec/login.sh
+/lib/preinit/02_load_x86_ucode
+/etc/fstab
+/usr/lib/os-release
+/etc/sysctl.conf
+/sbin/sysupgrade
+/lib/preinit/99_10_run_init
+/sbin/led.sh
+/etc/iproute2/rt_protos
+/lib/preinit/50_indicate_regular_preinit
+/etc/banner
+/etc/shadow
+/etc/rc.common
+/etc/uci-defaults/10_migrate-shadow
+/lib/preinit/02_sysinfo
+/etc/board.d/99-default_network
+/lib/preinit/10_indicate_failsafe
+/etc/os-release
+/etc/board.d/02_network
+/lib/preinit/80_mount_root
+/etc/opkg/keys/c8862778571851d9
+/etc/rc.local
+/lib/functions/uci-defaults.sh
+/etc/init.d/led
+/etc/ethers
+/lib/preinit/20_check_iso
+/etc/init.d/gpio_switch
+/lib/functions/network.sh
+/etc/init.d/sysctl
+/sbin/hotplug-call
+/usr/libexec/validate_firmware_image
+/etc/rc.button/failsafe
+/etc/shinit
+/lib/upgrade/fwtool.sh
+/etc/services
+/lib/functions/system.sh
+/bin/board_detect
+/lib/upgrade/common.sh
+/etc/opkg/distfeeds.conf
+/etc/rc.button/power
+/etc/sysupgrade.conf
+/etc/rc.button/rfkill
+/lib/upgrade/keep.d/base-files
+/lib/functions/dyn_vlan_switch.sh
+/lib/preinit/40_run_failsafe_hook
+/lib/upgrade/do_stage2
+/etc/group
+/etc/rc.button/reset
+/lib/preinit/30_failsafe_wait
+/lib/upgrade/stage2
+/etc/hotplug.d/net/50-switch-dvlan
+/sbin/firstboot
+/etc/uci-defaults/13_fix-group-user
+/etc/hotplug.d/net/00-sysctl
+/etc/hosts
+/lib/functions.sh
+/etc/iproute2/rt_tables
+/lib/functions/leds.sh
+/rom/note
+/etc/inittab
+/etc/openwrt_release
+/sbin/wifi
+/etc/profile
+/lib/preinit/99_10_failsafe_login
+/etc/init.d/sysfixtime
+/etc/TZ
+/etc/init.d/umount
+/lib/functions/service.sh
+/lib/upgrade/keep.d/base-files-essential
+/lib/functions/migrations.sh
+/etc/sysctl.d/10-default.conf
+/etc/passwd
+/lib/preinit/02_default_set_state
+/etc/iproute2/ematch_map
+/etc/mtab
+/etc/init.d/boot
+/lib/functions/preinit.sh
+/bin/ipcalc.sh
+/etc/diag.sh
+/lib/preinit/15_essential_fs_x86
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/base-files.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/base-files.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/base-files.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/batctl-default.control b/ucentral-client/rootfs/usr/lib/opkg/info/batctl-default.control
new file mode 100644
index 0000000..b34333e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/batctl-default.control
@@ -0,0 +1,19 @@
+Package: batctl-default
+Version: 2023.1-3
+Depends: libc, libnl-tiny1, librt
+Provides: batctl
+Alternatives: 200:/usr/sbin/batctl:/usr/libexec/batctl-default
+Source: feeds/routing/batctl
+SourceName: batctl-default
+License: GPL-2.0-only ISC MIT
+LicenseFiles: LICENSES/preferred/GPL-2.0 LICENSES/preferred/MIT LICENSES/deprecated/ISC
+Section: net
+SourceDateEpoch: 1758711045
+Maintainer: Simon Wunderlich <sw@simonwunderlich.de>
+Architecture: x86_64
+Installed-Size: 46071
+Description:  batctl is a more intuitive managment utility for B.A.T.M.A.N.-Advanced.
+ It is an easier method for configuring batman-adv and provides some
+ additional tools for debugging as well. This package builds
+ version 2023.1 of the user space utility.
+ Standard subcommands for configuration and online debugging are enabled.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/batctl-default.list b/ucentral-client/rootfs/usr/lib/opkg/info/batctl-default.list
new file mode 100644
index 0000000..84ef2bb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/batctl-default.list
@@ -0,0 +1 @@
+/usr/libexec/batctl-default
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/batctl-default.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/batctl-default.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/batctl-default.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/bind-dig.control b/ucentral-client/rootfs/usr/lib/opkg/info/bind-dig.control
new file mode 100644
index 0000000..da50d24
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/bind-dig.control
@@ -0,0 +1,14 @@
+Package: bind-dig
+Version: 9.18.37-2
+Depends: libc, bind-libs
+Source: feeds/packages/net/bind
+SourceName: bind-dig
+License: MPL-2.0
+LicenseFiles: LICENSE
+Section: net
+SourceDateEpoch: 1761088275
+CPE-ID: cpe:/a:isc:bind
+Maintainer: Noah Meyerhans <frodo@morgul.net>
+Architecture: x86_64
+Installed-Size: 51114
+Description:  bind DNS excavation tool
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/bind-dig.list b/ucentral-client/rootfs/usr/lib/opkg/info/bind-dig.list
new file mode 100644
index 0000000..e9cf23d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/bind-dig.list
@@ -0,0 +1 @@
+/usr/bin/dig
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/bind-dig.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/bind-dig.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/bind-dig.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/bind-libs.control b/ucentral-client/rootfs/usr/lib/opkg/info/bind-libs.control
new file mode 100644
index 0000000..1df2ac7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/bind-libs.control
@@ -0,0 +1,14 @@
+Package: bind-libs
+Version: 9.18.37-2
+Depends: libc, libopenssl3, zlib, libpthread, libatomic1, libuv1, libnghttp2-14
+Source: feeds/packages/net/bind
+SourceName: bind-libs
+License: MPL-2.0
+LicenseFiles: LICENSE
+Section: libs
+SourceDateEpoch: 1761088275
+CPE-ID: cpe:/a:isc:bind
+Maintainer: Noah Meyerhans <frodo@morgul.net>
+Architecture: x86_64
+Installed-Size: 1222370
+Description:  bind shared libraries
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/bind-libs.list b/ucentral-client/rootfs/usr/lib/opkg/info/bind-libs.list
new file mode 100644
index 0000000..cad4906
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/bind-libs.list
@@ -0,0 +1,14 @@
+/usr/lib/libisccfg-9.18.37.so
+/usr/lib/libdns-9.18.37.so
+/usr/lib/libbind9-9.18.37.so
+/usr/lib/libbind9.so
+/usr/lib/libisc.so
+/usr/lib/libisccc-9.18.37.so
+/usr/lib/libdns.so
+/usr/lib/libisc-9.18.37.so
+/usr/lib/libns-9.18.37.so
+/usr/lib/libirs-9.18.37.so
+/usr/lib/libirs.so
+/usr/lib/libisccc.so
+/usr/lib/libisccfg.so
+/usr/lib/libns.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/bind-libs.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/bind-libs.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/bind-libs.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/bnx2-firmware.control b/ucentral-client/rootfs/usr/lib/opkg/info/bnx2-firmware.control
new file mode 100644
index 0000000..9d13c24
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/bnx2-firmware.control
@@ -0,0 +1,11 @@
+Package: bnx2-firmware
+Version: 20230804-1
+Depends: libc
+Source: package/firmware/linux-firmware
+SourceName: bnx2-firmware
+Section: firmware
+SourceDateEpoch: 1692112565
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 105164
+Description:  Broadcom BCM5706/5708/5709/5716 firmware
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/bnx2-firmware.list b/ucentral-client/rootfs/usr/lib/opkg/info/bnx2-firmware.list
new file mode 100644
index 0000000..bbc1b52
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/bnx2-firmware.list
@@ -0,0 +1,5 @@
+/lib/firmware/bnx2/bnx2-rv2p-06-6.0.15.fw
+/lib/firmware/bnx2/bnx2-rv2p-09-6.0.17.fw
+/lib/firmware/bnx2/bnx2-mips-06-6.2.3.fw
+/lib/firmware/bnx2/bnx2-mips-09-6.2.1b.fw
+/lib/firmware/bnx2/bnx2-rv2p-09ax-6.0.17.fw
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/bnx2-firmware.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/bnx2-firmware.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/bnx2-firmware.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/bridger.control b/ucentral-client/rootfs/usr/lib/opkg/info/bridger.control
new file mode 100644
index 0000000..0d40e8c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/bridger.control
@@ -0,0 +1,12 @@
+Package: bridger
+Version: 2024-04-22-40b1c5b6
+Depends: libc, libbpf1, libubox20240329, libubus20230605, libnl-tiny1, kmod-sched-core, kmod-sched-flower, kmod-sched-bpf, kmod-sched-act-vlan
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/bridger
+SourceName: bridger
+License: GPL-2.0
+Section: utils
+SourceDateEpoch: 1714488411
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 18567
+Description:  Bridge forwarding accelerator
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/bridger.list b/ucentral-client/rootfs/usr/lib/opkg/info/bridger.list
new file mode 100644
index 0000000..3c07972
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/bridger.list
@@ -0,0 +1,4 @@
+/lib/bpf/bridger-bpf.o
+/etc/config/bridger
+/etc/init.d/bridger
+/usr/sbin/bridger
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/bridger.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/bridger.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/bridger.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/busybox.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/busybox.conffiles
new file mode 100644
index 0000000..777bbcd
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/busybox.conffiles
@@ -0,0 +1 @@
+/etc/syslog.conf
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/busybox.control b/ucentral-client/rootfs/usr/lib/opkg/info/busybox.control
new file mode 100644
index 0000000..533658a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/busybox.control
@@ -0,0 +1,18 @@
+Package: busybox
+Version: 1.36.1-1
+Depends: libc
+Conflicts: busybox-selinux
+Source: package/utils/busybox
+SourceName: busybox
+License: GPL-2.0
+LicenseFiles: LICENSE archival/libarchive/bz/LICENSE
+Section: base
+Require-User: ntp=123:ntp=123
+SourceDateEpoch: 1761103960
+CPE-ID: cpe:/a:busybox:busybox
+Essential: yes
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 235398
+Description:  The Swiss Army Knife of embedded Linux.
+ It slices, it dices, it makes Julian Fries.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/busybox.list b/ucentral-client/rootfs/usr/lib/opkg/info/busybox.list
new file mode 100644
index 0000000..83aae58
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/busybox.list
@@ -0,0 +1,126 @@
+/bin/dmesg
+/usr/bin/id
+/bin/login
+/bin/rm
+/sbin/ip
+/bin/sh
+/usr/bin/test
+/bin/zcat
+/bin/fgrep
+/bin/ash
+/sbin/halt
+/sbin/reboot
+/bin/true
+/sbin/route
+/usr/bin/md5sum
+/usr/bin/free
+/usr/sbin/ntpd
+/usr/bin/time
+/bin/vi
+/bin/pwd
+/usr/bin/nc
+/bin/chown
+/etc/init.d/cron
+/bin/mount
+/bin/sync
+/usr/bin/dirname
+/sbin/hwclock
+/sbin/udhcpc
+/bin/ping6
+/usr/bin/basename
+/bin/echo
+/usr/bin/less
+/usr/sbin/chroot
+/usr/sbin/crond
+/usr/bin/head
+/bin/gunzip
+/bin/netstat
+/bin/busybox
+/bin/grep
+/usr/bin/clear
+/usr/bin/seq
+/bin/sleep
+/bin/nice
+/bin/kill
+/bin/mktemp
+/usr/bin/tr
+/bin/mknod
+/usr/bin/resize
+/bin/rmdir
+/usr/bin/uniq
+/usr/bin/tee
+/usr/bin/flock
+/usr/bin/hexdump
+/etc/init.d/sysntpd
+/bin/traceroute6
+/usr/bin/sha256sum
+/bin/date
+/usr/bin/wc
+/usr/bin/[
+/usr/bin/nslookup
+/usr/bin/pgrep
+/bin/umount
+/sbin/swapon
+/bin/netmsg
+/usr/bin/tail
+/usr/sbin/ntpd-hotplug
+/usr/bin/mkfifo
+/bin/chgrp
+/sbin/swapoff
+/bin/cp
+/etc/syslog.conf
+/sbin/poweroff
+/usr/bin/[[
+/bin/dd
+/bin/lock
+/bin/df
+/bin/false
+/usr/bin/killall
+/usr/bin/sort
+/bin/mkdir
+/sbin/ifconfig
+/bin/traceroute
+/usr/bin/cmp
+/usr/bin/reset
+/usr/share/acl.d/ntpd.json
+/sbin/start-stop-daemon
+/etc/capabilities/ntpd.json
+/usr/sbin/brctl
+/bin/cat
+/bin/passwd
+/bin/touch
+/sbin/mkswap
+/bin/tar
+/usr/bin/taskset
+/usr/bin/yes
+/usr/bin/top
+/sbin/switch_root
+/usr/bin/expr
+/usr/bin/env
+/sbin/sysctl
+/bin/sed
+/usr/bin/logger
+/bin/chmod
+/usr/bin/awk
+/bin/uname
+/usr/bin/which
+/lib/upgrade/keep.d/busybox
+/usr/bin/find
+/bin/ln
+/bin/ls
+/sbin/pivot_root
+/usr/bin/cut
+/usr/bin/du
+/bin/mv
+/usr/bin/crontab
+/usr/bin/printf
+/bin/ping
+/usr/bin/uptime
+/bin/fsync
+/bin/pidof
+/bin/egrep
+/usr/bin/readlink
+/usr/bin/strings
+/bin/ps
+/usr/bin/xargs
+/bin/gzip
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/busybox.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/busybox.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/busybox.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/cJSON.control b/ucentral-client/rootfs/usr/lib/opkg/info/cJSON.control
new file mode 100644
index 0000000..1cee39b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/cJSON.control
@@ -0,0 +1,16 @@
+Package: cJSON
+Version: 1.7.15-3
+Depends: libc
+Source: feeds/packages/libs/cjson
+SourceName: cJSON
+License: MIT
+LicenseFiles: LICENSE
+Section: libs
+SourceDateEpoch: 1761088275
+CPE-ID: cpe:/a:cjson_project:cjson
+Maintainer: Karl Palsson <karlp@etactica.com>
+Architecture: x86_64
+Installed-Size: 10654
+Description:  Ultralightweight JSON parser in ANSI C.
+ cJSON aims to be the dumbest possible parser that you can get your
+ job done with. It's a single file of C, and a single header file.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/cJSON.list b/ucentral-client/rootfs/usr/lib/opkg/info/cJSON.list
new file mode 100644
index 0000000..21b7b4a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/cJSON.list
@@ -0,0 +1,3 @@
+/usr/lib/libcjson.so.1.7.15
+/usr/lib/libcjson.so.1
+/usr/lib/libcjson.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/cJSON.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/cJSON.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/cJSON.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ca-bundle.control b/ucentral-client/rootfs/usr/lib/opkg/info/ca-bundle.control
new file mode 100644
index 0000000..75ba7dc
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ca-bundle.control
@@ -0,0 +1,11 @@
+Package: ca-bundle
+Version: 20230311-1
+Depends: libc
+Provides: ca-certs
+Source: package/system/ca-certificates
+SourceName: ca-bundle
+Section: base
+SourceDateEpoch: 1685567406
+Architecture: all
+Installed-Size: 123478
+Description:  System CA certificates as a bundle
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ca-bundle.list b/ucentral-client/rootfs/usr/lib/opkg/info/ca-bundle.list
new file mode 100644
index 0000000..57e64a0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ca-bundle.list
@@ -0,0 +1,2 @@
+/etc/ssl/certs/ca-certificates.crt
+/etc/ssl/cert.pem
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ca-bundle.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ca-bundle.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ca-bundle.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/certificates.control b/ucentral-client/rootfs/usr/lib/opkg/info/certificates.control
new file mode 100644
index 0000000..479247f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/certificates.control
@@ -0,0 +1,12 @@
+Package: certificates
+Version: 1
+Depends: libc
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/tip/certificates
+SourceName: certificates
+License: BSD-3-Clause
+Section: ucentral
+SourceDateEpoch: 1717737749
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 1591
+Description:  TIP DigiCer certificate store
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/certificates.list b/ucentral-client/rootfs/usr/lib/opkg/info/certificates.list
new file mode 100644
index 0000000..0cbae0a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/certificates.list
@@ -0,0 +1,4 @@
+/lib/preinit/75_certificates
+/etc/uci-defaults/99-tip-certificates.sh
+/usr/bin/mount_certs
+/etc/init.d/early_boot
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/certificates.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/certificates.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/certificates.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/cgi-io.control b/ucentral-client/rootfs/usr/lib/opkg/info/cgi-io.control
new file mode 100644
index 0000000..aba08b7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/cgi-io.control
@@ -0,0 +1,12 @@
+Package: cgi-io
+Version: 2022-08-10-901b0f04-21
+Depends: libc, libubox20240329, libubus20230605
+Source: feeds/packages/net/cgi-io
+SourceName: cgi-io
+License: GPL-2.0-or-later
+Section: net
+SourceDateEpoch: 1761088275
+Maintainer: John Crispin <blogic@openwrt.org>
+Architecture: x86_64
+Installed-Size: 8850
+Description:  This package contains an cgi utility that is useful for up/downloading files
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/cgi-io.list b/ucentral-client/rootfs/usr/lib/opkg/info/cgi-io.list
new file mode 100644
index 0000000..766c3d8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/cgi-io.list
@@ -0,0 +1,5 @@
+/usr/libexec/cgi-io
+/www/cgi-bin/cgi-exec
+/www/cgi-bin/cgi-backup
+/www/cgi-bin/cgi-download
+/www/cgi-bin/cgi-upload
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/cgi-io.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/cgi-io.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/cgi-io.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/conntrack.control b/ucentral-client/rootfs/usr/lib/opkg/info/conntrack.control
new file mode 100644
index 0000000..1f6d256
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/conntrack.control
@@ -0,0 +1,16 @@
+Package: conntrack
+Version: 1.4.8-1
+Depends: libc, libnetfilter-conntrack3, libnetfilter-cttimeout1, libnetfilter-cthelper0, libnetfilter-queue1
+Source: feeds/packages/net/conntrack-tools
+SourceName: conntrack
+License: GPL-2.0-or-later
+LicenseFiles: COPYING
+Section: net
+SourceDateEpoch: 1761088275
+CPE-ID: cpe:/a:netfilter:conntrack-tools
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 26070
+Description:  Conntrack is a userspace command line program targeted at system
+ administrators. It enables them to view and manage the in-kernel
+ connection tracking state table.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/conntrack.list b/ucentral-client/rootfs/usr/lib/opkg/info/conntrack.list
new file mode 100644
index 0000000..8556c88
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/conntrack.list
@@ -0,0 +1 @@
+/usr/sbin/conntrack
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/conntrack.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/conntrack.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/conntrack.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/curl.control b/ucentral-client/rootfs/usr/lib/opkg/info/curl.control
new file mode 100644
index 0000000..e6545e3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/curl.control
@@ -0,0 +1,14 @@
+Package: curl
+Version: 8.7.1-r1
+Depends: libc, libcurl4
+Source: feeds/packages/net/curl
+SourceName: curl
+License: MIT
+LicenseFiles: COPYING
+Section: net
+SourceDateEpoch: 1761088275
+CPE-ID: cpe:/a:haxx:libcurl
+Maintainer: Stan Grishin <stangri@melmac.ca>
+Architecture: x86_64
+Installed-Size: 63628
+Description:  A client-side URL transfer utility
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/curl.list b/ucentral-client/rootfs/usr/lib/opkg/info/curl.list
new file mode 100644
index 0000000..d3176d8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/curl.list
@@ -0,0 +1 @@
+/usr/bin/curl
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/curl.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/curl.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/curl.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/dnsmasq-full.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/dnsmasq-full.conffiles
new file mode 100644
index 0000000..1762234
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/dnsmasq-full.conffiles
@@ -0,0 +1,2 @@
+/etc/config/dhcp
+/etc/dnsmasq.conf
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/dnsmasq-full.control b/ucentral-client/rootfs/usr/lib/opkg/info/dnsmasq-full.control
new file mode 100644
index 0000000..8b30d0d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/dnsmasq-full.control
@@ -0,0 +1,18 @@
+Package: dnsmasq-full
+Version: 2.89-4
+Depends: libc, libubus20230605, libnettle8, libnetfilter-conntrack3, nftables-json
+Provides: dnsmasq
+Source: package/network/services/dnsmasq
+SourceName: dnsmasq-full
+License: GPL-2.0
+LicenseFiles: COPYING
+Section: net
+Require-User: dnsmasq=453:dnsmasq=453
+SourceDateEpoch: 1761103960
+CPE-ID: cpe:/a:thekelleys:dnsmasq
+Architecture: x86_64
+Installed-Size: 201693
+Description:  It is intended to provide coupled DNS and DHCP service to a LAN.
+ 
+ This is a fully configurable variant with DHCPv4, DHCPv6, DNSSEC, Authoritative DNS
+ and nftset, Conntrack support & NO_ID enabled by default.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/dnsmasq-full.list b/ucentral-client/rootfs/usr/lib/opkg/info/dnsmasq-full.list
new file mode 100644
index 0000000..18ae09f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/dnsmasq-full.list
@@ -0,0 +1,13 @@
+/etc/uci-defaults/50-dnsmasq-migrate-resolv-conf-auto.sh
+/etc/dnsmasq.conf
+/usr/share/dnsmasq/rfc6761.conf
+/usr/lib/dnsmasq/dhcp-script.sh
+/usr/share/acl.d/dnsmasq_acl.json
+/etc/config/dhcp
+/lib/upgrade/keep.d/dnsmasq-full
+/etc/hotplug.d/ntp/25-dnsmasqsec
+/etc/uci-defaults/50-dnsmasq-migrate-ipset.sh
+/etc/init.d/dnsmasq
+/usr/share/dnsmasq/dhcpbogushostname.conf
+/usr/sbin/dnsmasq
+/usr/share/dnsmasq/trust-anchors.conf
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/dnsmasq-full.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/dnsmasq-full.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/dnsmasq-full.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/dropbear.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/dropbear.conffiles
new file mode 100644
index 0000000..048365e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/dropbear.conffiles
@@ -0,0 +1,3 @@
+/etc/config/dropbear
+/etc/dropbear/dropbear_ed25519_host_key
+/etc/dropbear/dropbear_rsa_host_key
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/dropbear.control b/ucentral-client/rootfs/usr/lib/opkg/info/dropbear.control
new file mode 100644
index 0000000..7001b9c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/dropbear.control
@@ -0,0 +1,14 @@
+Package: dropbear
+Version: 2022.82-5
+Depends: libc
+Alternatives: 100:/usr/bin/scp:/usr/sbin/dropbear, 100:/usr/bin/ssh:/usr/sbin/dropbear
+Source: package/network/services/dropbear
+SourceName: dropbear
+License: MIT
+LicenseFiles: LICENSE libtomcrypt/LICENSE libtommath/LICENSE
+Section: net
+SourceDateEpoch: 1690372852
+CPE-ID: cpe:/a:matt_johnston:dropbear_ssh_server
+Architecture: x86_64
+Installed-Size: 109856
+Description:  A small SSH2 server/client designed for small memory environments.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/dropbear.list b/ucentral-client/rootfs/usr/lib/opkg/info/dropbear.list
new file mode 100644
index 0000000..3a1beb1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/dropbear.list
@@ -0,0 +1,8 @@
+/lib/preinit/99_10_failsafe_dropbear
+/usr/bin/dbclient
+/etc/dropbear/dropbear_ed25519_host_key
+/etc/dropbear/dropbear_rsa_host_key
+/etc/init.d/dropbear
+/usr/bin/dropbearkey
+/etc/config/dropbear
+/usr/sbin/dropbear
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/dropbear.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/dropbear.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/dropbear.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/e2fsprogs.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/e2fsprogs.conffiles
new file mode 100644
index 0000000..626e261
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/e2fsprogs.conffiles
@@ -0,0 +1 @@
+/etc/e2fsck.conf
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/e2fsprogs.control b/ucentral-client/rootfs/usr/lib/opkg/info/e2fsprogs.control
new file mode 100644
index 0000000..93ac618
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/e2fsprogs.control
@@ -0,0 +1,14 @@
+Package: e2fsprogs
+Version: 1.47.0-2
+Depends: libc, libuuid1, libext2fs2
+Source: package/utils/e2fsprogs
+SourceName: e2fsprogs
+License: GPL-2.0
+LicenseFiles: NOTICE
+Section: utils
+SourceDateEpoch: 1691751213
+CPE-ID: cpe:/a:e2fsprogs_project:e2fsprogs
+Architecture: x86_64
+Installed-Size: 188818
+Description:  This package contains essential ext2 filesystem utilities which consists of
+ e2fsck, mke2fs and most of the other core ext2 filesystem utilities.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/e2fsprogs.list b/ucentral-client/rootfs/usr/lib/opkg/info/e2fsprogs.list
new file mode 100644
index 0000000..0f49df6
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/e2fsprogs.list
@@ -0,0 +1,12 @@
+/usr/sbin/mkfs.ext2
+/usr/sbin/mkfs.ext3
+/usr/sbin/mkfs.ext4
+/usr/lib/libe2p.so.2
+/lib/functions/fsck/e2fsck.sh
+/usr/sbin/fsck.ext2
+/usr/sbin/fsck.ext3
+/usr/sbin/fsck.ext4
+/usr/sbin/e2fsck
+/etc/e2fsck.conf
+/usr/sbin/mke2fs
+/usr/lib/libe2p.so.2.3
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/e2fsprogs.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/e2fsprogs.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/e2fsprogs.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ethtool.control b/ucentral-client/rootfs/usr/lib/opkg/info/ethtool.control
new file mode 100644
index 0000000..f7df30b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ethtool.control
@@ -0,0 +1,16 @@
+Package: ethtool
+Version: 6.3-1
+Depends: libc
+Conflicts: ethtool-full
+Source: package/network/utils/ethtool
+SourceName: ethtool
+License: GPL-2.0
+LicenseFiles: COPYING
+Section: net
+SourceDateEpoch: 1684157085
+CPE-ID: cpe:/a:kernel:ethtool
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 41196
+Description:  ethtool is a small utility for examining and tuning your ethernet-based
+ network interface
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ethtool.list b/ucentral-client/rootfs/usr/lib/opkg/info/ethtool.list
new file mode 100644
index 0000000..b0d7b94
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ethtool.list
@@ -0,0 +1 @@
+/usr/sbin/ethtool
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ethtool.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ethtool.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ethtool.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/firewall4.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/firewall4.conffiles
new file mode 100644
index 0000000..d24ed86
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/firewall4.conffiles
@@ -0,0 +1,3 @@
+/etc/config/firewall
+/etc/nftables.d/10-custom-filter-chains.nft
+/etc/nftables.d/README
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/firewall4.control b/ucentral-client/rootfs/usr/lib/opkg/info/firewall4.control
new file mode 100644
index 0000000..856b052
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/firewall4.control
@@ -0,0 +1,14 @@
+Package: firewall4
+Version: 2023-03-23-04a06bd7-1
+Depends: ucode (>= 2022-03-22), libc, kmod-nft-core, kmod-nft-fib, kmod-nft-offload, kmod-nft-nat, nftables-json, ucode, ucode-mod-fs, ucode-mod-ubus, ucode-mod-uci
+Provides: uci-firewall
+Source: package/network/config/firewall4
+SourceName: firewall4
+License: ISC
+Section: net
+SourceDateEpoch: 1761103961
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 28713
+Description:  This package provides an nftables-based implementation of the UCI firewall
+ sharing the same configuration format.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/firewall4.list b/ucentral-client/rootfs/usr/lib/opkg/info/firewall4.list
new file mode 100644
index 0000000..ea10ce2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/firewall4.list
@@ -0,0 +1,23 @@
+/etc/nftables.d/10-custom-filter-chains.nft
+/usr/share/firewall4/templates/zone-mssfix.uc
+/lib/upgrade/keep.d/firewall4
+/etc/nftables.d/README
+/usr/share/firewall4/helpers
+/usr/share/firewall4/templates/zone-masq.uc
+/etc/init.d/firewall
+/usr/share/firewall4/templates/mangle-rule.uc
+/sbin/fw3
+/sbin/fw4
+/etc/config/firewall
+/usr/share/nftables.d/README
+/usr/share/firewall4/main.uc
+/usr/share/ucode/fw4.uc
+/usr/share/firewall4/templates/redirect.uc
+/usr/share/firewall4/templates/zone-verdict.uc
+/usr/share/firewall4/templates/rule.uc
+/etc/hotplug.d/iface/20-firewall
+/usr/share/firewall4/templates/ruleset.uc
+/usr/share/firewall4/templates/zone-drop-invalid.uc
+/usr/share/firewall4/templates/zone-notrack.uc
+/usr/share/firewall4/templates/zone-jump.uc
+/usr/share/firewall4/templates/zone-match.uc
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/firewall4.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/firewall4.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/firewall4.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/firstcontact.control b/ucentral-client/rootfs/usr/lib/opkg/info/firstcontact.control
new file mode 100644
index 0000000..7206f72
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/firstcontact.control
@@ -0,0 +1,12 @@
+Package: firstcontact
+Version: 1
+Depends: libc, libubox20240329, libcurl4, libopenssl3, certificates
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/tip/firstcontact
+SourceName: firstcontact
+License: BSD-3-Clause
+Section: ucentral
+SourceDateEpoch: 1699337164
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 3238
+Description:  TIP DigiCert firstcontact
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/firstcontact.list b/ucentral-client/rootfs/usr/lib/opkg/info/firstcontact.list
new file mode 100644
index 0000000..8c57641
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/firstcontact.list
@@ -0,0 +1,4 @@
+/usr/sbin/digicert
+/etc/uci-defaults/zzz-firstcontact
+/etc/init.d/firstcontact
+/usr/share/ucentral/firstcontact.uc
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/firstcontact.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/firstcontact.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/firstcontact.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/fstools.control b/ucentral-client/rootfs/usr/lib/opkg/info/fstools.control
new file mode 100644
index 0000000..c8c82f5
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/fstools.control
@@ -0,0 +1,12 @@
+Package: fstools
+Version: 2023-02-28-bfe882d5-1
+Depends: libc, ubox
+Source: package/system/fstools
+SourceName: fstools
+License: GPL-2.0
+Section: base
+SourceDateEpoch: 1679419702
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 18011
+Description:  OpenWrt filesystem tools
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/fstools.list b/ucentral-client/rootfs/usr/lib/opkg/info/fstools.list
new file mode 100644
index 0000000..2e2be11
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/fstools.list
@@ -0,0 +1,4 @@
+/sbin/mount_root
+/sbin/jffs2reset
+/sbin/jffs2mark
+/lib/libfstools.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/fstools.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/fstools.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/fstools.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/fwtool.control b/ucentral-client/rootfs/usr/lib/opkg/info/fwtool.control
new file mode 100644
index 0000000..22911a6
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/fwtool.control
@@ -0,0 +1,12 @@
+Package: fwtool
+Version: 2019-11-12-8f7fe925-1
+Depends: libc
+Source: package/system/fwtool
+SourceName: fwtool
+License: GPL-2.0
+Section: utils
+SourceDateEpoch: 1573768411
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 3956
+Description:  Utility for appending and extracting firmware metadata and signatures
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/fwtool.list b/ucentral-client/rootfs/usr/lib/opkg/info/fwtool.list
new file mode 100644
index 0000000..88f9af6
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/fwtool.list
@@ -0,0 +1 @@
+/usr/bin/fwtool
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/fwtool.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/fwtool.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/fwtool.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/getrandom.control b/ucentral-client/rootfs/usr/lib/opkg/info/getrandom.control
new file mode 100644
index 0000000..4968c70
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/getrandom.control
@@ -0,0 +1,12 @@
+Package: getrandom
+Version: 2022-08-13-4c7b720b-2
+Depends: libc
+Source: package/system/ubox
+SourceName: getrandom
+License: GPL-2.0
+Section: base
+SourceDateEpoch: 1684402529
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 1502
+Description:  OpenWrt getrandom system helper
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/getrandom.list b/ucentral-client/rootfs/usr/lib/opkg/info/getrandom.list
new file mode 100644
index 0000000..17e4cdb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/getrandom.list
@@ -0,0 +1 @@
+/usr/bin/getrandom
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/getrandom.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/getrandom.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/getrandom.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/gre.control b/ucentral-client/rootfs/usr/lib/opkg/info/gre.control
new file mode 100644
index 0000000..777c8e9
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/gre.control
@@ -0,0 +1,13 @@
+Package: gre
+Version: 13
+Depends: libc, kmod-gre, kmod-gre6, resolveip
+Provides: grev4, grev6
+Source: package/network/config/gre
+SourceName: gre
+License: GPL-2.0
+Section: net
+SourceDateEpoch: 1615665535
+Maintainer: Hans Dedecker <dedeckeh@gmail.com>
+Architecture: all
+Installed-Size: 1572
+Description:  Generic Routing Encapsulation config support (IPv4 and IPv6) in /etc/config/network.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/gre.list b/ucentral-client/rootfs/usr/lib/opkg/info/gre.list
new file mode 100644
index 0000000..d936802
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/gre.list
@@ -0,0 +1 @@
+/lib/netifd/proto/gre.sh
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/gre.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/gre.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/gre.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/grub2-bios-setup.control b/ucentral-client/rootfs/usr/lib/opkg/info/grub2-bios-setup.control
new file mode 100644
index 0000000..616c6fa
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/grub2-bios-setup.control
@@ -0,0 +1,12 @@
+Package: grub2-bios-setup
+Version: 2.06-5
+Depends: libc
+Source: package/boot/grub2
+SourceName: grub2-bios-setup
+License: GPL-3.0-or-later
+Section: utils
+SourceDateEpoch: 1686658471
+CPE-ID: cpe:/a:gnu:grub2
+Architecture: x86_64
+Installed-Size: 356611
+Description:  Set up images to bootable.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/grub2-bios-setup.list b/ucentral-client/rootfs/usr/lib/opkg/info/grub2-bios-setup.list
new file mode 100644
index 0000000..cfb34bc
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/grub2-bios-setup.list
@@ -0,0 +1 @@
+/usr/sbin/grub-bios-setup
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/grub2-bios-setup.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/grub2-bios-setup.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/grub2-bios-setup.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/grub2.control b/ucentral-client/rootfs/usr/lib/opkg/info/grub2.control
new file mode 100644
index 0000000..491515f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/grub2.control
@@ -0,0 +1,12 @@
+Package: grub2
+Version: 2.06-5
+Depends: libc
+Source: package/boot/grub2
+SourceName: grub2
+License: GPL-3.0-or-later
+Section: boot
+SourceDateEpoch: 1686658471
+CPE-ID: cpe:/a:gnu:grub2
+Architecture: x86_64
+Installed-Size: 96
+Description:  GRand Unified Bootloader (pc)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/grub2.list b/ucentral-client/rootfs/usr/lib/opkg/info/grub2.list
new file mode 100644
index 0000000..e69de29
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/grub2.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/grub2.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/grub2.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/hostapd-common.control b/ucentral-client/rootfs/usr/lib/opkg/info/hostapd-common.control
new file mode 100644
index 0000000..bb5e699
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/hostapd-common.control
@@ -0,0 +1,13 @@
+Package: hostapd-common
+Version: 2023-09-08-e5ccbfc6-4
+Depends: libc
+Source: package/network/services/hostapd
+SourceName: hostapd-common
+License: BSD-3-Clause
+Section: net
+SourceDateEpoch: 1761103960
+CPE-ID: cpe:/a:w1.fi:hostapd
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 16423
+Description:  hostapd/wpa_supplicant common support files
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/hostapd-common.list b/ucentral-client/rootfs/usr/lib/opkg/info/hostapd-common.list
new file mode 100644
index 0000000..9dc2ee4
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/hostapd-common.list
@@ -0,0 +1,8 @@
+/etc/capabilities/wpad.json
+/usr/share/acl.d/wpad_acl.json
+/lib/netifd/hostapd.sh
+/etc/init.d/wpad
+/etc/rc.button/wps
+/lib/netifd/dhcp-get-server.sh
+/usr/share/hostap/wdev.uc
+/usr/share/hostap/common.uc
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/hostapd-common.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/hostapd-common.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/hostapd-common.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ieee8021x.control b/ucentral-client/rootfs/usr/lib/opkg/info/ieee8021x.control
new file mode 100644
index 0000000..9c7df94
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ieee8021x.control
@@ -0,0 +1,12 @@
+Package: ieee8021x
+Version: 1
+Depends: libc, libubox20240329, libubus20230605, libuci20130104
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/ieee8021x
+SourceName: ieee8021x
+License: GPL-2.0
+Section: net
+SourceDateEpoch: 1699000778
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 2846
+Description:  Wired 802.1x
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ieee8021x.list b/ucentral-client/rootfs/usr/lib/opkg/info/ieee8021x.list
new file mode 100644
index 0000000..3739aee
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ieee8021x.list
@@ -0,0 +1,3 @@
+/usr/bin/ieee8021x.uc
+/etc/config/ieee8021x
+/etc/init.d/ieee8021x
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ieee8021x.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ieee8021x.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ieee8021x.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/igmpproxy.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/igmpproxy.conffiles
new file mode 100644
index 0000000..ad0afe8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/igmpproxy.conffiles
@@ -0,0 +1 @@
+/etc/config/igmpproxy
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/igmpproxy.control b/ucentral-client/rootfs/usr/lib/opkg/info/igmpproxy.control
new file mode 100644
index 0000000..3781eaa
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/igmpproxy.control
@@ -0,0 +1,13 @@
+Package: igmpproxy
+Version: 0.4-1
+Depends: libc
+Source: feeds/packages/net/igmpproxy
+SourceName: igmpproxy
+License: GPL-2.0+
+Section: net
+SourceDateEpoch: 1761088275
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 18507
+Description:  IGMPproxy is a simple dynamic Multicast Routing Daemon using
+ only IGMP signalling (Internet Group Management Protocol).
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/igmpproxy.list b/ucentral-client/rootfs/usr/lib/opkg/info/igmpproxy.list
new file mode 100644
index 0000000..9854fc4
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/igmpproxy.list
@@ -0,0 +1,3 @@
+/etc/init.d/igmpproxy
+/usr/sbin/igmpproxy
+/etc/config/igmpproxy
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/igmpproxy.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/igmpproxy.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/igmpproxy.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ip-bridge.control b/ucentral-client/rootfs/usr/lib/opkg/info/ip-bridge.control
new file mode 100644
index 0000000..be5f578
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ip-bridge.control
@@ -0,0 +1,13 @@
+Package: ip-bridge
+Version: 6.3.0-1
+Depends: libc, libnl-tiny1
+Source: package/network/utils/iproute2
+SourceName: ip-bridge
+License: GPL-2.0
+Section: net
+SourceDateEpoch: 1683462718
+CPE-ID: cpe:/a:iproute2_project:iproute2
+Maintainer: Russell Senior <russell@personaltelco.net>
+Architecture: x86_64
+Installed-Size: 35661
+Description:  Bridge configuration utility from iproute2
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ip-bridge.list b/ucentral-client/rootfs/usr/lib/opkg/info/ip-bridge.list
new file mode 100644
index 0000000..23c1b71
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ip-bridge.list
@@ -0,0 +1 @@
+/usr/sbin/bridge
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ip-bridge.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ip-bridge.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ip-bridge.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/iptables-mod-conntrack-extra.control b/ucentral-client/rootfs/usr/lib/opkg/info/iptables-mod-conntrack-extra.control
new file mode 100644
index 0000000..7edf2b0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/iptables-mod-conntrack-extra.control
@@ -0,0 +1,23 @@
+Package: iptables-mod-conntrack-extra
+Version: 1.8.8-1
+Depends: libc, libxtables12, kmod-ipt-conntrack-extra
+Source: package/network/utils/iptables
+SourceName: iptables-mod-conntrack-extra
+License: GPL-2.0
+Section: net
+SourceDateEpoch: 1679419702
+CPE-ID: cpe:/a:netfilter_core_team:iptables
+Architecture: x86_64
+Installed-Size: 13285
+Description:  Extra iptables extensions for connection tracking.
+ 
+ Matches:
+ - connbytes
+ - connlimit
+ - connmark
+ - recent
+ - helper
+ 
+ Targets:
+ - CONNMARK
+ 
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/iptables-mod-conntrack-extra.list b/ucentral-client/rootfs/usr/lib/opkg/info/iptables-mod-conntrack-extra.list
new file mode 100644
index 0000000..7818f4a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/iptables-mod-conntrack-extra.list
@@ -0,0 +1,6 @@
+/usr/lib/iptables/libxt_connbytes.so
+/usr/lib/iptables/libxt_CONNMARK.so
+/usr/lib/iptables/libxt_helper.so
+/usr/lib/iptables/libxt_connmark.so
+/usr/lib/iptables/libxt_recent.so
+/usr/lib/iptables/libxt_connlimit.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/iptables-mod-conntrack-extra.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/iptables-mod-conntrack-extra.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/iptables-mod-conntrack-extra.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/iw.control b/ucentral-client/rootfs/usr/lib/opkg/info/iw.control
new file mode 100644
index 0000000..d02f212
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/iw.control
@@ -0,0 +1,13 @@
+Package: iw
+Version: 5.19-1
+Depends: libc, libnl-tiny1
+Source: package/network/utils/iw
+SourceName: iw
+License: GPL-2.0
+Section: net
+SourceDateEpoch: 1695847021
+CPE-ID: cpe:/a:kernel:iw
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 49815
+Description:  cfg80211 interface configuration utility
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/iw.list b/ucentral-client/rootfs/usr/lib/opkg/info/iw.list
new file mode 100644
index 0000000..3726eaf
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/iw.list
@@ -0,0 +1 @@
+/usr/sbin/iw
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/iw.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/iw.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/iw.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/iwinfo.control b/ucentral-client/rootfs/usr/lib/opkg/info/iwinfo.control
new file mode 100644
index 0000000..7ac745f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/iwinfo.control
@@ -0,0 +1,12 @@
+Package: iwinfo
+Version: 2023-07-01-ca79f641-1
+Depends: libc, libiwinfo20230701
+Source: package/network/utils/iwinfo
+SourceName: iwinfo
+License: GPL-2.0
+Section: utils
+SourceDateEpoch: 1761103960
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 6779
+Description:  Command line frontend for the wireless information library.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/iwinfo.list b/ucentral-client/rootfs/usr/lib/opkg/info/iwinfo.list
new file mode 100644
index 0000000..1d3a6d0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/iwinfo.list
@@ -0,0 +1 @@
+/usr/bin/iwinfo
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/iwinfo.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/iwinfo.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/iwinfo.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/jansson4.control b/ucentral-client/rootfs/usr/lib/opkg/info/jansson4.control
new file mode 100644
index 0000000..be17679
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/jansson4.control
@@ -0,0 +1,15 @@
+Package: jansson4
+Version: 2.14-3
+Depends: libc
+Provides: jansson
+Source: package/libs/jansson
+SourceName: jansson
+License: MIT
+LicenseFiles: LICENSE
+Section: libs
+SourceDateEpoch: 1679419702
+ABIVersion: 4
+CPE-ID: cpe:/a:jansson_project:jansson
+Architecture: x86_64
+Installed-Size: 23205
+Description:  Jansson is a C library for encoding, decoding and manipulating JSON data
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/jansson4.list b/ucentral-client/rootfs/usr/lib/opkg/info/jansson4.list
new file mode 100644
index 0000000..40eb989
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/jansson4.list
@@ -0,0 +1,2 @@
+/usr/lib/libjansson.so.4.14.0
+/usr/lib/libjansson.so.4
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/jansson4.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/jansson4.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/jansson4.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/jshn.control b/ucentral-client/rootfs/usr/lib/opkg/info/jshn.control
new file mode 100644
index 0000000..0613d50
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/jshn.control
@@ -0,0 +1,12 @@
+Package: jshn
+Version: 2024-03-29-eb9bcb64-1
+Depends: libc, libjson-c5, libubox20240329, libblobmsg-json20240329
+Source: package/libs/libubox
+SourceName: jshn
+License: ISC
+Section: utils
+SourceDateEpoch: 1761103960
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 6370
+Description:  Library for parsing and generating JSON from shell scripts
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/jshn.list b/ucentral-client/rootfs/usr/lib/opkg/info/jshn.list
new file mode 100644
index 0000000..ba3aceb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/jshn.list
@@ -0,0 +1,2 @@
+/usr/share/libubox/jshn.sh
+/usr/bin/jshn
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/jshn.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/jshn.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/jshn.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/jsonfilter.control b/ucentral-client/rootfs/usr/lib/opkg/info/jsonfilter.control
new file mode 100644
index 0000000..00d766a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/jsonfilter.control
@@ -0,0 +1,12 @@
+Package: jsonfilter
+Version: 2018-02-04-c7e938d6-1
+Depends: libc, libubox20240329, libjson-c5
+Source: package/utils/jsonfilter
+SourceName: jsonfilter
+License: ISC
+Section: base
+SourceDateEpoch: 1645878990
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 9718
+Description:  OpenWrt JSON filter utility
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/jsonfilter.list b/ucentral-client/rootfs/usr/lib/opkg/info/jsonfilter.list
new file mode 100644
index 0000000..20be7dd
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/jsonfilter.list
@@ -0,0 +1 @@
+/usr/bin/jsonfilter
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/jsonfilter.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/jsonfilter.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/jsonfilter.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kernel.control b/ucentral-client/rootfs/usr/lib/opkg/info/kernel.control
new file mode 100644
index 0000000..f6798ee
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kernel.control
@@ -0,0 +1,11 @@
+Package: kernel
+Version: 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874
+Depends: libc
+Source: package/kernel/linux
+SourceName: kernel
+License: GPL-2.0
+Section: sys
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 97
+Description:  Virtual kernel package
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kernel.list b/ucentral-client/rootfs/usr/lib/opkg/info/kernel.list
new file mode 100644
index 0000000..e69de29
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kernel.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kernel.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kernel.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-amazon-ena.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-amazon-ena.control
new file mode 100644
index 0000000..3c84bb8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-amazon-ena.control
@@ -0,0 +1,12 @@
+Package: kmod-amazon-ena
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-amazon-ena
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 42973
+Description:  This driver supports Elastic Network Adapter (ENA)
+ used by Amazon AWS T3 (2018) and later instances.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-amazon-ena.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-amazon-ena.list
new file mode 100644
index 0000000..3c05fe0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-amazon-ena.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/ena.ko
+/etc/modules.d/12-amazon-ena
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-amazon-ena.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-amazon-ena.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-amazon-ena.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-amd-xgbe.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-amd-xgbe.control
new file mode 100644
index 0000000..13d869b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-amd-xgbe.control
@@ -0,0 +1,11 @@
+Package: kmod-amd-xgbe
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-lib-crc32c, kmod-ptp, kmod-libphy, kmod-mdio-devres
+Source: package/kernel/linux
+SourceName: kmod-amd-xgbe
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 63020
+Description:  Kernel modules for AMD 10GbE Ethernet device on an AMD SoC.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-amd-xgbe.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-amd-xgbe.list
new file mode 100644
index 0000000..c613f00
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-amd-xgbe.list
@@ -0,0 +1,2 @@
+/etc/modules.d/35-amd-xgbe
+/lib/modules/5.15.132/amd-xgbe.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-amd-xgbe.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-amd-xgbe.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-amd-xgbe.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-batman-adv.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-batman-adv.control
new file mode 100644
index 0000000..971f6e0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-batman-adv.control
@@ -0,0 +1,18 @@
+Package: kmod-batman-adv
+Version: 5.15.132+2023.1-12
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-lib-crc16, kmod-lib-crc32c, kmod-cfg80211, batctl
+Source: feeds/routing/batman-adv
+SourceName: kmod-batman-adv
+License: GPL-2.0-only MIT
+LicenseFiles: LICENSES/preferred/GPL-2.0 LICENSES/preferred/MIT
+Section: kernel
+SourceDateEpoch: 1758711045
+Maintainer: Simon Wunderlich <sw@simonwunderlich.de>
+Architecture: x86_64
+Installed-Size: 94832
+Description:  B.A.T.M.A.N. (better approach to mobile ad-hoc networking) is
+ a routing protocol for multi-hop ad-hoc mesh networks. The
+ networks may be wired or wireless. See
+ https://www.open-mesh.org/ for more information and user space
+ tools. This package builds version 2023.1 of the kernel
+ module.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-batman-adv.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-batman-adv.list
new file mode 100644
index 0000000..de32df1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-batman-adv.list
@@ -0,0 +1,7 @@
+/lib/modules/5.15.132/batman-adv.ko
+/lib/upgrade/keep.d/kmod-batman-adv
+/etc/uci-defaults/99-migrate-batadv_hardif
+/lib/netifd/proto/batadv_vlan.sh
+/lib/netifd/proto/batadv_hardif.sh
+/lib/netifd/proto/batadv.sh
+/etc/modules.d/batman-adv
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-batman-adv.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-batman-adv.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-batman-adv.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-bnx2.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-bnx2.control
new file mode 100644
index 0000000..b3cb0fd
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-bnx2.control
@@ -0,0 +1,11 @@
+Package: kmod-bnx2
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), bnx2-firmware
+Source: package/kernel/linux
+SourceName: kmod-bnx2
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 41565
+Description:  Kernel module for the BCM5706/5708/5709/5716 ethernet adapter
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-bnx2.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-bnx2.list
new file mode 100644
index 0000000..5c0e640
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-bnx2.list
@@ -0,0 +1,2 @@
+/etc/modules.d/bnx2
+/lib/modules/5.15.132/bnx2.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-bnx2.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-bnx2.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-bnx2.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-button-hotplug.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-button-hotplug.control
new file mode 100644
index 0000000..94ae933
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-button-hotplug.control
@@ -0,0 +1,12 @@
+Package: kmod-button-hotplug
+Version: 5.15.132-3
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-input-core
+Source: package/kernel/button-hotplug
+SourceName: kmod-button-hotplug
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1666637374
+Architecture: x86_64
+Installed-Size: 3054
+Description:  Kernel module to generate button uevent-s from input subsystem events.
+ If your device uses GPIO buttons, see gpio-button-hotplug.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-button-hotplug.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-button-hotplug.list
new file mode 100644
index 0000000..69fccf5
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-button-hotplug.list
@@ -0,0 +1,3 @@
+/etc/modules.d/30-button-hotplug
+/etc/modules-boot.d/30-button-hotplug
+/lib/modules/5.15.132/button-hotplug.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-button-hotplug.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-button-hotplug.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-button-hotplug.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-cfg80211.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-cfg80211.control
new file mode 100644
index 0000000..d9620ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-cfg80211.control
@@ -0,0 +1,11 @@
+Package: kmod-cfg80211
+Version: 5.15.132+6.1.24-3
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), iw, iwinfo, wireless-regdb
+Source: package/kernel/mac80211
+SourceName: kmod-cfg80211
+Section: kernel
+SourceDateEpoch: 1761103960
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 178146
+Description:  cfg80211 is the Linux wireless LAN (802.11) configuration API.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-cfg80211.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-cfg80211.list
new file mode 100644
index 0000000..f975712
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-cfg80211.list
@@ -0,0 +1,5 @@
+/etc/hotplug.d/ieee80211/10-wifi-detect
+/lib/netifd/wireless/mac80211.sh
+/lib/wifi/mac80211.sh
+/lib/modules/5.15.132/cfg80211.ko
+/lib/modules/5.15.132/compat.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-cfg80211.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-cfg80211.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-cfg80211.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-acompress.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-acompress.control
new file mode 100644
index 0000000..070ec8a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-acompress.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-acompress
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-crypto-acompress
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 194
+Description:  Asynchronous Compression operations
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-acompress.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-acompress.list
new file mode 100644
index 0000000..959d18b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-acompress.list
@@ -0,0 +1 @@
+/etc/modules.d/09-crypto-acompress
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-acompress.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-acompress.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-acompress.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-aead.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-aead.control
new file mode 100644
index 0000000..bba95de
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-aead.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-aead
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-null
+Source: package/kernel/linux
+SourceName: kmod-crypto-aead
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 229
+Description:  CryptoAPI AEAD support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-aead.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-aead.list
new file mode 100644
index 0000000..40f0f14
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-aead.list
@@ -0,0 +1,2 @@
+/etc/modules-boot.d/09-crypto-aead
+/etc/modules.d/09-crypto-aead
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-aead.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-aead.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-aead.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ccm.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ccm.control
new file mode 100644
index 0000000..e975453
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ccm.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-ccm
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-ctr, kmod-crypto-aead
+Source: package/kernel/linux
+SourceName: kmod-crypto-ccm
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 185
+Description:  Support for Counter with CBC MAC (CCM)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ccm.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ccm.list
new file mode 100644
index 0000000..a4197f2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ccm.list
@@ -0,0 +1 @@
+/etc/modules.d/09-crypto-ccm
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ccm.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ccm.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ccm.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-cmac.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-cmac.control
new file mode 100644
index 0000000..2403008
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-cmac.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-cmac
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-hash
+Source: package/kernel/linux
+SourceName: kmod-crypto-cmac
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 2408
+Description:  Support for Cipher-based Message Authentication Code (CMAC)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-cmac.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-cmac.list
new file mode 100644
index 0000000..6444a5b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-cmac.list
@@ -0,0 +1,2 @@
+/etc/modules.d/09-crypto-cmac
+/lib/modules/5.15.132/cmac.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-cmac.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-cmac.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-cmac.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-crc32c.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-crc32c.control
new file mode 100644
index 0000000..d23fb68
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-crc32c.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-crc32c
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-hash
+Source: package/kernel/linux
+SourceName: kmod-crypto-crc32c
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 238
+Description:  CRC32c CRC module
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-crc32c.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-crc32c.list
new file mode 100644
index 0000000..2ae967f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-crc32c.list
@@ -0,0 +1,2 @@
+/etc/modules.d/04-crypto-crc32c
+/etc/modules-boot.d/04-crypto-crc32c
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-crc32c.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-crc32c.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-crc32c.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ctr.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ctr.control
new file mode 100644
index 0000000..480b433
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ctr.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-ctr
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-manager, kmod-crypto-seqiv
+Source: package/kernel/linux
+SourceName: kmod-crypto-ctr
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 184
+Description:  Counter Mode CryptoAPI module
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ctr.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ctr.list
new file mode 100644
index 0000000..1c101f5
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ctr.list
@@ -0,0 +1 @@
+/etc/modules.d/09-crypto-ctr
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ctr.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ctr.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ctr.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-gcm.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-gcm.control
new file mode 100644
index 0000000..2dcd2e8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-gcm.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-gcm
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-ctr, kmod-crypto-ghash, kmod-crypto-null
+Source: package/kernel/linux
+SourceName: kmod-crypto-gcm
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 185
+Description:  GCM/GMAC CryptoAPI module
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-gcm.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-gcm.list
new file mode 100644
index 0000000..37baef5
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-gcm.list
@@ -0,0 +1 @@
+/etc/modules.d/09-crypto-gcm
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-gcm.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-gcm.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-gcm.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-gf128.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-gf128.control
new file mode 100644
index 0000000..b504be2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-gf128.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-gf128
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-crypto-gf128
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 190
+Description:  GF(2^128) multiplication functions CryptoAPI module
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-gf128.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-gf128.list
new file mode 100644
index 0000000..83a4d87
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-gf128.list
@@ -0,0 +1 @@
+/etc/modules.d/09-crypto-gf128
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-gf128.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-gf128.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-gf128.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ghash.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ghash.control
new file mode 100644
index 0000000..bc60c86
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ghash.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-ghash
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-gf128, kmod-crypto-hash
+Source: package/kernel/linux
+SourceName: kmod-crypto-ghash
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 195
+Description:  GHASH digest CryptoAPI module
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ghash.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ghash.list
new file mode 100644
index 0000000..b49d40c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ghash.list
@@ -0,0 +1 @@
+/etc/modules.d/09-crypto-ghash
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ghash.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ghash.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-ghash.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-hash.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-hash.control
new file mode 100644
index 0000000..7aec220
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-hash.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-hash
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-crypto-hash
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 236
+Description:  CryptoAPI hash support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-hash.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-hash.list
new file mode 100644
index 0000000..46c5f58
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-hash.list
@@ -0,0 +1,2 @@
+/etc/modules.d/02-crypto-hash
+/etc/modules-boot.d/02-crypto-hash
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-hash.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-hash.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-hash.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-hmac.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-hmac.control
new file mode 100644
index 0000000..5b798f3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-hmac.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-hmac
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-hash, kmod-crypto-manager
+Source: package/kernel/linux
+SourceName: kmod-crypto-hmac
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 2669
+Description:  HMAC digest CryptoAPI module
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-hmac.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-hmac.list
new file mode 100644
index 0000000..ed0817b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-hmac.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/hmac.ko
+/etc/modules.d/09-crypto-hmac
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-hmac.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-hmac.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-hmac.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-kpp.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-kpp.control
new file mode 100644
index 0000000..c90e979
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-kpp.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-kpp
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-crypto-kpp
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 97
+Description:  Key-agreement Protocol Primitives
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-kpp.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-kpp.list
new file mode 100644
index 0000000..e69de29
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-kpp.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-kpp.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-kpp.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-chacha20.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-chacha20.control
new file mode 100644
index 0000000..91ca0fb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-chacha20.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-lib-chacha20
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-crypto-lib-chacha20
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 8348
+Description:  ChaCha library interface
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-chacha20.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-chacha20.list
new file mode 100644
index 0000000..0d4bad8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-chacha20.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/libchacha.ko
+/lib/modules/5.15.132/chacha-x86_64.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-chacha20.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-chacha20.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-chacha20.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-chacha20poly1305.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-chacha20poly1305.control
new file mode 100644
index 0000000..cefac8a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-chacha20poly1305.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-lib-chacha20poly1305
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-lib-chacha20, kmod-crypto-lib-poly1305
+Source: package/kernel/linux
+SourceName: kmod-crypto-lib-chacha20poly1305
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 3760
+Description:  ChaCha20-Poly1305 AEAD support (8-byte nonce library version)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-chacha20poly1305.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-chacha20poly1305.list
new file mode 100644
index 0000000..7b71e92
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-chacha20poly1305.list
@@ -0,0 +1 @@
+/lib/modules/5.15.132/libchacha20poly1305.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-chacha20poly1305.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-chacha20poly1305.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-chacha20poly1305.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-curve25519.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-curve25519.control
new file mode 100644
index 0000000..882b6cf
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-curve25519.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-lib-curve25519
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-kpp
+Source: package/kernel/linux
+SourceName: kmod-crypto-lib-curve25519
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 27023
+Description:  Curve25519 scalar multiplication library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-curve25519.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-curve25519.list
new file mode 100644
index 0000000..3e8caa2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-curve25519.list
@@ -0,0 +1,3 @@
+/lib/modules/5.15.132/libcurve25519.ko
+/lib/modules/5.15.132/libcurve25519-generic.ko
+/lib/modules/5.15.132/curve25519-x86_64.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-curve25519.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-curve25519.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-curve25519.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-poly1305.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-poly1305.control
new file mode 100644
index 0000000..17d340b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-poly1305.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-lib-poly1305
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-hash
+Source: package/kernel/linux
+SourceName: kmod-crypto-lib-poly1305
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 9248
+Description:  Poly1305 library interface
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-poly1305.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-poly1305.list
new file mode 100644
index 0000000..4ca37e0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-poly1305.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/libpoly1305.ko
+/lib/modules/5.15.132/poly1305-x86_64.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-poly1305.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-poly1305.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-lib-poly1305.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-manager.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-manager.control
new file mode 100644
index 0000000..6129b2a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-manager.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-manager
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-aead, kmod-crypto-hash
+Source: package/kernel/linux
+SourceName: kmod-crypto-manager
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 236
+Description:  CryptoAPI algorithm manager
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-manager.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-manager.list
new file mode 100644
index 0000000..9f4268b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-manager.list
@@ -0,0 +1,2 @@
+/etc/modules.d/09-crypto-manager
+/etc/modules-boot.d/09-crypto-manager
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-manager.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-manager.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-manager.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-null.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-null.control
new file mode 100644
index 0000000..fbfc9c4
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-null.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-null
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-hash
+Source: package/kernel/linux
+SourceName: kmod-crypto-null
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 189
+Description:  Null CryptoAPI module
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-null.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-null.list
new file mode 100644
index 0000000..90607c8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-null.list
@@ -0,0 +1 @@
+/etc/modules.d/09-crypto-null
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-null.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-null.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-null.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-rng.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-rng.control
new file mode 100644
index 0000000..7ee4efa
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-rng.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-rng
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-hash, kmod-crypto-hmac, kmod-crypto-sha512
+Source: package/kernel/linux
+SourceName: kmod-crypto-rng
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 8887
+Description:  CryptoAPI random number generation
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-rng.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-rng.list
new file mode 100644
index 0000000..f0a2d29
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-rng.list
@@ -0,0 +1,3 @@
+/lib/modules/5.15.132/drbg.ko
+/lib/modules/5.15.132/jitterentropy_rng.ko
+/etc/modules.d/09-crypto-rng
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-rng.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-rng.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-rng.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-seqiv.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-seqiv.control
new file mode 100644
index 0000000..dcc1425
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-seqiv.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-seqiv
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-aead, kmod-crypto-rng
+Source: package/kernel/linux
+SourceName: kmod-crypto-seqiv
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 2052
+Description:  CryptoAPI Sequence Number IV Generator
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-seqiv.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-seqiv.list
new file mode 100644
index 0000000..b486d48
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-seqiv.list
@@ -0,0 +1,2 @@
+/etc/modules.d/09-crypto-seqiv
+/lib/modules/5.15.132/seqiv.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-seqiv.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-seqiv.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-seqiv.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-sha512.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-sha512.control
new file mode 100644
index 0000000..a0bd873
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-sha512.control
@@ -0,0 +1,11 @@
+Package: kmod-crypto-sha512
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-hash
+Source: package/kernel/linux
+SourceName: kmod-crypto-sha512
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 12550
+Description:  SHA512 digest CryptoAPI module
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-sha512.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-sha512.list
new file mode 100644
index 0000000..a92f3ce
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-sha512.list
@@ -0,0 +1,3 @@
+/etc/modules.d/09-crypto-sha512
+/lib/modules/5.15.132/sha512-ssse3.ko
+/lib/modules/5.15.132/sha512_generic.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-sha512.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-sha512.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-crypto-sha512.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-e1000.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-e1000.control
new file mode 100644
index 0000000..87672db
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-e1000.control
@@ -0,0 +1,11 @@
+Package: kmod-e1000
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-e1000
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 52401
+Description:  Kernel modules for Intel(R) PRO/1000 PCI Ethernet adapters.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-e1000.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-e1000.list
new file mode 100644
index 0000000..95e272d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-e1000.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/e1000.ko
+/etc/modules.d/35-e1000
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-e1000.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-e1000.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-e1000.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-e1000e.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-e1000e.control
new file mode 100644
index 0000000..47dd4d8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-e1000e.control
@@ -0,0 +1,11 @@
+Package: kmod-e1000e
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-ptp
+Source: package/kernel/linux
+SourceName: kmod-e1000e
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 94199
+Description:  Kernel modules for Intel(R) PRO/1000 PCIe Ethernet adapters.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-e1000e.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-e1000e.list
new file mode 100644
index 0000000..72b1f90
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-e1000e.list
@@ -0,0 +1,2 @@
+/etc/modules.d/e1000e
+/lib/modules/5.15.132/e1000e.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-e1000e.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-e1000e.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-e1000e.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-forcedeth.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-forcedeth.control
new file mode 100644
index 0000000..c08c497
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-forcedeth.control
@@ -0,0 +1,11 @@
+Package: kmod-forcedeth
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-forcedeth
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 30229
+Description:  Kernel driver for Nvidia Ethernet support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-forcedeth.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-forcedeth.list
new file mode 100644
index 0000000..5d3333e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-forcedeth.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/forcedeth.ko
+/etc/modules.d/forcedeth
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-forcedeth.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-forcedeth.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-forcedeth.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-fs-vfat.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-fs-vfat.control
new file mode 100644
index 0000000..48d6f69
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-fs-vfat.control
@@ -0,0 +1,11 @@
+Package: kmod-fs-vfat
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nls-base, kmod-nls-cp437, kmod-nls-iso8859-1, kmod-nls-utf8
+Source: package/kernel/linux
+SourceName: kmod-fs-vfat
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 43137
+Description:  Kernel module for VFAT filesystem support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-fs-vfat.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-fs-vfat.list
new file mode 100644
index 0000000..b9e78e2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-fs-vfat.list
@@ -0,0 +1,4 @@
+/etc/modules-boot.d/30-fs-vfat
+/etc/modules.d/30-fs-vfat
+/lib/modules/5.15.132/fat.ko
+/lib/modules/5.15.132/vfat.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-fs-vfat.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-fs-vfat.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-fs-vfat.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-gre.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-gre.control
new file mode 100644
index 0000000..606f1ff
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-gre.control
@@ -0,0 +1,11 @@
+Package: kmod-gre
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-iptunnel
+Source: package/kernel/linux
+SourceName: kmod-gre
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 13404
+Description:  Generic Routing Encapsulation support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-gre.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-gre.list
new file mode 100644
index 0000000..3f65c1f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-gre.list
@@ -0,0 +1,3 @@
+/lib/modules/5.15.132/ip_gre.ko
+/lib/modules/5.15.132/gre.ko
+/etc/modules.d/39-gre
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-gre.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-gre.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-gre.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-gre6.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-gre6.control
new file mode 100644
index 0000000..2a0ca19
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-gre6.control
@@ -0,0 +1,11 @@
+Package: kmod-gre6
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-iptunnel, kmod-ip6-tunnel, kmod-gre
+Source: package/kernel/linux
+SourceName: kmod-gre6
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 15207
+Description:  Generic Routing Encapsulation support over IPv6
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-gre6.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-gre6.list
new file mode 100644
index 0000000..ad07e1f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-gre6.list
@@ -0,0 +1,2 @@
+/etc/modules.d/39-gre6
+/lib/modules/5.15.132/ip6_gre.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-gre6.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-gre6.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-gre6.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-hwmon-core.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-hwmon-core.control
new file mode 100644
index 0000000..1c6d3cc
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-hwmon-core.control
@@ -0,0 +1,11 @@
+Package: kmod-hwmon-core
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-hwmon-core
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 97
+Description:  Kernel modules for hardware monitoring
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-hwmon-core.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-hwmon-core.list
new file mode 100644
index 0000000..e69de29
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-hwmon-core.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-hwmon-core.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-hwmon-core.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-i2c-algo-bit.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-i2c-algo-bit.control
new file mode 100644
index 0000000..f01882d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-i2c-algo-bit.control
@@ -0,0 +1,11 @@
+Package: kmod-i2c-algo-bit
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-i2c-core
+Source: package/kernel/linux
+SourceName: kmod-i2c-algo-bit
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 186
+Description:  Kernel modules for I2C bit-banging interfaces
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-i2c-algo-bit.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-i2c-algo-bit.list
new file mode 100644
index 0000000..05621b1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-i2c-algo-bit.list
@@ -0,0 +1 @@
+/etc/modules.d/55-i2c-algo-bit
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-i2c-algo-bit.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-i2c-algo-bit.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-i2c-algo-bit.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-i2c-core.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-i2c-core.control
new file mode 100644
index 0000000..a46d1d0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-i2c-core.control
@@ -0,0 +1,11 @@
+Package: kmod-i2c-core
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-i2c-core
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 4980
+Description:  Kernel modules for I2C support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-i2c-core.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-i2c-core.list
new file mode 100644
index 0000000..9046be1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-i2c-core.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/i2c-dev.ko
+/etc/modules.d/51-i2c-core
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-i2c-core.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-i2c-core.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-i2c-core.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ifb.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ifb.control
new file mode 100644
index 0000000..c424192
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ifb.control
@@ -0,0 +1,11 @@
+Package: kmod-ifb
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-ifb
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 3468
+Description:  The Intermediate Functional Block
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ifb.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ifb.list
new file mode 100644
index 0000000..bc758c8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ifb.list
@@ -0,0 +1,2 @@
+/etc/modules.d/34-ifb
+/lib/modules/5.15.132/ifb.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ifb.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ifb.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ifb.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-igb.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-igb.control
new file mode 100644
index 0000000..f91c215
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-igb.control
@@ -0,0 +1,11 @@
+Package: kmod-igb
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-i2c-core, kmod-i2c-algo-bit, kmod-ptp, kmod-hwmon-core
+Source: package/kernel/linux
+SourceName: kmod-igb
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 93385
+Description:  Kernel modules for Intel(R) 82575/82576 PCI-Express Gigabit Ethernet adapters.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-igb.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-igb.list
new file mode 100644
index 0000000..22894fd
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-igb.list
@@ -0,0 +1,3 @@
+/lib/modules/5.15.132/igb.ko
+/etc/modules-boot.d/35-igb
+/etc/modules.d/35-igb
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-igb.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-igb.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-igb.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-igc.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-igc.control
new file mode 100644
index 0000000..e8fdc32
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-igc.control
@@ -0,0 +1,11 @@
+Package: kmod-igc
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-ptp
+Source: package/kernel/linux
+SourceName: kmod-igc
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 57264
+Description:  Kernel modules for Intel(R) Ethernet Controller I225 Series
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-igc.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-igc.list
new file mode 100644
index 0000000..2c65f1e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-igc.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/igc.ko
+/etc/modules.d/igc
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-igc.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-igc.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-igc.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-input-core.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-input-core.control
new file mode 100644
index 0000000..448effb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-input-core.control
@@ -0,0 +1,11 @@
+Package: kmod-input-core
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-input-core
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 97
+Description:  Kernel modules for support of input device
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-input-core.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-input-core.list
new file mode 100644
index 0000000..e69de29
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-input-core.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-input-core.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-input-core.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ip6-tunnel.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ip6-tunnel.control
new file mode 100644
index 0000000..272efb7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ip6-tunnel.control
@@ -0,0 +1,11 @@
+Package: kmod-ip6-tunnel
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-iptunnel6
+Source: package/kernel/linux
+SourceName: kmod-ip6-tunnel
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 17830
+Description:  Kernel modules for IPv6-in-IPv6 and IPv4-in-IPv6 tunnelling
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ip6-tunnel.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ip6-tunnel.list
new file mode 100644
index 0000000..97dd019
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ip6-tunnel.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/ip6_tunnel.ko
+/etc/modules.d/32-ip6-tunnel
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ip6-tunnel.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ip6-tunnel.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ip6-tunnel.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-conntrack-extra.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-conntrack-extra.control
new file mode 100644
index 0000000..ae01c09
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-conntrack-extra.control
@@ -0,0 +1,17 @@
+Package: kmod-ipt-conntrack-extra
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nf-conncount, kmod-ipt-core, kmod-ipt-conntrack
+Source: package/kernel/linux
+SourceName: kmod-ipt-conntrack-extra
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 11004
+Description:  Netfilter (IPv4) extra kernel modules for connection tracking
+ Includes:
+ - connbytes
+ - connmark/CONNMARK
+ - conntrack
+ - helper
+ - recent
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-conntrack-extra.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-conntrack-extra.list
new file mode 100644
index 0000000..db14c35
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-conntrack-extra.list
@@ -0,0 +1,6 @@
+/lib/modules/5.15.132/xt_connbytes.ko
+/etc/modules.d/ipt-conntrack-extra
+/lib/modules/5.15.132/xt_helper.ko
+/lib/modules/5.15.132/xt_connmark.ko
+/lib/modules/5.15.132/xt_recent.ko
+/lib/modules/5.15.132/xt_connlimit.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-conntrack-extra.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-conntrack-extra.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-conntrack-extra.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-conntrack.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-conntrack.control
new file mode 100644
index 0000000..99140ef
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-conntrack.control
@@ -0,0 +1,17 @@
+Package: kmod-ipt-conntrack
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-ipt-core, kmod-nf-conntrack
+Source: package/kernel/linux
+SourceName: kmod-ipt-conntrack
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 2946
+Description:  Netfilter (IPv4) kernel modules for connection tracking
+ Includes:
+ - conntrack
+ - defrag
+ - iptables_raw
+ - NOTRACK
+ - state
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-conntrack.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-conntrack.list
new file mode 100644
index 0000000..f8f32dd
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-conntrack.list
@@ -0,0 +1,3 @@
+/lib/modules/5.15.132/xt_conntrack.ko
+/etc/modules.d/ipt-conntrack
+/lib/modules/5.15.132/xt_state.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-conntrack.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-conntrack.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-conntrack.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-core.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-core.control
new file mode 100644
index 0000000..7d68614
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-core.control
@@ -0,0 +1,19 @@
+Package: kmod-ipt-core
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nf-reject, kmod-nf-ipt, kmod-nf-log
+Source: package/kernel/linux
+SourceName: kmod-ipt-core
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 11774
+Description:  Netfilter core kernel modules
+ Includes:
+ - comment
+ - limit
+ - LOG
+ - mac
+ - multiport
+ - REJECT
+ - TCPMSS
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-core.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-core.list
new file mode 100644
index 0000000..e13aa4f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-core.list
@@ -0,0 +1,13 @@
+/lib/modules/5.15.132/xt_tcpudp.ko
+/lib/modules/5.15.132/ipt_REJECT.ko
+/lib/modules/5.15.132/xt_limit.ko
+/lib/modules/5.15.132/xt_multiport.ko
+/lib/modules/5.15.132/xt_mark.ko
+/lib/modules/5.15.132/xt_LOG.ko
+/lib/modules/5.15.132/xt_mac.ko
+/lib/modules/5.15.132/iptable_mangle.ko
+/lib/modules/5.15.132/iptable_filter.ko
+/lib/modules/5.15.132/xt_time.ko
+/lib/modules/5.15.132/xt_comment.ko
+/lib/modules/5.15.132/xt_TCPMSS.ko
+/etc/modules.d/ipt-core
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-core.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-core.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ipt-core.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-iptunnel.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-iptunnel.control
new file mode 100644
index 0000000..1d8afd0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-iptunnel.control
@@ -0,0 +1,11 @@
+Package: kmod-iptunnel
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-iptunnel
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 11685
+Description:  Kernel module for generic IP tunnel support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-iptunnel.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-iptunnel.list
new file mode 100644
index 0000000..0911d0c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-iptunnel.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/ip_tunnel.ko
+/etc/modules.d/31-iptunnel
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-iptunnel.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-iptunnel.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-iptunnel.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-iptunnel6.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-iptunnel6.control
new file mode 100644
index 0000000..b9688bb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-iptunnel6.control
@@ -0,0 +1,11 @@
+Package: kmod-iptunnel6
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-iptunnel6
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 2251
+Description:  Kernel modules for IPv6 tunneling
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-iptunnel6.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-iptunnel6.list
new file mode 100644
index 0000000..f194c70
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-iptunnel6.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/tunnel6.ko
+/etc/modules.d/31-iptunnel6
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-iptunnel6.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-iptunnel6.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-iptunnel6.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ixgbe.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ixgbe.control
new file mode 100644
index 0000000..b2e9ed3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ixgbe.control
@@ -0,0 +1,11 @@
+Package: kmod-ixgbe
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-mdio, kmod-ptp, kmod-hwmon-core, kmod-libphy, kmod-mdio-devres
+Source: package/kernel/linux
+SourceName: kmod-ixgbe
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 129468
+Description:  Kernel modules for Intel(R) 82598/82599 PCI-Express 10 Gigabit Ethernet adapters.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ixgbe.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ixgbe.list
new file mode 100644
index 0000000..122d8af
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ixgbe.list
@@ -0,0 +1,2 @@
+/etc/modules.d/35-ixgbe
+/lib/modules/5.15.132/ixgbe.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ixgbe.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ixgbe.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ixgbe.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc-ccitt.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc-ccitt.control
new file mode 100644
index 0000000..b3e24c4
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc-ccitt.control
@@ -0,0 +1,11 @@
+Package: kmod-lib-crc-ccitt
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-lib-crc-ccitt
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 2254
+Description:  Kernel module for CRC-CCITT support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc-ccitt.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc-ccitt.list
new file mode 100644
index 0000000..57f5abc
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc-ccitt.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/crc-ccitt.ko
+/etc/modules.d/lib-crc-ccitt
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc-ccitt.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc-ccitt.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc-ccitt.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc16.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc16.control
new file mode 100644
index 0000000..5edcd79
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc16.control
@@ -0,0 +1,11 @@
+Package: kmod-lib-crc16
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-lib-crc16
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 227
+Description:  Kernel module for CRC16 support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc16.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc16.list
new file mode 100644
index 0000000..4f85437
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc16.list
@@ -0,0 +1,2 @@
+/etc/modules-boot.d/20-lib-crc16
+/etc/modules.d/20-lib-crc16
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc16.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc16.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc16.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc32c.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc32c.control
new file mode 100644
index 0000000..e7d6d4f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc32c.control
@@ -0,0 +1,11 @@
+Package: kmod-lib-crc32c
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-crc32c
+Source: package/kernel/linux
+SourceName: kmod-lib-crc32c
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 1368
+Description:  Kernel module for CRC32 support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc32c.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc32c.list
new file mode 100644
index 0000000..1161bf4
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc32c.list
@@ -0,0 +1,2 @@
+/etc/modules.d/lib-crc32c
+/lib/modules/5.15.132/libcrc32c.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc32c.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc32c.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-crc32c.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-lzo.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-lzo.control
new file mode 100644
index 0000000..f878ad2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-lzo.control
@@ -0,0 +1,11 @@
+Package: kmod-lib-lzo
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-acompress
+Source: package/kernel/linux
+SourceName: kmod-lib-lzo
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 5220
+Description:  Kernel module for LZO compression/decompression support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-lzo.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-lzo.list
new file mode 100644
index 0000000..e26e72d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-lzo.list
@@ -0,0 +1,5 @@
+/lib/modules/5.15.132/lzo-rle.ko
+/etc/modules.d/lib-lzo
+/lib/modules/5.15.132/lzo.ko
+/lib/modules/5.15.132/lzo_compress.ko
+/lib/modules/5.15.132/lzo_decompress.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-lzo.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-lzo.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-lzo.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-textsearch.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-textsearch.control
new file mode 100644
index 0000000..cd8e3fd
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-textsearch.control
@@ -0,0 +1,11 @@
+Package: kmod-lib-textsearch
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-lib-textsearch
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 4229
+Description:  Textsearch support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-textsearch.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-textsearch.list
new file mode 100644
index 0000000..ee3c124
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-textsearch.list
@@ -0,0 +1,4 @@
+/lib/modules/5.15.132/ts_fsm.ko
+/etc/modules.d/lib-textsearch
+/lib/modules/5.15.132/ts_kmp.ko
+/lib/modules/5.15.132/ts_bm.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-textsearch.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-textsearch.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-lib-textsearch.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-libphy.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-libphy.control
new file mode 100644
index 0000000..ec514ed
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-libphy.control
@@ -0,0 +1,11 @@
+Package: kmod-libphy
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-libphy
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 40855
+Description:  PHY library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-libphy.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-libphy.list
new file mode 100644
index 0000000..d7c7909
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-libphy.list
@@ -0,0 +1,3 @@
+/etc/modules-boot.d/15-libphy
+/etc/modules.d/15-libphy
+/lib/modules/5.15.132/libphy.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-libphy.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-libphy.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-libphy.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mac80211.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mac80211.control
new file mode 100644
index 0000000..df1b1ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mac80211.control
@@ -0,0 +1,11 @@
+Package: kmod-mac80211
+Version: 5.15.132+6.1.24-3
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-cfg80211, kmod-crypto-cmac, kmod-crypto-ccm, kmod-crypto-gcm
+Source: package/kernel/mac80211
+SourceName: kmod-mac80211
+Section: kernel
+SourceDateEpoch: 1761103960
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 333156
+Description:  Generic IEEE 802.11 Networking Stack (mac80211)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mac80211.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mac80211.list
new file mode 100644
index 0000000..23dc503
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mac80211.list
@@ -0,0 +1 @@
+/lib/modules/5.15.132/mac80211.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mac80211.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mac80211.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mac80211.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mdio-devres.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mdio-devres.control
new file mode 100644
index 0000000..e6a1414
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mdio-devres.control
@@ -0,0 +1,11 @@
+Package: kmod-mdio-devres
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-libphy
+Source: package/kernel/linux
+SourceName: kmod-mdio-devres
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 1475
+Description:  Supports MDIO device registration
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mdio-devres.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mdio-devres.list
new file mode 100644
index 0000000..e9d30f7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mdio-devres.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/mdio_devres.ko
+/etc/modules.d/mdio-devres
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mdio-devres.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mdio-devres.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mdio-devres.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mdio.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mdio.control
new file mode 100644
index 0000000..d991dca
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mdio.control
@@ -0,0 +1,11 @@
+Package: kmod-mdio
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-mdio
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 3625
+Description:  Kernel modules for MDIO (clause 45) PHY support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mdio.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mdio.list
new file mode 100644
index 0000000..f8d7860
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mdio.list
@@ -0,0 +1,2 @@
+/etc/modules.d/32-mdio
+/lib/modules/5.15.132/mdio.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mdio.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mdio.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mdio.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mii.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mii.control
new file mode 100644
index 0000000..025b715
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mii.control
@@ -0,0 +1,11 @@
+Package: kmod-mii
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-mii
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 97
+Description:  MII library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mii.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mii.list
new file mode 100644
index 0000000..e69de29
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mii.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mii.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-mii.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conncount.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conncount.control
new file mode 100644
index 0000000..1e1d18f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conncount.control
@@ -0,0 +1,11 @@
+Package: kmod-nf-conncount
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nf-conntrack
+Source: package/kernel/linux
+SourceName: kmod-nf-conncount
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 5371
+Description:  Netfilter conncount support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conncount.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conncount.list
new file mode 100644
index 0000000..35529f1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conncount.list
@@ -0,0 +1,2 @@
+/etc/modules.d/nf-conncount
+/lib/modules/5.15.132/nf_conncount.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conncount.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conncount.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conncount.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack-netlink.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack-netlink.control
new file mode 100644
index 0000000..3312061
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack-netlink.control
@@ -0,0 +1,12 @@
+Package: kmod-nf-conntrack-netlink
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nfnetlink, kmod-nf-conntrack
+Source: package/kernel/linux
+SourceName: kmod-nf-conntrack-netlink
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 16378
+Description:  Kernel modules support for a netlink-based connection tracking
+ userspace interface
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack-netlink.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack-netlink.list
new file mode 100644
index 0000000..fccaabc
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack-netlink.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/nf_conntrack_netlink.ko
+/etc/modules.d/nf-conntrack-netlink
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack-netlink.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack-netlink.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack-netlink.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack.control
new file mode 100644
index 0000000..9c523fd
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack.control
@@ -0,0 +1,11 @@
+Package: kmod-nf-conntrack
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-nf-conntrack
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 52667
+Description:  Netfilter connection tracking
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack.list
new file mode 100644
index 0000000..0ebb907
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack.list
@@ -0,0 +1,5 @@
+/lib/modules/5.15.132/nf_defrag_ipv4.ko
+/lib/modules/5.15.132/nf_defrag_ipv6.ko
+/etc/modules.d/nf-conntrack
+/lib/modules/5.15.132/nf_conntrack.ko
+/etc/sysctl.d/11-nf-conntrack.conf
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack6.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack6.control
new file mode 100644
index 0000000..f79da2f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack6.control
@@ -0,0 +1,11 @@
+Package: kmod-nf-conntrack6
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nf-conntrack
+Source: package/kernel/linux
+SourceName: kmod-nf-conntrack6
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 97
+Description:  Netfilter IPv6 connection tracking
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack6.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack6.list
new file mode 100644
index 0000000..e69de29
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack6.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack6.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-conntrack6.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-flow.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-flow.control
new file mode 100644
index 0000000..082dd48
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-flow.control
@@ -0,0 +1,11 @@
+Package: kmod-nf-flow
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nf-conntrack
+Source: package/kernel/linux
+SourceName: kmod-nf-flow
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 15357
+Description:  Netfilter flowtable support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-flow.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-flow.list
new file mode 100644
index 0000000..d8ec85a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-flow.list
@@ -0,0 +1,2 @@
+/etc/modules.d/nf-flow
+/lib/modules/5.15.132/nf_flow_table.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-flow.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-flow.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-flow.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-ipt.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-ipt.control
new file mode 100644
index 0000000..77b4c2e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-ipt.control
@@ -0,0 +1,11 @@
+Package: kmod-nf-ipt
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-nf-ipt
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 20610
+Description:  Iptables core
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-ipt.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-ipt.list
new file mode 100644
index 0000000..49a4c86
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-ipt.list
@@ -0,0 +1,3 @@
+/lib/modules/5.15.132/ip_tables.ko
+/etc/modules.d/nf-ipt
+/lib/modules/5.15.132/x_tables.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-ipt.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-ipt.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-ipt.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-log.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-log.control
new file mode 100644
index 0000000..030779a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-log.control
@@ -0,0 +1,11 @@
+Package: kmod-nf-log
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-nf-log
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 7288
+Description:  Netfilter Logging
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-log.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-log.list
new file mode 100644
index 0000000..b5635fd
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-log.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/nf_log_syslog.ko
+/etc/modules.d/nf-log
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-log.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-log.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-log.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-log6.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-log6.control
new file mode 100644
index 0000000..34fb8c2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-log6.control
@@ -0,0 +1,11 @@
+Package: kmod-nf-log6
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nf-log
+Source: package/kernel/linux
+SourceName: kmod-nf-log6
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 97
+Description:  Netfilter IPV6 Logging
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-log6.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-log6.list
new file mode 100644
index 0000000..e69de29
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-log6.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-log6.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-log6.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-nat.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-nat.control
new file mode 100644
index 0000000..17b7d8d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-nat.control
@@ -0,0 +1,11 @@
+Package: kmod-nf-nat
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nf-conntrack
+Source: package/kernel/linux
+SourceName: kmod-nf-nat
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 13971
+Description:  Netfilter NAT
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-nat.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-nat.list
new file mode 100644
index 0000000..fadb2b2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-nat.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/nf_nat.ko
+/etc/modules.d/nf-nat
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-nat.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-nat.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-nat.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-reject.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-reject.control
new file mode 100644
index 0000000..8ac60f4
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-reject.control
@@ -0,0 +1,11 @@
+Package: kmod-nf-reject
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-nf-reject
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 3583
+Description:  Netfilter IPv4 reject support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-reject.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-reject.list
new file mode 100644
index 0000000..49f1ee6
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-reject.list
@@ -0,0 +1,2 @@
+/etc/modules.d/nf-reject
+/lib/modules/5.15.132/nf_reject_ipv4.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-reject.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-reject.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-reject.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-reject6.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-reject6.control
new file mode 100644
index 0000000..1c8829c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-reject6.control
@@ -0,0 +1,11 @@
+Package: kmod-nf-reject6
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-nf-reject6
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 3708
+Description:  Netfilter IPv6 reject support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-reject6.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-reject6.list
new file mode 100644
index 0000000..5a87dbb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-reject6.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/nf_reject_ipv6.ko
+/etc/modules.d/nf-reject6
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-reject6.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-reject6.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nf-reject6.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nfnetlink.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nfnetlink.control
new file mode 100644
index 0000000..a2e9f14
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nfnetlink.control
@@ -0,0 +1,11 @@
+Package: kmod-nfnetlink
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-nfnetlink
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 5409
+Description:  Kernel modules support for a netlink-based userspace interface
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nfnetlink.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nfnetlink.list
new file mode 100644
index 0000000..4a53cc7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nfnetlink.list
@@ -0,0 +1,2 @@
+/etc/modules.d/nfnetlink
+/lib/modules/5.15.132/nfnetlink.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nfnetlink.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nfnetlink.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nfnetlink.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-core.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-core.control
new file mode 100644
index 0000000..91065f1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-core.control
@@ -0,0 +1,11 @@
+Package: kmod-nft-core
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nfnetlink, kmod-nf-reject, kmod-nf-reject6, kmod-nf-conntrack6, kmod-nf-nat, kmod-nf-log, kmod-nf-log6, kmod-lib-crc32c
+Source: package/kernel/linux
+SourceName: kmod-nft-core
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 121752
+Description:  Kernel module support for nftables
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-core.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-core.list
new file mode 100644
index 0000000..80f5aea
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-core.list
@@ -0,0 +1,15 @@
+/lib/modules/5.15.132/nft_reject_ipv4.ko
+/lib/modules/5.15.132/nf_tables.ko
+/lib/modules/5.15.132/nft_redir.ko
+/lib/modules/5.15.132/nft_objref.ko
+/lib/modules/5.15.132/nft_reject_ipv6.ko
+/lib/modules/5.15.132/nft_limit.ko
+/lib/modules/5.15.132/nft_ct.ko
+/lib/modules/5.15.132/nft_hash.ko
+/lib/modules/5.15.132/nft_quota.ko
+/lib/modules/5.15.132/nft_reject_inet.ko
+/lib/modules/5.15.132/nft_reject.ko
+/lib/modules/5.15.132/nft_counter.ko
+/lib/modules/5.15.132/nft_numgen.ko
+/lib/modules/5.15.132/nft_log.ko
+/etc/modules.d/nft-core
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-core.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-core.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-core.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-fib.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-fib.control
new file mode 100644
index 0000000..d54e315
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-fib.control
@@ -0,0 +1,11 @@
+Package: kmod-nft-fib
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nft-core
+Source: package/kernel/linux
+SourceName: kmod-nft-fib
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 5943
+Description:  Netfilter nf_tables fib support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-fib.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-fib.list
new file mode 100644
index 0000000..6bb1518
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-fib.list
@@ -0,0 +1,5 @@
+/lib/modules/5.15.132/nft_fib_ipv4.ko
+/lib/modules/5.15.132/nft_fib_ipv6.ko
+/etc/modules.d/nft-fib
+/lib/modules/5.15.132/nft_fib.ko
+/lib/modules/5.15.132/nft_fib_inet.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-fib.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-fib.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-fib.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-nat.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-nat.control
new file mode 100644
index 0000000..517a224
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-nat.control
@@ -0,0 +1,11 @@
+Package: kmod-nft-nat
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nft-core, kmod-nf-nat
+Source: package/kernel/linux
+SourceName: kmod-nft-nat
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 4703
+Description:  Netfilter nf_tables NAT support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-nat.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-nat.list
new file mode 100644
index 0000000..25113e7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-nat.list
@@ -0,0 +1,4 @@
+/lib/modules/5.15.132/nft_chain_nat.ko
+/lib/modules/5.15.132/nft_masq.ko
+/lib/modules/5.15.132/nft_nat.ko
+/etc/modules.d/nft-nat
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-nat.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-nat.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-nat.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-offload.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-offload.control
new file mode 100644
index 0000000..1ffca80
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-offload.control
@@ -0,0 +1,11 @@
+Package: kmod-nft-offload
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nf-flow, kmod-nft-nat
+Source: package/kernel/linux
+SourceName: kmod-nft-offload
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 4830
+Description:  Netfilter nf_tables routing/NAT offload support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-offload.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-offload.list
new file mode 100644
index 0000000..7ba7431
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-offload.list
@@ -0,0 +1,5 @@
+/lib/modules/5.15.132/nf_flow_table_inet.ko
+/etc/modules.d/nft-offload
+/lib/modules/5.15.132/nf_flow_table_ipv4.ko
+/lib/modules/5.15.132/nft_flow_offload.ko
+/lib/modules/5.15.132/nf_flow_table_ipv6.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-offload.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-offload.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nft-offload.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-base.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-base.control
new file mode 100644
index 0000000..7db77d6
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-base.control
@@ -0,0 +1,11 @@
+Package: kmod-nls-base
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-nls-base
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 97
+Description:  Kernel module for NLS (Native Language Support)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-base.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-base.list
new file mode 100644
index 0000000..e69de29
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-base.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-base.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-base.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-cp437.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-cp437.control
new file mode 100644
index 0000000..02e3255
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-cp437.control
@@ -0,0 +1,11 @@
+Package: kmod-nls-cp437
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nls-base
+Source: package/kernel/linux
+SourceName: kmod-nls-cp437
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 2296
+Description:  Kernel module for NLS Codepage 437 (United States, Canada)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-cp437.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-cp437.list
new file mode 100644
index 0000000..b9642d7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-cp437.list
@@ -0,0 +1,2 @@
+/etc/modules.d/25-nls-cp437
+/lib/modules/5.15.132/nls_cp437.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-cp437.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-cp437.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-cp437.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-iso8859-1.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-iso8859-1.control
new file mode 100644
index 0000000..556a44e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-iso8859-1.control
@@ -0,0 +1,11 @@
+Package: kmod-nls-iso8859-1
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nls-base
+Source: package/kernel/linux
+SourceName: kmod-nls-iso8859-1
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 1983
+Description:  Kernel module for NLS ISO 8859-1 (Latin 1)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-iso8859-1.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-iso8859-1.list
new file mode 100644
index 0000000..b82ab83
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-iso8859-1.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/nls_iso8859-1.ko
+/etc/modules.d/25-nls-iso8859-1
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-iso8859-1.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-iso8859-1.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-iso8859-1.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-utf8.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-utf8.control
new file mode 100644
index 0000000..7d40fc2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-utf8.control
@@ -0,0 +1,11 @@
+Package: kmod-nls-utf8
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nls-base
+Source: package/kernel/linux
+SourceName: kmod-nls-utf8
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 1194
+Description:  Kernel module for NLS UTF-8
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-utf8.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-utf8.list
new file mode 100644
index 0000000..cd78b87
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-utf8.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/nls_utf8.ko
+/etc/modules.d/25-nls-utf8
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-utf8.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-utf8.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-nls-utf8.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-phy-realtek.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-phy-realtek.control
new file mode 100644
index 0000000..6006e11
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-phy-realtek.control
@@ -0,0 +1,11 @@
+Package: kmod-phy-realtek
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-libphy
+Source: package/kernel/linux
+SourceName: kmod-phy-realtek
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 6030
+Description:  Supports the Realtek 821x PHY.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-phy-realtek.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-phy-realtek.list
new file mode 100644
index 0000000..b7372e0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-phy-realtek.list
@@ -0,0 +1,3 @@
+/lib/modules/5.15.132/realtek.ko
+/etc/modules-boot.d/18-phy-realtek
+/etc/modules.d/18-phy-realtek
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-phy-realtek.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-phy-realtek.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-phy-realtek.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ppp.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ppp.control
new file mode 100644
index 0000000..eee6838
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ppp.control
@@ -0,0 +1,11 @@
+Package: kmod-ppp
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-lib-crc-ccitt, kmod-slhc
+Source: package/kernel/linux
+SourceName: kmod-ppp
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 24876
+Description:  Kernel modules for PPP support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ppp.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ppp.list
new file mode 100644
index 0000000..b75cfa8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ppp.list
@@ -0,0 +1,3 @@
+/lib/modules/5.15.132/ppp_generic.ko
+/lib/modules/5.15.132/ppp_async.ko
+/etc/modules.d/ppp
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ppp.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ppp.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ppp.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pppoe.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pppoe.control
new file mode 100644
index 0000000..0cc8f39
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pppoe.control
@@ -0,0 +1,11 @@
+Package: kmod-pppoe
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-ppp, kmod-pppox
+Source: package/kernel/linux
+SourceName: kmod-pppoe
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 7314
+Description:  Kernel module for PPPoE (PPP over Ethernet) support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pppoe.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pppoe.list
new file mode 100644
index 0000000..916f461
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pppoe.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/pppoe.ko
+/etc/modules.d/pppoe
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pppoe.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pppoe.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pppoe.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pppox.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pppox.control
new file mode 100644
index 0000000..0f27a38
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pppox.control
@@ -0,0 +1,11 @@
+Package: kmod-pppox
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-ppp
+Source: package/kernel/linux
+SourceName: kmod-pppox
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 1869
+Description:  Kernel helper module for PPPoE and PPTP support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pppox.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pppox.list
new file mode 100644
index 0000000..6276c02
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pppox.list
@@ -0,0 +1 @@
+/lib/modules/5.15.132/pppox.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pppox.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pppox.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pppox.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pps.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pps.control
new file mode 100644
index 0000000..f101146
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pps.control
@@ -0,0 +1,13 @@
+Package: kmod-pps
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-pps
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 225
+Description:  PPS (Pulse Per Second) is a special pulse provided by some GPS
+ antennae. Userland can use it to get a high-precision time
+ reference.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pps.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pps.list
new file mode 100644
index 0000000..66aa647
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pps.list
@@ -0,0 +1,2 @@
+/etc/modules-boot.d/17-pps
+/etc/modules.d/17-pps
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pps.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pps.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-pps.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ptp.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ptp.control
new file mode 100644
index 0000000..11cef3c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ptp.control
@@ -0,0 +1,12 @@
+Package: kmod-ptp
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-pps
+Source: package/kernel/linux
+SourceName: kmod-ptp
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 222
+Description:  The IEEE 1588 standard defines a method to precisely
+ synchronize distributed clocks over Ethernet networks.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ptp.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ptp.list
new file mode 100644
index 0000000..0ed9e11
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ptp.list
@@ -0,0 +1,2 @@
+/etc/modules-boot.d/18-ptp
+/etc/modules.d/18-ptp
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ptp.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ptp.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-ptp.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-r8169.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-r8169.control
new file mode 100644
index 0000000..77f6393
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-r8169.control
@@ -0,0 +1,11 @@
+Package: kmod-r8169
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-mii, r8169-firmware, kmod-phy-realtek, kmod-mdio-devres
+Source: package/kernel/linux
+SourceName: kmod-r8169
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 36121
+Description:  Kernel modules for RealTek RTL-8169 PCI Gigabit Ethernet adapters
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-r8169.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-r8169.list
new file mode 100644
index 0000000..46c6040
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-r8169.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/r8169.ko
+/etc/modules.d/r8169
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-r8169.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-r8169.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-r8169.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-act-vlan.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-act-vlan.control
new file mode 100644
index 0000000..cfd24f2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-act-vlan.control
@@ -0,0 +1,11 @@
+Package: kmod-sched-act-vlan
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-sched-core
+Source: package/kernel/linux
+SourceName: kmod-sched-act-vlan
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 4094
+Description:  Allows to configure rules to push or pop vlan headers.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-act-vlan.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-act-vlan.list
new file mode 100644
index 0000000..670eb90
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-act-vlan.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/act_vlan.ko
+/etc/modules.d/sched-act-vlan
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-act-vlan.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-act-vlan.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-act-vlan.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-bpf.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-bpf.control
new file mode 100644
index 0000000..8d06e26
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-bpf.control
@@ -0,0 +1,11 @@
+Package: kmod-sched-bpf
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-sched-bpf
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 9017
+Description:  Traffic shaper support for Berkeley Packet Filter
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-bpf.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-bpf.list
new file mode 100644
index 0000000..c7abda5
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-bpf.list
@@ -0,0 +1,3 @@
+/lib/modules/5.15.132/cls_bpf.ko
+/lib/modules/5.15.132/act_bpf.ko
+/etc/modules.d/72-sched-bpf
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-bpf.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-bpf.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-bpf.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-cake.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-cake.control
new file mode 100644
index 0000000..6738ba1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-cake.control
@@ -0,0 +1,11 @@
+Package: kmod-sched-cake
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-sched-core
+Source: package/kernel/linux
+SourceName: kmod-sched-cake
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 15413
+Description:  Common Applications Kept Enhanced fq_codel/blue derived shaper
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-cake.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-cake.list
new file mode 100644
index 0000000..15410ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-cake.list
@@ -0,0 +1,2 @@
+/etc/modules.d/sched-cake
+/lib/modules/5.15.132/sch_cake.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-cake.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-cake.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-cake.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-core.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-core.control
new file mode 100644
index 0000000..bb9e5ed
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-core.control
@@ -0,0 +1,11 @@
+Package: kmod-sched-core
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-sched-core
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 66095
+Description:  Core kernel scheduler support for IP traffic
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-core.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-core.list
new file mode 100644
index 0000000..a495617
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-core.list
@@ -0,0 +1,15 @@
+/lib/modules/5.15.132/sch_ingress.ko
+/lib/modules/5.15.132/act_skbedit.ko
+/lib/modules/5.15.132/cls_matchall.ko
+/lib/modules/5.15.132/sch_tbf.ko
+/lib/modules/5.15.132/sch_htb.ko
+/lib/modules/5.15.132/cls_fw.ko
+/lib/modules/5.15.132/act_gact.ko
+/lib/modules/5.15.132/sch_hfsc.ko
+/etc/modules.d/70-sched-core
+/lib/modules/5.15.132/act_mirred.ko
+/lib/modules/5.15.132/cls_flow.ko
+/lib/modules/5.15.132/cls_basic.ko
+/lib/modules/5.15.132/cls_route.ko
+/lib/modules/5.15.132/cls_u32.ko
+/lib/modules/5.15.132/em_u32.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-core.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-core.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-core.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-flower.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-flower.control
new file mode 100644
index 0000000..11ba082
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-flower.control
@@ -0,0 +1,11 @@
+Package: kmod-sched-flower
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-sched-core
+Source: package/kernel/linux
+SourceName: kmod-sched-flower
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 20782
+Description:  Allows to classify packets based on a configurable combination of packet keys and masks.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-flower.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-flower.list
new file mode 100644
index 0000000..5bd18ce
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-flower.list
@@ -0,0 +1,2 @@
+/etc/modules.d/sched-flower
+/lib/modules/5.15.132/cls_flower.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-flower.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-flower.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched-flower.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched.control
new file mode 100644
index 0000000..0e5f1c5
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched.control
@@ -0,0 +1,11 @@
+Package: kmod-sched
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-sched-core, kmod-lib-crc32c, kmod-lib-textsearch
+Source: package/kernel/linux
+SourceName: kmod-sched
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 52059
+Description:  Extra kernel schedulers modules for IP traffic
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched.list
new file mode 100644
index 0000000..3ce3ac8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched.list
@@ -0,0 +1,16 @@
+/lib/modules/5.15.132/em_nbyte.ko
+/lib/modules/5.15.132/act_csum.ko
+/etc/modules.d/73-sched
+/lib/modules/5.15.132/sch_codel.ko
+/lib/modules/5.15.132/sch_teql.ko
+/lib/modules/5.15.132/em_cmp.ko
+/lib/modules/5.15.132/sch_multiq.ko
+/lib/modules/5.15.132/sch_dsmark.ko
+/lib/modules/5.15.132/sch_gred.ko
+/lib/modules/5.15.132/act_pedit.ko
+/etc/hotplug.d/iface/15-teql
+/lib/modules/5.15.132/em_text.ko
+/lib/modules/5.15.132/sch_sfq.ko
+/lib/modules/5.15.132/sch_fq.ko
+/lib/modules/5.15.132/act_simple.ko
+/lib/modules/5.15.132/em_meta.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-sched.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-slhc.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-slhc.control
new file mode 100644
index 0000000..3aee9e7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-slhc.control
@@ -0,0 +1,11 @@
+Package: kmod-slhc
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-lib-crc-ccitt
+Source: package/kernel/linux
+SourceName: kmod-slhc
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 4524
+Description:  Serial Line Header Compression
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-slhc.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-slhc.list
new file mode 100644
index 0000000..20a83fb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-slhc.list
@@ -0,0 +1 @@
+/lib/modules/5.15.132/slhc.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-slhc.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-slhc.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-slhc.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-tg3.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-tg3.control
new file mode 100644
index 0000000..612a991
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-tg3.control
@@ -0,0 +1,11 @@
+Package: kmod-tg3
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-libphy, kmod-ptp
+Source: package/kernel/linux
+SourceName: kmod-tg3
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 84900
+Description:  Kernel modules for Broadcom Tigon3 Gigabit Ethernet adapters
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-tg3.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-tg3.list
new file mode 100644
index 0000000..155846f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-tg3.list
@@ -0,0 +1,3 @@
+/lib/modules/5.15.132/tg3.ko
+/etc/modules-boot.d/19-tg3
+/etc/modules.d/19-tg3
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-tg3.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-tg3.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-tg3.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-udptunnel4.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-udptunnel4.control
new file mode 100644
index 0000000..20a9696
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-udptunnel4.control
@@ -0,0 +1,11 @@
+Package: kmod-udptunnel4
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-udptunnel4
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 7940
+Description:  IPv4 UDP tunneling support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-udptunnel4.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-udptunnel4.list
new file mode 100644
index 0000000..5ee551e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-udptunnel4.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/udp_tunnel.ko
+/etc/modules.d/32-udptunnel4
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-udptunnel4.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-udptunnel4.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-udptunnel4.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-udptunnel6.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-udptunnel6.control
new file mode 100644
index 0000000..890f1ed
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-udptunnel6.control
@@ -0,0 +1,11 @@
+Package: kmod-udptunnel6
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Source: package/kernel/linux
+SourceName: kmod-udptunnel6
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 2030
+Description:  IPv6 UDP tunneling support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-udptunnel6.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-udptunnel6.list
new file mode 100644
index 0000000..d5376ee
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-udptunnel6.list
@@ -0,0 +1,2 @@
+/etc/modules.d/32-udptunnel6
+/lib/modules/5.15.132/ip6_udp_tunnel.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-udptunnel6.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-udptunnel6.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-udptunnel6.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-usb-acm.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-usb-acm.control
new file mode 100644
index 0000000..3e4cdd3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-usb-acm.control
@@ -0,0 +1,11 @@
+Package: kmod-usb-acm
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-usb-core
+Source: package/kernel/linux
+SourceName: kmod-usb-acm
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 11874
+Description:  Kernel support for USB ACM devices (modems/isdn controllers)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-usb-acm.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-usb-acm.list
new file mode 100644
index 0000000..1caf4da
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-usb-acm.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/cdc-acm.ko
+/etc/modules.d/usb-acm
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-usb-acm.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-usb-acm.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-usb-acm.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-usb-core.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-usb-core.control
new file mode 100644
index 0000000..31951a5
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-usb-core.control
@@ -0,0 +1,11 @@
+Package: kmod-usb-core
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nls-base
+Source: package/kernel/linux
+SourceName: kmod-usb-core
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 233
+Description:  Kernel support for USB
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-usb-core.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-usb-core.list
new file mode 100644
index 0000000..3a96c9f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-usb-core.list
@@ -0,0 +1,2 @@
+/etc/modules.d/20-usb-core
+/etc/modules-boot.d/20-usb-core
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-usb-core.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-usb-core.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-usb-core.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-vxlan.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-vxlan.control
new file mode 100644
index 0000000..d9dcfb4
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-vxlan.control
@@ -0,0 +1,12 @@
+Package: kmod-vxlan
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-iptunnel, kmod-udptunnel4, kmod-udptunnel6
+Source: package/kernel/linux
+SourceName: kmod-vxlan
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 30842
+Description:  Kernel module for supporting VXLAN in the Kernel.
+ Requires Kernel 3.12 or newer.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-vxlan.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-vxlan.list
new file mode 100644
index 0000000..f9f190b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-vxlan.list
@@ -0,0 +1,2 @@
+/etc/modules.d/13-vxlan
+/lib/modules/5.15.132/vxlan.ko
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-vxlan.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-vxlan.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-vxlan.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-wireguard.control b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-wireguard.control
new file mode 100644
index 0000000..6bf40b9
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-wireguard.control
@@ -0,0 +1,16 @@
+Package: kmod-wireguard
+Version: 5.15.132-1
+Depends: kernel (=5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-lib-chacha20poly1305, kmod-crypto-lib-curve25519, kmod-udptunnel4, kmod-udptunnel6
+Source: package/kernel/linux
+SourceName: kmod-wireguard
+License: GPL-2.0
+Section: kernel
+SourceDateEpoch: 1761103961
+Architecture: x86_64
+Installed-Size: 35237
+Description:  WireGuard is a novel VPN that runs inside the Linux Kernel and utilizes
+ state-of-the-art cryptography. It aims to be faster, simpler, leaner, and
+ more useful than IPSec, while avoiding the massive headache. It intends to
+ be considerably more performant than OpenVPN.  WireGuard is designed as a
+ general purpose VPN for running on embedded interfaces and super computers
+ alike, fit for many different circumstances. It uses UDP.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-wireguard.list b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-wireguard.list
new file mode 100644
index 0000000..a6ed2b2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-wireguard.list
@@ -0,0 +1,2 @@
+/lib/modules/5.15.132/wireguard.ko
+/etc/modules.d/wireguard
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/kmod-wireguard.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-wireguard.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/kmod-wireguard.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libatomic1.control b/ucentral-client/rootfs/usr/lib/opkg/info/libatomic1.control
new file mode 100644
index 0000000..22e43dd
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libatomic1.control
@@ -0,0 +1,16 @@
+Package: libatomic1
+Version: 12.3.0-4
+Depends: libgcc1
+Provides: libatomic
+Source: package/libs/toolchain
+SourceName: libatomic
+License: GPL-3.0-with-GCC-exception
+Section: libs
+SourceDateEpoch: 1648814098
+ABIVersion: 1
+Status: unknown hold not-installed
+Essential: yes
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 7026
+Description:  Atomic support library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libatomic1.list b/ucentral-client/rootfs/usr/lib/opkg/info/libatomic1.list
new file mode 100644
index 0000000..5b4eb78
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libatomic1.list
@@ -0,0 +1,2 @@
+/lib/libatomic.so.1
+/lib/libatomic.so.1.2.0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libatomic1.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libatomic1.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libatomic1.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libblkid1.control b/ucentral-client/rootfs/usr/lib/opkg/info/libblkid1.control
new file mode 100644
index 0000000..14b498f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libblkid1.control
@@ -0,0 +1,18 @@
+Package: libblkid1
+Version: 2.39-2
+Depends: libc, libuuid1
+Provides: libblkid
+Source: package/utils/util-linux
+SourceName: libblkid
+License: GPL-2.0-only
+LicenseFiles: COPYING libblkid/COPYING libmount/COPYING Documentation/licenses/COPYING.GPLv2 Documentation/licenses/COPYING.LGPLv2.1 libuuid/COPYING Documentation/licenses/COPYING.BSD-3
+Section: libs
+SourceDateEpoch: 1691751213
+ABIVersion: 1
+CPE-ID: cpe:/a:kernel:util-linux
+Architecture: x86_64
+Installed-Size: 113660
+Description:  The libblkid library is used to identify block devices (disks) as to their
+ content (e.g. filesystem type, partitions) as well as extracting additional
+ information such as filesystem labels/volume names, partitions, unique
+ identifiers/serial numbers...
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libblkid1.list b/ucentral-client/rootfs/usr/lib/opkg/info/libblkid1.list
new file mode 100644
index 0000000..8f14adb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libblkid1.list
@@ -0,0 +1,2 @@
+/usr/lib/libblkid.so.1.1.0
+/usr/lib/libblkid.so.1
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libblkid1.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libblkid1.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libblkid1.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libblobmsg-json20240329.control b/ucentral-client/rootfs/usr/lib/opkg/info/libblobmsg-json20240329.control
new file mode 100644
index 0000000..e9145d2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libblobmsg-json20240329.control
@@ -0,0 +1,14 @@
+Package: libblobmsg-json20240329
+Version: 2024-03-29-eb9bcb64-1
+Depends: libc, libjson-c5, libubox20240329
+Provides: libblobmsg-json
+Source: package/libs/libubox
+SourceName: libblobmsg-json
+License: ISC
+Section: libs
+SourceDateEpoch: 1761103960
+ABIVersion: 20240329
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 3747
+Description:  blobmsg <-> json conversion library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libblobmsg-json20240329.list b/ucentral-client/rootfs/usr/lib/opkg/info/libblobmsg-json20240329.list
new file mode 100644
index 0000000..5f105d8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libblobmsg-json20240329.list
@@ -0,0 +1 @@
+/lib/libblobmsg_json.so.20240329
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libblobmsg-json20240329.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libblobmsg-json20240329.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libblobmsg-json20240329.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libbpf1.control b/ucentral-client/rootfs/usr/lib/opkg/info/libbpf1.control
new file mode 100644
index 0000000..802103f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libbpf1.control
@@ -0,0 +1,15 @@
+Package: libbpf1
+Version: 1.2.2-1
+Depends: libc, libelf1
+Provides: libbpf
+Source: package/libs/libbpf
+SourceName: libbpf
+License: LGPL-2.1 OR BSD-2-Clause
+Section: libs
+SourceDateEpoch: 1695847021
+ABIVersion: 1
+CPE-ID: cpe:/a:libbpf_project:libbpf
+Maintainer: Tony Ambardar <itugrok@yahoo.com>
+Architecture: x86_64
+Installed-Size: 139777
+Description:  libbpf is a library for loading eBPF programs and reading and manipulating eBPF objects from user-space.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libbpf1.list b/ucentral-client/rootfs/usr/lib/opkg/info/libbpf1.list
new file mode 100644
index 0000000..33b6365
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libbpf1.list
@@ -0,0 +1,2 @@
+/usr/lib/libbpf.so.1.2.2
+/usr/lib/libbpf.so.1
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libbpf1.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libbpf1.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libbpf1.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libc.control b/ucentral-client/rootfs/usr/lib/opkg/info/libc.control
new file mode 100644
index 0000000..4f3d532
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libc.control
@@ -0,0 +1,14 @@
+Package: libc
+Version: 1.2.4-4
+Depends: libgcc1
+Source: package/libs/toolchain
+SourceName: libc
+License: GPL-3.0-with-GCC-exception
+Section: libs
+SourceDateEpoch: 1648814098
+Status: unknown hold not-installed
+Essential: yes
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 263283
+Description:  C library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libc.list b/ucentral-client/rootfs/usr/lib/opkg/info/libc.list
new file mode 100644
index 0000000..0e81a2b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libc.list
@@ -0,0 +1,3 @@
+/lib/ld-musl-x86_64.so.1
+/lib/libc.so
+/usr/bin/ldd
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libc.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libc.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libc.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libcap.control b/ucentral-client/rootfs/usr/lib/opkg/info/libcap.control
new file mode 100644
index 0000000..fd42121
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libcap.control
@@ -0,0 +1,14 @@
+Package: libcap
+Version: 2.69-1
+Depends: libc
+Source: package/libs/libcap
+SourceName: libcap
+License: GPL-2.0-only
+LicenseFiles: License
+Section: libs
+SourceDateEpoch: 1684952784
+CPE-ID: cpe:/a:libcap_project:libcap
+Maintainer: Paul Wassi <p.wassi@gmx.at>
+Architecture: x86_64
+Installed-Size: 15062
+Description:  Linux capabilities library library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libcap.list b/ucentral-client/rootfs/usr/lib/opkg/info/libcap.list
new file mode 100644
index 0000000..80309db
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libcap.list
@@ -0,0 +1,3 @@
+/usr/lib/libcap.so.2.69
+/usr/lib/libcap.so
+/usr/lib/libcap.so.2
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libcap.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libcap.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libcap.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libcomerr0.control b/ucentral-client/rootfs/usr/lib/opkg/info/libcomerr0.control
new file mode 100644
index 0000000..b69ec58
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libcomerr0.control
@@ -0,0 +1,16 @@
+Package: libcomerr0
+Version: 1.47.0-2
+Depends: libc, libuuid1
+Provides: libcomerr
+Source: package/utils/e2fsprogs
+SourceName: libcomerr
+License: GPL-2.0
+LicenseFiles: NOTICE
+Section: libs
+SourceDateEpoch: 1691751213
+ABIVersion: 0
+CPE-ID: cpe:/a:e2fsprogs_project:e2fsprogs
+Architecture: x86_64
+Installed-Size: 4051
+Description:  This package contains libcom_err, the common error description library
+ bundled with e2fsprogs.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libcomerr0.list b/ucentral-client/rootfs/usr/lib/opkg/info/libcomerr0.list
new file mode 100644
index 0000000..328b077
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libcomerr0.list
@@ -0,0 +1,2 @@
+/usr/lib/libcom_err.so.0.0
+/usr/lib/libcom_err.so.0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libcomerr0.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libcomerr0.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libcomerr0.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libcurl4.control b/ucentral-client/rootfs/usr/lib/opkg/info/libcurl4.control
new file mode 100644
index 0000000..1aaca90
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libcurl4.control
@@ -0,0 +1,16 @@
+Package: libcurl4
+Version: 8.7.1-r1
+Depends: libc, libopenssl3, libnghttp2-14, ca-bundle
+Provides: libcurl
+Source: feeds/packages/net/curl
+SourceName: libcurl
+License: MIT
+LicenseFiles: COPYING
+Section: libs
+SourceDateEpoch: 1761088275
+ABIVersion: 4
+CPE-ID: cpe:/a:haxx:libcurl
+Maintainer: Stan Grishin <stangri@melmac.ca>
+Architecture: x86_64
+Installed-Size: 215212
+Description:  A client-side URL transfer library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libcurl4.list b/ucentral-client/rootfs/usr/lib/opkg/info/libcurl4.list
new file mode 100644
index 0000000..5a657ca
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libcurl4.list
@@ -0,0 +1,2 @@
+/usr/lib/libcurl.so.4
+/usr/lib/libcurl.so.4.8.0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libcurl4.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libcurl4.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libcurl4.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libelf1.control b/ucentral-client/rootfs/usr/lib/opkg/info/libelf1.control
new file mode 100644
index 0000000..76de4e6
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libelf1.control
@@ -0,0 +1,16 @@
+Package: libelf1
+Version: 0.189-1
+Depends: libc, zlib
+Provides: libelf, libelf11
+Source: package/libs/elfutils
+SourceName: libelf
+License: GPL-3.0-or-later
+LicenseFiles: COPYING COPYING-GPLV2 COPYING-LGPLV3
+Section: libs
+SourceDateEpoch: 1679419702
+ABIVersion: 1
+CPE-ID: cpe:/a:elfutils_project:elfutils
+Maintainer: Luiz Angelo Daros de Luca <luizluca@gmail.com>
+Architecture: x86_64
+Installed-Size: 40317
+Description:  ELF manipulation libraries (libelf)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libelf1.list b/ucentral-client/rootfs/usr/lib/opkg/info/libelf1.list
new file mode 100644
index 0000000..4a250c2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libelf1.list
@@ -0,0 +1,2 @@
+/usr/lib/libelf-0.189.so
+/usr/lib/libelf.so.1
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libelf1.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libelf1.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libelf1.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libev.control b/ucentral-client/rootfs/usr/lib/opkg/info/libev.control
new file mode 100644
index 0000000..dce48d0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libev.control
@@ -0,0 +1,14 @@
+Package: libev
+Version: 4.33-2
+Depends: libc
+Source: feeds/packages/libs/libev
+SourceName: libev
+License: BSD-2-Clause or GPL-2.0-or-later
+LicenseFiles: LICENSE
+Section: libs
+SourceDateEpoch: 1761088275
+Maintainer: Karl Palsson <karlp@tweak.net.au>
+Architecture: x86_64
+Installed-Size: 23238
+Description:  A full-featured and high-performance event loop that is loosely modelled after
+ libevent, but without its limitations and bugs.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libev.list b/ucentral-client/rootfs/usr/lib/opkg/info/libev.list
new file mode 100644
index 0000000..00b406b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libev.list
@@ -0,0 +1,3 @@
+/usr/lib/libev.so
+/usr/lib/libev.so.4.0.0
+/usr/lib/libev.so.4
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libev.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libev.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libev.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libevent2-7.control b/ucentral-client/rootfs/usr/lib/opkg/info/libevent2-7.control
new file mode 100644
index 0000000..0bc8b41
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libevent2-7.control
@@ -0,0 +1,27 @@
+Package: libevent2-7
+Version: 2.1.12-1
+Depends: libc
+Provides: libevent2
+Source: package/libs/libevent2
+SourceName: libevent2
+License: BSD-3-Clause
+LicenseFiles: LICENSE
+Section: libs
+SourceDateEpoch: 1679419702
+ABIVersion: -7
+CPE-ID: cpe:/a:libevent_project:libevent
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 99098
+Description:  The libevent API provides a mechanism to execute a callback function
+ when a specific event occurs on a file descriptor or after a timeout
+ has been reached. Furthermore, libevent also support callbacks due
+ to signals or regular timeouts.
+ 
+ libevent is meant to replace the event loop found in event driven
+ network servers. An application just needs to call event_dispatch()
+ and then add or remove events dynamically without having to change
+ the event loop.
+ 
+ This package contains the libevent shared library historically
+ containing both the core & extra libraries.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libevent2-7.list b/ucentral-client/rootfs/usr/lib/opkg/info/libevent2-7.list
new file mode 100644
index 0000000..2767788
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libevent2-7.list
@@ -0,0 +1,2 @@
+/usr/lib/libevent-2.1.so.7.0.1
+/usr/lib/libevent-2.1.so.7
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libevent2-7.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libevent2-7.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libevent2-7.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libext2fs2.control b/ucentral-client/rootfs/usr/lib/opkg/info/libext2fs2.control
new file mode 100644
index 0000000..78a0ce7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libext2fs2.control
@@ -0,0 +1,15 @@
+Package: libext2fs2
+Version: 1.47.0-2
+Depends: libc, libuuid1, libblkid1, libss2, libcomerr0
+Provides: libext2fs
+Source: package/utils/e2fsprogs
+SourceName: libext2fs
+License: GPL-2.0
+LicenseFiles: NOTICE
+Section: libs
+SourceDateEpoch: 1691751213
+ABIVersion: 2
+CPE-ID: cpe:/a:e2fsprogs_project:e2fsprogs
+Architecture: x86_64
+Installed-Size: 181061
+Description:  libext2fs is a library which can access ext2, ext3 and ext4 filesystems.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libext2fs2.list b/ucentral-client/rootfs/usr/lib/opkg/info/libext2fs2.list
new file mode 100644
index 0000000..5afc833
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libext2fs2.list
@@ -0,0 +1,2 @@
+/usr/lib/libext2fs.so.2.4
+/usr/lib/libext2fs.so.2
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libext2fs2.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libext2fs2.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libext2fs2.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libf2fs6.control b/ucentral-client/rootfs/usr/lib/opkg/info/libf2fs6.control
new file mode 100644
index 0000000..8413ec3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libf2fs6.control
@@ -0,0 +1,17 @@
+Package: libf2fs6
+Version: 1.16.0-1
+Depends: libc, libuuid1
+Conflicts: libf2fs-selinux
+Provides: libf2fs
+Source: package/utils/f2fs-tools
+SourceName: libf2fs
+License: GPL-2.0-only
+LicenseFiles: COPYING
+Section: libs
+SourceDateEpoch: 1684490834
+ABIVersion: 6
+CPE-ID: cpe:/a:f2fs-tools_project:f2fs-tools
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 41651
+Description:  Library for Flash-Friendly File System (F2FS) tools
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libf2fs6.list b/ucentral-client/rootfs/usr/lib/opkg/info/libf2fs6.list
new file mode 100644
index 0000000..721c150
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libf2fs6.list
@@ -0,0 +1,2 @@
+/usr/lib/libf2fs.so.10
+/usr/lib/libf2fs.so.10.0.0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libf2fs6.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libf2fs6.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libf2fs6.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libgcc1.control b/ucentral-client/rootfs/usr/lib/opkg/info/libgcc1.control
new file mode 100644
index 0000000..1b65d7f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libgcc1.control
@@ -0,0 +1,15 @@
+Package: libgcc1
+Version: 12.3.0-4
+Provides: libgcc
+Source: package/libs/toolchain
+SourceName: libgcc
+License: GPL-3.0-with-GCC-exception
+Section: libs
+SourceDateEpoch: 1648814098
+ABIVersion: 1
+Status: unknown hold not-installed
+Essential: yes
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 40945
+Description:  GCC support library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libgcc1.list b/ucentral-client/rootfs/usr/lib/opkg/info/libgcc1.list
new file mode 100644
index 0000000..0a3534a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libgcc1.list
@@ -0,0 +1 @@
+/lib/libgcc_s.so.1
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libgcc1.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libgcc1.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libgcc1.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libgmp10.control b/ucentral-client/rootfs/usr/lib/opkg/info/libgmp10.control
new file mode 100644
index 0000000..32f1f3a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libgmp10.control
@@ -0,0 +1,15 @@
+Package: libgmp10
+Version: 6.2.1-1
+Depends: libc
+Provides: libgmp
+Source: package/libs/gmp
+SourceName: libgmp
+License: GPL-2.0-or-later
+Section: libs
+SourceDateEpoch: 1695847021
+ABIVersion: 10
+CPE-ID: cpe:/a:gmplib:gmp
+Architecture: x86_64
+Installed-Size: 215427
+Description:  GMP is a free library for arbitrary precision arithmetic, operating on
+ signed integers, rational numbers, and floating point numbers.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libgmp10.list b/ucentral-client/rootfs/usr/lib/opkg/info/libgmp10.list
new file mode 100644
index 0000000..936bdc4
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libgmp10.list
@@ -0,0 +1,2 @@
+/usr/lib/libgmp.so.10.4.1
+/usr/lib/libgmp.so.10
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libgmp10.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libgmp10.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libgmp10.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libiwinfo-data.control b/ucentral-client/rootfs/usr/lib/opkg/info/libiwinfo-data.control
new file mode 100644
index 0000000..6a8ca0d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libiwinfo-data.control
@@ -0,0 +1,12 @@
+Package: libiwinfo-data
+Version: 2023-07-01-ca79f641-1
+Depends: libc
+Source: package/network/utils/iwinfo
+SourceName: libiwinfo-data
+License: GPL-2.0
+Section: opt
+SourceDateEpoch: 1761103960
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 3055
+Description:  libiwinfo Lua binding
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libiwinfo-data.list b/ucentral-client/rootfs/usr/lib/opkg/info/libiwinfo-data.list
new file mode 100644
index 0000000..025795b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libiwinfo-data.list
@@ -0,0 +1 @@
+/usr/share/libiwinfo/devices.txt
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libiwinfo-data.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libiwinfo-data.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libiwinfo-data.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libiwinfo20230701.control b/ucentral-client/rootfs/usr/lib/opkg/info/libiwinfo20230701.control
new file mode 100644
index 0000000..7d01843
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libiwinfo20230701.control
@@ -0,0 +1,15 @@
+Package: libiwinfo20230701
+Version: 2023-07-01-ca79f641-1
+Depends: libc, libnl-tiny1, libuci20130104, libubus20230605, libiwinfo-data
+Provides: libiwinfo
+Source: package/network/utils/iwinfo
+SourceName: libiwinfo
+License: GPL-2.0
+Section: libs
+SourceDateEpoch: 1761103960
+ABIVersion: 20230701
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 25817
+Description:  Wireless information library with simplified API for nl80211
+ and wext driver interfaces.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libiwinfo20230701.list b/ucentral-client/rootfs/usr/lib/opkg/info/libiwinfo20230701.list
new file mode 100644
index 0000000..726c03c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libiwinfo20230701.list
@@ -0,0 +1 @@
+/usr/lib/libiwinfo.so.20230701
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libiwinfo20230701.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libiwinfo20230701.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libiwinfo20230701.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libjson-c5.control b/ucentral-client/rootfs/usr/lib/opkg/info/libjson-c5.control
new file mode 100644
index 0000000..7118797
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libjson-c5.control
@@ -0,0 +1,16 @@
+Package: libjson-c5
+Version: 0.16-3
+Depends: libc
+Provides: libjson-c
+Source: package/libs/libjson-c
+SourceName: libjson-c
+License: MIT
+LicenseFiles: COPYING
+Section: libs
+SourceDateEpoch: 1684496598
+ABIVersion: 5
+CPE-ID: cpe:/a:json-c_project:json-c
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 27808
+Description:  This package contains a library for javascript object notation backends.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libjson-c5.list b/ucentral-client/rootfs/usr/lib/opkg/info/libjson-c5.list
new file mode 100644
index 0000000..08ee360
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libjson-c5.list
@@ -0,0 +1,2 @@
+/usr/lib/libjson-c.so.5.2.0
+/usr/lib/libjson-c.so.5
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libjson-c5.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libjson-c5.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libjson-c5.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libjson-script20240329.control b/ucentral-client/rootfs/usr/lib/opkg/info/libjson-script20240329.control
new file mode 100644
index 0000000..596cf1b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libjson-script20240329.control
@@ -0,0 +1,14 @@
+Package: libjson-script20240329
+Version: 2024-03-29-eb9bcb64-1
+Depends: libc, libubox20240329
+Provides: libjson-script
+Source: package/libs/libubox
+SourceName: libjson-script
+License: ISC
+Section: utils
+SourceDateEpoch: 1761103960
+ABIVersion: 20240329
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 5194
+Description:  Minimalistic JSON based scripting engine
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libjson-script20240329.list b/ucentral-client/rootfs/usr/lib/opkg/info/libjson-script20240329.list
new file mode 100644
index 0000000..e9dd0c8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libjson-script20240329.list
@@ -0,0 +1 @@
+/lib/libjson_script.so.20240329
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libjson-script20240329.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libjson-script20240329.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libjson-script20240329.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/liblua5.1.5.control b/ucentral-client/rootfs/usr/lib/opkg/info/liblua5.1.5.control
new file mode 100644
index 0000000..a8783e2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/liblua5.1.5.control
@@ -0,0 +1,19 @@
+Package: liblua5.1.5
+Version: 5.1.5-10
+Depends: libc
+Provides: liblua
+Source: package/utils/lua
+SourceName: liblua
+License: MIT
+LicenseFiles: COPYRIGHT
+Section: libs
+SourceDateEpoch: 1695847021
+ABIVersion: 5.1.5
+CPE-ID: cpe:/a:lua:lua
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 73644
+Description:  Lua is a powerful light-weight programming language designed for extending 
+ applications. Lua is also frequently used as a general-purpose, stand-alone 
+ language. Lua is free software.
+ This package contains the Lua shared libraries, needed by other programs.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/liblua5.1.5.list b/ucentral-client/rootfs/usr/lib/opkg/info/liblua5.1.5.list
new file mode 100644
index 0000000..ddc814d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/liblua5.1.5.list
@@ -0,0 +1 @@
+/usr/lib/liblua.so.5.1.5
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/liblua5.1.5.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/liblua5.1.5.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/liblua5.1.5.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp-lua.control b/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp-lua.control
new file mode 100644
index 0000000..a63293d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp-lua.control
@@ -0,0 +1,13 @@
+Package: liblucihttp-lua
+Version: 2023-03-15-9b5b683f-1
+Depends: libc, liblucihttp0, liblua5.1.5
+Source: feeds/luci/contrib/package/lucihttp
+SourceName: liblucihttp-lua
+License: ISC
+LicenseFiles: LICENSE
+Section: libs
+SourceDateEpoch: 1754859657
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 3588
+Description:  Lua binding for the LuCI HTTP utility library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp-lua.list b/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp-lua.list
new file mode 100644
index 0000000..a8466bb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp-lua.list
@@ -0,0 +1 @@
+/usr/lib/lua/lucihttp.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp-lua.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp-lua.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp-lua.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp-ucode.control b/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp-ucode.control
new file mode 100644
index 0000000..6e630c2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp-ucode.control
@@ -0,0 +1,13 @@
+Package: liblucihttp-ucode
+Version: 2023-03-15-9b5b683f-1
+Depends: libc, liblucihttp0, libucode20230711
+Source: feeds/luci/contrib/package/lucihttp
+SourceName: liblucihttp-ucode
+License: ISC
+LicenseFiles: LICENSE
+Section: libs
+SourceDateEpoch: 1754859657
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 4045
+Description:  ucode binding for the LuCI HTTP utility library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp-ucode.list b/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp-ucode.list
new file mode 100644
index 0000000..5b070ee
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp-ucode.list
@@ -0,0 +1 @@
+/usr/lib/ucode/lucihttp.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp-ucode.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp-ucode.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp-ucode.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp0.control b/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp0.control
new file mode 100644
index 0000000..045744d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp0.control
@@ -0,0 +1,15 @@
+Package: liblucihttp0
+Version: 2023-03-15-9b5b683f-1
+Depends: libc
+Provides: liblucihttp
+Source: feeds/luci/contrib/package/lucihttp
+SourceName: liblucihttp
+License: ISC
+LicenseFiles: LICENSE
+Section: libs
+SourceDateEpoch: 1754859657
+ABIVersion: 0
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 8200
+Description:  LuCI HTTP utility library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp0.list b/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp0.list
new file mode 100644
index 0000000..6378819
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp0.list
@@ -0,0 +1,2 @@
+/usr/lib/liblucihttp.so.0.1
+/usr/lib/liblucihttp.so.0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp0.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp0.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/liblucihttp0.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libmnl0.control b/ucentral-client/rootfs/usr/lib/opkg/info/libmnl0.control
new file mode 100644
index 0000000..b2d862f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libmnl0.control
@@ -0,0 +1,35 @@
+Package: libmnl0
+Version: 1.0.5-1
+Depends: libc
+Provides: libmnl
+Source: package/libs/libmnl
+SourceName: libmnl
+License: LGPL-2.1+
+Section: libs
+SourceDateEpoch: 1662478604
+ABIVersion: 0
+CPE-ID: cpe:/a:netfilter:libmnl
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 6970
+Description:  libmnl is a minimalistic user-space library oriented to Netlink developers.
+ There are a lot of common tasks in parsing, validating, constructing of
+ both the Netlink header and TLVs that are repetitive and easy to get wrong.
+ This library aims to provide simple helpers that allows you to re-use code
+ and to avoid re-inventing the wheel. The main features of this library are:
+ .
+ * Small: the shared library requires around 30KB for an x86-based computer.
+ .
+ * Simple: this library avoids complexity and elaborated abstractions that
+ tend to hide Netlink details.
+ .
+ * Easy to use: the library simplifies the work for Netlink-wise developers.
+ It provides functions to make socket handling, message building, validating,
+ parsing and sequence tracking, easier.
+ .
+ * Easy to re-use: you can use the library to build your own abstraction layer
+ on top of this library.
+ .
+ * Decoupling: the interdependency of the main bricks that compose the library
+ is reduced, i.e. the library provides many helpers, but the programmer is not
+ forced to use them.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libmnl0.list b/ucentral-client/rootfs/usr/lib/opkg/info/libmnl0.list
new file mode 100644
index 0000000..ced0790
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libmnl0.list
@@ -0,0 +1,2 @@
+/usr/lib/libmnl.so.0.2.0
+/usr/lib/libmnl.so.0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libmnl0.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libmnl0.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libmnl0.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libncurses6.control b/ucentral-client/rootfs/usr/lib/opkg/info/libncurses6.control
new file mode 100644
index 0000000..6b7fb07
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libncurses6.control
@@ -0,0 +1,15 @@
+Package: libncurses6
+Version: 6.4-2
+Depends: libc, terminfo
+Provides: libncursesw, libncurses, libncursesw6
+Source: package/libs/ncurses
+SourceName: libncurses
+License: MIT
+LicenseFiles: README
+Section: libs
+SourceDateEpoch: 1677370322
+ABIVersion: 6
+CPE-ID: cpe:/a:gnu:ncurses
+Architecture: x86_64
+Installed-Size: 182620
+Description:  Terminal handling library (Unicode)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libncurses6.list b/ucentral-client/rootfs/usr/lib/opkg/info/libncurses6.list
new file mode 100644
index 0000000..7084857
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libncurses6.list
@@ -0,0 +1,16 @@
+/usr/lib/libncursesw.so.6
+/usr/lib/libncursesw.so.6.4
+/usr/lib/libform.so.6.4
+/usr/lib/libpanel.so.6.4
+/usr/lib/libmenu.so.6.4
+/usr/lib/libncurses.so.6
+/usr/lib/libform.so.6
+/usr/lib/libmenu.so.6
+/usr/lib/libformw.so.6
+/usr/lib/libpanelw.so.6.4
+/usr/lib/libmenuw.so.6
+/usr/lib/libformw.so.6.4
+/usr/lib/libpanel.so.6
+/usr/lib/libpanelw.so.6
+/usr/lib/libncurses.so.6.4
+/usr/lib/libmenuw.so.6.4
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libncurses6.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libncurses6.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libncurses6.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-conntrack3.control b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-conntrack3.control
new file mode 100644
index 0000000..b012277
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-conntrack3.control
@@ -0,0 +1,20 @@
+Package: libnetfilter-conntrack3
+Version: 1.0.9-2
+Depends: libc, libnfnetlink0, kmod-nf-conntrack-netlink, libmnl0
+Provides: libnetfilter-conntrack
+Source: package/libs/libnetfilter-conntrack
+SourceName: libnetfilter-conntrack
+License: GPL-2.0-or-later
+LicenseFiles: COPYING
+Section: libs
+SourceDateEpoch: 1695847021
+ABIVersion: 3
+CPE-ID: cpe:/a:netfilter:libnetfilter_conntrack
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 39809
+Description:  libnetfilter_conntrack is a userspace library providing a programming
+ interface (API) to the in-kernel connection tracking state table. The
+ library libnetfilter_conntrack has been previously known as
+ libnfnetlink_conntrack and libctnetlink. This library is currently
+ used by conntrack-tools among many other applications.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-conntrack3.list b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-conntrack3.list
new file mode 100644
index 0000000..b48776d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-conntrack3.list
@@ -0,0 +1,2 @@
+/usr/lib/libnetfilter_conntrack.so.3.8.0
+/usr/lib/libnetfilter_conntrack.so.3
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-conntrack3.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-conntrack3.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-conntrack3.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-cthelper0.control b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-cthelper0.control
new file mode 100644
index 0000000..cf919c2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-cthelper0.control
@@ -0,0 +1,16 @@
+Package: libnetfilter-cthelper0
+Version: 1.0.0-2
+Depends: libc, libmnl0
+Provides: libnetfilter-cthelper
+Source: feeds/packages/libs/libnetfilter-cthelper
+SourceName: libnetfilter-cthelper
+License: GPL-2.0+
+Section: libs
+SourceDateEpoch: 1761088275
+ABIVersion: 0
+CPE-ID: cpe:/a:netfilter:libnetfilter_cthelper
+Architecture: x86_64
+Installed-Size: 4204
+Description:  libnetfilter_cthelper is a userspace library providing a programming
+ interface (API) to the in-kernel connection tracking helpers. 
+ This library is currently used by conntrack-tools.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-cthelper0.list b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-cthelper0.list
new file mode 100644
index 0000000..8f89e1f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-cthelper0.list
@@ -0,0 +1,2 @@
+/usr/lib/libnetfilter_cthelper.so.0
+/usr/lib/libnetfilter_cthelper.so.0.0.0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-cthelper0.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-cthelper0.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-cthelper0.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-cttimeout1.control b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-cttimeout1.control
new file mode 100644
index 0000000..ab720aa
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-cttimeout1.control
@@ -0,0 +1,16 @@
+Package: libnetfilter-cttimeout1
+Version: 1.0.0-2
+Depends: libc, libmnl0
+Provides: libnetfilter-cttimeout
+Source: feeds/packages/libs/libnetfilter-cttimeout
+SourceName: libnetfilter-cttimeout
+License: GPL-2.0+
+Section: libs
+SourceDateEpoch: 1761088275
+ABIVersion: 1
+CPE-ID: cpe:/a:netfilter:libnetfilter_cttimeout
+Architecture: x86_64
+Installed-Size: 4243
+Description:  libnetfilter_cttimeout is a userspace library providing a programming
+ interface (API) to the in-kernel connection tracking timeout handling.
+ This library is currently used by conntrack-tools.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-cttimeout1.list b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-cttimeout1.list
new file mode 100644
index 0000000..b9ca357
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-cttimeout1.list
@@ -0,0 +1,2 @@
+/usr/lib/libnetfilter_cttimeout.so.1
+/usr/lib/libnetfilter_cttimeout.so.1.0.0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-cttimeout1.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-cttimeout1.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-cttimeout1.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-queue1.control b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-queue1.control
new file mode 100644
index 0000000..36fa2e8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-queue1.control
@@ -0,0 +1,17 @@
+Package: libnetfilter-queue1
+Version: 1.0.5-4
+Depends: libc, libmnl0, libnfnetlink0
+Provides: libnetfilter-queue
+Source: feeds/packages/libs/libnetfilter-queue
+SourceName: libnetfilter-queue
+License: GPL-2.0-or-later
+LicenseFiles: COPYING
+Section: libs
+SourceDateEpoch: 1761088275
+ABIVersion: 1
+CPE-ID: cpe:/a:netfilter:libnetfilter_queue
+Architecture: x86_64
+Installed-Size: 10564
+Description:  libnetfilter_queue is a userspace library providing a programming
+ interface (API) to packets that have been queued by the kernel
+ packet filter.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-queue1.list b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-queue1.list
new file mode 100644
index 0000000..e3b241b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-queue1.list
@@ -0,0 +1,2 @@
+/usr/lib/libnetfilter_queue.so.1
+/usr/lib/libnetfilter_queue.so.1.5.0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-queue1.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-queue1.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnetfilter-queue1.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnettle8.control b/ucentral-client/rootfs/usr/lib/opkg/info/libnettle8.control
new file mode 100644
index 0000000..f107eea
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnettle8.control
@@ -0,0 +1,15 @@
+Package: libnettle8
+Version: 3.9.1-1
+Depends: libc, libgmp10
+Provides: libnettle
+Source: package/libs/nettle
+SourceName: libnettle
+License: GPL-2.0-or-later
+LicenseFiles: COPYING
+Section: libs
+SourceDateEpoch: 1693172967
+ABIVersion: 8
+CPE-ID: cpe:/a:nettle_project:nettle
+Architecture: x86_64
+Installed-Size: 341390
+Description:  GNU crypto library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnettle8.list b/ucentral-client/rootfs/usr/lib/opkg/info/libnettle8.list
new file mode 100644
index 0000000..47a707a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnettle8.list
@@ -0,0 +1,4 @@
+/usr/lib/libnettle.so.8
+/usr/lib/libhogweed.so.6.8
+/usr/lib/libnettle.so.8.8
+/usr/lib/libhogweed.so.6
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnettle8.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libnettle8.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnettle8.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnfnetlink0.control b/ucentral-client/rootfs/usr/lib/opkg/info/libnfnetlink0.control
new file mode 100644
index 0000000..73401d7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnfnetlink0.control
@@ -0,0 +1,18 @@
+Package: libnfnetlink0
+Version: 1.0.2-1
+Depends: libc
+Provides: libnfnetlink
+Source: package/libs/libnfnetlink
+SourceName: libnfnetlink
+License: GPL-2.0+
+Section: libs
+SourceDateEpoch: 1662478605
+ABIVersion: 0
+CPE-ID: cpe:/a:netfilter:libnfnetlink
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 10461
+Description:  libnfnetlink is is the low-level library for netfilter related kernel/userspace communication.
+ It provides a generic messaging infrastructure for in-kernel netfilter subsystems
+ (such as nfnetlink_log, nfnetlink_queue, nfnetlink_conntrack) and their respective users
+ and/or management tools in userspace.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnfnetlink0.list b/ucentral-client/rootfs/usr/lib/opkg/info/libnfnetlink0.list
new file mode 100644
index 0000000..601aaea
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnfnetlink0.list
@@ -0,0 +1,2 @@
+/usr/lib/libnfnetlink.so.0
+/usr/lib/libnfnetlink.so.0.2.0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnfnetlink0.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libnfnetlink0.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnfnetlink0.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnftnl11.control b/ucentral-client/rootfs/usr/lib/opkg/info/libnftnl11.control
new file mode 100644
index 0000000..27ff736
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnftnl11.control
@@ -0,0 +1,17 @@
+Package: libnftnl11
+Version: 1.2.6-1
+Depends: libc, libmnl0
+Provides: libnftnl
+Source: package/libs/libnftnl
+SourceName: libnftnl
+License: GPL-2.0-or-later
+LicenseFiles: COPYING
+Section: libs
+SourceDateEpoch: 1689833051
+ABIVersion: 11
+CPE-ID: cpe:/a:netfilter:libnftnl
+Maintainer: Steven Barth <steven@midlink.org>
+Architecture: x86_64
+Installed-Size: 64613
+Description:  libnftnl is a userspace library providing a low-level netlink
+ programming interface (API) to the in-kernel nf_tables subsystem.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnftnl11.list b/ucentral-client/rootfs/usr/lib/opkg/info/libnftnl11.list
new file mode 100644
index 0000000..227312c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnftnl11.list
@@ -0,0 +1,2 @@
+/usr/lib/libnftnl.so.11
+/usr/lib/libnftnl.so.11.6.0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnftnl11.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libnftnl11.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnftnl11.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnghttp2-14.control b/ucentral-client/rootfs/usr/lib/opkg/info/libnghttp2-14.control
new file mode 100644
index 0000000..c9cf4a4
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnghttp2-14.control
@@ -0,0 +1,16 @@
+Package: libnghttp2-14
+Version: 1.57.0-1
+Depends: libc
+Provides: libnghttp2
+Source: feeds/packages/libs/nghttp2
+SourceName: libnghttp2
+License: MIT
+LicenseFiles: COPYING
+Section: libs
+SourceDateEpoch: 1761088275
+ABIVersion: -14
+CPE-ID: cpe:/a:nghttp2:nghttp2
+Maintainer: Hans Dedecker <dedeckeh@gmail.com>
+Architecture: x86_64
+Installed-Size: 70674
+Description:  C library implementing the framing layer of the HTTP/2 protocol. It can be used to build a HTTP/2-capable HTTP client or server
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnghttp2-14.list b/ucentral-client/rootfs/usr/lib/opkg/info/libnghttp2-14.list
new file mode 100644
index 0000000..800657b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnghttp2-14.list
@@ -0,0 +1,2 @@
+/usr/lib/libnghttp2.so.14
+/usr/lib/libnghttp2.so.14.25.0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnghttp2-14.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libnghttp2-14.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnghttp2-14.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnl-tiny1.control b/ucentral-client/rootfs/usr/lib/opkg/info/libnl-tiny1.control
new file mode 100644
index 0000000..049927a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnl-tiny1.control
@@ -0,0 +1,14 @@
+Package: libnl-tiny1
+Version: 2023-07-27-bc92a280-1
+Depends: libc
+Provides: libnl-tiny
+Source: package/libs/libnl-tiny
+SourceName: libnl-tiny
+License: LGPL-2.1
+Section: libs
+SourceDateEpoch: 1690452362
+ABIVersion: 1
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 15475
+Description:  This package contains a stripped down version of libnl
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnl-tiny1.list b/ucentral-client/rootfs/usr/lib/opkg/info/libnl-tiny1.list
new file mode 100644
index 0000000..d607d06
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnl-tiny1.list
@@ -0,0 +1 @@
+/usr/lib/libnl-tiny.so.1
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libnl-tiny1.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libnl-tiny1.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libnl-tiny1.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-conf.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-conf.conffiles
new file mode 100644
index 0000000..6d068e6
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-conf.conffiles
@@ -0,0 +1 @@
+/etc/ssl/openssl.cnf
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-conf.control b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-conf.control
new file mode 100644
index 0000000..3b753c2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-conf.control
@@ -0,0 +1,18 @@
+Package: libopenssl-conf
+Version: 3.0.11-1
+Depends: libc, libopenssl3
+Source: package/libs/openssl
+SourceName: libopenssl-conf
+License: Apache-2.0
+LicenseFiles: LICENSE
+Section: libs
+SourceDateEpoch: 1695554554
+CPE-ID: cpe:/a:openssl:openssl
+Maintainer: Eneas U de Queiroz <cotequeiroz@gmail.com>
+Architecture: x86_64
+Installed-Size: 5460
+Description:  The OpenSSL Project is a collaborative effort to develop a robust,
+ commercial-grade, full-featured, and Open Source toolkit implementing the
+ Transport Layer Security (TLS) protocol as well as a full-strength
+ general-purpose cryptography library.
+ This package installs the OpenSSL configuration file /etc/ssl/openssl.cnf.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-conf.list b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-conf.list
new file mode 100644
index 0000000..667499f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-conf.list
@@ -0,0 +1,3 @@
+/etc/config/openssl
+/etc/ssl/openssl.cnf
+/etc/init.d/openssl
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-conf.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-conf.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-conf.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-legacy.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-legacy.conffiles
new file mode 100644
index 0000000..956c2ed
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-legacy.conffiles
@@ -0,0 +1 @@
+/etc/ssl/modules.cnf.d/legacy.cnf
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-legacy.control b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-legacy.control
new file mode 100644
index 0000000..f5624a5
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-legacy.control
@@ -0,0 +1,17 @@
+Package: libopenssl-legacy
+Version: 3.0.11-1
+Depends: libc, libopenssl3, libopenssl-conf
+Source: package/libs/openssl
+SourceName: libopenssl-legacy
+License: Apache-2.0
+LicenseFiles: LICENSE
+Section: libs
+SourceDateEpoch: 1695554554
+CPE-ID: cpe:/a:openssl:openssl
+Maintainer: Eneas U de Queiroz <cotequeiroz@gmail.com>
+Architecture: x86_64
+Installed-Size: 37160
+Description:  The OpenSSL legacy provider supplies OpenSSL implementations of algorithms that
+ have been deemed legacy. Such algorithms have commonly fallen out of use, have
+ been deemed insecure by the cryptography community, or something similar.  See
+ https://www.openssl.org/docs/man3.0/man7/OSSL_PROVIDER-legacy.html
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-legacy.list b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-legacy.list
new file mode 100644
index 0000000..c649b10
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-legacy.list
@@ -0,0 +1,2 @@
+/etc/ssl/modules.cnf.d/legacy.cnf
+/usr/lib/ossl-modules/legacy.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-legacy.postrm b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-legacy.postrm
new file mode 100755
index 0000000..2866ad9
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-legacy.postrm
@@ -0,0 +1,5 @@
+#!/bin/sh
+[ -n "${IPKG_INSTROOT}" ] && exit 0
+uci -q delete openssl.legacy && uci commit openssl
+/etc/init.d/openssl reload
+exit 0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-legacy.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-legacy.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl-legacy.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl3.control b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl3.control
new file mode 100644
index 0000000..b824105
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl3.control
@@ -0,0 +1,20 @@
+Package: libopenssl3
+Version: 3.0.11-1
+Depends: libc
+Provides: libopenssl
+Source: package/libs/openssl
+SourceName: libopenssl
+License: Apache-2.0
+LicenseFiles: LICENSE
+Section: libs
+SourceDateEpoch: 1695554554
+ABIVersion: 3
+CPE-ID: cpe:/a:openssl:openssl
+Maintainer: Eneas U de Queiroz <cotequeiroz@gmail.com>
+Architecture: x86_64
+Installed-Size: 2098319
+Description:  The OpenSSL Project is a collaborative effort to develop a robust,
+ commercial-grade, full-featured, and Open Source toolkit implementing the
+ Transport Layer Security (TLS) protocol as well as a full-strength
+ general-purpose cryptography library.
+ This package contains the OpenSSL shared libraries, needed by other programs.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl3.list b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl3.list
new file mode 100644
index 0000000..05f89bc
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl3.list
@@ -0,0 +1,2 @@
+/usr/lib/libssl.so.3
+/usr/lib/libcrypto.so.3
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl3.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl3.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libopenssl3.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/liboping.control b/ucentral-client/rootfs/usr/lib/opkg/info/liboping.control
new file mode 100644
index 0000000..2bbe1a7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/liboping.control
@@ -0,0 +1,13 @@
+Package: liboping
+Version: 1.10.0-3
+Depends: libc
+Source: feeds/packages/libs/liboping
+SourceName: liboping
+License: LGPL-2.1-or-later
+Section: libs
+SourceDateEpoch: 1761088275
+CPE-ID: cpe:/a:noping:liboping
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 7414
+Description:  C library to generate ICMP echo requests.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/liboping.list b/ucentral-client/rootfs/usr/lib/opkg/info/liboping.list
new file mode 100644
index 0000000..f53b58c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/liboping.list
@@ -0,0 +1,2 @@
+/usr/lib/liboping.so.0
+/usr/lib/liboping.so.0.3.0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/liboping.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/liboping.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/liboping.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libpcap1.control b/ucentral-client/rootfs/usr/lib/opkg/info/libpcap1.control
new file mode 100644
index 0000000..a7ae6ef
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libpcap1.control
@@ -0,0 +1,17 @@
+Package: libpcap1
+Version: 1.10.4-1
+Depends: libc
+Provides: libpcap
+Source: package/libs/libpcap
+SourceName: libpcap
+License: BSD-3-Clause
+LicenseFiles: LICENSE
+Section: libs
+SourceDateEpoch: 1695847021
+ABIVersion: 1
+CPE-ID: cpe:/a:tcpdump:libpcap
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 100726
+Description:  This package contains a system-independent library for user-level network packet
+ capture.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libpcap1.list b/ucentral-client/rootfs/usr/lib/opkg/info/libpcap1.list
new file mode 100644
index 0000000..a942edb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libpcap1.list
@@ -0,0 +1,2 @@
+/usr/lib/libpcap.so.1
+/usr/lib/libpcap.so.1.10.4
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libpcap1.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libpcap1.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libpcap1.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libpthread.control b/ucentral-client/rootfs/usr/lib/opkg/info/libpthread.control
new file mode 100644
index 0000000..c105499
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libpthread.control
@@ -0,0 +1,14 @@
+Package: libpthread
+Version: 1.2.4-4
+Depends: libgcc1
+Source: package/libs/toolchain
+SourceName: libpthread
+License: GPL-3.0-with-GCC-exception
+Section: libs
+SourceDateEpoch: 1648814098
+Status: unknown hold not-installed
+Essential: yes
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 117
+Description:  POSIX thread library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libpthread.list b/ucentral-client/rootfs/usr/lib/opkg/info/libpthread.list
new file mode 100644
index 0000000..e69de29
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libpthread.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libpthread.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libpthread.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libradcli.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/libradcli.conffiles
new file mode 100644
index 0000000..35506bb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libradcli.conffiles
@@ -0,0 +1 @@
+/etc/radcli/radiusclient.conf
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libradcli.control b/ucentral-client/rootfs/usr/lib/opkg/info/libradcli.control
new file mode 100644
index 0000000..536f974
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libradcli.control
@@ -0,0 +1,11 @@
+Package: libradcli
+Version: 1.3.0-1
+Depends: libc, libnettle8
+Source: feeds/packages/libs/libradcli
+SourceName: libradcli
+Section: libs
+SourceDateEpoch: 1761088275
+Maintainer: Nikos Mavrogiannopoulos <nmav@gnutls.org>
+Architecture: x86_64
+Installed-Size: 23203
+Description:  A library for radius clients
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libradcli.list b/ucentral-client/rootfs/usr/lib/opkg/info/libradcli.list
new file mode 100644
index 0000000..66b4eee
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libradcli.list
@@ -0,0 +1,3 @@
+/usr/lib/libradcli.so.5.3.0
+/etc/radcli/radiusclient.conf
+/usr/lib/libradcli.so.5
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libradcli.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libradcli.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libradcli.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/librt.control b/ucentral-client/rootfs/usr/lib/opkg/info/librt.control
new file mode 100644
index 0000000..475e2d2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/librt.control
@@ -0,0 +1,14 @@
+Package: librt
+Version: 1.2.4-4
+Depends: libpthread
+Source: package/libs/toolchain
+SourceName: librt
+License: GPL-3.0-with-GCC-exception
+Section: libs
+SourceDateEpoch: 1648814098
+Status: unknown hold not-installed
+Essential: yes
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 117
+Description:  POSIX.1b RealTime extension library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/librt.list b/ucentral-client/rootfs/usr/lib/opkg/info/librt.list
new file mode 100644
index 0000000..e69de29
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/librt.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/librt.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/librt.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libsmartcols1.control b/ucentral-client/rootfs/usr/lib/opkg/info/libsmartcols1.control
new file mode 100644
index 0000000..5d2005c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libsmartcols1.control
@@ -0,0 +1,15 @@
+Package: libsmartcols1
+Version: 2.39-2
+Depends: libc, librt
+Provides: libsmartcols
+Source: package/utils/util-linux
+SourceName: libsmartcols
+License: GPL-2.0-only
+LicenseFiles: COPYING libblkid/COPYING libmount/COPYING Documentation/licenses/COPYING.GPLv2 Documentation/licenses/COPYING.LGPLv2.1 libuuid/COPYING Documentation/licenses/COPYING.BSD-3
+Section: libs
+SourceDateEpoch: 1691751213
+ABIVersion: 1
+CPE-ID: cpe:/a:kernel:util-linux
+Architecture: x86_64
+Installed-Size: 45363
+Description:  The smartcols library is used to print tables and trees in a pretty way.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libsmartcols1.list b/ucentral-client/rootfs/usr/lib/opkg/info/libsmartcols1.list
new file mode 100644
index 0000000..18dffa6
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libsmartcols1.list
@@ -0,0 +1,2 @@
+/usr/lib/libsmartcols.so.1
+/usr/lib/libsmartcols.so.1.1.0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libsmartcols1.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libsmartcols1.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libsmartcols1.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libss2.control b/ucentral-client/rootfs/usr/lib/opkg/info/libss2.control
new file mode 100644
index 0000000..75d0297
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libss2.control
@@ -0,0 +1,16 @@
+Package: libss2
+Version: 1.47.0-2
+Depends: libc, libcomerr0
+Provides: libss
+Source: package/utils/e2fsprogs
+SourceName: libss
+License: GPL-2.0
+LicenseFiles: NOTICE
+Section: libs
+SourceDateEpoch: 1691751213
+ABIVersion: 2
+CPE-ID: cpe:/a:e2fsprogs_project:e2fsprogs
+Architecture: x86_64
+Installed-Size: 8765
+Description:  This pacakge contains libss, a command-line interface parsing library
+ bundled with e2fsprogs.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libss2.list b/ucentral-client/rootfs/usr/lib/opkg/info/libss2.list
new file mode 100644
index 0000000..7735a89
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libss2.list
@@ -0,0 +1,2 @@
+/usr/lib/libss.so.2
+/usr/lib/libss.so.2.0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libss2.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libss2.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libss2.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libssh.control b/ucentral-client/rootfs/usr/lib/opkg/info/libssh.control
new file mode 100644
index 0000000..77686d3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libssh.control
@@ -0,0 +1,15 @@
+Package: libssh
+Version: 0.10.4-1
+Depends: libc, libpthread, librt, zlib, libopenssl3
+Source: feeds/packages/libs/libssh
+SourceName: libssh
+License: LGPL-2.1-or-later BSD-2-Clause
+LicenseFiles: COPYING
+Section: libs
+SourceDateEpoch: 1761088275
+CPE-ID: cpe:/a:libssh:libssh
+Maintainer: Mislav Novakovic <mislav.novakovic@sartura.hr>
+Architecture: x86_64
+Installed-Size: 168715
+Description:  libssh is a mulitplatform C library implementing the SSHv2 and SSHv1 protocol
+ for client and server implementations.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libssh.list b/ucentral-client/rootfs/usr/lib/opkg/info/libssh.list
new file mode 100644
index 0000000..ab533be
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libssh.list
@@ -0,0 +1,3 @@
+/usr/lib/libssh.so.4.9.4
+/usr/lib/libssh.so
+/usr/lib/libssh.so.4
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libssh.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libssh.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libssh.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libubox20240329.control b/ucentral-client/rootfs/usr/lib/opkg/info/libubox20240329.control
new file mode 100644
index 0000000..9ce1bf2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libubox20240329.control
@@ -0,0 +1,14 @@
+Package: libubox20240329
+Version: 2024-03-29-eb9bcb64-1
+Depends: libc
+Provides: libubox
+Source: package/libs/libubox
+SourceName: libubox
+License: ISC
+Section: libs
+SourceDateEpoch: 1761103960
+ABIVersion: 20240329
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 28353
+Description:  Basic utility library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libubox20240329.list b/ucentral-client/rootfs/usr/lib/opkg/info/libubox20240329.list
new file mode 100644
index 0000000..1e15d79
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libubox20240329.list
@@ -0,0 +1 @@
+/lib/libubox.so.20240329
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libubox20240329.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libubox20240329.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libubox20240329.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libubus-lua.control b/ucentral-client/rootfs/usr/lib/opkg/info/libubus-lua.control
new file mode 100644
index 0000000..169cb16
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libubus-lua.control
@@ -0,0 +1,12 @@
+Package: libubus-lua
+Version: 2023-06-05-f787c97b-1
+Depends: libc, libubus20230605, liblua5.1.5
+Source: package/system/ubus
+SourceName: libubus-lua
+License: LGPL-2.1
+Section: libs
+SourceDateEpoch: 1695039918
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 7107
+Description:  Lua binding for the OpenWrt RPC client
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libubus-lua.list b/ucentral-client/rootfs/usr/lib/opkg/info/libubus-lua.list
new file mode 100644
index 0000000..9d1f4b2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libubus-lua.list
@@ -0,0 +1 @@
+/usr/lib/lua/ubus.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libubus-lua.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libubus-lua.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libubus-lua.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libubus20230605.control b/ucentral-client/rootfs/usr/lib/opkg/info/libubus20230605.control
new file mode 100644
index 0000000..4f7a8b9
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libubus20230605.control
@@ -0,0 +1,14 @@
+Package: libubus20230605
+Version: 2023-06-05-f787c97b-1
+Depends: libc, libubox20240329
+Provides: libubus
+Source: package/system/ubus
+SourceName: libubus
+License: LGPL-2.1
+Section: libs
+SourceDateEpoch: 1695039918
+ABIVersion: 20230605
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 10753
+Description:  OpenWrt RPC client library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libubus20230605.list b/ucentral-client/rootfs/usr/lib/opkg/info/libubus20230605.list
new file mode 100644
index 0000000..4546bc3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libubus20230605.list
@@ -0,0 +1 @@
+/lib/libubus.so.20230605
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libubus20230605.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libubus20230605.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libubus20230605.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libuci20130104.control b/ucentral-client/rootfs/usr/lib/opkg/info/libuci20130104.control
new file mode 100644
index 0000000..7ee9d2b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libuci20130104.control
@@ -0,0 +1,14 @@
+Package: libuci20130104
+Version: 2023-08-10-5781664d-1
+Depends: libc, libubox20240329
+Provides: libuci
+Source: package/system/uci
+SourceName: libuci
+License: LGPL-2.1
+Section: libs
+SourceDateEpoch: 1691751214
+ABIVersion: 20130104
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 17398
+Description:  C library for the Unified Configuration Interface (UCI)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libuci20130104.list b/ucentral-client/rootfs/usr/lib/opkg/info/libuci20130104.list
new file mode 100644
index 0000000..5c6f8ef
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libuci20130104.list
@@ -0,0 +1 @@
+/lib/libuci.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libuci20130104.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libuci20130104.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libuci20130104.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libuclient20201210.control b/ucentral-client/rootfs/usr/lib/opkg/info/libuclient20201210.control
new file mode 100644
index 0000000..4808793
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libuclient20201210.control
@@ -0,0 +1,14 @@
+Package: libuclient20201210
+Version: 2024-04-05-6c16331e-1
+Depends: libc, libubox20240329
+Provides: libuclient
+Source: package/libs/uclient
+SourceName: libuclient
+License: ISC
+Section: libs
+SourceDateEpoch: 1761103960
+ABIVersion: 20201210
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 10750
+Description:  HTTP/1.1 client library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libuclient20201210.list b/ucentral-client/rootfs/usr/lib/opkg/info/libuclient20201210.list
new file mode 100644
index 0000000..552879c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libuclient20201210.list
@@ -0,0 +1 @@
+/usr/lib/libuclient.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libuclient20201210.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libuclient20201210.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libuclient20201210.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libucode20230711.control b/ucentral-client/rootfs/usr/lib/opkg/info/libucode20230711.control
new file mode 100644
index 0000000..e37567b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libucode20230711.control
@@ -0,0 +1,14 @@
+Package: libucode20230711
+Version: 2024-04-15-cfe137be-1
+Depends: libc, libjson-c5
+Provides: libucode
+Source: package/utils/ucode
+SourceName: libucode
+License: ISC
+Section: libs
+SourceDateEpoch: 1761103961
+ABIVersion: 20230711
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 75745
+Description:  The libucode package provides the shared runtime library for the ucode interpreter.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libucode20230711.list b/ucentral-client/rootfs/usr/lib/opkg/info/libucode20230711.list
new file mode 100644
index 0000000..44079c3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libucode20230711.list
@@ -0,0 +1 @@
+/usr/lib/libucode.so.20230711
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libucode20230711.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libucode20230711.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libucode20230711.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libunet.control b/ucentral-client/rootfs/usr/lib/opkg/info/libunet.control
new file mode 100644
index 0000000..b4e6cf3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libunet.control
@@ -0,0 +1,12 @@
+Package: libunet
+Version: 2022-06-30-425e75e3
+Depends: libc, libubox20240329
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/unetd
+SourceName: libunet
+License: GPL-2.0
+Section: libs
+SourceDateEpoch: 1714227325
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 4112
+Description:  unetd support library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libunet.list b/ucentral-client/rootfs/usr/lib/opkg/info/libunet.list
new file mode 100644
index 0000000..e6e68c4
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libunet.list
@@ -0,0 +1 @@
+/usr/lib/libunet.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libunet.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libunet.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libunet.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libustream-openssl20201210.control b/ucentral-client/rootfs/usr/lib/opkg/info/libustream-openssl20201210.control
new file mode 100644
index 0000000..02c4fa7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libustream-openssl20201210.control
@@ -0,0 +1,14 @@
+Package: libustream-openssl20201210
+Version: 2024-04-07-d61493a4-1
+Depends: libc, libubox20240329, libopenssl3
+Provides: libustream-openssl
+Source: package/libs/ustream-ssl
+SourceName: libustream-openssl
+License: ISC
+Section: libs
+SourceDateEpoch: 1761103960
+ABIVersion: 20201210
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 5137
+Description:  ustream SSL Library (openssl)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libustream-openssl20201210.list b/ucentral-client/rootfs/usr/lib/opkg/info/libustream-openssl20201210.list
new file mode 100644
index 0000000..b063ff1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libustream-openssl20201210.list
@@ -0,0 +1 @@
+/lib/libustream-ssl.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libustream-openssl20201210.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libustream-openssl20201210.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libustream-openssl20201210.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libuuid1.control b/ucentral-client/rootfs/usr/lib/opkg/info/libuuid1.control
new file mode 100644
index 0000000..5b3a9bb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libuuid1.control
@@ -0,0 +1,18 @@
+Package: libuuid1
+Version: 2.39-2
+Depends: libc, librt
+Provides: libuuid
+Source: package/utils/util-linux
+SourceName: libuuid
+License: GPL-2.0-only
+LicenseFiles: COPYING libblkid/COPYING libmount/COPYING Documentation/licenses/COPYING.GPLv2 Documentation/licenses/COPYING.LGPLv2.1 libuuid/COPYING Documentation/licenses/COPYING.BSD-3
+Section: libs
+SourceDateEpoch: 1691751213
+ABIVersion: 1
+CPE-ID: cpe:/a:kernel:util-linux
+Architecture: x86_64
+Installed-Size: 11635
+Description:  The UUID library is used to generate unique identifiers for objects
+ that may be accessible beyond the local system. This library
+ generates UUIDs compatible with those created by the Open Software
+ Foundation (OSF) Distributed Computing Environment (DCE) utility.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libuuid1.list b/ucentral-client/rootfs/usr/lib/opkg/info/libuuid1.list
new file mode 100644
index 0000000..040197d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libuuid1.list
@@ -0,0 +1,2 @@
+/usr/lib/libuuid.so.1
+/usr/lib/libuuid.so.1.3.0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libuuid1.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libuuid1.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libuuid1.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libuv1.control b/ucentral-client/rootfs/usr/lib/opkg/info/libuv1.control
new file mode 100644
index 0000000..2a25e04
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libuv1.control
@@ -0,0 +1,18 @@
+Package: libuv1
+Version: 1.48.0-1
+Depends: libc, libpthread, librt
+Provides: libuv
+Source: feeds/packages/libs/libuv
+SourceName: libuv
+License: MIT
+LicenseFiles: LICENSE
+Section: libs
+SourceDateEpoch: 1761088275
+ABIVersion: 1
+CPE-ID: cpe:/a:libuv:libuv
+Maintainer: Marko Ratkaj <markoratkaj@gmail.com>
+Architecture: x86_64
+Installed-Size: 68890
+Description:  libuv is a multi-platform support library with a focus on asynchronous I/O. It
+ was primarily developed for use by Node.js, but it's also used by Luvit, Julia,
+ pyuv, and others.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libuv1.list b/ucentral-client/rootfs/usr/lib/opkg/info/libuv1.list
new file mode 100644
index 0000000..3107290
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libuv1.list
@@ -0,0 +1,3 @@
+/usr/lib/libuv.so
+/usr/lib/libuv.so.1.0.0
+/usr/lib/libuv.so.1
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libuv1.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libuv1.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libuv1.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libwebsockets-openssl.control b/ucentral-client/rootfs/usr/lib/opkg/info/libwebsockets-openssl.control
new file mode 100644
index 0000000..a3b3e4d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libwebsockets-openssl.control
@@ -0,0 +1,14 @@
+Package: libwebsockets-openssl
+Version: 4.1.4-1
+Depends: libc, zlib, libcap, libopenssl3
+Provides: libwebsockets
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/libwebsockets
+SourceName: libwebsockets-openssl
+License: LGPL-2.1+exception
+LicenseFiles: LICENSE
+Section: libs
+SourceDateEpoch: 1695905527
+Maintainer: Karl Palsson <karlp@etactica.com>
+Architecture: x86_64
+Installed-Size: 133027
+Description:  libwebsockets (OpenSSL)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libwebsockets-openssl.list b/ucentral-client/rootfs/usr/lib/opkg/info/libwebsockets-openssl.list
new file mode 100644
index 0000000..e1c3dc9
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libwebsockets-openssl.list
@@ -0,0 +1,2 @@
+/usr/lib/libwebsockets.so.17
+/usr/lib/libwebsockets.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libwebsockets-openssl.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libwebsockets-openssl.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libwebsockets-openssl.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libxtables12.control b/ucentral-client/rootfs/usr/lib/opkg/info/libxtables12.control
new file mode 100644
index 0000000..4e0c018
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libxtables12.control
@@ -0,0 +1,14 @@
+Package: libxtables12
+Version: 1.8.8-1
+Depends: libc
+Provides: libxtables
+Source: package/network/utils/iptables
+SourceName: libxtables
+License: GPL-2.0
+Section: libs
+SourceDateEpoch: 1679419702
+ABIVersion: 12
+CPE-ID: cpe:/a:netfilter_core_team:iptables
+Architecture: x86_64
+Installed-Size: 21912
+Description:  IPv4/IPv6 firewall - shared xtables library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libxtables12.list b/ucentral-client/rootfs/usr/lib/opkg/info/libxtables12.list
new file mode 100644
index 0000000..3a6f1b8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libxtables12.list
@@ -0,0 +1,2 @@
+/usr/lib/libxtables.so.12
+/usr/lib/libxtables.so.12.6.0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/libxtables12.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/libxtables12.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/libxtables12.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/lldpd.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/lldpd.conffiles
new file mode 100644
index 0000000..27b0f14
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/lldpd.conffiles
@@ -0,0 +1 @@
+/etc/config/lldpd
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/lldpd.control b/ucentral-client/rootfs/usr/lib/opkg/info/lldpd.control
new file mode 100644
index 0000000..bbead9a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/lldpd.control
@@ -0,0 +1,19 @@
+Package: lldpd
+Version: 1.0.5-1
+Depends: libc, libcap, libevent2-7
+Source: package/network/services/lldpd
+SourceName: lldpd
+License: ISC
+Section: net
+Require-User: lldp=121:lldp=129
+SourceDateEpoch: 1761103960
+CPE-ID: cpe:/a:lldpd_project:lldpd
+Maintainer: Stijn Tintel <stijn@linux-ipv6.be>
+Architecture: x86_64
+Installed-Size: 127922
+Description:  LLDP (Link Layer Discovery Protocol) is an industry standard protocol designed
+ to supplant proprietary Link-Layer protocols such as
+ Extreme's EDP (Extreme Discovery Protocol) and
+ CDP (Cisco Discovery Protocol).
+ The goal of LLDP is to provide an inter-vendor compatible mechanism to deliver
+ Link-Layer notifications to adjacent network devices.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/lldpd.list b/ucentral-client/rootfs/usr/lib/opkg/info/lldpd.list
new file mode 100644
index 0000000..bc4a5cf
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/lldpd.list
@@ -0,0 +1,8 @@
+/etc/config/lldpd
+/usr/lib/liblldpctl.so.4.8.0
+/usr/sbin/lldpd
+/usr/sbin/lldpcli
+/usr/lib/liblldpctl.so
+/etc/init.d/lldpd
+/usr/lib/liblldpctl.so.4
+/usr/sbin/lldpctl
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/lldpd.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/lldpd.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/lldpd.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/logd.control b/ucentral-client/rootfs/usr/lib/opkg/info/logd.control
new file mode 100644
index 0000000..7d15c93
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/logd.control
@@ -0,0 +1,13 @@
+Package: logd
+Version: 2022-08-13-4c7b720b-2
+Depends: libc, libubox20240329, libubus20230605, libblobmsg-json20240329
+Source: package/system/ubox
+SourceName: logd
+License: GPL-2.0
+Section: base
+Require-User: logd=514:logd=514
+SourceDateEpoch: 1684402529
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 10428
+Description:  OpenWrt system log implementation
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/logd.list b/ucentral-client/rootfs/usr/lib/opkg/info/logd.list
new file mode 100644
index 0000000..9690316
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/logd.list
@@ -0,0 +1,3 @@
+/sbin/logread
+/sbin/logd
+/etc/init.d/log
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/logd.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/logd.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/logd.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/lua.control b/ucentral-client/rootfs/usr/lib/opkg/info/lua.control
new file mode 100644
index 0000000..ab555dd
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/lua.control
@@ -0,0 +1,17 @@
+Package: lua
+Version: 5.1.5-10
+Depends: libc, liblua5.1.5
+Source: package/utils/lua
+SourceName: lua
+License: MIT
+LicenseFiles: COPYRIGHT
+Section: lang
+SourceDateEpoch: 1695847021
+CPE-ID: cpe:/a:lua:lua
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 4546
+Description:  Lua is a powerful light-weight programming language designed for extending 
+ applications. Lua is also frequently used as a general-purpose, stand-alone 
+ language. Lua is free software.
+ This package contains the Lua language interpreter.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/lua.list b/ucentral-client/rootfs/usr/lib/opkg/info/lua.list
new file mode 100644
index 0000000..28c530d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/lua.list
@@ -0,0 +1,2 @@
+/usr/bin/lua
+/usr/bin/lua5.1
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/lua.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/lua.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/lua.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-base.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/luci-base.conffiles
new file mode 100644
index 0000000..863f60c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-base.conffiles
@@ -0,0 +1,3 @@
+/etc/config/luci
+/etc/config/ucitrack
+/etc/luci-uploads/.placeholder
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-base.control b/ucentral-client/rootfs/usr/lib/opkg/info/luci-base.control
new file mode 100644
index 0000000..20851dc
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-base.control
@@ -0,0 +1,12 @@
+Package: luci-base
+Version: git-25.222.75657-7ce34fe
+Depends: libc, rpcd, rpcd-mod-file, rpcd-mod-luci, rpcd-mod-ucode, cgi-io, ucode, ucode-mod-fs, ucode-mod-uci, ucode-mod-ubus, ucode-mod-math, ucode-mod-html, liblucihttp-ucode
+Source: feeds/luci/modules/luci-base
+SourceName: luci-base
+License: MIT
+Section: luci
+SourceDateEpoch: 1754859657
+Maintainer: OpenWrt LuCI community
+Architecture: x86_64
+Installed-Size: 125354
+Description:  LuCI core runtime
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-base.list b/ucentral-client/rootfs/usr/lib/opkg/info/luci-base.list
new file mode 100644
index 0000000..b63ea1c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-base.list
@@ -0,0 +1,73 @@
+/www/luci-static/resources/firewall.js
+/etc/config/luci
+/www/luci-static/resources/rpc.js
+/www/luci-static/resources/cbi/folder.svg
+/www/luci-static/resources/icons/alias.png
+/usr/share/ucode/luci/controller/admin/uci.uc
+/www/luci-static/resources/form.js
+/www/luci-static/resources/icons/alias_disabled.png
+/www/luci-static/resources/icons/switch_disabled.png
+/etc/init.d/ucitrack
+/www/luci-static/resources/icons/loading.gif
+/usr/share/ucode/luci/controller/admin/index.uc
+/usr/share/ucode/luci/template/sysauth.ut
+/www/luci-static/resources/icons/signal-75-100.png
+/www/luci-static/resources/icons/signal-none.png
+/www/luci-static/resources/tools/views.js
+/sbin/luci-reload
+/www/luci-static/resources/ui.js
+/www/luci-static/resources/icons/wifi.png
+/usr/share/ucode/luci/template/view.ut
+/usr/share/ucode/luci/sys.uc
+/www/luci-static/resources/network.js
+/www/luci-static/resources/tools/prng.js
+/www/luci-static/resources/fs.js
+/www/luci-static/resources/icons/port_up.png
+/www/luci-static/resources/protocol/dhcp.js
+/etc/config/ucitrack
+/www/luci-static/resources/promis.min.js
+/usr/share/ucode/luci/uhttpd.uc
+/usr/share/ucode/luci/template/error500.ut
+/www/luci-static/resources/icons/port_down.png
+/usr/share/acl.d/luci-base.json
+/www/luci-static/resources/icons/tunnel.png
+/www/luci-static/resources/xhr.js
+/www/luci-static/resources/icons/vlan_disabled.png
+/www/luci-static/resources/icons/vlan.png
+/lib/upgrade/keep.d/luci-base
+/www/luci-static/resources/uci.js
+/usr/lib/ucode/luci/core.so
+/usr/share/ucode/luci/template/footer.ut
+/www/luci-static/resources/cbi.js
+/www/luci-static/resources/cbi/file.svg
+/www/cgi-bin/luci
+/usr/share/ucode/luci/dispatcher.uc
+/www/luci-static/resources/icons/signal-50-75.png
+/usr/share/ucode/luci/version.uc
+/usr/share/luci/menu.d/luci-base.json
+/etc/luci-uploads/.placeholder
+/usr/share/ucode/luci/template/error404.ut
+/usr/share/ucode/luci/template/csrftoken.ut
+/usr/share/ucode/luci/template/header.ut
+/www/luci-static/resources/tools/widgets.js
+/www/luci-static/resources/protocol/none.js
+/usr/share/ucode/luci/runtime.uc
+/www/luci-static/resources/icons/wifi_disabled.png
+/www/luci-static/resources/icons/signal-0-25.png
+/usr/share/rpcd/acl.d/luci-base.json
+/www/luci-static/resources/protocol/static.js
+/www/luci-static/resources/validation.js
+/www/luci-static/resources/icons/tunnel_disabled.png
+/www/luci-static/resources/icons/signal-0.png
+/www/luci-static/resources/icons/switch.png
+/usr/share/rpcd/ucode/luci
+/www/luci-static/resources/icons/ethernet_disabled.png
+/www/luci-static/resources/icons/bridge_disabled.png
+/www/luci-static/resources/cbi/link.svg
+/www/luci-static/resources/luci.js
+/usr/share/ucode/luci/http.uc
+/usr/share/ucode/luci/zoneinfo.uc
+/www/luci-static/resources/icons/ethernet.png
+/www/index.html
+/www/luci-static/resources/icons/signal-25-50.png
+/www/luci-static/resources/icons/bridge.png
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-base.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/luci-base.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-base.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-base.control b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-base.control
new file mode 100644
index 0000000..ff8b099
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-base.control
@@ -0,0 +1,11 @@
+Package: luci-lib-base
+Version: git-25.222.75657-7ce34fe
+Depends: libc, lua, luci-lib-nixio, luci-lib-ip, luci-lib-jsonc, liblucihttp-lua
+Source: feeds/luci/libs/luci-lib-base
+SourceName: luci-lib-base
+Section: luci
+SourceDateEpoch: 1754859657
+Maintainer: OpenWrt LuCI community
+Architecture: all
+Installed-Size: 9638
+Description:  basic libraries for luci
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-base.list b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-base.list
new file mode 100644
index 0000000..63eebc3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-base.list
@@ -0,0 +1,4 @@
+/usr/lib/lua/luci/debug.lua
+/usr/lib/lua/luci/util.lua
+/usr/lib/lua/luci/ltn12.lua
+/usr/lib/lua/luci/http.lua
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-base.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-base.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-base.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-ip.control b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-ip.control
new file mode 100644
index 0000000..c5f03e4
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-ip.control
@@ -0,0 +1,12 @@
+Package: luci-lib-ip
+Version: git-25.222.75657-7ce34fe
+Depends: libc, liblua5.1.5, libnl-tiny1
+Source: feeds/luci/libs/luci-lib-ip
+SourceName: luci-lib-ip
+License: Apache-2.0
+Section: luci
+SourceDateEpoch: 1754859657
+Maintainer: OpenWrt LuCI community
+Architecture: x86_64
+Installed-Size: 11903
+Description:  Lua library for IP calculation and routing information
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-ip.list b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-ip.list
new file mode 100644
index 0000000..cc1a0b9
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-ip.list
@@ -0,0 +1 @@
+/usr/lib/lua/luci/ip.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-ip.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-ip.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-ip.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-jsonc.control b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-jsonc.control
new file mode 100644
index 0000000..3b03d16
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-jsonc.control
@@ -0,0 +1,11 @@
+Package: luci-lib-jsonc
+Version: git-25.222.75657-7ce34fe
+Depends: libc, liblua5.1.5, libjson-c5
+Source: feeds/luci/libs/luci-lib-jsonc
+SourceName: luci-lib-jsonc
+Section: luci
+SourceDateEpoch: 1754859657
+Maintainer: OpenWrt LuCI community
+Architecture: x86_64
+Installed-Size: 4329
+Description:  Lua binding for JSON-C
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-jsonc.list b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-jsonc.list
new file mode 100644
index 0000000..ce65cf2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-jsonc.list
@@ -0,0 +1 @@
+/usr/lib/lua/luci/jsonc.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-jsonc.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-jsonc.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-jsonc.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-nixio.control b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-nixio.control
new file mode 100644
index 0000000..ba63cf7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-nixio.control
@@ -0,0 +1,12 @@
+Package: luci-lib-nixio
+Version: git-25.222.75657-7ce34fe
+Depends: libc, liblua5.1.5
+Source: feeds/luci/libs/luci-lib-nixio
+SourceName: luci-lib-nixio
+License: Apache-2.0
+Section: luci
+SourceDateEpoch: 1754859657
+Maintainer: OpenWrt LuCI community
+Architecture: x86_64
+Installed-Size: 33373
+Description:  NIXIO POSIX library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-nixio.list b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-nixio.list
new file mode 100644
index 0000000..f625a76
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-nixio.list
@@ -0,0 +1,4 @@
+/usr/lib/lua/nixio/util.lua
+/usr/lib/lua/nixio.so
+/usr/lib/lua/nixio/fs.lua
+/lib/upgrade/luci-add-conffiles.sh
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-nixio.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-nixio.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lib-nixio.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-lua-runtime.control b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lua-runtime.control
new file mode 100644
index 0000000..3f70e3c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lua-runtime.control
@@ -0,0 +1,11 @@
+Package: luci-lua-runtime
+Version: git-25.222.75657-7ce34fe
+Depends: libc, luci-base, lua, luci-lib-base, luci-lib-nixio, luci-lib-ip, luci-lib-jsonc, libubus-lua, liblucihttp-lua, ucode-mod-lua
+Source: feeds/luci/modules/luci-lua-runtime
+SourceName: luci-lua-runtime
+Section: luci
+SourceDateEpoch: 1754859657
+Maintainer: OpenWrt LuCI community
+Architecture: x86_64
+Installed-Size: 29757
+Description:  LuCI Lua runtime libraries
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-lua-runtime.list b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lua-runtime.list
new file mode 100644
index 0000000..c6d9c47
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lua-runtime.list
@@ -0,0 +1,19 @@
+/usr/lib/lua/luci/store.lua
+/usr/lib/lua/luci/template.lua
+/usr/lib/lua/luci/view/empty_node_placeholder.htm
+/usr/lib/lua/luci/sys/zoneinfo.lua
+/usr/lib/lua/luci/config.lua
+/usr/lib/lua/luci/sys.lua
+/usr/lib/lua/luci/sys/zoneinfo/tzoffset.lua
+/usr/lib/lua/luci/sys/zoneinfo/tzdata.lua
+/usr/lib/lua/luci/ccache.lua
+/usr/lib/lua/luci/xml.lua
+/usr/lib/lua/luci/model/uci.lua
+/usr/lib/lua/luci/cacheloader.lua
+/usr/lib/lua/luci/view/admin_status/luaindex.htm
+/usr/lib/lua/luci/i18n.lua
+/usr/lib/lua/luci/version.lua
+/usr/lib/lua/luci/dispatcher.lua
+/usr/lib/lua/luci/ucodebridge.lua
+/usr/lib/lua/luci/template/parser.so
+/usr/lib/lua/luci/view/indexer.htm
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-lua-runtime.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lua-runtime.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-lua-runtime.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-mod-ucentral.control b/ucentral-client/rootfs/usr/lib/opkg/info/luci-mod-ucentral.control
new file mode 100644
index 0000000..f2923b7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-mod-ucentral.control
@@ -0,0 +1,11 @@
+Package: luci-mod-ucentral
+Version: git-23.271.46327-1841c74
+Depends: libc, luci-base
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/tip/luci/luci-mod-ucentral
+SourceName: luci-mod-ucentral
+License: Apache-2.0
+Section: luci
+SourceDateEpoch: 1695905527
+Architecture: all
+Installed-Size: 6863
+Description:  LuCI uCentral Configuration
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-mod-ucentral.list b/ucentral-client/rootfs/usr/lib/opkg/info/luci-mod-ucentral.list
new file mode 100644
index 0000000..65eddaf
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-mod-ucentral.list
@@ -0,0 +1,10 @@
+/www/luci-static/resources/tools/ucentral.js
+/sbin/certupdate
+/www/luci-static/resources/view/ucentral/system.js
+/www/luci-static/resources/view/ucentral/status.js
+/sbin/profileupdate
+/www/luci-static/resources/view/ucentral/settings.js
+/usr/share/rpcd/acl.d/luci-mod-ucentral.json
+/www/luci-static/resources/view/ucentral/uplink.js
+/sbin/diagnostic-bundle
+/usr/share/luci/menu.d/luci-mod-ucentral.json
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-mod-ucentral.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/luci-mod-ucentral.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-mod-ucentral.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-theme-ucentral.control b/ucentral-client/rootfs/usr/lib/opkg/info/luci-theme-ucentral.control
new file mode 100644
index 0000000..361aa7f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-theme-ucentral.control
@@ -0,0 +1,10 @@
+Package: luci-theme-ucentral
+Version: git-23.271.46227-2c6cc0d
+Depends: libc, luci-lua-runtime
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/tip/luci/luci-theme-ucentral
+SourceName: luci-theme-ucentral
+Section: luci
+SourceDateEpoch: 1695905427
+Architecture: all
+Installed-Size: 43907
+Description:  LuCI theme for uCentral
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-theme-ucentral.list b/ucentral-client/rootfs/usr/lib/opkg/info/luci-theme-ucentral.list
new file mode 100644
index 0000000..471a070
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-theme-ucentral.list
@@ -0,0 +1,8 @@
+/www/luci-static/ucentral/spinner.svg
+/www/luci-static/ucentral/logo.svg
+/www/luci-static/ucentral/GalanoGrotesqueW00-Regular.woff2
+/etc/uci-defaults/30_luci-theme-ucentral
+/www/luci-static/ucentral/cascade.css
+/usr/lib/lua/luci/view/themes/ucentral/header.htm
+/usr/lib/lua/luci/view/themes/ucentral/footer.htm
+/www/luci-static/resources/menu-ucentral.js
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/luci-theme-ucentral.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/luci-theme-ucentral.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/luci-theme-ucentral.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/mkf2fs.control b/ucentral-client/rootfs/usr/lib/opkg/info/mkf2fs.control
new file mode 100644
index 0000000..10ecc26
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/mkf2fs.control
@@ -0,0 +1,15 @@
+Package: mkf2fs
+Version: 1.16.0-1
+Depends: libc, libf2fs6
+Conflicts: mkf2fs-selinux
+Source: package/utils/f2fs-tools
+SourceName: mkf2fs
+License: GPL-2.0-only
+LicenseFiles: COPYING
+Section: utils
+SourceDateEpoch: 1684490834
+CPE-ID: cpe:/a:f2fs-tools_project:f2fs-tools
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 16840
+Description:  Utility for creating a Flash-Friendly File System (F2FS)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/mkf2fs.list b/ucentral-client/rootfs/usr/lib/opkg/info/mkf2fs.list
new file mode 100644
index 0000000..f793244
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/mkf2fs.list
@@ -0,0 +1 @@
+/usr/sbin/mkfs.f2fs
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/mkf2fs.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/mkf2fs.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/mkf2fs.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/msgpack-c.control b/ucentral-client/rootfs/usr/lib/opkg/info/msgpack-c.control
new file mode 100644
index 0000000..176b638
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/msgpack-c.control
@@ -0,0 +1,17 @@
+Package: msgpack-c
+Version: 6.0.0-1
+Depends: libc
+Source: feeds/packages/libs/msgpack-c
+SourceName: msgpack-c
+License: BSL-1.0
+LicenseFiles: COPYING LICENSE_1_0.txt
+Section: lib
+SourceDateEpoch: 1761088275
+Maintainer: Tianling Shen <cnsztl@immortalwrt.org>
+Architecture: x86_64
+Installed-Size: 9300
+Description:  MessagePack is an efficient binary serialization format, which lets
+ you exchange data among multiple languages like JSON, except that
+ it's faster and smaller. Small integers are encoded into a single
+ byte and short strings require only one extra byte in addition to
+ the strings themselves.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/msgpack-c.list b/ucentral-client/rootfs/usr/lib/opkg/info/msgpack-c.list
new file mode 100644
index 0000000..96995d3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/msgpack-c.list
@@ -0,0 +1,3 @@
+/usr/lib/libmsgpack-c.so.2
+/usr/lib/libmsgpack-c.so
+/usr/lib/libmsgpack-c.so.2.0.0
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/msgpack-c.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/msgpack-c.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/msgpack-c.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/mtd.control b/ucentral-client/rootfs/usr/lib/opkg/info/mtd.control
new file mode 100644
index 0000000..402d09c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/mtd.control
@@ -0,0 +1,12 @@
+Package: mtd
+Version: 26
+Depends: libc, libubox20240329
+Source: package/system/mtd
+SourceName: mtd
+License: GPL-2.0+
+Section: utils
+SourceDateEpoch: 1679419702
+Architecture: x86_64
+Installed-Size: 10372
+Description:  This package contains an utility useful to upgrade from other firmware or 
+ older OpenWrt releases.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/mtd.list b/ucentral-client/rootfs/usr/lib/opkg/info/mtd.list
new file mode 100644
index 0000000..57acd57
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/mtd.list
@@ -0,0 +1 @@
+/sbin/mtd
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/mtd.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/mtd.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/mtd.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/netifd.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/netifd.conffiles
new file mode 100644
index 0000000..063b44f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/netifd.conffiles
@@ -0,0 +1 @@
+/etc/udhcpc.user
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/netifd.control b/ucentral-client/rootfs/usr/lib/opkg/info/netifd.control
new file mode 100644
index 0000000..f792073
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/netifd.control
@@ -0,0 +1,12 @@
+Package: netifd
+Version: 2023-09-19-8587c074-1
+Depends: libc, libuci20130104, libnl-tiny1, libubus20230605, ubus, ubusd, jshn, libubox20240329
+Source: package/network/config/netifd
+SourceName: netifd
+License: GPL-2.0
+Section: base
+SourceDateEpoch: 1761103960
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 105963
+Description:  OpenWrt Network Interface Configuration Daemon
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/netifd.list b/ucentral-client/rootfs/usr/lib/opkg/info/netifd.list
new file mode 100644
index 0000000..d8d313d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/netifd.list
@@ -0,0 +1,19 @@
+/lib/netifd/proto/dhcp.sh
+/etc/init.d/network
+/lib/netifd/netifd-proto.sh
+/etc/hotplug.d/iface/00-netstate
+/sbin/ifdown
+/lib/netifd/dhcp.script
+/usr/share/udhcpc/default.script
+/lib/network/config.sh
+/lib/upgrade/keep.d/netifd
+/sbin/netifd
+/sbin/devstatus
+/etc/init.d/packet_steering
+/lib/netifd/utils.sh
+/lib/netifd/netifd-wireless.sh
+/etc/udhcpc.user
+/usr/libexec/network/packet-steering.sh
+/sbin/ifstatus
+/sbin/ifup
+/etc/uci-defaults/14_migrate-dhcp-release
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/netifd.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/netifd.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/netifd.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/nftables-json.control b/ucentral-client/rootfs/usr/lib/opkg/info/nftables-json.control
new file mode 100644
index 0000000..be8cec1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/nftables-json.control
@@ -0,0 +1,13 @@
+Package: nftables-json
+Version: 1.0.8-1
+Depends: libc, kmod-nft-core, libnftnl11, jansson4
+Provides: nftables
+Source: package/network/utils/nftables
+SourceName: nftables-json
+License: GPL-2.0
+LicenseFiles: COPYING
+Section: net
+SourceDateEpoch: 1689833051
+Architecture: x86_64
+Installed-Size: 308121
+Description:  nftables userspace utility with JSON support
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/nftables-json.list b/ucentral-client/rootfs/usr/lib/opkg/info/nftables-json.list
new file mode 100644
index 0000000..c350db8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/nftables-json.list
@@ -0,0 +1,4 @@
+/usr/sbin/nft
+/usr/lib/libnftables.so
+/usr/lib/libnftables.so.1.1.0
+/usr/lib/libnftables.so.1
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/nftables-json.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/nftables-json.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/nftables-json.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/odhcp6c.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/odhcp6c.conffiles
new file mode 100644
index 0000000..d146c5e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/odhcp6c.conffiles
@@ -0,0 +1 @@
+/etc/odhcp6c.user
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/odhcp6c.control b/ucentral-client/rootfs/usr/lib/opkg/info/odhcp6c.control
new file mode 100644
index 0000000..7136b55
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/odhcp6c.control
@@ -0,0 +1,12 @@
+Package: odhcp6c
+Version: 2023-05-12-bcd28363-20
+Depends: libc, libubox20240329
+Source: package/network/ipv6/odhcp6c
+SourceName: odhcp6c
+License: GPL-2.0
+Section: net
+SourceDateEpoch: 1683890390
+Maintainer: Hans Dedecker <dedeckeh@gmail.com>
+Architecture: x86_64
+Installed-Size: 26862
+Description:  Embedded DHCPv6-client for OpenWrt
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/odhcp6c.list b/ucentral-client/rootfs/usr/lib/opkg/info/odhcp6c.list
new file mode 100644
index 0000000..0ccbe79
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/odhcp6c.list
@@ -0,0 +1,5 @@
+/lib/upgrade/keep.d/odhcp6c
+/lib/netifd/proto/dhcpv6.sh
+/etc/odhcp6c.user
+/lib/netifd/dhcpv6.script
+/usr/sbin/odhcp6c
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/odhcp6c.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/odhcp6c.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/odhcp6c.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/odhcpd-ipv6only.control b/ucentral-client/rootfs/usr/lib/opkg/info/odhcpd-ipv6only.control
new file mode 100644
index 0000000..d242ef2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/odhcpd-ipv6only.control
@@ -0,0 +1,18 @@
+Package: odhcpd-ipv6only
+Version: 2023-06-24-52112643-1
+Depends: libc, libubox20240329, libuci20130104, libubus20230605, libnl-tiny1
+Source: package/network/services/odhcpd
+SourceName: odhcpd-ipv6only
+License: GPL-2.0
+Section: net
+SourceDateEpoch: 1687626592
+Maintainer: Hans Dedecker <dedeckeh@gmail.com>
+Architecture: x86_64
+Installed-Size: 41577
+Description:  odhcpd is a daemon for serving and relaying IP management protocols to
+ configure clients and downstream routers. It tries to follow the RFC 6204
+ requirements for IPv6 home routers.
+ 
+ This is a variant providing server services for RA, stateless and stateful
+ DHCPv6,  prefix delegation and can be used to relay RA, DHCPv6 and NDP between
+ routed (non-bridged) interfaces in case no delegated prefixes are available.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/odhcpd-ipv6only.list b/ucentral-client/rootfs/usr/lib/opkg/info/odhcpd-ipv6only.list
new file mode 100644
index 0000000..36fcb73
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/odhcpd-ipv6only.list
@@ -0,0 +1,4 @@
+/usr/sbin/odhcpd
+/etc/init.d/odhcpd
+/usr/sbin/odhcpd-update
+/etc/uci-defaults/15_odhcpd
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/odhcpd-ipv6only.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/odhcpd-ipv6only.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/odhcpd-ipv6only.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/openssl-util.control b/ucentral-client/rootfs/usr/lib/opkg/info/openssl-util.control
new file mode 100644
index 0000000..301b3c9
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/openssl-util.control
@@ -0,0 +1,18 @@
+Package: openssl-util
+Version: 3.0.11-1
+Depends: libc, libopenssl3, libopenssl-conf
+Source: package/libs/openssl
+SourceName: openssl-util
+License: Apache-2.0
+LicenseFiles: LICENSE
+Section: utils
+SourceDateEpoch: 1695554554
+CPE-ID: cpe:/a:openssl:openssl
+Maintainer: Eneas U de Queiroz <cotequeiroz@gmail.com>
+Architecture: x86_64
+Installed-Size: 340835
+Description:  The OpenSSL Project is a collaborative effort to develop a robust,
+ commercial-grade, full-featured, and Open Source toolkit implementing the
+ Transport Layer Security (TLS) protocol as well as a full-strength
+ general-purpose cryptography library.
+ This package contains the OpenSSL command-line utility.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/openssl-util.list b/ucentral-client/rootfs/usr/lib/opkg/info/openssl-util.list
new file mode 100644
index 0000000..08b677f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/openssl-util.list
@@ -0,0 +1 @@
+/usr/bin/openssl
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/openssl-util.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/openssl-util.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/openssl-util.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/openwrt-keyring.control b/ucentral-client/rootfs/usr/lib/opkg/info/openwrt-keyring.control
new file mode 100644
index 0000000..432d201
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/openwrt-keyring.control
@@ -0,0 +1,13 @@
+Package: openwrt-keyring
+Version: 2022-03-25-62471e69-2
+Depends: libc
+Provides: lede-keyring
+Source: package/system/openwrt-keyring
+SourceName: openwrt-keyring
+License: GPL-2.0
+Section: base
+SourceDateEpoch: 1648214880
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 311
+Description:  The keyring of with the developer using and gpg public keys.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/openwrt-keyring.list b/ucentral-client/rootfs/usr/lib/opkg/info/openwrt-keyring.list
new file mode 100644
index 0000000..6f6db53
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/openwrt-keyring.list
@@ -0,0 +1 @@
+/etc/opkg/keys/b5043e70f9a75cde
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/openwrt-keyring.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/openwrt-keyring.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/openwrt-keyring.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/oping.control b/ucentral-client/rootfs/usr/lib/opkg/info/oping.control
new file mode 100644
index 0000000..39bdd03
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/oping.control
@@ -0,0 +1,13 @@
+Package: oping
+Version: 1.10.0-3
+Depends: libc, liboping
+Source: feeds/packages/libs/liboping
+SourceName: oping
+License: LGPL-2.1-or-later
+Section: net
+SourceDateEpoch: 1761088275
+CPE-ID: cpe:/a:noping:liboping
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 7731
+Description:  Send ICMP echo request to network hosts
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/oping.list b/ucentral-client/rootfs/usr/lib/opkg/info/oping.list
new file mode 100644
index 0000000..3d0a2ae
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/oping.list
@@ -0,0 +1 @@
+/usr/bin/oping
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/oping.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/oping.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/oping.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/opkg.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/opkg.conffiles
new file mode 100644
index 0000000..912b461
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/opkg.conffiles
@@ -0,0 +1,2 @@
+/etc/opkg.conf
+/etc/opkg/customfeeds.conf
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/opkg.control b/ucentral-client/rootfs/usr/lib/opkg/info/opkg.control
new file mode 100644
index 0000000..322fefd
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/opkg.control
@@ -0,0 +1,20 @@
+Package: opkg
+Version: 2022-02-24-d038e5b6-2
+Depends: libc, uclient-fetch, libpthread, libubox20240329
+Source: package/system/opkg
+SourceName: opkg
+License: GPL-2.0
+LicenseFiles: COPYING
+Section: base
+SourceDateEpoch: 1684402529
+Essential: yes
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 73029
+Description:  Lightweight package management system
+ opkg is the opkg Package Management System, for handling
+ installation and removal of packages on a system. It can
+ recursively follow dependencies and download all packages
+ necessary to install a particular package.
+ 
+ opkg knows how to install both .ipk and .deb packages.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/opkg.list b/ucentral-client/rootfs/usr/lib/opkg/info/opkg.list
new file mode 100644
index 0000000..040b95e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/opkg.list
@@ -0,0 +1,6 @@
+/etc/opkg/customfeeds.conf
+/lib/upgrade/keep.d/opkg
+/bin/opkg
+/etc/uci-defaults/20_migrate-feeds
+/usr/sbin/opkg-key
+/etc/opkg.conf
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/opkg.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/opkg.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/opkg.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/partx-utils.control b/ucentral-client/rootfs/usr/lib/opkg/info/partx-utils.control
new file mode 100644
index 0000000..0755bbb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/partx-utils.control
@@ -0,0 +1,13 @@
+Package: partx-utils
+Version: 2.39-2
+Depends: libc, libblkid1, libsmartcols1
+Source: package/utils/util-linux
+SourceName: partx-utils
+License: GPL-2.0-only
+LicenseFiles: COPYING libblkid/COPYING libmount/COPYING Documentation/licenses/COPYING.GPLv2 Documentation/licenses/COPYING.LGPLv2.1 libuuid/COPYING Documentation/licenses/COPYING.BSD-3
+Section: utils
+SourceDateEpoch: 1691751213
+CPE-ID: cpe:/a:kernel:util-linux
+Architecture: x86_64
+Installed-Size: 55301
+Description:  contains partx, addpart, delpart
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/partx-utils.list b/ucentral-client/rootfs/usr/lib/opkg/info/partx-utils.list
new file mode 100644
index 0000000..f878031
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/partx-utils.list
@@ -0,0 +1,3 @@
+/usr/sbin/addpart
+/usr/sbin/delpart
+/usr/sbin/partx
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/partx-utils.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/partx-utils.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/partx-utils.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ppp-mod-pppoe.control b/ucentral-client/rootfs/usr/lib/opkg/info/ppp-mod-pppoe.control
new file mode 100644
index 0000000..b18bd85
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ppp-mod-pppoe.control
@@ -0,0 +1,13 @@
+Package: ppp-mod-pppoe
+Version: 2.4.9.git-2021-01-04-4
+Depends: libc, kmod-pppoe
+Source: package/network/services/ppp
+SourceName: ppp-mod-pppoe
+License: BSD-4-Clause
+Section: net
+SourceDateEpoch: 1679419702
+CPE-ID: cpe:/a:samba:ppp
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 10480
+Description:  This package contains a PPPoE (PPP over Ethernet) plugin for ppp.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ppp-mod-pppoe.list b/ucentral-client/rootfs/usr/lib/opkg/info/ppp-mod-pppoe.list
new file mode 100644
index 0000000..e150bf1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ppp-mod-pppoe.list
@@ -0,0 +1 @@
+/usr/lib/pppd/2.4.9/pppoe.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ppp-mod-pppoe.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ppp-mod-pppoe.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ppp-mod-pppoe.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ppp.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/ppp.conffiles
new file mode 100644
index 0000000..39ac71d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ppp.conffiles
@@ -0,0 +1,3 @@
+/etc/ppp/chap-secrets
+/etc/ppp/filter
+/etc/ppp/options
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ppp.control b/ucentral-client/rootfs/usr/lib/opkg/info/ppp.control
new file mode 100644
index 0000000..7ddb13f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ppp.control
@@ -0,0 +1,13 @@
+Package: ppp
+Version: 2.4.9.git-2021-01-04-4
+Depends: libc, kmod-ppp
+Source: package/network/services/ppp
+SourceName: ppp
+License: BSD-4-Clause
+Section: net
+SourceDateEpoch: 1679419702
+CPE-ID: cpe:/a:samba:ppp
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 128149
+Description:  This package contains the PPP (Point-to-Point Protocol) daemon.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ppp.list b/ucentral-client/rootfs/usr/lib/opkg/info/ppp.list
new file mode 100644
index 0000000..b09e87a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ppp.list
@@ -0,0 +1,10 @@
+/lib/upgrade/keep.d/ppp
+/usr/sbin/pppd
+/etc/ppp/filter
+/lib/netifd/ppp-up
+/etc/ppp/options
+/etc/ppp/chap-secrets
+/lib/netifd/ppp-down
+/lib/netifd/proto/ppp.sh
+/etc/ppp/resolv.conf
+/lib/netifd/ppp6-up
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ppp.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ppp.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ppp.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/procd-seccomp.control b/ucentral-client/rootfs/usr/lib/opkg/info/procd-seccomp.control
new file mode 100644
index 0000000..5a0bab3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/procd-seccomp.control
@@ -0,0 +1,12 @@
+Package: procd-seccomp
+Version: 2023-06-25-2db83655-2
+Depends: libc, libubox20240329, libblobmsg-json20240329
+Source: package/system/procd
+SourceName: procd-seccomp
+License: GPL-2.0
+Section: base
+SourceDateEpoch: 1761103959
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 18715
+Description:  OpenWrt process seccomp helper + utrace
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/procd-seccomp.list b/ucentral-client/rootfs/usr/lib/opkg/info/procd-seccomp.list
new file mode 100644
index 0000000..4eb7b63
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/procd-seccomp.list
@@ -0,0 +1,4 @@
+/sbin/seccomp-trace
+/sbin/utrace
+/lib/libpreload-trace.so
+/lib/libpreload-seccomp.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/procd-seccomp.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/procd-seccomp.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/procd-seccomp.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/procd-ujail.control b/ucentral-client/rootfs/usr/lib/opkg/info/procd-ujail.control
new file mode 100644
index 0000000..d04a5a3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/procd-ujail.control
@@ -0,0 +1,12 @@
+Package: procd-ujail
+Version: 2023-06-25-2db83655-2
+Depends: libc, libubox20240329, libubus20230605, libuci20130104, libblobmsg-json20240329
+Source: package/system/procd
+SourceName: procd-ujail
+License: GPL-2.0
+Section: base
+SourceDateEpoch: 1761103959
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 42618
+Description:  OpenWrt process jail helper
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/procd-ujail.list b/ucentral-client/rootfs/usr/lib/opkg/info/procd-ujail.list
new file mode 100644
index 0000000..584bfac
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/procd-ujail.list
@@ -0,0 +1 @@
+/sbin/ujail
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/procd-ujail.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/procd-ujail.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/procd-ujail.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/procd.control b/ucentral-client/rootfs/usr/lib/opkg/info/procd.control
new file mode 100644
index 0000000..efe93f8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/procd.control
@@ -0,0 +1,14 @@
+Package: procd
+Version: 2023-06-25-2db83655-2
+Depends: libc, ubusd, ubus, libjson-script20240329, ubox, libubox20240329, libubus20230605, libblobmsg-json20240329, libjson-c5, jshn
+Conflicts: procd-selinux
+Source: package/system/procd
+SourceName: procd
+License: GPL-2.0
+Section: base
+Require-User: :dialout=20 :audio=29
+SourceDateEpoch: 1761103959
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 56411
+Description:  OpenWrt system process manager
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/procd.list b/ucentral-client/rootfs/usr/lib/opkg/info/procd.list
new file mode 100644
index 0000000..6162f0b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/procd.list
@@ -0,0 +1,11 @@
+/sbin/askfirst
+/etc/hotplug.json
+/sbin/procd
+/lib/libsetlbf.so
+/lib/functions/procd.sh
+/sbin/udevtrigger
+/sbin/upgraded
+/sbin/reload_config
+/etc/hotplug-preinit.json
+/sbin/init
+/sbin/service
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/procd.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/procd.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/procd.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/qosify.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/qosify.conffiles
new file mode 100644
index 0000000..0dd54e4
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/qosify.conffiles
@@ -0,0 +1,2 @@
+/etc/config/qosify
+/etc/qosify/00-defaults.conf
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/qosify.control b/ucentral-client/rootfs/usr/lib/opkg/info/qosify.control
new file mode 100644
index 0000000..e15db60
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/qosify.control
@@ -0,0 +1,12 @@
+Package: qosify
+Version: 2023-07-20-850cc271-1
+Depends: libc, libbpf1, libubox20240329, libubus20230605, libnl-tiny1, kmod-sched-cake, kmod-sched-bpf, kmod-ifb, tc
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/qosify
+SourceName: qosify
+License: GPL-2.0
+Section: utils
+SourceDateEpoch: 1693490915
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 25820
+Description:  A simple QoS solution based eBPF + CAKE
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/qosify.list b/ucentral-client/rootfs/usr/lib/opkg/info/qosify.list
new file mode 100644
index 0000000..190a039
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/qosify.list
@@ -0,0 +1,8 @@
+/etc/config/qosify
+/lib/bpf/qosify-bpf.o
+/etc/hotplug.d/net/10-qosify
+/etc/qosify/00-defaults.conf
+/usr/sbin/qosify-status
+/etc/hotplug.d/iface/10-qosify
+/usr/sbin/qosify
+/etc/init.d/qosify
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/qosify.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/qosify.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/qosify.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/r8169-firmware.control b/ucentral-client/rootfs/usr/lib/opkg/info/r8169-firmware.control
new file mode 100644
index 0000000..1a16f57
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/r8169-firmware.control
@@ -0,0 +1,11 @@
+Package: r8169-firmware
+Version: 20230804-1
+Depends: libc
+Source: package/firmware/linux-firmware
+SourceName: r8169-firmware
+Section: firmware
+SourceDateEpoch: 1692112565
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 23813
+Description:  RealTek RTL8169 firmware
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/r8169-firmware.list b/ucentral-client/rootfs/usr/lib/opkg/info/r8169-firmware.list
new file mode 100644
index 0000000..755dcbc
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/r8169-firmware.list
@@ -0,0 +1,24 @@
+/lib/firmware/rtl_nic/rtl8168f-2.fw
+/lib/firmware/rtl_nic/rtl8106e-1.fw
+/lib/firmware/rtl_nic/rtl8168g-1.fw
+/lib/firmware/rtl_nic/rtl8106e-2.fw
+/lib/firmware/rtl_nic/rtl8168g-2.fw
+/lib/firmware/rtl_nic/rtl8402-1.fw
+/lib/firmware/rtl_nic/rtl8168fp-3.fw
+/lib/firmware/rtl_nic/rtl8411-1.fw
+/lib/firmware/rtl_nic/rtl8168h-1.fw
+/lib/firmware/rtl_nic/rtl8107e-1.fw
+/lib/firmware/rtl_nic/rtl8168g-3.fw
+/lib/firmware/rtl_nic/rtl8411-2.fw
+/lib/firmware/rtl_nic/rtl8168h-2.fw
+/lib/firmware/rtl_nic/rtl8107e-2.fw
+/lib/firmware/rtl_nic/rtl8168d-1.fw
+/lib/firmware/rtl_nic/rtl8168d-2.fw
+/lib/firmware/rtl_nic/rtl8168e-1.fw
+/lib/firmware/rtl_nic/rtl8125b-1.fw
+/lib/firmware/rtl_nic/rtl8168e-2.fw
+/lib/firmware/rtl_nic/rtl8105e-1.fw
+/lib/firmware/rtl_nic/rtl8125a-3.fw
+/lib/firmware/rtl_nic/rtl8168f-1.fw
+/lib/firmware/rtl_nic/rtl8125b-2.fw
+/lib/firmware/rtl_nic/rtl8168e-3.fw
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/r8169-firmware.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/r8169-firmware.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/r8169-firmware.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/radius-gw-proxy.control b/ucentral-client/rootfs/usr/lib/opkg/info/radius-gw-proxy.control
new file mode 100644
index 0000000..2b29abc
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/radius-gw-proxy.control
@@ -0,0 +1,12 @@
+Package: radius-gw-proxy
+Version: 1
+Depends: libc, libubox20240329, libubus20230605
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/radius-gw-proxy
+SourceName: radius-gw-proxy
+License: BSD-3-Clause
+Section: ucentral
+SourceDateEpoch: 1686838947
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 4483
+Description:  uCentral Gateway radius-gw-proxy
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/radius-gw-proxy.list b/ucentral-client/rootfs/usr/lib/opkg/info/radius-gw-proxy.list
new file mode 100644
index 0000000..d155a91
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/radius-gw-proxy.list
@@ -0,0 +1,2 @@
+/etc/init.d/radius-gw-proxy
+/usr/sbin/radius-gw-proxy
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/radius-gw-proxy.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/radius-gw-proxy.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/radius-gw-proxy.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/radsecproxy.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/radsecproxy.conffiles
new file mode 100644
index 0000000..ba52955
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/radsecproxy.conffiles
@@ -0,0 +1 @@
+/etc/config/radsecproxy
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/radsecproxy.control b/ucentral-client/rootfs/usr/lib/opkg/info/radsecproxy.control
new file mode 100644
index 0000000..a4f9d15
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/radsecproxy.control
@@ -0,0 +1,14 @@
+Package: radsecproxy
+Version: 1.9.1-1
+Depends: libc, libopenssl3, libpthread, libnettle8
+Source: feeds/packages/net/radsecproxy
+SourceName: radsecproxy
+License: BSD-3-CLAUSE
+LicenseFiles: LICENSE
+Section: net
+SourceDateEpoch: 1761088275
+CPE-ID: cpe:/a:uninett:radsecproxy
+Maintainer: Toke Høiland-Jørgensen <toke@toke.dk>
+Architecture: x86_64
+Installed-Size: 62613
+Description:  A generic radius proxy for UDP/TLS (RadSec)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/radsecproxy.list b/ucentral-client/rootfs/usr/lib/opkg/info/radsecproxy.list
new file mode 100644
index 0000000..465682e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/radsecproxy.list
@@ -0,0 +1,3 @@
+/etc/init.d/radsecproxy
+/usr/sbin/radsecproxy
+/etc/config/radsecproxy
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/radsecproxy.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/radsecproxy.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/radsecproxy.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ratelimit.control b/ucentral-client/rootfs/usr/lib/opkg/info/ratelimit.control
new file mode 100644
index 0000000..9dcb670
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ratelimit.control
@@ -0,0 +1,11 @@
+Package: ratelimit
+Version: 1
+Depends: libc, tc, kmod-ifb
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/ratelimit
+SourceName: ratelimit
+Section: net
+SourceDateEpoch: 1717745935
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 2549
+Description:  Allow Wireless client rate limiting
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ratelimit.list b/ucentral-client/rootfs/usr/lib/opkg/info/ratelimit.list
new file mode 100644
index 0000000..b123353
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ratelimit.list
@@ -0,0 +1,3 @@
+/usr/bin/ratelimit
+/etc/config/ratelimit
+/etc/init.d/ratelimit
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ratelimit.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ratelimit.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ratelimit.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/resolveip.control b/ucentral-client/rootfs/usr/lib/opkg/info/resolveip.control
new file mode 100644
index 0000000..7b830b8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/resolveip.control
@@ -0,0 +1,16 @@
+Package: resolveip
+Version: 2
+Depends: libc
+Source: package/network/utils/resolveip
+SourceName: resolveip
+License: GPL-2.0
+Section: utils
+SourceDateEpoch: 1476524212
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 1604
+Description:  This package contains the small resolveip utility which
+ can be used by scripts to turn host names into numeric
+ IP addresses. It supports IPv4 and IPv6 resolving and
+ has a configurable timeout to guarantee a certain maximum
+ runtime in case of slow or defunct DNS servers.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/resolveip.list b/ucentral-client/rootfs/usr/lib/opkg/info/resolveip.list
new file mode 100644
index 0000000..478d566
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/resolveip.list
@@ -0,0 +1 @@
+/usr/bin/resolveip
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/resolveip.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/resolveip.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/resolveip.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-file.control b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-file.control
new file mode 100644
index 0000000..02978f2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-file.control
@@ -0,0 +1,12 @@
+Package: rpcd-mod-file
+Version: 2023-07-01-c07ab2f9-1
+Depends: libc, libubus20230605, libubox20240329, rpcd
+Source: package/system/rpcd
+SourceName: rpcd-mod-file
+License: ISC
+Section: utils
+SourceDateEpoch: 1691751213
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 7071
+Description:  Provides ubus calls for file and directory operations.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-file.list b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-file.list
new file mode 100644
index 0000000..9d8c6d3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-file.list
@@ -0,0 +1 @@
+/usr/lib/rpcd/file.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-file.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-file.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-file.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-iwinfo.control b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-iwinfo.control
new file mode 100644
index 0000000..bd867f6
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-iwinfo.control
@@ -0,0 +1,12 @@
+Package: rpcd-mod-iwinfo
+Version: 2023-07-01-c07ab2f9-1
+Depends: libiwinfo (>= 2023-01-21), libc, libubus20230605, libubox20240329, rpcd, libiwinfo20230701
+Source: package/system/rpcd
+SourceName: rpcd-mod-iwinfo
+License: ISC
+Section: utils
+SourceDateEpoch: 1691751213
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 7327
+Description:  Provides ubus calls for accessing iwinfo data.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-iwinfo.list b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-iwinfo.list
new file mode 100644
index 0000000..8263831
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-iwinfo.list
@@ -0,0 +1 @@
+/usr/lib/rpcd/iwinfo.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-iwinfo.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-iwinfo.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-iwinfo.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-luci.control b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-luci.control
new file mode 100644
index 0000000..05889d8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-luci.control
@@ -0,0 +1,12 @@
+Package: rpcd-mod-luci
+Version: 20240305-1
+Depends: libc, rpcd, libubox20240329, libubus20230605, libnl-tiny1
+Source: feeds/luci/libs/rpcd-mod-luci
+SourceName: rpcd-mod-luci
+License: Apache-2.0
+Section: libs
+SourceDateEpoch: 1754859657
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 13677
+Description:  Provides LuCI backend ubus RPC operations.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-luci.list b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-luci.list
new file mode 100644
index 0000000..d4bce9a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-luci.list
@@ -0,0 +1 @@
+/usr/lib/rpcd/luci.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-luci.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-luci.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-luci.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-rrdns.control b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-rrdns.control
new file mode 100644
index 0000000..f512fcb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-rrdns.control
@@ -0,0 +1,12 @@
+Package: rpcd-mod-rrdns
+Version: 20170710
+Depends: libc, rpcd, libubox20240329, libubus20230605
+Source: feeds/luci/libs/rpcd-mod-rrdns
+SourceName: rpcd-mod-rrdns
+License: Apache-2.0
+Section: libs
+SourceDateEpoch: 1754859657
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 3792
+Description:  Provides rapid mass reverse DNS lookup functionality.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-rrdns.list b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-rrdns.list
new file mode 100644
index 0000000..51c91d7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-rrdns.list
@@ -0,0 +1 @@
+/usr/lib/rpcd/rrdns.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-rrdns.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-rrdns.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-rrdns.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-ucode.control b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-ucode.control
new file mode 100644
index 0000000..cfb6b5e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-ucode.control
@@ -0,0 +1,12 @@
+Package: rpcd-mod-ucode
+Version: 2023-07-01-c07ab2f9-1
+Depends: libc, libubus20230605, libubox20240329, rpcd, libucode20230711
+Source: package/system/rpcd
+SourceName: rpcd-mod-ucode
+License: ISC
+Section: utils
+SourceDateEpoch: 1691751213
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 7682
+Description:  Allows implementing plugins using ucode scripts.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-ucode.list b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-ucode.list
new file mode 100644
index 0000000..5b73ae9
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-ucode.list
@@ -0,0 +1 @@
+/usr/lib/rpcd/ucode.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-ucode.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-ucode.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd-mod-ucode.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd.conffiles
new file mode 100644
index 0000000..3470156
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd.conffiles
@@ -0,0 +1 @@
+/etc/config/rpcd
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd.control b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd.control
new file mode 100644
index 0000000..3da1546
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd.control
@@ -0,0 +1,13 @@
+Package: rpcd
+Version: 2023-07-01-c07ab2f9-1
+Depends: libc, libubus20230605, libubox20240329, libuci20130104, libblobmsg-json20240329, libjson-c5
+Source: package/system/rpcd
+SourceName: rpcd
+License: ISC
+Section: utils
+SourceDateEpoch: 1691751213
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 25260
+Description:  This package provides the UBUS RPC backend server to expose various
+ functionality to frontend programs via JSON-RPC.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd.list b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd.list
new file mode 100644
index 0000000..cfd1d09
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd.list
@@ -0,0 +1,5 @@
+/etc/init.d/rpcd
+/etc/config/rpcd
+/sbin/rpcd
+/etc/uci-defaults/50-migrate-rpcd-ubus-sock.sh
+/usr/share/rpcd/acl.d/unauthenticated.json
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rpcd.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rpcd.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rrmd.control b/ucentral-client/rootfs/usr/lib/opkg/info/rrmd.control
new file mode 100644
index 0000000..11c7e37
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rrmd.control
@@ -0,0 +1,12 @@
+Package: rrmd
+Version: 1
+Depends: libc, ucrun
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/rrmd
+SourceName: rrmd
+License: ISC
+Section: utils
+SourceDateEpoch: 1709188093
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 10026
+Description:  radio resource management
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rrmd.list b/ucentral-client/rootfs/usr/lib/opkg/info/rrmd.list
new file mode 100644
index 0000000..2412c85
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rrmd.list
@@ -0,0 +1,13 @@
+/usr/share/rrmd/phy.uc
+/usr/share/rrmd/neighbor.uc
+/usr/share/rrmd/command.uc
+/usr/share/rrmd/config.uc
+/usr/share/rrmd/event.uc
+/usr/share/rrmd/policy.uc
+/etc/init.d/rrmd
+/usr/share/rrmd/policy_snr.uc
+/etc/config/rrmd
+/usr/bin/rrmd.uc
+/usr/share/rrmd/local.uc
+/usr/share/rrmd/scan.uc
+/usr/share/rrmd/station.uc
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rrmd.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/rrmd.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rrmd.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rtty-openssl.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/rtty-openssl.conffiles
new file mode 100644
index 0000000..fdff70c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rtty-openssl.conffiles
@@ -0,0 +1 @@
+/etc/config/rtty
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rtty-openssl.control b/ucentral-client/rootfs/usr/lib/opkg/info/rtty-openssl.control
new file mode 100644
index 0000000..6acc98c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rtty-openssl.control
@@ -0,0 +1,14 @@
+Package: rtty-openssl
+Version: 7.1.4-1
+Depends: libc, libev, libopenssl3
+Provides: rtty
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/rtty
+SourceName: rtty-openssl
+License: MIT
+LicenseFiles: LICENSE
+Section: utils
+SourceDateEpoch: 1678870569
+Maintainer: Jianhui Zhao <zhaojh329@gmail.com>
+Architecture: x86_64
+Installed-Size: 19059
+Description:  Access your terminals from anywhere via the web
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rtty-openssl.list b/ucentral-client/rootfs/usr/lib/opkg/info/rtty-openssl.list
new file mode 100644
index 0000000..6374a8f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rtty-openssl.list
@@ -0,0 +1,3 @@
+/etc/config/rtty
+/usr/sbin/rtty
+/etc/init.d/rtty
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/rtty-openssl.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/rtty-openssl.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/rtty-openssl.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/spotfilter.control b/ucentral-client/rootfs/usr/lib/opkg/info/spotfilter.control
new file mode 100644
index 0000000..9f60b69
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/spotfilter.control
@@ -0,0 +1,12 @@
+Package: spotfilter
+Version: 1
+Depends: libc, libbpf1, libubox20240329, libubus20230605, libnl-tiny1, kmod-sched-bpf, kmod-ifb
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/spotfilter
+SourceName: spotfilter
+License: GPL-2.0
+Section: utils
+SourceDateEpoch: 1714650634
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 22869
+Description:  Network filter for hotspot services
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/spotfilter.list b/ucentral-client/rootfs/usr/lib/opkg/info/spotfilter.list
new file mode 100644
index 0000000..0159497
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/spotfilter.list
@@ -0,0 +1,4 @@
+/usr/sbin/spotfilter
+/etc/hotplug.d/net/10-spotfilter
+/etc/init.d/spotfilter
+/lib/bpf/spotfilter-bpf.o
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/spotfilter.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/spotfilter.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/spotfilter.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/switch-fabric.control b/ucentral-client/rootfs/usr/lib/opkg/info/switch-fabric.control
new file mode 100644
index 0000000..5142d7b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/switch-fabric.control
@@ -0,0 +1,12 @@
+Package: switch-fabric
+Version: 1
+Depends: libc
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/switch-fabric
+SourceName: switch-fabric
+License: BSD-3-Clause
+Section: ucentral
+SourceDateEpoch: 1699956499
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 622
+Description:  Allow configuring HW specific switch fabric features.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/switch-fabric.list b/ucentral-client/rootfs/usr/lib/opkg/info/switch-fabric.list
new file mode 100644
index 0000000..25552e8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/switch-fabric.list
@@ -0,0 +1,3 @@
+/usr/libexec/switch.sh
+/etc/init.d/switch-fabric
+/etc/config/switch
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/switch-fabric.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/switch-fabric.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/switch-fabric.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/tc-full.control b/ucentral-client/rootfs/usr/lib/opkg/info/tc-full.control
new file mode 100644
index 0000000..0d24059
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/tc-full.control
@@ -0,0 +1,15 @@
+Package: tc-full
+Version: 6.3.0-1
+Depends: libc, kmod-sched-core, libbpf1, libxtables12, tc-mod-iptables
+Provides: tc
+Alternatives: 400:/sbin/tc:/usr/libexec/tc-full
+Source: package/network/utils/iproute2
+SourceName: tc-full
+License: GPL-2.0
+Section: net
+SourceDateEpoch: 1683462718
+CPE-ID: cpe:/a:iproute2_project:iproute2
+Maintainer: Russell Senior <russell@personaltelco.net>
+Architecture: x86_64
+Installed-Size: 176602
+Description:  Traffic control utility (full)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/tc-full.list b/ucentral-client/rootfs/usr/lib/opkg/info/tc-full.list
new file mode 100644
index 0000000..bc0cddd
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/tc-full.list
@@ -0,0 +1 @@
+/usr/libexec/tc-full
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/tc-full.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/tc-full.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/tc-full.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/tc-mod-iptables.control b/ucentral-client/rootfs/usr/lib/opkg/info/tc-mod-iptables.control
new file mode 100644
index 0000000..9a25182
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/tc-mod-iptables.control
@@ -0,0 +1,13 @@
+Package: tc-mod-iptables
+Version: 6.3.0-1
+Depends: libc, libxtables12, libbpf1
+Source: package/network/utils/iproute2
+SourceName: tc-mod-iptables
+License: GPL-2.0
+Section: net
+SourceDateEpoch: 1683462718
+CPE-ID: cpe:/a:iproute2_project:iproute2
+Maintainer: Russell Senior <russell@personaltelco.net>
+Architecture: x86_64
+Installed-Size: 3282
+Description:  Traffic control module - iptables action
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/tc-mod-iptables.list b/ucentral-client/rootfs/usr/lib/opkg/info/tc-mod-iptables.list
new file mode 100644
index 0000000..cd4d5ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/tc-mod-iptables.list
@@ -0,0 +1 @@
+/usr/lib/tc/m_xt.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/tc-mod-iptables.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/tc-mod-iptables.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/tc-mod-iptables.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/tcpdump.control b/ucentral-client/rootfs/usr/lib/opkg/info/tcpdump.control
new file mode 100644
index 0000000..b3eb9bb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/tcpdump.control
@@ -0,0 +1,13 @@
+Package: tcpdump
+Version: 4.99.4-1
+Depends: libc, libpcap1
+Source: package/network/utils/tcpdump
+SourceName: tcpdump
+License: BSD-3-Clause
+Section: net
+SourceDateEpoch: 1681716768
+CPE-ID: cpe:/a:tcpdump:tcpdump
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 364306
+Description:  Network monitoring and data acquisition tool
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/tcpdump.list b/ucentral-client/rootfs/usr/lib/opkg/info/tcpdump.list
new file mode 100644
index 0000000..d32bcf0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/tcpdump.list
@@ -0,0 +1 @@
+/usr/bin/tcpdump
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/tcpdump.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/tcpdump.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/tcpdump.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/terminfo.control b/ucentral-client/rootfs/usr/lib/opkg/info/terminfo.control
new file mode 100644
index 0000000..b5b5590
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/terminfo.control
@@ -0,0 +1,13 @@
+Package: terminfo
+Version: 6.4-2
+Depends: libc
+Source: package/libs/ncurses
+SourceName: terminfo
+License: MIT
+LicenseFiles: README
+Section: libs
+SourceDateEpoch: 1677370322
+CPE-ID: cpe:/a:gnu:ncurses
+Architecture: x86_64
+Installed-Size: 8196
+Description:  Terminal Info Database (ncurses)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/terminfo.list b/ucentral-client/rootfs/usr/lib/opkg/info/terminfo.list
new file mode 100644
index 0000000..53f1793
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/terminfo.list
@@ -0,0 +1,15 @@
+/usr/share/terminfo/x/xterm
+/usr/share/terminfo/a/alacritty
+/usr/share/terminfo/t/tmux
+/usr/share/terminfo/t/tmux-256color
+/usr/share/terminfo/r/rxvt-unicode
+/usr/share/terminfo/a/ansi
+/usr/share/terminfo/d/dumb
+/usr/share/terminfo/x/xterm-color
+/usr/share/terminfo/r/rxvt
+/usr/share/terminfo/s/screen-256color
+/usr/share/terminfo/s/screen
+/usr/share/terminfo/x/xterm-256color
+/usr/share/terminfo/l/linux
+/usr/share/terminfo/v/vt100
+/usr/share/terminfo/v/vt102
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/terminfo.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/terminfo.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/terminfo.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/tip-defaults.control b/ucentral-client/rootfs/usr/lib/opkg/info/tip-defaults.control
new file mode 100644
index 0000000..ddd0ac8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/tip-defaults.control
@@ -0,0 +1,12 @@
+Package: tip-defaults
+Version: 1
+Depends: libc
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/tip/tip-defaults
+SourceName: tip-defaults
+License: BSD-3-Clause
+Section: ucentral
+SourceDateEpoch: 1622550857
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 3131
+Description:  The default configuration of the AP.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/tip-defaults.list b/ucentral-client/rootfs/usr/lib/opkg/info/tip-defaults.list
new file mode 100644
index 0000000..e332829
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/tip-defaults.list
@@ -0,0 +1,2 @@
+/etc/ucentral/cas.pem
+/etc/init.d/tip-version
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/tip-defaults.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/tip-defaults.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/tip-defaults.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/tmate.control b/ucentral-client/rootfs/usr/lib/opkg/info/tmate.control
new file mode 100644
index 0000000..022d6b0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/tmate.control
@@ -0,0 +1,13 @@
+Package: tmate
+Version: 2.4.0-2
+Depends: libc, libevent2-7, libncurses6, libpthread, libssh, msgpack-c, terminfo
+Source: feeds/packages/net/tmate
+SourceName: tmate
+License: ISC
+LicenseFiles: LICENSE
+Section: net
+SourceDateEpoch: 1761088275
+Maintainer: Tianling Shen <cnsztl@immortalwrt.org>
+Architecture: x86_64
+Installed-Size: 263739
+Description:  Tmate is a fork of tmux. It provides an instant pairing solution.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/tmate.list b/ucentral-client/rootfs/usr/lib/opkg/info/tmate.list
new file mode 100644
index 0000000..76218f2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/tmate.list
@@ -0,0 +1 @@
+/usr/bin/tmate
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/tmate.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/tmate.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/tmate.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ubox.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/ubox.conffiles
new file mode 100644
index 0000000..e20d0d8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ubox.conffiles
@@ -0,0 +1 @@
+/etc/modules.conf
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ubox.control b/ucentral-client/rootfs/usr/lib/opkg/info/ubox.control
new file mode 100644
index 0000000..eb3482a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ubox.control
@@ -0,0 +1,13 @@
+Package: ubox
+Version: 2022-08-13-4c7b720b-2
+Depends: libc, libubox20240329, ubusd, ubus, libubus20230605, libuci20130104
+Alternatives: 100:/sbin/rmmod:/sbin/kmodloader, 100:/sbin/insmod:/sbin/kmodloader, 100:/sbin/lsmod:/sbin/kmodloader, 100:/sbin/modinfo:/sbin/kmodloader, 100:/sbin/modprobe:/sbin/kmodloader
+Source: package/system/ubox
+SourceName: ubox
+License: GPL-2.0
+Section: base
+SourceDateEpoch: 1684402529
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 16589
+Description:  OpenWrt system helper toolbox
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ubox.list b/ucentral-client/rootfs/usr/lib/opkg/info/ubox.list
new file mode 100644
index 0000000..b4f3f71
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ubox.list
@@ -0,0 +1,4 @@
+/lib/libvalidate.so
+/etc/modules.conf
+/sbin/validate_data
+/sbin/kmodloader
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ubox.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ubox.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ubox.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ubus.control b/ucentral-client/rootfs/usr/lib/opkg/info/ubus.control
new file mode 100644
index 0000000..3d8b8b6
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ubus.control
@@ -0,0 +1,12 @@
+Package: ubus
+Version: 2023-06-05-f787c97b-1
+Depends: libc, libubus20230605, libblobmsg-json20240329, ubusd
+Source: package/system/ubus
+SourceName: ubus
+License: LGPL-2.1
+Section: base
+SourceDateEpoch: 1695039918
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 6156
+Description:  OpenWrt RPC client utility
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ubus.list b/ucentral-client/rootfs/usr/lib/opkg/info/ubus.list
new file mode 100644
index 0000000..e6f0d1e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ubus.list
@@ -0,0 +1 @@
+/bin/ubus
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ubus.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ubus.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ubus.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ubusd.control b/ucentral-client/rootfs/usr/lib/opkg/info/ubusd.control
new file mode 100644
index 0000000..8b9f7b8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ubusd.control
@@ -0,0 +1,13 @@
+Package: ubusd
+Version: 2023-06-05-f787c97b-1
+Depends: libc, libubox20240329, libblobmsg-json20240329
+Source: package/system/ubus
+SourceName: ubusd
+License: LGPL-2.1
+Section: base
+Require-User: ubus=81:ubus=81
+SourceDateEpoch: 1695039918
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 12546
+Description:  OpenWrt RPC daemon
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ubusd.list b/ucentral-client/rootfs/usr/lib/opkg/info/ubusd.list
new file mode 100644
index 0000000..c06aa69
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ubusd.list
@@ -0,0 +1 @@
+/sbin/ubusd
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ubusd.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ubusd.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ubusd.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-client.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-client.control
new file mode 100644
index 0000000..812b4d0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-client.control
@@ -0,0 +1,12 @@
+Package: ucentral-client
+Version: 2022-06-22-815ad097-1
+Depends: libc, ucode, ucode-mod-fs, ucode-mod-ubus, ucode-mod-uci, ucode-mod-math, ucode-mod-resolv, ucode-mod-uloop, libubox20240329, libwebsockets-openssl, libblobmsg-json20240329, libubus20230605
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/ucentral-client
+SourceName: ucentral-client
+License: BSD-3-Clause
+Section: ucentral
+SourceDateEpoch: 1717150384
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 18863
+Description:  OpenWrt uCentral websocket client
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-client.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-client.list
new file mode 100644
index 0000000..03c2b87
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-client.list
@@ -0,0 +1,6 @@
+/etc/config/ucentral
+/usr/sbin/ucentral
+/etc/config/ustats
+/etc/ucentral/version.json
+/etc/uci-defaults/zzz-ucentral
+/etc/init.d/ucentral
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-client.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-client.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-client.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-dataplane.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-dataplane.control
new file mode 100644
index 0000000..9704906
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-dataplane.control
@@ -0,0 +1,11 @@
+Package: ucentral-dataplane
+Version: 1
+Depends: libc, tc-full, kmod-ifb
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/ucentral-dataplane
+SourceName: ucentral-dataplane
+Section: ucentral
+SourceDateEpoch: 1627212288
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 878
+Description:  Allow loading cBPF and eBPF programs
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-dataplane.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-dataplane.list
new file mode 100644
index 0000000..2bcf686
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-dataplane.list
@@ -0,0 +1,4 @@
+/usr/libexec/dataplane.sh
+/etc/config/dataplane
+/etc/hotplug.d/iface/80-dataplane
+/etc/init.d/dataplane
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-dataplane.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-dataplane.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-dataplane.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-event.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-event.control
new file mode 100644
index 0000000..bbac678
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-event.control
@@ -0,0 +1,12 @@
+Package: ucentral-event
+Version: 1
+Depends: libc
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/ucentral-event
+SourceName: ucentral-event
+License: BSD-3-Clause
+Section: ucentral
+SourceDateEpoch: 1712765093
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 5083
+Description:  uCentral event gathering daemon
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-event.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-event.list
new file mode 100644
index 0000000..31b3f96
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-event.list
@@ -0,0 +1,6 @@
+/etc/events.json
+/etc/config/event
+/usr/sbin/ucentral-wifiscan
+/usr/sbin/ucentral-event
+/etc/init.d/ucentral-event
+/etc/init.d/ucentral-wifiscan
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-event.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-event.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-event.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-schema.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-schema.control
new file mode 100644
index 0000000..1a1700e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-schema.control
@@ -0,0 +1,12 @@
+Package: ucentral-schema
+Version: 2024-04-26-83218cf4-1
+Depends: libc, ucode-mod-nl80211, ucode-mod-rtnl, ucode-mod-log
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/ucentral-schema
+SourceName: ucentral-schema
+License: BSD-3-Clause
+Section: ucentral
+SourceDateEpoch: 1718807572
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 155967
+Description:  OpenWrt uCentral schema
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-schema.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-schema.list
new file mode 100644
index 0000000..2a4fa35
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-schema.list
@@ -0,0 +1,188 @@
+/usr/share/ucentral/templates/services/gps.uc
+/etc/ucentral/examples/ssh.json
+/usr/share/ucentral/templates/services/quality_of_service.uc
+/usr/share/ucentral/state.uc
+/usr/share/ucentral/templates/metric/telemetry.uc
+/etc/ucentral/examples/owe-transition.json
+/etc/ucentral/examples/quality-threshold.json
+/usr/share/ucentral/templates/services/igmp.uc
+/usr/share/ucentral/capabilities.uc
+/etc/ucentral/examples/dual-stack.json
+/etc/ucentral/examples/vxlan.json
+/usr/share/ucentral/cmd_leds.uc
+/usr/share/ucentral/ip-collide.uc
+/usr/share/ucentral/templates/interface/mesh.uc
+/usr/libexec/ucentral/ucentral_led_blink.sh
+/etc/ucentral/examples/fingerprint-raw.json
+/etc/ucentral/examples/unit.json
+/etc/sysctl.d/20-oom-reboot.conf
+/etc/ucentral/examples/dhcp-relay.json
+/usr/share/ucentral/templates/interface/broadband.uc
+/etc/ucentral/examples/mesh.json
+/etc/uci-defaults/99-ucentral-opennds
+/usr/share/ucentral/diagnostic.uc
+/usr/share/ucentral/wifi/mesh.uc
+/etc/ucentral/examples/wwan.json
+/usr/share/ucentral/cmd_syslog.uc
+/etc/ucentral/examples/switch-fabric.json
+/usr/share/ucentral/templates/interface/gre.uc
+/usr/share/ucentral/templates/metric/statistics.uc
+/usr/share/ucentral/templates/services/captive.uc
+/etc/ucentral/examples/switch-vlan.json
+/usr/share/ucentral/cmd_rtty.uc
+/etc/ucentral/examples/onboarding-ap.yml
+/usr/share/ucentral/reboot_cause.uc
+/etc/ucentral/examples/crypto-enterprise.json
+/usr/share/ucentral/templates/services/dhcp_snooping.uc
+/usr/share/ucentral/cmd_stats.uc
+/usr/share/ucentral/templates/interface/firewall/allow.uc
+/etc/ucentral/examples/qos-class.json
+/usr/share/ucentral/templates/toplevel.uc
+/etc/uci-defaults/99-ucentral-event
+/usr/share/ucentral/wifi/phy.uc
+/etc/ucentral/examples/block-rfc1918.json
+/etc/uci-defaults/99-ucentral-qos
+/usr/share/ucentral/templates/services/ssh.uc
+/etc/ucentral/examples/big.json
+/etc/ucentral/examples/rate-limit.json
+/etc/ucentral/examples/captive-click.json
+/usr/share/ucentral/wifi/iface.uc
+/usr/share/ucentral/templates/services/lldp.uc
+/etc/ucentral/examples/ieee8021x-radius.json
+/usr/share/ucentral/templates/interface/common.uc
+/usr/share/ucentral/cmd_factory.uc
+/usr/share/ucentral/templates/services/wireguard_overlay.uc
+/etc/ucentral/examples/radius-proxy.json
+/etc/uci-defaults/99-ucentral-umdns
+/usr/share/ucentral/qos.json
+/etc/ucentral/examples/wds-ap.json
+/usr/share/ucentral/templates/ethernet.uc
+/etc/uci-defaults/99-ucentral-rtty
+/usr/share/ucentral/templates/services/ntp.uc
+/usr/share/ucentral/templates/metric/wifi_scan.uc
+/etc/ucentral/examples/captive-webroot.json
+/usr/share/ucentral/wifi_max_user.uc
+/usr/bin/tcpdump_timeout
+/usr/share/ucentral/templates/interface/ieee8021x.uc
+/usr/share/ucentral/templates/services/radius_proxy.uc
+/etc/ucentral/examples/ieee8021x-nat.json
+/etc/ucentral/examples/ntp.json
+/etc/ucentral/ucentral.cfg.0000000001
+/etc/ucentral/examples/metrics.json
+/etc/ucentral/examples/radius-request-attr.json
+/etc/ucentral/examples/rrm.json
+/etc/ucentral/examples/ieee8021x-mac-auth.json
+/etc/ucentral/examples/fingerprint-final-periodic.json
+/usr/share/ucode/bundle.uc
+/etc/ucentral/schema.json
+/usr/share/ucentral/templates/services/data_plane.uc
+/etc/ucentral/examples/owe.json
+/etc/ucentral/examples/captive.json
+/usr/libexec/naptr_lookup.sh
+/etc/ucentral/examples/online-check.json
+/usr/share/ucentral/templates/services/rrm.uc
+/etc/ucentral/examples/crypto-psk.json
+/etc/uci-defaults/99-ucentral-network
+/usr/share/ucentral/templates/services/radius_gw_proxy.uc
+/usr/share/ucentral/templates/interface/firewall/forward.uc
+/usr/share/ucentral/templates/metric/dhcp_snooping.uc
+/usr/share/ucentral/templates/unit.uc
+/etc/ucentral/examples/wpa2-radius.json
+/etc/ucentral/examples/vlan.json
+/etc/ucentral/examples/switch-ports.json
+/etc/ucentral/examples/wds-sta.json
+/usr/share/ucentral/cmd.uc
+/usr/share/ucentral/telemetry.uc
+/etc/ucentral/examples/fingerprint-final-always.json
+/etc/ucentral/examples/loop-detect.json
+/usr/share/ucentral/templates/interface/gre6.uc
+/usr/share/ucentral/templates/interface/firewall.uc
+/usr/share/ucentral/cmd_transfer.uc
+/etc/ucentral/examples/wifi-6e-afc.json
+/usr/share/ucentral/templates/services/wifi_steering.uc
+/usr/share/ucentral/templates/interface/ipv4.uc
+/usr/share/ucentral/templates/services/rtty.uc
+/usr/share/ucentral/templates/services/log.uc
+/etc/ucentral/examples/captive-multiple.json
+/etc/ucentral/examples/default.json
+/etc/ucentral/examples/gps.json
+/etc/ucentral/examples/qos.json
+/usr/share/ucentral/templates/admin_ui.uc
+/etc/ucentral/examples/psk2-radius.json
+/etc/ucentral/examples/data-plane.json
+/etc/ucentral/examples/radius-gw-proxy.json
+/etc/ucentral/examples/admin_ui.json
+/etc/ucentral/examples/captive-credentials.json
+/etc/ucentral/examples/radius.json
+/usr/share/ucentral/cmd_trace.uc
+/usr/share/ucentral/templates/metric/realtime.uc
+/etc/ucentral/examples/captive-uam.json
+/usr/libexec/ucentral/ucentral_apply.sh
+/etc/config/onlinecheck
+/etc/ucentral/examples/multi-psk.json
+/usr/share/ucentral/templates/interface/dhcp.uc
+/usr/share/ucentral/schemareader.uc
+/etc/ucentral/examples/radius-secondary.json
+/usr/share/ucentral/cmd_perform.uc
+/usr/share/ucentral/templates/services/airtime_fairness.uc
+/etc/uci-defaults/99-ucentral-wifi
+/etc/ucentral/examples/dhcpsnoop.json
+/usr/share/ucentral/onlinecheck.uc
+/usr/share/ucentral/templates/eap_users.uc
+/etc/ucentral/examples/captive-radius.json
+/usr/share/ucentral/templates/base.uc
+/usr/share/ucentral/templates/broadband.uc
+/etc/ucentral/examples/igmp.json
+/etc/ucentral/examples/strict-forwarding.json
+/usr/share/ucentral/signature.uc
+/usr/share/ucentral/templates/interface/ipv6.uc
+/usr/share/ucentral/cmd_wifiscan.uc
+/etc/uci-defaults/99-ucentral-hostname
+/usr/share/ucentral/templates/services/ieee8021x.uc
+/etc/ucentral/examples/gre.json
+/etc/ucentral/examples/tip-oui.json
+/etc/uci-defaults/99-ucentral-lldp
+/usr/share/ucentral/templates/services/mdns.uc
+/etc/uci-defaults/99-ucentral-uhttpd
+/usr/share/ucentral/sysinfo.uc
+/usr/share/ucentral/templates/interface/l2tp.uc
+/usr/share/ucentral/wifi/survey.uc
+/usr/share/ucentral/templates/interface/wmm.uc
+/usr/share/ucentral/templates/interface.uc
+/etc/ucentral/examples/steering.json
+/usr/share/ucentral/templates/interface/ssid.uc
+/usr/share/ucentral/templates/services/http.uc
+/usr/share/ucentral/templates/interface/vxlan.uc
+/usr/share/ucentral/templates/metric/health.uc
+/etc/ucentral/examples/telemetry.json
+/etc/board.d/04-regdm
+/etc/ucentral/examples/lldp.json
+/usr/share/ucentral/templates/config_raw.uc
+/usr/share/ucentral/templates/metric/wifi_frames.uc
+/usr/share/ucentral/templates/services/dhcp_relay.uc
+/usr/share/ucentral/health.uc
+/usr/share/ucentral/templates/services/fingerprint.uc
+/usr/share/ucentral/probe_services.uc
+/etc/ucentral/examples/maverick.json
+/usr/share/ucentral/templates/switch.uc
+/usr/share/ucentral/renderer.uc
+/etc/ucentral/examples/wifi-7.json
+/usr/share/ucentral/templates/services/online_check.uc
+/usr/share/ucentral/cmd_fingerprint.uc
+/usr/share/ucentral/cmd_upgrade.uc
+/usr/share/ucentral/cmd_certupdate.uc
+/etc/init.d/onlinecheck
+/usr/share/ucentral/templates/spotfilter.uc
+/etc/ucentral/examples/eap_local.json
+/usr/share/ucentral/ucentral.uc
+/usr/share/ucentral/wifi/station.uc
+/etc/ucentral/examples/gre6.json
+/usr/share/ucentral/templates/interface/captive.uc
+/usr/share/ucentral/templates/services/facebook_wifi.uc
+/usr/share/ucentral/cmd_reboot.uc
+/usr/share/ucentral/cmd_rrm.uc
+/etc/ucentral/examples/wifi-6e.json
+/usr/share/ucentral/cmd_script.uc
+/usr/share/ucentral/templates/interface/bridge-vlan.uc
+/etc/ucentral/examples/single-ssid.yml
+/usr/share/ucentral/templates/radio.uc
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-schema.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-schema.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-schema.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-state.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-state.control
new file mode 100644
index 0000000..910a8bd
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-state.control
@@ -0,0 +1,12 @@
+Package: ucentral-state
+Version: 1
+Depends: libc
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/ucentral-state
+SourceName: ucentral-state
+License: BSD-3-Clause
+Section: ucentral
+SourceDateEpoch: 1714488773
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 2225
+Description:  uCentral state monitoring daemon
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-state.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-state.list
new file mode 100644
index 0000000..b333f19
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-state.list
@@ -0,0 +1,4 @@
+/usr/sbin/ucentral-pstore
+/etc/config/state
+/usr/sbin/ucentral-state
+/etc/init.d/ucentral-state
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-state.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-state.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-state.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-tools.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-tools.control
new file mode 100644
index 0000000..66973a5
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-tools.control
@@ -0,0 +1,12 @@
+Package: ucentral-tools
+Version: 2025-09-29-17bd7d55-1
+Depends: libc, libubox20240329, libcurl4, libradcli, libopenssl3
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/ucentral-tools
+SourceName: ucentral-tools
+License: BSD-3-Clause
+Section: ucentral
+SourceDateEpoch: 1693490915
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 16864
+Description:  ucentral tools collection
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-tools.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-tools.list
new file mode 100644
index 0000000..f4a5cf2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-tools.list
@@ -0,0 +1,8 @@
+/etc/radcli/dictionary
+/etc/radcli/dictionary.chillispot
+/usr/sbin/dhcpdiscover
+/usr/sbin/radiusprobe
+/usr/sbin/dnsprobe
+/etc/radcli/dictionary.WISPr
+/usr/sbin/ip-collide
+/etc/hotplug.d/iface/90-ip-collide
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-tools.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-tools.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucentral-tools.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uci.control b/ucentral-client/rootfs/usr/lib/opkg/info/uci.control
new file mode 100644
index 0000000..7218277
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uci.control
@@ -0,0 +1,12 @@
+Package: uci
+Version: 2023-08-10-5781664d-1
+Depends: libc, libuci20130104
+Source: package/system/uci
+SourceName: uci
+License: LGPL-2.1
+Section: base
+SourceDateEpoch: 1691751214
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 6994
+Description:  Utility for the Unified Configuration Interface (UCI)
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uci.list b/ucentral-client/rootfs/usr/lib/opkg/info/uci.list
new file mode 100644
index 0000000..e5004a6
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uci.list
@@ -0,0 +1,2 @@
+/sbin/uci
+/lib/config/uci.sh
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uci.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/uci.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uci.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uclient-fetch.control b/ucentral-client/rootfs/usr/lib/opkg/info/uclient-fetch.control
new file mode 100644
index 0000000..d2068ca
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uclient-fetch.control
@@ -0,0 +1,14 @@
+Package: uclient-fetch
+Version: 2024-04-05-6c16331e-1
+Depends: libc, libuclient20201210
+Provides: wget
+Alternatives: 200:/usr/bin/wget:/bin/uclient-fetch
+Source: package/libs/uclient
+SourceName: uclient-fetch
+License: ISC
+Section: net
+SourceDateEpoch: 1761103960
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 7148
+Description:  Tiny wget replacement using libuclient
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uclient-fetch.list b/ucentral-client/rootfs/usr/lib/opkg/info/uclient-fetch.list
new file mode 100644
index 0000000..3726856
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uclient-fetch.list
@@ -0,0 +1 @@
+/bin/uclient-fetch
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uclient-fetch.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/uclient-fetch.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uclient-fetch.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-bpf.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-bpf.control
new file mode 100644
index 0000000..f44af47
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-bpf.control
@@ -0,0 +1,16 @@
+Package: ucode-mod-bpf
+Version: 1
+Depends: libc, libucode20230711, libbpf1
+Source: package/utils/ucode-mod-bpf
+SourceName: ucode-mod-bpf
+License: ISC
+Section: utils
+SourceDateEpoch: 1673260520
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 7647
+Description:  The bpf plugin provides functionality for loading and interacting with
+ eBPF modules.
+ 
+ It allows loading full modules and pinned maps/programs and supports
+ interacting with maps and attaching programs as tc classifiers.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-bpf.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-bpf.list
new file mode 100644
index 0000000..504fee3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-bpf.list
@@ -0,0 +1 @@
+/usr/lib/ucode/bpf.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-bpf.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-bpf.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-bpf.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-fs.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-fs.control
new file mode 100644
index 0000000..dbf8e48
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-fs.control
@@ -0,0 +1,12 @@
+Package: ucode-mod-fs
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode
+Source: package/utils/ucode
+SourceName: ucode-mod-fs
+License: ISC
+Section: lang
+SourceDateEpoch: 1761103961
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 9983
+Description:  The filesystem plugin module allows interaction with the local file system.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-fs.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-fs.list
new file mode 100644
index 0000000..4ceb7bd
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-fs.list
@@ -0,0 +1 @@
+/usr/lib/ucode/fs.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-fs.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-fs.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-fs.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-html.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-html.control
new file mode 100644
index 0000000..aa4764b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-html.control
@@ -0,0 +1,12 @@
+Package: ucode-mod-html
+Version: 1
+Depends: libc, libucode20230711
+Source: feeds/luci/contrib/package/ucode-mod-html
+SourceName: ucode-mod-html
+License: ISC
+Section: utils
+SourceDateEpoch: 1754859657
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 30881
+Description:  ucode HTML utility library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-html.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-html.list
new file mode 100644
index 0000000..30b0d03
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-html.list
@@ -0,0 +1 @@
+/usr/lib/ucode/html.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-html.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-html.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-html.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-log.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-log.control
new file mode 100644
index 0000000..6f939b4
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-log.control
@@ -0,0 +1,12 @@
+Package: ucode-mod-log
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode, libubox20240329
+Source: package/utils/ucode
+SourceName: ucode-mod-log
+License: ISC
+Section: lang
+SourceDateEpoch: 1761103961
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 4391
+Description:  The log plugin module provides access to the syslog and libubox ulog APIs.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-log.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-log.list
new file mode 100644
index 0000000..59ca3ca
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-log.list
@@ -0,0 +1 @@
+/usr/lib/ucode/log.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-log.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-log.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-log.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-lua.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-lua.control
new file mode 100644
index 0000000..197e668
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-lua.control
@@ -0,0 +1,12 @@
+Package: ucode-mod-lua
+Version: 1
+Depends: libc, libucode20230711, liblua5.1.5
+Source: feeds/luci/contrib/package/ucode-mod-lua
+SourceName: ucode-mod-lua
+License: ISC
+Section: utils
+SourceDateEpoch: 1754859657
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 8757
+Description:  ucode to Lua bridge library
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-lua.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-lua.list
new file mode 100644
index 0000000..1f91e9d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-lua.list
@@ -0,0 +1 @@
+/usr/lib/ucode/lua.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-lua.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-lua.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-lua.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-math.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-math.control
new file mode 100644
index 0000000..275b2da
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-math.control
@@ -0,0 +1,12 @@
+Package: ucode-mod-math
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode
+Source: package/utils/ucode
+SourceName: ucode-mod-math
+License: ISC
+Section: lang
+SourceDateEpoch: 1761103961
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 2510
+Description:  The math plugin provides access to various <math.h> procedures.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-math.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-math.list
new file mode 100644
index 0000000..be18c2a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-math.list
@@ -0,0 +1 @@
+/usr/lib/ucode/math.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-math.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-math.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-math.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-nl80211.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-nl80211.control
new file mode 100644
index 0000000..9098071
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-nl80211.control
@@ -0,0 +1,12 @@
+Package: ucode-mod-nl80211
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode, libnl-tiny1, libubox20240329, kmod-mac80211
+Source: package/utils/ucode
+SourceName: ucode-mod-nl80211
+License: ISC
+Section: lang
+SourceDateEpoch: 1761103961
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 21472
+Description:  The nl80211 plugin provides access to the Linux wireless 802.11 netlink API.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-nl80211.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-nl80211.list
new file mode 100644
index 0000000..a9e628f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-nl80211.list
@@ -0,0 +1 @@
+/usr/lib/ucode/nl80211.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-nl80211.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-nl80211.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-nl80211.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-resolv.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-resolv.control
new file mode 100644
index 0000000..c5139f9
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-resolv.control
@@ -0,0 +1,12 @@
+Package: ucode-mod-resolv
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode
+Source: package/utils/ucode
+SourceName: ucode-mod-resolv
+License: ISC
+Section: lang
+SourceDateEpoch: 1761103961
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 7628
+Description:  The resolv plugin implements simple DNS resolving.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-resolv.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-resolv.list
new file mode 100644
index 0000000..46fa80a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-resolv.list
@@ -0,0 +1 @@
+/usr/lib/ucode/resolv.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-resolv.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-resolv.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-resolv.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-rtnl.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-rtnl.control
new file mode 100644
index 0000000..8322d02
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-rtnl.control
@@ -0,0 +1,12 @@
+Package: ucode-mod-rtnl
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode, libnl-tiny1, libubox20240329
+Source: package/utils/ucode
+SourceName: ucode-mod-rtnl
+License: ISC
+Section: lang
+SourceDateEpoch: 1761103961
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 28715
+Description:  The rtnl plugin provides access to the Linux routing netlink API.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-rtnl.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-rtnl.list
new file mode 100644
index 0000000..a1cf036
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-rtnl.list
@@ -0,0 +1 @@
+/usr/lib/ucode/rtnl.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-rtnl.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-rtnl.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-rtnl.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-struct.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-struct.control
new file mode 100644
index 0000000..7faff5a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-struct.control
@@ -0,0 +1,12 @@
+Package: ucode-mod-struct
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode
+Source: package/utils/ucode
+SourceName: ucode-mod-struct
+License: ISC
+Section: lang
+SourceDateEpoch: 1761103961
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 9797
+Description:  The struct plugin implements Python 3 compatible struct.pack/unpack functionality.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-struct.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-struct.list
new file mode 100644
index 0000000..70a8c81
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-struct.list
@@ -0,0 +1 @@
+/usr/lib/ucode/struct.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-struct.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-struct.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-struct.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-ubus.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-ubus.control
new file mode 100644
index 0000000..07aaa49
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-ubus.control
@@ -0,0 +1,12 @@
+Package: ucode-mod-ubus
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode, libubus20230605, libblobmsg-json20240329
+Source: package/utils/ucode
+SourceName: ucode-mod-ubus
+License: ISC
+Section: lang
+SourceDateEpoch: 1761103961
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 14465
+Description:  The ubus module allows ucode template scripts to enumerate and invoke ubus procedures.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-ubus.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-ubus.list
new file mode 100644
index 0000000..c4e3d75
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-ubus.list
@@ -0,0 +1 @@
+/usr/lib/ucode/ubus.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-ubus.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-ubus.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-ubus.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-uci.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-uci.control
new file mode 100644
index 0000000..3686723
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-uci.control
@@ -0,0 +1,12 @@
+Package: ucode-mod-uci
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode, libuci20130104
+Source: package/utils/ucode
+SourceName: ucode-mod-uci
+License: ISC
+Section: lang
+SourceDateEpoch: 1761103961
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 7174
+Description:  The uci module allows templates to read and modify uci configuration.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-uci.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-uci.list
new file mode 100644
index 0000000..88e2dfc
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-uci.list
@@ -0,0 +1 @@
+/usr/lib/ucode/uci.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-uci.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-uci.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-uci.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-uloop.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-uloop.control
new file mode 100644
index 0000000..da93088
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-uloop.control
@@ -0,0 +1,12 @@
+Package: ucode-mod-uloop
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode, libubox20240329
+Source: package/utils/ucode
+SourceName: ucode-mod-uloop
+License: ISC
+Section: lang
+SourceDateEpoch: 1761103961
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 9157
+Description:  The uloop module allows ucode scripts to interact with OpenWrt uloop event loop implementation.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-uloop.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-uloop.list
new file mode 100644
index 0000000..bea0a5c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-uloop.list
@@ -0,0 +1 @@
+/usr/lib/ucode/uloop.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-uloop.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-uloop.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode-mod-uloop.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucode.control
new file mode 100644
index 0000000..2bde9df
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode.control
@@ -0,0 +1,13 @@
+Package: ucode
+Version: 2024-04-15-cfe137be-1
+Depends: libc, libucode20230711
+Source: package/utils/ucode
+SourceName: ucode
+License: ISC
+Section: lang
+SourceDateEpoch: 1761103961
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: x86_64
+Installed-Size: 6193
+Description:  ucode is a tiny script interpreter featuring an ECMAScript oriented
+ script language and Jinja-inspired templating.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucode.list
new file mode 100644
index 0000000..db27eca
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode.list
@@ -0,0 +1,3 @@
+/usr/bin/utpl
+/usr/bin/ucc
+/usr/bin/ucode
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucode.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucode.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucode.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucrun.control b/ucentral-client/rootfs/usr/lib/opkg/info/ucrun.control
new file mode 100644
index 0000000..d241ecf
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucrun.control
@@ -0,0 +1,13 @@
+Package: ucrun
+Version: 2022-02-19-5be6abeb-1
+Depends: libc, libubox20240329, ucode, ucode-mod-uci, ucode-mod-ubus, ucode-mod-fs
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/ucrun
+SourceName: ucrun
+License: GPL-2.0-only
+LicenseFiles: GPL
+Section: utils
+SourceDateEpoch: 1668408440
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 6733
+Description:  uCode main-loop daemon
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucrun.list b/ucentral-client/rootfs/usr/lib/opkg/info/ucrun.list
new file mode 100644
index 0000000..5915b39
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucrun.list
@@ -0,0 +1 @@
+/usr/bin/ucrun
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ucrun.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ucrun.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ucrun.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/udevmand.control b/ucentral-client/rootfs/usr/lib/opkg/info/udevmand.control
new file mode 100644
index 0000000..97e958e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/udevmand.control
@@ -0,0 +1,12 @@
+Package: udevmand
+Version: 20220112-979aca47-1
+Depends: libc, libubus20230605, libblobmsg-json20240329, ubusd, libjson-c5, libnl-tiny1, libuci20130104
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/udevmand
+SourceName: udevmand
+License: LGPL-2.1
+Section: ucentral
+SourceDateEpoch: 1716998360
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 12336
+Description:  Network devman mapping daemon
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/udevmand.list b/ucentral-client/rootfs/usr/lib/opkg/info/udevmand.list
new file mode 100644
index 0000000..495b3c1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/udevmand.list
@@ -0,0 +1,2 @@
+/usr/sbin/udevmand
+/etc/init.d/udevmand
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/udevmand.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/udevmand.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/udevmand.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/udevstats.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/udevstats.conffiles
new file mode 100644
index 0000000..e794e34
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/udevstats.conffiles
@@ -0,0 +1 @@
+/etc/config/udevstats
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/udevstats.control b/ucentral-client/rootfs/usr/lib/opkg/info/udevstats.control
new file mode 100644
index 0000000..5a110fe
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/udevstats.control
@@ -0,0 +1,12 @@
+Package: udevstats
+Version: 1
+Depends: libc, ucode, ucode-mod-ubus, ucode-mod-bpf, kmod-sched-bpf, ucode-mod-struct
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/udevstats
+SourceName: udevstats
+License: GPL-2.0
+Section: utils
+SourceDateEpoch: 1712937336
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 5083
+Description:  Device statistics module
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/udevstats.list b/ucentral-client/rootfs/usr/lib/opkg/info/udevstats.list
new file mode 100644
index 0000000..8874994
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/udevstats.list
@@ -0,0 +1,5 @@
+/etc/config/udevstats
+/etc/init.d/udevstats
+/lib/bpf/udevstats.o
+/etc/hotplug.d/net/10-udevstats
+/usr/sbin/udevstats
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/udevstats.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/udevstats.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/udevstats.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/udhcprelay.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/udhcprelay.conffiles
new file mode 100644
index 0000000..1e80fe5
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/udhcprelay.conffiles
@@ -0,0 +1 @@
+/etc/config/dhcprelay
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/udhcprelay.control b/ucentral-client/rootfs/usr/lib/opkg/info/udhcprelay.control
new file mode 100644
index 0000000..6c263c7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/udhcprelay.control
@@ -0,0 +1,12 @@
+Package: udhcprelay
+Version: 1
+Depends: libc, libubox20240329, libubus20230605, kmod-ifb, tc, kmod-sched
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/udhcprelay
+SourceName: udhcprelay
+License: GPL-2.0
+Section: net
+SourceDateEpoch: 1693490914
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 10605
+Description:  DHCP Relay Daemon
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/udhcprelay.list b/ucentral-client/rootfs/usr/lib/opkg/info/udhcprelay.list
new file mode 100644
index 0000000..f2622b3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/udhcprelay.list
@@ -0,0 +1,4 @@
+/etc/init.d/dhcprelay
+/usr/sbin/udhcprelay
+/etc/hotplug.d/net/10-dhcprelay
+/etc/config/dhcprelay
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/udhcprelay.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/udhcprelay.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/udhcprelay.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/udhcpsnoop.control b/ucentral-client/rootfs/usr/lib/opkg/info/udhcpsnoop.control
new file mode 100644
index 0000000..cb1037b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/udhcpsnoop.control
@@ -0,0 +1,12 @@
+Package: udhcpsnoop
+Version: 1
+Depends: libc, libubox20240329, libubus20230605, kmod-ifb, tc
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/udhcpsnoop
+SourceName: udhcpsnoop
+License: GPL-2.0
+Section: net
+SourceDateEpoch: 1707211461
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 7124
+Description:  DHCP Snooping Daemon
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/udhcpsnoop.list b/ucentral-client/rootfs/usr/lib/opkg/info/udhcpsnoop.list
new file mode 100644
index 0000000..958e1d1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/udhcpsnoop.list
@@ -0,0 +1,4 @@
+/etc/hotplug.d/net/10-dhcpsnoop
+/etc/config/dhcpsnoop
+/etc/init.d/dhcpsnoop
+/usr/sbin/udhcpsnoop
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/udhcpsnoop.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/udhcpsnoop.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/udhcpsnoop.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/udnssnoop.control b/ucentral-client/rootfs/usr/lib/opkg/info/udnssnoop.control
new file mode 100644
index 0000000..580f74a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/udnssnoop.control
@@ -0,0 +1,12 @@
+Package: udnssnoop
+Version: 2021-04-12-67e1e5f0-1
+Depends: libc, libubox20240329, libubus20230605
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/udnssnoop
+SourceName: udnssnoop
+License: GPL-2.0
+Section: net
+SourceDateEpoch: 1646152612
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 4057
+Description:  DNS Snooping Daemon
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/udnssnoop.list b/ucentral-client/rootfs/usr/lib/opkg/info/udnssnoop.list
new file mode 100644
index 0000000..1c01baa
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/udnssnoop.list
@@ -0,0 +1,2 @@
+/usr/sbin/udnssnoop
+/etc/init.d/dnssnoop
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/udnssnoop.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/udnssnoop.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/udnssnoop.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ufp.control b/ucentral-client/rootfs/usr/lib/opkg/info/ufp.control
new file mode 100644
index 0000000..fc4a24b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ufp.control
@@ -0,0 +1,12 @@
+Package: ufp
+Version: 1
+Depends: libc, ucode, ucode-mod-fs, ucode-mod-struct, libubox20240329
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/ufp
+SourceName: ufp
+License: GPL-2.0
+Section: utils
+SourceDateEpoch: 1717150366
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 17322
+Description:  Device fingerprinting daemon
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ufp.list b/ucentral-client/rootfs/usr/lib/opkg/info/ufp.list
new file mode 100644
index 0000000..108bff4
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ufp.list
@@ -0,0 +1,8 @@
+/lib/upgrade/keep.d/ufp
+/etc/init.d/ufp
+/usr/share/ufp/plugin_mdns.uc
+/usr/share/ufp/plugin_dhcp.uc
+/usr/share/ufp/devices.bin
+/usr/sbin/ufpd
+/usr/share/ufp/plugin_wifi.uc
+/usr/lib/ucode/uht.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ufp.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ufp.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ufp.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ugps.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/ugps.conffiles
new file mode 100644
index 0000000..3dfbcee
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ugps.conffiles
@@ -0,0 +1 @@
+/etc/config/gps
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ugps.control b/ucentral-client/rootfs/usr/lib/opkg/info/ugps.control
new file mode 100644
index 0000000..b5138b5
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ugps.control
@@ -0,0 +1,12 @@
+Package: ugps
+Version: 2021-07-19-a8171a07-2
+Depends: libc, libubox20240329, libubus20230605
+Source: package/utils/ugps
+SourceName: ugps
+License: GPL-2.0+
+Section: utils
+SourceDateEpoch: 1761103960
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 5907
+Description:  OpenWrt GPS Daemon
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ugps.list b/ucentral-client/rootfs/usr/lib/opkg/info/ugps.list
new file mode 100644
index 0000000..98962d0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ugps.list
@@ -0,0 +1,3 @@
+/etc/config/gps
+/etc/init.d/ugps
+/usr/sbin/ugps
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ugps.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ugps.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ugps.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd-mod-ubus.control b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd-mod-ubus.control
new file mode 100644
index 0000000..9b74b92
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd-mod-ubus.control
@@ -0,0 +1,13 @@
+Package: uhttpd-mod-ubus
+Version: 2023-06-25-34a8a74d-1
+Depends: libc, uhttpd, libubus20230605, libblobmsg-json20240329
+Source: package/network/services/uhttpd
+SourceName: uhttpd-mod-ubus
+License: ISC
+Section: net
+SourceDateEpoch: 1687726250
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 8191
+Description:  The ubus plugin adds a HTTP/JSON RPC proxy for ubus and publishes the
+ session.* namespace and procedures.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd-mod-ubus.list b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd-mod-ubus.list
new file mode 100644
index 0000000..e5cbe57
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd-mod-ubus.list
@@ -0,0 +1,2 @@
+/etc/uci-defaults/00_uhttpd_ubus
+/usr/lib/uhttpd_ubus.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd-mod-ubus.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd-mod-ubus.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd-mod-ubus.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd-mod-ucode.control b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd-mod-ucode.control
new file mode 100644
index 0000000..237e5b2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd-mod-ucode.control
@@ -0,0 +1,12 @@
+Package: uhttpd-mod-ucode
+Version: 2023-06-25-34a8a74d-1
+Depends: libc, uhttpd, libucode20230711
+Source: package/network/services/uhttpd
+SourceName: uhttpd-mod-ucode
+License: ISC
+Section: net
+SourceDateEpoch: 1687726250
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 4480
+Description:  The ucode plugin adds a CGI-like ucode runtime interface to uHTTPd.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd-mod-ucode.list b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd-mod-ucode.list
new file mode 100644
index 0000000..b4617cb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd-mod-ucode.list
@@ -0,0 +1 @@
+/usr/lib/uhttpd_ucode.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd-mod-ucode.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd-mod-ucode.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd-mod-ucode.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd.conffiles
new file mode 100644
index 0000000..57b0b33
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd.conffiles
@@ -0,0 +1 @@
+/etc/config/uhttpd
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd.control b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd.control
new file mode 100644
index 0000000..e6ba73a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd.control
@@ -0,0 +1,14 @@
+Package: uhttpd
+Version: 2023-06-25-34a8a74d-1
+Depends: libc, libubox20240329, libblobmsg-json20240329, libjson-script20240329, libjson-c5
+Source: package/network/services/uhttpd
+SourceName: uhttpd
+License: ISC
+Section: net
+SourceDateEpoch: 1687726250
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 29141
+Description:  uHTTPd is a tiny single threaded HTTP server with TLS, CGI and Lua
+ support. It is intended as a drop-in replacement for the Busybox
+ HTTP daemon.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd.list b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd.list
new file mode 100644
index 0000000..f7e476e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd.list
@@ -0,0 +1,4 @@
+/usr/sbin/uhttpd
+/etc/init.d/uhttpd
+/etc/config/uhttpd
+/lib/upgrade/keep.d/uhttpd
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uhttpd.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/umdns.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/umdns.conffiles
new file mode 100644
index 0000000..be5b959
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/umdns.conffiles
@@ -0,0 +1 @@
+/etc/config/umdns
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/umdns.control b/ucentral-client/rootfs/usr/lib/opkg/info/umdns.control
new file mode 100644
index 0000000..23a97fa
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/umdns.control
@@ -0,0 +1,12 @@
+Package: umdns
+Version: 2024-01-08-e91ed406-1
+Depends: libc, libubox20240329, libubus20230605, libblobmsg-json20240329
+Source: package/network/services/umdns
+SourceName: umdns
+License: LGPL-2.1
+Section: net
+SourceDateEpoch: 1761103960
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 16833
+Description:  OpenWrt Multicast DNS Daemon
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/umdns.list b/ucentral-client/rootfs/usr/lib/opkg/info/umdns.list
new file mode 100644
index 0000000..2fff9ad
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/umdns.list
@@ -0,0 +1,4 @@
+/etc/config/umdns
+/usr/sbin/umdns
+/etc/init.d/umdns
+/etc/seccomp/umdns.json
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/umdns.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/umdns.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/umdns.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/unetd.control b/ucentral-client/rootfs/usr/lib/opkg/info/unetd.control
new file mode 100644
index 0000000..04af742
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/unetd.control
@@ -0,0 +1,12 @@
+Package: unetd
+Version: 2022-06-30-425e75e3
+Depends: libc, libubox20240329, libubus20230605, libblobmsg-json20240329, libnl-tiny1, libunet, libbpf1, kmod-wireguard, wireguard-tools
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/unetd
+SourceName: unetd
+License: GPL-2.0
+Section: utils
+SourceDateEpoch: 1714227325
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 26826
+Description:  OpenWrt wireguard overlay network configuration service
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/unetd.list b/ucentral-client/rootfs/usr/lib/opkg/info/unetd.list
new file mode 100644
index 0000000..57dd2fa
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/unetd.list
@@ -0,0 +1,4 @@
+/lib/netifd/proto/unetd.sh
+/lib/bpf/mss.o
+/usr/sbin/unetd
+/etc/init.d/unetd
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/unetd.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/unetd.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/unetd.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/urandom-seed.control b/ucentral-client/rootfs/usr/lib/opkg/info/urandom-seed.control
new file mode 100644
index 0000000..7cbf8f9
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/urandom-seed.control
@@ -0,0 +1,11 @@
+Package: urandom-seed
+Version: 3
+Depends: libc, getrandom
+Source: package/system/urandom-seed
+SourceName: urandom-seed
+License: GPL-2.0-only
+Section: base
+SourceDateEpoch: 1649923954
+Architecture: x86_64
+Installed-Size: 830
+Description:  /etc/urandom.seed handling for OpenWrt
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/urandom-seed.list b/ucentral-client/rootfs/usr/lib/opkg/info/urandom-seed.list
new file mode 100644
index 0000000..2fc0f8f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/urandom-seed.list
@@ -0,0 +1,3 @@
+/lib/preinit/81_urandom_seed
+/etc/init.d/urandom_seed
+/sbin/urandom_seed
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/urandom-seed.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/urandom-seed.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/urandom-seed.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/urngd.control b/ucentral-client/rootfs/usr/lib/opkg/info/urngd.control
new file mode 100644
index 0000000..6dd1f39
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/urngd.control
@@ -0,0 +1,21 @@
+Package: urngd
+Version: 2023-07-25-7aefb47b-1
+Depends: libc, libubox20240329
+Source: package/system/urngd
+SourceName: urngd
+License: GPL-2.0 BSD-3-Clause
+Section: utils
+SourceDateEpoch: 1693233309
+Architecture: x86_64
+Installed-Size: 7565
+Description:  urngd is OpenWrt's micro non-physical true random number generator based on
+ timing jitter.
+ 
+ Using the Jitter RNG core, the rngd provides an entropy source that feeds into
+ the Linux /dev/random device if its entropy runs low. It updates the
+ /dev/random entropy estimator such that the newly provided entropy unblocks
+ /dev/random.
+ 
+ The seeding of /dev/random also ensures that /dev/urandom benefits from
+ entropy. Especially during boot time, when the entropy of Linux is low, the
+ Jitter RNGd provides a source of sufficient entropy.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/urngd.list b/ucentral-client/rootfs/usr/lib/opkg/info/urngd.list
new file mode 100644
index 0000000..4b7c324
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/urngd.list
@@ -0,0 +1,2 @@
+/etc/init.d/urngd
+/sbin/urngd
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/urngd.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/urngd.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/urngd.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/usign.control b/ucentral-client/rootfs/usr/lib/opkg/info/usign.control
new file mode 100644
index 0000000..b5dd582
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/usign.control
@@ -0,0 +1,12 @@
+Package: usign
+Version: 2020-05-23-f1f65026-1
+Depends: libc, libubox20240329
+Source: package/system/usign
+SourceName: usign
+License: ISC
+Section: base
+SourceDateEpoch: 1679419702
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 11748
+Description:  OpenWrt signature verification utility
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/usign.list b/ucentral-client/rootfs/usr/lib/opkg/info/usign.list
new file mode 100644
index 0000000..2b8e914
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/usign.list
@@ -0,0 +1,2 @@
+/usr/bin/usign
+/usr/bin/signify
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/usign.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/usign.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/usign.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uspot.control b/ucentral-client/rootfs/usr/lib/opkg/info/uspot.control
new file mode 100644
index 0000000..1f57e49
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uspot.control
@@ -0,0 +1,12 @@
+Package: uspot
+Version: 1
+Depends: libc, spotfilter, uhttpd-mod-ucode, libradcli, iptables-mod-conntrack-extra, conntrack, ucode-mod-math, ucode-mod-nl80211, ucode-mod-rtnl, ucode-mod-uloop, ratelimit
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/uspot
+SourceName: uspot
+License: GPL-2.0
+Section: net
+SourceDateEpoch: 1718033016
+Maintainer: John Crispin <john@phrozen.org>
+Architecture: x86_64
+Installed-Size: 46861
+Description:  hotspot daemon
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uspot.list b/ucentral-client/rootfs/usr/lib/opkg/info/uspot.list
new file mode 100644
index 0000000..1bfb69c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uspot.list
@@ -0,0 +1,30 @@
+/www-uspot/images/OpenWiFi_BadgeLogo_White.svg
+/usr/share/uspot/dump-env.uc
+/usr/share/uspot/cpd.uc
+/usr/share/uspot/header
+/usr/share/uspot/firewall.nft
+/usr/share/uspot/firewall.ipt
+/usr/share/uspot/handler.uc
+/usr/share/uspot/redir.uc
+/usr/lib/ucode/uam.so
+/usr/share/uspot/auth.uc
+/usr/share/uspot/allow.uc
+/usr/share/uspot/footer
+/www-uspot/images/OpenWiFi_LogoLockup_DarkGreyColour.svg
+/usr/share/uspot/portal.uc
+/usr/share/uspot/uspot.uc
+/www-uspot/css/captive-portal.css
+/usr/share/uspot/connected.uc
+/etc/config/uspot
+/usr/share/uspot/handler-env.uc
+/usr/share/uspot/handler-uam.uc
+/usr/share/uspot/logoff.uc
+/usr/share/uspot/credentials.uc
+/usr/share/uspot/radius.uc
+/usr/share/uspot/click.uc
+/usr/bin/radius-client
+/www-uspot/css/bootstrap.min.css
+/usr/share/uspot/handler-cpd.uc
+/usr/bin/captive
+/etc/init.d/uspot
+/usr/share/uspot/error.uc
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/uspot.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/uspot.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/uspot.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/usteer.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/usteer.conffiles
new file mode 100644
index 0000000..7fb5ed0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/usteer.conffiles
@@ -0,0 +1 @@
+/etc/config/usteer
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/usteer.control b/ucentral-client/rootfs/usr/lib/opkg/info/usteer.control
new file mode 100644
index 0000000..7935aef
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/usteer.control
@@ -0,0 +1,10 @@
+Package: usteer
+Version: 2021-04-19-f42bf296-1
+Depends: libc, libubox20240329, libubus20230605, libblobmsg-json20240329, libnl-tiny1, libpcap1
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/usteer
+SourceName: usteer
+Section: net
+SourceDateEpoch: 1651737035
+Architecture: x86_64
+Installed-Size: 36102
+Description:  OpenWrt AP roaming assist daemon
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/usteer.list b/ucentral-client/rootfs/usr/lib/opkg/info/usteer.list
new file mode 100644
index 0000000..19fe9c2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/usteer.list
@@ -0,0 +1,5 @@
+/sbin/usteerd
+/sbin/ap-monitor
+/usr/libexec/uchannel.uc
+/etc/init.d/usteer
+/etc/config/usteer
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/usteer.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/usteer.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/usteer.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ustp.control b/ucentral-client/rootfs/usr/lib/opkg/info/ustp.control
new file mode 100644
index 0000000..357403c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ustp.control
@@ -0,0 +1,12 @@
+Package: ustp
+Version: 2021-08-27-25555611-1
+Depends: libc, libubox20240329, libubus20230605
+Source: /BUILD_WORKSPACE/OPENWIFI/OPENWIFI_WLANAP/ra-openwifi-wlan-ap/feeds/ucentral/ustp
+SourceName: ustp
+License: GPL-2.0
+Section: net
+SourceDateEpoch: 1630299253
+Maintainer: Felix Fietkau <nbd@nbd.name
+Architecture: x86_64
+Installed-Size: 24083
+Description:  OpenWrt STP/RSTP daemon
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ustp.list b/ucentral-client/rootfs/usr/lib/opkg/info/ustp.list
new file mode 100644
index 0000000..a76a8b0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ustp.list
@@ -0,0 +1,3 @@
+/etc/init.d/ustpd
+/sbin/ustpd
+/sbin/bridge-stp
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/ustp.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/ustp.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/ustp.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/vxlan.control b/ucentral-client/rootfs/usr/lib/opkg/info/vxlan.control
new file mode 100644
index 0000000..fb3abea
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/vxlan.control
@@ -0,0 +1,12 @@
+Package: vxlan
+Version: 7
+Depends: libc, kmod-vxlan
+Source: package/network/config/vxlan
+SourceName: vxlan
+License: GPL-2.0
+Section: net
+SourceDateEpoch: 1609412001
+Maintainer: Matthias Schiffer <mschiffer@universe-factory.net>
+Architecture: all
+Installed-Size: 1453
+Description:  Virtual eXtensible LAN config support in /etc/config/network.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/vxlan.list b/ucentral-client/rootfs/usr/lib/opkg/info/vxlan.list
new file mode 100644
index 0000000..bed1c14
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/vxlan.list
@@ -0,0 +1 @@
+/lib/netifd/proto/vxlan.sh
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/vxlan.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/vxlan.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/vxlan.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/wireguard-tools.control b/ucentral-client/rootfs/usr/lib/opkg/info/wireguard-tools.control
new file mode 100644
index 0000000..4fb5f10
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/wireguard-tools.control
@@ -0,0 +1,21 @@
+Package: wireguard-tools
+Version: 1.0.20210914-2
+Depends: libc
+Source: package/network/utils/wireguard-tools
+SourceName: wireguard-tools
+License: GPL-2.0
+LicenseFiles: COPYING
+Section: net
+SourceDateEpoch: 1761103960
+Maintainer: Jason A. Donenfeld <Jason@zx2c4.com>
+Architecture: x86_64
+Installed-Size: 27079
+Description:  WireGuard is a novel VPN that runs inside the Linux Kernel and utilizes
+ state-of-the-art cryptography. It aims to be faster, simpler, leaner, and
+ more useful than IPSec, while avoiding the massive headache. It intends to
+ be considerably more performant than OpenVPN.  WireGuard is designed as a
+ general purpose VPN for running on embedded interfaces and super computers
+ alike, fit for many different circumstances. It uses UDP.
+ 
+ This package provides the userspace control program for WireGuard,
+ `wg(8)`, a netifd protocol helper, and a re-resolve watchdog script.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/wireguard-tools.list b/ucentral-client/rootfs/usr/lib/opkg/info/wireguard-tools.list
new file mode 100644
index 0000000..af0cfd0
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/wireguard-tools.list
@@ -0,0 +1,3 @@
+/usr/bin/wg
+/lib/netifd/proto/wireguard.sh
+/usr/bin/wireguard_watchdog
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/wireguard-tools.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/wireguard-tools.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/wireguard-tools.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/wireless-regdb.control b/ucentral-client/rootfs/usr/lib/opkg/info/wireless-regdb.control
new file mode 100644
index 0000000..4b08500
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/wireless-regdb.control
@@ -0,0 +1,11 @@
+Package: wireless-regdb
+Version: 2023.09.01-1
+Depends: libc
+Source: package/firmware/wireless-regdb
+SourceName: wireless-regdb
+Section: firmware
+SourceDateEpoch: 1761103961
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: all
+Installed-Size: 2298
+Description:  Wireless Regulatory Database
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/wireless-regdb.list b/ucentral-client/rootfs/usr/lib/opkg/info/wireless-regdb.list
new file mode 100644
index 0000000..901a0d8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/wireless-regdb.list
@@ -0,0 +1 @@
+/lib/firmware/regulatory.db
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/wireless-regdb.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/wireless-regdb.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/wireless-regdb.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/wpad-openssl.conffiles b/ucentral-client/rootfs/usr/lib/opkg/info/wpad-openssl.conffiles
new file mode 100644
index 0000000..554ee96
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/wpad-openssl.conffiles
@@ -0,0 +1,3 @@
+/etc/config/radius
+/etc/radius/clients
+/etc/radius/users
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/wpad-openssl.control b/ucentral-client/rootfs/usr/lib/opkg/info/wpad-openssl.control
new file mode 100644
index 0000000..7c61c6d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/wpad-openssl.control
@@ -0,0 +1,17 @@
+Package: wpad-openssl
+Version: 2023-09-08-e5ccbfc6-4
+Depends: hostapd-common (=2023-09-08-e5ccbfc6-4), libc, libnl-tiny1, hostapd-common, ucode, libubus20230605, libucode20230711, ucode-mod-fs, ucode-mod-nl80211, ucode-mod-rtnl, ucode-mod-ubus, ucode-mod-uloop, libblobmsg-json20240329, libopenssl3, libopenssl-legacy
+Conflicts: hostapd, hostapd-basic, hostapd-basic-openssl, hostapd-basic-wolfssl, hostapd-basic-mbedtls, hostapd-mini, hostapd-openssl, hostapd-wolfssl, hostapd-mbedtls, wpad, wpad-mesh-openssl, wpad-mesh-wolfssl, wpad-mesh-mbedtls, wpad-basic, wpad-basic-openssl, wpad-basic-wolfssl, wpad-basic-mbedtls, wpad-mini, wpad, wpad-mesh-openssl, wpad-mesh-wolfssl, wpad-mesh-mbedtls, wpad-basic, wpad-basic-openssl, wpad-basic-wolfssl, wpad-basic-mbedtls, wpad-mini
+Provides: hostapd, wpa-supplicant
+Source: package/network/services/hostapd
+SourceName: wpad-openssl
+License: BSD-3-Clause
+Section: net
+Require-User: network=101:network=101
+SourceDateEpoch: 1761103960
+CPE-ID: cpe:/a:w1.fi:hostapd
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: x86_64
+Installed-Size: 803631
+Description:  This package contains a full featured IEEE 802.1x/WPA/EAP/RADIUS
+ Authenticator and Supplicant
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/wpad-openssl.list b/ucentral-client/rootfs/usr/lib/opkg/info/wpad-openssl.list
new file mode 100644
index 0000000..3d106c8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/wpad-openssl.list
@@ -0,0 +1,11 @@
+/usr/sbin/wpad
+/usr/sbin/hostapd
+/etc/init.d/radius
+/usr/sbin/hostapd-radius
+/usr/share/hostap/wpa_supplicant.uc
+/etc/radius/clients
+/etc/config/radius
+/usr/share/hostap/hostapd.uc
+/etc/radius/users
+/usr/sbin/wpa_supplicant
+/lib/upgrade/keep.d/wpad-openssl
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/wpad-openssl.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/wpad-openssl.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/wpad-openssl.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/zlib.control b/ucentral-client/rootfs/usr/lib/opkg/info/zlib.control
new file mode 100644
index 0000000..7cc8237
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/zlib.control
@@ -0,0 +1,14 @@
+Package: zlib
+Version: 1.2.13-1
+Depends: libc
+Source: package/libs/zlib
+SourceName: zlib
+License: Zlib
+LicenseFiles: README
+Section: libs
+SourceDateEpoch: 1684402529
+CPE-ID: cpe:/a:gnu:zlib
+Architecture: x86_64
+Installed-Size: 43449
+Description:  zlib is a lossless data-compression library.
+ This package includes the shared library.
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/zlib.list b/ucentral-client/rootfs/usr/lib/opkg/info/zlib.list
new file mode 100644
index 0000000..015a86e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/zlib.list
@@ -0,0 +1,3 @@
+/usr/lib/libz.so.1.2.13
+/usr/lib/libz.so.1
+/usr/lib/libz.so
diff --git a/ucentral-client/rootfs/usr/lib/opkg/info/zlib.prerm b/ucentral-client/rootfs/usr/lib/opkg/info/zlib.prerm
new file mode 100755
index 0000000..12d06ec
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/info/zlib.prerm
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@
diff --git a/ucentral-client/rootfs/usr/lib/opkg/status b/ucentral-client/rootfs/usr/lib/opkg/status
new file mode 100644
index 0000000..a086831
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/opkg/status
@@ -0,0 +1,2329 @@
+Package: kmod-vxlan
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-iptunnel, kmod-udptunnel4, kmod-udptunnel6
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: terminfo
+Version: 6.4-2
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: iwinfo
+Version: 2023-07-01-ca79f641-1
+Depends: libc, libiwinfo20230701
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: libopenssl3
+ABIVersion: 3
+Version: 3.0.11-1
+Depends: libc
+Provides: libopenssl
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: liblucihttp0
+ABIVersion: 0
+Version: 2023-03-15-9b5b683f-1
+Depends: libc
+Provides: liblucihttp
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-lib-textsearch
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: cgi-io
+Version: 2022-08-10-901b0f04-21
+Depends: libc, libubox20240329, libubus20230605
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: luci-lib-base
+Version: git-25.222.75657-7ce34fe
+Depends: libc, lua, luci-lib-nixio, luci-lib-ip, luci-lib-jsonc, liblucihttp-lua
+Status: install user installed
+Architecture: all
+Installed-Time: 1761103961
+
+Package: libc
+Version: 1.2.4-4
+Depends: libgcc1
+Status: install hold installed
+Essential: yes
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: gre
+Version: 13
+Depends: libc, kmod-gre, kmod-gre6, resolveip
+Provides: grev4, grev6
+Status: install user installed
+Architecture: all
+Installed-Time: 1761103961
+
+Package: mkf2fs
+Version: 1.16.0-1
+Depends: libc, libf2fs6
+Conflicts: mkf2fs-selinux
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-ip6-tunnel
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-iptunnel6
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ucode-mod-log
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode, libubox20240329
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-crypto-gf128
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: opkg
+Version: 2022-02-24-d038e5b6-2
+Depends: libc, uclient-fetch, libpthread, libubox20240329
+Status: install user installed
+Essential: yes
+Architecture: x86_64
+Conffiles:
+ /etc/opkg.conf f38c19f696ea87c0b30eb5bfeb8657237f4625e1a749c58b99f01595edfb6446
+ /etc/opkg/customfeeds.conf 61d1f3aa62fe977614ed0c2f0ad3b2ee2f7b451bfb34812071d86d31a4d43d4a
+Installed-Time: 1761103961
+
+Package: kmod-usb-core
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nls-base
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libpthread
+Version: 1.2.4-4
+Depends: libgcc1
+Status: install hold installed
+Essential: yes
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: ubus
+Version: 2023-06-05-f787c97b-1
+Depends: libc, libubus20230605, libblobmsg-json20240329, ubusd
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: iw
+Version: 5.19-1
+Depends: libc, libnl-tiny1
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-crypto-manager
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-aead, kmod-crypto-hash
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-sched-act-vlan
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-sched-core
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libuci20130104
+ABIVersion: 20130104
+Version: 2023-08-10-5781664d-1
+Depends: libc, libubox20240329
+Provides: libuci
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: udevstats
+Version: 1
+Depends: libc, ucode, ucode-mod-ubus, ucode-mod-bpf, kmod-sched-bpf, ucode-mod-struct
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/config/udevstats e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
+Installed-Time: 1761103961
+
+Package: kmod-ixgbe
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-mdio, kmod-ptp, kmod-hwmon-core, kmod-libphy, kmod-mdio-devres
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libnetfilter-queue1
+ABIVersion: 1
+Version: 1.0.5-4
+Depends: libc, libmnl0, libnfnetlink0
+Provides: libnetfilter-queue
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: rpcd
+Version: 2023-07-01-c07ab2f9-1
+Depends: libc, libubus20230605, libubox20240329, libuci20130104, libblobmsg-json20240329, libjson-c5
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/config/rpcd 1a40da0ebe45b1afd131dfc4650592913e38445e7fe42f96d3b95ad5151ac0e6
+Installed-Time: 1761103961
+
+Package: kmod-gre6
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-iptunnel, kmod-ip6-tunnel, kmod-gre
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: busybox
+Version: 1.36.1-1
+Depends: libc
+Conflicts: busybox-selinux
+Status: install user installed
+Essential: yes
+Architecture: x86_64
+Conffiles:
+ /etc/syslog.conf e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
+Installed-Time: 1761103961
+
+Package: kmod-crypto-ctr
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-manager, kmod-crypto-seqiv
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: udhcprelay
+Version: 1
+Depends: libc, libubox20240329, libubus20230605, kmod-ifb, tc, kmod-sched
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/config/dhcprelay c02567e005f77596b6ed7b45d9361650c12ad8825002434876cedef15abcd24f
+Installed-Time: 1761103961
+
+Package: libiwinfo20230701
+ABIVersion: 20230701
+Version: 2023-07-01-ca79f641-1
+Depends: libc, libnl-tiny1, libuci20130104, libubus20230605, libiwinfo-data
+Provides: libiwinfo
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: luci-lib-ip
+Version: git-25.222.75657-7ce34fe
+Depends: libc, liblua5.1.5, libnl-tiny1
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-nft-fib
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nft-core
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-nfnetlink
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libubus-lua
+Version: 2023-06-05-f787c97b-1
+Depends: libc, libubus20230605, liblua5.1.5
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ucode-mod-resolv
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: umdns
+Version: 2024-01-08-e91ed406-1
+Depends: libc, libubox20240329, libubus20230605, libblobmsg-json20240329
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/config/umdns eae58a0eb9dd1c56969562fa37cf410a22bdce7c95460c63da53f24a4cce4495
+Installed-Time: 1761103961
+
+Package: kmod-crypto-hash
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-nf-reject6
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ustp
+Version: 2021-08-27-25555611-1
+Depends: libc, libubox20240329, libubus20230605
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-crypto-aead
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-null
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-batman-adv
+Version: 5.15.132+2023.1-12
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-lib-crc16, kmod-lib-crc32c, kmod-cfg80211, batctl
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: tc-full
+Version: 6.3.0-1
+Depends: libc, kmod-sched-core, libbpf1, libxtables12, tc-mod-iptables
+Provides: tc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+Alternatives: 400:/sbin/tc:/usr/libexec/tc-full
+
+Package: bnx2-firmware
+Version: 20230804-1
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: ucode-mod-struct
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: openssl-util
+Version: 3.0.11-1
+Depends: libc, libopenssl3, libopenssl-conf
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-nf-flow
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nf-conntrack
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libnl-tiny1
+ABIVersion: 1
+Version: 2023-07-27-bc92a280-1
+Depends: libc
+Provides: libnl-tiny
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: firstcontact
+Version: 1
+Depends: libc, libubox20240329, libcurl4, libopenssl3, certificates
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-lib-crc-ccitt
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ucode-mod-uloop
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode, libubox20240329
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: getrandom
+Version: 2022-08-13-4c7b720b-2
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ucode-mod-ubus
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode, libubus20230605, libblobmsg-json20240329
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: ucentral-state
+Version: 1
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libustream-openssl20201210
+ABIVersion: 20201210
+Version: 2024-04-07-d61493a4-1
+Depends: libc, libubox20240329, libopenssl3
+Provides: libustream-openssl
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libev
+Version: 4.33-2
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: r8169-firmware
+Version: 20230804-1
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-gre
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-iptunnel
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-pppoe
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-ppp, kmod-pppox
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libuuid1
+ABIVersion: 1
+Version: 2.39-2
+Depends: libc, librt
+Provides: libuuid
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-sched-bpf
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: libcap
+Version: 2.69-1
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: luci-lua-runtime
+Version: git-25.222.75657-7ce34fe
+Depends: libc, luci-base, lua, luci-lib-base, luci-lib-nixio, luci-lib-ip, luci-lib-jsonc, libubus-lua, liblucihttp-lua, ucode-mod-lua
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-pppox
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-ppp
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-ipt-conntrack
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-ipt-core, kmod-nf-conntrack
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-nf-reject
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: procd-ujail
+Version: 2023-06-25-2db83655-2
+Depends: libc, libubox20240329, libubus20230605, libuci20130104, libblobmsg-json20240329
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-lib-crc16
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: base-files
+Version: 1557-r23485+66-e92cf0c46f
+Depends: libc, netifd, jsonfilter, usign, openwrt-keyring, fstools, fwtool
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/ethers 56bda09b0aa3d1e88107bfa8a1c6e4449d5c1f47245dc1c4037ff9b5db163b7c
+ /etc/group 45e8cab268d4a2254d48ccb1f889630047e81758de54a614cad5449fdbebe19c
+ /etc/hosts c1a978d90673437b35fa9494e0a54294062c152bb653d490b718052ab88447fd
+ /etc/inittab f74069b98072f928523990b9868eb6b268b574cbc3e4e8411c6397ea5ff30e4a
+ /etc/iproute2/rt_protos a0712b1771c8d5f3e0dcf9a6314880e71aa3498ea1ae873535bdfcf70d814061
+ /etc/iproute2/rt_tables f771e2b81741f70e3faf658dc504f0dc048672fc8caaadea15e46c35da3de8f8
+ /etc/passwd 6a451aa33393f47ade89b8bce4d9711818c2630394c3967265ffed276bb25a55
+ /etc/profile 73a6177caf76a76d178111e57eb6ee95c3ba06ce2fc6864c7fb89cacf433c66d
+ /etc/protocols 7d551355d5540b07b9d86e623cbbc4abecbb94d2a662b3afcc917940eb0e3d52
+ /etc/rc.local 515018aa94eb4937dade12dc0d69890b352af35a5ab5fb8203f9ed10990ac06f
+ /etc/services 754ccc71ca347bc79ac4c45139d416b7cf1e65a919dad1db15613a216cd6b9cc
+ /etc/shadow 98aa9232748ab2395d2ab4b1ba4d175210d627146a403b6dbf0b18bf6e584cde
+ /etc/shells 8b35ce73c18161a7d7ed16fa244410993bd031515260e3e0c11749047df48d0a
+ /etc/shinit f633939cdda16a3116225a578f457295b2a0da824c47d5f0e90a58806c059321
+ /etc/sysctl.conf c02fe88dc055a1eaee9e7cb631760a3a5a9cea55610b42aa45196838c6f1a55e
+ /etc/sysupgrade.conf 9e87b05fe2f12c84d1c465b396322748479f64bc40e5bab061887f0bd95020a6
+Installed-Time: 1761103961
+
+Package: kmod-nf-nat
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nf-conntrack
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-input-core
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: ugps
+Version: 2021-07-19-a8171a07-2
+Depends: libc, libubox20240329, libubus20230605
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/config/gps 3f8568ace6f9f49f252e2578fb2f9795b2bc4e41eddbe5656e5692143ebc3510
+Installed-Time: 1761103961
+
+Package: kmod-crypto-crc32c
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-hash
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: ucode-mod-uci
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode, libuci20130104
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: ucode-mod-lua
+Version: 1
+Depends: libc, libucode20230711, liblua5.1.5
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: partx-utils
+Version: 2.39-2
+Depends: libc, libblkid1, libsmartcols1
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: msgpack-c
+Version: 6.0.0-1
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: netifd
+Version: 2023-09-19-8587c074-1
+Depends: libc, libuci20130104, libnl-tiny1, libubus20230605, ubus, ubusd, jshn, libubox20240329
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/udhcpc.user 4dabffbc2110a29e01babc63d9b8db94da49efd3ed784d35b49a559ac8ce7035
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: libf2fs6
+ABIVersion: 6
+Version: 1.16.0-1
+Depends: libc, libuuid1
+Provides: libf2fs
+Conflicts: libf2fs-selinux
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libsmartcols1
+ABIVersion: 1
+Version: 2.39-2
+Depends: libc, librt
+Provides: libsmartcols
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-r8169
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-mii, r8169-firmware, kmod-phy-realtek, kmod-mdio-devres
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: firewall4
+Version: 2023-03-23-04a06bd7-1
+Depends: ucode (>= 2022-03-22), libc, kmod-nft-core, kmod-nft-fib, kmod-nft-offload, kmod-nft-nat, nftables-json, ucode, ucode-mod-fs, ucode-mod-ubus, ucode-mod-uci
+Provides: uci-firewall
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/config/firewall 1d7ab7d55b6460f4c00d33761d10e7a2e6be62cc4a4d41f38413da7321aa2f89
+ /etc/nftables.d/10-custom-filter-chains.nft af5cbfeb3e3b61d32ce134ae33d15330ee27da838e6f4fb9c717f034923b8b16
+ /etc/nftables.d/README 0656d83221c1d000f6b9655757c412f328e332b5bdf25efbfa88611d8104490d
+Installed-Time: 1761103961
+
+Package: ucrun
+Version: 2022-02-19-5be6abeb-1
+Depends: libc, libubox20240329, ucode, ucode-mod-uci, ucode-mod-ubus, ucode-mod-fs
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-mii
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: procd
+Version: 2023-06-25-2db83655-2
+Depends: libc, ubusd, ubus, libjson-script20240329, ubox, libubox20240329, libubus20230605, libblobmsg-json20240329, libjson-c5, jshn
+Conflicts: procd-selinux
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: resolveip
+Version: 2
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-crypto-hmac
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-hash, kmod-crypto-manager
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: libbpf1
+ABIVersion: 1
+Version: 1.2.2-1
+Depends: libc, libelf1
+Provides: libbpf
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: ubusd
+Version: 2023-06-05-f787c97b-1
+Depends: libc, libubox20240329, libblobmsg-json20240329
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: libnetfilter-conntrack3
+ABIVersion: 3
+Version: 1.0.9-2
+Depends: libc, libnfnetlink0, kmod-nf-conntrack-netlink, libmnl0
+Provides: libnetfilter-conntrack
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ratelimit
+Version: 1
+Depends: libc, tc, kmod-ifb
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-crypto-acompress
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: rpcd-mod-ucode
+Version: 2023-07-01-c07ab2f9-1
+Depends: libc, libubus20230605, libubox20240329, rpcd, libucode20230711
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ucode-mod-math
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-lib-crc32c
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-crc32c
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: libelf1
+ABIVersion: 1
+Version: 0.189-1
+Depends: libc, zlib
+Provides: libelf, libelf11
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-iptunnel
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-i2c-core
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libxtables12
+ABIVersion: 12
+Version: 1.8.8-1
+Depends: libc
+Provides: libxtables
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: liboping
+Version: 1.10.0-3
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-crypto-sha512
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-hash
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: bridger
+Version: 2024-04-22-40b1c5b6
+Depends: libc, libbpf1, libubox20240329, libubus20230605, libnl-tiny1, kmod-sched-core, kmod-sched-flower, kmod-sched-bpf, kmod-sched-act-vlan
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: vxlan
+Version: 7
+Depends: libc, kmod-vxlan
+Status: install user installed
+Architecture: all
+Installed-Time: 1761103961
+
+Package: batctl-default
+Version: 2023.1-3
+Depends: libc, libnl-tiny1, librt
+Provides: batctl
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+Alternatives: 200:/usr/sbin/batctl:/usr/libexec/batctl-default
+
+Package: kmod-crypto-seqiv
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-aead, kmod-crypto-rng
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-fs-vfat
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nls-base, kmod-nls-cp437, kmod-nls-iso8859-1, kmod-nls-utf8
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-nft-nat
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nft-core, kmod-nf-nat
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-crypto-lib-chacha20poly1305
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-lib-chacha20, kmod-crypto-lib-poly1305
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ucentral-dataplane
+Version: 1
+Depends: libc, tc-full, kmod-ifb
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-crypto-lib-poly1305
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-hash
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: libopenssl-legacy
+Version: 3.0.11-1
+Depends: libc, libopenssl3, libopenssl-conf
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/ssl/modules.cnf.d/legacy.cnf 44772f93dd6faec414b8921b1da7ef5337086dc123a48d5bed6e2b9e4552ce6e
+Installed-Time: 1761103961
+
+Package: kmod-phy-realtek
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-libphy
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: radius-gw-proxy
+Version: 1
+Depends: libc, libubox20240329, libubus20230605
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-nf-ipt
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-ipt-conntrack-extra
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nf-conncount, kmod-ipt-core, kmod-ipt-conntrack
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libubus20230605
+ABIVersion: 20230605
+Version: 2023-06-05-f787c97b-1
+Depends: libc, libubox20240329
+Provides: libubus
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: ucentral-client
+Version: 2022-06-22-815ad097-1
+Depends: libc, ucode, ucode-mod-fs, ucode-mod-ubus, ucode-mod-uci, ucode-mod-math, ucode-mod-resolv, ucode-mod-uloop, libubox20240329, libwebsockets-openssl, libblobmsg-json20240329, libubus20230605
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libmnl0
+ABIVersion: 0
+Version: 1.0.5-1
+Depends: libc
+Provides: libmnl
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libblkid1
+ABIVersion: 1
+Version: 2.39-2
+Depends: libc, libuuid1
+Provides: libblkid
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: jansson4
+ABIVersion: 4
+Version: 2.14-3
+Depends: libc
+Provides: jansson
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: certificates
+Version: 1
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: grub2-bios-setup
+Version: 2.06-5
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: wpad-openssl
+Version: 2023-09-08-e5ccbfc6-4
+Depends: hostapd-common (= 2023-09-08-e5ccbfc6-4), libc, libnl-tiny1, hostapd-common, ucode, libubus20230605, libucode20230711, ucode-mod-fs, ucode-mod-nl80211, ucode-mod-rtnl, ucode-mod-ubus, ucode-mod-uloop, libblobmsg-json20240329, libopenssl3, libopenssl-legacy
+Provides: hostapd, wpa-supplicant
+Conflicts: hostapd, hostapd-basic, hostapd-basic-openssl, hostapd-basic-wolfssl, hostapd-basic-mbedtls, hostapd-mini, hostapd-openssl, hostapd-wolfssl, hostapd-mbedtls, wpad, wpad-mesh-openssl, wpad-mesh-wolfssl, wpad-mesh-mbedtls, wpad-basic, wpad-basic-openssl, wpad-basic-wolfssl, wpad-basic-mbedtls, wpad-mini, wpad, wpad-mesh-openssl, wpad-mesh-wolfssl, wpad-mesh-mbedtls, wpad-basic, wpad-basic-openssl, wpad-basic-wolfssl, wpad-basic-mbedtls, wpad-mini
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/config/radius bef62a785544c390592e7626153135a5b7af0ce863e63c57c098cef75991d201
+ /etc/radius/clients fbb33c7cae037be801aa89912ec835397c6f7f8c2ac1c6526857d17da865e2ab
+ /etc/radius/users 0a9b818ca14c9a87f23a1455530a6941eb63878724386d820b6ecacd0eeeb935
+Installed-Time: 1761103961
+
+Package: tcpdump
+Version: 4.99.4-1
+Depends: libc, libpcap1
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: cJSON
+Version: 1.7.15-3
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: odhcp6c
+Version: 2023-05-12-bcd28363-20
+Depends: libc, libubox20240329
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/odhcp6c.user 6d2b77cbb3ff311ea6e7237fe150bf272bf0b3a6c0b4e9e00c6423fd6b637557
+Installed-Time: 1761103961
+
+Package: fstools
+Version: 2023-02-28-bfe882d5-1
+Depends: libc, ubox
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-udptunnel4
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: uclient-fetch
+Version: 2024-04-05-6c16331e-1
+Depends: libc, libuclient20201210
+Provides: wget
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Alternatives: 200:/usr/bin/wget:/bin/uclient-fetch
+
+Package: kmod-udptunnel6
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-crypto-ghash
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-gf128, kmod-crypto-hash
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: ethtool
+Version: 6.3-1
+Depends: libc
+Conflicts: ethtool-full
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: unetd
+Version: 2022-06-30-425e75e3
+Depends: libc, libubox20240329, libubus20230605, libblobmsg-json20240329, libnl-tiny1, libunet, libbpf1, kmod-wireguard, wireguard-tools
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: uci
+Version: 2023-08-10-5781664d-1
+Depends: libc, libuci20130104
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: lua
+Version: 5.1.5-10
+Depends: libc, liblua5.1.5
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ucode-mod-bpf
+Version: 1
+Depends: libc, libucode20230711, libbpf1
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libwebsockets-openssl
+Version: 4.1.4-1
+Depends: libc, zlib, libcap, libopenssl3
+Provides: libwebsockets
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: grub2
+Version: 2.06-5
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ucode-mod-fs
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: udnssnoop
+Version: 2021-04-12-67e1e5f0-1
+Depends: libc, libubox20240329, libubus20230605
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: dropbear
+Version: 2022.82-5
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/config/dropbear 0198dbc97b5a9aac76a5c6233684571ccdcc91fcb735e91c36d2b06a98158589
+ /etc/dropbear/dropbear_ed25519_host_key e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
+ /etc/dropbear/dropbear_rsa_host_key e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
+Installed-Time: 1761103961
+Alternatives: 100:/usr/bin/scp:/usr/sbin/dropbear, 100:/usr/bin/ssh:/usr/sbin/dropbear
+
+Package: kmod-crypto-kpp
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: curl
+Version: 8.7.1-r1
+Depends: libc, libcurl4
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-hwmon-core
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-nls-utf8
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nls-base
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: libnftnl11
+ABIVersion: 11
+Version: 1.2.6-1
+Depends: libc, libmnl0
+Provides: libnftnl
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: uspot
+Version: 1
+Depends: libc, spotfilter, uhttpd-mod-ucode, libradcli, iptables-mod-conntrack-extra, conntrack, ucode-mod-math, ucode-mod-nl80211, ucode-mod-rtnl, ucode-mod-uloop, ratelimit
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libgmp10
+ABIVersion: 10
+Version: 6.2.1-1
+Depends: libc
+Provides: libgmp
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ucentral-tools
+Version: 2025-09-29-17bd7d55-1
+Depends: libc, libubox20240329, libcurl4, libradcli, libopenssl3
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-nls-cp437
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nls-base
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: rpcd-mod-file
+Version: 2023-07-01-c07ab2f9-1
+Depends: libc, libubus20230605, libubox20240329, rpcd
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: mtd
+Version: 26
+Depends: libc, libubox20240329
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: odhcpd-ipv6only
+Version: 2023-06-24-52112643-1
+Depends: libc, libubox20240329, libuci20130104, libubus20230605, libnl-tiny1
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: procd-seccomp
+Version: 2023-06-25-2db83655-2
+Depends: libc, libubox20240329, libblobmsg-json20240329
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libnetfilter-cthelper0
+ABIVersion: 0
+Version: 1.0.0-2
+Depends: libc, libmnl0
+Provides: libnetfilter-cthelper
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-sched
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-sched-core, kmod-lib-crc32c, kmod-lib-textsearch
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ucode-mod-nl80211
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode, libnl-tiny1, libubox20240329, kmod-mac80211
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: luci-mod-ucentral
+Version: git-23.271.46327-1841c74
+Depends: libc, luci-base
+Status: install user installed
+Architecture: all
+Installed-Time: 1761103961
+
+Package: libjson-script20240329
+ABIVersion: 20240329
+Version: 2024-03-29-eb9bcb64-1
+Depends: libc, libubox20240329
+Provides: libjson-script
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libiwinfo-data
+Version: 2023-07-01-ca79f641-1
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: atfpolicy
+Version: 1
+Depends: libc, libubox20240329, libubus20230605, libnl-tiny1
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ucode
+Version: 2024-04-15-cfe137be-1
+Depends: libc, libucode20230711
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: rpcd-mod-luci
+Version: 20240305-1
+Depends: libc, rpcd, libubox20240329, libubus20230605, libnl-tiny1
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: rrmd
+Version: 1
+Depends: libc, ucrun
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-crypto-ccm
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-ctr, kmod-crypto-aead
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-nf-log
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: urandom-seed
+Version: 3
+Depends: libc, getrandom
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ufp
+Version: 1
+Depends: libc, ucode, ucode-mod-fs, ucode-mod-struct, libubox20240329
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libcomerr0
+ABIVersion: 0
+Version: 1.47.0-2
+Depends: libc, libuuid1
+Provides: libcomerr
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ppp
+Version: 2.4.9.git-2021-01-04-4
+Depends: libc, kmod-ppp
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/ppp/chap-secrets 6981fa176a79f8c12be5826c421b16253a616747018ba7e76752a9d36d1d51d4
+ /etc/ppp/filter 579583b318e0cff706ffc134620b42d3fbce8fc31aeb0ad7eea1cc859868e902
+ /etc/ppp/options 01f7358a5528be037dde329a2ecfb7a63382aababf21d4f5bc085f5acef95133
+Installed-Time: 1761103961
+
+Package: luci-base
+Version: git-25.222.75657-7ce34fe
+Depends: libc, rpcd, rpcd-mod-file, rpcd-mod-luci, rpcd-mod-ucode, cgi-io, ucode, ucode-mod-fs, ucode-mod-uci, ucode-mod-ubus, ucode-mod-math, ucode-mod-html, liblucihttp-ucode
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/config/luci 60078f7c02ed91d23092c9b75cb9ea5c8ee39f7727def813c8201f8e48a296f4
+ /etc/config/ucitrack f51366117a6456038cfa0d753ff7fe8a9fb5636f561b7bef8718939c6f9a3566
+ /etc/luci-uploads/.placeholder e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
+Installed-Time: 1761103961
+
+Package: libnettle8
+ABIVersion: 8
+Version: 3.9.1-1
+Depends: libc, libgmp10
+Provides: libnettle
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: rtty-openssl
+Version: 7.1.4-1
+Depends: libc, libev, libopenssl3
+Provides: rtty
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/config/rtty 6a7e68cb84a0419740b650775e75e4afe621298687d7c2a6d2d0a8d8fbacd518
+Installed-Time: 1761103961
+
+Package: logd
+Version: 2022-08-13-4c7b720b-2
+Depends: libc, libubox20240329, libubus20230605, libblobmsg-json20240329
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-nf-log6
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nf-log
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ip-bridge
+Version: 6.3.0-1
+Depends: libc, libnl-tiny1
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ieee8021x
+Version: 1
+Depends: libc, libubox20240329, libubus20230605, libuci20130104
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: librt
+Version: 1.2.4-4
+Depends: libpthread
+Status: install hold installed
+Essential: yes
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-wireguard
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-lib-chacha20poly1305, kmod-crypto-lib-curve25519, kmod-udptunnel4, kmod-udptunnel6
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-mac80211
+Version: 5.15.132+6.1.24-3
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-cfg80211, kmod-crypto-cmac, kmod-crypto-ccm, kmod-crypto-gcm
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-tg3
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-libphy, kmod-ptp
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: wireguard-tools
+Version: 1.0.20210914-2
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: bind-libs
+Version: 9.18.37-2
+Depends: libc, libopenssl3, zlib, libpthread, libatomic1, libuv1, libnghttp2-14
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ucentral-schema
+Version: 2024-04-26-83218cf4-1
+Depends: libc, ucode-mod-nl80211, ucode-mod-rtnl, ucode-mod-log
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: switch-fabric
+Version: 1
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: openwrt-keyring
+Version: 2022-03-25-62471e69-2
+Depends: libc
+Provides: lede-keyring
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-nf-conntrack-netlink
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nfnetlink, kmod-nf-conntrack
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-libphy
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libext2fs2
+ABIVersion: 2
+Version: 1.47.0-2
+Depends: libc, libuuid1, libblkid1, libss2, libcomerr0
+Provides: libext2fs
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ucentral-event
+Version: 1
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: jshn
+Version: 2024-03-29-eb9bcb64-1
+Depends: libc, libjson-c5, libubox20240329, libblobmsg-json20240329
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: nftables-json
+Version: 1.0.8-1
+Depends: libc, kmod-nft-core, libnftnl11, jansson4
+Provides: nftables
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: luci-theme-ucentral
+Version: git-23.271.46227-2c6cc0d
+Depends: libc, luci-lua-runtime
+Status: install user installed
+Architecture: all
+Installed-Time: 1761103961
+
+Package: kmod-ipt-core
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nf-reject, kmod-nf-ipt, kmod-nf-log
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: e2fsprogs
+Version: 1.47.0-2
+Depends: libc, libuuid1, libext2fs2
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/e2fsck.conf dece11e2b15f487d7d2bf9f96abe2eaaf9cd33f02d7b9725b9116023d7786cac
+Installed-Time: 1761103961
+
+Package: kmod-e1000
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-usb-acm
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-usb-core
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: udhcpsnoop
+Version: 1
+Depends: libc, libubox20240329, libubus20230605, kmod-ifb, tc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-ppp
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-lib-crc-ccitt, kmod-slhc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-nft-offload
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nf-flow, kmod-nft-nat
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-pps
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: libopenssl-conf
+Version: 3.0.11-1
+Depends: libc, libopenssl3
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/ssl/openssl.cnf 39543707097e57d618dd8ad2a99a3f382422b542fa060b071cb0bd0f655d8974
+Installed-Time: 1761103961
+
+Package: libncurses6
+ABIVersion: 6
+Version: 6.4-2
+Depends: libc, terminfo
+Provides: libncursesw, libncurses, libncursesw6
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-crypto-null
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-hash
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: tc-mod-iptables
+Version: 6.3.0-1
+Depends: libc, libxtables12, libbpf1
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: libpcap1
+ABIVersion: 1
+Version: 1.10.4-1
+Depends: libc
+Provides: libpcap
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libss2
+ABIVersion: 2
+Version: 1.47.0-2
+Depends: libc, libcomerr0
+Provides: libss
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: igmpproxy
+Version: 0.4-1
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/config/igmpproxy 0378809b92f1d537d51ee71a6835b49947cd7350884023eb88692e0a56b313a6
+Installed-Time: 1761103961
+
+Package: libjson-c5
+ABIVersion: 5
+Version: 0.16-3
+Depends: libc
+Provides: libjson-c
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: uhttpd
+Version: 2023-06-25-34a8a74d-1
+Depends: libc, libubox20240329, libblobmsg-json20240329, libjson-script20240329, libjson-c5
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/config/uhttpd bcf5f1c5e714cdc46e7855da53ba4c427c37735267ea17eebf958f24efd7d247
+Installed-Time: 1761103961
+
+Package: kmod-nf-conntrack
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-iptunnel6
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libcurl4
+ABIVersion: 4
+Version: 8.7.1-r1
+Depends: libc, libopenssl3, libnghttp2-14, ca-bundle
+Provides: libcurl
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: iptables-mod-conntrack-extra
+Version: 1.8.8-1
+Depends: libc, libxtables12, kmod-ipt-conntrack-extra
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: usign
+Version: 2020-05-23-f1f65026-1
+Depends: libc, libubox20240329
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: liblua5.1.5
+ABIVersion: 5.1.5
+Version: 5.1.5-10
+Depends: libc
+Provides: liblua
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: zlib
+Version: 1.2.13-1
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: libblobmsg-json20240329
+ABIVersion: 20240329
+Version: 2024-03-29-eb9bcb64-1
+Depends: libc, libjson-c5, libubox20240329
+Provides: libblobmsg-json
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-crypto-gcm
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-ctr, kmod-crypto-ghash, kmod-crypto-null
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: conntrack
+Version: 1.4.8-1
+Depends: libc, libnetfilter-conntrack3, libnetfilter-cttimeout1, libnetfilter-cthelper0, libnetfilter-queue1
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: luci-lib-nixio
+Version: git-25.222.75657-7ce34fe
+Depends: libc, liblua5.1.5
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: libssh
+Version: 0.10.4-1
+Depends: libc, libpthread, librt, zlib, libopenssl3
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libradcli
+Version: 1.3.0-1
+Depends: libc, libnettle8
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/radcli/radiusclient.conf c0b33fa320269dc58565700a5a16f8942833c55f46dc3c1e3770aa30fafa8aa3
+Installed-Time: 1761103961
+
+Package: ucode-mod-rtnl
+Version: 2024-04-15-cfe137be-1
+Depends: libc, ucode, libnl-tiny1, libubox20240329
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: ca-bundle
+Version: 20230311-1
+Depends: libc
+Provides: ca-certs
+Status: install user installed
+Architecture: all
+Installed-Time: 1761103961
+
+Package: kmod-forcedeth
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: liblucihttp-lua
+Version: 2023-03-15-9b5b683f-1
+Depends: libc, liblucihttp0, liblua5.1.5
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: libuclient20201210
+ABIVersion: 20201210
+Version: 2024-04-05-6c16331e-1
+Depends: libc, libubox20240329
+Provides: libuclient
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-nls-iso8859-1
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nls-base
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-crypto-cmac
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-hash
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: luci-lib-jsonc
+Version: git-25.222.75657-7ce34fe
+Depends: libc, liblua5.1.5, libjson-c5
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-amd-xgbe
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-lib-crc32c, kmod-ptp, kmod-libphy, kmod-mdio-devres
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: bind-dig
+Version: 9.18.37-2
+Depends: libc, bind-libs
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ucode-mod-html
+Version: 1
+Depends: libc, libucode20230711
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-ptp
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-pps
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-crypto-rng
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-hash, kmod-crypto-hmac, kmod-crypto-sha512
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-nf-conntrack6
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nf-conntrack
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libgcc1
+ABIVersion: 1
+Version: 12.3.0-4
+Provides: libgcc
+Status: install hold installed
+Essential: yes
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: usteer
+Version: 2021-04-19-f42bf296-1
+Depends: libc, libubox20240329, libubus20230605, libblobmsg-json20240329, libnl-tiny1, libpcap1
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/config/usteer b2aded1aeaa31040845c4ad2147f3673b3891309c5c70cf19917cd3f36d4d44c
+Installed-Time: 1761103961
+
+Package: spotfilter
+Version: 1
+Depends: libc, libbpf1, libubox20240329, libubus20230605, libnl-tiny1, kmod-sched-bpf, kmod-ifb
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-lib-lzo
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-acompress
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-crypto-lib-curve25519
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-crypto-kpp
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ubox
+Version: 2022-08-13-4c7b720b-2
+Depends: libc, libubox20240329, ubusd, ubus, libubus20230605, libuci20130104
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/modules.conf 83dab538976e37112de89ad9569f77410553bd0a8393d19ed656353218ccf6ae
+Installed-Time: 1761103961
+Auto-Installed: yes
+Alternatives: 100:/sbin/rmmod:/sbin/kmodloader, 100:/sbin/insmod:/sbin/kmodloader, 100:/sbin/lsmod:/sbin/kmodloader, 100:/sbin/modinfo:/sbin/kmodloader, 100:/sbin/modprobe:/sbin/kmodloader
+
+Package: kmod-amazon-ena
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-sched-cake
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-sched-core
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kernel
+Version: 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-e1000e
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-ptp
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-crypto-lib-chacha20
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libevent2-7
+ABIVersion: -7
+Version: 2.1.12-1
+Depends: libc
+Provides: libevent2
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: rpcd-mod-iwinfo
+Version: 2023-07-01-c07ab2f9-1
+Depends: libiwinfo (>= 2023-01-21), libc, libubus20230605, libubox20240329, rpcd, libiwinfo20230701
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-nft-core
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nfnetlink, kmod-nf-reject, kmod-nf-reject6, kmod-nf-conntrack6, kmod-nf-nat, kmod-nf-log, kmod-nf-log6, kmod-lib-crc32c
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libucode20230711
+ABIVersion: 20230711
+Version: 2024-04-15-cfe137be-1
+Depends: libc, libjson-c5
+Provides: libucode
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: qosify
+Version: 2023-07-20-850cc271-1
+Depends: libc, libbpf1, libubox20240329, libubus20230605, libnl-tiny1, kmod-sched-cake, kmod-sched-bpf, kmod-ifb, tc
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/config/qosify 03066544d2b54e34dfcb4c37b7064b62b1cea783c8eda6288264ca645b9de8a1
+ /etc/qosify/00-defaults.conf e3322e4d960d0da2a6bc1cf99c44c9b653cfbc8700e8b0137a7cabba814cbcd6
+Installed-Time: 1761103961
+
+Package: kmod-button-hotplug
+Version: 5.15.132-3
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-input-core
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libatomic1
+ABIVersion: 1
+Version: 12.3.0-4
+Depends: libgcc1
+Provides: libatomic
+Status: install hold installed
+Essential: yes
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-ifb
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-nls-base
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: libnfnetlink0
+ABIVersion: 0
+Version: 1.0.2-1
+Depends: libc
+Provides: libnfnetlink
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: lldpd
+Version: 1.0.5-1
+Depends: libc, libcap, libevent2-7
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/config/lldpd 77c3fbba94c772f65278dbc549a4f7a83d7d5d002ca4303230daeade11168414
+Installed-Time: 1761103961
+
+Package: uhttpd-mod-ubus
+Version: 2023-06-25-34a8a74d-1
+Depends: libc, uhttpd, libubus20230605, libblobmsg-json20240329
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: udevmand
+Version: 20220112-979aca47-1
+Depends: libc, libubus20230605, libblobmsg-json20240329, ubusd, libjson-c5, libnl-tiny1, libuci20130104
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: fwtool
+Version: 2019-11-12-8f7fe925-1
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-sched-flower
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-sched-core
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: oping
+Version: 1.10.0-3
+Depends: libc, liboping
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: jsonfilter
+Version: 2018-02-04-c7e938d6-1
+Depends: libc, libubox20240329, libjson-c5
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: libnetfilter-cttimeout1
+ABIVersion: 1
+Version: 1.0.0-2
+Depends: libc, libmnl0
+Provides: libnetfilter-cttimeout
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-mdio
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: liblucihttp-ucode
+Version: 2023-03-15-9b5b683f-1
+Depends: libc, liblucihttp0, libucode20230711
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: hostapd-common
+Version: 2023-09-08-e5ccbfc6-4
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-igb
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-i2c-core, kmod-i2c-algo-bit, kmod-ptp, kmod-hwmon-core
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libubox20240329
+ABIVersion: 20240329
+Version: 2024-03-29-eb9bcb64-1
+Depends: libc
+Provides: libubox
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-igc
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-ptp
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-nf-conncount
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-nf-conntrack
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-i2c-algo-bit
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-i2c-core
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-bnx2
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), bnx2-firmware
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libuv1
+ABIVersion: 1
+Version: 1.48.0-1
+Depends: libc, libpthread, librt
+Provides: libuv
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: kmod-mdio-devres
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-libphy
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: tmate
+Version: 2.4.0-2
+Depends: libc, libevent2-7, libncurses6, libpthread, libssh, msgpack-c, terminfo
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: wireless-regdb
+Version: 2023.09.01-1
+Depends: libc
+Status: install user installed
+Architecture: all
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: urngd
+Version: 2023-07-25-7aefb47b-1
+Depends: libc, libubox20240329
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-slhc
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), kmod-lib-crc-ccitt
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: uhttpd-mod-ucode
+Version: 2023-06-25-34a8a74d-1
+Depends: libc, uhttpd, libucode20230711
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: kmod-cfg80211
+Version: 5.15.132+6.1.24-3
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874), iw, iwinfo, wireless-regdb
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: rpcd-mod-rrdns
+Version: 20170710
+Depends: libc, rpcd, libubox20240329, libubus20230605
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: ppp-mod-pppoe
+Version: 2.4.9.git-2021-01-04-4
+Depends: libc, kmod-pppoe
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libnghttp2-14
+ABIVersion: -14
+Version: 1.57.0-1
+Depends: libc
+Provides: libnghttp2
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: tip-defaults
+Version: 1
+Depends: libc
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: libunet
+Version: 2022-06-30-425e75e3
+Depends: libc, libubox20240329
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+
+Package: radsecproxy
+Version: 1.9.1-1
+Depends: libc, libopenssl3, libpthread, libnettle8
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/config/radsecproxy bfb0c3a21968e3cece531a5bf8e28ab2a116b12821e88870f4c8a7c31bf9d956
+Installed-Time: 1761103961
+
+Package: kmod-sched-core
+Version: 5.15.132-1
+Depends: kernel (= 5.15.132-1-85f577fa2faf9eb08d6d9159c6d8a874)
+Status: install user installed
+Architecture: x86_64
+Installed-Time: 1761103961
+Auto-Installed: yes
+
+Package: dnsmasq-full
+Version: 2.89-4
+Depends: libc, libubus20230605, libnettle8, libnetfilter-conntrack3, nftables-json
+Provides: dnsmasq
+Status: install user installed
+Architecture: x86_64
+Conffiles:
+ /etc/config/dhcp a3ab720d8cd674dced9d6c22963a900e700480d9e666285c52c0cf0a418ba5bb
+ /etc/dnsmasq.conf 1e6ab19c1ae5e70d609ac7b6246541d52042e4dee1892f825266507ef52d7dfd
+Installed-Time: 1761103961
+
diff --git a/ucentral-client/rootfs/usr/lib/os-release b/ucentral-client/rootfs/usr/lib/os-release
new file mode 100644
index 0000000..5439f03
--- /dev/null
+++ b/ucentral-client/rootfs/usr/lib/os-release
@@ -0,0 +1,18 @@
+NAME="OpenWrt"
+VERSION="23.05-SNAPSHOT"
+ID="openwrt"
+ID_LIKE="lede openwrt"
+PRETTY_NAME="OpenWrt 23.05-SNAPSHOT"
+VERSION_ID="23.05-snapshot"
+HOME_URL="https://openwrt.org/"
+BUG_URL="https://bugs.openwrt.org/"
+SUPPORT_URL="https://forum.openwrt.org/"
+BUILD_ID="r23485+66-e92cf0c46f"
+OPENWRT_BOARD="x86/64"
+OPENWRT_ARCH="x86_64"
+OPENWRT_TAINTS="no-all override"
+OPENWRT_DEVICE_MANUFACTURER="OpenWrt"
+OPENWRT_DEVICE_MANUFACTURER_URL="https://openwrt.org/"
+OPENWRT_DEVICE_PRODUCT="Generic"
+OPENWRT_DEVICE_REVISION="v0"
+OPENWRT_RELEASE="OpenWrt 23.05-SNAPSHOT r23485+66-e92cf0c46f"
diff --git a/ucentral-client/rootfs/usr/lib/ossl-modules/legacy.so b/ucentral-client/rootfs/usr/lib/ossl-modules/legacy.so
new file mode 100755
index 0000000..26a2b07
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/ossl-modules/legacy.so differ
diff --git a/ucentral-client/rootfs/usr/lib/pppd/2.4.9/pppoe.so b/ucentral-client/rootfs/usr/lib/pppd/2.4.9/pppoe.so
new file mode 100755
index 0000000..f093c88
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/pppd/2.4.9/pppoe.so differ
diff --git a/ucentral-client/rootfs/usr/lib/rpcd/file.so b/ucentral-client/rootfs/usr/lib/rpcd/file.so
new file mode 100755
index 0000000..69e48d2
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/rpcd/file.so differ
diff --git a/ucentral-client/rootfs/usr/lib/rpcd/iwinfo.so b/ucentral-client/rootfs/usr/lib/rpcd/iwinfo.so
new file mode 100755
index 0000000..a92c7ed
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/rpcd/iwinfo.so differ
diff --git a/ucentral-client/rootfs/usr/lib/rpcd/luci.so b/ucentral-client/rootfs/usr/lib/rpcd/luci.so
new file mode 100755
index 0000000..c799d68
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/rpcd/luci.so differ
diff --git a/ucentral-client/rootfs/usr/lib/rpcd/rrdns.so b/ucentral-client/rootfs/usr/lib/rpcd/rrdns.so
new file mode 100755
index 0000000..65a24e3
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/rpcd/rrdns.so differ
diff --git a/ucentral-client/rootfs/usr/lib/rpcd/ucode.so b/ucentral-client/rootfs/usr/lib/rpcd/ucode.so
new file mode 100755
index 0000000..3021c80
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/rpcd/ucode.so differ
diff --git a/ucentral-client/rootfs/usr/lib/tc/m_xt.so b/ucentral-client/rootfs/usr/lib/tc/m_xt.so
new file mode 100755
index 0000000..f2958c5
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/tc/m_xt.so differ
diff --git a/ucentral-client/rootfs/usr/lib/ucode/bpf.so b/ucentral-client/rootfs/usr/lib/ucode/bpf.so
new file mode 100755
index 0000000..761822d
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/ucode/bpf.so differ
diff --git a/ucentral-client/rootfs/usr/lib/ucode/fs.so b/ucentral-client/rootfs/usr/lib/ucode/fs.so
new file mode 100755
index 0000000..aa7ec25
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/ucode/fs.so differ
diff --git a/ucentral-client/rootfs/usr/lib/ucode/html.so b/ucentral-client/rootfs/usr/lib/ucode/html.so
new file mode 100755
index 0000000..ba5115e
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/ucode/html.so differ
diff --git a/ucentral-client/rootfs/usr/lib/ucode/log.so b/ucentral-client/rootfs/usr/lib/ucode/log.so
new file mode 100755
index 0000000..7baa83a
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/ucode/log.so differ
diff --git a/ucentral-client/rootfs/usr/lib/ucode/lua.so b/ucentral-client/rootfs/usr/lib/ucode/lua.so
new file mode 100755
index 0000000..2211e6e
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/ucode/lua.so differ
diff --git a/ucentral-client/rootfs/usr/lib/ucode/luci/core.so b/ucentral-client/rootfs/usr/lib/ucode/luci/core.so
new file mode 100755
index 0000000..9a31d6e
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/ucode/luci/core.so differ
diff --git a/ucentral-client/rootfs/usr/lib/ucode/lucihttp.so b/ucentral-client/rootfs/usr/lib/ucode/lucihttp.so
new file mode 100644
index 0000000..60eb45d
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/ucode/lucihttp.so differ
diff --git a/ucentral-client/rootfs/usr/lib/ucode/math.so b/ucentral-client/rootfs/usr/lib/ucode/math.so
new file mode 100755
index 0000000..f28e9ab
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/ucode/math.so differ
diff --git a/ucentral-client/rootfs/usr/lib/ucode/nl80211.so b/ucentral-client/rootfs/usr/lib/ucode/nl80211.so
new file mode 100755
index 0000000..8a2eebc
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/ucode/nl80211.so differ
diff --git a/ucentral-client/rootfs/usr/lib/ucode/resolv.so b/ucentral-client/rootfs/usr/lib/ucode/resolv.so
new file mode 100755
index 0000000..61f3261
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/ucode/resolv.so differ
diff --git a/ucentral-client/rootfs/usr/lib/ucode/rtnl.so b/ucentral-client/rootfs/usr/lib/ucode/rtnl.so
new file mode 100755
index 0000000..85bfe2d
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/ucode/rtnl.so differ
diff --git a/ucentral-client/rootfs/usr/lib/ucode/struct.so b/ucentral-client/rootfs/usr/lib/ucode/struct.so
new file mode 100755
index 0000000..9e641a0
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/ucode/struct.so differ
diff --git a/ucentral-client/rootfs/usr/lib/ucode/uam.so b/ucentral-client/rootfs/usr/lib/ucode/uam.so
new file mode 100644
index 0000000..a165d17
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/ucode/uam.so differ
diff --git a/ucentral-client/rootfs/usr/lib/ucode/ubus.so b/ucentral-client/rootfs/usr/lib/ucode/ubus.so
new file mode 100755
index 0000000..71ff6d9
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/ucode/ubus.so differ
diff --git a/ucentral-client/rootfs/usr/lib/ucode/uci.so b/ucentral-client/rootfs/usr/lib/ucode/uci.so
new file mode 100755
index 0000000..62257cc
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/ucode/uci.so differ
diff --git a/ucentral-client/rootfs/usr/lib/ucode/uht.so b/ucentral-client/rootfs/usr/lib/ucode/uht.so
new file mode 100644
index 0000000..bcc3379
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/ucode/uht.so differ
diff --git a/ucentral-client/rootfs/usr/lib/ucode/uloop.so b/ucentral-client/rootfs/usr/lib/ucode/uloop.so
new file mode 100755
index 0000000..40fbf88
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/ucode/uloop.so differ
diff --git a/ucentral-client/rootfs/usr/lib/uhttpd_ubus.so b/ucentral-client/rootfs/usr/lib/uhttpd_ubus.so
new file mode 100755
index 0000000..c3167b4
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/uhttpd_ubus.so differ
diff --git a/ucentral-client/rootfs/usr/lib/uhttpd_ucode.so b/ucentral-client/rootfs/usr/lib/uhttpd_ucode.so
new file mode 100755
index 0000000..4ff3464
Binary files /dev/null and b/ucentral-client/rootfs/usr/lib/uhttpd_ucode.so differ
diff --git a/ucentral-client/rootfs/usr/sbin/ucentral b/ucentral-client/rootfs/usr/sbin/ucentral
new file mode 100755
index 0000000..9637a18
Binary files /dev/null and b/ucentral-client/rootfs/usr/sbin/ucentral differ
diff --git a/ucentral-client/rootfs/usr/share/ucentral/capabilities.uc b/ucentral-client/rootfs/usr/share/ucentral/capabilities.uc
new file mode 100755
index 0000000..de40545
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/capabilities.uc
@@ -0,0 +1,118 @@
+#!/usr/bin/ucode
+push(REQUIRE_SEARCH_PATH,
+	"/usr/lib/ucode/*.so",
+	"/usr/share/ucentral/*.uc");
+
+let ubus = require("ubus");
+let fs = require("fs");
+
+let boardfile = fs.open("/etc/board.json", "r");
+let board = json(boardfile.read("all"));
+boardfile.close();
+let restrictfile = fs.open("/etc/ucentral/restrictions.json", "r");
+
+capa = {
+	'secure-rtty': true
+};
+if (restrictfile) {
+	capa.restrictions = json(restrictfile.read("all")) || {};
+	let pipe = fs.popen('fw_printenv developer');
+	let developer = replace(pipe.read("all"), '\n', '');
+	pipe.close();
+	if (developer == 'developer=1')
+		capa.developer = true;
+	else
+		capa.developer = false;
+}
+
+let version = json(fs.readfile('/etc/ucentral/version.json') || '{}');
+let schema = json(fs.readfile('/etc/ucentral/schema.json') || '{}');
+let version_vendor = json(fs.readfile('/etc/ucentral/version.vendor.json') || '{}');
+let schema_vendor = json(fs.readfile('/etc/ucentral/schema.vendor.json') || '{}');
+
+if (length(version_vendor))
+	version.vendor = version_vendor;
+
+if (length(schema_vendor))
+	schema.vendor = schema_vendor;
+
+ctx = ubus.connect();
+let wifi = require("wifi.phy");
+capa.compatible = replace(board.model.id, ',', '_');
+capa.model = board.model.name;
+
+capa.version = {
+	'ap': version,
+	schema
+};
+
+if (board.bridge && board.bridge.name == "switch")
+	capa.platform = "switch";
+else if (length(wifi))
+	capa.platform = "ap";
+else
+	capa.platform = "unknown";
+
+if (board.switch) {
+	capa.switch = [];
+	capa.switch_ports = {};
+	for (let name, s in board.switch) {
+		let device = { name, lan: [], wan: [] };
+		let netdev;
+		for (let p in s.ports) {
+			if (p.device) {
+				netdev = p.device;
+				device.port = p.num;
+			} else if (device[p.role]) {
+				push(device[p.role], p.num)
+			}
+		}
+		if (!length(device.lan))
+			delete device.lan;
+		if (!length(device.wan))
+			delete device.wan;
+		if (netdev)
+			capa.switch_ports[netdev] = device;
+		push(capa.switch, { name, enable: s.enable, reset: s.reset });
+	}
+}
+
+function swconfig_ports(device, role) {
+	let netdev = split(device, '.')[0];
+	let switch_dev = capa.switch_ports ? capa.switch_ports[netdev] : null;
+	if (!switch_dev || !switch_dev[role])
+		return [ device ];
+	let rv = [];
+	for (let port in switch_dev[role])
+		push(rv, netdev + ':' + port);
+	return rv;
+}
+
+capa.network = {};
+macs = {};
+for (let k, v in board.network) {
+	if (v.ports)
+		capa.network[k] = v.ports;
+	if (v.device)
+		capa.network[k] = swconfig_ports(v.device, k);
+	if (v.ifname)
+		capa.network[k] = split(replace(v.ifname, /^ */, ''), " ");
+	if (v.macaddr)
+		macs[k] = v.macaddr;
+}
+
+if (length(macs))
+	capa.macaddr = macs;
+
+if (board.wifi?.country)
+	capa.country_code = split(board.wifi.country, ' ');
+
+if (board.system?.label_macaddr)
+	capa.label_macaddr = board.system?.label_macaddr;
+
+if (length(wifi))
+	capa.wifi = wifi;
+
+capafile = fs.open("/etc/ucentral/capabilities.json", "w");
+capafile.write(capa);
+capafile.close();
diff --git a/ucentral-client/rootfs/usr/share/ucentral/cmd.uc b/ucentral-client/rootfs/usr/share/ucentral/cmd.uc
new file mode 100755
index 0000000..7f45463
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/cmd.uc
@@ -0,0 +1,90 @@
+#!/usr/bin/ucode
+push(REQUIRE_SEARCH_PATH, '/usr/share/ucentral/*.uc');
+let fs = require("fs");
+let uci = require("uci");
+let ubus = require("ubus");
+let capabfile = fs.open("/etc/ucentral/capabilities.json", "r");
+let capab = json(capabfile.read("all"));
+let pipe = fs.popen('fw_printenv developer');
+let developer = replace(pipe.read("all"), '\n', '');
+pipe.close();
+let restrict = {};
+if (developer != 'developer=1') {
+	let restrictfile = fs.open("/etc/ucentral/restrictions.json", "r");
+	restrict = restrictfile ? json(restrictfile.read("all")) : {};
+}
+let cmdfile = fs.open(ARGV[0], "r");
+let cmd = json(cmdfile.read("all"));
+let id = ARGV[1];
+let ctx = ubus.connect();
+
+if (!ctx) {
+	warn("Unable to connect to ubus: " + ubus.error() + "\n");
+	exit(1);
+}
+
+/* Convenience logger outputting to both stderr and remote central log */
+function log(fmt, ...args) {
+	let msg = sprintf(fmt, ...args);
+
+	warn(msg + "\n");
+
+	ctx.call("ucentral", "log", { msg: msg });
+}
+
+function result(code, fmt, ...args) {
+	let text = sprintf(fmt, ...args);
+
+	ctx.call("ucentral", "result", {
+		"status": {
+			"error": code,
+			"text": text
+		}, "id": +id
+	});
+	warn(text + "\n");
+}
+
+function result_json(status) {
+	ctx.call("ucentral", "result", {"id": +id, "status": status});
+	if (status.text)
+		warn(status.text + "\n");
+	if (status.resultText)
+		warn(status.resultText + "\n");
+}
+
+/* Scope of functions and ressources the command includes have access to */
+let scope = {
+	/* ressources */
+	uci,
+	cursor: uci.cursor(),
+	ctx,
+	fs,
+	restrict,
+
+	/* log helper */
+	log,
+
+	/* result helpers */
+	result,
+	result_json,
+
+	/* command argument object */
+	args: (cmd.payload || {}),
+
+	/* cmd id */
+	id: (id || 0)
+};
+
+if (match(cmd.command, /^[A-Za-z0-9_]+$/)) {
+	try {
+		include(sprintf("cmd_%s.uc", cmd.command), scope);
+	}
+	catch (e) {
+		log("Exception invoking '%s' command module: %s\n%s\n",
+			cmd.cmd, e, e.stacktrace[0].context);
+	}
+}
+else {
+	log("Invalid command module name specified");
+}
+
diff --git a/ucentral-client/rootfs/usr/share/ucentral/cmd_certupdate.uc b/ucentral-client/rootfs/usr/share/ucentral/cmd_certupdate.uc
new file mode 100644
index 0000000..8686c68
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/cmd_certupdate.uc
@@ -0,0 +1,29 @@
+let tar = b64dec(args.certificates);
+
+if (!tar || !fs.writefile('/tmp/certs.tar', tar)) {
+	result_json({
+		"error": 2,
+		"text": 'failed to extract certificates'
+	});
+	return;
+}
+
+if (system('/sbin/certupdate')) {
+	result_json({
+		"error": 2,
+		"text": 'failed to update certificates'
+	});
+	return;
+}
+
+include('reboot_cause.uc', { reason: 'certupdate' });
+
+ctx.call("ucentral", "result", {
+                "status": {
+                        "error": 0,
+                        "text": 'Success'
+                }, "id": +id
+        });
+sleep(5000);
+system("(sleep 10; jffs2reset -y -r)&");
+system("/etc/init.d/ucentral stop");
diff --git a/ucentral-client/rootfs/usr/share/ucentral/cmd_factory.uc b/ucentral-client/rootfs/usr/share/ucentral/cmd_factory.uc
new file mode 100644
index 0000000..6be987e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/cmd_factory.uc
@@ -0,0 +1,46 @@
+let reset_cmdline = [ 'jffs2reset', '-r', '-y' ];
+
+if (length(args) && args.keep_redirector) {
+	let archive_cmdline = [
+		'tar', 'czf', '/sysupgrade.tgz',
+		"/etc/config/ucentral"
+	];
+
+	let files = [
+			"/etc/ucentral/cas.pem", "/etc/ucentral/cert.pem",
+			"/etc/ucentral/gateway.json", "/etc/ucentral/dev-id",
+			"/etc/ucentral/key.pem", "/etc/ucentral/profile.json"
+	];
+	for (let f in files)
+		if (fs.stat(f))
+			push(archive_cmdline, f);
+
+	let active_config = fs.readlink("/etc/ucentral/ucentral.active");
+
+	if (active_config)
+		push(archive_cmdline, '/etc/ucentral/ucentral.active', active_config);
+	else
+		result_json({
+			"error": 2,
+			"text": sprintf("Unable to determine active configuration: %s", fs.error())
+		});
+
+	let rc = system(archive_cmdline);
+
+	if (rc != 0) {
+		result_json({
+			"error": 2,
+			"text": sprintf("Archive command %s exited with non-zero code %d", archive_cmdline, rc)
+		});
+
+		return;
+	}
+
+	push(reset_cmdline, '-k');
+}
+
+include('reboot_cause.uc', { reason: 'factory' });
+
+system("touch /ucentral.upgrade");
+system("(sleep 10; " + join(' ', reset_cmdline) + ")&");
+system("/etc/init.d/ucentral stop");
diff --git a/ucentral-client/rootfs/usr/share/ucentral/cmd_fingerprint.uc b/ucentral-client/rootfs/usr/share/ucentral/cmd_fingerprint.uc
new file mode 100644
index 0000000..7757812
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/cmd_fingerprint.uc
@@ -0,0 +1,16 @@
+let msg = {
+	raw: !!args.raw 
+};
+if (args.mac_address)
+	msg.macaddr = args.mac_address;
+
+system(`logger ${msg}\n`);
+
+let fingerprint = ctx.call("fingerprint", "fingerprint", msg) || {};
+
+result_json({
+	"error": 0,
+	"text": "Success",
+	"resultCode": 0,
+	"resultData": fingerprint,
+});
diff --git a/ucentral-client/rootfs/usr/share/ucentral/cmd_leds.uc b/ucentral-client/rootfs/usr/share/ucentral/cmd_leds.uc
new file mode 100644
index 0000000..8aba8c3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/cmd_leds.uc
@@ -0,0 +1,15 @@
+function set_led(val, path)
+{
+	let cursor = uci.cursor(path);
+	cursor.set("system", "@system[-1]", "leds_off", val);
+	cursor.commit();
+}
+
+let val = 0;
+if (args.pattern ==  "off")
+	val = 1;
+
+set_led(val);
+set_led(val, "/etc/config-shadow/");
+
+system("/etc/init.d/led restart");
diff --git a/ucentral-client/rootfs/usr/share/ucentral/cmd_perform.uc b/ucentral-client/rootfs/usr/share/ucentral/cmd_perform.uc
new file mode 100644
index 0000000..026c2ab
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/cmd_perform.uc
@@ -0,0 +1,15 @@
+let rc = system(args.command);
+
+if (rc != 0) {
+	result_json({
+		"error": 2,
+		"text": "Command returned an error",
+		"resultCode": rc
+	});
+
+	return;
+}
+result_json({
+	"error": 0,
+	"text": "Command was executed"
+});
diff --git a/ucentral-client/rootfs/usr/share/ucentral/cmd_reboot.uc b/ucentral-client/rootfs/usr/share/ucentral/cmd_reboot.uc
new file mode 100644
index 0000000..fb09fb1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/cmd_reboot.uc
@@ -0,0 +1,11 @@
+log("Initiating reboot");
+
+include('reboot_cause.uc', { reason: 'reboot' });
+
+system("(sleep 10; reboot)&");
+system("/etc/init.d/ucentral stop");
+
+let err = ctx.error();
+
+if (err != null)
+	result(2, "Reboot call failed with status %s", err);
diff --git a/ucentral-client/rootfs/usr/share/ucentral/cmd_rrm.uc b/ucentral-client/rootfs/usr/share/ucentral/cmd_rrm.uc
new file mode 100644
index 0000000..be6e587
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/cmd_rrm.uc
@@ -0,0 +1,66 @@
+function log(msg) {
+	system('logger RRM: ' + msg );
+}
+
+let handlers = {
+        // ubus call usteer2 command '{"action": "kick", "addr": "1c:57:dc:37:3c:b1", "reason": 5, "ban_time": 30 }'
+	kick: function(params) {
+		if (!params.addr)
+			return false;
+		params.reason ??= 5;
+		params.ban_time ??= 30;
+		return true;
+	},
+
+	// ubus call usteer2 command '{"action": "beacon_request", "addr": "4e:7f:3e:2c:8a:68", "channel": 36 }'
+        // ubus call usteer2 command '{"action": "beacon_request", "addr": "4e:7f:3e:2c:8a:68", "ssid": "Cockney" }'
+	beacon_request: function(params) {
+		if (!params.addr)
+			return false;
+		return true;
+	},
+
+	// ubus call usteer2 command '{"action": "channel_switch", "bssid": "34:eF:b6:aF:48:b1", "params": "channel": 4, "band": "2G"}'
+	channel_switch: function(params) {
+		if (!params.bssid || !params.channel)
+			return false;
+		return true;
+	},
+
+	// ubus call usteer2 command '{"action": "tx_power", "bssid": "34:eF:b6:aF:48:b1", "level": 20 }'
+	tx_power: function(params) {
+		if (!params.bssid || !params.level)
+			return false;
+		return true;
+	},
+
+	// ubus call usteer2 command '{"action": "bss_transition", "addr": "4e:7f:3e:2c:8a:68", "params": "neighbors": ["34:ef:b6:af:48:b1"] }'
+	bss_transition: function(params) {
+		if (!params.addr || !params.neighbors)
+			return false;
+		for (let neighbor in params.neighbors)
+			if (type(neighbor) != 'string')
+				return false;
+		return true;
+	},
+
+	// ubus call usteer2 command '{"action": "neighbors", "neighbors": [ [ "00:11:22:33:44:55", "OpenWifi", "34efb6af48b1af4900005301070603010300" ], [ "aa:bb:cc:dd:ee:ff", "OpenWifi2", "34efb6af48b1af4900005301070603010300" ] ] }'
+	neighbors: function(params) {
+		if (!params.neighbors)
+			return false;
+		return true;
+	}
+};
+
+if (type(args.actions) != 'array')
+	return;
+
+for (let action in args.actions) {
+	if (type(action) != 'object')
+		continue;
+	if (!handlers[action.action] || !handlers[action.action](action))
+		continue;
+	action.event = true;
+	let result = ctx.call('rrm', 'command', action);
+	log(result);
+}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/cmd_rtty.uc b/ucentral-client/rootfs/usr/share/ucentral/cmd_rtty.uc
new file mode 100644
index 0000000..8b511c3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/cmd_rtty.uc
@@ -0,0 +1,35 @@
+if (!args.id || !args.server || !args.port || !args.token || !args.timeout) {
+	result_json({
+		"error": 2,
+		"text": "Invalid parameters.",
+		"resultCode": -1
+	});
+
+	return;
+}
+
+if (restrict.rtty) {
+	result_json({
+		"error": 2,
+		"text": "RTTY is restricted.",
+		"resultCode": -1
+	});
+
+	return;
+}
+
+
+cursor.load("rtty");
+cursor.set("rtty", "@rtty[-1]", "enable", 1);
+cursor.set("rtty", "@rtty[-1]", "id", args.id);
+cursor.set("rtty", "@rtty[-1]", "host", args.server);
+cursor.set("rtty", "@rtty[-1]", "port", args.port);
+cursor.set("rtty", "@rtty[-1]", "token", args.token);
+cursor.set("rtty", "@rtty[-1]", "timeout", args.timeout);
+cursor.commit();
+
+system("/etc/init.d/rtty restart");
+result_json({
+	"error": 0,
+	"text": "Command was executed"
+});
diff --git a/ucentral-client/rootfs/usr/share/ucentral/cmd_script.uc b/ucentral-client/rootfs/usr/share/ucentral/cmd_script.uc
new file mode 100644
index 0000000..21e6732
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/cmd_script.uc
@@ -0,0 +1,93 @@
+let uloop = require('uloop');
+let fs = require('fs');
+let result;
+let abort;
+let signature = require('signature');
+if (args.type == 'diagnostic') {
+	system('cp /usr/share/ucentral/diagnostic.uc /tmp/script.cmd');
+} else {
+	let decoded = b64dec(args.script);
+	if (!decoded) {
+		result_json({
+			"error": 2,
+			"result": "invalid base64"
+		});
+		return;
+	}
+
+	let script = fs.open("/tmp/script.cmd", "w");
+	script.write(decoded);
+	script.close();
+	fs.chmod("/tmp/script.cmd", 700);
+}
+
+if (args.type != 'diagnostic' &&
+    restrict.commands &&
+    !signature.verify("/tmp/script.cmd", args.signature)) {
+	result_json({
+		"error": 3,
+		"result": "invalid signature"
+	});
+	return;
+}
+
+let out = '';
+if (args.uri) {
+	result_json({ error: 0, result: 'pending'});
+	out = `/tmp/bundle.${id}.tar.gz`;
+}
+
+uloop.init();
+
+let t = uloop.task(
+        function(pipe) {
+		switch (args.type) {
+		case 'diagnostic':
+		case 'bundle':
+			let bundle = require('bundle');
+			bundle.init(id);
+			try {
+				include('/tmp/script.cmd', { bundle });
+			} catch(e) {
+				//e.stacktrace[0].context
+			};
+			bundle.complete();
+			return;
+		default:
+			let stdout = fs.popen("/tmp/script.cmd " + out);
+			let result = stdout.read("all");
+			let error = stdout.close();
+			return { result, error };
+		}
+        },
+
+        function(res) {
+                result = res;        
+                uloop.end();
+        }
+);
+if (args.timeout)
+        uloop.timer(args.timeout * 1000, function() {
+                t.kill();
+                uloop.end();
+                abort = true;
+        });
+
+
+uloop.run();
+
+if (abort)
+        result = {
+                "error": 255,
+                "result": "timed out"
+        };
+
+if (args.uri && !fs.stat(out)) {
+	result_json({ error: 1,
+		      result: 'script did not generate any output'});
+} else if (args.uri) {
+	ctx.call("ucentral", "upload", {file: out, uri: args.uri, uuid: args.serial});
+	result_json({ error: 0,
+		      result: 'done'});
+} else
+	result_json(result || { result: 255, error: 'unknown'});
diff --git a/ucentral-client/rootfs/usr/share/ucentral/cmd_stats.uc b/ucentral-client/rootfs/usr/share/ucentral/cmd_stats.uc
new file mode 100644
index 0000000..35e4a7e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/cmd_stats.uc
@@ -0,0 +1 @@
+include("./state.uc", { stats: args.stats });
diff --git a/ucentral-client/rootfs/usr/share/ucentral/cmd_syslog.uc b/ucentral-client/rootfs/usr/share/ucentral/cmd_syslog.uc
new file mode 100644
index 0000000..5354aaf
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/cmd_syslog.uc
@@ -0,0 +1,20 @@
+let log_data = ctx.call("log", "read", {
+	lines: +args.lines || 100,
+	oneshot: true,
+	stream: false
+});
+
+if (!log_data || !log_data.log) {
+	result(2, "Unable to obtain system log contents: %s", ubus.error());
+
+	return;
+}
+
+warn(sprintf("Read %d lines\n", length(log_data.log)));
+
+result_json({
+	"error": 0,
+	"text": "Success",
+	"resultCode": 0,
+	"resultData": log_data
+});
diff --git a/ucentral-client/rootfs/usr/share/ucentral/cmd_trace.uc b/ucentral-client/rootfs/usr/share/ucentral/cmd_trace.uc
new file mode 100644
index 0000000..f48b166
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/cmd_trace.uc
@@ -0,0 +1,65 @@
+let serial = cursor.get("ucentral", "config", "serial");
+
+if (!serial)
+	return;
+
+if (args.network) {
+	let net = ctx.call("network.interface", "status", { interface: args.network });
+
+	if (net && net.l3_device)
+		args.interface = net.l3_device;
+}
+
+if (!args.interface || !length(args.interface))
+	args.interface = args.network;
+
+if (!match(args.interface, /^[^\/]+$/) || (args.interface != "any" && !fs.stat("/sys/class/net/" + args.interface))) {
+	result_json({
+		"error": 1,
+		"text": "Failed",
+		"resultCode": 1,
+		"resultText": "Invalid network device specified"
+	});
+
+	return;
+}
+
+let duration = +args.duration || 0;
+let packets = +args.packets || 0;
+let filename = sprintf("/tmp/pcap-%s-%d", serial, time());
+let sys = ctx.call('system', 'info');
+
+let command =	[
+	'tcpdump_timeout',
+	duration,
+	'-C', sys.memory.free / 4,
+	'-W', '1',
+	'-w', filename,
+	'-i', args.interface
+];
+
+if (!duration) {
+	push(command, '-c');
+	push(command, packets);
+}
+let rc = system(command);
+
+if (rc != 0) {
+	result_json({
+		"error": 1,
+		"text": "Failed",
+		"resultCode": rc,
+		"resultText": "tcpdump command exited with non-zero code"
+	});
+
+	return;
+}
+
+ctx.call("ucentral", "upload", {file: filename, uri: args.uri, uuid: args.serial});
+
+result_json({
+	"error": 0,
+	"text": "Success",
+	"resultCode": 0,
+	"resultText": "Uploading file"
+});
diff --git a/ucentral-client/rootfs/usr/share/ucentral/cmd_transfer.uc b/ucentral-client/rootfs/usr/share/ucentral/cmd_transfer.uc
new file mode 100644
index 0000000..1349768
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/cmd_transfer.uc
@@ -0,0 +1,20 @@
+log("Initiating gateway transfer");
+
+if (!args.server || !args.port) {
+	result(2, "invalid arguments");
+	return;
+}
+
+fs.writefile('/etc/ucentral/gateway.json', { server: args.server, port: args.port });
+system('cp /etc/ucentral/ucentral.cfg.0000000001 /etc/ucentral/ucentral.cfg.0000000002');
+system('rm /etc/ucentral/ucentral.cfg.1* /etc/ucentral/ucentral.active');
+
+include('reboot_cause.uc', { reason: 'transfer' });
+
+system("(sleep 10; reboot)&");
+system("/etc/init.d/ucentral stop");
+
+let err = ctx.error();
+
+if (err != null)
+	result(2, "Reboot call failed with status %s", err);
diff --git a/ucentral-client/rootfs/usr/share/ucentral/cmd_upgrade.uc b/ucentral-client/rootfs/usr/share/ucentral/cmd_upgrade.uc
new file mode 100644
index 0000000..42d893e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/cmd_upgrade.uc
@@ -0,0 +1,97 @@
+let image_path = "/tmp/ucentral.upgrade";
+
+if (!args.uri) {
+	result(2, "No firmware URL provided");
+	return;
+}
+
+let download_cmdline = [ 'wget', '-O', image_path, args.uri ];
+let rc = system(download_cmdline);
+
+if (rc != 0) {
+	result(2, "Download command %s exited with non-zero code %d", download_cmdline, rc);
+
+	return;
+}
+
+let validation_result = ctx.call("system", "validate_firmware_image", { path: image_path });
+
+if (!validation_result) {
+	result(2, "Validation call failed with status %s", ubus.error());
+
+	return;
+}
+else if (!validation_result.valid) {
+	result_json({
+		"error": 2,
+		"text": "Firmware image validation failed",
+		"data": sprintf("Archive command %s exited with non-zero code %d", archive_cmdline, rc)
+	});
+
+	warn(sprintf("ucentral-upgrade: firmware file validation failed: %J\n", validation_result));
+
+	return;
+}
+
+if (restrict.sysupgrade) {
+	let signature = require('signature');
+	if (!signature.verify(image_path, args.signature)) {
+		result_json({
+			"error": 2,
+			"text": "Invalid signature",
+			"resultCode": -1
+		});
+
+		return;
+	}
+}
+
+let archive_cmdline = [
+	'tar', 'czf', '/upgrade.tgz',
+	'/etc/config/ucentral'
+];
+
+if (args.keep_redirector) {
+	let files = [
+		"/etc/ucentral/cas.pem", "/etc/ucentral/cert.pem",
+		"/etc/ucentral/redirector.json", "/etc/ucentral/dev-id",
+		"/etc/ucentral/key.pem", "/etc/ucentral/gateway.json",
+		"/etc/ucentral/profile.json", "/etc/ucentral/restrictions.json",
+	];
+	for (let f in files)
+		if (fs.stat(f))
+			push(archive_cmdline, f);
+}
+
+if (args.keep_config) {
+	let active_config = fs.readlink("/etc/ucentral/ucentral.active");
+
+	if (active_config)
+		push(archive_cmdline, '/etc/ucentral/ucentral.active', active_config);
+	else
+		result(2, "Unable to determine active configuration: %s", fs.error());
+}
+
+if (args.keep_redirector || args.keep_config) {
+	let rc = system(archive_cmdline);
+
+	if (rc != 0) {
+		result(2, "Archive command %s exited with non-zero code %d", archive_cmdline, rc);
+
+		return;
+	}
+}
+
+include('reboot_cause.uc', { reason: 'upgrade' });
+result(0, "Triggering FW upgrade");
+sleep(2000);
+
+let sysupgrade_cmdline = sprintf("sysupgrade %s %s",
+				 (args.keep_redirector || args.keep_config) ? "-f /upgrade.tgz" : "-n",
+				 image_path);
+
+warn("Upgrading firmware\n");
+
+system("touch /ucentral.upgrade");
+system("(sleep 10; /etc/init.d/network stop; " + sysupgrade_cmdline + ")&");
+system("/etc/init.d/ucentral stop");
diff --git a/ucentral-client/rootfs/usr/share/ucentral/cmd_wifiscan.uc b/ucentral-client/rootfs/usr/share/ucentral/cmd_wifiscan.uc
new file mode 100644
index 0000000..e165397
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/cmd_wifiscan.uc
@@ -0,0 +1,289 @@
+let verbose = args?.verbose == null ? true : args.verbose;
+let active = args?.active ? true : false;
+let bandwidth = args?.bandwidth || 0;
+let override_dfs = args?.override_dfs ? true : false;
+let nl = require("nl80211");
+let rtnl = require("rtnl");
+let def = nl.const;
+
+if (!ctx) {
+        ubus = require("ubus");
+        ctx = ubus.connect();
+}
+
+const SCAN_FLAG_AP = (1<<2);
+const frequency_list_2g = [ 2412, 2417, 2422, 2427, 2432, 2437, 2442,
+			  2447, 2452, 2457, 2462, 2467, 2472, 2484 ];
+const frequency_list_5g = { '3': [ 5180, 5260, 5500, 5580, 5660, 5745 ],
+			  '2': [ 5180, 5220, 5260, 5300, 5500, 5540,
+				 5580, 5620, 5660, 5745, 5785, 5825,
+				 5865, 5920, 5960 ],
+			  '1': [ 5180, 5200, 5220, 5240, 5260, 5280,
+				 5300, 5320, 5500, 5520, 5540, 5560,
+				 5580, 5600, 5620, 5640, 5660, 5680,
+				 5700, 5720, 5745, 5765, 5785, 5805,
+				 5825, 5845, 5865, 5885 ],
+};
+const frequency_offset = { '80': 30, '40': 10 };
+const frequency_width = { '80': 3, '40': 2, '20': 1 };
+const IFTYPE_STATION = 2;
+const IFTYPE_AP = 3;
+const IFTYPE_MESH = 7;
+const IFF_UP = 1;
+
+function frequency_to_channel(freq) {
+	/* see 802.11-2007 17.3.8.3.2 and Annex J */
+	if (freq == 2484)
+		return 14;
+	else if (freq < 2484)
+		return (freq - 2407) / 5;
+	else if (freq >= 4910 && freq <= 4980)
+		return (freq - 4000) / 5;
+	else if (freq < 5935) /* DMG band lower limit */
+		return (freq - 5000) / 5;
+	else if (freq == 5935)
+		return 2;
+	else if (freq >= 5955 && freq <= 7115)
+		return ((freq - 5955) / 5) + 1;
+	else if (freq >= 58320 && freq <= 64800)
+		return (freq - 56160) / 2160;
+	return 0;
+}
+
+function iface_get(wdev) {
+	let params = { dev: wdev };
+	let res = nl.request(def.NL80211_CMD_GET_INTERFACE, wdev ? null : def.NLM_F_DUMP, wdev ? params : null);
+
+	if (res === false)
+		warn("Unable to lookup interface: " + nl.error() + "\n");
+	return res || [];
+}
+
+function iface_find(wiphy, types, ifaces) {
+	if (!ifaces)
+		ifaces = iface_get();
+	for (let iface in ifaces) {
+		if (iface.wiphy != wiphy)
+			continue;
+		if (iface.iftype in types)
+			return iface;
+	}
+	return;
+}
+
+function scan_trigger(wdev, frequency, width) {
+	let params = { dev: wdev, scan_flags: SCAN_FLAG_AP };
+
+	if (frequency && type(frequency) == 'array') {
+		params.scan_frequencies = frequency;
+	}
+	else if (frequency && width) {
+		params.wiphy_freq = frequency;
+		params.center_freq1 = frequency + frequency_offset[width];
+		params.channel_width = frequency_width[width];
+	}
+
+	if (active)
+		params.scan_ssids = [ '' ];
+
+	//printf("%.J\n", params);
+	let res = nl.request(def.NL80211_CMD_TRIGGER_SCAN, 0, params);
+
+	if (res === false)
+		die("Unable to trigger scan: " + nl.error() + "\n");
+
+	else
+		res = nl.waitfor([
+			def.NL80211_CMD_NEW_SCAN_RESULTS,
+			def.NL80211_CMD_SCAN_ABORTED
+		], (frequency && width) ? 500 : 5000);
+
+	if (!res)
+		warn("Netlink error while awaiting scan results: " + nl.error() + "\n");
+
+	else if (res.cmd == def.NL80211_CMD_SCAN_ABORTED)
+		warn("Scan aborted by kernel\n");
+}
+
+function trigger_scan_width(wdev, freqs, width) {
+	for (let freq in freqs)
+		scan_trigger(wdev, freq, width);
+}
+
+function phy_get(wdev) {
+	let res = nl.request(def.NL80211_CMD_GET_WIPHY, def.NLM_F_DUMP, { split_wiphy_dump: true });
+
+	if (res === false)
+		warn("Unable to lookup phys: " + nl.error() + "\n");
+
+	return res;
+}
+
+function phy_get_frequencies(phy) {
+	let freqs = [];
+
+	for (let band in phy.wiphy_bands) {
+		for (let freq in band?.freqs || [])
+			if (!freq.disabled)
+				push(freqs, freq.freq);
+	}
+	return freqs;
+}
+
+function phy_frequency_dfs(phy, curr) {
+	let freqs = [];
+
+	for (let band in phy.wiphy_bands) {
+		for (let freq in band?.freqs || [])
+			if (freq.freq == curr && freq.dfs_state >= 0)
+				return true;
+	}
+	return false;
+}
+
+let phys = phy_get();
+let ifaces = iface_get();
+
+function intersect(list, filter) {
+	let res = [];
+
+	for (let item in list)
+		if (index(filter, item) >= 0)
+			push(res, item);
+	return res;
+}
+
+function wifi_scan() {
+	let scan = [];
+
+	for (let phy in phys) {
+		let iface = iface_find(phy.wiphy, [ IFTYPE_STATION, IFTYPE_AP ], ifaces);
+		let scan_iface = false;
+		if (!iface) {
+			warn('no valid interface found for phy' + phy.wiphy + '\n');
+			nl.request(def.NL80211_CMD_NEW_INTERFACE, 0, { wiphy: phy.wiphy, ifname: 'scan', iftype: IFTYPE_STATION });
+			nl.waitfor([ def.NL80211_CMD_NEW_INTERFACE ], 1000);
+			scan_iface = true;
+			iface = {
+				dev: 'scan',
+				channel_width: 1,
+			};
+			rtnl.request(rtnl.const.RTM_NEWLINK, 0, { dev: 'scan', flags: IFF_UP, change: 1});
+			sleep(1000);
+		}
+
+		printf("scanning on phy%d\n", phy.wiphy);
+
+		let freqs = phy_get_frequencies(phy);
+		if (length(intersect(freqs, frequency_list_2g)))
+			scan_trigger(iface.dev, frequency_list_2g);
+
+		let ch_width = iface.channel_width;
+		if (frequency_width[bandwith])
+			ch_width = frequency_width[bandwith];
+		let freqs_5g = intersect(freqs, frequency_list_5g[ch_width]);
+		if (length(freqs_5g)) {
+			if (override_dfs && !scan_iface && phy_frequency_dfs(phy, iface.wiphy_freq)) {
+				ctx.call(sprintf('hostapd.%s', iface.dev), 'switch_chan', { freq: 5180, bcn_count: 10 });
+				sleep(2000)
+			}
+			trigger_scan_width(iface.dev, freqs_5g, ch_width);
+		}
+		let res = nl.request(def.NL80211_CMD_GET_SCAN, def.NLM_F_DUMP, { dev: iface.dev });
+		for (let bss in res) {
+			bss = bss.bss;
+			let res = {
+				bssid: bss.bssid,
+				frequency: +bss.frequency,
+				channel: frequency_to_channel(+bss.frequency),
+				signal: +bss.signal_mbm / 100,
+			};
+			if (verbose) {
+				res.tsf = +bss.tsf;
+				res.last_seen = +bss.seen_ms_ago;
+				res.capability = +bss.capability;
+				res.ies = [];
+			}
+
+
+			for (let ie in bss.beacon_ies) {
+				switch (ie.type) {
+				case 0:
+					res.ssid = ie.data;
+					break;
+				case 11:      
+					res.sta_count = ord(ie.data, 1) * 256 + ord(ie.data, 0);
+					res.ch_util = ord(ie.data, 2);                          
+					break;   
+				case 114:
+					if (verbose)
+						res.meshid = ie.data;
+					break;
+				case 0x3d:
+					if (verbose)
+						res.ht_oper = b64enc(ie.data);
+					break;
+				case 0xc0:
+					if (verbose)
+						res.vht_oper = b64enc(ie.data);
+					break;
+				case 0xdd:
+					let oui = hexenc(substr(ie.data, 0, 3));
+					let type = ord(ie.data, 3);
+					let data = substr(ie.data, 4);
+					switch (oui) {
+					case '48d017':
+						res.tip_oui = true;
+						switch(type) {
+						case 1:
+							if (data)
+								res.tip_serial = data;
+							break;
+						case 2:
+							if (data)
+								res.tip_name = data;
+							break;
+						case 3:
+							if (data)
+								res.tip_network_id = data;
+							break;
+						}
+						break;
+					}
+					break;
+				default:
+					if (verbose)
+						push(res.ies, { type: ie.type, data: b64enc(ie.data) });
+					break;
+				}
+			}
+
+			if (args.periodic && !args.information_elements)
+				delete res.ies;
+			push(scan, res);
+		}
+		if (scan_iface) {
+			warn('removing temporary interface\n');
+			nl.request(def.NL80211_CMD_DEL_INTERFACE, 0, { dev: 'scan' });
+		}
+	}
+	printf("%.J\n", scan);
+	return scan;
+}
+
+let scan = wifi_scan();
+
+if (args.periodic) {
+	ctx.call('ucentral', 'send', {
+		method: 'wifiscan',
+		params: { data: scan }
+	});
+	return;
+}
+
+result_json({
+	error: 0,
+	text: "Success",
+	resultCode: 1,
+	scan,
+});
diff --git a/ucentral-client/rootfs/usr/share/ucentral/diagnostic.uc b/ucentral-client/rootfs/usr/share/ucentral/diagnostic.uc
new file mode 100644
index 0000000..65b7419
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/diagnostic.uc
@@ -0,0 +1,16 @@
+bundle.wifi();
+
+let paths = [
+        [ 'network.wireless', 'status' ],
+        [ 'network.device', 'status' ],
+        [ 'network.interface', 'dump' ],
+        [ 'log', 'read', { stream: false } ],
+];
+for (let path in paths)
+        bundle.ubus(path[0], path[1], path[2]);
+
+for (let config in [ 'network', 'wireless', 'dhcp', 'firewall', 'system' ])
+        bundle.uci(config);
+
+for (let cmd in [ "route", "ifconfig", "logread" ])
+        bundle.shell(cmd);
diff --git a/ucentral-client/rootfs/usr/share/ucentral/firstcontact.uc b/ucentral-client/rootfs/usr/share/ucentral/firstcontact.uc
new file mode 100644
index 0000000..1216c1a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/firstcontact.uc
@@ -0,0 +1,83 @@
+let config = {};
+
+function store_config() {
+	let redir = split(config.Redirector, ":");
+	let gw = {
+		server: redir[0],
+		port: redir[1] || 15002
+	};
+	fs.writefile('/etc/ucentral/gateway.json', gw);
+}
+
+function store_config_uci(path) {
+        let cursor = uci.cursor(path);
+        let redir = split(config.Redirector, ":");
+
+        cursor.load("ucentral");
+        cursor.set("ucentral", "config", "server", redir[0]);
+        cursor.set("ucentral", "config", "port", redir[1] || 15002);
+        cursor.commit();
+}
+
+function digicert() {
+	let devid;
+	let fd = fs.open("/etc/ucentral/dev-id", "r");
+	if (!fd) {
+		warn("firstcontact: failed to find device id");
+		exit(1);
+	}
+	devid = fd.read("all");
+	fd.close();
+
+	ret = system(sprintf('/usr/sbin/digicert -i %s', devid));
+	if (ret) {
+		warn("firstcontact failed to contact redirector, check DHCP option\n");
+		let fd = fs.open("/tmp/capwap/dhcp_opt.txt", "r");
+		if (!fd) {
+			warn("No redirector found\n");
+			exit(1);
+		} else {
+			config.Redirector = fd.read("all");
+			fd.close();
+		}
+	} else {
+		let redirector = { };
+		let fd = fs.open("/etc/ucentral/redirector.json", "r");
+		if (fd) {
+			let data = fd.read("all");
+			fd.close();
+
+			try {
+				redirector = json(data);
+			}
+			catch (e) {
+				warn("firstcontact: Unable to parse JSON data in %s: %s", path, e);
+
+				exit(1);
+			}
+		}
+
+		for (let r in redirector.fields)
+			if (r.name && r.value)
+				config[r.name] = r.value;
+		if (!config.Redirector) {
+			warn("Reply is missing Redirector field\n");
+			exit(1);
+		}
+
+	}
+}
+
+if (!fs.stat('/etc/ucentral/gateway.json')) {
+	digicert();
+	store_config();
+	store_config_uci();
+	store_config_uci("/etc/config-shadow/");
+	warn("firstcontact: managed to look up redirector\n");
+}
+
+system("/etc/init.d/ucentral enable");
+system("/etc/init.d/firstcontact disable");
+system("reload_config");
+system("/etc/init.d/ucentral start");
+system("/etc/init.d/firstcontact stop");
diff --git a/ucentral-client/rootfs/usr/share/ucentral/health.uc b/ucentral-client/rootfs/usr/share/ucentral/health.uc
new file mode 100755
index 0000000..b3faf14
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/health.uc
@@ -0,0 +1,152 @@
+#!/usr/bin/ucode
+push(REQUIRE_SEARCH_PATH, '/usr/share/ucentral/*.uc');
+let fs = require('fs');
+let uci = require('uci');
+let ubus = require('ubus');
+
+state = {
+	unit: {},
+	interfaces: {}
+};
+
+let ctx = ubus.connect();
+let interfaces = ctx.call('network.interface', 'dump').interface;
+let cursor = uci.cursor();
+cursor.load('health');
+cursor.load('dhcp');
+cursor.load('network');
+cursor.load('wireless');
+let config = cursor.get_all('state', 'health');
+let dhcp = cursor.get_all('dhcp');
+let wifi_config = cursor.get_all('wireless');
+let wifi_state = require('wifi.iface');
+let count = 0;
+
+function find_ssid(ssid) {
+	for (let name, iface in wifi_state)
+		if (ssid == iface.ssid)
+			return 0;
+	return 1;
+}
+
+function radius_probe(server, port, secret, user, pass)
+{
+	let f = fs.open('/tmp/radius.conf', 'w');
+	if (f) {
+		f.write(sprintf('authserver %s:%d\n', server, port));
+		f.write('servers /tmp/radius.servers\n');
+		f.write('dictionary /etc/radcli/dictionary\n');
+		f.write('radius_timeout 3\n');
+		f.write('radius_retries 1\n');
+		f.write('bindaddr *\n');
+		f.close();
+	}
+
+	let f = fs.open('/tmp/radius.servers', 'w');
+	if (f) {
+		f.write(sprintf('%s %s\n', server, secret));
+		f.close();
+	}
+	return system(['/usr/sbin/radiusprobe', user, pass]);
+}
+
+for (let iface in interfaces) {
+	let name = iface.interface;
+	if (name == 'loopback')
+		continue;
+
+	count++;
+
+	let health = {};
+	let ssid = {};
+	let radius = {};
+	let device = iface.l3_device || iface.interface;
+	let warnings = [];
+
+	let probe_dhcp = cursor.get('network', iface.interface, 'dhcp_healthcheck') || false;
+
+	if (dhcp[name]?.leasetime && +config.dhcp_local)
+		probe_dhcp = true;
+
+	if (iface?.data.leasetime && +config.dhcp_remote)
+		probe_dhcp = true;
+
+	if (probe_dhcp) {
+		let rc = system(['/usr/sbin/dhcpdiscover', '-i', device, '-t', '5']);
+		if (rc) {
+			health.dhcp = false;
+			push(warnings, 'DHCP did not offer any leases');
+			ctx.call('event', 'event',  { object: 'health', verb: 'dhcp', payload: { iface: name, error: 'DHCP did not offer any leases' }});
+		}
+	}
+
+	let probe_dns = false;
+
+	if (length(iface['dns-server']) && +config.dns_remote)
+		probe_dns = true;
+
+	if (dhcp[name]?.dns_service && +config.dns_local)
+                probe_dns = true;
+
+	if (probe_dns) {
+		let dns = iface['dns-server'];
+		if (!length(dns) && iface['ipv4-address'] && iface['ipv4-address'][0])
+			dns = [ iface['ipv4-address'][0]['address'] ];
+
+		for (let ip in dns) {
+			let rc = system(['/usr/sbin/dnsprobe', '-s', ip]);
+
+			if (rc) {
+				health.dns = false;
+				push(warnings, `DNS ${ip} is not reachable`);
+				ctx.call('event', 'event',  { object: 'health', verb: 'dns', payload: { iface: name, error: `DNS ${ip} is not reachable.` }});
+			}
+		}
+	}
+
+	for (let k, iface in wifi_config) {
+		if (iface['.type'] != 'wifi-iface' || iface.network != name)
+			continue;
+		if (find_ssid(iface.ssid))
+			ssid[iface.ssid] = false;
+		if (iface.auth_server && iface.auth_port && iface.auth_secret && iface.health_username && iface.health_password && !iface.radius_gw_proxy)
+			if (radius_probe(iface.auth_server, iface.auth_port, iface.auth_secret, iface.health_username, iface.health_password)) {
+				radius[iface.ssid] = false;
+				push(warnings, sprintf('Radius %s:%s is not reachable', iface.auth_server, iface.auth_port));
+				ctx.call('event', 'event',  { object: 'health', verb: 'radius', payload: { ssid: iface.ssid, error: `Radius ${iface.auth_server}:${iface.auth_port} is not reachable` }});
+			}
+	}
+
+	if (length(ssid))
+		health.ssids = ssid;
+
+	if (length(radius))
+		health.radius = radius;
+
+	if (length(health)) {
+		health.location= cursor.get('network', name, 'ucentral_path');
+		if (length(warnings))
+			health.warning = warnings;
+		state.interfaces[name] = health;
+	}
+}
+
+try {
+	memory = ctx.call('system', 'info');
+	memory = memory.memory;
+	state.unit.memory =  100 - (memory.available * 100 / memory.total);
+	if (state.unit.memory >= 90)
+		ctx.call('event', 'event',  { object: 'health', verb: 'memory', payload: { used: state.unit.memory, error: 'Memory is almost exhausted.' }});
+}
+catch(e) {
+	log('Failed to invoke memory probing: %s\n', e);
+}
+
+let errors = length(state.interfaces);
+if (!errors)
+	delete state.interfaces;
+
+let sanity = 100 - (errors * 100 / count);
+
+warn(printf('health check reports sanity of %d', sanity));
+ctx.call('ucentral', 'health', {sanity: sanity, data: state});
diff --git a/ucentral-client/rootfs/usr/share/ucentral/ip-collide.uc b/ucentral-client/rootfs/usr/share/ucentral/ip-collide.uc
new file mode 100755
index 0000000..2eb512a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/ip-collide.uc
@@ -0,0 +1,148 @@
+#!/usr/bin/ucode
+
+let uci = require("uci").cursor();
+let ubus = require("ubus").connect();
+let status = ubus.call("network.interface", "dump");
+let up = [];
+let down = [];
+let collision = false;
+
+let ipcalc = {
+	used_prefixes: [],
+
+	convert_bits_to_mask: function(bits) {
+		let width = 32,
+		    mask = [];
+
+		bits = width - bits;
+
+		for (let i = width / 8; i > 0; i--) {
+			let b = (bits < 8) ? bits : 8;
+			mask[i - 1] = ~((1 << b) - 1) & 0xff;
+			bits -= b;
+		}
+
+		return mask;
+	},
+
+	apply_mask: function(addr, mask) {
+		return map(addr, (byte, i) => byte & mask[i]);
+	},
+
+	is_intersecting_prefix: function(addr1, bits1, addr2, bits2) {
+		let mask = this.convert_bits_to_mask((bits1 < bits2) ? bits1 : bits2, length(addr1) == 16);
+
+		for (let i = 0; i < length(addr1); i++)
+			if ((addr1[i] & mask[i]) != (addr2[i] & mask[i]))
+				return false;
+
+		return true;
+	},
+
+	add_amount: function(addr, amount) {
+		for (let i = length(addr); i > 0; i--) {
+			let t = addr[i - 1] + amount;
+			addr[i - 1] = t & 0xff;
+			amount = t >> 8;
+		}
+
+		return addr;
+	},
+
+	reserve_prefix: function(addr, mask) {
+		addr = split(addr, ".");
+		for (let i = 0; i < length(this.used_prefixes); i += 2) {
+			let addr2 = this.used_prefixes[i + 0],
+			    mask2 = this.used_prefixes[i + 1];
+
+			// printf('reserve_prefix %.J %J\n', addr2, addr);
+			if (length(addr2) != length(addr))
+				continue;
+
+			if (this.is_intersecting_prefix(addr, mask, addr2, mask2))
+				return false;
+		}
+
+		push(this.used_prefixes, addr, mask);
+
+		return true;
+	},
+
+	generate_prefix: function(available, template) {
+		let prefix = match(template, /^(auto|[0-9a-fA-F:.]+)\/([0-9]+)$/);
+
+		if (prefix && prefix[1] == 'auto') {
+			let pool = match(available, /^([0-9a-fA-F:.]+)\/([0-9]+)$/);
+
+			if (prefix[2] < pool[2]) {
+				printf("Interface IPv4 prefix size exceeds available allocation pool size");
+				return NULL;
+			}
+
+			let available_prefixes = 1 << (prefix[2] - pool[2]),
+			    prefix_mask = this.convert_bits_to_mask(prefix[2]),
+			    address_base = iptoarr(pool[1]);
+
+			// printf("generate %.J %.J\n", pool[1], address_base);
+
+			for (let offset = 0; offset < available_prefixes; offset++) {
+				if (this.reserve_prefix(pool[1], prefix[2])) {
+					this.add_amount(address_base, 1);
+
+					return arrtoip(address_base) + '/' + prefix[2];
+				}
+
+				for (let i = length(address_base), carry = 1; i > 0; i--) {
+					let t = address_base[i - 1] + (~prefix_mask[i - 1] & 0xff) + carry;
+					address_base[i - 1] = t & 0xff;
+					carry = t >> 8;
+				}
+			}
+
+			return NULL;
+		}
+
+		return template;
+	},
+};
+
+uci.load("network");
+
+for (let iface in status.interface) {
+	if (!iface.up || !length(iface['ipv4-address']))
+		continue;
+	let role = split(iface.device, /[[:digit:]]/);
+	switch (role[0]) {
+	case 'up':
+		push(up, iface);
+		break;
+	case 'down':
+		push(down, iface);
+		break;
+	}
+}
+
+for (let iface in up)
+	for (let addr in iface['ipv4-address'])
+		ipcalc.reserve_prefix(addr.address, addr.mask);
+
+for (let iface in down)
+	for (let addr in iface['ipv4-address'])
+		if (!ipcalc.reserve_prefix(addr.address, addr.mask)) {
+			let auto = ipcalc.generate_prefix('192.168.0.0/16', 'auto/' + addr.mask, false);
+			system(sprintf("logger ip-collide: collision detected on %s\n", iface.device));
+			if (auto) {
+				system(sprintf('logger ip-collide: moving from %s/%d to %s\n', addr.address, addr.mask, auto));
+				uci.set('network', iface.device, 'ipaddr', auto);
+			} else {
+				system(sprintf('logger ip-collide: no free address available, shutting down device\n'));
+				system(sprintf('ifconfig %s down', iface.device));
+			}
+			uci.set('network', iface.device, 'collision', time());
+			collision = true;
+		}
+
+if (collision) {
+	uci.commit();
+	system('reload_config');
+}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/onlinecheck.uc b/ucentral-client/rootfs/usr/share/ucentral/onlinecheck.uc
new file mode 100755
index 0000000..1064c02
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/onlinecheck.uc
@@ -0,0 +1,76 @@
+#!/usr/bin/ucode
+let fs = require("fs");
+let uci = require("uci");
+let cursor = uci.cursor();
+
+cursor.load("onlinecheck");
+let config = cursor.get_all("onlinecheck", "@config[-1]");
+
+let state_file = fs.open("/tmp/onlinecheck.state", "r");
+let state = state_file ? json(state_file.read("all")) : {
+	online: true,
+	threshold: 0,
+};
+if (state_file)
+	state_file.close();
+
+let online_count = 0;
+let online_success = 0;
+
+for (let host in config.ping_hosts) {
+	printf("ping %s\n", host);
+	online_count++;
+
+	let result = system("ping -c 1 -w 3 " + host);
+
+	if (!result)
+		online_success++;
+}
+
+for (let host in config.download_hosts) {
+	printf("download %s\n", host);
+	online_count++;
+
+	let result = system(sprintf("/usr/bin/curl -m 3 http://%s/online.txt -o /tmp/onlinecheck.tmp", host));
+
+	printf("result %d\n", result);
+
+	if (result)
+		continue;
+	let online_file = fs.open("/tmp/onlinecheck.tmp");
+	let ok = online_file.read("all") || '';
+	online_file.close();
+	if (split(ok, '\n')[0] == 'ok')
+		online_success++;
+}
+
+printf("%d/%d checks have passed\n", online_success, online_count);
+
+if (!online_success)
+	state.threshold = state.threshold + 1;
+else
+	state.threshold = 0;
+
+if (state.threshold >= config.check_threshold && state.online) {
+	if (index(config.action, "wifi") >= 0)
+		system("wifi down");
+	if (index(config.action, "leds") >= 0)
+		system("/etc/init.d/led blink");
+
+	state.online = false;
+	system("logger onlinecheck: going offline\n")
+
+} else if (!state.threshold && !state.online) {
+	if (index(config.action, "wifi") >= 0)
+		system("wifi up");
+	if (index(config.action, "leds") >= 0)
+		system("/etc/init.d/led turnon");
+	state.online = true;
+	system("logger onlinecheck: going online\n")
+}
+
+let state_file = fs.open("/tmp/onlinecheck.state", "w");
+state_file.write(state);
+state_file.close();
+
+
diff --git a/ucentral-client/rootfs/usr/share/ucentral/probe_services.uc b/ucentral-client/rootfs/usr/share/ucentral/probe_services.uc
new file mode 100755
index 0000000..95df822
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/probe_services.uc
@@ -0,0 +1,68 @@
+let fail = {},
+dhcp = {},
+dns = { localhost: [ "127.0.0.1" ] };
+
+function lookup_wan() {
+	let i = ctx.call("network.interface.wan", "status");
+
+	if (i["dns-server"])
+		dns.wan = i["dns-server"];
+
+	if (i["l3_device"])
+		dhcp.wan = i["l3_device"];
+}
+
+function lookup_ip(iface) {
+	let i = ctx.call("network.interface", "status", { interface: iface });
+
+	if (i["ipv4-address"] && i["ipv4-address"][0])
+		dns[iface] = [ i["ipv4-address"][0]["address"] ];
+
+	if (i["l3_device"])
+		dhcp[iface] = i["l3_device"];
+}
+
+function service_probe() {
+	lookup_wan();
+
+	let cursor = uci.cursor();
+
+	cursor.load("dhcp");
+	cursor.foreach("dhcp", "dhcp", function(d) {
+		if (d.ignore != 1)
+			lookup_ip(d.interface);
+	});
+
+	for (let iface, ips in dns) {
+		let failed = true;
+
+		for (let ip in ips) {
+			let rc = system(['/usr/sbin/dnsprobe', '-s', ip]);
+
+			if (rc == 0)
+				failed = false;
+		}
+
+		if (!failed)
+			continue;
+
+		fail.dns = fail.dns || {};
+		fail.dns[iface] = ips;
+	}
+
+	for (let iface, dev in dhcp) {
+		let rc = system(['/usr/sbin/dhcpdiscover', '-i', dev, '-t', '5']);
+
+		if (rc != 0) {
+			fail.dhcp = fail.dhcp || {};
+			fail.dhcp[iface] = dev;
+		}
+	}
+
+	return fail;
+}
+
+let services = service_probe();
+
+if (length(services))
+	state.serviceprobe = services;
diff --git a/ucentral-client/rootfs/usr/share/ucentral/qos.json b/ucentral-client/rootfs/usr/share/ucentral/qos.json
new file mode 100644
index 0000000..0c73a2c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/qos.json
@@ -0,0 +1,153 @@
+{
+	"classes": {
+		"network_services": {
+			"ingress": "CS3",
+			"eggress": "CS3",
+			"bulk-pps": 100,
+			"bulk-timeout": 5,
+			"bulk-dscp": "CS0"
+		},
+
+		"conferencing": {
+			"source": "https://support.zoom.us/hc/en-us/articles/207368756-Using-QoS-DSCP-Marking",
+			"ingress": "EF",
+			"egress": "EF"
+		},
+
+		"telephony": {
+			"source": "https://support.zoom.us/hc/en-us/articles/207368756-Using-QoS-DSCP-Marking",
+			"ingress": "EF",
+			"egress": "EF"
+		},
+		
+		"streaming": {
+			"ingress": "AF41",
+			"egress": "AF41"
+		},
+
+		"browsing": {
+			"ingress": "CS0",
+			"egress": "CS0"
+		}
+	},
+
+	"services": {
+		"networking": {
+			"classifier": "network_services",
+			"tcp": [ 22, 123, 53, 5353 ],
+			"udp": [ 53, 5353 ]
+		},
+
+		"browsing": {
+			"classifier": "browsing",
+			"tcp": [ 80, 443 ],
+			"udp": [ 80, 443 ]
+		},
+
+		"youtube": {
+			"source": "https://services.google.com/fh/files/blogs/enabling_remote_working_with_hangouts_meet_quick_deployment_guide.pdf",
+			"classifier": "streaming",
+			"fqdn": [ "*.googlevideo.com", "*.youtube-nocookie.com", "*.ytimg.com" ],
+			"uses": [ "rtmp" ]
+		},
+
+		"netflix": {
+			"source": "https://www.netify.ai/resources/applications/netflix",
+			"classifier": "streaming",
+			"fqdn": [ "*.nflxvideo.com", "*.nflxvideo.net" ]
+		},
+
+		"amazon-prime": {
+			"source": "https://www.netify.ai/resources/applications/amazon-prime",
+			"classifier": "streaming",
+			"fqdn": [
+				"*aiv-cdn.net", "*aiv-delivery.net", "*amazonvideo.com", "*atv-ext.amazon.com", "*atv-ext-eu.amazon.com",
+				"atv-ext-fe.amazon.com", "atv-ps.amazon.com", "atv-ps-eu.amazon.com", "atv-ps-eu.amazon.co.uk",
+				"atv-ps-fe.amazon.co.jp", "atv-ps-fe.amazon.com", "primevideo.com", "pv-cdn.net", "video.a2z.com"
+			]
+		},
+
+		"disney-plus": {
+			"source": "https://www.netify.ai/resources/applications/disney-plus",
+			"classifier": "streaming",
+			"fqdn": [
+				"*disneyplus.com", "*disneyplus.disney.co.jp", "*disney-plus.net", "*disneystreaming.service-now.com",
+				"*disney-vod-na-west-1.top.comcast.net", "*dssott.com"
+			]
+		},
+
+		"hbo": {
+			"source": "https://www.netify.ai/resources/applications/hbo",
+			"classifier": "streaming",
+			"fqdn": [
+				"*hbo.com", "*hbogoasia.com", "*hbogoasia.id", "*hbogoasia.ph", "*hbogo.com", "*hbogo.co.th", "*hbogo.eu", "*hbomaxcdn.com",
+				"*hbomax.com", "*hbomax-images.warnermediacdn.com", "*hbonow.com", "maxgo.com"
+			]
+		},
+
+		"rtmp": {
+			"comment": "RTMP (YouTube Live, Twitch, Vimeo and LinkedIn Live)",
+			"classifier": "streaming",
+			"tcp": [ "1935-1936", 2396, 2935 ]
+		},
+
+		"stun": {
+			"comment": "STUN (Session Traversal Utilities for NAT)",
+			"classifier": "conferencing",
+			"udp": [ "3478-3497" ]
+		},
+
+		"zoom": {
+			"source": "https://support.zoom.us/hc/en-us/articles/201362683-Zoom-network-firewall-or-proxy-server-settings",
+			"classifier": "conferencing",
+			"fqdn": [ "*zoom.us" ],
+			"tcp": [ "8801-8802" ],
+			"udp": [ "8801-8810" ],
+			"uses": [ "stun" ]
+		},
+
+		"facetime": {
+			"source": "https://support.apple.com/en-us/HT202078",
+			"classifier": "conferencing",
+			"udp": [ "16384-16387", "16393-16402" ]
+		},
+
+		"webex": {
+			"source": "https://help.webex.com/en-us/article/WBX264/How-Do-I-Allow-Webex-Meetings-Traffic-on-My-Network?#id_135400",
+			"classifier": "conferencing",
+			"tcp": [ 5004 ],
+			"udp": [ 9000 ]
+		},
+
+		"jitsi": {
+			"source": "https://jitsi.github.io/handbook/docs/devops-guide/devops-guide-quickstart/#setup-and-configure-your-firewall",
+			"classifier": "conferencing",
+			"tcp": [ 5349 ],
+			"udp": [ 10000 ],
+			"uses": [ "stun" ]
+		},
+
+		"google-meet": {
+			"source": "https://services.google.com/fh/files/blogs/enabling_remote_working_with_hangouts_meet_quick_deployment_guide.pdf",
+			"classifier": "conferencing",
+			"udp": [ "19302-19309" ]
+		},
+
+		"teams": {
+			"source": "https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide#skype-for-business-online-and-microsoft-teams",
+			"classifier": "conferencing",
+			"uses": [ "stun" ]
+		},
+
+		"voip": {
+			"classifier": "telephony",
+			"tcp": [ "5060-5061" ],
+			"udp": [ "5060-5061" ]
+		},
+
+		"vowifi": {
+			"classifier": "telephony",
+			"udp": [ 500, 4500 ]
+		}
+	}
+}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/reboot_cause.uc b/ucentral-client/rootfs/usr/share/ucentral/reboot_cause.uc
new file mode 100644
index 0000000..84b3621
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/reboot_cause.uc
@@ -0,0 +1,5 @@
+#!/usr/bin/ucode
+let fs = require('fs');
+let pmsg = fs.open('/dev/pmsg0', 'w');
+pmsg.write({ boot_cause: reason ? reason : ARGV[0] });
+pmsg.close();
diff --git a/ucentral-client/rootfs/usr/share/ucentral/renderer.uc b/ucentral-client/rootfs/usr/share/ucentral/renderer.uc
new file mode 100644
index 0000000..e2bd474
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/renderer.uc
@@ -0,0 +1,1195 @@
+// UCI batch output master template
+
+"use strict";
+
+let uci = require("uci");
+let ubus = require("ubus");
+let fs = require("fs");
+
+let cursor = uci ? uci.cursor() : null;
+let conn = ubus ? ubus.connect() : null;
+
+let capabfile = fs.open("/etc/ucentral/capabilities.json", "r");
+let capab = capabfile ? json(capabfile.read("all")) : null;
+
+let pipe = fs.popen('fw_printenv developer');
+let developer = replace(pipe.read("all"), '\n', '');
+pipe.close();
+let restrict = {};
+if (developer != 'developer=1') {
+	let restrictfile = fs.open("/etc/ucentral/restrictions.json", "r");
+	restrict = restrictfile ? json(restrictfile.read("all")) : {};
+}
+
+let serial = cursor.get("ucentral", "config", "serial");
+
+assert(cursor, "Unable to instantiate uci");
+assert(conn, "Unable to connect to ubus");
+assert(capab, "Unable to load capabilities");
+
+let topdir = sourcepath(0, true);
+
+/**
+ * Formats a given input value as uci boolean value.
+ *
+ * @memberof uCentral.prototype
+ * @param {*} val The value to format
+ * @returns {string}
+ * Returns '1' if the given value is truish (not `false`, `null`, `0`,
+ * `0.0` or an empty string), or `0` in all other cases.
+ */
+function b(val) {
+	return val ? '1' : '0';
+}
+
+/**
+ * Formats a given input value as single quoted string, honouring uci
+ * specific escaping semantics.
+ *
+ * @memberof uCentral.prototype
+ * @param {*} str The string to format
+ * @returns {string}
+ * Returns an empty string if the given input value is `null` or an
+ * empty string. Returns the escaped and quoted string in all other
+ * cases.
+ */
+function s(str) {
+	if (str === null || str === '')
+		return '';
+
+	return sprintf("'%s'", replace(str, /'/g, "'\\''"));
+}
+
+/**
+ * Attempt to include a file, catching potential exceptions.
+ *
+ * Try to include the given file path in a safe manner. The
+ * path is resolved relative to the path of the currently
+ * executed template and may only contain the character `A-Z`,
+ * `a-z`, `0-9`, `_`, `/` and `-` as must contain a final
+ * `.uc` file extension.
+ *
+ * Exception occuring while including the file are catched
+ * and a warning is emitted instead.
+ *
+ * @memberof uCentral.prototype
+ * @param {string} path Path of the file to include
+ * @param {object} scope The scope to pass to the include file
+ */
+function tryinclude(path, scope) {
+	if (!match(path, /^[A-Za-z0-9_\/-]+\.uc$/)) {
+		warn("Refusing to handle invalid include path '%s'", path);
+		return;
+	}
+
+	let parent_path = sourcepath(1, true);
+
+	assert(parent_path, "Unable to determine calling template path");
+
+	try {
+		include(parent_path + "/" + path, scope);
+	}
+	catch (e) {
+		warn("Unable to include path '%s': %s\n%s", path, e, e.stacktrace[0].context);
+	}
+}
+
+function discover_ports() {
+	let roles = {};
+
+	/* Derive ethernet port names and roles from default config */
+	for (let role, spec in capab.network) {
+		for (let i, ifname in spec) {
+			role = uc(role);
+			let netdev = split(ifname, ':');
+			let port = {
+				netdev: netdev[0],
+				index: i
+			};
+			if (netdev[1]) {
+				port.swconfig = netdev[1];
+				port.swdev = split(ifname, ':')[0];
+			}
+			push(roles[role] = roles[role] || [], port);
+		}
+	}
+
+	/* Sort ports in each role group according to their index, then normalize
+	 * names into uppercase role name with 1-based index suffix in case of multiple
+	 * ports or just uppercase role name in case of single ports */
+	let rv = {};
+
+	for (let role, ports in roles) {
+		switch (length(ports)) {
+		case 0:
+			break;
+
+		case 1:
+			rv[role] = ports[0];
+			break;
+
+		default:
+			map(sort(ports, (a, b) => (a.index - b.index)), (port, i) => {
+				rv[role + (i + 1)] = port;
+			});
+		}
+	}
+
+	return rv;
+}
+
+/**
+ * @class uCentral.wiphy
+ * @classdesc
+ *
+ * This is the wireless PHY base class. It is automatically instantiated and accessible
+  * using the global 'wiphy' variable.
+ */
+
+/** @lends uCentral.wiphy.prototype */
+
+let wiphy = {
+	/**
+	 * Return a list of PHY information structures
+	 *
+	 * This function returns a list of all available PHYs including
+	 * the relevant data describing their properties and capabilities
+	 * such as HT Modes, channels, ...
+	 *
+	 * @method
+	 *
+	 * @returns {Array}
+	 * Returns an array of all available PHYs.
+	 */
+	phys: require("wifi.phy"),
+
+	/** @private */
+	band_freqs: {
+		'2G':       [  2412,  2484 ],
+		'5G':       [  5160,  5885 ],
+		'5G-lower': [  5160,  5340 ],
+		'5G-upper': [  5480,  5885 ],
+		'6G':       [  5925,  7125 ],
+		'60G':		[ 58320, 69120 ]
+	},
+
+	/** @private */
+	band_channels: {
+		'2G': [ 1, 14 ],
+		'5G': [ 7, 196 ],
+		'5G-lower': [ 7, 68 ],
+		'5G-upper': [ 96, 177 ],
+		'6G': [ 200, 600 ], // FIXME
+		'60G': [ 1, 6 ]
+	},
+
+	/**
+	 * Convert a wireless channel to a wireless frequency
+	 *
+	 * @param {string} wireless band
+	 * @param {number} channel
+	 *
+	 * @returns {?number}
+	 * Returns the coverted wireless frequency for this specific
+	 * channel.
+	 */
+	channel_to_freq: function(band, channel) {
+		if (band == '2G' && channel >= 1 && channel <= 13)
+			return 2407 + channel * 5;
+		else if (band == '2G' && channel == 14)
+			return 2484;
+		else if (band == '5G' && channel >= 7 && channel <= 177)
+			return 5000 + channel * 5;
+		else if (band == '5G' && channel >= 183 && channel <= 196)
+			return 4000 + channel * 5;
+		else if (band == '60G' && channel >= 1 && channel <= 6)
+			return 56160 + channel * 2160;
+
+		return null;
+	},
+
+	/**
+	 * Convert the unique sysfs path describing a wireless PHY to
+	 * the corresponding UCI section name
+	 *
+	 * @param {string} path
+	 *
+	 * @returns {string|false}
+	 * Returns the UCI section name of a specific PHY
+	 */
+	path_to_section: function(path) {
+		let sid = null;
+
+		cursor.load("wireless");
+		cursor.foreach("wireless", "wifi-device", (s) => {
+			if (s.path == path && s.scanning != 1) {
+				sid = s['.name'];
+
+				return false;
+			}
+		});
+
+		return sid;
+	},
+
+	/**
+	 * Get a list of all wireless PHYs for a specific wireless band
+	 *
+	 * @param {string} band
+	 *
+	 * @returns {object[]}
+	 * Returns an array of all wireless PHYs for a specific wireless
+	 * band.
+	 */
+	lookup_by_band: function(band) {
+		let baseband = band;
+		let phys = [];
+
+		if (band in ['5G-lower', '5G-upper'])
+			baseband = '5G';
+
+		for (let path, phy in this.phys) {
+			if (!(baseband in phy.band))
+				continue;
+
+			let phy_min_freq, phy_max_freq;
+
+			if (phy.frequencies) {
+				phy_min_freq = min(...phy.frequencies);
+				phy_max_freq = max(...phy.frequencies);
+			}
+			else {
+				/* NB: this code is superfluous once ubus call wifi phy reports
+				       supported frequencies directly */
+
+				let min_ch = max(min(...phy.channels), this.band_channels[band][0]),
+				    max_ch = min(max(...phy.channels), this.band_channels[band][1]);
+
+				phy_min_freq = this.channel_to_freq(baseband, min_ch);
+				phy_max_freq = this.channel_to_freq(baseband, max_ch);
+
+				if (phy_min_freq === null) {
+					warn("Unable to map channel %d in band %s to frequency", min_ch, baseband);
+					continue;
+				}
+
+				if (phy_max_freq === null) {
+					warn("Unable to map channel %d in band %s to frequency", max_ch, baseband);
+					continue;
+				}
+			}
+
+			/* phy's frequency range does not overlap with band's frequency range, skip phy */
+			if (phy_max_freq < this.band_freqs[band][0] || phy_min_freq > this.band_freqs[band][1])
+				continue;
+
+			let sid = this.path_to_section(path);
+
+			if (sid)
+				push(phys, { ...phy, section: sid });
+		}
+
+		return phys;
+	},
+
+	allocate_ssid_section_id: function(phy) {
+		phy.networks = ++phy.networks || 1;
+
+		assert(phy.section, "Radio has no related uci section");
+
+		return phy.section + 'net' + phy.networks;
+	}
+};
+
+/**
+ * @class uCentral.ethernet
+ * @classdesc
+ *
+ * This is the ethernet base class. It is automatically instantiated and
+ * accessible using the global 'ethernet' variable.
+ */
+
+/** @lends uCentral.ethernet.prototype */
+
+let ethernet = {
+	ports: discover_ports(),
+
+	reverse_lookup: function(iface) {
+		for (let name, dev in this.ports)
+			if (dev == iface)
+				return name;
+		return null;
+	},
+
+	lookup_port: function(iface) {
+		for (let name, dev in this.ports)
+			if (dev.netdev == iface)
+				return dev;
+		return null;
+	},
+
+	/**
+	 * Get a list of all wireless PHYs for a specific wireless band
+	 *
+	 * @param {string} band
+	 *
+	 * @returns {object}
+	 * Returns an array of all wireless PHYs for a specific wireless
+	 * band.
+	 */
+	lookup: function(globs) {
+		let matched = {};
+
+		for (let glob, tag_state in globs) {
+			for (let name, spec in this.ports) {
+				if (wildcard(name, glob)) {
+					if (spec.netdev)
+						matched[spec.netdev] = tag_state;
+					else
+						warn("Not implemented yet: mapping switch port to netdev");
+				}
+			}
+		}
+
+		return matched;
+	},
+
+	lookup_by_interface_vlan: function(interface, raw) {
+		// Gather the glob patterns in all `ethernet: [ { select-ports: ... }]` specs,
+		// dedup them and turn them into one global regular expression pattern, then
+		// match this pattern against all known system ethernet ports, remember the
+		// related netdevs and return them.
+		let globs = {};
+		map(interface.ethernet, eth => map(eth.select_ports, glob => globs[glob] = eth.vlan_tag));
+
+		let lookup = this.lookup(globs);
+		if (raw)
+			return lookup;
+
+		let rv = {};
+		for (let k, v in lookup) {
+			/* tagged swconfig downstream ports are not allowed */
+			if (interface.role == 'downstream') {
+				if (this.swconfig && this.swconfig[k].switch && v == 'tagged')
+					warn('%s:%d - vlan tagging on downstream swconfig ports is not supported', this.swconfig[k]?.switch.name, this.swconfig[k].swconfig);
+				else
+					rv[k] = v;
+				continue;
+			}
+			/* resolve upstream vlans on swconfig ports */
+			if (this.swconfig && interface.role == 'upstream' && interface.vlan.id && this.swconfig[k]?.switch) {
+				rv[split(k, '.')[0] + '.' + interface.vlan.id] = 'un-tagged';
+				continue;
+			}
+			rv[k] = v;
+		}
+		return rv;
+	},
+
+	switch_by_interface_vlan: function(interface, raw) {
+		let ports = this.lookup_by_interface_vlan(interface, true);
+		let rv = { ports: "" };
+		let cpu_port = 0;
+		for (let port, tag in ports) {
+			if (!this.swconfig || !this.swconfig[port]?.switch) continue;
+			rv.name = this.swconfig[port].switch.name;
+			cpu_port = this.swconfig[port].switch.port;
+			rv.ports += ' ' + this.swconfig[port].swconfig;
+			if (tag != 'un-tagged')
+				rv.ports += 't';
+		}
+		if (!rv.name)
+			return null;
+		rv.ports = cpu_port + 't' + rv.ports;
+
+		return rv;
+	},
+
+	lookup_by_interface_spec: function(interface) {
+		return sort(keys(this.lookup_by_interface_vlan(interface)));
+	},
+
+	lookup_by_select_ports: function(select_ports) {
+		let globs = {};
+		map(select_ports, glob => globs[glob] = true);
+
+		return sort(keys(this.lookup(globs)));
+	},
+
+	lookup_by_ethernet: function(ethernets) {
+		let result = [];
+
+		for (let ethernet in ethernets)
+			result = [ ...result,  ...this.lookup_by_select_ports(ethernet.select_ports) ];
+		return result;
+	},
+
+	reserve_port: function(port) {
+		delete this.ports[port];
+	},
+
+	is_single_config: function(interface) {
+		let ipv4_mode = interface.ipv4 ? interface.ipv4.addressing : 'none';
+		let ipv6_mode = interface.ipv6 ? interface.ipv6.addressing : 'none';
+
+		return (
+			(ipv4_mode == 'none') || (ipv6_mode == 'none') ||
+			(ipv4_mode == 'static' && ipv6_mode == 'static')
+		);
+	},
+
+	calculate_name: function(interface) {
+		let vid = interface.vlan.id;
+		if (interface.admin_ui)
+			return 'admin_ui';
+		return (interface.role == 'upstream' ? 'up' : 'down') + interface.index + 'v' + vid;
+	},
+
+	calculate_names: function(interface) {
+		let name = this.calculate_name(interface);
+
+		return this.is_single_config(interface) ? [ name ] : [ name + '_4', name + '_6' ];
+	},
+
+	calculate_ipv4_name: function(interface) {
+		let name = this.calculate_name(interface);
+
+		return this.is_single_config(interface) ? name : name + '_4';
+	},
+
+	calculate_ipv6_name: function(interface) {
+		let name = this.calculate_name(interface);
+
+		return this.is_single_config(interface) ? name : name + '_6';
+	},
+
+	has_vlan: function(interface) {
+		return interface.vlan && interface.vlan.id;
+	},
+
+	port_vlan: function(interface, port) {
+		if (port == "tagged")
+			return ':t';
+		if (port == "un-tagged")
+			return '';
+		return ((interface.role == 'upstream') && this.has_vlan(interface)) ? ':t' : '';
+	},
+
+	find_interface: function(role, vid) {
+		for (let interface in state.interfaces)
+			if (interface.role == role &&
+			    interface.vlan?.id == vid)
+				return this.calculate_name(interface);
+		return '';
+	},
+
+	get_interface: function(role, vid) {
+		for (let interface in state.interfaces)
+			if (interface.role == role &&
+			    interface.vlan.id == vid)
+				return interface;
+		return null;
+	},
+
+	get_speed: function(dev) {
+		let fp = fs.open(sprintf("/sys/class/net/%s/speed", dev));
+		if (!fp)
+			return 1000;
+		let speed = fp.read("all");
+		fp.close();
+		return +speed;
+	}
+};
+
+/**
+ * @class uCentral.ipcalc
+ * @classdesc
+ *
+ * The ipcalc utility class provides methods for manipulating and testing
+ * IP address ranges.
+ */
+
+/** @lends uCentral.ipcalc.prototype */
+
+let ipcalc = {
+	used_prefixes: [],
+
+	/**
+	 * Convert the given amount of prefix bits to a network mask in IP address
+	 * notation.
+	 *
+	 * @param {number} bits  The amounts of prefix bits
+	 * @param {?boolean} v6  If true, produce an IPv6 mask, otherwise use IPv4
+	 *
+	 * @returns {string}
+	 * Returns a string containing the corresponding netmask.
+	 *
+	 * @throws
+	 * Throws an exception when the amount of bits is not representable as netmask.
+	 */
+	convert_bits_to_mask: function(bits, v6) {
+		let width = v6 ? 128 : 32,
+		    mask = [];
+
+		assert(bits <= width, "Invalid bit length");
+
+		bits = width - bits;
+
+		for (let i = width / 8; i > 0; i--) {
+			let b = (bits < 8) ? bits : 8;
+			mask[i - 1] = ~((1 << b) - 1) & 0xff;
+			bits -= b;
+		}
+
+		return mask;
+	},
+
+	apply_mask: function(addr, mask) {
+		assert(length(addr) == length(mask), "Incompatible mask");
+
+		return map(addr, (byte, i) => byte & mask[i]);
+	},
+
+	is_intersecting_prefix: function(addr1, bits1, addr2, bits2) {
+		assert(length(addr1) == length(addr2), "Incompatible addresses");
+
+		let mask = this.convert_bits_to_mask((bits1 < bits2) ? bits1 : bits2, length(addr1) == 16);
+
+		for (let i = 0; i < length(addr1); i++)
+			if ((addr1[i] & mask[i]) != (addr2[i] & mask[i]))
+				return false;
+
+		return true;
+	},
+
+	add_amount: function(addr, amount) {
+		for (let i = length(addr); i > 0; i--) {
+			let t = addr[i - 1] + amount;
+			addr[i - 1] = t & 0xff;
+			amount = t >> 8;
+		}
+
+		return addr;
+	},
+
+	reserve_prefix: function(addr, mask) {
+		for (let i = 0; i < length(this.used_prefixes); i += 2) {
+			let addr2 = this.used_prefixes[i + 0],
+			    mask2 = this.used_prefixes[i + 1];
+
+			if (length(addr2) != length(addr))
+				continue;
+
+			if (this.is_intersecting_prefix(addr, mask, addr2, mask2))
+				return false;
+		}
+
+		push(this.used_prefixes, addr, mask);
+
+		return true;
+	},
+
+	generate_prefix: function(state, template, ipv6) {
+		let prefix = match(template, /^(auto|[0-9a-fA-F:.]+)\/([0-9]+)$/);
+
+		if (prefix && prefix[1] == 'auto') {
+			assert(state.globals && state.globals[ipv6 ? 'ipv6_network' : 'ipv4_network'],
+				"No global prefix pool configured");
+
+			let pool = match(state.globals[ipv6 ? 'ipv6_network' : 'ipv4_network'], /^([0-9a-fA-F:.]+)\/([0-9]+)$/);
+
+			assert(prefix[2] >= pool[2],
+				"Interface " + (ipv6 ? "IPv6" : "IPv4") + " prefix size exceeds available allocation pool size");
+
+			let available_prefixes = 1 << (prefix[2] - pool[2]),
+			    prefix_mask = this.convert_bits_to_mask(prefix[2], ipv6),
+			    address_base = iptoarr(pool[1]);
+
+			for (let offset = 0; offset < available_prefixes; offset++) {
+				if (this.reserve_prefix(address_base, prefix[2])) {
+					this.add_amount(address_base, 1);
+
+					return arrtoip(address_base) + '/' + prefix[2];
+				}
+
+				for (let i = length(address_base), carry = 1; i > 0; i--) {
+					let t = address_base[i - 1] + (~prefix_mask[i - 1] & 0xff) + carry;
+					address_base[i - 1] = t & 0xff;
+					carry = t >> 8;
+				}
+			}
+
+			die("No prefix of size /" + prefix[2] + " available");
+		}
+
+		return template;
+	},
+
+	expand_wildcard_address: function(wcaddr, prefix) {
+		let addr = iptoarr(wcaddr),
+		    cidr = match(prefix, /^([0-9a-fA-F:.]+)\/([0-9]+)$/);
+
+		assert(addr, "Invalid wildcard address '" + wcaddr + '"');
+		assert(cidr, "Invalid prefix range '" + prefix + '"');
+
+		let mask = this.convert_bits_to_mask(+cidr[2], length(addr) == 16),
+		    base = this.apply_mask(iptoarr(cidr[1]), mask),
+		    result = [];
+
+		for (let i, b in addr) {
+			if (b & mask[i]) {
+				warn("Wildcard address '" + wcaddr + "' is partially masked by interface subnet mask '" + arrtoip(mask) + '"');
+				break;
+			}
+		}
+
+		for (let i, b in addr)
+			result[i] = base[i] | (b & ~mask[i]);
+
+		return arrtoip(result);
+	}
+};
+
+/**
+ * @class uCentral.services
+ * @classdesc
+ *
+ * The services utility class provides methods for managing and querying
+ * service states.
+ */
+
+/** @lends uCentral.services.prototype */
+
+let services = {
+	state: {},
+
+	set_enabled: function(name, state) {
+		if (!this.state[name]) {
+			if (state == 'early')
+				this.state[name] = 'early';
+			else
+				this.state[name] = state ? true : false;
+		}
+	},
+
+	is_present: function(name) {
+		return length(fs.stat("/etc/init.d/" + name)) > 0;
+	},
+
+	lookup_interfaces: function(service) {
+		let interfaces = [];
+
+		for (let interface in state.interfaces) {
+			if (!interface.services || index(interface.services, service) < 0)
+				continue;
+			push(interfaces, interface);
+		}
+
+		return interfaces;
+	},
+
+	lookup_interfaces_by_ssids: function(service) {
+		let interfaces = [];
+
+		for (let interface in state.interfaces) {
+			if (!interface.ssids)
+				continue;
+			for (let ssid in interface.ssids) {
+				if (!ssid.services || index(ssid.services, service) < 0)
+					continue;
+				push(interfaces, interface);
+			}
+		}
+
+		return uniq(interfaces);
+	},
+
+	lookup_ssids: function(service) {
+		let ssids = [];
+
+		for (let interface in state.interfaces) {
+			if (!interface.ssids)
+				continue;
+			for (let ssid in interface.ssids) {
+				if (!ssid.services || index(ssid.services, service) < 0)
+					continue;
+				push(ssids, ssid);
+			}
+		}
+
+		return ssids;
+	},
+
+	lookup_ethernet: function(service) {
+		let ethernets = [];
+
+		for (let ethernet in state.ethernet) {
+			if (!ethernet.services || index(ethernet.services, service) < 0)
+				continue;
+			push(ethernets, ethernet);
+		}
+
+		return ethernets;
+	},
+
+	lookup_services: function() {
+		let rv = [];
+
+		for (let incfile in fs.glob(topdir + '/templates/services/*.uc')) {
+			let m = match(incfile, /^.+\/([^\/]+)\.uc$/);
+
+			if (m)
+				push(rv, m[1]);
+		}
+
+		return rv;
+	},
+
+	lookup_metrics: function() {
+		let rv = [];
+
+		for (let incfile in fs.glob(topdir + '/templates/metric/*.uc')) {
+			let m = match(incfile, /^.+\/([^\/]+)\.uc$/);
+
+			if (m)
+				push(rv, m[1]);
+		}
+
+		return rv;
+	}
+};
+
+/**
+ * @class uCentral.local_profile
+ * @classdesc
+ *
+ * The local profile utility class provides access to the uCentral runtome
+ * profile information.
+ */
+
+/** @lends uCentral.local_profile.prototype */
+
+let local_profile = {
+	/**
+	 * Retrieve the local uCentral profile data.
+	 *
+	 * Parses the local uCentral profile JSON data and returns the
+	 * resulting object.
+	 *
+	 * @return {?object}
+	 * Returns an object containing the profile data or `null` on error.
+	 */
+	get: function() {
+		let profile_file = fs.open("/etc/ucentral/profile.json");
+
+		if (profile_file) {
+			let profile = json(profile_file.read("all"));
+
+			profile_file.close();
+
+			return profile;
+		}
+		return null;
+	}
+};
+
+/**
+ * @class uCentral.files
+ * @classdesc
+ *
+ * The files utility class manages non-uci file attachments which are
+ * produced during schema rendering.
+ */
+
+/** @lends uCentral.files.prototype */
+
+let files = {
+	/** @private */
+	files: {},
+
+	/**
+	 * The base directory for file attachments.
+	 *
+	 * @readonly
+	 */
+	basedir: '/tmp/ucentral',
+
+	/**
+	 * Escape the given string.
+	 *
+	 * Escape any slash and tilde characters in the given string to allow
+	 * using it as part of a JSON pointer expression.
+	 *
+	 * @param {string} s  The string to escape
+	 * @returns {string}  The escaped string
+	 */
+	escape: function(s) {
+		return replace(s, /[~\/]/g, m => (m == '~' ? '~0' : '~1'));
+	},
+
+	/**
+	 * Add a named file attachment.
+	 *
+	 * Stores the given content in a file at the given path. Expands the
+	 * path relative to the `basedir` if it is not absolute.
+	 *
+	 * @param {string} path  The file path
+	 * @param {*} content    The content to store
+	 */
+	add_named: function(path, content) {
+		if (index(path, '/') != 0)
+			path = this.basedir + '/' + path;
+
+		this.files[path] = content;
+	},
+
+	/**
+	 * Add an anonymous file attachment.
+	 *
+	 * Stores the given content in a file with a random name derived from
+	 * the given location pointer and name hint.
+	 *
+	 * @param {string} location  The current location within the state we're traversing
+	 * @param {string} name      The name hint
+	 * @param {*} content        The content to store
+	 *
+	 * @returns {string}
+	 * Returns the generated random file path.
+	 */
+	add_anonymous: function(location, name, content) {
+		let path = this.basedir + '/' + this.escape(location) + '/' + this.escape(name);
+
+		this.files[path] = content;
+
+		return path;
+	},
+
+	/**
+	 * Recursively create the parent directories of the given path.
+	 *
+	 * Recursively creates the parent directory structure of the given
+	 * path and places any error messages in the given logs array.
+	 *
+	 * @param {array} logs   The array to store log messages into
+	 * @param {string} path  The path to create directories for
+	 * @return {boolean}
+	 * Returns `true` if the parent directories were successfully created
+	 * or did already exist, returns `false` in case an error occurred.
+	 */
+	mkdir_path: function(logs, path) {
+		assert(index(path, '/') == 0, "Expecting absolute path");
+
+		let segments = split(path, '/'),
+		    tmppath = shift(segments);
+
+		for (let i = 0; i < length(segments) - 1; i++) {
+			tmppath += '/' + segments[i];
+
+			let s = fs.stat(tmppath);
+
+			if (s != null && s.type == 'directory')
+				continue;
+
+			if (fs.mkdir(tmppath))
+				continue;
+
+			push(logs, sprintf("[E] Unable to mkdir() path '%s': %s", tmppath, fs.error()));
+
+			return false;
+		}
+
+		return true;
+	},
+
+	/**
+	 * Write the staged file attachement contents to the filesystem.
+	 *
+	 * Writes the staged attachment contents that were gathered during state
+	 * rendering to the file system and places any encountered errors into
+	 * the logs array.
+	 *
+	 * @param {array} logs  The array to store error messages into
+	 * @return {boolean}
+	 * Returns `true` if all attachments were written succefully, returns
+	 * `false` if one or more attachments could not be written.
+	 */
+	write: function(logs) {
+		let success = true;
+
+		for (let path, content in this.files) {
+			if (!this.mkdir_path(logs, path)) {
+				success = false;
+				continue;
+			}
+
+			let f = fs.open(path, "w");
+
+			if (f) {
+				f.write(content);
+				f.close();
+			}
+			else {
+				push(logs, sprintf("[E] Unable to open() path '%s' for writing: %s", path, fs.error()));
+				success = false;
+			}
+		}
+
+		return success;
+	}
+};
+
+/**
+ * @class uCentral.shell
+ * @classdesc
+ *
+ * The shell utility class provides high level abstractions for various
+ * shell interaction tasks.
+ */
+
+/** @lends uCentral.shell.prototype */
+
+let shell = {
+	/**
+	 * Set a random root password.
+	 *
+	 * Generate a random passphrase and set it as root password,
+	 * do not change the password if a random password has been
+	 * set already since the last reboot.
+	 */
+	password: function(random) {
+		let passwd = "openwifi";
+
+		if (random) {
+			let math = require("math");
+			passwd = '';
+			for (let i = 0; i < 32; i++) {
+				let r = math.rand() % 62;
+				if (r < 10)
+					passwd += r;
+			else if (r < 36)
+					passwd += sprintf("%c", 55 + r);
+				else
+					passwd += sprintf("%c", 61 + r);
+			}
+		}
+		system("(echo " + passwd + "; sleep 1; echo " + passwd + ") | passwd root");
+		conn.call("ucentral", "password", { passwd });
+	}
+};
+
+/**
+ * @class uCentral.routing_table
+ * @classdesc
+ *
+ * The routing table utility class allows querying system routing tables.
+ */
+
+/** @lends uCentral.routing_table.prototype */
+
+let routing_table = {
+	used_tables: {},
+
+	next: 1,
+
+	/**
+	 * Allocate a route table index for the given ID
+	 *
+	 * @param {string} id  The ID to lookup or reserve
+	 * @returns {number} The table number allocated for the given ID
+	 */
+	get: function(id) {
+		if (!this.used_tables[id])
+			this.used_tables[id] = this.next++;
+		return this.used_tables[id];
+	}
+};
+
+/**
+ * @class uCentral.captive
+ * @classdesc
+ *
+ * The captive portal utility class allows assigning consecutive names to wifi-ifaces.
+ */
+
+/** @lends uCentral.captive.prototype */
+
+let captive = {
+	interfaces: {},
+
+	next: 0,
+
+	/**
+	 * Allocate a route table index for the given ID
+	 *
+	 * @param {string} id  The ID to lookup or reserve
+	 * @returns {number} The table number allocated for the given ID
+	 */
+	get: function(name) {
+		let iface = this.next++;
+		push(this.interfaces[name].iface, iface);
+		return iface;
+	},
+
+	/**
+	 * Add an interface
+	 */
+	interface: function(name, config) {
+		this.interfaces[name] = {};
+		for (let k, v in config)
+			this.interfaces[name][k] = v;
+		this.interfaces[name].iface = [];
+	},
+};
+
+/**
+ * @class uCentral.latency
+ * @classdesc
+ *
+ * The latency measurement utility class allows registering IPs and URLs that will
+ * get pinged periodically to find out the latency.
+ */
+
+/** @lends uCentral.routing_table.prototype */
+
+let latency = {
+	ipv4: [],
+
+	ipv6: [],
+
+	/**
+	 * Add an IP/URL that shall have its latency measured
+	 *
+	 * @param {string} ip/url  The IP/URL to measure
+	 * @param {number} network family
+	 */
+	add: function(host, family) {
+		switch(family) {
+		case 4:
+			push(this.ipv4, host);
+			break;
+		case 6:
+			push(this.ipv6, host);
+			break;
+		}
+	},
+
+	/**
+	 * create the files in /tmp that hold the hosts that we want to measure
+	 */
+	write: function() {
+		for (let family in ['ipv4', 'ipv6']) {
+			let file = fs.open(`/tmp/latency.${family}`, 'w');
+			if (!file) {
+				warn(`failed to open /tmp/latency.${family}\n`);
+				continue;
+			}
+			for (let ip in this[family])
+				file.write(ip + '\n');
+			file.close();
+		}
+	},
+};
+
+/**
+ * @constructs
+ * @name uCentral
+ * @classdesc
+ *
+ * The uCentral namespace is not an actual class but merely a virtual
+ * namespace for documentation purposes.
+ *
+ * From the perspective of a template author, the uCentral namespace
+ * is the global root level scope available to embedded code, so
+ * methods like `uCentral.b()` or `uCentral.info()` or utlity classes
+ * like `uCentral.files` or `uCentral.wiphy` are available to templates
+ * as `b()`, `info()`, `files` and `wiphy` respectively.
+ */
+return /** @lends uCentral.prototype */ {
+	render: function(state, logs) {
+		logs = logs || [];
+
+		/** @lends uCentral.prototype */
+		return render('templates/toplevel.uc', {
+			b,
+			s,
+			tryinclude,
+			state,
+
+			/** @member {uCentral.wiphy} */
+			wiphy,
+
+			/** @member {uCentral.ethernet} */
+			ethernet,
+
+			/** @member {uCentral.ipcalc} */
+			ipcalc,
+
+			/** @member {uCentral.services} */
+			services,
+
+			/** @member {uCentral.local_profile} */
+			local_profile,
+			location: '/',
+			cursor,
+			capab,
+			restrict,
+
+			/** @member {uCentral.files} */
+			files,
+
+			/** @member {uCentral.latency} */
+			latency,
+
+			/** @member {uCentral.shell} */
+			shell,
+
+			/** @member {uCentral.routing_table} */
+			routing_table,
+			serial,
+
+			/** @member {uCentral.captive} */
+			captive,
+
+			/**
+			 * Emit a warning message.
+			 *
+			 * @memberof uCentral.prototype
+			 * @param {string} fmt  The warning message format string
+			 * @param {...*} args	Optional format arguments
+			 */
+			warn: (fmt, ...args) => push(logs, sprintf("[W] (In %s) ", location || '/') + sprintf(fmt, ...args)),
+
+			/**
+			 * Emit an error message.
+			 *
+			 * @memberof uCentral.prototype
+			 * @param {string} fmt  The warning message format string
+			 * @param {...*} args	Optional format arguments
+			 */
+			error: (fmt, ...args) => push(logs, sprintf("[E] (In %s) ", location || '/') + sprintf(fmt, ...args)),
+
+			/**
+			 * Emit an informational message.
+			 *
+			 * @memberof uCentral.prototype
+			 * @param {string} fmt  The information message format string
+			 * @param {...*} args	Optional format arguments
+			 */
+			info: (fmt, ...args) => push(logs, sprintf("[!] (In %s) ", location || '/') + sprintf(fmt, ...args))
+		});
+	},
+
+	write_files: function(logs) {
+		logs = logs || [];
+
+		return files.write(logs);
+	},
+
+	files_state: function() {
+		return files.files;
+	},
+
+	services_state: function() {
+		return services.state;
+	}
+};
diff --git a/ucentral-client/rootfs/usr/share/ucentral/schemareader.uc b/ucentral-client/rootfs/usr/share/ucentral/schemareader.uc
new file mode 100644
index 0000000..b373dea
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/schemareader.uc
@@ -0,0 +1,9947 @@
+// Automatically generated from ./ucentral.schema.pretty.json - do not edit!
+"use strict";
+
+function matchUcCidr4(value) {
+	let m = match(value, /^(auto|[0-9.]+)\/([0-9]+)$/);
+	return m ? ((m[1] == "auto" || length(iptoarr(m[1])) == 4) && +m[2] <= 32) : false;
+}
+
+function matchUcCidr6(value) {
+	let m = match(value, /^(auto|[0-9a-fA-F:.]+)\/([0-9]+)$/);
+	return m ? ((m[1] == "auto" || length(iptoarr(m[1])) == 16) && +m[2] <= 128) : false;
+}
+
+function matchUcCidr(value) {
+	let m = match(value, /^(auto|[0-9a-fA-F:.]+)\/([0-9]+)$/);
+	if (!m) return false;
+	let l = (m[1] == "auto") ? 16 : length(iptoarr(m[1]));
+	return (l > 0 && +m[2] <= (l * 8));
+}
+
+function matchUcMac(value) {
+	return match(value, /^[0-9a-f][0-9a-f]:[0-9a-f][0-9a-f]:[0-9a-f][0-9a-f]:[0-9a-f][0-9a-f]:[0-9a-f][0-9a-f]:[0-9a-f][0-9a-f]$/i);
+}
+
+function matchUcMobility(value) {
+	return match(value, /^[0-9a-f][0-9a-f][0-9a-f][0-9a-f]$/i);
+}
+
+function matchUcHost(value) {
+	if (length(iptoarr(value)) != 0) return true;
+	if (length(value) > 255) return false;
+	let labels = split(value, ".");
+	return (length(filter(labels, label => !match(label, /^([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]{0,61}[a-zA-Z0-9])$/))) == 0 && length(labels) > 0);
+}
+
+function matchUcTimeout(value) {
+	return match(value, /^[0-9]+[smhdw]$/);
+}
+
+function matchUcBase64(value) {
+	return b64dec(value) != null;
+}
+
+function matchUcPortrange(value) {
+	let ports = match(value, /^([0-9]|[1-9][0-9]*)(-([0-9]|[1-9][0-9]*))?$/);
+	if (!ports) return false;
+	let min = +ports[1], max = ports[2] ? +ports[3] : min;
+	return (min <= 65535 && max <= 65535 && max >= min);
+}
+
+function matchHostname(value) {
+	if (length(value) > 255) return false;
+	let labels = split(value, ".");
+	return (length(filter(labels, label => !match(label, /^([a-zA-Z0-9]{1,2}|[a-zA-Z0-9][a-zA-Z0-9-]{0,61}[a-zA-Z0-9])$/))) == 0 && length(labels) > 0);
+}
+
+function matchUcFqdn(value) {
+	if (length(value) > 255) return false;
+	let labels = split(value, ".");
+	return (length(filter(labels, label => !match(label, /^([a-zA-Z0-9]{1,2}|[a-zA-Z0-9][a-zA-Z0-9-]{0,61}[a-zA-Z0-9])$/))) == 0 && length(labels) > 1);
+}
+
+function matchUcIp(value) {
+	return (length(iptoarr(value)) == 4 || length(iptoarr(value)) == 16);
+}
+
+function matchIpv4(value) {
+	return (length(iptoarr(value)) == 4);
+}
+
+function matchIpv6(value) {
+	return (length(iptoarr(value)) == 16);
+}
+
+function matchUri(value) {
+	if (index(value, "data:") == 0) return true;
+	let m = match(value, /^[a-z+-]+:\/\/([^\/]+).*$/);
+	if (!m) return false;
+	if (length(iptoarr(m[1])) != 0) return true;
+	if (length(m[1]) > 255) return false;
+	let labels = split(m[1], ".");
+	return (length(filter(labels, label => !match(label, /^([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]{0,61}[a-zA-Z0-9])$/))) == 0 && length(labels) > 0);
+}
+
+function instantiateUnit(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseName(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "name")) {
+			obj.name = parseName(location + "/name", value["name"], errors);
+		}
+
+		function parseHostname(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchHostname(value))
+					push(errors, [ location, "must be a valid hostname" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "hostname")) {
+			obj.hostname = parseHostname(location + "/hostname", value["hostname"], errors);
+		}
+
+		function parseLocation(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "location")) {
+			obj.location = parseLocation(location + "/location", value["location"], errors);
+		}
+
+		function parseTimezone(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "timezone")) {
+			obj.timezone = parseTimezone(location + "/timezone", value["timezone"], errors);
+		}
+
+		function parseLedsActive(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "leds-active")) {
+			obj.leds_active = parseLedsActive(location + "/leds-active", value["leds-active"], errors);
+		}
+		else {
+			obj.leds_active = true;
+		}
+
+		function parseRandomPassword(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "random-password")) {
+			obj.random_password = parseRandomPassword(location + "/random-password", value["random-password"], errors);
+		}
+		else {
+			obj.random_password = false;
+		}
+
+		function parseBeaconAdvertisement(location, value, errors) {
+			if (type(value) == "object") {
+				let obj = {};
+
+				function parseDeviceName(location, value, errors) {
+					if (type(value) != "bool")
+						push(errors, [ location, "must be of type boolean" ]);
+
+					return value;
+				}
+
+				if (exists(value, "device-name")) {
+					obj.device_name = parseDeviceName(location + "/device-name", value["device-name"], errors);
+				}
+
+				function parseDeviceSerial(location, value, errors) {
+					if (type(value) != "bool")
+						push(errors, [ location, "must be of type boolean" ]);
+
+					return value;
+				}
+
+				if (exists(value, "device-serial")) {
+					obj.device_serial = parseDeviceSerial(location + "/device-serial", value["device-serial"], errors);
+				}
+
+				function parseNetworkId(location, value, errors) {
+					if (type(value) != "int")
+						push(errors, [ location, "must be of type integer" ]);
+
+					return value;
+				}
+
+				if (exists(value, "network-id")) {
+					obj.network_id = parseNetworkId(location + "/network-id", value["network-id"], errors);
+				}
+
+				return obj;
+			}
+
+			if (type(value) != "object")
+				push(errors, [ location, "must be of type object" ]);
+
+			return value;
+		}
+
+		if (exists(value, "beacon-advertisement")) {
+			obj.beacon_advertisement = parseBeaconAdvertisement(location + "/beacon-advertisement", value["beacon-advertisement"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateGlobalsWirelessMultimediaClassSelector(location, value, errors) {
+	if (type(value) == "array") {
+		function parseItem(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "CS0", "CS1", "CS2", "CS3", "CS4", "CS5", "CS6", "CS7", "AF11", "AF12", "AF13", "AF21", "AF22", "AF23", "AF31", "AF32", "AF33", "AF41", "AF42", "AF43", "DF", "EF", "VA", "LE" ]))
+				push(errors, [ location, "must be one of \"CS0\", \"CS1\", \"CS2\", \"CS3\", \"CS4\", \"CS5\", \"CS6\", \"CS7\", \"AF11\", \"AF12\", \"AF13\", \"AF21\", \"AF22\", \"AF23\", \"AF31\", \"AF32\", \"AF33\", \"AF41\", \"AF42\", \"AF43\", \"DF\", \"EF\", \"VA\" or \"LE\"" ]);
+
+			return value;
+		}
+
+		return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+	}
+
+	if (type(value) != "array")
+		push(errors, [ location, "must be of type array" ]);
+
+	return value;
+}
+
+function instantiateGlobalsWirelessMultimediaTable(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		if (exists(value, "UP0")) {
+			obj.UP0 = instantiateGlobalsWirelessMultimediaClassSelector(location + "/UP0", value["UP0"], errors);
+		}
+
+		if (exists(value, "UP1")) {
+			obj.UP1 = instantiateGlobalsWirelessMultimediaClassSelector(location + "/UP1", value["UP1"], errors);
+		}
+
+		if (exists(value, "UP2")) {
+			obj.UP2 = instantiateGlobalsWirelessMultimediaClassSelector(location + "/UP2", value["UP2"], errors);
+		}
+
+		if (exists(value, "UP3")) {
+			obj.UP3 = instantiateGlobalsWirelessMultimediaClassSelector(location + "/UP3", value["UP3"], errors);
+		}
+
+		if (exists(value, "UP4")) {
+			obj.UP4 = instantiateGlobalsWirelessMultimediaClassSelector(location + "/UP4", value["UP4"], errors);
+		}
+
+		if (exists(value, "UP5")) {
+			obj.UP5 = instantiateGlobalsWirelessMultimediaClassSelector(location + "/UP5", value["UP5"], errors);
+		}
+
+		if (exists(value, "UP6")) {
+			obj.UP6 = instantiateGlobalsWirelessMultimediaClassSelector(location + "/UP6", value["UP6"], errors);
+		}
+
+		if (exists(value, "UP7")) {
+			obj.UP7 = instantiateGlobalsWirelessMultimediaClassSelector(location + "/UP7", value["UP7"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateGlobalsWirelessMultimediaProfile(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseProfile(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "enterprise", "rfc8325", "3gpp" ]))
+				push(errors, [ location, "must be one of \"enterprise\", \"rfc8325\" or \"3gpp\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "profile")) {
+			obj.profile = parseProfile(location + "/profile", value["profile"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateGlobals(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseIpv4Network(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcCidr4(value))
+					push(errors, [ location, "must be a valid IPv4 CIDR" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "ipv4-network")) {
+			obj.ipv4_network = parseIpv4Network(location + "/ipv4-network", value["ipv4-network"], errors);
+		}
+
+		function parseIpv6Network(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcCidr6(value))
+					push(errors, [ location, "must be a valid IPv6 CIDR" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "ipv6-network")) {
+			obj.ipv6_network = parseIpv6Network(location + "/ipv6-network", value["ipv6-network"], errors);
+		}
+
+		function parseWirelessMultimedia(location, value, errors) {
+			function parseVariant0(location, value, errors) {
+				value = instantiateGlobalsWirelessMultimediaTable(location, value, errors);
+
+				return value;
+			}
+
+			function parseVariant1(location, value, errors) {
+				value = instantiateGlobalsWirelessMultimediaProfile(location, value, errors);
+
+				return value;
+			}
+
+			let success = 0, tryval, tryerr, vvalue = null, verrors = [];
+
+			tryerr = [];
+			tryval = parseVariant0(location, value, tryerr);
+			if (!length(tryerr)) {
+				if (type(vvalue) == "object" && type(tryval) == "object")
+					vvalue = { ...vvalue, ...tryval };
+				else
+					vvalue = tryval;
+
+				success++;
+			}
+			else {
+				push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+			}
+
+			tryerr = [];
+			tryval = parseVariant1(location, value, tryerr);
+			if (!length(tryerr)) {
+				if (type(vvalue) == "object" && type(tryval) == "object")
+					vvalue = { ...vvalue, ...tryval };
+				else
+					vvalue = tryval;
+
+				success++;
+			}
+			else {
+				push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+			}
+
+			if (success == 0) {
+				if (length(verrors))
+					push(errors, [ location, "must match at least one of the following constraints:\n" + join("\n- or -\n", verrors) ]);
+				else
+					push(errors, [ location, "must match only one variant" ]);
+				return null;
+			}
+
+			value = vvalue;
+
+			return value;
+		}
+
+		if (exists(value, "wireless-multimedia")) {
+			obj.wireless_multimedia = parseWirelessMultimedia(location + "/wireless-multimedia", value["wireless-multimedia"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceSsidEncryption(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseProto(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "none", "owe", "owe-transition", "psk", "psk2", "psk-mixed", "psk2-radius", "wpa", "wpa2", "wpa-mixed", "sae", "sae-mixed", "wpa3", "wpa3-192", "wpa3-mixed" ]))
+				push(errors, [ location, "must be one of \"none\", \"owe\", \"owe-transition\", \"psk\", \"psk2\", \"psk-mixed\", \"psk2-radius\", \"wpa\", \"wpa2\", \"wpa-mixed\", \"sae\", \"sae-mixed\", \"wpa3\", \"wpa3-192\" or \"wpa3-mixed\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "proto")) {
+			obj.proto = parseProto(location + "/proto", value["proto"], errors);
+		}
+
+		function parseKey(location, value, errors) {
+			if (type(value) == "string") {
+				if (length(value) > 63)
+					push(errors, [ location, "must be at most 63 characters long" ]);
+
+				if (length(value) < 8)
+					push(errors, [ location, "must be at least 8 characters long" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "key")) {
+			obj.key = parseKey(location + "/key", value["key"], errors);
+		}
+
+		function parseIeee80211w(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "disabled", "optional", "required" ]))
+				push(errors, [ location, "must be one of \"disabled\", \"optional\" or \"required\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "ieee80211w")) {
+			obj.ieee80211w = parseIeee80211w(location + "/ieee80211w", value["ieee80211w"], errors);
+		}
+		else {
+			obj.ieee80211w = "disabled";
+		}
+
+		function parseKeyCaching(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "key-caching")) {
+			obj.key_caching = parseKeyCaching(location + "/key-caching", value["key-caching"], errors);
+		}
+		else {
+			obj.key_caching = true;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateDefinitions(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseWirelessEncryption(location, value, errors) {
+			if (type(value) != "object")
+				push(errors, [ location, "must be of type object" ]);
+
+			return value;
+		}
+
+		if (exists(value, "wireless-encryption")) {
+			obj.wireless_encryption = parseWirelessEncryption(location + "/wireless-encryption", value["wireless-encryption"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateEthernet(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseSelectPorts(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "select-ports")) {
+			obj.select_ports = parseSelectPorts(location + "/select-ports", value["select-ports"], errors);
+		}
+
+		function parseSpeed(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			if (!(value in [ 10, 100, 1000, 2500, 5000, 10000 ]))
+				push(errors, [ location, "must be one of 10, 100, 1000, 2500, 5000 or 10000" ]);
+
+			return value;
+		}
+
+		if (exists(value, "speed")) {
+			obj.speed = parseSpeed(location + "/speed", value["speed"], errors);
+		}
+
+		function parseEnabled(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "enabled")) {
+			obj.enabled = parseEnabled(location + "/enabled", value["enabled"], errors);
+		}
+		else {
+			obj.enabled = true;
+		}
+
+		function parseServices(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "services")) {
+			obj.services = parseServices(location + "/services", value["services"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateSwitch(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parsePortMirror(location, value, errors) {
+			if (type(value) == "object") {
+				let obj = {};
+
+				function parseMonitorPorts(location, value, errors) {
+					if (type(value) == "array") {
+						function parseItem(location, value, errors) {
+							if (type(value) != "string")
+								push(errors, [ location, "must be of type string" ]);
+
+							return value;
+						}
+
+						return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+					}
+
+					if (type(value) != "array")
+						push(errors, [ location, "must be of type array" ]);
+
+					return value;
+				}
+
+				if (exists(value, "monitor-ports")) {
+					obj.monitor_ports = parseMonitorPorts(location + "/monitor-ports", value["monitor-ports"], errors);
+				}
+
+				function parseAnalysisPort(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				if (exists(value, "analysis-port")) {
+					obj.analysis_port = parseAnalysisPort(location + "/analysis-port", value["analysis-port"], errors);
+				}
+
+				return obj;
+			}
+
+			if (type(value) != "object")
+				push(errors, [ location, "must be of type object" ]);
+
+			return value;
+		}
+
+		if (exists(value, "port-mirror")) {
+			obj.port_mirror = parsePortMirror(location + "/port-mirror", value["port-mirror"], errors);
+		}
+
+		function parseLoopDetection(location, value, errors) {
+			if (type(value) == "object") {
+				let obj = {};
+
+				function parseProtocol(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					if (!(value in [ "rstp" ]))
+						push(errors, [ location, "must be one of \"rstp\"" ]);
+
+					return value;
+				}
+
+				if (exists(value, "protocol")) {
+					obj.protocol = parseProtocol(location + "/protocol", value["protocol"], errors);
+				}
+				else {
+					obj.protocol = "rstp";
+				}
+
+				function parseRoles(location, value, errors) {
+					if (type(value) == "array") {
+						function parseItem(location, value, errors) {
+							if (type(value) != "string")
+								push(errors, [ location, "must be of type string" ]);
+
+							if (!(value in [ "upstream", "downstream" ]))
+								push(errors, [ location, "must be one of \"upstream\" or \"downstream\"" ]);
+
+							return value;
+						}
+
+						return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+					}
+
+					if (type(value) != "array")
+						push(errors, [ location, "must be of type array" ]);
+
+					return value;
+				}
+
+				if (exists(value, "roles")) {
+					obj.roles = parseRoles(location + "/roles", value["roles"], errors);
+				}
+
+				return obj;
+			}
+
+			if (type(value) != "object")
+				push(errors, [ location, "must be of type object" ]);
+
+			return value;
+		}
+
+		if (exists(value, "loop-detection")) {
+			obj.loop_detection = parseLoopDetection(location + "/loop-detection", value["loop-detection"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateRadioRates(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseBeacon(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			if (!(value in [ 0, 1000, 2000, 5500, 6000, 9000, 11000, 12000, 18000, 24000, 36000, 48000, 54000 ]))
+				push(errors, [ location, "must be one of 0, 1000, 2000, 5500, 6000, 9000, 11000, 12000, 18000, 24000, 36000, 48000 or 54000" ]);
+
+			return value;
+		}
+
+		if (exists(value, "beacon")) {
+			obj.beacon = parseBeacon(location + "/beacon", value["beacon"], errors);
+		}
+		else {
+			obj.beacon = 6000;
+		}
+
+		function parseMulticast(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			if (!(value in [ 0, 1000, 2000, 5500, 6000, 9000, 11000, 12000, 18000, 24000, 36000, 48000, 54000 ]))
+				push(errors, [ location, "must be one of 0, 1000, 2000, 5500, 6000, 9000, 11000, 12000, 18000, 24000, 36000, 48000 or 54000" ]);
+
+			return value;
+		}
+
+		if (exists(value, "multicast")) {
+			obj.multicast = parseMulticast(location + "/multicast", value["multicast"], errors);
+		}
+		else {
+			obj.multicast = 24000;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateRadioHe(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseMultipleBssid(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "multiple-bssid")) {
+			obj.multiple_bssid = parseMultipleBssid(location + "/multiple-bssid", value["multiple-bssid"], errors);
+		}
+		else {
+			obj.multiple_bssid = false;
+		}
+
+		function parseEma(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "ema")) {
+			obj.ema = parseEma(location + "/ema", value["ema"], errors);
+		}
+		else {
+			obj.ema = false;
+		}
+
+		function parseBssColor(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 64)
+					push(errors, [ location, "must be lower than or equal to 64" ]);
+
+				if (value < 0)
+					push(errors, [ location, "must be bigger than or equal to 0" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "bss-color")) {
+			obj.bss_color = parseBssColor(location + "/bss-color", value["bss-color"], errors);
+		}
+		else {
+			obj.bss_color = 0;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateRadioHe6ghz(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parsePowerType(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "indoor-power-indoor", "standard-power", "very-low-power" ]))
+				push(errors, [ location, "must be one of \"indoor-power-indoor\", \"standard-power\" or \"very-low-power\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "power-type")) {
+			obj.power_type = parsePowerType(location + "/power-type", value["power-type"], errors);
+		}
+		else {
+			obj.power_type = "very-low-power";
+		}
+
+		function parseController(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "controller")) {
+			obj.controller = parseController(location + "/controller", value["controller"], errors);
+		}
+
+		function parseCaCertificate(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcBase64(value))
+					push(errors, [ location, "must be a valid base64 encoded data" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "ca-certificate")) {
+			obj.ca_certificate = parseCaCertificate(location + "/ca-certificate", value["ca-certificate"], errors);
+		}
+
+		function parseSerialNumber(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "serial-number")) {
+			obj.serial_number = parseSerialNumber(location + "/serial-number", value["serial-number"], errors);
+		}
+
+		function parseRequestId(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "request-id")) {
+			obj.request_id = parseRequestId(location + "/request-id", value["request-id"], errors);
+		}
+
+		function parseCertificateIds(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "certificate-ids")) {
+			obj.certificate_ids = parseCertificateIds(location + "/certificate-ids", value["certificate-ids"], errors);
+		}
+
+		function parseMinimumPower(location, value, errors) {
+			if (!(type(value) in [ "int", "double" ]))
+				push(errors, [ location, "must be of type number" ]);
+
+			return value;
+		}
+
+		if (exists(value, "minimum-power")) {
+			obj.minimum_power = parseMinimumPower(location + "/minimum-power", value["minimum-power"], errors);
+		}
+
+		function parseFrequencyRanges(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "frequency-ranges")) {
+			obj.frequency_ranges = parseFrequencyRanges(location + "/frequency-ranges", value["frequency-ranges"], errors);
+		}
+
+		function parseOperatingClasses(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (!(type(value) in [ "int", "double" ]))
+						push(errors, [ location, "must be of type number" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "operating-classes")) {
+			obj.operating_classes = parseOperatingClasses(location + "/operating-classes", value["operating-classes"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateRadio(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseBand(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "2G", "5G", "5G-lower", "5G-upper", "6G" ]))
+				push(errors, [ location, "must be one of \"2G\", \"5G\", \"5G-lower\", \"5G-upper\" or \"6G\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "band")) {
+			obj.band = parseBand(location + "/band", value["band"], errors);
+		}
+
+		function parseBandwidth(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			if (!(value in [ 5, 10, 20 ]))
+				push(errors, [ location, "must be one of 5, 10 or 20" ]);
+
+			return value;
+		}
+
+		if (exists(value, "bandwidth")) {
+			obj.bandwidth = parseBandwidth(location + "/bandwidth", value["bandwidth"], errors);
+		}
+
+		function parseChannel(location, value, errors) {
+			function parseVariant0(location, value, errors) {
+				if (type(value) in [ "int", "double" ]) {
+					if (value > 196)
+						push(errors, [ location, "must be lower than or equal to 196" ]);
+
+					if (value < 1)
+						push(errors, [ location, "must be bigger than or equal to 1" ]);
+
+				}
+
+				if (type(value) != "int")
+					push(errors, [ location, "must be of type integer" ]);
+
+				return value;
+			}
+
+			function parseVariant1(location, value, errors) {
+				if (type(value) != "string")
+					push(errors, [ location, "must be of type string" ]);
+
+				if (value != "auto")
+					push(errors, [ location, "must have value \"auto\"" ]);
+
+				return value;
+			}
+
+			let success = 0, tryval, tryerr, vvalue = null, verrors = [];
+
+			tryerr = [];
+			tryval = parseVariant0(location, value, tryerr);
+			if (!length(tryerr)) {
+				if (type(vvalue) == "object" && type(tryval) == "object")
+					vvalue = { ...vvalue, ...tryval };
+				else
+					vvalue = tryval;
+
+				success++;
+			}
+			else {
+				push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+			}
+
+			tryerr = [];
+			tryval = parseVariant1(location, value, tryerr);
+			if (!length(tryerr)) {
+				if (type(vvalue) == "object" && type(tryval) == "object")
+					vvalue = { ...vvalue, ...tryval };
+				else
+					vvalue = tryval;
+
+				success++;
+			}
+			else {
+				push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+			}
+
+			if (success != 1) {
+				if (length(verrors))
+					push(errors, [ location, "must match exactly one of the following constraints:\n" + join("\n- or -\n", verrors) ]);
+				else
+					push(errors, [ location, "must match only one variant" ]);
+				return null;
+			}
+
+			value = vvalue;
+
+			return value;
+		}
+
+		if (exists(value, "channel")) {
+			obj.channel = parseChannel(location + "/channel", value["channel"], errors);
+		}
+
+		function parseValidChannels(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) in [ "int", "double" ]) {
+						if (value > 196)
+							push(errors, [ location, "must be lower than or equal to 196" ]);
+
+						if (value < 1)
+							push(errors, [ location, "must be bigger than or equal to 1" ]);
+
+					}
+
+					if (type(value) != "int")
+						push(errors, [ location, "must be of type integer" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "valid-channels")) {
+			obj.valid_channels = parseValidChannels(location + "/valid-channels", value["valid-channels"], errors);
+		}
+
+		function parseAcsExclude6ghzNonPsc(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "acs-exclude-6ghz-non-psc")) {
+			obj.acs_exclude_6ghz_non_psc = parseAcsExclude6ghzNonPsc(location + "/acs-exclude-6ghz-non-psc", value["acs-exclude-6ghz-non-psc"], errors);
+		}
+		else {
+			obj.acs_exclude_6ghz_non_psc = false;
+		}
+
+		function parseCountry(location, value, errors) {
+			if (type(value) == "string") {
+				if (length(value) > 2)
+					push(errors, [ location, "must be at most 2 characters long" ]);
+
+				if (length(value) < 2)
+					push(errors, [ location, "must be at least 2 characters long" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "country")) {
+			obj.country = parseCountry(location + "/country", value["country"], errors);
+		}
+
+		function parseAllowDfs(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "allow-dfs")) {
+			obj.allow_dfs = parseAllowDfs(location + "/allow-dfs", value["allow-dfs"], errors);
+		}
+		else {
+			obj.allow_dfs = true;
+		}
+
+		function parseChannelMode(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "HT", "VHT", "HE", "EHT" ]))
+				push(errors, [ location, "must be one of \"HT\", \"VHT\", \"HE\" or \"EHT\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "channel-mode")) {
+			obj.channel_mode = parseChannelMode(location + "/channel-mode", value["channel-mode"], errors);
+		}
+		else {
+			obj.channel_mode = "HE";
+		}
+
+		function parseChannelWidth(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			if (!(value in [ 20, 40, 80, 160, 320, 8080 ]))
+				push(errors, [ location, "must be one of 20, 40, 80, 160, 320 or 8080" ]);
+
+			return value;
+		}
+
+		if (exists(value, "channel-width")) {
+			obj.channel_width = parseChannelWidth(location + "/channel-width", value["channel-width"], errors);
+		}
+		else {
+			obj.channel_width = 80;
+		}
+
+		function parseRequireMode(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "HT", "VHT", "HE" ]))
+				push(errors, [ location, "must be one of \"HT\", \"VHT\" or \"HE\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "require-mode")) {
+			obj.require_mode = parseRequireMode(location + "/require-mode", value["require-mode"], errors);
+		}
+
+		function parseMimo(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "1x1", "2x2", "3x3", "4x4", "5x5", "6x6", "7x7", "8x8" ]))
+				push(errors, [ location, "must be one of \"1x1\", \"2x2\", \"3x3\", \"4x4\", \"5x5\", \"6x6\", \"7x7\" or \"8x8\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "mimo")) {
+			obj.mimo = parseMimo(location + "/mimo", value["mimo"], errors);
+		}
+
+		function parseTxPower(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 30)
+					push(errors, [ location, "must be lower than or equal to 30" ]);
+
+				if (value < 0)
+					push(errors, [ location, "must be bigger than or equal to 0" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "tx-power")) {
+			obj.tx_power = parseTxPower(location + "/tx-power", value["tx-power"], errors);
+		}
+
+		function parseLegacyRates(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "legacy-rates")) {
+			obj.legacy_rates = parseLegacyRates(location + "/legacy-rates", value["legacy-rates"], errors);
+		}
+		else {
+			obj.legacy_rates = false;
+		}
+
+		function parseBeaconInterval(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 15)
+					push(errors, [ location, "must be bigger than or equal to 15" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "beacon-interval")) {
+			obj.beacon_interval = parseBeaconInterval(location + "/beacon-interval", value["beacon-interval"], errors);
+		}
+		else {
+			obj.beacon_interval = 100;
+		}
+
+		function parseMaximumClients(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "maximum-clients")) {
+			obj.maximum_clients = parseMaximumClients(location + "/maximum-clients", value["maximum-clients"], errors);
+		}
+
+		function parseMaximumClientsIgnoreProbe(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "maximum-clients-ignore-probe")) {
+			obj.maximum_clients_ignore_probe = parseMaximumClientsIgnoreProbe(location + "/maximum-clients-ignore-probe", value["maximum-clients-ignore-probe"], errors);
+		}
+
+		if (exists(value, "rates")) {
+			obj.rates = instantiateRadioRates(location + "/rates", value["rates"], errors);
+		}
+
+		if (exists(value, "he-settings")) {
+			obj.he_settings = instantiateRadioHe(location + "/he-settings", value["he-settings"], errors);
+		}
+
+		if (exists(value, "he-6ghz-settings")) {
+			obj.he_6ghz_settings = instantiateRadioHe6ghz(location + "/he-6ghz-settings", value["he-6ghz-settings"], errors);
+		}
+
+		function parseHostapdIfaceRaw(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "hostapd-iface-raw")) {
+			obj.hostapd_iface_raw = parseHostapdIfaceRaw(location + "/hostapd-iface-raw", value["hostapd-iface-raw"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceVlan(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseId(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 4050)
+					push(errors, [ location, "must be lower than or equal to 4050" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "id")) {
+			obj.id = parseId(location + "/id", value["id"], errors);
+		}
+
+		function parseProto(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "802.1ad", "802.1q" ]))
+				push(errors, [ location, "must be one of \"802.1ad\" or \"802.1q\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "proto")) {
+			obj.proto = parseProto(location + "/proto", value["proto"], errors);
+		}
+		else {
+			obj.proto = "802.1q";
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceBridge(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseMtu(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 256)
+					push(errors, [ location, "must be bigger than or equal to 256" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "mtu")) {
+			obj.mtu = parseMtu(location + "/mtu", value["mtu"], errors);
+		}
+
+		function parseTxQueueLen(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "tx-queue-len")) {
+			obj.tx_queue_len = parseTxQueueLen(location + "/tx-queue-len", value["tx-queue-len"], errors);
+		}
+
+		function parseIsolatePorts(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "isolate-ports")) {
+			obj.isolate_ports = parseIsolatePorts(location + "/isolate-ports", value["isolate-ports"], errors);
+		}
+		else {
+			obj.isolate_ports = false;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceEthernet(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseSelectPorts(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "select-ports")) {
+			obj.select_ports = parseSelectPorts(location + "/select-ports", value["select-ports"], errors);
+		}
+
+		function parseMulticast(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "multicast")) {
+			obj.multicast = parseMulticast(location + "/multicast", value["multicast"], errors);
+		}
+		else {
+			obj.multicast = true;
+		}
+
+		function parseLearning(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "learning")) {
+			obj.learning = parseLearning(location + "/learning", value["learning"], errors);
+		}
+		else {
+			obj.learning = true;
+		}
+
+		function parseIsolate(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "isolate")) {
+			obj.isolate = parseIsolate(location + "/isolate", value["isolate"], errors);
+		}
+		else {
+			obj.isolate = false;
+		}
+
+		function parseMacaddr(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcMac(value))
+					push(errors, [ location, "must be a valid MAC address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "macaddr")) {
+			obj.macaddr = parseMacaddr(location + "/macaddr", value["macaddr"], errors);
+		}
+
+		function parseReversePathFilter(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "reverse-path-filter")) {
+			obj.reverse_path_filter = parseReversePathFilter(location + "/reverse-path-filter", value["reverse-path-filter"], errors);
+		}
+		else {
+			obj.reverse_path_filter = false;
+		}
+
+		function parseVlanTag(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "tagged", "un-tagged", "auto" ]))
+				push(errors, [ location, "must be one of \"tagged\", \"un-tagged\" or \"auto\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "vlan-tag")) {
+			obj.vlan_tag = parseVlanTag(location + "/vlan-tag", value["vlan-tag"], errors);
+		}
+		else {
+			obj.vlan_tag = "auto";
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceIpv4Dhcp(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseLeaseFirst(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "lease-first")) {
+			obj.lease_first = parseLeaseFirst(location + "/lease-first", value["lease-first"], errors);
+		}
+
+		function parseLeaseCount(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "lease-count")) {
+			obj.lease_count = parseLeaseCount(location + "/lease-count", value["lease-count"], errors);
+		}
+
+		function parseLeaseTime(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcTimeout(value))
+					push(errors, [ location, "must be a valid timeout value" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "lease-time")) {
+			obj.lease_time = parseLeaseTime(location + "/lease-time", value["lease-time"], errors);
+		}
+		else {
+			obj.lease_time = "6h";
+		}
+
+		function parseUseDns(location, value, errors) {
+			function parseVariant0(location, value, errors) {
+				if (type(value) == "string") {
+					if (!matchIpv4(value))
+						push(errors, [ location, "must be a valid IPv4 address" ]);
+
+				}
+
+				if (type(value) != "string")
+					push(errors, [ location, "must be of type string" ]);
+
+				return value;
+			}
+
+			function parseVariant1(location, value, errors) {
+				if (type(value) == "array") {
+					function parseItem(location, value, errors) {
+						if (type(value) == "string") {
+							if (!matchIpv4(value))
+								push(errors, [ location, "must be a valid IPv4 address" ]);
+
+						}
+
+						if (type(value) != "string")
+							push(errors, [ location, "must be of type string" ]);
+
+						return value;
+					}
+
+					return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+				}
+
+				if (type(value) != "array")
+					push(errors, [ location, "must be of type array" ]);
+
+				return value;
+			}
+
+			let success = 0, tryval, tryerr, vvalue = null, verrors = [];
+
+			tryerr = [];
+			tryval = parseVariant0(location, value, tryerr);
+			if (!length(tryerr)) {
+				if (type(vvalue) == "object" && type(tryval) == "object")
+					vvalue = { ...vvalue, ...tryval };
+				else
+					vvalue = tryval;
+
+				success++;
+			}
+			else {
+				push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+			}
+
+			tryerr = [];
+			tryval = parseVariant1(location, value, tryerr);
+			if (!length(tryerr)) {
+				if (type(vvalue) == "object" && type(tryval) == "object")
+					vvalue = { ...vvalue, ...tryval };
+				else
+					vvalue = tryval;
+
+				success++;
+			}
+			else {
+				push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+			}
+
+			if (success == 0) {
+				if (length(verrors))
+					push(errors, [ location, "must match at least one of the following constraints:\n" + join("\n- or -\n", verrors) ]);
+				else
+					push(errors, [ location, "must match only one variant" ]);
+				return null;
+			}
+
+			value = vvalue;
+
+			return value;
+		}
+
+		if (exists(value, "use-dns")) {
+			obj.use_dns = parseUseDns(location + "/use-dns", value["use-dns"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceIpv4DhcpLease(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseMacaddr(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcMac(value))
+					push(errors, [ location, "must be a valid MAC address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "macaddr")) {
+			obj.macaddr = parseMacaddr(location + "/macaddr", value["macaddr"], errors);
+		}
+
+		function parseStaticLeaseOffset(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "static-lease-offset")) {
+			obj.static_lease_offset = parseStaticLeaseOffset(location + "/static-lease-offset", value["static-lease-offset"], errors);
+		}
+
+		function parseLeaseTime(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcTimeout(value))
+					push(errors, [ location, "must be a valid timeout value" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "lease-time")) {
+			obj.lease_time = parseLeaseTime(location + "/lease-time", value["lease-time"], errors);
+		}
+		else {
+			obj.lease_time = "6h";
+		}
+
+		function parsePublishHostname(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "publish-hostname")) {
+			obj.publish_hostname = parsePublishHostname(location + "/publish-hostname", value["publish-hostname"], errors);
+		}
+		else {
+			obj.publish_hostname = true;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceIpv4PortForward(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseProtocol(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "tcp", "udp", "any" ]))
+				push(errors, [ location, "must be one of \"tcp\", \"udp\" or \"any\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "protocol")) {
+			obj.protocol = parseProtocol(location + "/protocol", value["protocol"], errors);
+		}
+		else {
+			obj.protocol = "any";
+		}
+
+		function parseExternalPort(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 0)
+					push(errors, [ location, "must be bigger than or equal to 0" ]);
+
+			}
+
+			if (type(value) == "string") {
+				if (!matchUcPortrange(value))
+					push(errors, [ location, "must be a valid network port range" ]);
+
+			}
+
+			if (type(value) != "int" && type(value) != "string")
+				push(errors, [ location, "must be of type integer or string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "external-port")) {
+			obj.external_port = parseExternalPort(location + "/external-port", value["external-port"], errors);
+		}
+		else {
+			push(errors, [ location, "is required" ]);
+		}
+
+		function parseInternalAddress(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchIpv4(value))
+					push(errors, [ location, "must be a valid IPv4 address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "internal-address")) {
+			obj.internal_address = parseInternalAddress(location + "/internal-address", value["internal-address"], errors);
+		}
+		else {
+			push(errors, [ location, "is required" ]);
+		}
+
+		function parseInternalPort(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 0)
+					push(errors, [ location, "must be bigger than or equal to 0" ]);
+
+			}
+
+			if (type(value) == "string") {
+				if (!matchUcPortrange(value))
+					push(errors, [ location, "must be a valid network port range" ]);
+
+			}
+
+			if (type(value) != "int" && type(value) != "string")
+				push(errors, [ location, "must be of type integer or string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "internal-port")) {
+			obj.internal_port = parseInternalPort(location + "/internal-port", value["internal-port"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceIpv4(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseAddressing(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "dynamic", "static", "none" ]))
+				push(errors, [ location, "must be one of \"dynamic\", \"static\" or \"none\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "addressing")) {
+			obj.addressing = parseAddressing(location + "/addressing", value["addressing"], errors);
+		}
+
+		function parseSubnet(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcCidr4(value))
+					push(errors, [ location, "must be a valid IPv4 CIDR" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "subnet")) {
+			obj.subnet = parseSubnet(location + "/subnet", value["subnet"], errors);
+		}
+
+		function parseGateway(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchIpv4(value))
+					push(errors, [ location, "must be a valid IPv4 address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "gateway")) {
+			obj.gateway = parseGateway(location + "/gateway", value["gateway"], errors);
+		}
+
+		function parseSendHostname(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "send-hostname")) {
+			obj.send_hostname = parseSendHostname(location + "/send-hostname", value["send-hostname"], errors);
+		}
+		else {
+			obj.send_hostname = true;
+		}
+
+		function parseUseDns(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) == "string") {
+						if (!matchIpv4(value))
+							push(errors, [ location, "must be a valid IPv4 address" ]);
+
+					}
+
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "use-dns")) {
+			obj.use_dns = parseUseDns(location + "/use-dns", value["use-dns"], errors);
+		}
+
+		function parseDisallowUpstreamSubnet(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) == "string") {
+						if (!matchUcCidr4(value))
+							push(errors, [ location, "must be a valid IPv4 CIDR" ]);
+
+					}
+
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "disallow-upstream-subnet")) {
+			obj.disallow_upstream_subnet = parseDisallowUpstreamSubnet(location + "/disallow-upstream-subnet", value["disallow-upstream-subnet"], errors);
+		}
+
+		if (exists(value, "dhcp")) {
+			obj.dhcp = instantiateInterfaceIpv4Dhcp(location + "/dhcp", value["dhcp"], errors);
+		}
+
+		function parseDhcpLeases(location, value, errors) {
+			if (type(value) == "array") {
+				return map(value, (item, i) => instantiateInterfaceIpv4DhcpLease(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "dhcp-leases")) {
+			obj.dhcp_leases = parseDhcpLeases(location + "/dhcp-leases", value["dhcp-leases"], errors);
+		}
+
+		function parsePortForward(location, value, errors) {
+			if (type(value) == "array") {
+				return map(value, (item, i) => instantiateInterfaceIpv4PortForward(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "port-forward")) {
+			obj.port_forward = parsePortForward(location + "/port-forward", value["port-forward"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceIpv6Dhcpv6(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseMode(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "hybrid", "stateless", "stateful", "relay" ]))
+				push(errors, [ location, "must be one of \"hybrid\", \"stateless\", \"stateful\" or \"relay\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "mode")) {
+			obj.mode = parseMode(location + "/mode", value["mode"], errors);
+		}
+
+		function parseAnnounceDns(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) == "string") {
+						if (!matchIpv6(value))
+							push(errors, [ location, "must be a valid IPv6 address" ]);
+
+					}
+
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "announce-dns")) {
+			obj.announce_dns = parseAnnounceDns(location + "/announce-dns", value["announce-dns"], errors);
+		}
+
+		function parseFilterPrefix(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcCidr6(value))
+					push(errors, [ location, "must be a valid IPv6 CIDR" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "filter-prefix")) {
+			obj.filter_prefix = parseFilterPrefix(location + "/filter-prefix", value["filter-prefix"], errors);
+		}
+		else {
+			obj.filter_prefix = "::/0";
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceIpv6PortForward(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseProtocol(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "tcp", "udp", "any" ]))
+				push(errors, [ location, "must be one of \"tcp\", \"udp\" or \"any\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "protocol")) {
+			obj.protocol = parseProtocol(location + "/protocol", value["protocol"], errors);
+		}
+		else {
+			obj.protocol = "any";
+		}
+
+		function parseExternalPort(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 0)
+					push(errors, [ location, "must be bigger than or equal to 0" ]);
+
+			}
+
+			if (type(value) == "string") {
+				if (!matchUcPortrange(value))
+					push(errors, [ location, "must be a valid network port range" ]);
+
+			}
+
+			if (type(value) != "int" && type(value) != "string")
+				push(errors, [ location, "must be of type integer or string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "external-port")) {
+			obj.external_port = parseExternalPort(location + "/external-port", value["external-port"], errors);
+		}
+		else {
+			push(errors, [ location, "is required" ]);
+		}
+
+		function parseInternalAddress(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchIpv6(value))
+					push(errors, [ location, "must be a valid IPv6 address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "internal-address")) {
+			obj.internal_address = parseInternalAddress(location + "/internal-address", value["internal-address"], errors);
+		}
+		else {
+			push(errors, [ location, "is required" ]);
+		}
+
+		function parseInternalPort(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 0)
+					push(errors, [ location, "must be bigger than or equal to 0" ]);
+
+			}
+
+			if (type(value) == "string") {
+				if (!matchUcPortrange(value))
+					push(errors, [ location, "must be a valid network port range" ]);
+
+			}
+
+			if (type(value) != "int" && type(value) != "string")
+				push(errors, [ location, "must be of type integer or string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "internal-port")) {
+			obj.internal_port = parseInternalPort(location + "/internal-port", value["internal-port"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceIpv6TrafficAllow(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseProtocol(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "protocol")) {
+			obj.protocol = parseProtocol(location + "/protocol", value["protocol"], errors);
+		}
+		else {
+			obj.protocol = "any";
+		}
+
+		function parseSourceAddress(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcCidr6(value))
+					push(errors, [ location, "must be a valid IPv6 CIDR" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "source-address")) {
+			obj.source_address = parseSourceAddress(location + "/source-address", value["source-address"], errors);
+		}
+		else {
+			obj.source_address = "::/0";
+		}
+
+		function parseSourcePorts(location, value, errors) {
+			if (type(value) == "array") {
+				if (length(value) < 1)
+					push(errors, [ location, "must have at least 1 items" ]);
+
+				function parseItem(location, value, errors) {
+					if (type(value) in [ "int", "double" ]) {
+						if (value > 65535)
+							push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+						if (value < 0)
+							push(errors, [ location, "must be bigger than or equal to 0" ]);
+
+					}
+
+					if (type(value) == "string") {
+						if (!matchUcPortrange(value))
+							push(errors, [ location, "must be a valid network port range" ]);
+
+					}
+
+					if (type(value) != "int" && type(value) != "string")
+						push(errors, [ location, "must be of type integer or string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "source-ports")) {
+			obj.source_ports = parseSourcePorts(location + "/source-ports", value["source-ports"], errors);
+		}
+
+		function parseDestinationAddress(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchIpv6(value))
+					push(errors, [ location, "must be a valid IPv6 address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "destination-address")) {
+			obj.destination_address = parseDestinationAddress(location + "/destination-address", value["destination-address"], errors);
+		}
+		else {
+			push(errors, [ location, "is required" ]);
+		}
+
+		function parseDestinationPorts(location, value, errors) {
+			if (type(value) == "array") {
+				if (length(value) < 1)
+					push(errors, [ location, "must have at least 1 items" ]);
+
+				function parseItem(location, value, errors) {
+					if (type(value) in [ "int", "double" ]) {
+						if (value > 65535)
+							push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+						if (value < 0)
+							push(errors, [ location, "must be bigger than or equal to 0" ]);
+
+					}
+
+					if (type(value) == "string") {
+						if (!matchUcPortrange(value))
+							push(errors, [ location, "must be a valid network port range" ]);
+
+					}
+
+					if (type(value) != "int" && type(value) != "string")
+						push(errors, [ location, "must be of type integer or string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "destination-ports")) {
+			obj.destination_ports = parseDestinationPorts(location + "/destination-ports", value["destination-ports"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceIpv6(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseAddressing(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "dynamic", "static" ]))
+				push(errors, [ location, "must be one of \"dynamic\" or \"static\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "addressing")) {
+			obj.addressing = parseAddressing(location + "/addressing", value["addressing"], errors);
+		}
+
+		function parseSubnet(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcCidr6(value))
+					push(errors, [ location, "must be a valid IPv6 CIDR" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "subnet")) {
+			obj.subnet = parseSubnet(location + "/subnet", value["subnet"], errors);
+		}
+
+		function parseGateway(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchIpv6(value))
+					push(errors, [ location, "must be a valid IPv6 address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "gateway")) {
+			obj.gateway = parseGateway(location + "/gateway", value["gateway"], errors);
+		}
+
+		function parsePrefixSize(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 64)
+					push(errors, [ location, "must be lower than or equal to 64" ]);
+
+				if (value < 0)
+					push(errors, [ location, "must be bigger than or equal to 0" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "prefix-size")) {
+			obj.prefix_size = parsePrefixSize(location + "/prefix-size", value["prefix-size"], errors);
+		}
+
+		if (exists(value, "dhcpv6")) {
+			obj.dhcpv6 = instantiateInterfaceIpv6Dhcpv6(location + "/dhcpv6", value["dhcpv6"], errors);
+		}
+
+		function parsePortForward(location, value, errors) {
+			if (type(value) == "array") {
+				return map(value, (item, i) => instantiateInterfaceIpv6PortForward(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "port-forward")) {
+			obj.port_forward = parsePortForward(location + "/port-forward", value["port-forward"], errors);
+		}
+
+		function parseTrafficAllow(location, value, errors) {
+			if (type(value) == "array") {
+				return map(value, (item, i) => instantiateInterfaceIpv6TrafficAllow(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "traffic-allow")) {
+			obj.traffic_allow = parseTrafficAllow(location + "/traffic-allow", value["traffic-allow"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceBroadBandWwan(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseProtocol(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (value != "wwan")
+				push(errors, [ location, "must have value \"wwan\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "protocol")) {
+			obj.protocol = parseProtocol(location + "/protocol", value["protocol"], errors);
+		}
+
+		function parseModemType(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "qmi", "mbim", "wwan" ]))
+				push(errors, [ location, "must be one of \"qmi\", \"mbim\" or \"wwan\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "modem-type")) {
+			obj.modem_type = parseModemType(location + "/modem-type", value["modem-type"], errors);
+		}
+
+		function parseAccessPointName(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "access-point-name")) {
+			obj.access_point_name = parseAccessPointName(location + "/access-point-name", value["access-point-name"], errors);
+		}
+
+		function parseAuthenticationType(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "none", "pap", "chap", "pap-chap" ]))
+				push(errors, [ location, "must be one of \"none\", \"pap\", \"chap\" or \"pap-chap\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "authentication-type")) {
+			obj.authentication_type = parseAuthenticationType(location + "/authentication-type", value["authentication-type"], errors);
+		}
+		else {
+			obj.authentication_type = "none";
+		}
+
+		function parsePinCode(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "pin-code")) {
+			obj.pin_code = parsePinCode(location + "/pin-code", value["pin-code"], errors);
+		}
+
+		function parseUserName(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "user-name")) {
+			obj.user_name = parseUserName(location + "/user-name", value["user-name"], errors);
+		}
+
+		function parsePassword(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "password")) {
+			obj.password = parsePassword(location + "/password", value["password"], errors);
+		}
+
+		function parsePacketDataProtocol(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "ipv4", "ipv6", "dual-stack" ]))
+				push(errors, [ location, "must be one of \"ipv4\", \"ipv6\" or \"dual-stack\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "packet-data-protocol")) {
+			obj.packet_data_protocol = parsePacketDataProtocol(location + "/packet-data-protocol", value["packet-data-protocol"], errors);
+		}
+		else {
+			obj.packet_data_protocol = "dual-stack";
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceBroadBandPppoe(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseProtocol(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (value != "pppoe")
+				push(errors, [ location, "must have value \"pppoe\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "protocol")) {
+			obj.protocol = parseProtocol(location + "/protocol", value["protocol"], errors);
+		}
+
+		function parseUserName(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "user-name")) {
+			obj.user_name = parseUserName(location + "/user-name", value["user-name"], errors);
+		}
+
+		function parsePassword(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "password")) {
+			obj.password = parsePassword(location + "/password", value["password"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceBroadBand(location, value, errors) {
+	function parseVariant0(location, value, errors) {
+		value = instantiateInterfaceBroadBandWwan(location, value, errors);
+
+		return value;
+	}
+
+	function parseVariant1(location, value, errors) {
+		value = instantiateInterfaceBroadBandPppoe(location, value, errors);
+
+		return value;
+	}
+
+	let success = 0, tryval, tryerr, vvalue = null, verrors = [];
+
+	tryerr = [];
+	tryval = parseVariant0(location, value, tryerr);
+	if (!length(tryerr)) {
+		if (type(vvalue) == "object" && type(tryval) == "object")
+			vvalue = { ...vvalue, ...tryval };
+		else
+			vvalue = tryval;
+
+		success++;
+	}
+	else {
+		push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+	}
+
+	tryerr = [];
+	tryval = parseVariant1(location, value, tryerr);
+	if (!length(tryerr)) {
+		if (type(vvalue) == "object" && type(tryval) == "object")
+			vvalue = { ...vvalue, ...tryval };
+		else
+			vvalue = tryval;
+
+		success++;
+	}
+	else {
+		push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+	}
+
+	if (success != 1) {
+		if (length(verrors))
+			push(errors, [ location, "must match exactly one of the following constraints:\n" + join("\n- or -\n", verrors) ]);
+		else
+			push(errors, [ location, "must match only one variant" ]);
+		return null;
+	}
+
+	value = vvalue;
+
+	return value;
+}
+
+function instantiateInterfaceSsidMultiPsk(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseMac(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcMac(value))
+					push(errors, [ location, "must be a valid MAC address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "mac")) {
+			obj.mac = parseMac(location + "/mac", value["mac"], errors);
+		}
+
+		function parseKey(location, value, errors) {
+			if (type(value) == "string") {
+				if (length(value) > 63)
+					push(errors, [ location, "must be at most 63 characters long" ]);
+
+				if (length(value) < 8)
+					push(errors, [ location, "must be at least 8 characters long" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "key")) {
+			obj.key = parseKey(location + "/key", value["key"], errors);
+		}
+
+		function parseVlanId(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 4096)
+					push(errors, [ location, "must be lower than or equal to 4096" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "vlan-id")) {
+			obj.vlan_id = parseVlanId(location + "/vlan-id", value["vlan-id"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceSsidRrm(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseNeighborReporting(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "neighbor-reporting")) {
+			obj.neighbor_reporting = parseNeighborReporting(location + "/neighbor-reporting", value["neighbor-reporting"], errors);
+		}
+		else {
+			obj.neighbor_reporting = false;
+		}
+
+		function parseReducedNeighborReporting(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "reduced-neighbor-reporting")) {
+			obj.reduced_neighbor_reporting = parseReducedNeighborReporting(location + "/reduced-neighbor-reporting", value["reduced-neighbor-reporting"], errors);
+		}
+		else {
+			obj.reduced_neighbor_reporting = false;
+		}
+
+		function parseLci(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "lci")) {
+			obj.lci = parseLci(location + "/lci", value["lci"], errors);
+		}
+
+		function parseCivicLocation(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "civic-location")) {
+			obj.civic_location = parseCivicLocation(location + "/civic-location", value["civic-location"], errors);
+		}
+
+		function parseFtmResponder(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "ftm-responder")) {
+			obj.ftm_responder = parseFtmResponder(location + "/ftm-responder", value["ftm-responder"], errors);
+		}
+		else {
+			obj.ftm_responder = false;
+		}
+
+		function parseStationaryAp(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "stationary-ap")) {
+			obj.stationary_ap = parseStationaryAp(location + "/stationary-ap", value["stationary-ap"], errors);
+		}
+		else {
+			obj.stationary_ap = false;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceSsidRateLimit(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseIngressRate(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "ingress-rate")) {
+			obj.ingress_rate = parseIngressRate(location + "/ingress-rate", value["ingress-rate"], errors);
+		}
+		else {
+			obj.ingress_rate = 0;
+		}
+
+		function parseEgressRate(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "egress-rate")) {
+			obj.egress_rate = parseEgressRate(location + "/egress-rate", value["egress-rate"], errors);
+		}
+		else {
+			obj.egress_rate = 0;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceSsidRoaming(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseMessageExchange(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "air", "ds" ]))
+				push(errors, [ location, "must be one of \"air\" or \"ds\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "message-exchange")) {
+			obj.message_exchange = parseMessageExchange(location + "/message-exchange", value["message-exchange"], errors);
+		}
+		else {
+			obj.message_exchange = "ds";
+		}
+
+		function parseGeneratePsk(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "generate-psk")) {
+			obj.generate_psk = parseGeneratePsk(location + "/generate-psk", value["generate-psk"], errors);
+		}
+		else {
+			obj.generate_psk = false;
+		}
+
+		function parseDomainIdentifier(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcMobility(value))
+					push(errors, [ location, "must be a valid Mobility Domain" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "domain-identifier")) {
+			obj.domain_identifier = parseDomainIdentifier(location + "/domain-identifier", value["domain-identifier"], errors);
+		}
+
+		function parsePmkR0KeyHolder(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "pmk-r0-key-holder")) {
+			obj.pmk_r0_key_holder = parsePmkR0KeyHolder(location + "/pmk-r0-key-holder", value["pmk-r0-key-holder"], errors);
+		}
+
+		function parsePmkR1KeyHolder(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "pmk-r1-key-holder")) {
+			obj.pmk_r1_key_holder = parsePmkR1KeyHolder(location + "/pmk-r1-key-holder", value["pmk-r1-key-holder"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceSsidRadiusLocalUser(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseMac(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcMac(value))
+					push(errors, [ location, "must be a valid MAC address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "mac")) {
+			obj.mac = parseMac(location + "/mac", value["mac"], errors);
+		}
+
+		function parseUserName(location, value, errors) {
+			if (type(value) == "string") {
+				if (length(value) < 1)
+					push(errors, [ location, "must be at least 1 characters long" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "user-name")) {
+			obj.user_name = parseUserName(location + "/user-name", value["user-name"], errors);
+		}
+
+		function parsePassword(location, value, errors) {
+			if (type(value) == "string") {
+				if (length(value) > 63)
+					push(errors, [ location, "must be at most 63 characters long" ]);
+
+				if (length(value) < 8)
+					push(errors, [ location, "must be at least 8 characters long" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "password")) {
+			obj.password = parsePassword(location + "/password", value["password"], errors);
+		}
+
+		function parseVlanId(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 4096)
+					push(errors, [ location, "must be lower than or equal to 4096" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "vlan-id")) {
+			obj.vlan_id = parseVlanId(location + "/vlan-id", value["vlan-id"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceSsidRadiusLocal(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseServerIdentity(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "server-identity")) {
+			obj.server_identity = parseServerIdentity(location + "/server-identity", value["server-identity"], errors);
+		}
+		else {
+			obj.server_identity = "uCentral";
+		}
+
+		function parseUsers(location, value, errors) {
+			if (type(value) == "array") {
+				return map(value, (item, i) => instantiateInterfaceSsidRadiusLocalUser(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "users")) {
+			obj.users = parseUsers(location + "/users", value["users"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceSsidRadiusServer(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseHost(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcHost(value))
+					push(errors, [ location, "must be a valid hostname or IP address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "host")) {
+			obj.host = parseHost(location + "/host", value["host"], errors);
+		}
+
+		function parsePort(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 1024)
+					push(errors, [ location, "must be bigger than or equal to 1024" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "port")) {
+			obj.port = parsePort(location + "/port", value["port"], errors);
+		}
+
+		function parseSecret(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "secret")) {
+			obj.secret = parseSecret(location + "/secret", value["secret"], errors);
+		}
+
+		function parseSecondary(location, value, errors) {
+			if (type(value) == "object") {
+				let obj = {};
+
+				function parseHost(location, value, errors) {
+					if (type(value) == "string") {
+						if (!matchUcHost(value))
+							push(errors, [ location, "must be a valid hostname or IP address" ]);
+
+					}
+
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				if (exists(value, "host")) {
+					obj.host = parseHost(location + "/host", value["host"], errors);
+				}
+
+				function parsePort(location, value, errors) {
+					if (type(value) in [ "int", "double" ]) {
+						if (value > 65535)
+							push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+						if (value < 1024)
+							push(errors, [ location, "must be bigger than or equal to 1024" ]);
+
+					}
+
+					if (type(value) != "int")
+						push(errors, [ location, "must be of type integer" ]);
+
+					return value;
+				}
+
+				if (exists(value, "port")) {
+					obj.port = parsePort(location + "/port", value["port"], errors);
+				}
+
+				function parseSecret(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				if (exists(value, "secret")) {
+					obj.secret = parseSecret(location + "/secret", value["secret"], errors);
+				}
+
+				return obj;
+			}
+
+			if (type(value) != "object")
+				push(errors, [ location, "must be of type object" ]);
+
+			return value;
+		}
+
+		if (exists(value, "secondary")) {
+			obj.secondary = parseSecondary(location + "/secondary", value["secondary"], errors);
+		}
+
+		function parseRequestAttribute(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					function parseVariant0(location, value, errors) {
+						if (type(value) == "object") {
+							let obj = {};
+
+							function parseVendorId(location, value, errors) {
+								if (type(value) in [ "int", "double" ]) {
+									if (value > 65535)
+										push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+									if (value < 1)
+										push(errors, [ location, "must be bigger than or equal to 1" ]);
+
+								}
+
+								if (type(value) != "int")
+									push(errors, [ location, "must be of type integer" ]);
+
+								return value;
+							}
+
+							if (exists(value, "vendor-id")) {
+								obj.vendor_id = parseVendorId(location + "/vendor-id", value["vendor-id"], errors);
+							}
+
+							function parseVendorAttributes(location, value, errors) {
+								if (type(value) == "array") {
+									function parseItem(location, value, errors) {
+										if (type(value) == "object") {
+											let obj = {};
+
+											function parseId(location, value, errors) {
+												if (type(value) in [ "int", "double" ]) {
+													if (value > 255)
+														push(errors, [ location, "must be lower than or equal to 255" ]);
+
+													if (value < 1)
+														push(errors, [ location, "must be bigger than or equal to 1" ]);
+
+												}
+
+												if (type(value) != "int")
+													push(errors, [ location, "must be of type integer" ]);
+
+												return value;
+											}
+
+											if (exists(value, "id")) {
+												obj.id = parseId(location + "/id", value["id"], errors);
+											}
+
+											function parseValue(location, value, errors) {
+												if (type(value) != "string")
+													push(errors, [ location, "must be of type string" ]);
+
+												return value;
+											}
+
+											if (exists(value, "value")) {
+												obj.value = parseValue(location + "/value", value["value"], errors);
+											}
+
+											return obj;
+										}
+
+										if (type(value) != "object")
+											push(errors, [ location, "must be of type object" ]);
+
+										return value;
+									}
+
+									return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+								}
+
+								if (type(value) != "array")
+									push(errors, [ location, "must be of type array" ]);
+
+								return value;
+							}
+
+							if (exists(value, "vendor-attributes")) {
+								obj.vendor_attributes = parseVendorAttributes(location + "/vendor-attributes", value["vendor-attributes"], errors);
+							}
+
+							return obj;
+						}
+
+						if (type(value) != "object")
+							push(errors, [ location, "must be of type object" ]);
+
+						return value;
+					}
+
+					function parseVariant1(location, value, errors) {
+						if (type(value) == "object") {
+							let obj = {};
+
+							function parseId(location, value, errors) {
+								if (type(value) in [ "int", "double" ]) {
+									if (value > 255)
+										push(errors, [ location, "must be lower than or equal to 255" ]);
+
+									if (value < 1)
+										push(errors, [ location, "must be bigger than or equal to 1" ]);
+
+								}
+
+								if (type(value) != "int")
+									push(errors, [ location, "must be of type integer" ]);
+
+								return value;
+							}
+
+							if (exists(value, "id")) {
+								obj.id = parseId(location + "/id", value["id"], errors);
+							}
+
+							function parseValue(location, value, errors) {
+								if (type(value) in [ "int", "double" ]) {
+									if (value > 4294967295)
+										push(errors, [ location, "must be lower than or equal to 4294967295" ]);
+
+									if (value < 0)
+										push(errors, [ location, "must be bigger than or equal to 0" ]);
+
+								}
+
+								if (type(value) != "int")
+									push(errors, [ location, "must be of type integer" ]);
+
+								return value;
+							}
+
+							if (exists(value, "value")) {
+								obj.value = parseValue(location + "/value", value["value"], errors);
+							}
+
+							return obj;
+						}
+
+						if (type(value) != "object")
+							push(errors, [ location, "must be of type object" ]);
+
+						return value;
+					}
+
+					function parseVariant2(location, value, errors) {
+						if (type(value) == "object") {
+							let obj = {};
+
+							function parseId(location, value, errors) {
+								if (type(value) in [ "int", "double" ]) {
+									if (value > 255)
+										push(errors, [ location, "must be lower than or equal to 255" ]);
+
+									if (value < 1)
+										push(errors, [ location, "must be bigger than or equal to 1" ]);
+
+								}
+
+								if (type(value) != "int")
+									push(errors, [ location, "must be of type integer" ]);
+
+								return value;
+							}
+
+							if (exists(value, "id")) {
+								obj.id = parseId(location + "/id", value["id"], errors);
+							}
+
+							function parseValue(location, value, errors) {
+								if (type(value) != "string")
+									push(errors, [ location, "must be of type string" ]);
+
+								return value;
+							}
+
+							if (exists(value, "value")) {
+								obj.value = parseValue(location + "/value", value["value"], errors);
+							}
+
+							return obj;
+						}
+
+						if (type(value) != "object")
+							push(errors, [ location, "must be of type object" ]);
+
+						return value;
+					}
+
+					function parseVariant3(location, value, errors) {
+						if (type(value) == "object") {
+							let obj = {};
+
+							function parseId(location, value, errors) {
+								if (type(value) in [ "int", "double" ]) {
+									if (value > 255)
+										push(errors, [ location, "must be lower than or equal to 255" ]);
+
+									if (value < 1)
+										push(errors, [ location, "must be bigger than or equal to 1" ]);
+
+								}
+
+								if (type(value) != "int")
+									push(errors, [ location, "must be of type integer" ]);
+
+								return value;
+							}
+
+							if (exists(value, "id")) {
+								obj.id = parseId(location + "/id", value["id"], errors);
+							}
+
+							function parseHexValue(location, value, errors) {
+								if (type(value) != "string")
+									push(errors, [ location, "must be of type string" ]);
+
+								return value;
+							}
+
+							if (exists(value, "hex-value")) {
+								obj.hex_value = parseHexValue(location + "/hex-value", value["hex-value"], errors);
+							}
+
+							return obj;
+						}
+
+						if (type(value) != "object")
+							push(errors, [ location, "must be of type object" ]);
+
+						return value;
+					}
+
+					let success = 0, tryval, tryerr, vvalue = null, verrors = [];
+
+					tryerr = [];
+					tryval = parseVariant0(location, value, tryerr);
+					if (!length(tryerr)) {
+						if (type(vvalue) == "object" && type(tryval) == "object")
+							vvalue = { ...vvalue, ...tryval };
+						else
+							vvalue = tryval;
+
+						success++;
+					}
+					else {
+						push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+					}
+
+					tryerr = [];
+					tryval = parseVariant1(location, value, tryerr);
+					if (!length(tryerr)) {
+						if (type(vvalue) == "object" && type(tryval) == "object")
+							vvalue = { ...vvalue, ...tryval };
+						else
+							vvalue = tryval;
+
+						success++;
+					}
+					else {
+						push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+					}
+
+					tryerr = [];
+					tryval = parseVariant2(location, value, tryerr);
+					if (!length(tryerr)) {
+						if (type(vvalue) == "object" && type(tryval) == "object")
+							vvalue = { ...vvalue, ...tryval };
+						else
+							vvalue = tryval;
+
+						success++;
+					}
+					else {
+						push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+					}
+
+					tryerr = [];
+					tryval = parseVariant3(location, value, tryerr);
+					if (!length(tryerr)) {
+						if (type(vvalue) == "object" && type(tryval) == "object")
+							vvalue = { ...vvalue, ...tryval };
+						else
+							vvalue = tryval;
+
+						success++;
+					}
+					else {
+						push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+					}
+
+					if (success == 0) {
+						if (length(verrors))
+							push(errors, [ location, "must match at least one of the following constraints:\n" + join("\n- or -\n", verrors) ]);
+						else
+							push(errors, [ location, "must match only one variant" ]);
+						return null;
+					}
+
+					value = vvalue;
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "request-attribute")) {
+			obj.request_attribute = parseRequestAttribute(location + "/request-attribute", value["request-attribute"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceSsidRadiusHealth(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseUsername(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "username")) {
+			obj.username = parseUsername(location + "/username", value["username"], errors);
+		}
+
+		function parsePassword(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "password")) {
+			obj.password = parsePassword(location + "/password", value["password"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceSsidRadius(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseNasIdentifier(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "nas-identifier")) {
+			obj.nas_identifier = parseNasIdentifier(location + "/nas-identifier", value["nas-identifier"], errors);
+		}
+
+		function parseChargeableUserId(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "chargeable-user-id")) {
+			obj.chargeable_user_id = parseChargeableUserId(location + "/chargeable-user-id", value["chargeable-user-id"], errors);
+		}
+		else {
+			obj.chargeable_user_id = false;
+		}
+
+		if (exists(value, "local")) {
+			obj.local = instantiateInterfaceSsidRadiusLocal(location + "/local", value["local"], errors);
+		}
+
+		function parseDynamicAuthorization(location, value, errors) {
+			if (type(value) == "object") {
+				let obj = {};
+
+				function parseHost(location, value, errors) {
+					if (type(value) == "string") {
+						if (!matchUcIp(value))
+							push(errors, [ location, "must be a valid IPv4 or IPv6 address" ]);
+
+					}
+
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				if (exists(value, "host")) {
+					obj.host = parseHost(location + "/host", value["host"], errors);
+				}
+
+				function parsePort(location, value, errors) {
+					if (type(value) in [ "int", "double" ]) {
+						if (value > 65535)
+							push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+						if (value < 1024)
+							push(errors, [ location, "must be bigger than or equal to 1024" ]);
+
+					}
+
+					if (type(value) != "int")
+						push(errors, [ location, "must be of type integer" ]);
+
+					return value;
+				}
+
+				if (exists(value, "port")) {
+					obj.port = parsePort(location + "/port", value["port"], errors);
+				}
+
+				function parseSecret(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				if (exists(value, "secret")) {
+					obj.secret = parseSecret(location + "/secret", value["secret"], errors);
+				}
+
+				return obj;
+			}
+
+			if (type(value) != "object")
+				push(errors, [ location, "must be of type object" ]);
+
+			return value;
+		}
+
+		if (exists(value, "dynamic-authorization")) {
+			obj.dynamic_authorization = parseDynamicAuthorization(location + "/dynamic-authorization", value["dynamic-authorization"], errors);
+		}
+
+		function parseAuthentication(location, value, errors) {
+			function parseVariant0(location, value, errors) {
+				value = instantiateInterfaceSsidRadiusServer(location, value, errors);
+
+				return value;
+			}
+
+			function parseVariant1(location, value, errors) {
+				if (type(value) == "object") {
+					let obj = {};
+
+					function parseMacFilter(location, value, errors) {
+						if (type(value) != "bool")
+							push(errors, [ location, "must be of type boolean" ]);
+
+						return value;
+					}
+
+					if (exists(value, "mac-filter")) {
+						obj.mac_filter = parseMacFilter(location + "/mac-filter", value["mac-filter"], errors);
+					}
+					else {
+						obj.mac_filter = false;
+					}
+
+					return obj;
+				}
+
+				if (type(value) != "object")
+					push(errors, [ location, "must be of type object" ]);
+
+				return value;
+			}
+
+			let success = 0, tryval, tryerr, vvalue = null, verrors = [];
+
+			tryerr = [];
+			tryval = parseVariant0(location, value, tryerr);
+			if (!length(tryerr)) {
+				if (type(vvalue) == "object" && type(tryval) == "object")
+					vvalue = { ...vvalue, ...tryval };
+				else
+					vvalue = tryval;
+
+				success++;
+			}
+			else {
+				push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+			}
+
+			tryerr = [];
+			tryval = parseVariant1(location, value, tryerr);
+			if (!length(tryerr)) {
+				if (type(vvalue) == "object" && type(tryval) == "object")
+					vvalue = { ...vvalue, ...tryval };
+				else
+					vvalue = tryval;
+
+				success++;
+			}
+			else {
+				push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+			}
+
+			if (success != 2) {
+				if (length(verrors))
+					push(errors, [ location, "must match all of the following constraints:\n" + join("\n- or -\n", verrors) ]);
+				else
+					push(errors, [ location, "must match only one variant" ]);
+				return null;
+			}
+
+			value = vvalue;
+
+			return value;
+		}
+
+		if (exists(value, "authentication")) {
+			obj.authentication = parseAuthentication(location + "/authentication", value["authentication"], errors);
+		}
+
+		function parseAccounting(location, value, errors) {
+			function parseVariant0(location, value, errors) {
+				value = instantiateInterfaceSsidRadiusServer(location, value, errors);
+
+				return value;
+			}
+
+			function parseVariant1(location, value, errors) {
+				if (type(value) == "object") {
+					let obj = {};
+
+					function parseInterval(location, value, errors) {
+						if (type(value) in [ "int", "double" ]) {
+							if (value > 600)
+								push(errors, [ location, "must be lower than or equal to 600" ]);
+
+							if (value < 60)
+								push(errors, [ location, "must be bigger than or equal to 60" ]);
+
+						}
+
+						if (type(value) != "int")
+							push(errors, [ location, "must be of type integer" ]);
+
+						return value;
+					}
+
+					if (exists(value, "interval")) {
+						obj.interval = parseInterval(location + "/interval", value["interval"], errors);
+					}
+					else {
+						obj.interval = 60;
+					}
+
+					return obj;
+				}
+
+				if (type(value) != "object")
+					push(errors, [ location, "must be of type object" ]);
+
+				return value;
+			}
+
+			let success = 0, tryval, tryerr, vvalue = null, verrors = [];
+
+			tryerr = [];
+			tryval = parseVariant0(location, value, tryerr);
+			if (!length(tryerr)) {
+				if (type(vvalue) == "object" && type(tryval) == "object")
+					vvalue = { ...vvalue, ...tryval };
+				else
+					vvalue = tryval;
+
+				success++;
+			}
+			else {
+				push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+			}
+
+			tryerr = [];
+			tryval = parseVariant1(location, value, tryerr);
+			if (!length(tryerr)) {
+				if (type(vvalue) == "object" && type(tryval) == "object")
+					vvalue = { ...vvalue, ...tryval };
+				else
+					vvalue = tryval;
+
+				success++;
+			}
+			else {
+				push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+			}
+
+			if (success != 2) {
+				if (length(verrors))
+					push(errors, [ location, "must match all of the following constraints:\n" + join("\n- or -\n", verrors) ]);
+				else
+					push(errors, [ location, "must match only one variant" ]);
+				return null;
+			}
+
+			value = vvalue;
+
+			return value;
+		}
+
+		if (exists(value, "accounting")) {
+			obj.accounting = parseAccounting(location + "/accounting", value["accounting"], errors);
+		}
+
+		if (exists(value, "health")) {
+			obj.health = instantiateInterfaceSsidRadiusHealth(location + "/health", value["health"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceSsidCertificates(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseUseLocalCertificates(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "use-local-certificates")) {
+			obj.use_local_certificates = parseUseLocalCertificates(location + "/use-local-certificates", value["use-local-certificates"], errors);
+		}
+		else {
+			obj.use_local_certificates = false;
+		}
+
+		function parseCaCertificate(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "ca-certificate")) {
+			obj.ca_certificate = parseCaCertificate(location + "/ca-certificate", value["ca-certificate"], errors);
+		}
+
+		function parseCertificate(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "certificate")) {
+			obj.certificate = parseCertificate(location + "/certificate", value["certificate"], errors);
+		}
+
+		function parsePrivateKey(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "private-key")) {
+			obj.private_key = parsePrivateKey(location + "/private-key", value["private-key"], errors);
+		}
+
+		function parsePrivateKeyPassword(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "private-key-password")) {
+			obj.private_key_password = parsePrivateKeyPassword(location + "/private-key-password", value["private-key-password"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceSsidPassPoint(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseVenueName(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "venue-name")) {
+			obj.venue_name = parseVenueName(location + "/venue-name", value["venue-name"], errors);
+		}
+
+		function parseVenueGroup(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 32)
+					push(errors, [ location, "must be lower than or equal to 32" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "venue-group")) {
+			obj.venue_group = parseVenueGroup(location + "/venue-group", value["venue-group"], errors);
+		}
+
+		function parseVenueType(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 32)
+					push(errors, [ location, "must be lower than or equal to 32" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "venue-type")) {
+			obj.venue_type = parseVenueType(location + "/venue-type", value["venue-type"], errors);
+		}
+
+		function parseVenueUrl(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) == "string") {
+						if (!matchUri(value))
+							push(errors, [ location, "must be a valid URI" ]);
+
+					}
+
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "venue-url")) {
+			obj.venue_url = parseVenueUrl(location + "/venue-url", value["venue-url"], errors);
+		}
+
+		function parseAuthType(location, value, errors) {
+			if (type(value) == "string") {
+				if (length(value) > 2)
+					push(errors, [ location, "must be at most 2 characters long" ]);
+
+				if (length(value) < 2)
+					push(errors, [ location, "must be at least 2 characters long" ]);
+
+			}
+
+			if (type(value) == "object") {
+				let obj = {};
+
+				function parseType(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					if (!(value in [ "terms-and-conditions", "online-enrollment", "http-redirection", "dns-redirection" ]))
+						push(errors, [ location, "must be one of \"terms-and-conditions\", \"online-enrollment\", \"http-redirection\" or \"dns-redirection\"" ]);
+
+					return value;
+				}
+
+				if (exists(value, "type")) {
+					obj.type = parseType(location + "/type", value["type"], errors);
+				}
+
+				function parseUri(location, value, errors) {
+					if (type(value) == "string") {
+						if (!matchUri(value))
+							push(errors, [ location, "must be a valid URI" ]);
+
+					}
+
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				if (exists(value, "uri")) {
+					obj.uri = parseUri(location + "/uri", value["uri"], errors);
+				}
+
+				return obj;
+			}
+
+			if (type(value) != "object")
+				push(errors, [ location, "must be of type object" ]);
+
+			return value;
+		}
+
+		if (exists(value, "auth-type")) {
+			obj.auth_type = parseAuthType(location + "/auth-type", value["auth-type"], errors);
+		}
+
+		function parseDomainName(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) == "string") {
+						if (!matchHostname(value))
+							push(errors, [ location, "must be a valid hostname" ]);
+
+					}
+
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "domain-name")) {
+			obj.domain_name = parseDomainName(location + "/domain-name", value["domain-name"], errors);
+		}
+
+		function parseNaiRealm(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "nai-realm")) {
+			obj.nai_realm = parseNaiRealm(location + "/nai-realm", value["nai-realm"], errors);
+		}
+
+		function parseOsen(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "osen")) {
+			obj.osen = parseOsen(location + "/osen", value["osen"], errors);
+		}
+
+		function parseAnqpDomain(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 0)
+					push(errors, [ location, "must be bigger than or equal to 0" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "anqp-domain")) {
+			obj.anqp_domain = parseAnqpDomain(location + "/anqp-domain", value["anqp-domain"], errors);
+		}
+
+		function parseAnqp3gppCellNet(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "anqp-3gpp-cell-net")) {
+			obj.anqp_3gpp_cell_net = parseAnqp3gppCellNet(location + "/anqp-3gpp-cell-net", value["anqp-3gpp-cell-net"], errors);
+		}
+
+		function parseFriendlyName(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "friendly-name")) {
+			obj.friendly_name = parseFriendlyName(location + "/friendly-name", value["friendly-name"], errors);
+		}
+
+		function parseAccessNetworkType(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 15)
+					push(errors, [ location, "must be lower than or equal to 15" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "access-network-type")) {
+			obj.access_network_type = parseAccessNetworkType(location + "/access-network-type", value["access-network-type"], errors);
+		}
+		else {
+			obj.access_network_type = 0;
+		}
+
+		function parseInternet(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "internet")) {
+			obj.internet = parseInternet(location + "/internet", value["internet"], errors);
+		}
+		else {
+			obj.internet = true;
+		}
+
+		function parseAsra(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "asra")) {
+			obj.asra = parseAsra(location + "/asra", value["asra"], errors);
+		}
+		else {
+			obj.asra = false;
+		}
+
+		function parseEsr(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "esr")) {
+			obj.esr = parseEsr(location + "/esr", value["esr"], errors);
+		}
+		else {
+			obj.esr = false;
+		}
+
+		function parseUesa(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "uesa")) {
+			obj.uesa = parseUesa(location + "/uesa", value["uesa"], errors);
+		}
+		else {
+			obj.uesa = false;
+		}
+
+		function parseHessid(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "hessid")) {
+			obj.hessid = parseHessid(location + "/hessid", value["hessid"], errors);
+		}
+
+		function parseRoamingConsortium(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "roaming-consortium")) {
+			obj.roaming_consortium = parseRoamingConsortium(location + "/roaming-consortium", value["roaming-consortium"], errors);
+		}
+
+		function parseDisableDgaf(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "disable-dgaf")) {
+			obj.disable_dgaf = parseDisableDgaf(location + "/disable-dgaf", value["disable-dgaf"], errors);
+		}
+		else {
+			obj.disable_dgaf = false;
+		}
+
+		function parseIpaddrTypeAvailable(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 255)
+					push(errors, [ location, "must be lower than or equal to 255" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "ipaddr-type-available")) {
+			obj.ipaddr_type_available = parseIpaddrTypeAvailable(location + "/ipaddr-type-available", value["ipaddr-type-available"], errors);
+		}
+
+		function parseConnectionCapability(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "connection-capability")) {
+			obj.connection_capability = parseConnectionCapability(location + "/connection-capability", value["connection-capability"], errors);
+		}
+
+		function parseIcons(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) == "object") {
+						let obj = {};
+
+						function parseWidth(location, value, errors) {
+							if (type(value) != "int")
+								push(errors, [ location, "must be of type integer" ]);
+
+							return value;
+						}
+
+						if (exists(value, "width")) {
+							obj.width = parseWidth(location + "/width", value["width"], errors);
+						}
+
+						function parseHeight(location, value, errors) {
+							if (type(value) != "int")
+								push(errors, [ location, "must be of type integer" ]);
+
+							return value;
+						}
+
+						if (exists(value, "height")) {
+							obj.height = parseHeight(location + "/height", value["height"], errors);
+						}
+
+						function parseType(location, value, errors) {
+							if (type(value) != "string")
+								push(errors, [ location, "must be of type string" ]);
+
+							return value;
+						}
+
+						if (exists(value, "type")) {
+							obj.type = parseType(location + "/type", value["type"], errors);
+						}
+
+						function parseIcon(location, value, errors) {
+							if (type(value) == "string") {
+								if (!matchUcBase64(value))
+									push(errors, [ location, "must be a valid base64 encoded data" ]);
+
+							}
+
+							if (type(value) != "string")
+								push(errors, [ location, "must be of type string" ]);
+
+							return value;
+						}
+
+						if (exists(value, "icon")) {
+							obj.icon = parseIcon(location + "/icon", value["icon"], errors);
+						}
+
+						function parseLanguage(location, value, errors) {
+							if (type(value) == "string") {
+								if (!match(value, regexp("^[a-z][a-z][a-z]$")))
+									push(errors, [ location, "must match regular expression /^[a-z][a-z][a-z]$/" ]);
+
+							}
+
+							if (type(value) != "string")
+								push(errors, [ location, "must be of type string" ]);
+
+							return value;
+						}
+
+						if (exists(value, "language")) {
+							obj.language = parseLanguage(location + "/language", value["language"], errors);
+						}
+
+						return obj;
+					}
+
+					if (type(value) != "object")
+						push(errors, [ location, "must be of type object" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "icons")) {
+			obj.icons = parseIcons(location + "/icons", value["icons"], errors);
+		}
+
+		function parseWanMetrics(location, value, errors) {
+			if (type(value) == "object") {
+				let obj = {};
+
+				function parseInfo(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					if (!(value in [ "up", "down", "testing" ]))
+						push(errors, [ location, "must be one of \"up\", \"down\" or \"testing\"" ]);
+
+					return value;
+				}
+
+				if (exists(value, "info")) {
+					obj.info = parseInfo(location + "/info", value["info"], errors);
+				}
+
+				function parseDownlink(location, value, errors) {
+					if (type(value) != "int")
+						push(errors, [ location, "must be of type integer" ]);
+
+					return value;
+				}
+
+				if (exists(value, "downlink")) {
+					obj.downlink = parseDownlink(location + "/downlink", value["downlink"], errors);
+				}
+
+				function parseUplink(location, value, errors) {
+					if (type(value) != "int")
+						push(errors, [ location, "must be of type integer" ]);
+
+					return value;
+				}
+
+				if (exists(value, "uplink")) {
+					obj.uplink = parseUplink(location + "/uplink", value["uplink"], errors);
+				}
+
+				return obj;
+			}
+
+			if (type(value) != "object")
+				push(errors, [ location, "must be of type object" ]);
+
+			return value;
+		}
+
+		if (exists(value, "wan-metrics")) {
+			obj.wan_metrics = parseWanMetrics(location + "/wan-metrics", value["wan-metrics"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceSsidQualityThresholds(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseProbeRequestRssi(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "probe-request-rssi")) {
+			obj.probe_request_rssi = parseProbeRequestRssi(location + "/probe-request-rssi", value["probe-request-rssi"], errors);
+		}
+
+		function parseAssociationRequestRssi(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "association-request-rssi")) {
+			obj.association_request_rssi = parseAssociationRequestRssi(location + "/association-request-rssi", value["association-request-rssi"], errors);
+		}
+
+		function parseClientKickRssi(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "client-kick-rssi")) {
+			obj.client_kick_rssi = parseClientKickRssi(location + "/client-kick-rssi", value["client-kick-rssi"], errors);
+		}
+
+		function parseClientKickBanTime(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "client-kick-ban-time")) {
+			obj.client_kick_ban_time = parseClientKickBanTime(location + "/client-kick-ban-time", value["client-kick-ban-time"], errors);
+		}
+		else {
+			obj.client_kick_ban_time = 0;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceSsidAcl(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseMode(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "allow", "deny" ]))
+				push(errors, [ location, "must be one of \"allow\" or \"deny\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "mode")) {
+			obj.mode = parseMode(location + "/mode", value["mode"], errors);
+		}
+
+		function parseMacAddress(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) == "string") {
+						if (!matchUcMac(value))
+							push(errors, [ location, "must be a valid MAC address" ]);
+
+					}
+
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "mac-address")) {
+			obj.mac_address = parseMacAddress(location + "/mac-address", value["mac-address"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceCaptiveClick(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseAuthMode(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (value != "click-to-continue")
+				push(errors, [ location, "must have value \"click-to-continue\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "auth-mode")) {
+			obj.auth_mode = parseAuthMode(location + "/auth-mode", value["auth-mode"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceCaptiveRadius(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseAuthMode(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (value != "radius")
+				push(errors, [ location, "must have value \"radius\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "auth-mode")) {
+			obj.auth_mode = parseAuthMode(location + "/auth-mode", value["auth-mode"], errors);
+		}
+
+		function parseAuthServer(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcHost(value))
+					push(errors, [ location, "must be a valid hostname or IP address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "auth-server")) {
+			obj.auth_server = parseAuthServer(location + "/auth-server", value["auth-server"], errors);
+		}
+
+		function parseAuthPort(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 1024)
+					push(errors, [ location, "must be bigger than or equal to 1024" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "auth-port")) {
+			obj.auth_port = parseAuthPort(location + "/auth-port", value["auth-port"], errors);
+		}
+		else {
+			obj.auth_port = 1812;
+		}
+
+		function parseAuthSecret(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "auth-secret")) {
+			obj.auth_secret = parseAuthSecret(location + "/auth-secret", value["auth-secret"], errors);
+		}
+
+		function parseAcctServer(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcHost(value))
+					push(errors, [ location, "must be a valid hostname or IP address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "acct-server")) {
+			obj.acct_server = parseAcctServer(location + "/acct-server", value["acct-server"], errors);
+		}
+
+		function parseAcctPort(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 1024)
+					push(errors, [ location, "must be bigger than or equal to 1024" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "acct-port")) {
+			obj.acct_port = parseAcctPort(location + "/acct-port", value["acct-port"], errors);
+		}
+		else {
+			obj.acct_port = 1812;
+		}
+
+		function parseAcctSecret(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "acct-secret")) {
+			obj.acct_secret = parseAcctSecret(location + "/acct-secret", value["acct-secret"], errors);
+		}
+
+		function parseAcctInterval(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "acct-interval")) {
+			obj.acct_interval = parseAcctInterval(location + "/acct-interval", value["acct-interval"], errors);
+		}
+		else {
+			obj.acct_interval = 600;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceCaptiveCredentials(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseAuthMode(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (value != "credentials")
+				push(errors, [ location, "must have value \"credentials\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "auth-mode")) {
+			obj.auth_mode = parseAuthMode(location + "/auth-mode", value["auth-mode"], errors);
+		}
+
+		function parseCredentials(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) == "object") {
+						let obj = {};
+
+						function parseUsername(location, value, errors) {
+							if (type(value) != "string")
+								push(errors, [ location, "must be of type string" ]);
+
+							return value;
+						}
+
+						if (exists(value, "username")) {
+							obj.username = parseUsername(location + "/username", value["username"], errors);
+						}
+
+						function parsePassword(location, value, errors) {
+							if (type(value) != "string")
+								push(errors, [ location, "must be of type string" ]);
+
+							return value;
+						}
+
+						if (exists(value, "password")) {
+							obj.password = parsePassword(location + "/password", value["password"], errors);
+						}
+
+						return obj;
+					}
+
+					if (type(value) != "object")
+						push(errors, [ location, "must be of type object" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "credentials")) {
+			obj.credentials = parseCredentials(location + "/credentials", value["credentials"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceCaptiveUam(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseAuthMode(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (value != "uam")
+				push(errors, [ location, "must have value \"uam\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "auth-mode")) {
+			obj.auth_mode = parseAuthMode(location + "/auth-mode", value["auth-mode"], errors);
+		}
+
+		function parseUamPort(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 1024)
+					push(errors, [ location, "must be bigger than or equal to 1024" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "uam-port")) {
+			obj.uam_port = parseUamPort(location + "/uam-port", value["uam-port"], errors);
+		}
+		else {
+			obj.uam_port = 3990;
+		}
+
+		function parseUamSecret(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "uam-secret")) {
+			obj.uam_secret = parseUamSecret(location + "/uam-secret", value["uam-secret"], errors);
+		}
+
+		function parseUamServer(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "uam-server")) {
+			obj.uam_server = parseUamServer(location + "/uam-server", value["uam-server"], errors);
+		}
+
+		function parseNasid(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "nasid")) {
+			obj.nasid = parseNasid(location + "/nasid", value["nasid"], errors);
+		}
+
+		function parseNasmac(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "nasmac")) {
+			obj.nasmac = parseNasmac(location + "/nasmac", value["nasmac"], errors);
+		}
+
+		function parseAuthServer(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcHost(value))
+					push(errors, [ location, "must be a valid hostname or IP address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "auth-server")) {
+			obj.auth_server = parseAuthServer(location + "/auth-server", value["auth-server"], errors);
+		}
+
+		function parseAuthPort(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 1024)
+					push(errors, [ location, "must be bigger than or equal to 1024" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "auth-port")) {
+			obj.auth_port = parseAuthPort(location + "/auth-port", value["auth-port"], errors);
+		}
+		else {
+			obj.auth_port = 1812;
+		}
+
+		function parseAuthSecret(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "auth-secret")) {
+			obj.auth_secret = parseAuthSecret(location + "/auth-secret", value["auth-secret"], errors);
+		}
+
+		function parseAcctServer(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcHost(value))
+					push(errors, [ location, "must be a valid hostname or IP address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "acct-server")) {
+			obj.acct_server = parseAcctServer(location + "/acct-server", value["acct-server"], errors);
+		}
+
+		function parseAcctPort(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 1024)
+					push(errors, [ location, "must be bigger than or equal to 1024" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "acct-port")) {
+			obj.acct_port = parseAcctPort(location + "/acct-port", value["acct-port"], errors);
+		}
+		else {
+			obj.acct_port = 1812;
+		}
+
+		function parseAcctSecret(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "acct-secret")) {
+			obj.acct_secret = parseAcctSecret(location + "/acct-secret", value["acct-secret"], errors);
+		}
+
+		function parseAcctInterval(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "acct-interval")) {
+			obj.acct_interval = parseAcctInterval(location + "/acct-interval", value["acct-interval"], errors);
+		}
+		else {
+			obj.acct_interval = 600;
+		}
+
+		function parseSsid(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "ssid")) {
+			obj.ssid = parseSsid(location + "/ssid", value["ssid"], errors);
+		}
+
+		function parseMacFormat(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "aabbccddeeff", "aa-bb-cc-dd-ee-ff", "aa:bb:cc:dd:ee:ff", "AABBCCDDEEFF", "AA:BB:CC:DD:EE:FF", "AA-BB-CC-DD-EE-FF" ]))
+				push(errors, [ location, "must be one of \"aabbccddeeff\", \"aa-bb-cc-dd-ee-ff\", \"aa:bb:cc:dd:ee:ff\", \"AABBCCDDEEFF\", \"AA:BB:CC:DD:EE:FF\" or \"AA-BB-CC-DD-EE-FF\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "mac-format")) {
+			obj.mac_format = parseMacFormat(location + "/mac-format", value["mac-format"], errors);
+		}
+
+		function parseFinalRedirectUrl(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "default", "uam" ]))
+				push(errors, [ location, "must be one of \"default\" or \"uam\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "final-redirect-url")) {
+			obj.final_redirect_url = parseFinalRedirectUrl(location + "/final-redirect-url", value["final-redirect-url"], errors);
+		}
+
+		function parseMacAuth(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "mac-auth")) {
+			obj.mac_auth = parseMacAuth(location + "/mac-auth", value["mac-auth"], errors);
+		}
+		else {
+			obj.mac_auth = "default";
+		}
+
+		function parseRadiusGwProxy(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "radius-gw-proxy")) {
+			obj.radius_gw_proxy = parseRadiusGwProxy(location + "/radius-gw-proxy", value["radius-gw-proxy"], errors);
+		}
+		else {
+			obj.radius_gw_proxy = false;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceCaptive(location, value, errors) {
+	function parseVariant0(location, value, errors) {
+		function parseVariant0(location, value, errors) {
+			value = instantiateServiceCaptiveClick(location, value, errors);
+
+			return value;
+		}
+
+		function parseVariant1(location, value, errors) {
+			value = instantiateServiceCaptiveRadius(location, value, errors);
+
+			return value;
+		}
+
+		function parseVariant2(location, value, errors) {
+			value = instantiateServiceCaptiveCredentials(location, value, errors);
+
+			return value;
+		}
+
+		function parseVariant3(location, value, errors) {
+			value = instantiateServiceCaptiveUam(location, value, errors);
+
+			return value;
+		}
+
+		let success = 0, tryval, tryerr, vvalue = null, verrors = [];
+
+		tryerr = [];
+		tryval = parseVariant0(location, value, tryerr);
+		if (!length(tryerr)) {
+			if (type(vvalue) == "object" && type(tryval) == "object")
+				vvalue = { ...vvalue, ...tryval };
+			else
+				vvalue = tryval;
+
+			success++;
+		}
+		else {
+			push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+		}
+
+		tryerr = [];
+		tryval = parseVariant1(location, value, tryerr);
+		if (!length(tryerr)) {
+			if (type(vvalue) == "object" && type(tryval) == "object")
+				vvalue = { ...vvalue, ...tryval };
+			else
+				vvalue = tryval;
+
+			success++;
+		}
+		else {
+			push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+		}
+
+		tryerr = [];
+		tryval = parseVariant2(location, value, tryerr);
+		if (!length(tryerr)) {
+			if (type(vvalue) == "object" && type(tryval) == "object")
+				vvalue = { ...vvalue, ...tryval };
+			else
+				vvalue = tryval;
+
+			success++;
+		}
+		else {
+			push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+		}
+
+		tryerr = [];
+		tryval = parseVariant3(location, value, tryerr);
+		if (!length(tryerr)) {
+			if (type(vvalue) == "object" && type(tryval) == "object")
+				vvalue = { ...vvalue, ...tryval };
+			else
+				vvalue = tryval;
+
+			success++;
+		}
+		else {
+			push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+		}
+
+		if (success != 1) {
+			if (length(verrors))
+				push(errors, [ location, "must match exactly one of the following constraints:\n" + join("\n- or -\n", verrors) ]);
+			else
+				push(errors, [ location, "must match only one variant" ]);
+			return null;
+		}
+
+		value = vvalue;
+
+		return value;
+	}
+
+	function parseVariant1(location, value, errors) {
+		if (type(value) == "object") {
+			let obj = {};
+
+			function parseWalledGardenFqdn(location, value, errors) {
+				if (type(value) == "array") {
+					function parseItem(location, value, errors) {
+						if (type(value) != "string")
+							push(errors, [ location, "must be of type string" ]);
+
+						return value;
+					}
+
+					return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+				}
+
+				if (type(value) != "array")
+					push(errors, [ location, "must be of type array" ]);
+
+				return value;
+			}
+
+			if (exists(value, "walled-garden-fqdn")) {
+				obj.walled_garden_fqdn = parseWalledGardenFqdn(location + "/walled-garden-fqdn", value["walled-garden-fqdn"], errors);
+			}
+
+			function parseWalledGardenIpaddr(location, value, errors) {
+				if (type(value) == "array") {
+					function parseItem(location, value, errors) {
+						if (type(value) == "string") {
+							if (!matchUcIp(value))
+								push(errors, [ location, "must be a valid IPv4 or IPv6 address" ]);
+
+						}
+
+						if (type(value) != "string")
+							push(errors, [ location, "must be of type string" ]);
+
+						return value;
+					}
+
+					return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+				}
+
+				if (type(value) != "array")
+					push(errors, [ location, "must be of type array" ]);
+
+				return value;
+			}
+
+			if (exists(value, "walled-garden-ipaddr")) {
+				obj.walled_garden_ipaddr = parseWalledGardenIpaddr(location + "/walled-garden-ipaddr", value["walled-garden-ipaddr"], errors);
+			}
+
+			function parseWebRoot(location, value, errors) {
+				if (type(value) == "string") {
+					if (!matchUcBase64(value))
+						push(errors, [ location, "must be a valid base64 encoded data" ]);
+
+				}
+
+				if (type(value) != "string")
+					push(errors, [ location, "must be of type string" ]);
+
+				return value;
+			}
+
+			if (exists(value, "web-root")) {
+				obj.web_root = parseWebRoot(location + "/web-root", value["web-root"], errors);
+			}
+
+			function parseIdleTimeout(location, value, errors) {
+				if (type(value) != "int")
+					push(errors, [ location, "must be of type integer" ]);
+
+				return value;
+			}
+
+			if (exists(value, "idle-timeout")) {
+				obj.idle_timeout = parseIdleTimeout(location + "/idle-timeout", value["idle-timeout"], errors);
+			}
+			else {
+				obj.idle_timeout = 600;
+			}
+
+			function parseSessionTimeout(location, value, errors) {
+				if (type(value) != "int")
+					push(errors, [ location, "must be of type integer" ]);
+
+				return value;
+			}
+
+			if (exists(value, "session-timeout")) {
+				obj.session_timeout = parseSessionTimeout(location + "/session-timeout", value["session-timeout"], errors);
+			}
+
+			return obj;
+		}
+
+		if (type(value) != "object")
+			push(errors, [ location, "must be of type object" ]);
+
+		return value;
+	}
+
+	let success = 0, tryval, tryerr, vvalue = null, verrors = [];
+
+	tryerr = [];
+	tryval = parseVariant0(location, value, tryerr);
+	if (!length(tryerr)) {
+		if (type(vvalue) == "object" && type(tryval) == "object")
+			vvalue = { ...vvalue, ...tryval };
+		else
+			vvalue = tryval;
+
+		success++;
+	}
+	else {
+		push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+	}
+
+	tryerr = [];
+	tryval = parseVariant1(location, value, tryerr);
+	if (!length(tryerr)) {
+		if (type(vvalue) == "object" && type(tryval) == "object")
+			vvalue = { ...vvalue, ...tryval };
+		else
+			vvalue = tryval;
+
+		success++;
+	}
+	else {
+		push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+	}
+
+	if (success != 2) {
+		if (length(verrors))
+			push(errors, [ location, "must match all of the following constraints:\n" + join("\n- or -\n", verrors) ]);
+		else
+			push(errors, [ location, "must match only one variant" ]);
+		return null;
+	}
+
+	value = vvalue;
+
+	return value;
+}
+
+function instantiateInterfaceSsid(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parsePurpose(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "user-defined", "onboarding-ap", "onboarding-sta" ]))
+				push(errors, [ location, "must be one of \"user-defined\", \"onboarding-ap\" or \"onboarding-sta\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "purpose")) {
+			obj.purpose = parsePurpose(location + "/purpose", value["purpose"], errors);
+		}
+		else {
+			obj.purpose = "user-defined";
+		}
+
+		function parseName(location, value, errors) {
+			if (type(value) == "string") {
+				if (length(value) > 32)
+					push(errors, [ location, "must be at most 32 characters long" ]);
+
+				if (length(value) < 1)
+					push(errors, [ location, "must be at least 1 characters long" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "name")) {
+			obj.name = parseName(location + "/name", value["name"], errors);
+		}
+
+		function parseWifiBands(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					if (!(value in [ "2G", "5G", "5G-lower", "5G-upper", "6G" ]))
+						push(errors, [ location, "must be one of \"2G\", \"5G\", \"5G-lower\", \"5G-upper\" or \"6G\"" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "wifi-bands")) {
+			obj.wifi_bands = parseWifiBands(location + "/wifi-bands", value["wifi-bands"], errors);
+		}
+
+		function parseBssMode(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "ap", "sta", "mesh", "wds-ap", "wds-sta", "wds-repeater" ]))
+				push(errors, [ location, "must be one of \"ap\", \"sta\", \"mesh\", \"wds-ap\", \"wds-sta\" or \"wds-repeater\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "bss-mode")) {
+			obj.bss_mode = parseBssMode(location + "/bss-mode", value["bss-mode"], errors);
+		}
+		else {
+			obj.bss_mode = "ap";
+		}
+
+		function parseBssid(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcMac(value))
+					push(errors, [ location, "must be a valid MAC address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "bssid")) {
+			obj.bssid = parseBssid(location + "/bssid", value["bssid"], errors);
+		}
+
+		function parseHiddenSsid(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "hidden-ssid")) {
+			obj.hidden_ssid = parseHiddenSsid(location + "/hidden-ssid", value["hidden-ssid"], errors);
+		}
+
+		function parseIsolateClients(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "isolate-clients")) {
+			obj.isolate_clients = parseIsolateClients(location + "/isolate-clients", value["isolate-clients"], errors);
+		}
+
+		function parseStrictForwarding(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "strict-forwarding")) {
+			obj.strict_forwarding = parseStrictForwarding(location + "/strict-forwarding", value["strict-forwarding"], errors);
+		}
+		else {
+			obj.strict_forwarding = false;
+		}
+
+		function parsePowerSave(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "power-save")) {
+			obj.power_save = parsePowerSave(location + "/power-save", value["power-save"], errors);
+		}
+
+		function parseRtsThreshold(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 1)
+					push(errors, [ location, "must be bigger than or equal to 1" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "rts-threshold")) {
+			obj.rts_threshold = parseRtsThreshold(location + "/rts-threshold", value["rts-threshold"], errors);
+		}
+
+		function parseBroadcastTime(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "broadcast-time")) {
+			obj.broadcast_time = parseBroadcastTime(location + "/broadcast-time", value["broadcast-time"], errors);
+		}
+
+		function parseUnicastConversion(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "unicast-conversion")) {
+			obj.unicast_conversion = parseUnicastConversion(location + "/unicast-conversion", value["unicast-conversion"], errors);
+		}
+		else {
+			obj.unicast_conversion = true;
+		}
+
+		function parseServices(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "services")) {
+			obj.services = parseServices(location + "/services", value["services"], errors);
+		}
+
+		function parseDtimPeriod(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 255)
+					push(errors, [ location, "must be lower than or equal to 255" ]);
+
+				if (value < 1)
+					push(errors, [ location, "must be bigger than or equal to 1" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "dtim-period")) {
+			obj.dtim_period = parseDtimPeriod(location + "/dtim-period", value["dtim-period"], errors);
+		}
+		else {
+			obj.dtim_period = 2;
+		}
+
+		function parseMaximumClients(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "maximum-clients")) {
+			obj.maximum_clients = parseMaximumClients(location + "/maximum-clients", value["maximum-clients"], errors);
+		}
+
+		function parseProxyArp(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "proxy-arp")) {
+			obj.proxy_arp = parseProxyArp(location + "/proxy-arp", value["proxy-arp"], errors);
+		}
+		else {
+			obj.proxy_arp = true;
+		}
+
+		function parseDisassocLowAck(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "disassoc-low-ack")) {
+			obj.disassoc_low_ack = parseDisassocLowAck(location + "/disassoc-low-ack", value["disassoc-low-ack"], errors);
+		}
+		else {
+			obj.disassoc_low_ack = false;
+		}
+
+		function parseVendorElements(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "vendor-elements")) {
+			obj.vendor_elements = parseVendorElements(location + "/vendor-elements", value["vendor-elements"], errors);
+		}
+
+		function parseTipInformationElement(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "tip-information-element")) {
+			obj.tip_information_element = parseTipInformationElement(location + "/tip-information-element", value["tip-information-element"], errors);
+		}
+		else {
+			obj.tip_information_element = true;
+		}
+
+		function parseFilsDiscoveryInterval(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 20)
+					push(errors, [ location, "must be lower than or equal to 20" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "fils-discovery-interval")) {
+			obj.fils_discovery_interval = parseFilsDiscoveryInterval(location + "/fils-discovery-interval", value["fils-discovery-interval"], errors);
+		}
+		else {
+			obj.fils_discovery_interval = 20;
+		}
+
+		if (exists(value, "encryption")) {
+			obj.encryption = instantiateInterfaceSsidEncryption(location + "/encryption", value["encryption"], errors);
+		}
+
+		function parseMultiPsk(location, value, errors) {
+			if (type(value) == "array") {
+				return map(value, (item, i) => instantiateInterfaceSsidMultiPsk(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "multi-psk")) {
+			obj.multi_psk = parseMultiPsk(location + "/multi-psk", value["multi-psk"], errors);
+		}
+
+		if (exists(value, "rrm")) {
+			obj.rrm = instantiateInterfaceSsidRrm(location + "/rrm", value["rrm"], errors);
+		}
+
+		if (exists(value, "rate-limit")) {
+			obj.rate_limit = instantiateInterfaceSsidRateLimit(location + "/rate-limit", value["rate-limit"], errors);
+		}
+
+		function parseRoaming(location, value, errors) {
+			function parseVariant0(location, value, errors) {
+				value = instantiateInterfaceSsidRoaming(location, value, errors);
+
+				return value;
+			}
+
+			function parseVariant1(location, value, errors) {
+				if (type(value) != "bool")
+					push(errors, [ location, "must be of type boolean" ]);
+
+				return value;
+			}
+
+			let success = 0, tryval, tryerr, vvalue = null, verrors = [];
+
+			tryerr = [];
+			tryval = parseVariant0(location, value, tryerr);
+			if (!length(tryerr)) {
+				if (type(vvalue) == "object" && type(tryval) == "object")
+					vvalue = { ...vvalue, ...tryval };
+				else
+					vvalue = tryval;
+
+				success++;
+			}
+			else {
+				push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+			}
+
+			tryerr = [];
+			tryval = parseVariant1(location, value, tryerr);
+			if (!length(tryerr)) {
+				if (type(vvalue) == "object" && type(tryval) == "object")
+					vvalue = { ...vvalue, ...tryval };
+				else
+					vvalue = tryval;
+
+				success++;
+			}
+			else {
+				push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+			}
+
+			if (success == 0) {
+				if (length(verrors))
+					push(errors, [ location, "must match at least one of the following constraints:\n" + join("\n- or -\n", verrors) ]);
+				else
+					push(errors, [ location, "must match only one variant" ]);
+				return null;
+			}
+
+			value = vvalue;
+
+			return value;
+		}
+
+		if (exists(value, "roaming")) {
+			obj.roaming = parseRoaming(location + "/roaming", value["roaming"], errors);
+		}
+
+		if (exists(value, "radius")) {
+			obj.radius = instantiateInterfaceSsidRadius(location + "/radius", value["radius"], errors);
+		}
+
+		if (exists(value, "certificates")) {
+			obj.certificates = instantiateInterfaceSsidCertificates(location + "/certificates", value["certificates"], errors);
+		}
+
+		if (exists(value, "pass-point")) {
+			obj.pass_point = instantiateInterfaceSsidPassPoint(location + "/pass-point", value["pass-point"], errors);
+		}
+
+		if (exists(value, "quality-thresholds")) {
+			obj.quality_thresholds = instantiateInterfaceSsidQualityThresholds(location + "/quality-thresholds", value["quality-thresholds"], errors);
+		}
+
+		if (exists(value, "access-control-list")) {
+			obj.access_control_list = instantiateInterfaceSsidAcl(location + "/access-control-list", value["access-control-list"], errors);
+		}
+
+		if (exists(value, "captive")) {
+			obj.captive = instantiateServiceCaptive(location + "/captive", value["captive"], errors);
+		}
+
+		function parseVlanAwareness(location, value, errors) {
+			if (type(value) == "object") {
+				let obj = {};
+
+				function parseFirst(location, value, errors) {
+					if (type(value) != "int")
+						push(errors, [ location, "must be of type integer" ]);
+
+					return value;
+				}
+
+				if (exists(value, "first")) {
+					obj.first = parseFirst(location + "/first", value["first"], errors);
+				}
+
+				function parseLast(location, value, errors) {
+					if (type(value) != "int")
+						push(errors, [ location, "must be of type integer" ]);
+
+					return value;
+				}
+
+				if (exists(value, "last")) {
+					obj.last = parseLast(location + "/last", value["last"], errors);
+				}
+
+				return obj;
+			}
+
+			if (type(value) != "object")
+				push(errors, [ location, "must be of type object" ]);
+
+			return value;
+		}
+
+		if (exists(value, "vlan-awareness")) {
+			obj.vlan_awareness = parseVlanAwareness(location + "/vlan-awareness", value["vlan-awareness"], errors);
+		}
+
+		function parseHostapdBssRaw(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "hostapd-bss-raw")) {
+			obj.hostapd_bss_raw = parseHostapdBssRaw(location + "/hostapd-bss-raw", value["hostapd-bss-raw"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceTunnelMesh(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseProto(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (value != "mesh")
+				push(errors, [ location, "must have value \"mesh\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "proto")) {
+			obj.proto = parseProto(location + "/proto", value["proto"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceTunnelVxlan(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseProto(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (value != "vxlan")
+				push(errors, [ location, "must have value \"vxlan\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "proto")) {
+			obj.proto = parseProto(location + "/proto", value["proto"], errors);
+		}
+
+		function parsePeerAddress(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchIpv4(value))
+					push(errors, [ location, "must be a valid IPv4 address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "peer-address")) {
+			obj.peer_address = parsePeerAddress(location + "/peer-address", value["peer-address"], errors);
+		}
+
+		function parsePeerPort(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 1)
+					push(errors, [ location, "must be bigger than or equal to 1" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "peer-port")) {
+			obj.peer_port = parsePeerPort(location + "/peer-port", value["peer-port"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceTunnelL2tp(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseProto(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (value != "l2tp")
+				push(errors, [ location, "must have value \"l2tp\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "proto")) {
+			obj.proto = parseProto(location + "/proto", value["proto"], errors);
+		}
+
+		function parseServer(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchIpv4(value))
+					push(errors, [ location, "must be a valid IPv4 address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "server")) {
+			obj.server = parseServer(location + "/server", value["server"], errors);
+		}
+
+		function parseUserName(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "user-name")) {
+			obj.user_name = parseUserName(location + "/user-name", value["user-name"], errors);
+		}
+
+		function parsePassword(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "password")) {
+			obj.password = parsePassword(location + "/password", value["password"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceTunnelGre(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseProto(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (value != "gre")
+				push(errors, [ location, "must have value \"gre\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "proto")) {
+			obj.proto = parseProto(location + "/proto", value["proto"], errors);
+		}
+
+		function parsePeerAddress(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchIpv4(value))
+					push(errors, [ location, "must be a valid IPv4 address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "peer-address")) {
+			obj.peer_address = parsePeerAddress(location + "/peer-address", value["peer-address"], errors);
+		}
+
+		function parseDhcpHealthcheck(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "dhcp-healthcheck")) {
+			obj.dhcp_healthcheck = parseDhcpHealthcheck(location + "/dhcp-healthcheck", value["dhcp-healthcheck"], errors);
+		}
+		else {
+			obj.dhcp_healthcheck = false;
+		}
+
+		function parseDontFragment(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "dont-fragment")) {
+			obj.dont_fragment = parseDontFragment(location + "/dont-fragment", value["dont-fragment"], errors);
+		}
+		else {
+			obj.dont_fragment = false;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceTunnelGre6(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseProto(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (value != "gre6")
+				push(errors, [ location, "must have value \"gre6\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "proto")) {
+			obj.proto = parseProto(location + "/proto", value["proto"], errors);
+		}
+
+		function parsePeerAddress(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchIpv6(value))
+					push(errors, [ location, "must be a valid IPv6 address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "peer-address")) {
+			obj.peer_address = parsePeerAddress(location + "/peer-address", value["peer-address"], errors);
+		}
+
+		function parseDhcpHealthcheck(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "dhcp-healthcheck")) {
+			obj.dhcp_healthcheck = parseDhcpHealthcheck(location + "/dhcp-healthcheck", value["dhcp-healthcheck"], errors);
+		}
+		else {
+			obj.dhcp_healthcheck = false;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateInterfaceTunnel(location, value, errors) {
+	function parseVariant0(location, value, errors) {
+		value = instantiateInterfaceTunnelMesh(location, value, errors);
+
+		return value;
+	}
+
+	function parseVariant1(location, value, errors) {
+		value = instantiateInterfaceTunnelVxlan(location, value, errors);
+
+		return value;
+	}
+
+	function parseVariant2(location, value, errors) {
+		value = instantiateInterfaceTunnelL2tp(location, value, errors);
+
+		return value;
+	}
+
+	function parseVariant3(location, value, errors) {
+		value = instantiateInterfaceTunnelGre(location, value, errors);
+
+		return value;
+	}
+
+	function parseVariant4(location, value, errors) {
+		value = instantiateInterfaceTunnelGre6(location, value, errors);
+
+		return value;
+	}
+
+	let success = 0, tryval, tryerr, vvalue = null, verrors = [];
+
+	tryerr = [];
+	tryval = parseVariant0(location, value, tryerr);
+	if (!length(tryerr)) {
+		if (type(vvalue) == "object" && type(tryval) == "object")
+			vvalue = { ...vvalue, ...tryval };
+		else
+			vvalue = tryval;
+
+		success++;
+	}
+	else {
+		push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+	}
+
+	tryerr = [];
+	tryval = parseVariant1(location, value, tryerr);
+	if (!length(tryerr)) {
+		if (type(vvalue) == "object" && type(tryval) == "object")
+			vvalue = { ...vvalue, ...tryval };
+		else
+			vvalue = tryval;
+
+		success++;
+	}
+	else {
+		push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+	}
+
+	tryerr = [];
+	tryval = parseVariant2(location, value, tryerr);
+	if (!length(tryerr)) {
+		if (type(vvalue) == "object" && type(tryval) == "object")
+			vvalue = { ...vvalue, ...tryval };
+		else
+			vvalue = tryval;
+
+		success++;
+	}
+	else {
+		push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+	}
+
+	tryerr = [];
+	tryval = parseVariant3(location, value, tryerr);
+	if (!length(tryerr)) {
+		if (type(vvalue) == "object" && type(tryval) == "object")
+			vvalue = { ...vvalue, ...tryval };
+		else
+			vvalue = tryval;
+
+		success++;
+	}
+	else {
+		push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+	}
+
+	tryerr = [];
+	tryval = parseVariant4(location, value, tryerr);
+	if (!length(tryerr)) {
+		if (type(vvalue) == "object" && type(tryval) == "object")
+			vvalue = { ...vvalue, ...tryval };
+		else
+			vvalue = tryval;
+
+		success++;
+	}
+	else {
+		push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+	}
+
+	if (success != 1) {
+		if (length(verrors))
+			push(errors, [ location, "must match exactly one of the following constraints:\n" + join("\n- or -\n", verrors) ]);
+		else
+			push(errors, [ location, "must match only one variant" ]);
+		return null;
+	}
+
+	value = vvalue;
+
+	return value;
+}
+
+function instantiateInterface(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseName(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "name")) {
+			obj.name = parseName(location + "/name", value["name"], errors);
+		}
+
+		function parseRole(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "upstream", "downstream" ]))
+				push(errors, [ location, "must be one of \"upstream\" or \"downstream\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "role")) {
+			obj.role = parseRole(location + "/role", value["role"], errors);
+		}
+
+		function parseIsolateHosts(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "isolate-hosts")) {
+			obj.isolate_hosts = parseIsolateHosts(location + "/isolate-hosts", value["isolate-hosts"], errors);
+		}
+
+		function parseMetric(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 4294967295)
+					push(errors, [ location, "must be lower than or equal to 4294967295" ]);
+
+				if (value < 0)
+					push(errors, [ location, "must be bigger than or equal to 0" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "metric")) {
+			obj.metric = parseMetric(location + "/metric", value["metric"], errors);
+		}
+
+		function parseMtu(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 1500)
+					push(errors, [ location, "must be lower than or equal to 1500" ]);
+
+				if (value < 1280)
+					push(errors, [ location, "must be bigger than or equal to 1280" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "mtu")) {
+			obj.mtu = parseMtu(location + "/mtu", value["mtu"], errors);
+		}
+
+		function parseServices(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "services")) {
+			obj.services = parseServices(location + "/services", value["services"], errors);
+		}
+
+		function parseVlanAwareness(location, value, errors) {
+			if (type(value) == "object") {
+				let obj = {};
+
+				function parseFirst(location, value, errors) {
+					if (type(value) != "int")
+						push(errors, [ location, "must be of type integer" ]);
+
+					return value;
+				}
+
+				if (exists(value, "first")) {
+					obj.first = parseFirst(location + "/first", value["first"], errors);
+				}
+
+				function parseLast(location, value, errors) {
+					if (type(value) != "int")
+						push(errors, [ location, "must be of type integer" ]);
+
+					return value;
+				}
+
+				if (exists(value, "last")) {
+					obj.last = parseLast(location + "/last", value["last"], errors);
+				}
+
+				return obj;
+			}
+
+			if (type(value) != "object")
+				push(errors, [ location, "must be of type object" ]);
+
+			return value;
+		}
+
+		if (exists(value, "vlan-awareness")) {
+			obj.vlan_awareness = parseVlanAwareness(location + "/vlan-awareness", value["vlan-awareness"], errors);
+		}
+
+		function parseIeee8021xPorts(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "ieee8021x-ports")) {
+			obj.ieee8021x_ports = parseIeee8021xPorts(location + "/ieee8021x-ports", value["ieee8021x-ports"], errors);
+		}
+
+		if (exists(value, "vlan")) {
+			obj.vlan = instantiateInterfaceVlan(location + "/vlan", value["vlan"], errors);
+		}
+
+		if (exists(value, "bridge")) {
+			obj.bridge = instantiateInterfaceBridge(location + "/bridge", value["bridge"], errors);
+		}
+
+		function parseEthernet(location, value, errors) {
+			if (type(value) == "array") {
+				return map(value, (item, i) => instantiateInterfaceEthernet(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "ethernet")) {
+			obj.ethernet = parseEthernet(location + "/ethernet", value["ethernet"], errors);
+		}
+
+		if (exists(value, "ipv4")) {
+			obj.ipv4 = instantiateInterfaceIpv4(location + "/ipv4", value["ipv4"], errors);
+		}
+
+		if (exists(value, "ipv6")) {
+			obj.ipv6 = instantiateInterfaceIpv6(location + "/ipv6", value["ipv6"], errors);
+		}
+
+		if (exists(value, "broad-band")) {
+			obj.broad_band = instantiateInterfaceBroadBand(location + "/broad-band", value["broad-band"], errors);
+		}
+
+		function parseSsids(location, value, errors) {
+			if (type(value) == "array") {
+				return map(value, (item, i) => instantiateInterfaceSsid(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "ssids")) {
+			obj.ssids = parseSsids(location + "/ssids", value["ssids"], errors);
+		}
+
+		if (exists(value, "tunnel")) {
+			obj.tunnel = instantiateInterfaceTunnel(location + "/tunnel", value["tunnel"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceLldp(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseDescribe(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "describe")) {
+			obj.describe = parseDescribe(location + "/describe", value["describe"], errors);
+		}
+		else {
+			obj.describe = "uCentral Access Point";
+		}
+
+		function parseLocation(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "location")) {
+			obj.location = parseLocation(location + "/location", value["location"], errors);
+		}
+		else {
+			obj.location = "uCentral Network";
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceSsh(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parsePort(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "port")) {
+			obj.port = parsePort(location + "/port", value["port"], errors);
+		}
+		else {
+			obj.port = 22;
+		}
+
+		function parseAuthorizedKeys(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "authorized-keys")) {
+			obj.authorized_keys = parseAuthorizedKeys(location + "/authorized-keys", value["authorized-keys"], errors);
+		}
+
+		function parsePasswordAuthentication(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "password-authentication")) {
+			obj.password_authentication = parsePasswordAuthentication(location + "/password-authentication", value["password-authentication"], errors);
+		}
+		else {
+			obj.password_authentication = true;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceNtp(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseServers(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) == "string") {
+						if (!matchUcHost(value))
+							push(errors, [ location, "must be a valid hostname or IP address" ]);
+
+					}
+
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "servers")) {
+			obj.servers = parseServers(location + "/servers", value["servers"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceMdns(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseEnable(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "enable")) {
+			obj.enable = parseEnable(location + "/enable", value["enable"], errors);
+		}
+		else {
+			obj.enable = false;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceRtty(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseHost(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcHost(value))
+					push(errors, [ location, "must be a valid hostname or IP address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "host")) {
+			obj.host = parseHost(location + "/host", value["host"], errors);
+		}
+
+		function parsePort(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "port")) {
+			obj.port = parsePort(location + "/port", value["port"], errors);
+		}
+		else {
+			obj.port = 5912;
+		}
+
+		function parseToken(location, value, errors) {
+			if (type(value) == "string") {
+				if (length(value) > 32)
+					push(errors, [ location, "must be at most 32 characters long" ]);
+
+				if (length(value) < 32)
+					push(errors, [ location, "must be at least 32 characters long" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "token")) {
+			obj.token = parseToken(location + "/token", value["token"], errors);
+		}
+
+		function parseMutualTls(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "mutual-tls")) {
+			obj.mutual_tls = parseMutualTls(location + "/mutual-tls", value["mutual-tls"], errors);
+		}
+		else {
+			obj.mutual_tls = true;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceLog(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseHost(location, value, errors) {
+			if (type(value) == "string") {
+				if (!matchUcHost(value))
+					push(errors, [ location, "must be a valid hostname or IP address" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "host")) {
+			obj.host = parseHost(location + "/host", value["host"], errors);
+		}
+
+		function parsePort(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 100)
+					push(errors, [ location, "must be bigger than or equal to 100" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "port")) {
+			obj.port = parsePort(location + "/port", value["port"], errors);
+		}
+
+		function parseProto(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "tcp", "udp" ]))
+				push(errors, [ location, "must be one of \"tcp\" or \"udp\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "proto")) {
+			obj.proto = parseProto(location + "/proto", value["proto"], errors);
+		}
+		else {
+			obj.proto = "udp";
+		}
+
+		function parseSize(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value < 32)
+					push(errors, [ location, "must be bigger than or equal to 32" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "size")) {
+			obj.size = parseSize(location + "/size", value["size"], errors);
+		}
+		else {
+			obj.size = 1000;
+		}
+
+		function parsePriority(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value < 0)
+					push(errors, [ location, "must be bigger than or equal to 0" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "priority")) {
+			obj.priority = parsePriority(location + "/priority", value["priority"], errors);
+		}
+		else {
+			obj.priority = 7;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceHttp(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseHttpPort(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 1)
+					push(errors, [ location, "must be bigger than or equal to 1" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "http-port")) {
+			obj.http_port = parseHttpPort(location + "/http-port", value["http-port"], errors);
+		}
+		else {
+			obj.http_port = 80;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceIgmp(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseEnable(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "enable")) {
+			obj.enable = parseEnable(location + "/enable", value["enable"], errors);
+		}
+		else {
+			obj.enable = false;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceIeee8021x(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseMode(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "radius", "user" ]))
+				push(errors, [ location, "must be one of \"radius\" or \"user\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "mode")) {
+			obj.mode = parseMode(location + "/mode", value["mode"], errors);
+		}
+
+		function parseSelectPorts(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "select-ports")) {
+			obj.select_ports = parseSelectPorts(location + "/select-ports", value["select-ports"], errors);
+		}
+
+		function parseUsers(location, value, errors) {
+			if (type(value) == "array") {
+				return map(value, (item, i) => instantiateInterfaceSsidRadiusLocalUser(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "users")) {
+			obj.users = parseUsers(location + "/users", value["users"], errors);
+		}
+
+		function parseRadius(location, value, errors) {
+			if (type(value) == "object") {
+				let obj = {};
+
+				function parseNasIdentifier(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				if (exists(value, "nas-identifier")) {
+					obj.nas_identifier = parseNasIdentifier(location + "/nas-identifier", value["nas-identifier"], errors);
+				}
+
+				function parseAuthServerAddr(location, value, errors) {
+					if (type(value) == "string") {
+						if (!matchUcHost(value))
+							push(errors, [ location, "must be a valid hostname or IP address" ]);
+
+					}
+
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				if (exists(value, "auth-server-addr")) {
+					obj.auth_server_addr = parseAuthServerAddr(location + "/auth-server-addr", value["auth-server-addr"], errors);
+				}
+
+				function parseAuthServerPort(location, value, errors) {
+					if (type(value) in [ "int", "double" ]) {
+						if (value > 65535)
+							push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+						if (value < 1024)
+							push(errors, [ location, "must be bigger than or equal to 1024" ]);
+
+					}
+
+					if (type(value) != "int")
+						push(errors, [ location, "must be of type integer" ]);
+
+					return value;
+				}
+
+				if (exists(value, "auth-server-port")) {
+					obj.auth_server_port = parseAuthServerPort(location + "/auth-server-port", value["auth-server-port"], errors);
+				}
+
+				function parseAuthServerSecret(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				if (exists(value, "auth-server-secret")) {
+					obj.auth_server_secret = parseAuthServerSecret(location + "/auth-server-secret", value["auth-server-secret"], errors);
+				}
+
+				function parseAcctServerAddr(location, value, errors) {
+					if (type(value) == "string") {
+						if (!matchUcHost(value))
+							push(errors, [ location, "must be a valid hostname or IP address" ]);
+
+					}
+
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				if (exists(value, "acct-server-addr")) {
+					obj.acct_server_addr = parseAcctServerAddr(location + "/acct-server-addr", value["acct-server-addr"], errors);
+				}
+
+				function parseAcctServerPort(location, value, errors) {
+					if (type(value) in [ "int", "double" ]) {
+						if (value > 65535)
+							push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+						if (value < 1024)
+							push(errors, [ location, "must be bigger than or equal to 1024" ]);
+
+					}
+
+					if (type(value) != "int")
+						push(errors, [ location, "must be of type integer" ]);
+
+					return value;
+				}
+
+				if (exists(value, "acct-server-port")) {
+					obj.acct_server_port = parseAcctServerPort(location + "/acct-server-port", value["acct-server-port"], errors);
+				}
+
+				function parseAcctServerSecret(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				if (exists(value, "acct-server-secret")) {
+					obj.acct_server_secret = parseAcctServerSecret(location + "/acct-server-secret", value["acct-server-secret"], errors);
+				}
+
+				function parseCoaServerAddr(location, value, errors) {
+					if (type(value) == "string") {
+						if (!matchUcHost(value))
+							push(errors, [ location, "must be a valid hostname or IP address" ]);
+
+					}
+
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				if (exists(value, "coa-server-addr")) {
+					obj.coa_server_addr = parseCoaServerAddr(location + "/coa-server-addr", value["coa-server-addr"], errors);
+				}
+
+				function parseCoaServerPort(location, value, errors) {
+					if (type(value) in [ "int", "double" ]) {
+						if (value > 65535)
+							push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+						if (value < 1024)
+							push(errors, [ location, "must be bigger than or equal to 1024" ]);
+
+					}
+
+					if (type(value) != "int")
+						push(errors, [ location, "must be of type integer" ]);
+
+					return value;
+				}
+
+				if (exists(value, "coa-server-port")) {
+					obj.coa_server_port = parseCoaServerPort(location + "/coa-server-port", value["coa-server-port"], errors);
+				}
+
+				function parseCoaServerSecret(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				if (exists(value, "coa-server-secret")) {
+					obj.coa_server_secret = parseCoaServerSecret(location + "/coa-server-secret", value["coa-server-secret"], errors);
+				}
+
+				function parseMacAddressBypass(location, value, errors) {
+					if (type(value) != "bool")
+						push(errors, [ location, "must be of type boolean" ]);
+
+					return value;
+				}
+
+				if (exists(value, "mac-address-bypass")) {
+					obj.mac_address_bypass = parseMacAddressBypass(location + "/mac-address-bypass", value["mac-address-bypass"], errors);
+				}
+
+				return obj;
+			}
+
+			if (type(value) != "object")
+				push(errors, [ location, "must be of type object" ]);
+
+			return value;
+		}
+
+		if (exists(value, "radius")) {
+			obj.radius = parseRadius(location + "/radius", value["radius"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceRadiusProxy(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseProxySecret(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "proxy-secret")) {
+			obj.proxy_secret = parseProxySecret(location + "/proxy-secret", value["proxy-secret"], errors);
+		}
+		else {
+			obj.proxy_secret = "secret";
+		}
+
+		function parseRealms(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					function parseVariant0(location, value, errors) {
+						if (type(value) == "object") {
+							let obj = {};
+
+							function parseProtocol(location, value, errors) {
+								if (type(value) != "string")
+									push(errors, [ location, "must be of type string" ]);
+
+								if (!(value in [ "radsec" ]))
+									push(errors, [ location, "must be one of \"radsec\"" ]);
+
+								return value;
+							}
+
+							if (exists(value, "protocol")) {
+								obj.protocol = parseProtocol(location + "/protocol", value["protocol"], errors);
+							}
+							else {
+								obj.protocol = "radsec";
+							}
+
+							function parseRealm(location, value, errors) {
+								if (type(value) == "array") {
+									function parseItem(location, value, errors) {
+										if (type(value) != "string")
+											push(errors, [ location, "must be of type string" ]);
+
+										return value;
+									}
+
+									return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+								}
+
+								if (type(value) != "array")
+									push(errors, [ location, "must be of type array" ]);
+
+								return value;
+							}
+
+							if (exists(value, "realm")) {
+								obj.realm = parseRealm(location + "/realm", value["realm"], errors);
+							}
+
+							function parseAutoDiscover(location, value, errors) {
+								if (type(value) != "bool")
+									push(errors, [ location, "must be of type boolean" ]);
+
+								return value;
+							}
+
+							if (exists(value, "auto-discover")) {
+								obj.auto_discover = parseAutoDiscover(location + "/auto-discover", value["auto-discover"], errors);
+							}
+							else {
+								obj.auto_discover = false;
+							}
+
+							function parseHost(location, value, errors) {
+								if (type(value) == "string") {
+									if (!matchUcHost(value))
+										push(errors, [ location, "must be a valid hostname or IP address" ]);
+
+								}
+
+								if (type(value) != "string")
+									push(errors, [ location, "must be of type string" ]);
+
+								return value;
+							}
+
+							if (exists(value, "host")) {
+								obj.host = parseHost(location + "/host", value["host"], errors);
+							}
+
+							function parsePort(location, value, errors) {
+								if (type(value) in [ "int", "double" ]) {
+									if (value > 65535)
+										push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+								}
+
+								if (type(value) != "int")
+									push(errors, [ location, "must be of type integer" ]);
+
+								return value;
+							}
+
+							if (exists(value, "port")) {
+								obj.port = parsePort(location + "/port", value["port"], errors);
+							}
+							else {
+								obj.port = 2083;
+							}
+
+							function parseSecret(location, value, errors) {
+								if (type(value) != "string")
+									push(errors, [ location, "must be of type string" ]);
+
+								return value;
+							}
+
+							if (exists(value, "secret")) {
+								obj.secret = parseSecret(location + "/secret", value["secret"], errors);
+							}
+
+							function parseUseLocalCertificates(location, value, errors) {
+								if (type(value) != "bool")
+									push(errors, [ location, "must be of type boolean" ]);
+
+								return value;
+							}
+
+							if (exists(value, "use-local-certificates")) {
+								obj.use_local_certificates = parseUseLocalCertificates(location + "/use-local-certificates", value["use-local-certificates"], errors);
+							}
+							else {
+								obj.use_local_certificates = false;
+							}
+
+							function parseCaCertificate(location, value, errors) {
+								if (type(value) != "string")
+									push(errors, [ location, "must be of type string" ]);
+
+								return value;
+							}
+
+							if (exists(value, "ca-certificate")) {
+								obj.ca_certificate = parseCaCertificate(location + "/ca-certificate", value["ca-certificate"], errors);
+							}
+
+							function parseCertificate(location, value, errors) {
+								if (type(value) != "string")
+									push(errors, [ location, "must be of type string" ]);
+
+								return value;
+							}
+
+							if (exists(value, "certificate")) {
+								obj.certificate = parseCertificate(location + "/certificate", value["certificate"], errors);
+							}
+
+							function parsePrivateKey(location, value, errors) {
+								if (type(value) != "string")
+									push(errors, [ location, "must be of type string" ]);
+
+								return value;
+							}
+
+							if (exists(value, "private-key")) {
+								obj.private_key = parsePrivateKey(location + "/private-key", value["private-key"], errors);
+							}
+
+							function parsePrivateKeyPassword(location, value, errors) {
+								if (type(value) != "string")
+									push(errors, [ location, "must be of type string" ]);
+
+								return value;
+							}
+
+							if (exists(value, "private-key-password")) {
+								obj.private_key_password = parsePrivateKeyPassword(location + "/private-key-password", value["private-key-password"], errors);
+							}
+
+							return obj;
+						}
+
+						if (type(value) != "object")
+							push(errors, [ location, "must be of type object" ]);
+
+						return value;
+					}
+
+					function parseVariant1(location, value, errors) {
+						if (type(value) == "object") {
+							let obj = {};
+
+							function parseProtocol(location, value, errors) {
+								if (type(value) != "string")
+									push(errors, [ location, "must be of type string" ]);
+
+								if (!(value in [ "radius" ]))
+									push(errors, [ location, "must be one of \"radius\"" ]);
+
+								return value;
+							}
+
+							if (exists(value, "protocol")) {
+								obj.protocol = parseProtocol(location + "/protocol", value["protocol"], errors);
+							}
+
+							function parseRealm(location, value, errors) {
+								if (type(value) == "array") {
+									function parseItem(location, value, errors) {
+										if (type(value) != "string")
+											push(errors, [ location, "must be of type string" ]);
+
+										return value;
+									}
+
+									return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+								}
+
+								if (type(value) != "array")
+									push(errors, [ location, "must be of type array" ]);
+
+								return value;
+							}
+
+							if (exists(value, "realm")) {
+								obj.realm = parseRealm(location + "/realm", value["realm"], errors);
+							}
+
+							function parseAuthServer(location, value, errors) {
+								if (type(value) == "string") {
+									if (!matchUcHost(value))
+										push(errors, [ location, "must be a valid hostname or IP address" ]);
+
+								}
+
+								if (type(value) != "string")
+									push(errors, [ location, "must be of type string" ]);
+
+								return value;
+							}
+
+							if (exists(value, "auth-server")) {
+								obj.auth_server = parseAuthServer(location + "/auth-server", value["auth-server"], errors);
+							}
+
+							function parseAuthPort(location, value, errors) {
+								if (type(value) in [ "int", "double" ]) {
+									if (value > 65535)
+										push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+									if (value < 1024)
+										push(errors, [ location, "must be bigger than or equal to 1024" ]);
+
+								}
+
+								if (type(value) != "int")
+									push(errors, [ location, "must be of type integer" ]);
+
+								return value;
+							}
+
+							if (exists(value, "auth-port")) {
+								obj.auth_port = parseAuthPort(location + "/auth-port", value["auth-port"], errors);
+							}
+
+							function parseAuthSecret(location, value, errors) {
+								if (type(value) != "string")
+									push(errors, [ location, "must be of type string" ]);
+
+								return value;
+							}
+
+							if (exists(value, "auth-secret")) {
+								obj.auth_secret = parseAuthSecret(location + "/auth-secret", value["auth-secret"], errors);
+							}
+
+							function parseAcctServer(location, value, errors) {
+								if (type(value) == "string") {
+									if (!matchUcHost(value))
+										push(errors, [ location, "must be a valid hostname or IP address" ]);
+
+								}
+
+								if (type(value) != "string")
+									push(errors, [ location, "must be of type string" ]);
+
+								return value;
+							}
+
+							if (exists(value, "acct-server")) {
+								obj.acct_server = parseAcctServer(location + "/acct-server", value["acct-server"], errors);
+							}
+
+							function parseAcctPort(location, value, errors) {
+								if (type(value) in [ "int", "double" ]) {
+									if (value > 65535)
+										push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+									if (value < 1024)
+										push(errors, [ location, "must be bigger than or equal to 1024" ]);
+
+								}
+
+								if (type(value) != "int")
+									push(errors, [ location, "must be of type integer" ]);
+
+								return value;
+							}
+
+							if (exists(value, "acct-port")) {
+								obj.acct_port = parseAcctPort(location + "/acct-port", value["acct-port"], errors);
+							}
+
+							function parseAcctSecret(location, value, errors) {
+								if (type(value) != "string")
+									push(errors, [ location, "must be of type string" ]);
+
+								return value;
+							}
+
+							if (exists(value, "acct-secret")) {
+								obj.acct_secret = parseAcctSecret(location + "/acct-secret", value["acct-secret"], errors);
+							}
+
+							return obj;
+						}
+
+						if (type(value) != "object")
+							push(errors, [ location, "must be of type object" ]);
+
+						return value;
+					}
+
+					function parseVariant2(location, value, errors) {
+						if (type(value) == "object") {
+							let obj = {};
+
+							function parseProtocol(location, value, errors) {
+								if (type(value) != "string")
+									push(errors, [ location, "must be of type string" ]);
+
+								if (!(value in [ "block" ]))
+									push(errors, [ location, "must be one of \"block\"" ]);
+
+								return value;
+							}
+
+							if (exists(value, "protocol")) {
+								obj.protocol = parseProtocol(location + "/protocol", value["protocol"], errors);
+							}
+
+							function parseRealm(location, value, errors) {
+								if (type(value) == "array") {
+									function parseItem(location, value, errors) {
+										if (type(value) != "string")
+											push(errors, [ location, "must be of type string" ]);
+
+										return value;
+									}
+
+									return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+								}
+
+								if (type(value) != "array")
+									push(errors, [ location, "must be of type array" ]);
+
+								return value;
+							}
+
+							if (exists(value, "realm")) {
+								obj.realm = parseRealm(location + "/realm", value["realm"], errors);
+							}
+
+							function parseMessage(location, value, errors) {
+								if (type(value) == "array") {
+									function parseItem(location, value, errors) {
+										if (type(value) != "string")
+											push(errors, [ location, "must be of type string" ]);
+
+										return value;
+									}
+
+									return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+								}
+
+								if (type(value) != "string")
+									push(errors, [ location, "must be of type string" ]);
+
+								return value;
+							}
+
+							if (exists(value, "message")) {
+								obj.message = parseMessage(location + "/message", value["message"], errors);
+							}
+
+							return obj;
+						}
+
+						if (type(value) != "object")
+							push(errors, [ location, "must be of type object" ]);
+
+						return value;
+					}
+
+					let success = 0, tryval, tryerr, vvalue = null, verrors = [];
+
+					tryerr = [];
+					tryval = parseVariant0(location, value, tryerr);
+					if (!length(tryerr)) {
+						if (type(vvalue) == "object" && type(tryval) == "object")
+							vvalue = { ...vvalue, ...tryval };
+						else
+							vvalue = tryval;
+
+						success++;
+					}
+					else {
+						push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+					}
+
+					tryerr = [];
+					tryval = parseVariant1(location, value, tryerr);
+					if (!length(tryerr)) {
+						if (type(vvalue) == "object" && type(tryval) == "object")
+							vvalue = { ...vvalue, ...tryval };
+						else
+							vvalue = tryval;
+
+						success++;
+					}
+					else {
+						push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+					}
+
+					tryerr = [];
+					tryval = parseVariant2(location, value, tryerr);
+					if (!length(tryerr)) {
+						if (type(vvalue) == "object" && type(tryval) == "object")
+							vvalue = { ...vvalue, ...tryval };
+						else
+							vvalue = tryval;
+
+						success++;
+					}
+					else {
+						push(verrors, join(" and\n", map(tryerr, err => "\t - " + err[1])));
+					}
+
+					if (success == 0) {
+						if (length(verrors))
+							push(errors, [ location, "must match at least one of the following constraints:\n" + join("\n- or -\n", verrors) ]);
+						else
+							push(errors, [ location, "must match only one variant" ]);
+						return null;
+					}
+
+					value = vvalue;
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "realms")) {
+			obj.realms = parseRealms(location + "/realms", value["realms"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceOnlineCheck(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parsePingHosts(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) == "string") {
+						if (!matchUcHost(value))
+							push(errors, [ location, "must be a valid hostname or IP address" ]);
+
+					}
+
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "ping-hosts")) {
+			obj.ping_hosts = parsePingHosts(location + "/ping-hosts", value["ping-hosts"], errors);
+		}
+
+		function parseDownloadHosts(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "download-hosts")) {
+			obj.download_hosts = parseDownloadHosts(location + "/download-hosts", value["download-hosts"], errors);
+		}
+
+		function parseCheckInterval(location, value, errors) {
+			if (!(type(value) in [ "int", "double" ]))
+				push(errors, [ location, "must be of type number" ]);
+
+			return value;
+		}
+
+		if (exists(value, "check-interval")) {
+			obj.check_interval = parseCheckInterval(location + "/check-interval", value["check-interval"], errors);
+		}
+		else {
+			obj.check_interval = 60;
+		}
+
+		function parseCheckThreshold(location, value, errors) {
+			if (!(type(value) in [ "int", "double" ]))
+				push(errors, [ location, "must be of type number" ]);
+
+			return value;
+		}
+
+		if (exists(value, "check-threshold")) {
+			obj.check_threshold = parseCheckThreshold(location + "/check-threshold", value["check-threshold"], errors);
+		}
+		else {
+			obj.check_threshold = 1;
+		}
+
+		function parseAction(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					if (!(value in [ "wifi", "leds" ]))
+						push(errors, [ location, "must be one of \"wifi\" or \"leds\"" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "action")) {
+			obj.action = parseAction(location + "/action", value["action"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceDataPlane(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseIngressFilters(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) == "object") {
+						let obj = {};
+
+						function parseName(location, value, errors) {
+							if (type(value) != "string")
+								push(errors, [ location, "must be of type string" ]);
+
+							return value;
+						}
+
+						if (exists(value, "name")) {
+							obj.name = parseName(location + "/name", value["name"], errors);
+						}
+
+						function parseProgram(location, value, errors) {
+							if (type(value) == "string") {
+								if (!matchUcBase64(value))
+									push(errors, [ location, "must be a valid base64 encoded data" ]);
+
+							}
+
+							if (type(value) != "string")
+								push(errors, [ location, "must be of type string" ]);
+
+							return value;
+						}
+
+						if (exists(value, "program")) {
+							obj.program = parseProgram(location + "/program", value["program"], errors);
+						}
+
+						return obj;
+					}
+
+					if (type(value) != "object")
+						push(errors, [ location, "must be of type object" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "ingress-filters")) {
+			obj.ingress_filters = parseIngressFilters(location + "/ingress-filters", value["ingress-filters"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceWifiSteering(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseMode(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "local", "none" ]))
+				push(errors, [ location, "must be one of \"local\" or \"none\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "mode")) {
+			obj.mode = parseMode(location + "/mode", value["mode"], errors);
+		}
+
+		function parseAssocSteering(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "assoc-steering")) {
+			obj.assoc_steering = parseAssocSteering(location + "/assoc-steering", value["assoc-steering"], errors);
+		}
+		else {
+			obj.assoc_steering = false;
+		}
+
+		function parseRequiredSnr(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "required-snr")) {
+			obj.required_snr = parseRequiredSnr(location + "/required-snr", value["required-snr"], errors);
+		}
+		else {
+			obj.required_snr = 0;
+		}
+
+		function parseRequiredProbeSnr(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "required-probe-snr")) {
+			obj.required_probe_snr = parseRequiredProbeSnr(location + "/required-probe-snr", value["required-probe-snr"], errors);
+		}
+		else {
+			obj.required_probe_snr = 0;
+		}
+
+		function parseRequiredRoamSnr(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "required-roam-snr")) {
+			obj.required_roam_snr = parseRequiredRoamSnr(location + "/required-roam-snr", value["required-roam-snr"], errors);
+		}
+		else {
+			obj.required_roam_snr = 0;
+		}
+
+		function parseLoadKickThreshold(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "load-kick-threshold")) {
+			obj.load_kick_threshold = parseLoadKickThreshold(location + "/load-kick-threshold", value["load-kick-threshold"], errors);
+		}
+		else {
+			obj.load_kick_threshold = 0;
+		}
+
+		function parseAutoChannel(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "auto-channel")) {
+			obj.auto_channel = parseAutoChannel(location + "/auto-channel", value["auto-channel"], errors);
+		}
+		else {
+			obj.auto_channel = false;
+		}
+
+		function parseIpv6(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "ipv6")) {
+			obj.ipv6 = parseIpv6(location + "/ipv6", value["ipv6"], errors);
+		}
+		else {
+			obj.ipv6 = false;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceQualityOfServiceClassSelector(location, value, errors) {
+	if (type(value) != "string")
+		push(errors, [ location, "must be of type string" ]);
+
+	if (!(value in [ "CS0", "CS1", "CS2", "CS3", "CS4", "CS5", "CS6", "CS7", "AF11", "AF12", "AF13", "AF21", "AF22", "AF23", "AF31", "AF32", "AF33", "AF41", "AF42", "AF43", "DF", "EF", "VA", "LE" ]))
+		push(errors, [ location, "must be one of \"CS0\", \"CS1\", \"CS2\", \"CS3\", \"CS4\", \"CS5\", \"CS6\", \"CS7\", \"AF11\", \"AF12\", \"AF13\", \"AF21\", \"AF22\", \"AF23\", \"AF31\", \"AF32\", \"AF33\", \"AF41\", \"AF42\", \"AF43\", \"DF\", \"EF\", \"VA\" or \"LE\"" ]);
+
+	return value;
+}
+
+function instantiateServiceQualityOfService(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseSelectPorts(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "select-ports")) {
+			obj.select_ports = parseSelectPorts(location + "/select-ports", value["select-ports"], errors);
+		}
+
+		function parseBandwidthUp(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "bandwidth-up")) {
+			obj.bandwidth_up = parseBandwidthUp(location + "/bandwidth-up", value["bandwidth-up"], errors);
+		}
+		else {
+			obj.bandwidth_up = 0;
+		}
+
+		function parseBandwidthDown(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "bandwidth-down")) {
+			obj.bandwidth_down = parseBandwidthDown(location + "/bandwidth-down", value["bandwidth-down"], errors);
+		}
+		else {
+			obj.bandwidth_down = 0;
+		}
+
+		function parseBulkDetection(location, value, errors) {
+			if (type(value) == "object") {
+				let obj = {};
+
+				if (exists(value, "dscp")) {
+					obj.dscp = instantiateServiceQualityOfServiceClassSelector(location + "/dscp", value["dscp"], errors);
+				}
+				else {
+					obj.dscp = "CS0";
+				}
+
+				function parsePacketsPerSecond(location, value, errors) {
+					if (!(type(value) in [ "int", "double" ]))
+						push(errors, [ location, "must be of type number" ]);
+
+					return value;
+				}
+
+				if (exists(value, "packets-per-second")) {
+					obj.packets_per_second = parsePacketsPerSecond(location + "/packets-per-second", value["packets-per-second"], errors);
+				}
+				else {
+					obj.packets_per_second = 0;
+				}
+
+				return obj;
+			}
+
+			if (type(value) != "object")
+				push(errors, [ location, "must be of type object" ]);
+
+			return value;
+		}
+
+		if (exists(value, "bulk-detection")) {
+			obj.bulk_detection = parseBulkDetection(location + "/bulk-detection", value["bulk-detection"], errors);
+		}
+
+		function parseServices(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "services")) {
+			obj.services = parseServices(location + "/services", value["services"], errors);
+		}
+
+		function parseClassifier(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) == "object") {
+						let obj = {};
+
+						if (exists(value, "dscp")) {
+							obj.dscp = instantiateServiceQualityOfServiceClassSelector(location + "/dscp", value["dscp"], errors);
+						}
+						else {
+							obj.dscp = "CS1";
+						}
+
+						function parsePorts(location, value, errors) {
+							if (type(value) == "array") {
+								function parseItem(location, value, errors) {
+									if (type(value) == "object") {
+										let obj = {};
+
+										function parseProtocol(location, value, errors) {
+											if (type(value) != "string")
+												push(errors, [ location, "must be of type string" ]);
+
+											if (!(value in [ "any", "tcp", "udp" ]))
+												push(errors, [ location, "must be one of \"any\", \"tcp\" or \"udp\"" ]);
+
+											return value;
+										}
+
+										if (exists(value, "protocol")) {
+											obj.protocol = parseProtocol(location + "/protocol", value["protocol"], errors);
+										}
+										else {
+											obj.protocol = "any";
+										}
+
+										function parsePort(location, value, errors) {
+											if (type(value) != "int")
+												push(errors, [ location, "must be of type integer" ]);
+
+											return value;
+										}
+
+										if (exists(value, "port")) {
+											obj.port = parsePort(location + "/port", value["port"], errors);
+										}
+
+										function parseRangeEnd(location, value, errors) {
+											if (type(value) != "int")
+												push(errors, [ location, "must be of type integer" ]);
+
+											return value;
+										}
+
+										if (exists(value, "range-end")) {
+											obj.range_end = parseRangeEnd(location + "/range-end", value["range-end"], errors);
+										}
+
+										function parseReclassify(location, value, errors) {
+											if (type(value) != "bool")
+												push(errors, [ location, "must be of type boolean" ]);
+
+											return value;
+										}
+
+										if (exists(value, "reclassify")) {
+											obj.reclassify = parseReclassify(location + "/reclassify", value["reclassify"], errors);
+										}
+										else {
+											obj.reclassify = true;
+										}
+
+										return obj;
+									}
+
+									if (type(value) != "object")
+										push(errors, [ location, "must be of type object" ]);
+
+									return value;
+								}
+
+								return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+							}
+
+							if (type(value) != "array")
+								push(errors, [ location, "must be of type array" ]);
+
+							return value;
+						}
+
+						if (exists(value, "ports")) {
+							obj.ports = parsePorts(location + "/ports", value["ports"], errors);
+						}
+
+						function parseDns(location, value, errors) {
+							if (type(value) == "array") {
+								function parseItem(location, value, errors) {
+									if (type(value) == "object") {
+										let obj = {};
+
+										function parseFqdn(location, value, errors) {
+											if (type(value) == "string") {
+												if (!matchUcFqdn(value))
+													push(errors, [ location, "must be a valid fully qualified domain name" ]);
+
+											}
+
+											if (type(value) != "string")
+												push(errors, [ location, "must be of type string" ]);
+
+											return value;
+										}
+
+										if (exists(value, "fqdn")) {
+											obj.fqdn = parseFqdn(location + "/fqdn", value["fqdn"], errors);
+										}
+
+										function parseSuffixMatching(location, value, errors) {
+											if (type(value) != "bool")
+												push(errors, [ location, "must be of type boolean" ]);
+
+											return value;
+										}
+
+										if (exists(value, "suffix-matching")) {
+											obj.suffix_matching = parseSuffixMatching(location + "/suffix-matching", value["suffix-matching"], errors);
+										}
+										else {
+											obj.suffix_matching = true;
+										}
+
+										function parseReclassify(location, value, errors) {
+											if (type(value) != "bool")
+												push(errors, [ location, "must be of type boolean" ]);
+
+											return value;
+										}
+
+										if (exists(value, "reclassify")) {
+											obj.reclassify = parseReclassify(location + "/reclassify", value["reclassify"], errors);
+										}
+										else {
+											obj.reclassify = true;
+										}
+
+										return obj;
+									}
+
+									if (type(value) != "object")
+										push(errors, [ location, "must be of type object" ]);
+
+									return value;
+								}
+
+								return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+							}
+
+							if (type(value) != "array")
+								push(errors, [ location, "must be of type array" ]);
+
+							return value;
+						}
+
+						if (exists(value, "dns")) {
+							obj.dns = parseDns(location + "/dns", value["dns"], errors);
+						}
+
+						return obj;
+					}
+
+					if (type(value) != "object")
+						push(errors, [ location, "must be of type object" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "classifier")) {
+			obj.classifier = parseClassifier(location + "/classifier", value["classifier"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceFacebookWifi(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseVendorId(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "vendor-id")) {
+			obj.vendor_id = parseVendorId(location + "/vendor-id", value["vendor-id"], errors);
+		}
+
+		function parseGatewayId(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "gateway-id")) {
+			obj.gateway_id = parseGatewayId(location + "/gateway-id", value["gateway-id"], errors);
+		}
+
+		function parseSecret(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "secret")) {
+			obj.secret = parseSecret(location + "/secret", value["secret"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceAirtimeFairness(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseVoiceWeight(location, value, errors) {
+			if (!(type(value) in [ "int", "double" ]))
+				push(errors, [ location, "must be of type number" ]);
+
+			return value;
+		}
+
+		if (exists(value, "voice-weight")) {
+			obj.voice_weight = parseVoiceWeight(location + "/voice-weight", value["voice-weight"], errors);
+		}
+		else {
+			obj.voice_weight = 4;
+		}
+
+		function parsePacketThreshold(location, value, errors) {
+			if (!(type(value) in [ "int", "double" ]))
+				push(errors, [ location, "must be of type number" ]);
+
+			return value;
+		}
+
+		if (exists(value, "packet-threshold")) {
+			obj.packet_threshold = parsePacketThreshold(location + "/packet-threshold", value["packet-threshold"], errors);
+		}
+		else {
+			obj.packet_threshold = 100;
+		}
+
+		function parseBulkThreshold(location, value, errors) {
+			if (!(type(value) in [ "int", "double" ]))
+				push(errors, [ location, "must be of type number" ]);
+
+			return value;
+		}
+
+		if (exists(value, "bulk-threshold")) {
+			obj.bulk_threshold = parseBulkThreshold(location + "/bulk-threshold", value["bulk-threshold"], errors);
+		}
+		else {
+			obj.bulk_threshold = 50;
+		}
+
+		function parsePriorityThreshold(location, value, errors) {
+			if (!(type(value) in [ "int", "double" ]))
+				push(errors, [ location, "must be of type number" ]);
+
+			return value;
+		}
+
+		if (exists(value, "priority-threshold")) {
+			obj.priority_threshold = parsePriorityThreshold(location + "/priority-threshold", value["priority-threshold"], errors);
+		}
+		else {
+			obj.priority_threshold = 30;
+		}
+
+		function parseWeightNormal(location, value, errors) {
+			if (!(type(value) in [ "int", "double" ]))
+				push(errors, [ location, "must be of type number" ]);
+
+			return value;
+		}
+
+		if (exists(value, "weight-normal")) {
+			obj.weight_normal = parseWeightNormal(location + "/weight-normal", value["weight-normal"], errors);
+		}
+		else {
+			obj.weight_normal = 256;
+		}
+
+		function parseWeightPriority(location, value, errors) {
+			if (!(type(value) in [ "int", "double" ]))
+				push(errors, [ location, "must be of type number" ]);
+
+			return value;
+		}
+
+		if (exists(value, "weight-priority")) {
+			obj.weight_priority = parseWeightPriority(location + "/weight-priority", value["weight-priority"], errors);
+		}
+		else {
+			obj.weight_priority = 394;
+		}
+
+		function parseWeightBulk(location, value, errors) {
+			if (!(type(value) in [ "int", "double" ]))
+				push(errors, [ location, "must be of type number" ]);
+
+			return value;
+		}
+
+		if (exists(value, "weight-bulk")) {
+			obj.weight_bulk = parseWeightBulk(location + "/weight-bulk", value["weight-bulk"], errors);
+		}
+		else {
+			obj.weight_bulk = 128;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceWireguardOverlay(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseProto(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (value != "wireguard-overlay")
+				push(errors, [ location, "must have value \"wireguard-overlay\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "proto")) {
+			obj.proto = parseProto(location + "/proto", value["proto"], errors);
+		}
+
+		function parsePrivateKey(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "private-key")) {
+			obj.private_key = parsePrivateKey(location + "/private-key", value["private-key"], errors);
+		}
+
+		function parsePeerPort(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 1)
+					push(errors, [ location, "must be bigger than or equal to 1" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "peer-port")) {
+			obj.peer_port = parsePeerPort(location + "/peer-port", value["peer-port"], errors);
+		}
+		else {
+			obj.peer_port = 3456;
+		}
+
+		function parsePeerExchangePort(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value > 65535)
+					push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+				if (value < 1)
+					push(errors, [ location, "must be bigger than or equal to 1" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "peer-exchange-port")) {
+			obj.peer_exchange_port = parsePeerExchangePort(location + "/peer-exchange-port", value["peer-exchange-port"], errors);
+		}
+		else {
+			obj.peer_exchange_port = 3458;
+		}
+
+		function parseRootNode(location, value, errors) {
+			if (type(value) == "object") {
+				let obj = {};
+
+				function parseKey(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				if (exists(value, "key")) {
+					obj.key = parseKey(location + "/key", value["key"], errors);
+				}
+
+				function parseEndpoint(location, value, errors) {
+					if (type(value) == "string") {
+						if (!matchUcIp(value))
+							push(errors, [ location, "must be a valid IPv4 or IPv6 address" ]);
+
+					}
+
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				if (exists(value, "endpoint")) {
+					obj.endpoint = parseEndpoint(location + "/endpoint", value["endpoint"], errors);
+				}
+
+				function parseIpaddr(location, value, errors) {
+					if (type(value) == "array") {
+						function parseItem(location, value, errors) {
+							if (type(value) == "string") {
+								if (!matchUcIp(value))
+									push(errors, [ location, "must be a valid IPv4 or IPv6 address" ]);
+
+							}
+
+							if (type(value) != "string")
+								push(errors, [ location, "must be of type string" ]);
+
+							return value;
+						}
+
+						return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+					}
+
+					if (type(value) != "array")
+						push(errors, [ location, "must be of type array" ]);
+
+					return value;
+				}
+
+				if (exists(value, "ipaddr")) {
+					obj.ipaddr = parseIpaddr(location + "/ipaddr", value["ipaddr"], errors);
+				}
+
+				return obj;
+			}
+
+			if (type(value) != "object")
+				push(errors, [ location, "must be of type object" ]);
+
+			return value;
+		}
+
+		if (exists(value, "root-node")) {
+			obj.root_node = parseRootNode(location + "/root-node", value["root-node"], errors);
+		}
+
+		function parseHosts(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) == "object") {
+						let obj = {};
+
+						function parseName(location, value, errors) {
+							if (type(value) != "string")
+								push(errors, [ location, "must be of type string" ]);
+
+							return value;
+						}
+
+						if (exists(value, "name")) {
+							obj.name = parseName(location + "/name", value["name"], errors);
+						}
+
+						function parseKey(location, value, errors) {
+							if (type(value) != "string")
+								push(errors, [ location, "must be of type string" ]);
+
+							return value;
+						}
+
+						if (exists(value, "key")) {
+							obj.key = parseKey(location + "/key", value["key"], errors);
+						}
+
+						function parseEndpoint(location, value, errors) {
+							if (type(value) == "string") {
+								if (!matchUcIp(value))
+									push(errors, [ location, "must be a valid IPv4 or IPv6 address" ]);
+
+							}
+
+							if (type(value) != "string")
+								push(errors, [ location, "must be of type string" ]);
+
+							return value;
+						}
+
+						if (exists(value, "endpoint")) {
+							obj.endpoint = parseEndpoint(location + "/endpoint", value["endpoint"], errors);
+						}
+
+						function parseSubnet(location, value, errors) {
+							if (type(value) == "array") {
+								function parseItem(location, value, errors) {
+									if (type(value) == "string") {
+										if (!matchUcCidr(value))
+											push(errors, [ location, "must be a valid IPv4 or IPv6 CIDR" ]);
+
+									}
+
+									if (type(value) != "string")
+										push(errors, [ location, "must be of type string" ]);
+
+									return value;
+								}
+
+								return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+							}
+
+							if (type(value) != "array")
+								push(errors, [ location, "must be of type array" ]);
+
+							return value;
+						}
+
+						if (exists(value, "subnet")) {
+							obj.subnet = parseSubnet(location + "/subnet", value["subnet"], errors);
+						}
+
+						function parseIpaddr(location, value, errors) {
+							if (type(value) == "array") {
+								function parseItem(location, value, errors) {
+									if (type(value) == "string") {
+										if (!matchUcIp(value))
+											push(errors, [ location, "must be a valid IPv4 or IPv6 address" ]);
+
+									}
+
+									if (type(value) != "string")
+										push(errors, [ location, "must be of type string" ]);
+
+									return value;
+								}
+
+								return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+							}
+
+							if (type(value) != "array")
+								push(errors, [ location, "must be of type array" ]);
+
+							return value;
+						}
+
+						if (exists(value, "ipaddr")) {
+							obj.ipaddr = parseIpaddr(location + "/ipaddr", value["ipaddr"], errors);
+						}
+
+						return obj;
+					}
+
+					if (type(value) != "object")
+						push(errors, [ location, "must be of type object" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "hosts")) {
+			obj.hosts = parseHosts(location + "/hosts", value["hosts"], errors);
+		}
+
+		function parseVxlan(location, value, errors) {
+			if (type(value) == "object") {
+				let obj = {};
+
+				function parsePort(location, value, errors) {
+					if (type(value) in [ "int", "double" ]) {
+						if (value > 65535)
+							push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+						if (value < 1)
+							push(errors, [ location, "must be bigger than or equal to 1" ]);
+
+					}
+
+					if (type(value) != "int")
+						push(errors, [ location, "must be of type integer" ]);
+
+					return value;
+				}
+
+				if (exists(value, "port")) {
+					obj.port = parsePort(location + "/port", value["port"], errors);
+				}
+				else {
+					obj.port = 4789;
+				}
+
+				function parseMtu(location, value, errors) {
+					if (type(value) in [ "int", "double" ]) {
+						if (value > 65535)
+							push(errors, [ location, "must be lower than or equal to 65535" ]);
+
+						if (value < 256)
+							push(errors, [ location, "must be bigger than or equal to 256" ]);
+
+					}
+
+					if (type(value) != "int")
+						push(errors, [ location, "must be of type integer" ]);
+
+					return value;
+				}
+
+				if (exists(value, "mtu")) {
+					obj.mtu = parseMtu(location + "/mtu", value["mtu"], errors);
+				}
+				else {
+					obj.mtu = 1420;
+				}
+
+				function parseIsolate(location, value, errors) {
+					if (type(value) != "bool")
+						push(errors, [ location, "must be of type boolean" ]);
+
+					return value;
+				}
+
+				if (exists(value, "isolate")) {
+					obj.isolate = parseIsolate(location + "/isolate", value["isolate"], errors);
+				}
+				else {
+					obj.isolate = true;
+				}
+
+				return obj;
+			}
+
+			if (type(value) != "object")
+				push(errors, [ location, "must be of type object" ]);
+
+			return value;
+		}
+
+		if (exists(value, "vxlan")) {
+			obj.vxlan = parseVxlan(location + "/vxlan", value["vxlan"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceGps(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseAdjustTime(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "adjust-time")) {
+			obj.adjust_time = parseAdjustTime(location + "/adjust-time", value["adjust-time"], errors);
+		}
+		else {
+			obj.adjust_time = false;
+		}
+
+		function parseBaudRate(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			if (!(value in [ 2400, 4800, 9600, 19200 ]))
+				push(errors, [ location, "must be one of 2400, 4800, 9600 or 19200" ]);
+
+			return value;
+		}
+
+		if (exists(value, "baud-rate")) {
+			obj.baud_rate = parseBaudRate(location + "/baud-rate", value["baud-rate"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceDhcpRelay(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseSelectPorts(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "select-ports")) {
+			obj.select_ports = parseSelectPorts(location + "/select-ports", value["select-ports"], errors);
+		}
+
+		function parseVlans(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) == "object") {
+						let obj = {};
+
+						function parseVlan(location, value, errors) {
+							if (!(type(value) in [ "int", "double" ]))
+								push(errors, [ location, "must be of type number" ]);
+
+							return value;
+						}
+
+						if (exists(value, "vlan")) {
+							obj.vlan = parseVlan(location + "/vlan", value["vlan"], errors);
+						}
+
+						function parseRelayServer(location, value, errors) {
+							if (type(value) == "string") {
+								if (!matchUcIp(value))
+									push(errors, [ location, "must be a valid IPv4 or IPv6 address" ]);
+
+							}
+
+							if (type(value) != "string")
+								push(errors, [ location, "must be of type string" ]);
+
+							return value;
+						}
+
+						if (exists(value, "relay-server")) {
+							obj.relay_server = parseRelayServer(location + "/relay-server", value["relay-server"], errors);
+						}
+
+						function parseCircuitIdFormat(location, value, errors) {
+							if (type(value) != "string")
+								push(errors, [ location, "must be of type string" ]);
+
+							if (!(value in [ "vlan-id", "ap-mac", "ssid" ]))
+								push(errors, [ location, "must be one of \"vlan-id\", \"ap-mac\" or \"ssid\"" ]);
+
+							return value;
+						}
+
+						if (exists(value, "circuit-id-format")) {
+							obj.circuit_id_format = parseCircuitIdFormat(location + "/circuit-id-format", value["circuit-id-format"], errors);
+						}
+						else {
+							obj.circuit_id_format = "vlan-id";
+						}
+
+						function parseRemoteIdFormat(location, value, errors) {
+							if (type(value) != "string")
+								push(errors, [ location, "must be of type string" ]);
+
+							if (!(value in [ "vlan-id", "ap-mac", "ssid" ]))
+								push(errors, [ location, "must be one of \"vlan-id\", \"ap-mac\" or \"ssid\"" ]);
+
+							return value;
+						}
+
+						if (exists(value, "remote-id-format")) {
+							obj.remote_id_format = parseRemoteIdFormat(location + "/remote-id-format", value["remote-id-format"], errors);
+						}
+						else {
+							obj.remote_id_format = "ap-mac";
+						}
+
+						return obj;
+					}
+
+					if (type(value) != "object")
+						push(errors, [ location, "must be of type object" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "vlans")) {
+			obj.vlans = parseVlans(location + "/vlans", value["vlans"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceAdminUi(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseWifiSsid(location, value, errors) {
+			if (type(value) == "string") {
+				if (length(value) > 32)
+					push(errors, [ location, "must be at most 32 characters long" ]);
+
+				if (length(value) < 1)
+					push(errors, [ location, "must be at least 1 characters long" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "wifi-ssid")) {
+			obj.wifi_ssid = parseWifiSsid(location + "/wifi-ssid", value["wifi-ssid"], errors);
+		}
+		else {
+			obj.wifi_ssid = "Maverick";
+		}
+
+		function parseWifiKey(location, value, errors) {
+			if (type(value) == "string") {
+				if (length(value) > 63)
+					push(errors, [ location, "must be at most 63 characters long" ]);
+
+				if (length(value) < 8)
+					push(errors, [ location, "must be at least 8 characters long" ]);
+
+			}
+
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			return value;
+		}
+
+		if (exists(value, "wifi-key")) {
+			obj.wifi_key = parseWifiKey(location + "/wifi-key", value["wifi-key"], errors);
+		}
+
+		function parseWifiBands(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					if (!(value in [ "2G", "5G", "5G-lower", "5G-upper", "6G" ]))
+						push(errors, [ location, "must be one of \"2G\", \"5G\", \"5G-lower\", \"5G-upper\" or \"6G\"" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "wifi-bands")) {
+			obj.wifi_bands = parseWifiBands(location + "/wifi-bands", value["wifi-bands"], errors);
+		}
+
+		function parseOfflineTrigger(location, value, errors) {
+			if (!(type(value) in [ "int", "double" ]))
+				push(errors, [ location, "must be of type number" ]);
+
+			return value;
+		}
+
+		if (exists(value, "offline-trigger")) {
+			obj.offline_trigger = parseOfflineTrigger(location + "/offline-trigger", value["offline-trigger"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceRrm(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseBeaconRequestAssoc(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "beacon-request-assoc")) {
+			obj.beacon_request_assoc = parseBeaconRequestAssoc(location + "/beacon-request-assoc", value["beacon-request-assoc"], errors);
+		}
+		else {
+			obj.beacon_request_assoc = true;
+		}
+
+		function parseStationStatsInterval(location, value, errors) {
+			if (!(type(value) in [ "int", "double" ]))
+				push(errors, [ location, "must be of type number" ]);
+
+			return value;
+		}
+
+		if (exists(value, "station-stats-interval")) {
+			obj.station_stats_interval = parseStationStatsInterval(location + "/station-stats-interval", value["station-stats-interval"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateServiceFingerprint(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseMode(location, value, errors) {
+			if (type(value) != "string")
+				push(errors, [ location, "must be of type string" ]);
+
+			if (!(value in [ "polled", "final", "raw-data" ]))
+				push(errors, [ location, "must be one of \"polled\", \"final\" or \"raw-data\"" ]);
+
+			return value;
+		}
+
+		if (exists(value, "mode")) {
+			obj.mode = parseMode(location + "/mode", value["mode"], errors);
+		}
+		else {
+			obj.mode = "final";
+		}
+
+		function parseMinimumAge(location, value, errors) {
+			if (!(type(value) in [ "int", "double" ]))
+				push(errors, [ location, "must be of type number" ]);
+
+			return value;
+		}
+
+		if (exists(value, "minimum-age")) {
+			obj.minimum_age = parseMinimumAge(location + "/minimum-age", value["minimum-age"], errors);
+		}
+		else {
+			obj.minimum_age = 60;
+		}
+
+		function parseMaximumAge(location, value, errors) {
+			if (!(type(value) in [ "int", "double" ]))
+				push(errors, [ location, "must be of type number" ]);
+
+			return value;
+		}
+
+		if (exists(value, "maximum-age")) {
+			obj.maximum_age = parseMaximumAge(location + "/maximum-age", value["maximum-age"], errors);
+		}
+		else {
+			obj.maximum_age = 60;
+		}
+
+		function parsePeriodicity(location, value, errors) {
+			if (!(type(value) in [ "int", "double" ]))
+				push(errors, [ location, "must be of type number" ]);
+
+			return value;
+		}
+
+		if (exists(value, "periodicity")) {
+			obj.periodicity = parsePeriodicity(location + "/periodicity", value["periodicity"], errors);
+		}
+		else {
+			obj.periodicity = 600;
+		}
+
+		function parseAllowWan(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "allow-wan")) {
+			obj.allow_wan = parseAllowWan(location + "/allow-wan", value["allow-wan"], errors);
+		}
+		else {
+			obj.allow_wan = false;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateService(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		if (exists(value, "lldp")) {
+			obj.lldp = instantiateServiceLldp(location + "/lldp", value["lldp"], errors);
+		}
+
+		if (exists(value, "ssh")) {
+			obj.ssh = instantiateServiceSsh(location + "/ssh", value["ssh"], errors);
+		}
+
+		if (exists(value, "ntp")) {
+			obj.ntp = instantiateServiceNtp(location + "/ntp", value["ntp"], errors);
+		}
+
+		if (exists(value, "mdns")) {
+			obj.mdns = instantiateServiceMdns(location + "/mdns", value["mdns"], errors);
+		}
+
+		if (exists(value, "rtty")) {
+			obj.rtty = instantiateServiceRtty(location + "/rtty", value["rtty"], errors);
+		}
+
+		if (exists(value, "log")) {
+			obj.log = instantiateServiceLog(location + "/log", value["log"], errors);
+		}
+
+		if (exists(value, "http")) {
+			obj.http = instantiateServiceHttp(location + "/http", value["http"], errors);
+		}
+
+		if (exists(value, "igmp")) {
+			obj.igmp = instantiateServiceIgmp(location + "/igmp", value["igmp"], errors);
+		}
+
+		if (exists(value, "ieee8021x")) {
+			obj.ieee8021x = instantiateServiceIeee8021x(location + "/ieee8021x", value["ieee8021x"], errors);
+		}
+
+		if (exists(value, "radius-proxy")) {
+			obj.radius_proxy = instantiateServiceRadiusProxy(location + "/radius-proxy", value["radius-proxy"], errors);
+		}
+
+		if (exists(value, "online-check")) {
+			obj.online_check = instantiateServiceOnlineCheck(location + "/online-check", value["online-check"], errors);
+		}
+
+		if (exists(value, "data-plane")) {
+			obj.data_plane = instantiateServiceDataPlane(location + "/data-plane", value["data-plane"], errors);
+		}
+
+		if (exists(value, "wifi-steering")) {
+			obj.wifi_steering = instantiateServiceWifiSteering(location + "/wifi-steering", value["wifi-steering"], errors);
+		}
+
+		if (exists(value, "quality-of-service")) {
+			obj.quality_of_service = instantiateServiceQualityOfService(location + "/quality-of-service", value["quality-of-service"], errors);
+		}
+
+		if (exists(value, "facebook-wifi")) {
+			obj.facebook_wifi = instantiateServiceFacebookWifi(location + "/facebook-wifi", value["facebook-wifi"], errors);
+		}
+
+		if (exists(value, "airtime-fairness")) {
+			obj.airtime_fairness = instantiateServiceAirtimeFairness(location + "/airtime-fairness", value["airtime-fairness"], errors);
+		}
+
+		if (exists(value, "wireguard-overlay")) {
+			obj.wireguard_overlay = instantiateServiceWireguardOverlay(location + "/wireguard-overlay", value["wireguard-overlay"], errors);
+		}
+
+		if (exists(value, "captive")) {
+			obj.captive = instantiateServiceCaptive(location + "/captive", value["captive"], errors);
+		}
+
+		if (exists(value, "gps")) {
+			obj.gps = instantiateServiceGps(location + "/gps", value["gps"], errors);
+		}
+
+		if (exists(value, "dhcp-relay")) {
+			obj.dhcp_relay = instantiateServiceDhcpRelay(location + "/dhcp-relay", value["dhcp-relay"], errors);
+		}
+
+		if (exists(value, "admin-ui")) {
+			obj.admin_ui = instantiateServiceAdminUi(location + "/admin-ui", value["admin-ui"], errors);
+		}
+
+		if (exists(value, "rrm")) {
+			obj.rrm = instantiateServiceRrm(location + "/rrm", value["rrm"], errors);
+		}
+
+		if (exists(value, "fingerprint")) {
+			obj.fingerprint = instantiateServiceFingerprint(location + "/fingerprint", value["fingerprint"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateMetricsStatistics(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseInterval(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value < 60)
+					push(errors, [ location, "must be bigger than or equal to 60" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "interval")) {
+			obj.interval = parseInterval(location + "/interval", value["interval"], errors);
+		}
+
+		function parseTypes(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					if (!(value in [ "ssids", "lldp", "clients", "tid-stats" ]))
+						push(errors, [ location, "must be one of \"ssids\", \"lldp\", \"clients\" or \"tid-stats\"" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "types")) {
+			obj.types = parseTypes(location + "/types", value["types"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateMetricsHealth(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseInterval(location, value, errors) {
+			if (type(value) in [ "int", "double" ]) {
+				if (value < 60)
+					push(errors, [ location, "must be bigger than or equal to 60" ]);
+
+			}
+
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "interval")) {
+			obj.interval = parseInterval(location + "/interval", value["interval"], errors);
+		}
+
+		function parseDhcpLocal(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "dhcp-local")) {
+			obj.dhcp_local = parseDhcpLocal(location + "/dhcp-local", value["dhcp-local"], errors);
+		}
+		else {
+			obj.dhcp_local = true;
+		}
+
+		function parseDhcpRemote(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "dhcp-remote")) {
+			obj.dhcp_remote = parseDhcpRemote(location + "/dhcp-remote", value["dhcp-remote"], errors);
+		}
+		else {
+			obj.dhcp_remote = false;
+		}
+
+		function parseDnsLocal(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "dns-local")) {
+			obj.dns_local = parseDnsLocal(location + "/dns-local", value["dns-local"], errors);
+		}
+		else {
+			obj.dns_local = true;
+		}
+
+		function parseDnsRemote(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "dns-remote")) {
+			obj.dns_remote = parseDnsRemote(location + "/dns-remote", value["dns-remote"], errors);
+		}
+		else {
+			obj.dns_remote = true;
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateMetricsWifiFrames(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseFilters(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					if (!(value in [ "probe", "auth", "assoc", "disassoc", "deauth", "local-deauth", "inactive-deauth", "key-mismatch", "beacon-report", "radar-detected" ]))
+						push(errors, [ location, "must be one of \"probe\", \"auth\", \"assoc\", \"disassoc\", \"deauth\", \"local-deauth\", \"inactive-deauth\", \"key-mismatch\", \"beacon-report\" or \"radar-detected\"" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "filters")) {
+			obj.filters = parseFilters(location + "/filters", value["filters"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateMetricsDhcpSnooping(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseFilters(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					if (!(value in [ "ack", "discover", "offer", "request", "solicit", "reply", "renew" ]))
+						push(errors, [ location, "must be one of \"ack\", \"discover\", \"offer\", \"request\", \"solicit\", \"reply\" or \"renew\"" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "filters")) {
+			obj.filters = parseFilters(location + "/filters", value["filters"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateMetricsWifiScan(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseInterval(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "interval")) {
+			obj.interval = parseInterval(location + "/interval", value["interval"], errors);
+		}
+
+		function parseVerbose(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "verbose")) {
+			obj.verbose = parseVerbose(location + "/verbose", value["verbose"], errors);
+		}
+
+		function parseInformationElements(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "information-elements")) {
+			obj.information_elements = parseInformationElements(location + "/information-elements", value["information-elements"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateMetricsTelemetry(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseInterval(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "interval")) {
+			obj.interval = parseInterval(location + "/interval", value["interval"], errors);
+		}
+
+		function parseTypes(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					if (!(value in [ "ssh", "health", "health.dns", "health.dhcp", "health.radius", "health.memory", "client", "client.join", "client.leave", "client.key-mismatch", "wifi", "wifi.start", "wifi.stop", "wired", "wired.carrier-up", "wired.carrier-down", "unit", "unit.boot-up" ]))
+						push(errors, [ location, "must be one of \"ssh\", \"health\", \"health.dns\", \"health.dhcp\", \"health.radius\", \"health.memory\", \"client\", \"client.join\", \"client.leave\", \"client.key-mismatch\", \"wifi\", \"wifi.start\", \"wifi.stop\", \"wired\", \"wired.carrier-up\", \"wired.carrier-down\", \"unit\" or \"unit.boot-up\"" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "types")) {
+			obj.types = parseTypes(location + "/types", value["types"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateMetricsRealtime(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseTypes(location, value, errors) {
+			if (type(value) == "array") {
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					if (!(value in [ "ssh", "health", "health.dns", "health.dhcp", "health.radius", "health.memory", "client", "client.join", "client.leave", "client.key-mismatch", "wifi", "wifi.start", "wifi.stop", "wired", "wired.carrier-up", "wired.carrier-down", "unit", "unit.boot-up" ]))
+						push(errors, [ location, "must be one of \"ssh\", \"health\", \"health.dns\", \"health.dhcp\", \"health.radius\", \"health.memory\", \"client\", \"client.join\", \"client.leave\", \"client.key-mismatch\", \"wifi\", \"wifi.start\", \"wifi.stop\", \"wired\", \"wired.carrier-up\", \"wired.carrier-down\", \"unit\" or \"unit.boot-up\"" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "types")) {
+			obj.types = parseTypes(location + "/types", value["types"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateMetrics(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		if (exists(value, "statistics")) {
+			obj.statistics = instantiateMetricsStatistics(location + "/statistics", value["statistics"], errors);
+		}
+
+		if (exists(value, "health")) {
+			obj.health = instantiateMetricsHealth(location + "/health", value["health"], errors);
+		}
+
+		if (exists(value, "wifi-frames")) {
+			obj.wifi_frames = instantiateMetricsWifiFrames(location + "/wifi-frames", value["wifi-frames"], errors);
+		}
+
+		if (exists(value, "dhcp-snooping")) {
+			obj.dhcp_snooping = instantiateMetricsDhcpSnooping(location + "/dhcp-snooping", value["dhcp-snooping"], errors);
+		}
+
+		if (exists(value, "wifi-scan")) {
+			obj.wifi_scan = instantiateMetricsWifiScan(location + "/wifi-scan", value["wifi-scan"], errors);
+		}
+
+		if (exists(value, "telemetry")) {
+			obj.telemetry = instantiateMetricsTelemetry(location + "/telemetry", value["telemetry"], errors);
+		}
+
+		if (exists(value, "realtime")) {
+			obj.realtime = instantiateMetricsRealtime(location + "/realtime", value["realtime"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+function instantiateConfigRaw(location, value, errors) {
+	if (type(value) == "array") {
+		function parseItem(location, value, errors) {
+			if (type(value) == "array") {
+				if (length(value) < 2)
+					push(errors, [ location, "must have at least 2 items" ]);
+
+				function parseItem(location, value, errors) {
+					if (type(value) != "string")
+						push(errors, [ location, "must be of type string" ]);
+
+					return value;
+				}
+
+				return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		return map(value, (item, i) => parseItem(location + "/" + i, item, errors));
+	}
+
+	if (type(value) != "array")
+		push(errors, [ location, "must be of type array" ]);
+
+	return value;
+}
+
+function newUCentralState(location, value, errors) {
+	if (type(value) == "object") {
+		let obj = {};
+
+		function parseStrict(location, value, errors) {
+			if (type(value) != "bool")
+				push(errors, [ location, "must be of type boolean" ]);
+
+			return value;
+		}
+
+		if (exists(value, "strict")) {
+			obj.strict = parseStrict(location + "/strict", value["strict"], errors);
+		}
+		else {
+			obj.strict = false;
+		}
+
+		function parseUuid(location, value, errors) {
+			if (type(value) != "int")
+				push(errors, [ location, "must be of type integer" ]);
+
+			return value;
+		}
+
+		if (exists(value, "uuid")) {
+			obj.uuid = parseUuid(location + "/uuid", value["uuid"], errors);
+		}
+
+		if (exists(value, "unit")) {
+			obj.unit = instantiateUnit(location + "/unit", value["unit"], errors);
+		}
+
+		if (exists(value, "globals")) {
+			obj.globals = instantiateGlobals(location + "/globals", value["globals"], errors);
+		}
+
+		if (exists(value, "definitions")) {
+			obj.definitions = instantiateDefinitions(location + "/definitions", value["definitions"], errors);
+		}
+
+		function parseEthernet(location, value, errors) {
+			if (type(value) == "array") {
+				return map(value, (item, i) => instantiateEthernet(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "ethernet")) {
+			obj.ethernet = parseEthernet(location + "/ethernet", value["ethernet"], errors);
+		}
+
+		if (exists(value, "switch")) {
+			obj.switch = instantiateSwitch(location + "/switch", value["switch"], errors);
+		}
+
+		function parseRadios(location, value, errors) {
+			if (type(value) == "array") {
+				return map(value, (item, i) => instantiateRadio(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "radios")) {
+			obj.radios = parseRadios(location + "/radios", value["radios"], errors);
+		}
+
+		function parseInterfaces(location, value, errors) {
+			if (type(value) == "array") {
+				return map(value, (item, i) => instantiateInterface(location + "/" + i, item, errors));
+			}
+
+			if (type(value) != "array")
+				push(errors, [ location, "must be of type array" ]);
+
+			return value;
+		}
+
+		if (exists(value, "interfaces")) {
+			obj.interfaces = parseInterfaces(location + "/interfaces", value["interfaces"], errors);
+		}
+
+		if (exists(value, "services")) {
+			obj.services = instantiateService(location + "/services", value["services"], errors);
+		}
+
+		if (exists(value, "metrics")) {
+			obj.metrics = instantiateMetrics(location + "/metrics", value["metrics"], errors);
+		}
+
+		if (exists(value, "config-raw")) {
+			obj.config_raw = instantiateConfigRaw(location + "/config-raw", value["config-raw"], errors);
+		}
+
+		function parseThirdParty(location, value, errors) {
+			if (type(value) == "object") {
+				let obj = { ...value };
+
+				return obj;
+			}
+
+			if (type(value) != "object")
+				push(errors, [ location, "must be of type object" ]);
+
+			return value;
+		}
+
+		if (exists(value, "third-party")) {
+			obj.third_party = parseThirdParty(location + "/third-party", value["third-party"], errors);
+		}
+
+		return obj;
+	}
+
+	if (type(value) != "object")
+		push(errors, [ location, "must be of type object" ]);
+
+	return value;
+}
+
+return {
+	validate: (value, errors) => {
+		let err = [];
+		let res = newUCentralState("", value, err);
+		if (errors) push(errors, ...map(err, e => "[E] (In " + e[0] + ") Value " + e[1]));
+		return length(err) ? null : res;
+	}
+};
diff --git a/ucentral-client/rootfs/usr/share/ucentral/signature.uc b/ucentral-client/rootfs/usr/share/ucentral/signature.uc
new file mode 100644
index 0000000..2e06a3b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/signature.uc
@@ -0,0 +1,45 @@
+let fs = require('fs');
+
+let key_info = {
+	'dummy_static': function(file, signature) {
+		return signature == 'aaaaaaaaaa';
+	},
+	'cig_sha256': function(file, signature) {
+		// Decrypt from base64 to binary and write to a tmp file
+		let decoded = b64dec(signature);
+		if (!decoded) {
+			return false;
+		}
+		let pub_key_file_name = "/etc/ucentral/sign_pubkey.pem";
+		let sign_file_name = "/tmp/sign_file.txt";
+		let sign_file = fs.open(sign_file_name, "w");
+		sign_file.write(decoded);
+		sign_file.close();
+
+		// Verify the signature
+		let sign_verify_cmd = "openssl dgst -sha256 -verify " + pub_key_file_name + " -signature " + sign_file_name + " " + file;
+		let pipe = fs.popen(sign_verify_cmd);
+		let result = pipe.read("all");
+		let retcode = pipe.close();
+		// Return code of 0 is valid signature
+		if (retcode == 0) {
+			return true;
+		} else {
+			return false;
+		}
+	},
+};
+
+return {
+
+verify: function(file, signature) {
+	let func = key_info[restrict?.key_info?.vendor + '_' + restrict?.key_info?.algo];
+
+	if (!func)
+		return false;
+
+	return func(file, signature);
+},
+
+}
+
diff --git a/ucentral-client/rootfs/usr/share/ucentral/state.uc b/ucentral-client/rootfs/usr/share/ucentral/state.uc
new file mode 100755
index 0000000..d438c8c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/state.uc
@@ -0,0 +1,811 @@
+#!/usr/bin/ucode
+push(REQUIRE_SEARCH_PATH, '/usr/share/ucentral/*.uc');
+let fs = require("fs");
+
+let uci = require("uci");
+let ubus = require("ubus");
+let cfgfile = fs.open("/etc/ucentral/ucentral.active", "r");
+let cfg = json(cfgfile.read("all"));
+let capabfile = fs.open("/etc/ucentral/capabilities.json", "r");
+let capab = json(capabfile.read("all"));
+let now = time();
+
+/* set up basic functionality */
+if (!cursor)
+	cursor = uci.cursor();
+if (!ctx)
+	ctx = ubus.connect();
+
+let state = {
+	unit: { memory: {} },
+	radios: [],
+	interfaces: []
+};
+
+function discover_ports() {
+	let roles = {};
+
+	/* Derive ethernet port names and roles from default config */
+	for (let role, spec in capab.network) {
+		for (let i, ifname in spec) {
+			role = uc(role);
+			push(roles[role] = roles[role] || [], {
+				netdev: ifname,
+				index: i
+			});
+		}
+	}
+
+	/* Sort ports in each role group according to their index, then normalize
+	 * names into uppercase role name with 1-based index suffix in case of multiple
+	 * ports or just uppercase role name in case of single ports */
+	let rv = {};
+
+	for (let role, ports in roles) {
+		switch (length(ports)) {
+		case 0:
+			break;
+
+		case 1:
+			rv[role] = ports[0];
+			break;
+
+		default:
+			map(sort(ports, (a, b) => (a.index - b.index)), (port, i) => {
+				rv[role + (i + 1)] = port;
+			});
+		}
+	}
+
+	return rv;
+}
+
+let select_ports = discover_ports();
+
+function lookup_port(netdev) {
+	for (let k, v in select_ports)
+		if (v.netdev == netdev)
+			return k;
+	return 'unknown';
+}
+
+/* find out what telemetry we should gather */
+let stats;
+cursor.load("state");
+cursor.load("event");
+if (!length(stats)) {
+	stats = cursor.get_all("state", "stats");
+}
+
+let delta = 1;
+if (telemetry)
+	delta = 0;
+
+global.tid_stats = (index(stats.types, 'tid-stats') > 0);
+
+/* load state data */
+let ipv6leases = ctx.call("dhcp", "ipv6leases");
+let topology = ctx.call("topology", "mac");
+let wifistatus = ctx.call("network.wireless", "status");
+let wifiphy = require('wifi.phy');
+let wifiiface = require('wifi.iface');
+let stations = require('wifi.station');
+let survey = require('wifi.survey');
+let mesh = require('wifi.mesh');
+let ports = ctx.call("topology", "port", { delta });
+let poe = ctx.call("poe", "info");
+let gps = ctx.call("gps", "info");
+let ieee8021x = ctx.call("ieee8021x", "dump");
+let devstats = ctx.call('udevstats', 'dump');
+let devices = ctx.call("network.device", "status");
+let previous = json(fs.readfile('/tmp/' + (telemetry ? 'telemetry.json' : 'state.json')) || '{ "ports": {}, "devstats": {}, "stations": {}, "devstats": {} }');
+let finger_config = cursor.get_all("state", "fingerprint");
+let finger_state = json(fs.readfile('/tmp/finger.state') || '{}');
+let fingerprint;
+if (finger_config?.mode != 'polled')
+	fingerprint = ctx.call("fingerprint", "fingerprint", { age: +(finger_config?.min_age || 0), raw: (finger_config?.mode == 'raw') }) || {};
+let finger_wan = [];
+if (!+finger_config?.allow_wan) 
+	for (let k in cursor.get("event", "config", "wan_port"))
+		push(finger_wan, lookup_port(k));
+let stations_lookup = {};
+for (let k, v in stations) {
+	stations_lookup[k] = {};
+	for (let assoc in v)
+		stations_lookup[k][assoc.station] = assoc;
+}
+fs.writefile('/tmp/' + (telemetry ? 'telemetry.json' : 'state.json'), { ports, devstats, stations: stations_lookup, devstats });
+
+if (fingerprint) {
+	for (let mac in fingerprint) {
+		if (!finger_state[mac])
+			finger_state[mac] = { reported: 0 };
+		finger_state[mac].seen = now;
+	}
+
+	for (let mac, data in finger_state)
+		if ((now - data.seen) > (+finger_config?.max_age || 600))
+			delete finger_state[mac];
+}
+
+//printf('%.J\n', previous);
+
+let lldp = [];
+let wireless = cursor.get_all("wireless");
+let snoop = ctx.call("dhcpsnoop", "dump");
+let captive = ctx.call("spotfilter", "client_list", { "interface": "hotspot"});
+
+
+function ports_deltas(port) {
+	if (!ports[port]?.counters || !previous.ports[port]?.counters)
+		return {};
+
+	let ret = {};
+	for (let k in ports[port].counters)
+		ret[k] = ports[port].counters[k] - (previous.ports[port]?.counters[k] || 0);
+	return ret;
+}
+
+function stations_deltas(assoc, iface) {
+	let ret = {};
+	if (!previous.stations[iface] || !previous.stations[iface][assoc.station])
+		return ret;
+	for (let k in [ "rx_packets", "tx_packets", "rx_bytes", "tx_bytes", "tx_retries", "tx_failed" ])
+		ret[k] = assoc[k] - (previous.stations[iface][assoc.station][k] || 0);
+	return ret;
+}
+
+/* prepare dhcp leases cache */
+let ip4leases = {};
+try {
+	let fd = fs.open("/tmp/dhcp.leases");
+	if (fd) {
+		let line;
+		while (line = fd.read("line")) {
+			let tokens = split(line, " ");
+
+			if (length(tokens) < 4)
+				continue;
+
+			ip4leases[tokens[1]] = {
+				assigned: tokens[0],
+				mac: tokens[1],
+				address: tokens[2],
+				hostname: tokens[3]
+			};
+		}
+		fd.close();
+	}
+}
+catch(e) {
+	printf("Failed to parse dhcp leases cache: %s\n%s\n", e, e.stacktrace[0].context);
+}
+
+/* prepare lldp cache */
+try {
+	let stdout = fs.popen("lldpcli -f json show neighbors");
+	let tmp;
+	if (stdout) {
+		tmp = json(stdout.read("all")).lldp[0].interface;
+		stdout.close();
+	} else {
+		printf("LLDP cli command failed: %s", fs.error());
+	}
+
+	for (let key, iface in tmp) {
+		let peer = { };
+		for (let host, chassis in iface.chassis) {
+			if (!length(chassis.id) ||
+			    !length(chassis.descr))
+				continue;
+			peer.mac = chassis.id[0].value;
+			peer.ifname = iface.name;
+			peer.description = chassis.descr[0].value;
+			if (iface?.port[0]?.id[0]?.value && iface?.port[0]?.descr[0]?.value) {
+				peer.port_id = iface.port[0].id[0].value;
+				peer.port_descr = iface.port[0].descr[0].value;
+			}
+			if (length(chassis.name))
+				peer.name = chassis.name[0].value;
+
+			if (length(chassis['mgmt-ip'])) {
+				let ipaddr = [];
+
+				for (let ip in chassis["mgmt-ip"])
+					push(ipaddr, ip.value);
+				peer.management_ips = ipaddr;
+			}
+
+			if (length(chassis.capability)) {
+				let cap = [];
+
+				for (let c in chassis.capability) {
+					if (!c.enabled)
+						continue;
+					push(cap, c.type);
+				}
+				peer.capability = cap;
+			}
+
+		}
+
+		if (!length(peer))
+			continue;
+
+		push(lldp, peer);
+	}
+}
+catch(e) {
+	printf("Failed to parse LLDP cli output: %s\n%s\n", e, e.stacktrace[0].context);
+}
+
+/* system state */
+let system = ctx.call("system", "info");
+state.unit.localtime = system.localtime;
+state.unit.uptime = system.uptime;
+state.unit.load = system.load;
+state.unit.memory.total = system.memory.total;
+state.unit.memory.free = system.memory.free;
+state.unit.memory.cached = system.memory.cached;
+state.unit.memory.buffered = system.memory.buffered;
+
+for (let l = 0; l < 3; l++)
+	state.unit.load[l] /= 65535.0;
+
+let thermal = fs.glob('/sys/class/thermal/thermal_zone*/temp');
+if (length(thermal) > 0) {
+	let temps = [];
+	for (let t in thermal) {
+		let file = fs.open(t, 'r');
+		if (!file)
+			continue;
+		let temp = +file.read('all');
+		if (temp > 1000)
+			temp /= 1000;
+		file.close();
+		// skip non-connected thermal zones
+		if (temp < 200)
+			push(temps, temp);
+	}
+	if (length(temps) > 0) {
+		let avg = 0;
+		temps = sort(temps);
+		for (let t in temps)
+			avg += t;
+		avg /= length(temps);
+		state.unit.temperature = [ avg, temps[-1] ];
+	}
+}
+
+/* cpu load */
+let fs = require('fs');
+
+function sum(arr) {
+	let rv = 0;
+
+	for (let val in arr)
+		rv += +val;
+	return rv;
+}
+
+function cpu_stats() {
+	let proc = fs.open('/proc/stat', 'r');
+	let stats;
+
+	if (proc) {
+		let line;
+		stats = [];
+		while (line = proc.read('line')) {
+			let cols = split(replace(trim(line), '  ', ' '), ' ');
+			if (!wildcard(cols[0], 'cpu*'))
+				continue;
+			shift(cols);
+			push(stats, [ sum(cols), +cols[3] ]);
+		}
+		proc.close();
+	}
+	return stats;
+}
+
+let last;
+let file = fs.open('/tmp/cpu_load', 'r');
+if (file) {
+	last = json(file.read('all'));
+	file.close();
+}
+
+let now = cpu_stats();
+if (now && last) {
+	state.unit.cpu_load = []; 
+	for (let i = 0; i < length(now); i++)
+		//printf('CPU%s %3d\%\n', i ? i : ' ', 100 * (now[i][1] - last[i][1]) / (now[i][0] - last[i][0]));
+		push(state.unit.cpu_load, 100 - (100 * (now[i][1] - last[i][1]) / (now[i][0] - last[i][0])));
+}
+file = fs.open('/tmp/cpu_load', 'w');
+if (file) {
+	file.write(now);
+	file.close();
+}
+
+/* wifi radios */
+for (let radio, data in wifistatus) {
+	if (!length(data.interfaces))
+		continue;
+	let vap = wifiiface[data.interfaces[0].ifname];
+	if (!length(vap))
+		continue;
+
+	let radio = {};
+	radio.channel = vap.channel[0];
+	radio.channels = uniq(vap.channel);
+	radio.frequency = uniq(vap.frequency);
+	radio.channel_width = +vap.ch_width;
+	radio.tx_power = vap.tx_power;
+	radio.survey = [];
+	for (let k, v in survey.survey)
+		if (v.frequency in radio.frequency)
+			push(radio.survey, v);
+	delete radio.in_use;
+	radio.phy = data.config.path;
+	if (wifiphy[data.config.path] && wifiphy[data.config.path].temperature)
+		radio.temperature = wifiphy[data.config.path].temperature;
+	radio.band = wifiphy[data.config.path].band;
+	push(state.radios, radio);
+}
+if (!length(state.radios))
+	delete state.radios;
+
+
+function iface_add_counters(iface, vlan, port) {
+	if (!devstats[port])
+		return;
+	for (let k, vid in devstats[port]) {
+		if (vid.vid != vlan)
+			continue;
+		iface.counters.tx_bytes += vid.tx?.bytes || 0;
+		iface.counters.tx_packets += vid.tx?.packets || 0;
+		iface.counters.rx_bytes += vid.rx?.bytes || 0;
+		iface.counters.rx_packets += vid.rx?.packets || 0;
+		if (previous.devstats[port] && previous.devstats[port][k]) {
+			iface.delta_counters = {};
+			for (let v in [ 'tx_bytes', 'tx_packets', 'rx_bytes', 'rx_packets' ])
+				iface.delta_counters[v] = +iface.counters[v] - (+previous.devstats[port][k] || 0);
+		}
+	}
+}
+
+function is_mesh(net, wif) {
+	if (!net.batman)
+		return false;
+	if (wif.mode != 'mesh')
+		return false;
+	return true;
+}
+
+function get_fingerprint(mac, ports) {
+	if (finger_config?.mode != 'final')
+		return null;
+	if (!fingerprint[mac])
+		return null;
+	if (ports)
+		for (let port in finger_wan)
+			if (port in ports)
+				return 0;
+	if ((time() - finger_state[mac].reported || 0) < (+finger_config.period || 0))
+		return null;
+	finger_state[mac].reported = time();
+	return fingerprint[mac];
+}
+
+let idx = 0;
+let dyn_vlans = {};
+let dyn_vids = [];
+if (devices?.up) for (let k, vlan in devices.up['bridge-vlans']) {
+	if (vlan.id >= 4000)
+		continue;
+	let wlan = [];
+	for (let port in vlan.ports) {
+		let dev = split(port, '-v');
+		if (+dev[1] != vlan.id)
+			continue;
+		if (!dyn_vlans[dev[0]])
+			dyn_vlans[dev[0]] = [];
+		push(dyn_vlans[dev[0]], port);
+	}
+}
+
+/* interfaces */
+cursor.load("network");
+cursor.foreach("network", "interface", function(d) {
+	let name = d[".name"];
+	if (name == "loopback")
+		return;
+	if (index(name, "_") >= 0)
+		return;
+	if (!d.ucentral_path)
+		return;
+	let role = split(name, /[[:digit:]]/)[0];
+	let vlan = split(name, 'v')[1];
+	let iface_port;
+
+	let iface = { name, location: d.ucentral_path, ipv4:{}, ipv6:{} };
+	let ipv4leases = [];
+
+	push(state.interfaces, iface);
+
+	let status = ctx.call(sprintf("network.interface.%s", name) , "status");
+
+	if (!length(status))
+		return;
+
+	if (devices && devices[role] && length(devices[role]["bridge-members"]))
+		iface_ports = devices[role]["bridge-members"];
+	iface.uptime = status.uptime || 0;
+
+	if (length(status["ipv4-address"])) {
+		let ipv4 = [];
+
+		for (let a in status["ipv4-address"])
+			push(ipv4, sprintf("%s/%d", a.address, a.mask));
+
+		iface.ipv4.addresses = ipv4;
+	}
+
+	if (length(status["ipv6-address"])) {
+		iface.ipv6.addresses = status["ipv6-address"];
+		for (let key, addr in iface.ipv6.addresses) {
+			if (!addr.mask)
+				continue;
+			addr.address = sprintf("%s/%s", addr.address, addr.mask);
+			delete addr.mask;
+		}
+	}
+
+	if (length(status["dns-server"]))
+		iface.dns_servers = status["dns-server"];
+
+	if (length(status.data) && status.data.ntpserver)
+		iface.ntp_server = status.data.ntpserver;
+
+	if (length(status.data) && status.data.leasetime && status.proto == "dhcp") {
+		iface.ipv4.leasetime = status.data.leasetime;
+		iface.ipv4.dhcp_server = status.data.dhcpserver;
+	}
+
+	if (length(ipv6leases) &&
+	    length(ipv6leases.device) &&
+	    length(ipv6leases.device[status.device]) &&
+	    length(ipv6leases.device[status.device].leases)) {
+		let leases = [];
+
+		for (let l in ipv6leases.device[status.device].leases) {
+			let lease = {};
+
+			lease.hostname = l.hostname;
+			lease.addresses = [];
+			for (let addr in l["ipv6-addr"])
+				push(lease.addresses, addr.address);
+			push(leases, lease);
+		}
+
+		if (length(leases))
+			iface.ipv6.leases = leases
+	}
+
+	let macs = [];
+
+	if (length(topology)) {
+		let clients = [];
+
+		for (let mac, topo in topology) {
+			if (topo.interface != d[".name"] ||
+			    !length(topo.fdb) ||
+			    (!length(topo["ipv4"]) && !length(topo["ipv6"])))
+				continue;
+
+			let client = {};
+
+			if (length(ip4leases[mac]))
+				push(ipv4leases, ip4leases[mac]);
+
+			client.mac = mac;
+			if (length(topo["ipv4"]))
+				client.ipv4_addresses = topo["ipv4"];
+			else if (snoop && snoop[mac])
+				client.ipv4_addresses = [ snoop[mac] ];
+
+			if (length(topo["ipv6"]))
+				client.ipv6_addresses = topo["ipv6"];
+
+			client.ports = [];
+			for (let k in topo.fdb)
+				push(client.ports, lookup_port(k));
+			let fp = get_fingerprint(mac, client.ports);
+			if (fp)
+				client.fingerprint = fp;
+			client.last_seen = topo.last_seen;
+			if (index(stats.types, 'clients') >= 0) {
+				push(clients, client);
+				push(macs, mac);
+			}
+		}
+
+		if (length(ipv4leases))
+			iface.ipv4.leases = ipv4leases;
+
+
+		if (length(clients))
+			iface.clients = clients;
+	}
+
+	if (index(stats.types, 'ssids') >= 0 && length(wifistatus)) {
+		let ssids = [];
+		let counter = 0;
+
+		for (let radio, data in wifistatus) {
+			for (let k, vap in data.interfaces) {
+				if (!length(vap.config) ||
+				    !length(vap.config.network) ||
+				    !wifiiface[vap.ifname])
+					continue;
+				let wif = wifiiface[vap.ifname];
+				if (!(name in vap.config.network) && !is_mesh(d, wif))
+					continue;
+				let ssid = {
+					radio:{"$ref": sprintf("#/radios/%d", counter)},
+					phy: data.config.path,
+					band: uc(data.config.band)
+				};
+				ssid.location = wireless[vap.section]?.ucentral_path || '';
+				ssid.ssid = wif.ssid || vap.config.mesh_id;
+				ssid.mode = wif.mode;
+				ssid.bssid = wif.bssid;
+				ssid.frequency = uniq(wif.frequency);
+				for (let k, v in stations) {
+					let vlan = split(k, '-v');
+					if (vlan[0] != vap.ifname)
+						continue;
+					if (vlan[1])
+						for (let k, assoc in v)
+							assoc.dynamic_vlan = +vlan[1];
+					ssid.associations = [ ...(ssid.associations || []), ...v ];
+				}
+				for (let assoc in ssid.associations) {
+					let fp = get_fingerprint(assoc.station);
+					if (fp)
+					 	assoc.fingerprint = fp;
+					if (length(ip4leases[assoc.station]))
+			                           assoc.ipaddr_v4 = ip4leases[assoc.station];
+					else if (snoop && snoop[assoc.station]) {
+				 		assoc.ipaddr_v4 = snoop[assoc.station];
+						if (!(assoc.station in macs)) {
+							if (!iface.clients)
+								iface.clients = [];
+							let client = {
+								"mac": assoc.station,
+								"ipv4_addresses": [ snoop[assoc.station] ],
+								"ports": [ vap.ifname ]
+							};
+							push(iface.clients, client);
+						}
+					}
+
+					assoc.delta_counters = stations_deltas(assoc, vap.ifname);
+				}
+
+				ssid.iface = vap.ifname;
+				if (ports[vap.ifname]?.counters) {
+					ssid.counters = ports[vap.ifname].counters || {};
+					ssid.delta_counters = ports_deltas(vap.ifname);
+				}
+				if (is_mesh(d, wif)) {
+					ssid.counters = ports['batman_mesh'].counters;
+					ssid['mesh-path'] = mesh[vap.ifname];
+				}
+				if (dyn_vlans[vap.ifname]) {
+					ssid.vlan_ifaces = [];
+					for (let vlan in dyn_vlans[vap.ifname]) {
+						let vid = +split(vlan, '-v')[1];
+						push(dyn_vids, vid);
+						push(ssid.vlan_ifaces, { ...(ports[vlan]?.counters || {}), ...{ vid} });
+					}
+				}
+				push(ssids, ssid);
+			}
+			counter++;
+		}
+		if (length(ssids))
+			iface.ssids = ssids;
+	}
+
+	iface.counters = ports[name]?.counters || {};
+	if (role == 'up') {
+		iface.counters.rx_bytes = 0;
+		iface.counters.tx_bytes = 0;
+		iface.counters.rx_packets = 0;
+		iface.counters.tx_packets = 0;
+		for (let port in iface_ports)
+			iface_add_counters(iface, vlan, port); 
+
+	} else {
+		iface.delta_counters = ports_deltas(name); 
+	}
+
+	if (!length(iface.ipv4))
+		delete iface.ipv4;
+	if (!length(iface.ipv6))
+		delete iface.ipv6;
+});
+
+dyn_vids = uniq(dyn_vids);
+if (length(dyn_vids)) {
+	state.dynamic_vlans = [];
+	for (let id in dyn_vids) {
+		let dyn = {
+			vid: id,
+			tx_bytes: 0,
+			tx_packets: 0,
+			rx_bytes: 0,
+			rx_packets: 0
+		};
+		for (let k, dev in devstats) {
+			for (let k, vid in dev) {
+				if (vid.vid != id)
+					continue;
+				dyn.tx_bytes += vid.tx.bytes;
+				dyn.tx_packets += vid.tx.packets;
+				dyn.rx_bytes += vid.rx.bytes;
+				dyn.rx_packets += vid.rx.packets;
+			}		
+		}
+		push(state.dynamic_vlans, dyn);
+	}
+}
+
+if (length(poe)) {
+	state.poe = {};
+	state.poe.consumption = poe.consumption;
+	state.poe.ports = [];
+	for (let k, v in poe.ports) {
+		let port = {
+			id: replace(k, 'lan', ''),
+			status: v.status
+		};
+		if (v.consumption)
+			port.consumption = v.consumption;
+		push(state.poe.ports, port);
+	}
+}
+
+if (length(gps) && gps.latitude)
+	state.gps = {
+		latitude: gps.latitude,
+		longitude: gps.longitude,
+		elevation: gps.elevation
+	};
+
+if (length(captive)) {
+	let res = {};
+	let t = time();
+
+	for (let c, val in captive) {
+		res[c] = {
+			status: val.state ? 'Authenticated' : 'Garden',
+			idle: val.idle || 0,
+			time: val.data.connect ? t - val.data.connect : 0,
+			ip4addr: val.ip4addr || '',
+			ip6addr: val.ip6addr || '',
+			packets_ul: val.packets_ul || 0,
+			bytes_ul: val.bytes_ul || 0,
+			packets_dl: val.packets_dl || 0,
+			bytes_dl: val.bytes_dl || 0,
+			username: val?.data?.radius?.request?.username || '',
+		};
+	}
+	state.captive = res;
+}
+
+function sysfs_net(iface, prop) {
+	let f = fs.open(sprintf("/sys/class/net/%s/%s", iface, prop), "r");
+	let val = 0;
+
+	if (f) {
+		val = replace(f.read("all"), '\n', '');
+		f.close();
+	}
+	if (val === null)
+		val = 0;
+	return val;
+}
+
+function link_state_name(name) {
+	let names = {
+		'wan': 'upstream',
+		'lan': 'downstream'
+	};
+	return names[name] || name;
+}
+
+if (length(capab.network)) {
+	let link = {};
+	let lldp_peers = {};
+
+	for (let name, net in capab.network) {
+		let link_name = link_state_name(name);
+		link[link_name] = {};
+		lldp_peers[link_name] = {};
+
+		for (let iface in capab.network[name]) {
+			let state = {};
+			let lldp_state = {};
+			let name = lookup_port(iface);
+
+			state.carrier = +sysfs_net(iface, "carrier");
+			if (state.carrier) {
+				state.speed = +sysfs_net(iface, "speed");
+				state.duplex = sysfs_net(iface, "duplex");
+			}
+			if (ports[iface]?.counters) {
+				state.counters = ports[iface].counters;
+				state.delta_counters = ports_deltas(iface);
+			}
+			link[link_name][name] = state;
+
+			let lldp_neigh = [];
+			for (let l in lldp)
+				if (l.ifname == iface) {
+					delete l.ifname;
+					push(lldp_neigh, l);
+				}
+			if (length(lldp_neigh))
+				lldp_peers[link_name][name] = lldp_neigh;
+
+		}
+	}
+	state["link-state"] = link;
+	if (index(stats.types, 'lldp') >= 0) 
+		state["lldp-peers"] = lldp_peers;
+}
+
+if (ieee8021x)
+	state.ieee8021x = {};
+
+if (fingerprint) {
+	switch(finger_config?.mode) {
+	case 'raw-data':
+		state.fingerprint = fingerprint;
+		break;
+	case 'final':
+		fs.writefile('/tmp/finger.state', finger_state);
+		break;
+	}
+}
+
+state.version = 1;
+printf("%.J\n", state);
+
+let msg = {
+	uuid: cfg.uuid || 1,
+	serial: cursor.get("ucentral", "config", "serial"),
+	state
+};
+
+if (telemetry) {
+	ctx.call("ucentral", "telemetry", { "event": "state", "payload": msg });
+	let f = fs.open("/tmp/ucentral.telemetry", "w");
+	if (f) {
+		f.write(msg);
+		f.close();
+	}
+	return;
+}
+
+ctx.call("ucentral", "stats", msg);
+let f = fs.open("/tmp/ucentral.state", "w");
+if (f) {
+	f.write(msg);
+	f.close();
+}
+else {
+	printf("Unable to open %s for writing: %s", statefile_path, fs.error());
+}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/sysinfo.uc b/ucentral-client/rootfs/usr/share/ucentral/sysinfo.uc
new file mode 100644
index 0000000..d6a9bf2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/sysinfo.uc
@@ -0,0 +1,26 @@
+let fs = require("fs");
+let ubus = require("ubus");
+let ctx = ubus.connect();
+let services = ctx.call("service", "list");
+let sysinfo = {};
+
+for (let name, service in services) {
+	if (!service.instances)
+		continue;
+	let s = [];
+	for (let idx, instance in service.instances) {
+		if (!instance.running)
+			continue;
+		push(s, {
+			pid: instance.pid,
+			basename: fs.basename(instance.command[0]),
+			meminfo: instance.meminfo,
+			load: instance.load,
+			age: instance.age,
+			fds: instance.fds,
+		});
+	}
+	if (length(s))
+		sysinfo[name] = s;
+}
+printf("%.J\n", sysinfo);
diff --git a/ucentral-client/rootfs/usr/share/ucentral/telemetry.uc b/ucentral-client/rootfs/usr/share/ucentral/telemetry.uc
new file mode 100755
index 0000000..68e5e83
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/telemetry.uc
@@ -0,0 +1,8 @@
+#!/usr/bin/ucode
+let fs = require("fs");
+let f = fs.open("/tmp/ucentral.telemetry", "w");
+if (f)
+	f.close();
+
+telemetry = true;
+include("state.uc");
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/admin_ui.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/admin_ui.uc
new file mode 100644
index 0000000..fec6cae
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/admin_ui.uc
@@ -0,0 +1,42 @@
+{%
+	let admin_ui = state.services?.admin_ui;
+	if (!admin_ui?.wifi_ssid)
+		return;
+
+	let interface = {
+		admin_ui: true,
+		name: 'Admin-UI',
+		role: 'downstream',
+		auto_start: 0,
+		services: [ 'ssh', 'http' ],
+		ipv4: {
+			addressing: 'static',
+			subnet: '10.254.254.1/24',
+			dhcp: {
+				lease_first: 10,
+				lease_count: 10,
+				lease_time: '6h'
+			}
+		},
+		ssids: [
+			{
+				name: admin_ui.wifi_ssid,
+				wifi_bands: [ '2G', '5G' ],
+				bss_mode: 'ap',
+				encryption: {
+					proto: 'none'
+				}
+			}
+		],
+	};
+
+	if (admin_ui.wifi_bands)
+		interface.ssids[0].wifi_bands = admin_ui.wifi_bands;
+	if (admin_ui.wifi_key) {
+		interface.ssids[0].encryption.proto = 'psk2';
+		interface.ssids[0].encryption.key = admin_ui.wifi_key;
+	}
+	push(state.interfaces, interface);
+%}
+
+set state.ui.offline_trigger={{ admin_ui.offline_trigger }}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/base.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/base.uc
new file mode 100644
index 0000000..2f86994
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/base.uc
@@ -0,0 +1,47 @@
+{%
+let roles = (state.switch && state.switch.loop_detection &&
+	     state.switch.loop_detection.roles) ?
+			state.switch.loop_detection.roles : [];
+
+services.set_enabled("ustpd", length(roles));
+
+function loop_detect(role) {
+	return (index(roles, role) >= 0) ? 1 : 0;
+}
+%}
+
+# Basic configuration
+set network.loopback=interface
+set network.loopback.ifname='lo'
+set network.loopback.proto='static'
+set network.loopback.ipaddr='127.0.0.1'
+set network.loopback.netmask='255.0.0.0'
+
+set network.up=device
+set network.up.name=up
+set network.up.type=bridge
+set network.up.stp={{ loop_detect("upstream") }}
+set network.up.igmp_snooping='1'
+set network.up.macaddr={{ s(capab.macaddr?.wan) }}
+
+{% if (capab.platform != "switch"): %}
+set network.down=device
+set network.down.name=down
+set network.down.type=bridge
+set network.down.stp={{ loop_detect("downstream") }}
+set network.down.igmp_snooping='1'
+set network.down.macaddr={{ s(capab.macaddr?.lan) }}
+
+{% endif %}
+set network.up_none=interface
+set network.up_none.ifname=up
+set network.up_none.proto=none
+
+{% for (let k, v in capab.switch): %}
+add network switch
+set network.@switch[-1].name={{ s(v.name) }}
+set network.@switch[-1].reset={{ b(v.reset) }}
+set network.@switch[-1].enable_vlan={{ b(v.enable) }}
+{% endfor %}
+
+
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/broadband.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/broadband.uc
new file mode 100644
index 0000000..e1bd0f1
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/broadband.uc
@@ -0,0 +1,100 @@
+{%
+/* find and replace the first upstream interface using vid with
+ * the broadband settings */
+let uplink = ethernet.get_interface("upstream", 0);
+if (!uplink)
+	return;
+
+if (index([ "wwan", "pppoe", "static", "dhcp", "wds" ], broadband.protocol) < 0)
+	return;
+
+for (let k, v in uplink)
+	if (index([ "vlan", "index" ], k) < 0)
+		delete uplink[k];
+
+uplink.name = "ISP_UPLINK";
+uplink.role = "upstream";
+uplink.vlan = {	id: 0 };
+uplink.metric = 1;
+
+if (broadband.protocol == "wwan") {
+	let wwan = { };
+
+	wwan.protocol = 'wwan';
+	wwan.modem_type = broadband['modem-type'] || 'wwan';
+	wwan.pin_code = broadband['pin-code'] || '';
+	wwan.access_point_name = broadband['access-point-name'] || '';
+	wwan.packet_data_protocol = broadband['packet-data-protocol'] || 'dual-stack';
+	wwan.authentication_type = broadband['authentication-type'] || 'none';
+	wwan.username = broadband.username || '';
+	wwan.password = broadband.password || '';
+
+	uplink.broad_band = wwan;
+}
+
+if (broadband.protocol == "pppoe") {
+	let pppoe = { };
+
+	pppoe.protocol = 'pppoe';
+	pppoe.username = broadband['user-name'] || '';
+	pppoe.password = broadband.password || '';
+	pppoe.timeout = broadband.timeout || '30';
+
+	uplink.broad_band = pppoe;
+	uplink.ethernet = [
+		{
+			"select_ports": [ "WAN*" ]
+		}
+	];
+}
+
+if (broadband.protocol == "static") {
+	uplink.ethernet = [
+		{
+			"select_ports": [ "WAN*" ]
+		}
+	];
+	uplink.ipv4 = {
+		addressing: "static",
+		subnet: broadband['ipv4-address'],
+		gateway: broadband['ipv4-gateway'],
+		use_dns: broadband['use-dns'],
+	};
+}
+
+if (broadband.protocol == "dhcp") {
+	uplink.ethernet = [
+		{
+			"select_ports": [ "WAN*" ]
+		}
+	];
+	uplink.ipv4 = {
+		addressing: "dynamic",
+	};
+}
+
+if (broadband.protocol == "wds") {
+	uplink.ipv4 = {
+		addressing: "dynamic",
+	};
+
+	let wds = {
+		"name": broadband.ssid,
+		"wifi_bands": [
+			"2G", "5G"
+		],
+		"bss_mode": "wds-sta",
+		"encryption": {
+			"proto": broadband.encryption,
+			"key": broadband.passphrase,
+			"ieee80211w": "optional"
+		}
+	};
+
+	if (!uplink.ssids)
+		uplink.ssids = [ wds ];
+	else
+		push(uplink.ssids, wds);
+}
+
+%}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/config_raw.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/config_raw.uc
new file mode 100644
index 0000000..359addd
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/config_raw.uc
@@ -0,0 +1,5 @@
+
+# Raw Configuration
+{% for (let config in config_raw): %}
+{{ config[0] }} {{ config[1] }}{{config[2] ? '=' + config[2] : ''}}
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/eap_users.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/eap_users.uc
new file mode 100644
index 0000000..48c6987
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/eap_users.uc
@@ -0,0 +1,4 @@
+{% for (let user in users): %}
+"{{ user.user_name }}"	PWD	"{{ user.password }}"
+{% endfor %}
+* TLS,TTLS
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/ethernet.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/ethernet.uc
new file mode 100644
index 0000000..ffd5fde
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/ethernet.uc
@@ -0,0 +1,11 @@
+{% let eth_ports = ethernet.lookup_by_select_ports(ports.select_ports) %}
+{% for (let port in eth_ports):
+	port = replace(port, '.', '_');
+%}
+set network.{{ port }}=device
+set network.{{ port }}.name={{ s(port) }}
+set network.{{ port }}.ifname={{ s(port) }}
+set network.{{ port }}.enabled={{ b(ports.enabled) }}
+{% if (!ports.speed) continue %}
+set network.{{ port }}.speed={{ ports.speed }}
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface.uc
new file mode 100644
index 0000000..7cda01d
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface.uc
@@ -0,0 +1,227 @@
+{%
+	let has_downstream_relays = false;
+	let dest;
+
+	// Skip interfaces previously marked as conflicting.
+	if (interface.conflicting) {
+		warn("Skipping conflicting interface declaration");
+
+		return;
+	}
+
+	// Skip upstream interfaces that try to use a wireguard overlay
+	if (interface.role == 'upstream' && 'wireguard-overlay' in interface.services) {
+		warn("Skipping interface. wireguard-overlay is not allowed on upstream interfaces.");
+
+		return;
+	}
+
+	// Check this interface for role/vlan uniqueness...
+	let this_vid = interface.vlan.id || interface.vlan.dyn_id;
+
+	for (let other_interface in state.interfaces) {
+		if (other_interface == interface)
+			continue;
+
+		if (!other_interface.ethernet && length(interface.ssids) == 1)
+			continue;
+
+		let other_vid = other_interface.vlan.id || '';
+
+		if (interface.role === other_interface.role && this_vid === other_vid) {
+			warn("Multiple interfaces with same role and VLAN ID defined, ignoring conflicting interface");
+			other_interface.conflicting = true;
+		}
+
+		if (other_interface.role == 'downstream' &&
+		    other_interface.ipv6 &&
+		    other_interface.ipv6.dhcpv6 &&
+		    other_interface.ipv6.dhcpv6.mode == 'relay')
+		    has_downstream_relays = true;
+	}
+
+	// check if a downstream interface with a vlan has a matching upstream interface
+	if (ethernet.has_vlan(interface) && interface.role == "downstream" && index(vlans, this_vid) < 0) {
+		warn("Trying to create a downstream interface with a VLAN ID, without matching upstream interface.");
+		return;
+	}
+
+	// reject static config that has no subnet
+	if (interface.role == 'upstream' && interface.ipv4?.addressing == 'static')
+		if (!interface.ipv4?.subnet || !interface.ipv4?.use_dns || !interface.ipv4?.gateway)
+			die('invalid static interface settings');
+
+	// resolve auto prefixes
+	if (wildcard(interface.ipv4?.subnet, 'auto/*')) {
+		try {
+			interface.ipv4.subnet = ipcalc.generate_prefix(state, interface.ipv4.subnet, false);
+		}
+		catch (e) {
+			warn("Unable to allocate a suitable IPv4 prefix: %s, ignoring interface", e);
+			return;
+		}
+	}
+
+	if (wildcard(interface.ipv6?.subnet, 'auto/*')) {
+		try {
+			interface.ipv6.subnet = ipcalc.generate_prefix(state, interface.ipv6.subnet, true);
+		}
+		catch (e) {
+			warn("Unable to allocate a suitable IPv6 prefix: %s, ignoring interface", e);
+			return;
+		}
+	}
+
+	// Captive Portal is only supported on downstream interfaces
+	if (interface.captive && interface.role != 'downstream') {
+		warn("Trying to create a Captive Portal on a none downstream interface.");
+		return;
+	}
+
+	// Port forwardings are only supported on downstream interfaces
+	if ((interface.ipv4?.port_forward || interface.ipv6?.port_forward) && interface.role != 'downstream') {
+		warn("Port forwardings are only supported on downstream interfaces.");
+		return;
+	}
+
+	// Traffic accept rules are only supported on downstream interfaces
+	if (interface.ipv6?.traffic_allow && interface.role != 'downstream') {
+		warn("Traffic accept rules are only supported on downstream interfaces.");
+		return;
+	}
+
+	// Gather related BSS modes and ethernet ports.
+	let bss_modes = map(interface.ssids, ssid => ssid.bss_mode);
+	let eth_ports = ethernet.lookup_by_interface_vlan(interface);
+	let dot1x_ports = ethernet.lookup_by_select_ports(interface.ieee8021x_ports);
+	let swconfig;
+	if (interface.role == 'upstream')
+		swconfig = ethernet.switch_by_interface_vlan(interface);
+
+	// If at least one station mode SSID is part of this interface then we must
+	// not bridge at all. Having any other SSID or any number of matching ethernet
+	// ports in such a case is a semantic error.
+	if ('sta' in bss_modes && (length(eth_ports) > 0 || length(bss_modes) > 1)) {
+		warn("Station mode SSIDs cannot be bridged with ethernet ports or other SSIDs, ignoring interface");
+
+		return;
+	}
+
+	// Compute unique logical name and netdev name to use
+	let name = ethernet.calculate_name(interface);
+	let bridgedev = 'up';
+	if (capab.platform != "switch" && interface.role == "downstream")
+		bridgedev = 'down';
+	let netdev = name;
+	let network = name;
+
+	// Determine the IPv4 and IPv6 configuration modes and figure out if we
+	// can set them both in a single interface (automatic) or whether we need
+	// two logical interfaces due to different protocols.
+	let ipv4_mode = interface.ipv4 ? interface.ipv4.addressing : 'none';
+	let ipv6_mode = interface.ipv6 ? interface.ipv6.addressing : 'none';
+
+	// If no metric is defined explicitly, any upstream interfaces will default
+	// to 5 and downstream interfaces will default to 10
+	if (!interface.metric && interface.role == "upstream")
+		interface.metric = 5;
+	if (!interface.metric && interface.role == "downstream")
+		interface.metric = 10;
+
+	if (interface.isolate_hosts) {
+		interface.bridge ??= {};
+		interface.bridge.isolate_ports = true;
+	}
+
+	// If this interface is a tunnel, we need to create the interface
+	// in a different way
+	let tunnel_proto = interface.tunnel ? interface.tunnel.proto : '';
+
+	//
+	// Create the actual UCI sections
+	//
+
+	if (interface.broad_band) {
+		include("interface/broadband.uc", { interface, name, location, eth_ports, raw_ports });
+		return;
+	}
+
+	// tunnel interfaces need additional sections
+	if (tunnel_proto in [ "mesh", "l2tp", "vxlan", "gre", "gre6" ])
+		include("interface/" + tunnel_proto + ".uc", { interface, name, eth_ports, location, netdev, ipv4_mode, ipv6_mode, this_vid });
+
+	if (!interface.ethernet && length(interface.ssids) == 1 && !tunnel_proto && !("vxlan-overlay" in interface.services)) {
+		if (interface.role == 'downstream')
+			interface.type = 'bridge';
+		netdev = '';
+	} else if (tunnel_proto == 'vxlan') {
+		netdev = '@' + name + '_vx';
+		interface.type = 'bridge';
+	} else if (tunnel_proto != 'gre' && tunnel_proto != 'gre6')
+		// anything else requires a bridge-vlan
+		include("interface/bridge-vlan.uc", { interface, name, eth_ports, this_vid, bridgedev, swconfig });
+
+	if (interface.role == "downstream" && "wireguard-overlay" in interface.services)
+		dest = 'unet';
+
+	include("interface/common.uc", {
+		name, this_vid, netdev,
+		ipv4_mode, ipv4: interface.ipv4 || {},
+		ipv6_mode, ipv6: interface.ipv6 || {}
+	});
+
+	include('interface/firewall.uc', { name, ipv4_mode, ipv6_mode, dest });
+
+	if (interface.ipv4 || interface.ipv6) {
+		include('interface/dhcp.uc', {
+			ipv4: interface.ipv4 || {},
+			ipv6: interface.ipv6 || {},
+			has_downstream_relays
+		});
+	}
+
+	let count = 0;
+	for (let i, ssid in interface.ssids) {
+		let modes = (ssid.bss_mode == "wds-repeater") ?
+			[ "wds-sta", "wds-ap" ] : [ ssid.bss_mode ];
+		for (let mode in modes) {
+			if (ssid?.encryption?.proto == 'owe-transition') {
+				ssid.encryption.proto = 'none';
+				include('interface/ssid.uc', {
+					location: location + '/ssids/' + i + '_owe',
+					ssid: { ...ssid, bss_mode: mode },
+					count,
+					name,
+					network,
+					owe: true,
+				});
+				ssid.encryption.proto = 'owe-transition';
+			}
+
+			include('interface/ssid.uc', {
+				location: location + '/ssids/' + i,
+				ssid: { ...ssid, bss_mode: mode },
+				count,
+				name,
+				network,
+			});
+			count++;
+		}
+	}
+
+	if (interface.captive)
+		include('interface/captive.uc', { name });
+
+	if (length(dot1x_ports))
+		include('interface/ieee8021x.uc', { dot1x_ports, interface, eth_ports, this_vid });
+
+%}
+{% if (tunnel_proto == 'mesh'): %}
+set network.{{ name }}.batman=1
+{% endif %}
+
+{% if (interface.role == "downstream" && "wireguard-overlay" in interface.services): %}
+add network rule
+set network.@rule[-1].in='{{name}}'
+set network.@rule[-1].lookup='{{ routing_table.get('wireguard_overlay') }}'
+{% endif %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface/bridge-vlan.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/bridge-vlan.uc
new file mode 100644
index 0000000..36c6875
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/bridge-vlan.uc
@@ -0,0 +1,94 @@
+add network bridge-vlan
+set network.@bridge-vlan[-1].device={{ bridgedev }}
+set network.@bridge-vlan[-1].vlan={{ this_vid }}
+{%  for (let port in keys(eth_ports)): %}
+add_list network.@bridge-vlan[-1].ports={{ port }}{{ ethernet.port_vlan(interface, eth_ports[port]) }}
+{%  endfor %}
+{% if (interface.tunnel?.proto == "mesh"): %}
+add_list network.@bridge-vlan[-1].ports=batman{{ ethernet.has_vlan(interface) ? "." + this_vid + ":t" : '' }}
+{% endif %}
+{% if (interface.tunnel?.proto == "vxlan"): %}
+add_list network.@bridge-vlan[-1].ports={{ name }}_vx
+{% endif %}
+{% if (interface.tunnel?.proto == "gre"): %}
+add_list network.@bridge-vlan[-1].ports=gre4t-gre.{{ interface.vlan.id }}
+{% endif %}
+{% if (interface.tunnel?.proto == "gre6"): %}
+add_list network.@bridge-vlan[-1].ports=gre6t-greip6.{{ interface.vlan.id }}
+{% endif %}
+{% if ('vxlan-overlay' in interface.services): %}
+add_list network.@bridge-vlan[-1].ports=vx-unet
+{% endif %}
+{% if (interface.bridge): %}
+set network.@bridge-vlan[-1].txqueuelen={{ interface.bridge.tx_queue_len }}
+set network.@bridge-vlan[-1].isolate={{ b(interface.bridge.isolate_ports || interface.isolate_hosts) }}
+set network.@bridge-vlan[-1].mtu={{ interface.bridge.mtu }}
+{% endif %}
+
+add network device
+set network.@device[-1].type=8021q
+set network.@device[-1].name={{ name }}
+set network.@device[-1].ifname={{ bridgedev }}
+set network.@device[-1].vid={{ this_vid }}
+
+{% if (interface.vlan_awareness?.first): %}
+{%   let vlan = interface.vlan_awareness.first;
+     if (interface.vlan_awareness.last)
+	     vlan += '-' + interface.vlan_awareness.last; %}
+{%   for (let port in keys(eth_ports)): %}
+add network device
+set network.@device[-1].name={{ port }}
+set network.@device[-1].vlan={{ vlan }}
+{%   endfor %}
+{%   if (interface.role == 'upstream'): %}
+set network.up.vlan={{ vlan }}
+{%   endif %}
+{%   if (interface.role == 'downstream'): %}
+set network.down.vlan={{ vlan }}
+{%   endif %}
+{% endif %}
+
+{% if (interface.role == 'upstream'): %}
+{%  for (let port in keys(eth_ports)):
+	let section = replace(port, '.', '_');
+%}
+set udevstats.{{ section }}=device
+set udevstats.{{ section }}.name={{ s(port) }}
+add_list udevstats.{{ section }}.vlan={{ s(interface.vlan.id || 0) }}
+{%  endfor %}
+{% endif %}
+
+{% if (interface.vlan.id && swconfig): %}
+add network switch_vlan
+set network.@switch_vlan[-1].device={{ s(swconfig.name) }}
+set network.@switch_vlan[-1].vlan={{ s(this_vid) }}
+set network.@switch_vlan[-1].ports={{s(swconfig.ports)}}
+{% endif %}
+
+{% if (!interface.vlan.id): %}
+{%   for (let dev in keys(eth_ports)):
+        let port = ethernet.lookup_port(dev);
+        if (!port.switch) continue; %}
+add network switch_vlan
+set network.@switch_vlan[-1].device={{ s(port.switch.name) }}
+set network.@switch_vlan[-1].vlan={{ s(port.vlan) }}
+set network.@switch_vlan[-1].ports={{s(port.switch.port + 't ' + port.swconfig)}}
+{%   endfor %} 
+{% endif %}
+
+{% if (interface.role == 'upstream' && swconfig && !interface.vlan.id): %}
+{%   if ("WAN" in ethernet.ports):
+       dev = ethernet.ports["WAN"].netdev;
+       if (ethernet.swconfig && ethernet.swconfig[dev]): %}
+del event.config.wan_port
+add_list event.config.wan_port={{dev}}
+set event.config.swconfig={{ethernet.swconfig[dev].switch?.name}}
+add_list event.config.swconfig_ports={{ethernet.swconfig[dev].swconfig}}t
+add_list event.config.swconfig_ports={{ethernet.swconfig[dev].switch?.port}}t
+{%     endif %}
+{%   endif %}
+{% endif %}
+
+{% if (interface.role == 'upstream' && swconfig && interface.vlan.id): %}
+add_list event.config.swconfig_vlans={{interface.vlan.id}}
+{% endif %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface/broadband.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/broadband.uc
new file mode 100644
index 0000000..f162ff8
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/broadband.uc
@@ -0,0 +1,45 @@
+{% if (interface.broad_band.protocol == 'wwan'): %}
+{%
+function match_pdptype() {
+	let pdptypes = {
+		'ipv4': 'ip',
+		'ipv6': 'ipv6',
+		'dual-stack': 'ipv4v6'
+	};
+	return pdptypes[interface.broad_band.packet_data_protocol];
+}
+
+function match_authtype() {
+	if (interface.broad_band.authentication_type == 'papchap')
+		return 'both';
+	return interface.broad_band.authentication_type;
+}
+%}
+
+set network.{{ name }}=interface
+set network.{{ name }}.ucentral_name={{ s(interface.name) }}
+set network.{{ name }}.ucentral_path={{ s(location) }}
+set network.{{ name }}.proto={{ s(interface.broad_band.modem_type) }}
+set network.{{ name }}.pincode={{ s(interface.broad_band.pin_code) }}
+set network.{{ name }}.apn={{ s(interface.broad_band.access_point_name) }}
+set network.{{ name }}.device='/dev/cdc-wdm0'
+set network.{{ name }}.pdptype={{ s(match_pdptype()) }}
+set network.{{ name }}.auth={{ s(match_authtype()) }}
+set network.{{ name }}.username={{ s(interface.broad_band.user_name) }}
+set network.{{ name }}.password={{ s(interface.broad_band.password) }}
+{% endif %}
+
+{% if (interface.broad_band.protocol == 'pppoe'): %}
+
+set network.{{ name }}=interface
+set network.{{ name }}.ucentral_name={{ s(interface.name) }}
+set network.{{ name }}.ucentral_path={{ s(location) }}
+set network.{{ name }}.ifname={{ s(keys(eth_ports)[0]) }}
+set network.{{ name }}.proto='pppoe'
+set network.{{ name }}.username={{ s(interface.broad_band.user_name) }}
+set network.{{ name }}.password={{ s(interface.broad_band.password) }}
+set network.{{ name }}.timeout={{ s(interface.broad_band.timeout) }}
+{% endif %}
+
+
+{% include('firewall.uc', { name, ipv4: true, ipv6: true }); %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface/captive.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/captive.uc
new file mode 100644
index 0000000..706fc7f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/captive.uc
@@ -0,0 +1,120 @@
+{%
+if (config.radius_gw_proxy)
+	services.set_enabled("radius-gw-proxy", true);
+
+function radius_proxy_tlv(server, port, name) {
+	let tlv = replace(serial, /^(..)(..)(..)(..)(..)(..)$/, "$1$2$3$4$5$6") + sprintf(":%s:%s:%s", server, port, name);
+	return tlv;
+}
+
+captive.interface(section, config);
+let name = split(section, '_')[0];
+let fs = require('fs');
+
+if (!config.web_root) {
+	fs.mkdir('/tmp/ucentral/');
+	system('cp -r /www-uspot /tmp/ucentral/');
+} else {
+	fs.mkdir('/tmp/ucentral/www-uspot');
+	let web_root = fs.open('/tmp/ucentral/web-root.tar', 'w');
+	web_root.write(b64dec(config.web_root));
+	web_root.close();
+	system('tar x -C /tmp/ucentral/www-uspot -f /tmp/ucentral/web-root.tar');
+}
+
+if (captive.radius_gw_proxy)
+	services.set_enabled("radius-gw-proxy", true);
+%}
+
+# Captive Portal service configuration
+
+set uspot.{{ section }}=uspot
+set uspot.{{ section }}.auth_mode={{ s(config.auth_mode) }}
+set uspot.{{ section }}.web_root={{ b(config.web_root) }}
+set uspot.{{ section }}.idle_timeout={{ config.idle_timeout }}
+set uspot.{{ section }}.session_timeout={{ config.session_timeout }}
+
+{% if (config.auth_mode in [ 'radius', 'uam']): %}
+{%   if (config.radius_gw_proxy): %}
+set uspot.{{ section }}.auth_server='127.0.0.1'
+set uspot.{{ section }}.auth_port='1812'
+set uspot.{{ section }}.auth_proxy={{ s(radius_proxy_tlv(config.auth_server, config.auth_port, 'captive')) }}
+{%     if (config.acct_server): %}
+set uspot.{{ section }}.acct_server='127.0.0.1'
+set uspot.{{ section }}.acct_port='1813'
+set uspot.{{ section }}.acct_proxy={{ s(radius_proxy_tlv(config.acct_server, config.acct_port, 'captive')) }}
+{%     endif %}
+{%   else %}
+set uspot.{{ section }}.auth_server={{ s(config.auth_server) }}
+set uspot.{{ section }}.auth_port={{ s(config.auth_port) }}
+set uspot.{{ section }}.acct_server={{ s(config.acct_server) }}
+set uspot.{{ section }}.acct_port={{ s(config.acct_port) }}
+{%   endif %}
+set uspot.{{ section }}.auth_secret={{ s(config.auth_secret) }}
+set uspot.{{ section }}.acct_secret={{ s(config.acct_secret) }}
+set uspot.{{ section }}.acct_interval={{ config.acct_interval }}
+{% endif %}
+
+{% if (config.auth_mode == 'credentials'): %}
+{%   for (let cred in config.credentials): %}
+add uspot credentials
+set uspot.@credentials[-1].username={{ s(cred.username) }}
+set uspot.@credentials[-1].password={{ s(cred.password) }}
+set uspot.@credentials[-1].interface={{ s(section) }}
+{%   endfor %}
+{% endif %}
+
+{% if (config.auth_mode == 'uam'): %}
+{%
+let math = require('math');
+let challenge = "";
+for (let i = 0; i < 16; i++)
+	challenge += sprintf('%02x', math.rand() % 255);
+%}
+set uspot.{{ section }}.challenge={{ s(challenge) }}
+
+set uspot.{{ section }}.uam_port={{ s(config.uam_port) }}
+set uspot.{{ section }}.uam_secret={{ s(config.uam_secret) }}
+set uspot.{{ section }}.uam_server={{ s(config.uam_server) }}
+set uspot.{{ section }}.nasid={{ s(config.nasid) }}
+set uspot.{{ section }}.nasmac={{ s(config.nasmac || serial) }}
+set uspot.{{ section }}.ssid={{ s(config.ssid) }}
+set uspot.{{ section }}.mac_format={{ s(config.mac_format) }}
+set uspot.{{ section }}.final_redirect_url={{ s(config.final_redirect_url) }}
+set uspot.{{ section }}.mac_auth={{ b(config.mac_auth) }}
+
+set uhttpd.uam{{ config.uam_port }}=uhttpd
+set uhttpd.@uhttpd[-1].redirect_https='0'
+set uhttpd.@uhttpd[-1].rfc1918_filter='1'
+set uhttpd.@uhttpd[-1].max_requests='5'
+set uhttpd.@uhttpd[-1].max_connections='100'
+set uhttpd.@uhttpd[-1].cert='/etc/uhttpd.crt'
+set uhttpd.@uhttpd[-1].key='/etc/uhttpd.key'
+set uhttpd.@uhttpd[-1].script_timeout='60'
+set uhttpd.@uhttpd[-1].network_timeout='30'
+set uhttpd.@uhttpd[-1].http_keepalive='20'
+set uhttpd.@uhttpd[-1].tcp_keepalive='1'
+add_list uhttpd.@uhttpd[-1].listen_http='0.0.0.0:{{ config.uam_port }}'
+add_list uhttpd.@uhttpd[-1].listen_http='[::]:{{ config.uam_port }}'
+set uhttpd.@uhttpd[-1].home=/tmp/ucentral/www-uspot
+add_list uhttpd.@uhttpd[-1].ucode_prefix='/logon=/usr/share/uspot/handler-uam.uc'
+add_list uhttpd.@uhttpd[-1].ucode_prefix='/logoff=/usr/share/uspot/handler-uam.uc'
+add_list uhttpd.@uhttpd[-1].ucode_prefix='/logout=/usr/share/uspot/handler-uam.uc'
+
+set firewall.{{ name + config.uam_port}}_1=rule
+set firewall.@rule[-1].name='Allow-UAM-{{ name }}'
+set firewall.@rule[-1].src='{{ name }}'
+set firewall.@rule[-1].dest_port='{{ config.uam_port }}'
+set firewall.@rule[-1].proto='tcp'
+set firewall.@rule[-1].target='ACCEPT'
+set firewall.@rule[-1].mark='1/127'
+
+set firewall.{{ name + config.uam_port}}_2=rule
+set firewall.@rule[-1].name='Allow-UAM-{{ name }}'
+set firewall.@rule[-1].src='{{ name }}'
+set firewall.@rule[-1].dest_port='{{ config.uam_port }}'
+set firewall.@rule[-1].proto='tcp'
+set firewall.@rule[-1].target='ACCEPT'
+set firewall.@rule[-1].mark='2/127'
+
+{% endif %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface/common.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/common.uc
new file mode 100644
index 0000000..535f239
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/common.uc
@@ -0,0 +1,39 @@
+{% let afnames = ethernet.calculate_names(interface) %}
+{% if (length(afnames) >= 2): %}
+set network.{{ netdev }}=interface
+set network.{{ netdev }}.ucentral_name={{ s(interface.name) }}
+set network.{{ netdev }}.ucentral_path={{ s(location) }}
+set network.{{ netdev }}.ifname={{ netdev }}
+set network.{{ netdev }}.metric={{ interface.metric }}
+set network.{{ netdev }}.proto=none
+{% endif %}
+{% for (let afidx, afname in afnames): %}
+set network.{{ afname }}=interface
+set network.{{ afname }}.ucentral_name={{ s(interface.name) }}
+set network.{{ afname }}.ucentral_path={{ s(location) }}
+set network.{{ afname }}.ifname={{ netdev }}
+set network.{{ afname }}.metric={{ interface.metric }}
+set network.{{ afname }}.mtu={{ interface.mtu }}
+set network.{{ afname }}.type={{ interface.type }}
+set network.{{ afname }}.auto={{ interface.auto_start }}
+{%  if (ipv4_mode == 'static' || ipv6_mode == 'static'): %}
+set network.{{ afname }}.proto=static
+{%  elif ((length(afnames) == 1 || afidx == 0) && ipv4_mode == 'dynamic'): %}
+set network.{{ afname }}.proto=dhcp
+{%  elif ((length(afnames) == 1 || afidx == 1) && ipv6_mode == 'dynamic'): %}
+set network.{{ afname }}.proto=dhcpv6
+{%  else %}
+set network.{{ afname }}.proto=none
+{%  endif %}
+{%  if (interface.role == "downstream" && ethernet.has_vlan(interface)): %}
+add network rule
+set network.@rule[-1].in={{ afname }}
+set network.@rule[-1].lookup={{ routing_table.get(interface.vlan.id) }}
+{%  endif %}
+{%  if ((length(afnames) == 1 && ipv4_mode != 'none') || (afidx == 0 && ipv4_mode != 'none')): %}
+{%   include('ipv4.uc', { name: afname }) %}
+{%  endif %}
+{%  if ((length(afnames) == 1 && ipv6_mode != 'none') || (afidx == 1 && ipv6_mode != 'none')): %}
+{%   include('ipv6.uc', { name: afname }) %}
+{%  endif %}
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface/dhcp.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/dhcp.uc
new file mode 100644
index 0000000..4be4ecd
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/dhcp.uc
@@ -0,0 +1,72 @@
+{% let name = ethernet.calculate_name(interface) %}
+{% let dhcp = ipv4.dhcp || { ignore: 1 } %}
+{% let dhcpv6 = ipv6.dhcpv6 || {} %}
+{% function use_dns() {
+	let ret = '';
+	if (type(dhcp.use_dns) == 'array') {
+		for (let k, v in dhcp.use_dns)
+			ret += ',' + v;
+	} else {
+		ret += ',' + dhcp.use_dns;
+	}
+	return ret;
+} %}
+set dhcp.{{ name }}=dhcp
+set dhcp.{{ name }}.interface={{ s(ethernet.calculate_ipv4_name(interface)) }}
+set dhcp.{{ name }}.start={{ dhcp.lease_first }}
+set dhcp.{{ name }}.limit={{ dhcp.lease_count }}
+set dhcp.{{ name }}.leasetime={{ dhcp.lease_time }}
+set dhcp.{{ name }}.ignore={{ b(dhcp.ignore) }}
+{% if (dhcp.use_dns): %}
+add_list dhcp.{{ name }}.dhcp_option='6{{ use_dns() }}'
+{% endif %}
+{% if (interface.role != 'upstream'): %}
+{%  if (dhcpv6.mode == 'hybrid'): %}
+set dhcp.{{ name }}.ra=server
+set dhcp.{{ name }}.dhcpv6=server
+set dhcp.{{ name }}.ndp=disabled
+set dhcp.{{ name }}.ra_slaac=1
+add_list dhcp.{{ name }}.ra_flags=other-config
+add_list dhcp.{{ name }}.ra_flags=managed-config
+{%  elif (dhcpv6.mode == 'stateful'): %}
+set dhcp.{{ name }}.ra=server
+set dhcp.{{ name }}.dhcpv6=server
+set dhcp.{{ name }}.ndp=disabled
+set dhcp.{{ name }}.ra_slaac=0
+add_list dhcp.{{ name }}.ra_flags=other-config
+add_list dhcp.{{ name }}.ra_flags=managed-config
+{%  elif (dhcpv6.mode == 'stateless'): %}
+set dhcp.{{ name }}.ra=server
+set dhcp.{{ name }}.dhcpv6=server
+set dhcp.{{ name }}.ndp=disabled
+set dhcp.{{ name }}.ra_slaac=1
+add_list dhcp.{{ name }}.ra_flags=other-config
+{%  elif (dhcpv6.mode == 'relay'): %}
+set dhcp.{{ name }}.ra=relay
+set dhcp.{{ name }}.dhcpv6=relay
+set dhcp.{{ name }}.ndp=relay
+{%  else %}
+set dhcp.{{ name }}.ra=disabled
+set dhcp.{{ name }}.dhcpv6=disabled
+set dhcp.{{ name }}.ndp=disabled
+{%  endif %}
+set dhcp.{{ name }}.prefix_filter={{ s(dhcpv6.filter_prefix) }}
+set dhcp.{{ name }}.dns_service={{ b(!length(dhcpv6.announce_dns)) }}
+{%  for (let i, addr in dhcpv6.announce_dns): %}
+add_list dhcp.{{ name }}.dns={{ s(addr) }}
+{%  endfor %}
+{% else %}
+set dhcp.{{ name }}.master={{ b(has_downstream_relays) }}
+set dhcp.{{ name }}.ra={{ has_downstream_relays ? 'relay' : 'disabled' }}
+set dhcp.{{ name }}.dhcpv6={{ has_downstream_relays ? 'relay' : 'disabled' }}
+set dhcp.{{ name }}.ndp={{ has_downstream_relays ? 'relay' : 'disabled' }}
+{% endif %}
+{% for (let lease in interface.ipv4.dhcp_leases): %}
+
+add dhcp host
+set dhcp.@host[-1].hostname={{ lease.hostname }}
+set dhcp.@host[-1].mac={{ lease.macaddr }}
+set dhcp.@host[-1].ip={{ lease.static_lease_offset }}
+set dhcp.@host[-1].leasetime={{ lease.lease_time }}
+set dhcp.@host[-1].instance={{ s(name) }}
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface/firewall.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/firewall.uc
new file mode 100644
index 0000000..b707754
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/firewall.uc
@@ -0,0 +1,183 @@
+
+add firewall zone
+set firewall.@zone[-1].name={{ s(name) }}
+{% if (interface.role == 'upstream'): %}
+set firewall.@zone[-1].input='REJECT'
+set firewall.@zone[-1].output='ACCEPT'
+set firewall.@zone[-1].forward='REJECT'
+set firewall.@zone[-1].masq=1
+set firewall.@zone[-1].mtu_fix=1
+{% else %}
+set firewall.@zone[-1].input='REJECT'
+set firewall.@zone[-1].output='ACCEPT'
+set firewall.@zone[-1].forward='ACCEPT'
+
+add firewall forwarding
+set firewall.@forwarding[-1].src={{ s(name) }}
+set firewall.@forwarding[-1].dest='{{ s(dest || ethernet.find_interface("upstream", interface.vlan.id)) }}'
+{% endif %}
+{% for (let network in networks || ethernet.calculate_names(interface)): %}
+add_list firewall.@zone[-1].network={{ s(network) }}
+{% endfor %}
+
+add firewall rule
+set firewall.@rule[-1].name='Allow-Ping'
+set firewall.@rule[-1].src={{ s(name) }}
+set firewall.@rule[-1].proto='icmp'
+set firewall.@rule[-1].icmp_type='echo-request'
+set firewall.@rule[-1].family='ipv4'
+set firewall.@rule[-1].target='ACCEPT'
+
+add firewall rule
+set firewall.@rule[-1].name='Allow-IGMP'
+set firewall.@rule[-1].src={{ s(name) }}
+set firewall.@rule[-1].proto='igmp'
+set firewall.@rule[-1].family='ipv4'
+set firewall.@rule[-1].target='ACCEPT'
+
+
+{% if (ipv4_mode || !ipv6_mode): %}
+add firewall rule
+set firewall.@rule[-1].name='Support-UDP-Traceroute'
+set firewall.@rule[-1].src={{ s(name) }}
+set firewall.@rule[-1].dest_port='33434:33689'
+set firewall.@rule[-1].proto='udp'
+set firewall.@rule[-1].family='ipv4'
+set firewall.@rule[-1].target='REJECT'
+set firewall.@rule[-1].enabled='false'
+
+add firewall rule
+set firewall.@rule[-1].name='Allow-DHCP-Renew'
+set firewall.@rule[-1].src={{ s(name) }}
+set firewall.@rule[-1].proto='udp'
+set firewall.@rule[-1].dest_port='68'
+set firewall.@rule[-1].target='ACCEPT'
+set firewall.@rule[-1].family='ipv4'
+{% endif %}
+
+{%   if (ipv6_mode || !ipv4_mode): %}
+add firewall rule
+set firewall.@rule[-1].name='Allow-DHCPv6'
+set firewall.@rule[-1].src={{ s(name) }}
+set firewall.@rule[-1].proto='udp'
+set firewall.@rule[-1].src_ip='fc00::/6'
+set firewall.@rule[-1].dest_ip='fc00::/6'
+set firewall.@rule[-1].dest_port='546'
+set firewall.@rule[-1].family='ipv6'
+set firewall.@rule[-1].target='ACCEPT'
+
+add firewall rule
+set firewall.@rule[-1].name='Allow-MLD'
+set firewall.@rule[-1].src={{ s(name) }}
+set firewall.@rule[-1].proto='icmp'
+set firewall.@rule[-1].src_ip='fe80::/10'
+set firewall.@rule[-1].icmp_type='130/0'
+set firewall.@rule[-1].icmp_type='131/0'
+set firewall.@rule[-1].icmp_type='132/0'
+set firewall.@rule[-1].icmp_type='143/0'
+set firewall.@rule[-1].family='ipv6'
+set firewall.@rule[-1].target='ACCEPT'
+
+add firewall rule
+set firewall.@rule[-1].name='Allow-ICMPv6-Input'
+set firewall.@rule[-1].src={{ s(name) }}
+set firewall.@rule[-1].proto='icmp'
+add_list firewall.@rule[-1].icmp_type='echo-request'
+add_list firewall.@rule[-1].icmp_type='echo-reply'
+add_list firewall.@rule[-1].icmp_type='destination-unreachable'
+add_list firewall.@rule[-1].icmp_type='packet-too-big'
+add_list firewall.@rule[-1].icmp_type='time-exceeded'
+add_list firewall.@rule[-1].icmp_type='bad-header'
+add_list firewall.@rule[-1].icmp_type='unknown-header-type'
+add_list firewall.@rule[-1].icmp_type='router-solicitation'
+add_list firewall.@rule[-1].icmp_type='neighbour-solicitation'
+add_list firewall.@rule[-1].icmp_type='router-advertisement'
+add_list firewall.@rule[-1].icmp_type='neighbour-advertisement'
+set firewall.@rule[-1].limit='1000/sec'
+set firewall.@rule[-1].family='ipv6'
+set firewall.@rule[-1].target='ACCEPT'
+
+add firewall rule
+set firewall.@rule[-1].name='Allow-ICMPv6-Forward'
+set firewall.@rule[-1].src={{ s(name) }}
+set firewall.@rule[-1].dest='*'
+set firewall.@rule[-1].proto='icmp'
+add_list firewall.@rule[-1].icmp_type='echo-request'
+add_list firewall.@rule[-1].icmp_type='echo-reply'
+add_list firewall.@rule[-1].icmp_type='destination-unreachable'
+add_list firewall.@rule[-1].icmp_type='packet-too-big'
+add_list firewall.@rule[-1].icmp_type='time-exceeded'
+add_list firewall.@rule[-1].icmp_type='bad-header'
+add_list firewall.@rule[-1].icmp_type='unknown-header-type'
+set firewall.@rule[-1].limit='1000/sec'
+set firewall.@rule[-1].family='ipv6'
+set firewall.@rule[-1].target='ACCEPT'
+{% endif %}
+
+{% if (interface.role == "downstream"): %}
+add firewall rule
+set firewall.@rule[-1].name='Allow-DNS-{{ name }}'
+set firewall.@rule[-1].src={{ s(name) }}
+set firewall.@rule[-1].dest_port='53'
+set firewall.@rule[-1].family='ipv4'
+add_list firewall.@rule[-1].proto='tcp'
+add_list firewall.@rule[-1].proto='udp'
+set firewall.@rule[-1].target='ACCEPT'
+
+add firewall rule
+set firewall.@rule[-1].name='Allow-DHCP-{{ name }}'
+set firewall.@rule[-1].src={{ s(name) }}
+set firewall.@rule[-1].dest_port=67
+set firewall.@rule[-1].family='ipv4'
+set firewall.@rule[-1].proto='udp'
+set firewall.@rule[-1].target='ACCEPT'
+
+add firewall rule
+set firewall.@rule[-1].name='Allow-DHCPv6-{{ name }}'
+set firewall.@rule[-1].src={{ s(name) }}
+set firewall.@rule[-1].dest_port=547
+set firewall.@rule[-1].family='ipv6'
+set firewall.@rule[-1].proto='udp'
+set firewall.@rule[-1].target='ACCEPT'
+{% endif %}
+
+{% if (interface.role == 'downstream' && interface?.ipv4?.disallow_upstream_subnet):
+      for (let subnet in interface.ipv4.disallow_upstream_subnet):
+%}
+add firewall rule
+set firewall.@rule[-1].name='Reject-{{ subnet }}-subnet-{{name}}'
+set firewall.@rule[-1].src={{ s(name) }}
+set firewall.@rule[-1].dest='{{ s(dest || ethernet.find_interface("upstream", interface.vlan.id)) }}'
+set firewall.@rule[-1].dest_ip='{{ s(subnet) }}'
+set firewall.@rule[-1].proto='all'
+set firewall.@rule[-1].target='DROP'
+{%    endfor
+    endif %}
+{%
+	for (let forward in interface.ipv4?.port_forward)
+		include('firewall/forward.uc', {
+			forward,
+			family: 'ipv4',
+			source_zone: ethernet.find_interface('upstream', interface.vlan?.id),
+			destination_zone: name,
+			destination_subnet: interface.ipv4.subnet
+		});
+
+	for (let forward in interface.ipv6?.port_forward)
+		include('firewall/forward.uc', {
+			forward,
+			family: 'ipv6',
+			source_zone: ethernet.find_interface('upstream', interface.vlan?.id),
+			destination_zone: name,
+			destination_subnet: interface.ipv6.subnet
+		});
+
+	for (let allow in interface.ipv6?.traffic_allow)
+		include('firewall/allow.uc', {
+			allow,
+			family: 'ipv6',
+			source_zone: ethernet.find_interface('upstream', interface.vlan?.id),
+			destination_zone: name,
+			destination_subnet: interface.ipv6.subnet
+		});
+%}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface/firewall/allow.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/firewall/allow.uc
new file mode 100644
index 0000000..44ec208
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/firewall/allow.uc
@@ -0,0 +1,20 @@
+add firewall rule
+set firewall.@rule[-1].name='Allow traffic to {{ allow.destination_address }}'
+set firewall.@rule[-1].family={{ s(family) }}
+set firewall.@rule[-1].src={{ s(source_zone || '*') }}
+set firewall.@rule[-1].dest={{ s(destination_zone) }}
+{%  for (let proto in ((allow.protocol in ['any', 'all', '*'] && (allow.source_ports || allow.destination_ports)) ? ['tcp', 'udp'] : [ allow.protocol ])): %}
+add_list firewall.@rule[-1].proto={{ s(proto) }}
+{%  endfor %}
+{%  if (allow.source_address): %}
+set firewall.@rule[-1].src_ip={{ s(allow.source_address) }}
+{%  endif %}
+{%  for (let sport in allow.source_ports): %}
+add_list firewall.@rule[-1].src_port={{ s(sport) }}
+{%  endfor %}
+set firewall.@rule[-1].dest_ip={{ ipcalc.expand_wildcard_address(allow.destination_address, destination_subnet) }}
+{%  for (let dport in allow.destination_ports): %}
+add_list firewall.@rule[-1].dest_port={{ s(dport) }}
+{%  endfor %}
+set firewall.@rule[-1].target=ACCEPT
+
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface/firewall/forward.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/firewall/forward.uc
new file mode 100644
index 0000000..d9f8f80
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/firewall/forward.uc
@@ -0,0 +1,15 @@
+{% if (true || source_zone): %}
+add firewall redirect
+set firewall.@redirect[-1].name='Forward port {{ forward.external_port }} to {{ forward.internal_address }}'
+set firewall.@redirect[-1].family={{ s(family) }}
+set firewall.@redirect[-1].src={{ s(source_zone || '*') }}
+set firewall.@redirect[-1].dest={{ s(destination_zone) }}
+{%  for (let proto in ((forward.protocol in ['any', 'all', '*']) ? ['tcp', 'udp'] : [ forward.protocol ])): %}
+add_list firewall.@redirect[-1].proto={{ s(proto) }}
+{%  endfor %}
+set firewall.@redirect[-1].src_dport={{ s(forward.external_port) }}
+set firewall.@redirect[-1].dest_ip={{ ipcalc.expand_wildcard_address(forward.internal_address, destination_subnet) }}
+set firewall.@redirect[-1].dest_port={{ s(forward.internal_port) }}
+set firewall.@redirect[-1].target=DNAT
+
+{% endif %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface/gre.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/gre.uc
new file mode 100644
index 0000000..20fc909
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/gre.uc
@@ -0,0 +1,45 @@
+{%
+if (!interface.tunnel.peer_address) {
+        warn("A GRE tunnel requires a valid peer-address");
+        return;
+}
+%}
+
+# GRE Configuration
+set network.gre=interface
+set network.gre.proto='gretap'
+set network.gre.peeraddr='{{ interface.tunnel.peer_address }}'
+set network.gre.nohostroute='1'
+set network.gre.df='{{ b(interface.tunnel.dont_fragment) }}'
+
+{%
+let suffix = '';
+let cfg = {
+	name: 'gretun',
+	netdev: 'gre4t-gre',
+	ipv4_mode, ipv4: interface.ipv4 || {},
+	ipv6_mode, ipv6: interface.ipv6 || {}
+};
+
+if (ethernet.has_vlan(interface)) {
+	cfg.name = 'gretun_' + interface.vlan.id;
+	cfg.netdev = 'gre4t-gre.' + interface.vlan.id;
+	cfg.this_vid = interface.vlan.id;
+	suffix = '.' + interface.vlan.id;
+}
+
+include("common.uc", cfg);
+%}
+
+add firewall rule
+set firewall.@rule[-1].target='ACCEPT'
+set firewall.@rule[-1].src={{ s(name) }}
+set firewall.@rule[-1].family='ipv4'
+set firewall.@rule[-1].proto='47'
+set firewall.@rule[-1].name='Allow-GRE-{{ name }}'
+
+add network device
+set network.@device[-1].name={{ s(name) }}
+set network.@device[-1].type='bridge'
+set network.@device[-1].ports='gre4t-gre{{ suffix }}'
+set network.@device[-1].dhcp_healthcheck='{{ b(interface.tunnel.dhcp_healthcheck) }}'
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface/gre6.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/gre6.uc
new file mode 100644
index 0000000..fa3c931
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/gre6.uc
@@ -0,0 +1,44 @@
+{%
+if (!interface.tunnel.peer_address) {
+        warn("A GRE tunnel requires a valid peer-address");
+        return;
+}
+%}
+
+# GRE Configuration
+set network.greip6=interface
+set network.greip6.proto='grev6tap'
+set network.greip6.peer6addr='{{ interface.tunnel.peer_address }}'
+set network.greip6.nohostroute='1'
+
+{%
+let suffix = '';
+let cfg = {
+	name: 'gretun6',
+	netdev: 'gre6t-greip6',
+	ipv4_mode, ipv4: interface.ipv4 || {},
+	ipv6_mode, ipv6: interface.ipv6 || {}
+};
+
+if (ethernet.has_vlan(interface)) {
+	cfg.name = 'gretun6_' + interface.vlan.id;
+	cfg.netdev = 'gre6t-greip6.' + interface.vlan.id;
+	cfg.this_vid = interface.vlan.id;
+	suffix = '.' + interface.vlan.id;
+}
+
+include("common.uc", cfg);
+%}
+
+add firewall rule
+set firewall.@rule[-1].target='ACCEPT'
+set firewall.@rule[-1].src={{ s(name) }}
+set firewall.@rule[-1].family='ipv6'
+set firewall.@rule[-1].proto='47'
+set firewall.@rule[-1].name='Allow-GREv6-{{ name }}'
+
+add network device
+set network.@device[-1].name={{ s(name) }}
+set network.@device[-1].type='bridge'
+set network.@device[-1].ports='gre6t-greip6{{ suffix }}'
+set network.@device[-1].dhcp_healthcheck='{{ b(interface.tunnel.dhcp_healthcheck) }}'
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface/ieee8021x.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/ieee8021x.uc
new file mode 100644
index 0000000..371ede6
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/ieee8021x.uc
@@ -0,0 +1,20 @@
+{% for (let port in dot1x_ports): %}
+add ieee8021x port
+set ieee8021x.@port[-1].iface={{ s(port) }}
+set ieee8021x.@port[-1].vlan={{ this_vid }}
+set ieee8021x.@port[-1].upstream={{ b(interface.role == 'upstream') }}
+{%   for (let port in keys(eth_ports)): %}
+add_list ieee8021x.@port[-1].wan_ports={{ s(port) }}
+{%   endfor %}
+
+set network.{{ replace(port, '.', '_') }}=device
+set network.@device[-1].name={{ s(port) }}
+set network.@device[-1].auth='1'
+set network.@device[-1].auth_vlan={{ interface.dot1x_vlan }}:u
+
+{%   if (interface.role == 'upstream'): %}
+add_list network.up.ports={{ s(port) }}
+{%   else %}
+add_list network.down.ports={{ s(port) }}
+{%   endif %}
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface/ipv4.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/ipv4.uc
new file mode 100644
index 0000000..ea1346e
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/ipv4.uc
@@ -0,0 +1,12 @@
+{% if (interface.role == 'upstream' && ethernet.has_vlan(interface)): %}
+set network.{{ name }}.ip4table={{ routing_table.get(this_vid) }}
+{% endif %}
+{% if (ipv4_mode == 'static'): %}
+set network.{{ name }}.ipaddr={{ ipv4.subnet }}
+set network.{{ name }}.gateway={{ ipv4.gateway }}
+{% else %}
+set network.{{ name }}.peerdns={{ b(!length(ipv4.use_dns)) }}
+{% endif %}
+{%  for (let dns in ipv4.use_dns): %}
+add_list network.{{ name }}.dns={{ dns }}
+{%  endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface/ipv6.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/ipv6.uc
new file mode 100644
index 0000000..f7d5950
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/ipv6.uc
@@ -0,0 +1,10 @@
+{% if (interface.role == 'upstream' && ethernet.has_vlan(interface)): %}
+set network.{{ name }}.ip6table={{ routing_table.get(this_vid) }}
+{% endif %}
+{% if (ipv6_mode == 'static'): %}
+set network.{{ name }}.ip6addr={{ ipv6.subnet }}
+set network.{{ name }}.ip6gw={{ ipv6.gateway }}
+set network.{{ name }}.ip6assign={{ ipv6.prefix_size || '64' }}
+{% else %}
+set network.{{ name }}.reqprefix={{ ipv6.prefix_size || 'auto' }}
+{% endif %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface/l2tp.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/l2tp.uc
new file mode 100644
index 0000000..502fd2c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/l2tp.uc
@@ -0,0 +1,31 @@
+{%
+if (!interface.tunnel.server || !interface.tunnel.user_name || !interface.tunnel.password ) {
+        warn("A L2TP tunnel can only be created with a server, username and password");
+        return;
+}
+%}
+
+# L2TP Configuration
+set network.l2tp="interface"
+set network.l2tp.proto="l2tp"
+set network.l2tp.server={{ s(interface.tunnel.server) }}
+set network.l2tp.username={{ s(interface.tunnel.user_name) }}
+set network.l2tp.password={{ s(interface.tunnel.password) }}
+set network.l2tp.ip4table="{{ routing_table.get(this_vid) }}"
+
+add firewall zone
+set firewall.@zone[-1].name="l2tp"
+set firewall.@zone[-1].network="l2tp"
+set firewall.@zone[-1].input="REJECT"
+set firewall.@zone[-1].forward="REJECT"
+set firewall.@zone[-1].output="REJECT"
+set firewall.@zone[-1].masq="1"
+set firewall.@zone[-1].mtu_fix="1"
+
+add firewall forwarding
+set firewall.@forwarding[-1].src="{{ name }}"
+set firewall.@forwarding[-1].dest="l2tp"
+
+add network rule
+set network.@rule[-1].in="{{ name }}"
+set network.@rule[-1].lookup="{{ routing_table.get(this_vid) }}"
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface/mesh.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/mesh.uc
new file mode 100644
index 0000000..9fe2776
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/mesh.uc
@@ -0,0 +1,17 @@
+
+set network.batman=interface
+set network.batman.proto=batadv
+set network.batman.multicast_mode=0
+set network.batman.distributed_arp_table=0
+set network.batman.orig_interval=5000
+
+{% if (ethernet.has_vlan(interface)): %}
+set network.batman_v{{ this_vid }}=interface
+set network.batman_v{{ this_vid }}.proto=batadv_vlan
+set network.batman_v{{ this_vid }}.ifname='batman.{{ this_vid }}'
+{% else %}
+set network.batman_mesh=interface
+set network.batman_mesh.proto=batadv_hardif
+set network.batman_mesh.master=batman
+set network.batman_mesh.mtu=1532
+{% endif %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface/ssid.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/ssid.uc
new file mode 100644
index 0000000..159223b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/ssid.uc
@@ -0,0 +1,623 @@
+{%
+	let purpose = {
+		"onboarding-ap": {
+			"name": "OpenWifi-onboarding",
+			"isolate_clients": true,
+			"hidden": true,
+			"wifi_bands": [
+				"2G"
+			],
+			"bss_mode": "ap",
+			"encryption": {
+				"proto": "wpa2",
+				"ieee80211w": "required"
+			},
+			"certificates": {
+				"use_local_certificates": true
+			},
+			"radius": {
+				"local": {
+					"server-identity": "uCentral-EAP"
+				}
+			}
+		},
+		"onboarding-sta": {
+			"name": "OpenWifi-onboarding",
+			"wifi_bands": [
+				"2G"
+			],
+			"bss_mode": "sta",
+			"encryption": {
+				"proto": "wpa2",
+				"ieee80211w": "required"
+			},
+			"certificates": {
+				"use_local_certificates": true
+			}
+		}
+	};
+
+	if (purpose[ssid.purpose])
+		ssid = purpose[ssid.purpose];
+
+	let phys = [];
+
+	for (let band in ssid.wifi_bands)
+		for (let phy in wiphy.lookup_by_band(band))
+			if (phy.section)
+				push(phys, phy);
+
+	if (!length(phys)) {
+		warn("Can't find any suitable radio phy for SSID '%s' settings", ssid.name);
+
+		return;
+	}
+
+	if (type(ssid.roaming) == 'bool')
+		ssid.roaming = {
+			message_exchange: 'air',
+			generate_psk: true,
+		};
+
+	if (ssid.roaming && ssid.encryption.proto in [ "wpa", "psk", "none" ]) {
+		delete ssid.roaming;
+		warn("Roaming requires wpa2 or later");
+	}
+
+	let certificates = ssid.certificates || {};
+	if (certificates.use_local_certificates) {
+		cursor.load("system");
+		let certs = cursor.get_all("system", "@certificates[-1]");
+		certificates.ca_certificate = certs.ca;
+		certificates.certificate = certs.cert;
+		certificates.private_key = certs.key;
+	}
+
+	if (ssid.radius?.dynamic_authorization && 'radius-gw-proxy' in ssid.services) {
+		ssid.radius.dynamic_authorization.host = '127.0.0.1';
+		ssid.radius.dynamic_authorization.port = 3799;
+	}
+
+	function validate_encryption_ap() {
+		if (ssid.encryption.proto in [ "wpa", "wpa2", "wpa-mixed", "wpa3", "wpa3-mixed", "wpa3-192", "psk2-radius" ] &&
+		    ssid.radius && ssid.radius.local &&
+		    length(certificates))
+			return {
+				proto: ssid.encryption.proto,
+				eap_local: ssid.radius.local,
+				eap_user: "/tmp/ucentral/" + replace(location, "/", "_") + ".eap_user"
+			};
+
+
+		if (ssid.encryption.proto in [ "wpa", "wpa2", "wpa-mixed", "wpa3", "wpa3-mixed", "wpa3-192", "psk2-radius" ] &&
+		    ssid.radius && ssid.radius.authentication &&
+		    ssid.radius.authentication.host &&
+		    ssid.radius.authentication.port &&
+		    ssid.radius.authentication.secret)
+			return {
+				proto: ssid.encryption.proto,
+				auth: ssid.radius.authentication,
+				acct: ssid.radius.accounting,
+				health: ssid.radius.health || {},
+				dyn_auth: ssid.radius?.dynamic_authorization,
+				radius: ssid.radius
+			};
+		warn("Can't find any valid encryption settings");
+		return false;
+	}
+
+	function validate_encryption_sta() {
+		if (ssid.encryption.proto in [ "wpa", "wpa2", "wpa-mixed", "wpa3", "wpa3-mixed", "wpa3-192" ] &&
+		    length(certificates))
+			return {
+				proto: ssid.encryption.proto,
+				client_tls: certificates
+			};
+		warn("Can't find any valid encryption settings");
+		return false;
+	}
+
+	function validate_encryption(phy) {
+		if ('6G' in phy.band && !(ssid?.encryption.proto in [ "wpa3", "wpa3-mixed", "wpa3-192", "sae", "sae-mixed", "owe" ])) {
+			warn("Invalid encryption settings for 6G band");
+			return null;
+		}
+
+		if (!ssid.encryption || ssid.encryption.proto in [ "none" ]) {
+			if (ssid.radius?.authentication?.mac_filter &&
+			    ssid.radius.authentication?.host &&
+			    ssid.radius.authentication?.port &&
+			    ssid.radius.authentication?.secret)
+				return {
+					proto: 'none',
+					auth: ssid.radius.authentication,
+					acct: ssid.radius.accounting,
+					dyn_auth: ssid.radius?.dynamic_authorization,
+					health: ssid.radius.health || {},
+					radius: ssid.radius
+				};
+			return {
+				proto: 'none',
+				dyn_auth: ssid.radius?.dynamic_authorization,
+			};
+		}
+
+		if (ssid?.encryption?.proto in [ "owe", "owe-transition" ])
+			return {
+				proto: 'owe'
+			};
+
+		if (ssid.encryption.proto in [ "psk", "psk2", "psk-mixed", "sae", "sae-mixed" ] &&
+		    ssid.encryption.key) {
+			if (ssid.radius?.authentication?.mac_filter &&
+			    ssid.radius.authentication?.host &&
+			    ssid.radius.authentication?.port &&
+			    ssid.radius.authentication?.secret)
+				return {
+					proto: ssid.encryption.proto,
+					key: ssid.encryption.key,
+					auth: ssid.radius.authentication,
+					acct: ssid.radius.accounting,
+					dyn_auth: ssid.radius?.dynamic_authorization,
+					health: ssid.radius.health || {},
+					radius: ssid.radius
+				};
+
+			return {
+				proto: ssid.encryption.proto,
+				key: ssid.encryption.key,
+				dyn_auth: ssid.radius?.dynamic_authorization,
+			};
+		};
+
+		switch(ssid.bss_mode) {
+		case 'ap':
+		case 'wds-ap':
+			return validate_encryption_ap();
+
+		case 'sta':
+		case 'wds-sta':
+			return validate_encryption_sta();
+
+		}
+		warn("Can't find any valid encryption settings");
+	}
+
+	function match_ieee80211w(phy) {
+		if ('6G' in phy.band)
+			return 2;
+
+		if (!ssid.encryption)
+			return 0;
+
+		if (ssid.encryption.proto in [ "sae-mixed", "wpa3-mixed" ])
+			return 1;
+
+		if (ssid.encryption.proto in [ "sae", "wpa3", "wpa3-192" ])
+			return 2;
+
+		return index([ "disabled", "optional", "required" ], ssid.encryption.ieee80211w);
+	}
+
+	function match_sae_pwe(phy) {
+		if ('6G' in phy.band)
+			return 1;
+		return '';
+	}
+
+	function match_wds() {
+		return index([ "wds-ap", "wds-sta", "wds-repeater" ], ssid.bss_mode) >= 0;
+	}
+
+	function match_hs20_auth_type(auth_type) {
+		let types = {
+			"terms-and-conditions": "00",
+			"online-enrollment": "01",
+			"http-redirection": "02",
+			"dns-redirection": "03"
+		};
+		return (auth_type && auth_type.type) ? types[auth_type.type] : '';
+	}
+
+	function get_hs20_wan_metrics() {
+		if (!ssid.pass_point.wan_metrics ||
+		    !ssid.pass_point.wan_metrics.info ||
+		    !ssid.pass_point.wan_metrics.downlink ||
+		    ! ssid.pass_point.wan_metrics.uplink)
+			return '';
+		let map = {"up": 1, "down": 2, "testing": 3};
+		let info = map[ssid.pass_point.wan_metrics.info] ? map[ssid.pass_point.wan_metrics.info] : 1;
+		return sprintf("%02d:%d:%d:0:0:0", info, ssid.pass_point.wan_metrics.downlink, ssid.pass_point.wan_metrics.uplink);
+	}
+
+	let bss_mode = ssid.bss_mode;
+	if (ssid.bss_mode == "wds-ap")
+		bss_mode =  "ap";
+	if (ssid.bss_mode == "wds-sta")
+		bss_mode =  "sta";
+
+	function radius_vendor_tlv(server, port) {
+		let radius_serial = replace(serial, /^(..)(..)(..)(..)(..)(..)$/, "$1-$2-$3-$4-$5-$6");
+		let radius_serial_len = length(radius_serial) + 2;
+		let radius_vendor = "26:x:0000e608" + // vendor element
+			"0113" + replace(radius_serial, /./g, (m) => sprintf("%02x", ord(m)));
+
+		let radius_ip = sprintf("%s:%s", server, port);
+		let radius_ip_len = length(radius_ip) + 2;
+		radius_vendor += "02" + sprintf("%02x", radius_ip_len) + replace(radius_ip, /./g, (m) => sprintf("%02x", ord(m)));
+		return radius_vendor;
+	}
+
+	function radius_proxy_tlv(server, port, name) {
+		let tlv = "33:x:" +
+			replace(replace(serial, /^(..)(..)(..)(..)(..)(..)$/, "$1$2$3$4$5$6") + sprintf(":%s:%s:%s", server, port, name),
+				/./g, (m) => sprintf("%02x", ord(m)));
+		return tlv;
+	}
+
+	function radius_request_attribute(request) {
+		if (request.id && request.hex_value)
+			return sprintf('%d:x:%s', request.id, request.hex_value);
+		if (request.id && type(request.value) == 'string')
+			return sprintf('%d:s:%s', request.id, request.value);
+		if (request.id && type(request.value) == 'int')
+			return sprintf('%d:d:%d', request.id, request.value);
+		if (request.vendor_id && request.vendor_attributes) {
+			let tlv = sprintf('26:x:%04x', request.vendor_id);
+			for (let vsa in request.vendor_attributes)
+				tlv += sprintf('%02x%02x', vsa.type, length(vsa.value)) + vsa.id;
+			return tlv;
+		}
+		return '';
+	}
+
+	function calculate_ifname(name) {
+		if ('captive' in ssid.services)
+			return 'wlanc' + captive.get(name);
+		return '';
+	}
+
+	let radius_gw_proxy = ssid.services && (index(ssid.services, "radius-gw-proxy") >= 0);
+
+	if ('captive' in ssid.services && !ssid.captive)
+		ssid.captive = state?.services?.captive || {};
+
+	if (ssid.captive)
+		include("captive.uc", {
+			section: name + '_' + count,
+			config: ssid.captive
+		});
+	if (ssid.strict_forwarding)
+		services.set_enabled("bridger", 'early');
+
+	ssid.vendor_elements ??= '';
+
+	if (ssid.tip_information_element) {
+		if (state.unit?.beacon_advertisement) {
+			if (state.unit.beacon_advertisement.device_serial)
+				ssid.vendor_elements += 'dd1048d01701' + replace(serial, /./g, (m) => sprintf("%02x", ord(m)));
+			if (state.unit.beacon_advertisement.device_name && state.unit.name)
+				ssid.vendor_elements += 'dd' + sprintf('%02x', 4 + length(state.unit.name)) + '48d01702' + replace(state.unit.name, /./g, (m) => sprintf("%02x", ord(m)));
+			if (state.unit.beacon_advertisement.network_id) {
+				let id = sprintf('%d', state.unit.beacon_advertisement.network_id);
+				ssid.vendor_elements += 'dd' + sprintf('%02x', 4 + length(id)) + '48d01703' + replace(id, /./g, (m) => sprintf("%02x", ord(m)));                
+			}
+		} else {
+			ssid.vendor_elements += 'dd0448d01700';
+		}
+	}
+%}
+
+# Wireless configuration
+{% for (let n, phy in phys): %}
+{%   let basename = name + '_' + count; %}
+{%   let ssidname = basename + '_' + n + '_' + count; %}
+{%   let section = (owe ? 'o' : '' ) + ssidname; %}
+{%   let id = wiphy.allocate_ssid_section_id(phy) %}
+{%   let crypto = validate_encryption(phy); %}
+{%   let ifname = calculate_ifname(basename) %}
+{%   if (!crypto) continue; %}
+set wireless.{{ section }}=wifi-iface
+set wireless.{{ section }}.ucentral_path={{ s(location) }}
+set wireless.{{ section }}.uci_section={{ s(section) }}
+set wireless.{{ section }}.device={{ phy.section }}
+{%   if ('captive' in ssid.services): %}
+set wireless.{{ section }}.ifname={{ s(ifname) }}
+add_list uspot.{{ basename}}.ifname={{ ifname }}
+add_list bridger.@defaults[0].blacklist={{ ifname }}
+{%   endif %}
+{%   if (ssid?.encryption?.proto == 'owe-transition'): %}
+{%      ssid.hidden_ssid = 1 %}
+{%      ssid.name += '-OWE' %}
+set wireless.{{ section }}.ifname={{ s(section) }}
+set wireless.{{ section }}.owe_transition_ifname={{ s('o' + section) }}
+{%   endif %}
+{%   if (owe): %}
+set wireless.{{ section }}.ifname={{ s(section) }}
+set wireless.{{ section }}.owe_transition_ifname={{ s(ssidname) }}
+set wireless.{{ section }}.owe_transition_ssid={{ s(ssid.name + '-OWE') }}
+{%   endif %}
+{%   if (bss_mode == 'mesh'): %}
+set wireless.{{ section }}.mode={{ bss_mode }}
+set wireless.{{ section }}.mesh_id={{ s(ssid.name) }}
+set wireless.{{ section }}.mesh_fwding=0
+set wireless.{{ section }}.network=batman_mesh
+set wireless.{{ section }}.mcast_rate=24000
+{%   endif %}
+
+{%   if (index([ 'ap', 'sta' ], bss_mode) >= 0): %}
+set wireless.{{ section }}.network={{ network }}
+set wireless.{{ section }}.ssid={{ s(ssid.name) }}
+set wireless.{{ section }}.mode={{ s(bss_mode) }}
+set wireless.{{ section }}.bssid={{ ssid.bssid }}
+set wireless.{{ section }}.wds='{{ b(match_wds()) }}'
+set wireless.{{ section }}.wpa_disable_eapol_key_retries='{{ b(ssid.wpa_disable_eapol_key_retries) }}'
+set wireless.{{ section }}.vendor_elements='{{ ssid.vendor_elements }}'
+set wireless.{{ section }}.disassoc_low_ack='{{ b(ssid.disassoc_low_ack) }}'
+set wireless.{{ section }}.auth_cache='{{ b(ssid.encryption?.key_caching) }}'
+{%   endif %}
+
+{% if ('6G' in phy.band): %}
+set wireless.{{ section }}.fils_discovery_max_interval={{ ssid.fils_discovery_interval }}
+{%   endif %}
+
+# Crypto settings
+set wireless.{{ section }}.ieee80211w={{ match_ieee80211w(phy) }}
+set wireless.{{ section }}.sae_pwe={{ match_sae_pwe(phy) }}
+set wireless.{{ section }}.encryption={{ crypto.proto }}
+set wireless.{{ section }}.key={{ s(crypto.key) }}
+
+{%   if (crypto.eap_local): %}
+set wireless.{{ section }}.eap_server=1
+set wireless.{{ section }}.ca_cert={{ s(certificates.ca_certificate) }}
+set wireless.{{ section }}.server_cert={{ s(certificates.certificate) }}
+set wireless.{{ section }}.private_key={{ s(certificates.private_key) }}
+set wireless.{{ section }}.private_key_passwd={{ s(certificates.private_key_password) }}
+set wireless.{{ section }}.server_id={{ s(crypto.eap_local.server_identity) }}
+set wireless.{{ section }}.eap_user_file={{ s(crypto.eap_user) }}
+{%     files.add_named(crypto.eap_user, render("../eap_users.uc", { users: crypto.eap_local.users })) %}
+{%   endif %}
+
+{%   if (crypto.auth): %}
+{%     if (radius_gw_proxy): %}
+set wireless.{{ section }}.radius_gw_proxy=1
+{%     endif %}
+set wireless.{{ section }}.auth_server={{ radius_gw_proxy ? '127.0.0.1' : crypto.auth.host }}
+set wireless.{{ section }}.auth_port={{ radius_gw_proxy ? 1812 : crypto.auth.port }}
+set wireless.{{ section }}.auth_secret={{ crypto.auth.secret }}
+{%     for (let request in crypto.auth.request_attribute): %}
+add_list wireless.{{ section }}.radius_auth_req_attr={{ s(radius_request_attribute(request)) }}
+{%     endfor %}
+{%     if (radius_gw_proxy): %}
+add_list wireless.{{ section }}.radius_auth_req_attr={{ s(radius_proxy_tlv(crypto.auth.host, crypto.auth.port, name + '_' + n + '_' + count)) }}
+{%     else %}
+add_list wireless.{{ section }}.radius_auth_req_attr={{ s(radius_vendor_tlv(crypto.auth.host, crypto.auth.port)) }}
+{%     endif %}
+{%     if (crypto.auth.secondary): %}
+set wireless.{{ section }}.auth_server_secondary={{ crypto.auth.secondary.host }}
+set wireless.{{ section }}.auth_port_secondary={{ crypto.auth.secondary.port }}
+set wireless.{{ section }}.auth_secret_secondary={{ crypto.auth.secondary.secret }}
+{%     endif %}
+{%   endif %}
+
+{%   if (crypto.acct): %}
+set wireless.{{ section }}.acct_server={{ radius_gw_proxy ? '127.0.0.1' : crypto.acct.host }}
+set wireless.{{ section }}.acct_port={{ radius_gw_proxy ? 1813 : crypto.acct.port }}
+set wireless.{{ section }}.acct_secret={{ crypto.acct.secret }}
+set wireless.{{ section }}.acct_interval={{ crypto.acct.interval }}
+{%     for (let request in crypto.acct.request_attribute): %}
+add_list wireless.{{ section }}.radius_acct_req_attr={{ s(radius_request_attribute(request)) }}
+{%     endfor %}
+{%     if (radius_gw_proxy): %}
+add_list wireless.{{ section }}.radius_acct_req_attr={{ s(radius_proxy_tlv(crypto.acct.host, crypto.acct.port, name + '_' + n + '_' + count)) }}
+{%     else %}
+add_list wireless.{{ section }}.radius_acct_req_attr={{ s(radius_vendor_tlv(crypto.acct.host, crypto.acct.port)) }}
+{%     endif %}
+{%     if (crypto.acct.secondary): %}
+set wireless.{{ section }}.acct_server_secondary={{ crypto.acct.secondary.host }}
+set wireless.{{ section }}.acct_port_secondary={{ crypto.acct.secondary.port }}
+set wireless.{{ section }}.acct_secret_secondary={{ crypto.acct.secondary.secret }}
+{%     endif %}
+{%   endif %}
+
+{%   if (crypto.health): %}
+set wireless.{{ section }}.health_username={{ s(crypto.health.username) }}
+set wireless.{{ section }}.health_password={{ s(crypto.health.password) }}
+{%   endif %}
+
+{%   if (crypto.dyn_auth): %}
+set wireless.{{ section }}.dae_client={{ crypto.dyn_auth.host }}
+set wireless.{{ section }}.dae_port={{ crypto.dyn_auth.port }}
+set wireless.{{ section }}.dae_secret={{ crypto.dyn_auth.secret }}
+
+set firewall.dyn_auth=rule
+set firewall.dyn_auth.name='Allow-CoA'
+set firewall.dyn_auth.src='{{ s(ethernet.find_interface("upstream", 0)) }}'
+set firewall.dyn_auth.dest_port='{{ crypto.dyn_auth.port }}'
+set firewall.dyn_auth.proto='udp'
+set firewall.dyn_auth.target='ACCEPT'
+{%   endif %}
+
+{%   if (crypto.radius): %}
+set wireless.{{ section }}.request_cui={{ b(crypto.radius.chargeable_user_id) }}
+set wireless.{{ section }}.nasid={{ s(crypto.radius.nas_identifier) }}
+set wireless.{{ section }}.dynamic_vlan=1
+{%     if (crypto.radius?.authentication?.mac_filter): %}
+set wireless.{{ section }}.macfilter=radius
+{%     endif %}
+{%   endif %}
+
+{%   if (crypto.client_tls): %}
+set wireless.{{ section }}.eap_type='tls'
+set wireless.{{ section }}.ca_cert={{ s(certificates.ca_certificate) }}
+set wireless.{{ section }}.client_cert={{ s(certificates.certificate)}}
+set wireless.{{ section }}.priv_key={{ s(certificates.private_key) }}
+set wireless.{{ section }}.priv_key_pwd={{ s(certificates.private_key_password) }}
+set wireless.{{ section }}.identity='uCentral'
+{%   endif %}
+
+{% if (interface.vlan_awareness?.first): %}
+{%   let vlan = interface.vlan_awareness.first;
+     if (interface.vlan_awareness.last)
+	     vlan += '-' + interface.vlan_awareness.last; %}
+set wireless.{{ section }}.network_vlan={{ vlan }}
+{% elif (ssid.vlan_awareness?.first && bss_mode == 'sta'):
+     let vlan = ssid.vlan_awareness.first;
+     if (ssid.vlan_awareness.last)
+	     vlan += '-' + ssid.vlan_awareness.last; %}
+set wireless.{{ section }}.network_vlan={{ vlan }}
+{% endif %}
+
+# AP specific setings
+{%   if (bss_mode == 'ap'): %}
+set wireless.{{ section }}.proxy_arp={{ b(length(network) ? ssid.proxy_arp : false) }}
+set wireless.{{ section }}.hidden={{ b(ssid.hidden_ssid) }}
+set wireless.{{ section }}.time_advertisement={{ ssid.broadcast_time ? 2 : 0 }}
+set wireless.{{ section }}.isolate={{ b(ssid.isolate_clients || interface.isolate_hosts) }}
+set wireless.{{ section }}.bridge_isolate={{ b(interface.isolate_hosts) }}
+set wireless.{{ section }}.uapsd={{ b(ssid.power_save) }}
+set wireless.{{ section }}.rts_threshold={{ ssid.rts_threshold }}
+set wireless.{{ section }}.multicast_to_unicast={{ b(ssid.unicast_conversion) }}
+set wireless.{{ section }}.maxassoc={{ ssid.maximum_clients }}
+set wireless.{{ section }}.dtim_period={{ ssid.dtim_period }}
+set wireless.{{ section }}.strict_forwarding={{ b(ssid.strict_forwarding) }}
+
+{%     if (interface?.vlan.id): %}
+set wireless.{{ section }}.vlan_id={{ interface.vlan.id }}
+{%     endif %}
+
+
+{%     if (ssid.rate_limit): %}
+set wireless.{{ section }}.ratelimit=1
+{%     endif %}
+
+{%     if (ssid.access_control_list?.mode): %}
+set wireless.{{ section }}.macfilter={{ s(ssid.access_control_list.mode) }}
+{%       for (let mac in ssid.access_control_list.mac_address): %}
+add_list wireless.{{ section }}.maclist={{ s(mac) }}
+{%       endfor %}
+{%     endif %}
+
+{%     if (ssid.rrm): %}
+set wireless.{{ section }}.ieee80211k={{ b(ssid.rrm.neighbor_reporting) }}
+set wireless.{{ section }}.rnr={{ b(ssid.rrm.reduced_neighbor_reporting) }}
+set wireless.{{ section }}.ftm_responder={{ b(ssid.rrm.ftm_responder) }}
+set wireless.{{ section }}.stationary_ap={{ b(ssid.rrm.stationary_ap) }}
+set wireless.{{ section }}.lci={{ b(ssid.rrm.lci) }}
+set wireless.{{ section }}.civic={{ ssid.rrm.civic }}
+{%     endif %}
+
+{%     if (ssid.roaming): %}
+set wireless.{{ section }}.ieee80211r=1
+set wireless.{{ section }}.ft_over_ds={{ b(ssid.roaming.message_exchange == "ds") }}
+set wireless.{{ section }}.ft_psk_generate_local={{ b(ssid.roaming.generate_psk) }}
+set wireless.{{ section }}.mobility_domain={{ ssid.roaming.domain_identifier }}
+set wireless.{{ section }}.r0kh={{ s(ssid.roaming.pmk_r0_key_holder) }}
+set wireless.{{ section }}.r1kh={{ s(ssid.roaming.pmk_r1_key_holder) }}
+{%     endif %}
+
+{%     if (ssid.quality_thresholds): %}
+set wireless.{{ phy.section }}.rssi_reject_assoc_rssi={{ ssid.quality_thresholds.association_request_rssi }}
+set wireless.{{ phy.section }}.rssi_ignore_probe_request={{ ssid.quality_thresholds.probe_request_rssi }}
+{%       if (ssid.quality_thresholds.probe_request_rssi): %}
+set wireless.{{ section }}.hidden=1
+set wireless.{{ section }}.dynamic_probe_resp=1
+{%       endif %}
+set usteer2.{{ section }}=ssid
+set usteer2.{{ section }}.client_kick_rssi={{ ssid.quality_thresholds.client_kick_rssi }}
+set usteer2.{{ section }}.client_kick_ban_time={{ ssid.quality_thresholds.client_kick_ban_time }}
+{%     endif %}
+
+{%  for (let raw in ssid.hostapd_bss_raw): %}
+add_list wireless.{{ section }}.hostapd_bss_options={{ s(raw) }}
+{%  endfor %}
+
+{%     if (ssid.pass_point): %}
+set wireless.{{ section }}.iw_enabled=1
+set wireless.{{ section }}.hs20=1
+{%       for (let name in ssid.pass_point.venue_name): %}
+add_list wireless.{{ section }}.iw_venue_name={{ s(name) }}
+{%       endfor %}
+set wireless.{{ section }}.iw_venue_group='{{ ssid.pass_point.venue_group }}'
+set wireless.{{ section }}.iw_venue_type='{{ ssid.pass_point.venue_type }}'
+{%       for (let n, url in ssid.pass_point.venue_url): %}
+add_list wireless.{{ section }}.iw_venue_url={{ s((n + 1) + ":" +url) }}
+{%       endfor %}
+set wireless.{{ section }}.iw_network_auth_type='{{ match_hs20_auth_type(ssid.pass_point.auth_type) }}'
+set wireless.{{ section }}.iw_domain_name={{ s(join(",", ssid.pass_point.domain_name)) }}
+{%       for (let realm in ssid.pass_point.nai_realm): %}
+add_list wireless.{{ section }}.iw_nai_realm='{{ realm }}'
+{%       endfor %}
+set wireless.{{ section }}.osen={{ b(ssid.pass_point.osen) }}
+set wireless.{{ section }}.anqp_domain_id='{{ ssid.pass_point.anqp_domain }}'
+{%       for (let cell_net in ssid.pass_point.anqp_3gpp_cell_net): %}
+add_list wireless.{{ section }}.iw_anqp_3gpp_cell_net='{{ s(cell_net) }}'
+{%       endfor %}
+{%       for (let name in ssid.pass_point.friendly_name): %}
+add_list wireless.{{ section }}.hs20_oper_friendly_name={{ s(name) }}
+{%       endfor %}
+set wireless.{{ section }}.iw_access_network_type='{{ ssid.pass_point.access_network_type }}'
+set wireless.{{ section }}.iw_internet={{ b(ssid.pass_point.internet) }}
+set wireless.{{ section }}.iw_asra={{ b(ssid.pass_point.asra) }}
+set wireless.{{ section }}.iw_esr={{ b(ssid.pass_point.esr) }}
+set wireless.{{ section }}.iw_uesa={{ b(ssid.pass_point.uesa) }}
+set wireless.{{ section }}.iw_hessid={{ s(ssid.pass_point.hessid) }}
+{%       for (let name in ssid.pass_point.roaming_consortium): %}
+add_list wireless.{{ section }}.iw_roaming_consortium={{ s(name) }}
+{%       endfor %}
+set wireless.{{ section }}.disable_dgaf={{ b(ssid.pass_point.disable_dgaf) }}
+set wireless.{{ section }}.hs20_release='3'
+set wireless.{{ section }}.iw_ipaddr_type_availability={{ s(sprintf("%02x", ssid.pass_point.ipaddr_type_availability)) }}
+{%       for (let name in ssid.pass_point.connection_capability): %}
+add_list wireless.{{ section }}.hs20_conn_capab={{ s(name) }}
+{%       endfor %}
+set wireless.{{ section }}.hs20_wan_metrics={{ s(get_hs20_wan_metrics()) }}
+{%     endif %}
+
+{% include("wmm.uc", { section }); %}
+
+{% if (length(ssid.multi_psk)): %}
+set wireless.{{ section }}.reassociation_deadline=3000
+{% endif %}
+
+
+{%     if (ssid.pass_point): %}
+{%       for (let id, icon in ssid.pass_point.icons): %}
+add wireless hs20-icon
+set wireless.@hs20-icon[-1].width={{ s(icon.width) }}
+set wireless.@hs20-icon[-1].height={{ s(icon.height) }}
+set wireless.@hs20-icon[-1].type={{ s(icon.type) }}
+set wireless.@hs20-icon[-1].lang={{ s(icon.language) }}
+set wireless.@hs20-icon[-1].path={{ s(files.add_anonymous(location, 'hs20_icon_' + id, b64dec(icon.icon))) }}
+{%       endfor %}
+
+
+
+{%     endif %}
+
+add wireless wifi-vlan
+set wireless.@wifi-vlan[-1].iface={{ section }}
+set wireless.@wifi-vlan[-1].name='v#'
+set wireless.@wifi-vlan[-1].vid='*'
+{%     if (ssid.rate_limit && (ssid.rate_limit.ingress_rate || ssid.rate_limit.egress_rate)): %}
+
+add ratelimit rate
+set ratelimit.@rate[-1].ssid={{ s(ssid.name) }}
+set ratelimit.@rate[-1].ingress={{ ssid.rate_limit.ingress_rate }}
+set ratelimit.@rate[-1].egress={{ ssid.rate_limit.egress_rate }}
+{%     endif %}
+{%     for (let i = length(ssid.multi_psk); i > 0; i--): %}
+{%       let psk = ssid.multi_psk[i - 1]; %}
+{%       if (!psk.key) continue %}
+
+add wireless wifi-station
+set wireless.@wifi-station[-1].iface={{ s(section) }}
+set wireless.@wifi-station[-1].mac={{ psk.mac }}
+set wireless.@wifi-station[-1].key={{ psk.key }}
+set wireless.@wifi-station[-1].vid={{ psk.vlan_id }}
+{%     endfor %}
+{%   else %}
+
+# STA specific settings
+{%   endif %}
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface/vxlan.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/vxlan.uc
new file mode 100644
index 0000000..3184c02
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/vxlan.uc
@@ -0,0 +1,35 @@
+{%
+if (!interface.ipv4 || !interface.ipv4.subnet || interface.ipv4.addressing != 'static' ) {
+        warn("A VXLAN tunnel can only be created with a valid and static ivp4 address");
+        return;
+}
+if (!ethernet.has_vlan(interface)) {
+        warn("A VXLAN tunnel can only be created with a valid and static ivp4 address");
+        return;
+}
+if (!interface.tunnel.peer_address) {
+        warn("A VXLAN tunnel requires a valid peer-address");
+        return;
+}
+%}
+
+# VXLAN Configuration
+set network.{{ name }}_vx=interface
+set network.{{ name }}_vx.proto=vxlan
+set network.{{ name }}_vx.peeraddr={{ s(interface.tunnel.peer_address) }}
+set network.{{ name }}_vx.port={{ interface.tunnel.peer_port }}
+set network.{{ name }}_vx.vid={{ interface.vlan.id }}
+
+set network.{{ name }}=interface
+set network.{{ name }}.proto='static'
+set network.{{ name }}.ifname='@{{ name }}_vx'
+set network.{{ name }}.ipaddr={{ ipcalc.generate_prefix(state, interface.ipv4.subnet) }}
+set network.{{ name }}.layer=2
+set network.{{ name }}.type='bridge'
+
+add firewall rule
+set firewall.@rule[-1].name='Allow-VXLAN'
+set firewall.@rule[-1].src='{{ s(ethernet.find_interface("upstream", 0)) }}'
+set firewall.@rule[-1].proto='udp'
+set firewall.@rule[-1].target='ACCEPT'
+set firewall.@rule[-1].dest_port={{ interface.tunnel.peer_port }}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/interface/wmm.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/wmm.uc
new file mode 100644
index 0000000..c10a50b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/interface/wmm.uc
@@ -0,0 +1,125 @@
+{%
+
+let wmm = state?.globals?.wireless_multimedia;
+
+if (!length(wmm))
+	return;
+
+let class = {
+	"CS0": 0,
+	"CS1": 8,
+	"CS2": 16,
+	"CS3": 24,
+	"CS4": 32,
+	"CS5": 40,
+	"CS6": 48,
+	"CS7": 56,
+	"AF11": 10,
+	"AF12": 12,
+	"AF13": 14,
+	"AF21": 18,
+	"AF22": 20,
+	"AF23": 22,
+	"AF31": 26,
+	"AF32": 28,
+	"AF33": 30,
+	"AF41": 34,
+	"AF42": 36,
+	"AF43": 38,
+	"EF": 46,
+	"VA": 44,
+	"LE": 1,
+	"DF": 0,
+
+	/* fake entry used by rfc8325 */
+	"MIN": 2
+};
+
+let profiles = {
+	"rfc8325": {
+		"defaults": {
+			"UP0": [ "MIN", "CS2" ],
+			"UP1": [ "CS1" ],
+			"UP3": [ "AF21", "AF23" ],
+			"UP4": [ "CS3", "AF43" ],
+			"UP5": [ "CS5" ],
+			"UP6": [ "VA", "EF" ],
+			"UP7": [ "CS6", "CS7" ]
+		}
+	},
+	"3gpp": {
+		"defaults": {
+			"UP0": [ "DF" ],
+			"UP1": [ "CS1" ],
+			"UP2": [ "AF11", "AF13" ],
+			"UP3": [ "AF21", "AF23" ],
+			"UP4": [ "CS3", "AF33" ],
+			"UP5": [ "CS5", "AF43" ],
+			"UP6": [ "CS4" ],
+			"UP7": [ "CS6" ]
+		},
+		"exceptions": {
+			"UP6": [ "EF" ]
+		}
+	},
+	"enterprise": {
+		"defaults": {
+			"UP0": [ "DF" ],
+			"UP1": [ "CS1" ],
+			"UP2": [ "AF11", "AF13" ],
+			"UP3": [ "CS2", "AF23" ],
+			"UP4": [ "CS3", "AF33" ],
+			"UP5": [ "CS5" ],
+			"UP6": [ "CS4" ],
+			"UP7": [ "CS6" ]
+		},
+		"exceptions": {
+			"UP5": [ "AF41", "AF42", "AF43" ],
+			"UP6": [ "EF" ],
+			"UP7": [ "CS6" ]
+		}
+	}
+};
+
+function qos_map() {
+	let up_map = [];
+
+	if (wmm.profile)
+		wmm = profiles[wmm.profile];
+
+	if (!length(wmm.defaults))
+		wmm.defaults = { };
+
+	if (!length(wmm.exceptions))
+		wmm.exceptions = { };
+
+	for (let prio = 0; prio < 8; prio++) {
+		let up = wmm.exceptions["UP" + prio] || [];
+		let len = length(up);
+
+		if (!length(up))
+			continue;
+
+		for (let idx = 0; idx < len; idx++) {
+			push(up_map, class[up[idx]]);
+			push(up_map, prio);
+		}
+	}
+
+	for (let prio = 0; prio < 8; prio++) {
+		let up = wmm.defaults["UP" + prio];
+
+		if (length(up)) {
+			push(up_map, class[up[0]]);
+			push(up_map, class[up[1] || up[0]]);
+		} else {
+			push(up_map, 255);
+			push(up_map, 255);
+		}
+	}
+	let qos_map = join(",", up_map);
+
+	return qos_map;
+}
+%}
+set wireless.{{ section }}.iw_qos_map_set={{ s(qos_map()) }}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/metric/dhcp_snooping.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/metric/dhcp_snooping.uc
new file mode 100644
index 0000000..dbdd046
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/metric/dhcp_snooping.uc
@@ -0,0 +1,21 @@
+{% let interfaces = services.lookup_interfaces("dhcp-snooping") %}
+{% let enable = length(interfaces) %}
+{% if (!enable) return %}
+
+# DHCP Snooping configuration
+
+set event.dhcp=event
+set event.dhcp.type=dhcp
+set event.dhcp.filter='*'
+{% for (let n, filter in dhcp_snooping.filters): %}
+{{ n ? 'add_list' : 'set' }} event.dhcp.filter={{ filter }}
+{% endfor %}
+
+{% for (let interface in interfaces): %}
+{%    if (interface.role != "downstream") continue %}
+{%	let name = ethernet.calculate_name(interface) %}
+add dhcpsnoop device
+set dhcpsnoop.@device[-1].name={{ s(name) }}
+set dhcpsnoop.@device[-1].ingress=1
+set dhcpsnoop.@device[-1].egress=1
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/metric/health.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/metric/health.uc
new file mode 100644
index 0000000..1961573
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/metric/health.uc
@@ -0,0 +1,11 @@
+{%
+	if (!health)
+		return;
+%}
+
+# Health configuration
+set state.health.interval={{ health.interval }}
+set state.health.dhcp_local={{ b(health.dhcp_local) }}
+set state.health.dhcp_remote={{ b(health.dhcp_remote) }}
+set state.health.dns_local={{ b(health.dns_local) }}
+set state.health.dns_remote={{ b(health.dns_remote) }}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/metric/realtime.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/metric/realtime.uc
new file mode 100644
index 0000000..a17b71b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/metric/realtime.uc
@@ -0,0 +1,7 @@
+{% if (!realtime) return %}
+
+# Realtime event configuration
+{% for (let real in realtime.types): %}
+{%   if (!(real in events)) continue; %}
+add_list event.realtime.filter={{ real }}
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/metric/statistics.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/metric/statistics.uc
new file mode 100644
index 0000000..c6e5693
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/metric/statistics.uc
@@ -0,0 +1,7 @@
+{% if (!statistics) return %}
+
+# Statistics configuration
+set state.stats.interval={{ statistics.interval }}
+{% for (let statistic in statistics.types): %}
+add_list state.stats.types={{ statistic  }}
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/metric/telemetry.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/metric/telemetry.uc
new file mode 100644
index 0000000..ae83139
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/metric/telemetry.uc
@@ -0,0 +1,8 @@
+{% if (!telemetry) return %}
+
+# Telemetry streaming configuration
+set event.bulk.interval={{ telemetry.interval }}
+{% for (let type in telemetry.types): %}
+{%   if (!(type in events)) continue; %}
+add_list event.bulk.filter={{ type }}
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/metric/wifi_frames.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/metric/wifi_frames.uc
new file mode 100644
index 0000000..b342cb7
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/metric/wifi_frames.uc
@@ -0,0 +1,9 @@
+{% if (!wifi_frames) return %}
+
+# Wifi-frame reporting configuration
+set event.wifi=event
+set event.wifi.type=wifi
+set event.wifi.filter='*'
+{% for (let n, filter in wifi_frames.filters): %}
+{{ n ? 'add_list' : 'set' }} event.wifi.filter={{ filter }}
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/metric/wifi_scan.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/metric/wifi_scan.uc
new file mode 100644
index 0000000..e2db150
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/metric/wifi_scan.uc
@@ -0,0 +1,3 @@
+set event.wifiscan.interval={{ wifi_scan.interval }}
+set event.wifiscan.verbose={{ b(wifi_scan.verbose) }}
+set event.wifiscan.information_elements={{ b(wifi_scan.information_elements) }}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/radio.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/radio.uc
new file mode 100644
index 0000000..251515f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/radio.uc
@@ -0,0 +1,269 @@
+{%
+	let fs = require('fs');
+	let phys = wiphy.lookup_by_band(radio.band);
+
+	if (!length(phys)) {
+		warn("Can't find any suitable radio phy for band %s radio settings", radio.band);
+
+		return;
+	}
+
+	function match_htmode(phy, radio) {
+		let channel_mode = radio.channel_mode;
+		let channel_width = radio.channel_width;
+		let fallback_modes = { EHT: /^(EHT|HE|VHT|HT)/, HE: /^(HE|VHT|HT)/, VHT: /^(VHT|HT)/, HT: /^HT/ };
+		let mode_weight = { HT: 1, VHT: 10, HE: 100, EHT: 1000 };
+		let wanted_mode = channel_mode + (channel_width == 8080 ? "80+80" : channel_width);
+
+		let supported_phy_modes = map(sort(map(phy.htmode, (mode) => {
+			let m = match(mode, /^([A-Z]+)(.+)$/);
+			return [ mode, mode_weight[m[1]] * (m[2] == "80+80" ? 159 : +m[2]) ];
+		}), (a, b) => (b[1] - a[1])), i => i[0]);
+		supported_phy_modes = filter(supported_phy_modes, mode =>
+			!(index(phy.band, "2G") >= 0 && mode == "VHT80"));
+		if (wanted_mode in supported_phy_modes)
+			return wanted_mode;
+
+		for (let supported_mode in supported_phy_modes) {
+			if (match(supported_mode, fallback_modes[channel_mode])) {
+				warn("Selected radio does not support requested HT mode %s, falling back to %s",
+					wanted_mode, supported_mode);
+				delete radio.channel;
+				return supported_mode;
+			}
+		}
+
+		warn("Selected radio does not support any HT modes");
+		die("Selected radio does not support any HT modes");
+	}
+
+	let channel_list = {
+		"320": [ 0 ],
+		"160": [ 36, 100 ],
+		"80": [ 36, 52, 100, 116, 132, 149 ],
+		"40": [ 36, 44, 52, 60, 100, 108,
+			116, 124, 132, 140, 149, 157, 165, 173,
+			184, 192 ]
+	};
+
+	if (!length(radio.valid_channels) && radio.band == "5G")
+		radio.valid_channels = [ 36, 44, 52, 60, 100, 108, 116, 124, 132, 140, 149, 157, 165, 173, 184, 192 ];
+	if (!length(radio.valid_channels) && radio.band == "6G")
+		radio.valid_channels = [ 1, 2, 5, 9, 13, 17, 21, 25, 29, 33, 37, 41, 45, 49, 53, 57, 61, 65, 69, 73,
+					 77, 81, 85, 89, 93, 97, 101, 105, 109, 113, 117, 121, 125, 129, 133, 137, 141,
+					 145, 149, 153, 157, 161, 165, 169, 173, 177, 181, 185, 189, 193, 197, 201, 205,
+					 209, 213, 217, 221, 225, 229, 233 ];
+
+	if (capab.country_code && !(radio.country in capab.country_code)) {
+		warn("Overriding country code to %s", capab.country_code[0]);
+		radio.country = capab.country_code[0];
+	}
+
+	if (length(restrict.country) && !(radio.country in restrict.country)) {
+		warn("Country code is restricted");
+		die("Country code is restricted");
+	}
+
+	function allowed_channel(phy, radio) {
+		if (restrict.dfs && radio.channel in phy.dfs_channels)
+			return false;
+		if (radio.channel_width == 20)
+			return true;
+		if (!channel_list[radio.channel_width])
+			return false;
+		if (!(radio.channel in channel_list[radio.channel_width]))
+			return false;
+		if (radio.valid_channels && !(radio.channel in radio.valid_channels))
+			return false;
+		return true;
+	}
+
+	function match_channel(phy, radio) {
+		let wanted_channel = radio.channel;
+		if (!wanted_channel || wanted_channel == "auto")
+			return 0;
+
+		if (index(phy.band, "5G") >= 0 && !allowed_channel(phy, radio)) {
+			warn("Selected radio does not support requested channel %d, falling back to ACS",
+				wanted_channel);
+			return 0;
+		}
+
+		if (wanted_channel in phy.channels)
+			return wanted_channel;
+
+		let min = (wanted_channel <= 14) ?  1 :  32;
+		let max = (wanted_channel <= 14) ? 14 : 196;
+		let eligible_channels = filter(phy.channels, (ch) => (ch >= min && ch <= max));
+
+		// try to find a channel next to the wanted one
+		for (let i = length(eligible_channels); i > 0; i--) {
+			let candidate = eligible_channels[i - 1];
+
+			if (candidate < wanted_channel || i == 1) {
+				warn("Selected radio does not support requested channel %d, falling back to %d",
+					wanted_channel, candidate);
+
+				return candidate;
+			}
+		}
+
+		warn("Selected radio does not support any channel in the target frequency range, falling back to %d",
+			phy.channels[0]);
+
+		return phy.channels[0];
+	}
+
+	function match_mimo(available_ant, wanted_mimo) {
+		if (!radio.mimo)
+			return available_ant;
+
+		let shift = ((available_ant & 0xf0) == available_ant) ? 4 : 0;
+		let m = match(wanted_mimo, /^([0-9]+)x([0-9]+$)/);
+		if (!m) {
+			warn("Failed to parse MIMO mode, falling back to %d", available_ant);
+
+			return available_ant;
+		}
+
+		let use_ant = 0;
+		for (let i = 0; i < m[1]; i++)
+			use_ant += 1 << i;
+
+		if (shift == 4)
+			switch(use_ant) {
+			case 0x1:
+				use_ant = 0x8;
+				break;
+			case 0x3:
+				use_ant = 0xc;
+				break;
+			case 0x7:
+				use_ant = 0xe;
+				break;
+			}
+
+		if (!use_ant || (use_ant << shift) > available_ant) {
+			warn("Invalid or unsupported MIMO mode %s specified, falling back to %d",
+				wanted_mimo || 'none', available_ant);
+
+			return available_ant;
+		}
+
+		return use_ant << shift;
+	}
+
+	function match_require_mode(require_mode) {
+		let modes = { HT: "n", VHT: "ac", HE: "ax" };
+
+		return modes[require_mode] || '';
+	}
+
+	if (restrict.dfs && radio.allow_dfs && radio.band == "5G") {
+		warn('DFS is restricted.');
+		radio.allow_dfs = false;
+	}
+
+	let afc = false;
+	let afc_location;
+	if (radio.band == '6G')
+		fs.unlink('/tmp/afc-location-missing');
+	if (radio.band == '6G' && radio.country == 'US' && radio.he_6ghz_settings?.power_type && radio.he_6ghz_settings?.power_type != 'very-low-power') {
+		afc = true;
+		if (!radio.he_6ghz_settings.controller ||
+		    !radio.he_6ghz_settings.serial_number ||
+		    !radio.he_6ghz_settings.certificate_ids ||
+		    (!radio.he_6ghz_settings.frequency_ranges && !radio.he_6ghz_settings.operating_classes))
+			die('invalid AFC settings');
+		afc_location = fs.readfile('/etc/ucentral/afc-location.json');
+		if (afc_location)
+			afc_location = json(afc_location);
+		if (!afc_location) {
+			fs.writefile('/tmp/afc-location-missing', 'true');
+			warn('AFC location is missing, skipping 6GHz radio');
+			return;
+		}
+	}
+
+	function get_6GHz_power_type() {
+		switch(radio.he_6ghz_settings?.power_type) {
+		case 'indoor-power-indoor':
+			return 0;
+		case 'standard-power':
+			return 1;
+		}
+		/* very-low-power */
+		return 2;
+	}
+
+%}
+
+# Wireless Configuration
+{% for (let phy in phys): %}
+{%  let htmode = match_htmode(phy, radio) %}
+set wireless.{{ phy.section }}.disabled=0
+set wireless.{{ phy.section }}.ucentral_path={{ s(location) }}
+set wireless.{{ phy.section }}.htmode={{ htmode }}
+set wireless.{{ phy.section }}.channel={{ match_channel(phy, radio) }}
+set wireless.{{ phy.section }}.txantenna={{ match_mimo(phy.tx_ant_avail, radio.mimo) }}
+set wireless.{{ phy.section }}.rxantenna={{ match_mimo(phy.rx_ant_avail, radio.mimo) }}
+set wireless.{{ phy.section }}.beacon_int={{ radio.beacon_interval }}
+set wireless.{{ phy.section }}.country={{ s(radio.country) }}
+set wireless.{{ phy.section }}.require_mode={{ s(match_require_mode(radio.require_mode)) }}
+set wireless.{{ phy.section }}.txpower={{ radio.tx_power }}
+set wireless.{{ phy.section }}.legacy_rates={{ b(radio.legacy_rates) }}
+set wireless.{{ phy.section }}.chan_bw={{ radio.bandwidth }}
+set wireless.{{ phy.section }}.maxassoc={{ radio.maximum_clients }}
+set wireless.{{ phy.section }}.maxassoc_ignore_probe={{ b(radio.maximum_clients_ignore_probe) }}
+set wireless.{{ phy.section }}.noscan=1
+set wireless.{{ phy.section }}.reconf=1
+set wireless.{{ phy.section }}.acs_exclude_dfs={{ b(!radio.allow_dfs) }}
+{% for (let channel in radio.valid_channels): %}
+{%    if (!radio.allow_dfs && channel in phy.dfs_channels) continue %}
+add_list wireless.{{ phy.section }}.channels={{ channel }}
+{% endfor %}
+{%  if (radio.he_settings && phy.he_mac_capa && match(htmode, /HE.*/)): %}
+set wireless.{{ phy.section }}.he_bss_color={{ radio.he_settings.bss_color || '' }}
+set wireless.{{ phy.section }}.multiple_bssid={{ b(radio.he_settings.multiple_bssid) }}
+set wireless.{{ phy.section }}.ema={{ b(radio.he_settings.ema) }}
+{%  endif %}
+{%  if (radio.rates): %}
+set wireless.{{ phy.section }}.basic_rate={{ radio.rates.beacon }}
+set wireless.{{ phy.section }}.mcast_rate={{ radio.rates.multicast }}
+{%  endif %}
+{%  for (let raw in radio.hostapd_iface_raw): %}
+add_list wireless.{{ phy.section }}.hostapd_options={{ s(raw) }}
+{%  endfor %}
+{%  if (radio.band == "6G"): %}
+set wireless.{{ phy.section }}.he_co_locate={{ b(1) }}
+set wireless.{{ phy.section }}.he_6ghz_reg_pwr_type={{ s(get_6GHz_power_type()) }}
+set wireless.{{ phy.section }}.acs_exclude_6ghz_non_psc={{ b(radio.acs_exclude_6ghz_non_psc) }}
+{%  endif %}
+{%  if (afc): %}
+add wireless afc-server                            
+set wireless.@afc-server[-1].url={{s(radio.he_6ghz_settings.controller)}}
+{% if (radio.he_6ghz_settings.ca_certificate): %}
+set wireless.@afc-server[-1].cert={{s(files.add_anonymous(location, 'ca', b64dec(radio.he_6ghz_settings.ca_certificate)))}}
+{% endif %}
+set wireless.{{ phy.section }}.afc=1
+set wireless.{{ phy.section }}.afc_request_version='1.4'
+set wireless.{{ phy.section }}.afc_request_id={{ s(radio.he_6ghz_settings.request_id) }}
+set wireless.{{ phy.section }}.afc_serial_number={{ s(radio.he_6ghz_settings.serial_number) }}
+set wireless.{{ phy.section }}.afc_cert_ids={{ s(radio.he_6ghz_settings.certificate_ids) }}
+set wireless.{{ phy.section }}.afc_min_power={{radio.he_6ghz_settings.minimum_power}}
+{%    if (radio.he_6ghz_settings.frequency_ranges): %}
+set wireless.{{ phy.section }}.afc_freq_range={{s(join(',', radio.he_6ghz_settings.frequency_ranges)) }}
+{%    endif %}
+{%    if (radio.he_6ghz_settings.operating_classes): %}
+set wireless.{{ phy.section }}.afc_op_class={{s(join(',', radio.he_6ghz_settings.operating_classes)) }}
+{%    endif %}
+set wireless.{{ phy.section }}.afc_location_type={{ s(afc_location.location_type) }}
+set wireless.{{ phy.section }}.afc_location={{ s(afc_location.location) }}
+set wireless.{{ phy.section }}.afc_major_axis={{ s(afc_location.major_axis) }}
+set wireless.{{ phy.section }}.afc_minor_axis={{ s(afc_location.minor_axis) }}
+set wireless.{{ phy.section }}.afc_orientation={{ s(afc_location.orientation) }}
+set wireless.{{ phy.section }}.afc_height={{ s(afc_location.height) }}
+set wireless.{{ phy.section }}.afc_height_type={{ s(afc_location.height_type) }}
+set wireless.{{ phy.section }}.afc_vertical_tolerance={{ s(afc_location.vertical_tolerance) }}
+{%  endif %}
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/airtime_fairness.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/airtime_fairness.uc
new file mode 100644
index 0000000..1a2303b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/airtime_fairness.uc
@@ -0,0 +1,15 @@
+{%
+let enable = length(airtime_fairness);
+services.set_enabled("atfpolicy", enable);
+if (!enable)
+	return;
+%}
+
+set atfpolicy.@defaults[0].vo_queue_weight={{ airtime_fairness.voice_weight }}
+set atfpolicy.@defaults[0].update_pkt_threshold={{ airtime_fairness.packet_threshold }}
+set atfpolicy.@defaults[0].bulk_percent_thresh={{ airtime_fairness.bulk_threshold }}
+set atfpolicy.@defaults[0].prio_percent_thresh={{ airtime_fairness.priority_threshold }}
+set atfpolicy.@defaults[0].weight_normal={{ airtime_fairness.weight_normal }}
+set atfpolicy.@defaults[0].weight_prio={{ airtime_fairness.weight_priority }}
+set atfpolicy.@defaults[0].weight_bulk={{ airtime_fairness.weight_bulk }}
+
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/captive.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/captive.uc
new file mode 100644
index 0000000..07d5e83
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/captive.uc
@@ -0,0 +1,81 @@
+{%
+if (!services.is_present("spotfilter"))
+	return;
+let interfaces = services.lookup_interfaces_by_ssids("captive");
+let enable = length(interfaces);
+if (enable && enable > 1) {
+	warn('captive portal can only run on a single interface');
+	enable = false;
+
+}
+services.set_enabled("spotfilter", enable);
+services.set_enabled("uspot", enable);
+if (!enable)
+	return;
+%}
+
+{% for (let interface in uniq(interfaces)): %}
+{%   let name = ethernet.calculate_name(interface) %}
+add firewall redirect
+set firewall.@redirect[-1].name='Redirect-captive-{{ name }}'
+set firewall.@redirect[-1].src='{{ name }}'
+set firewall.@redirect[-1].src_dport='80'
+set firewall.@redirect[-1].proto='tcp'
+set firewall.@redirect[-1].target='DNAT'
+set firewall.@redirect[-1].mark='1/127'
+
+add firewall rule
+set firewall.@rule[-1].name='Allow-pre-captive-{{ name }}'
+set firewall.@rule[-1].src='{{ name }}'
+set firewall.@rule[-1].dest_port='80'
+set firewall.@rule[-1].proto='tcp'
+set firewall.@rule[-1].target='ACCEPT'
+set firewall.@rule[-1].mark='1/127'
+
+add firewall rule
+set firewall.@rule[-1].name='Allow-captive-{{ name }}'
+set firewall.@rule[-1].src='{{ name }}'
+set firewall.@rule[-1].dest_port='80'
+set firewall.@rule[-1].proto='tcp'
+set firewall.@rule[-1].target='ACCEPT'
+set firewall.@rule[-1].mark='2/127'
+
+{%   if (interface.role == 'downstream'): %}
+add firewall rule
+set firewall.@rule[-1].name='Drop-pre-captive-{{ name }}'
+set firewall.@rule[-1].src='{{ name }}'
+set firewall.@rule[-1].dest='{{ ethernet.find_interface("upstream", interface.vlan.id) }}'
+set firewall.@rule[-1].proto='any'
+set firewall.@rule[-1].target='DROP'
+set firewall.@rule[-1].mark='1/127'
+
+add firewall include
+set firewall.@include[-1].type=nftables
+set firewall.@include[-1].position='chain-post'
+set firewall.@include[-1].path='/usr/share/uspot/firewall.nft'
+set firewall.@include[-1].chain='mangle_postrouting'
+
+{%   endif %}
+{% endfor %}
+
+add uhttpd uhttpd
+set uhttpd.@uhttpd[-1].redirect_https='0'
+set uhttpd.@uhttpd[-1].rfc1918_filter='1'
+set uhttpd.@uhttpd[-1].max_requests='5'
+set uhttpd.@uhttpd[-1].max_connections='100'
+set uhttpd.@uhttpd[-1].cert='/etc/uhttpd.crt'
+set uhttpd.@uhttpd[-1].key='/etc/uhttpd.key'
+set uhttpd.@uhttpd[-1].script_timeout='60'
+set uhttpd.@uhttpd[-1].network_timeout='30'
+set uhttpd.@uhttpd[-1].http_keepalive='20'
+set uhttpd.@uhttpd[-1].tcp_keepalive='1'
+set uhttpd.@uhttpd[-1].no_dirlists='1'
+add_list uhttpd.@uhttpd[-1].listen_http='0.0.0.0:80'
+add_list uhttpd.@uhttpd[-1].listen_http='[::]:80'
+set uhttpd.@uhttpd[-1].home=/tmp/ucentral/www-uspot
+add_list uhttpd.@uhttpd[-1].ucode_prefix='/hotspot=/usr/share/uspot/handler.uc'
+add_list uhttpd.@uhttpd[-1].ucode_prefix='/logoff=/usr/share/uspot/handler.uc'
+add_list uhttpd.@uhttpd[-1].ucode_prefix='/logout=/usr/share/uspot/handler.uc'
+add_list uhttpd.@uhttpd[-1].ucode_prefix='/cpd=/usr/share/uspot/handler-cpd.uc'
+add_list uhttpd.@uhttpd[-1].ucode_prefix='/env=/usr/share/uspot/handler-env.uc'
+set uhttpd.@uhttpd[-1].error_page='/cpd'
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/data_plane.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/data_plane.uc
new file mode 100644
index 0000000..41c5a50
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/data_plane.uc
@@ -0,0 +1,29 @@
+# Data Plane service configuration
+{%
+let iface = {};
+
+function render(dict, type) {
+	for (let idx, filter in dict) {
+%}
+set dataplane.{{ filter.name }}=program
+set dataplane.{{ filter.name }}.type={{ type }}
+set dataplane.{{ filter.name }}.program={{ s(files.add_anonymous(location, 'ingress_' + idx, b64dec(filter.program))) }}
+{%
+		for (let i in services.lookup_interfaces("data-plane:" + filter.name)) {
+			let name = ethernet.calculate_name(i);
+			if (!length(iface[name]))
+				iface[name] = [];
+			push(iface[name], filter.name);
+		}
+	}
+}
+
+render(data_plane.ingress_filters, "ingress");
+%}
+
+{% for (let k, v in iface): %}
+set dataplane.{{ k }}=interface
+{%   for (let i, p in v): %}
+add_list dataplane.{{ k }}.program={{ s(p) }}
+{%   endfor %}
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/dhcp_relay.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/dhcp_relay.uc
new file mode 100644
index 0000000..49e77df
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/dhcp_relay.uc
@@ -0,0 +1,36 @@
+{%
+if (!services.is_present("dhcprelay") || !dhcp_relay)
+	return;
+let interfaces = services.lookup_interfaces("dhcp-relay");
+let ports = ethernet.lookup_by_select_ports(dhcp_relay.select_ports);
+let enable = length(interfaces) && length(ports); 
+services.set_enabled("dhcprelay", enable);
+if (!enable)
+	return;
+
+%}
+
+# DHCP-relay service configuration
+
+set firewall.dhcp_relay=rule
+set firewall.dhcp_relay.name='Allow-DHCP-Relay'
+set firewall.dhcp_relay.src='{{ s(ethernet.find_interface("upstream", 0)) }}'
+set firewall.dhcp_relay.dest_port='67'
+set firewall.dhcp_relay.family='ipv4'
+set firewall.dhcp_relay.proto='udp'
+set firewall.dhcp_relay.target='ACCEPT'
+
+set dhcprelay.relay=bridge
+set dhcprelay.relay.name=up
+{% for (let vlan in dhcp_relay.vlans||[]): %}
+add_list dhcprelay.relay.vlans={{ vlan.vlan }}
+{% endfor %}
+{% for (let port in ports): %}
+add_list dhcprelay.relay.upstream={{ port }}
+{% endfor %}
+{% for (let vlan in dhcp_relay.vlans||[]): %}
+set dhcprelay.vlan{{vlan.vlan}}=config
+set dhcprelay.vlan{{vlan.vlan}}.server={{ s(vlan.relay_server) }}
+set dhcprelay.vlan{{vlan.vlan}}.circuit_id={{ s(vlan?.circuit_id_format) }}
+set dhcprelay.vlan{{vlan.vlan}}.remote_id={{ s(vlan?.remote_id_format) }}
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/dhcp_snooping.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/dhcp_snooping.uc
new file mode 100644
index 0000000..925034f
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/dhcp_snooping.uc
@@ -0,0 +1,20 @@
+{% services.set_enabled("dhcpsnoop", true) %}
+
+# DHCP Snooping configuration
+
+{%
+	let names = [];
+	for (let interface in state.interfaces) {
+		if (interface.role == 'upstream') {
+			 for (let name in ethernet.lookup_by_interface_vlan(interface))
+				 push(names, name);
+		} else
+			push(names, ethernet.calculate_name(interface));
+	}
+	for (let name in uniq(names)):
+%}
+add dhcpsnoop device
+set dhcpsnoop.@device[-1].name={{ s(name) }}
+set dhcpsnoop.@device[-1].ingress=1
+set dhcpsnoop.@device[-1].egress=1
+{%	endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/facebook_wifi.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/facebook_wifi.uc
new file mode 100644
index 0000000..0c29faf
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/facebook_wifi.uc
@@ -0,0 +1,48 @@
+{% if (!services.is_present("fbwifi")) return %}
+{% let interfaces = services.lookup_interfaces("facebook-wifi") %}
+{% let enable = length(interfaces) %}
+{% services.set_enabled("fbwifi", enable) %}
+{% if (!enable) return %}
+
+# Facebook-wifi service configuration
+
+set fbwifi.main.enabled=1
+set fbwifi.main.zone={{ s(ethernet.calculate_name(interfaces[0])) }}
+set fbwifi.main.gateway_token='FBWIFI:GATEWAY|{{ facebook_wifi.vendor_id }}|{{ facebook_wifi.gateway_id }}|{{ facebook_wifi.secret }}'
+
+set uhttpd.main=uhttpd
+add_list uhttpd.main.listen_http='0.0.0.0:80'
+add_list uhttpd.main.listen_http='[::]:80'
+add_list uhttpd.main.listen_https='0.0.0.0:443'
+add_list uhttpd.main.listen_https='[::]:443'
+set uhttpd.main.redirect_https='0'
+set uhttpd.main.home='/www'
+set uhttpd.main.max_requests='3'
+set uhttpd.main.max_connections='100'
+set uhttpd.main.cgi_prefix='/cgi-bin'
+add_list uhttpd.main.lua_prefix='/cgi-bin/luci=/usr/lib/lua/luci/sgi/uhttpd.lua'
+set uhttpd.main.script_timeout='60'
+set uhttpd.main.network_timeout='30'
+set uhttpd.main.http_keepalive='20'
+set uhttpd.main.tcp_keepalive='1'
+set uhttpd.main.cert='/tmp/fbwifi/https_server_cert'
+set uhttpd.main.key='/tmp/fbwifi/https_server_key'
+set uhttpd.main.json_script='/usr/share/fbwifi/uhttpd.json'
+set uhttpd.main.rfc1918_filter='0'
+
+set firewall.fbwifi=include
+set firewall.fbwifi.enabled=1
+set firewall.fbwifi.family=ipv4
+set firewall.fbwifi.path=/usr/share/fbwifi/firewall.include
+set firewall.fbwifi.reload=1
+set firewall.fbwifi.type=script
+
+set uhttpd.fbwifi_redirect=uhttpd
+set uhttpd.fbwifi_redirect.enabled=1
+set uhttpd.fbwifi_redirect.listen_http='0.0.0.0:2060'
+set uhttpd.fbwifi_redirect.listen_https='0.0.0.0:2061'
+set uhttpd.fbwifi_redirect.cert='/tmp/fbwifi/https_server_cert'
+set uhttpd.fbwifi_redirect.key='/tmp/fbwifi/https_server_key'
+set uhttpd.fbwifi_redirect.json_script='/tmp/fbwifi/uhttpd-redirect.json'
+
+add_list dhcp.@dnsmasq[0].rebind_domain=fbwifigateway.net
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/fingerprint.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/fingerprint.uc
new file mode 100644
index 0000000..de030e2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/fingerprint.uc
@@ -0,0 +1,13 @@
+{%
+if (!services.is_present("ufp"))
+	return;
+services.set_enabled("ufp", state.services?.fingerprint);
+if (!state.services?.fingerprint)
+	return;
+%}
+set state.fingerprint=fingerprint
+set state.fingerprint.mode={{ s(state.services.fingerprint.mode) }}
+set state.fingerprint.min_age={{ s(state.services.fingerprint.minimum_age) }}
+set state.fingerprint.max_age={{ s(state.services.fingerprint.maximum_age) }}
+set state.fingerprint.period={{ s(state.services.fingerprint.periodicity) }}
+set state.fingerprint.allow_wan={{ b(state.services.fingerprint.allow_wan) }}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/gps.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/gps.uc
new file mode 100644
index 0000000..6b18d00
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/gps.uc
@@ -0,0 +1,11 @@
+{%-
+	let enable = length(gps);
+	services.set_enabled("umdns", enable);
+        if (!enable)
+                return;
+%}
+
+# Configure GPS
+set gps.@gps[-1].disabled=0
+set gps.@gps[-1].adjust_time={{ b(gps.adjust_time) }}
+set gps.@gps[-1].baudrate={{ s(gps.baud_rate) }}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/http.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/http.uc
new file mode 100644
index 0000000..62d7aaf
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/http.uc
@@ -0,0 +1,36 @@
+{% if (!services.is_present("uhttpd")) return %}
+{% let interfaces = services.lookup_interfaces("http") %}
+{% let enable = length(interfaces) %}
+{% services.set_enabled("uhttpd", enable) %}
+{% services.set_enabled("rpcd", enable) %}
+{% if (!enable) return %}
+
+# HTTP service configuration
+
+add uhttpd uhttpd
+set uhttpd.@uhttpd[-1].redirect_https='0'
+set uhttpd.@uhttpd[-1].home='/www'
+set uhttpd.@uhttpd[-1].rfc1918_filter='1'
+set uhttpd.@uhttpd[-1].max_requests='3'
+set uhttpd.@uhttpd[-1].max_connections='100'
+set uhttpd.@uhttpd[-1].cert='/etc/uhttpd.crt'
+set uhttpd.@uhttpd[-1].key='/etc/uhttpd.key'
+set uhttpd.@uhttpd[-1].cgi_prefix='/cgi-bin'
+set uhttpd.@uhttpd[-1].lua_prefix='/cgi-bin/luci=/usr/lib/lua/luci/sgi/uhttpd.lua'
+set uhttpd.@uhttpd[-1].script_timeout='60'
+set uhttpd.@uhttpd[-1].network_timeout='30'
+set uhttpd.@uhttpd[-1].http_keepalive='20'
+set uhttpd.@uhttpd[-1].tcp_keepalive='1'
+set uhttpd.@uhttpd[-1].ubus_prefix='/ubus'
+add_list uhttpd.@uhttpd[-1].listen_http='0.0.0.0:{{ http.http_port || 80 }}'
+{% let interfaces = services.lookup_interfaces("http") %}
+{% for (let interface in interfaces): %}
+{%    let name = ethernet.calculate_name(interface) %}
+
+add firewall rule
+set firewall.@rule[-1].name='Allow-http-{{ name }}'
+set firewall.@rule[-1].src='{{ name }}'
+set firewall.@rule[-1].port='{{ http.http_port || 80 }}'
+set firewall.@rule[-1].proto='tcp'
+set firewall.@rule[-1].target='ACCEPT'
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/ieee8021x.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/ieee8021x.uc
new file mode 100644
index 0000000..9d6a6c3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/ieee8021x.uc
@@ -0,0 +1,48 @@
+{%
+	if (!services.is_present("ieee8021x"))
+		return;
+
+	let enable = false; 
+	for (let k, iface in state.interfaces)
+		if (length(iface.ieee8021x_ports))
+			enable = true;
+
+	if (ieee8021x.mode == "radius") {
+		if (!ieee8021x.radius?.auth_server_addr ||
+		    !ieee8021x.radius?.auth_server_port ||
+		    !ieee8021x.radius?.auth_server_secret) {
+			warn('invalid radius configuration');
+			enable = false;
+		}
+	}
+
+	services.set_enabled("ieee8021x", enable);
+	if (!enable)
+		return;
+
+	cursor.load("system");
+	let certs = cursor.get_all("system", "@certificates[-1]");
+%}
+# IEEE8021x service configuration
+
+add ieee8021x config 
+set ieee8021x.@config[-1].ca={{ s(certs.ca) }}
+set ieee8021x.@config[-1].cert={{ s(certs.cert) }}
+set ieee8021x.@config[-1].key={{ s(certs.key) }}
+{%	if (ieee8021x.mode == "radius"): %}
+set ieee8021x.@config[-1].nas_identifier={{ s(ieee8021x.radius.nas_identifier) }}
+set ieee8021x.@config[-1].auth_server_addr={{ s(ieee8021x.radius.auth_server_addr) }}
+set ieee8021x.@config[-1].auth_server_port={{ s(ieee8021x.radius.auth_server_port) }}
+set ieee8021x.@config[-1].auth_server_secret={{ s(ieee8021x.radius.auth_server_secret) }}
+set ieee8021x.@config[-1].acct_server_addr={{ s(ieee8021x.radius.acct_server_addr) }}
+set ieee8021x.@config[-1].acct_server_port={{ s(ieee8021x.radius.acct_server_port) }}
+set ieee8021x.@config[-1].acct_server_secret={{ s(ieee8021x.radius.acct_server_secret) }}
+set ieee8021x.@config[-1].coa_server_addr={{ s(ieee8021x.radius.coa_server_addr) }}
+set ieee8021x.@config[-1].coa_server_port={{ s(ieee8021x.radius.coa_server_port) }}
+set ieee8021x.@config[-1].coa_server_secret={{ s(ieee8021x.radius.coa_server_secret) }}
+set ieee8021x.@config[-1].mac_address_bypass={{ b(ieee8021x.radius.mac_address_bypass) }}
+{%	else
+		files.add_named("/var/run/hostapd-ieee8021x.eap_user", render("../eap_users.uc", { users: ieee8021x.users }));
+	endif
+%}
+
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/igmp.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/igmp.uc
new file mode 100644
index 0000000..111daa6
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/igmp.uc
@@ -0,0 +1,20 @@
+{% if (!services.is_present("igmpproxy")) return %}
+{% let interfaces = services.lookup_interfaces("igmp") %}
+{% let enable = length(interfaces) %}
+{% services.set_enabled("igmpproxy", enable) %}
+{% if (!enable) return %}
+
+# IGMP service configuration
+
+{% let interfaces = services.lookup_interfaces("igmp") %}
+{% for (let interface in interfaces): %}
+{%   if (!interface.ipv4) continue; %}
+{%   let name = ethernet.calculate_name(interface) %}
+add igmpproxy phyint
+set igmpproxy.@phyint[-1].network={{ name }}
+set igmpproxy.@phyint[-1].zone={{ s((interface.role == "usptream") ? "wan" : name) }}
+set igmpproxy.@phyint[-1].direction={{ s(interface.role) }}
+{%   if (interface.role == "upstream"):  %}
+set igmpproxy.@phyint[-1].altnet='0.0.0.0/0'
+{%   endif %}
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/lldp.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/lldp.uc
new file mode 100644
index 0000000..71fd78c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/lldp.uc
@@ -0,0 +1,16 @@
+{% if (!services.is_present("lldpd")) return %}
+{% let interfaces = services.lookup_interfaces("lldp") %}
+{% let enable = length(interfaces) %}
+{% services.set_enabled("lldpd", enable) %}
+{% if (!enable) return %}
+
+# LLDP service configuration
+
+set lldpd.config.enable=1
+set lldpd.config.lldp_description={{ s(lldp.describe) }}
+set lldpd.config.lldp_location={{ s(lldp.location) }}
+{% for (let interface in interfaces): %}
+{%  for (let port in ethernet.lookup_by_interface_spec(interface)): %}
+add_list lldpd.config.interface={{ s(port) }}
+{%  endfor %}
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/log.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/log.uc
new file mode 100644
index 0000000..c1bd53a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/log.uc
@@ -0,0 +1,18 @@
+{%
+if (!length(log)) return;
+let hostname = state.unit?.hostname;
+if (!hostname) {
+	cursor.load("system");
+	let system = cursor.get_all("system", "@system[-1]");
+	hostname = system?.hostname || OpenWifi;
+}
+%}
+
+# Syslog service configuration
+
+set system.@system[-1].log_ip={{ s(log.host) }}
+set system.@system[-1].log_port={{ s(log.port) }}
+set system.@system[-1].log_proto={{ s(log.proto) }}
+set system.@system[-1].log_size={{ s(log.size) }}
+set system.@system[-1].log_priority={{ s(log.priority) }}
+set system.@system[-1].log_hostname={{ s(hostname) }}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/mdns.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/mdns.uc
new file mode 100644
index 0000000..85c3640
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/mdns.uc
@@ -0,0 +1,26 @@
+{% if (!services.is_present("umdns")) return %}
+{% let interfaces = services.lookup_interfaces("mdns") %}
+{% if (state.services?.fingerprint) interfaces = state.interfaces %}
+{% let enable = length(interfaces) %}
+{% services.set_enabled("umdns", enable) %}
+{% if (!enable) return %}
+
+
+# MDNS service configuration
+
+add umdns umdns
+set umdns.@umdns[-1].enable=1
+{% for (let interface in interfaces): %}
+add_list umdns.@umdns[-1].network={{ s(ethernet.calculate_name(interface)) }}
+{% endfor %}
+
+{% for (let interface in interfaces): %}
+{%   let name = ethernet.calculate_name(interface) %}
+add firewall rule
+set firewall.@rule[-1].name='Allow-mdns-{{ name }}'
+set firewall.@rule[-1].src='{{ name }}'
+set firewall.@rule[-1].dest_port='5353'
+set firewall.@rule[-1].proto='udp'
+set firewall.@rule[-1].target='ACCEPT'
+{% endfor %}
+
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/ntp.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/ntp.uc
new file mode 100644
index 0000000..6be9599
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/ntp.uc
@@ -0,0 +1,25 @@
+{%
+	if (!length(ntp))
+		return;
+	let interfaces = services.lookup_interfaces("ntp");
+%}
+set system.ntp.enable_server={{ b(length(interfaces)) }}
+{%	if (ntp.servers): %}
+set system.ntp.use_dhcp=0
+delete system.ntp.server
+{%	endif %}
+{%	for (let server in ntp.servers): %}
+add_list system.ntp.server={{ s(server) }}
+{%	endfor
+
+	/* open the port on all interfaces that select ssh */
+	for (let interface in interfaces):
+		let name = ethernet.calculate_name(interface);
+%}
+add firewall rule
+set firewall.@rule[-1].name='Allow-ntp-{{ name }}'
+set firewall.@rule[-1].src='{{ name }}'
+set firewall.@rule[-1].dest_port='123'
+set firewall.@rule[-1].proto='udp'
+set firewall.@rule[-1].target='ACCEPT'
+{%	endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/online_check.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/online_check.uc
new file mode 100644
index 0000000..0168dbb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/online_check.uc
@@ -0,0 +1,27 @@
+{%
+let enable = true;
+if (!services.is_present("onlinecheck") ||
+    !length(online_check) ||
+    (!length(online_check.ping_hosts) &&
+     !length(online_check.download_hosts)))
+	enable = false;
+
+services.set_enabled("onlinecheck", enable);
+if (!enable)
+	return;
+%}
+
+
+# Online check service configuration
+add onlinecheck config
+set onlinecheck.@config[-1].check_interval={{ s(online_check.check_interval) }}
+set onlinecheck.@config[-1].check_threshold={{ s(online_check.check_threshold) }}
+{% for (let action in online_check.action): %}
+add_list onlinecheck.@config[-1].action={{ s(action) }}
+{% endfor %}
+{% for (let host in online_check.ping_hosts): %}
+add_list onlinecheck.@config[-1].ping_hosts={{ s(host) }}
+{% endfor %}
+{% for (let host in online_check.download_hosts): %}
+add_list onlinecheck.@config[-1].download_hosts={{ s(host) }}
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/quality_of_service.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/quality_of_service.uc
new file mode 100644
index 0000000..b017ba9
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/quality_of_service.uc
@@ -0,0 +1,87 @@
+{%
+if (!quality_of_service)
+	quality_of_service = {};
+let egress = ethernet.lookup_by_select_ports(quality_of_service.select_ports);
+let enable = length(egress);
+services.set_enabled("qosify", enable);
+if (!enable)
+	return;
+
+function get_speed(dev, speed) {
+	if (!speed)
+		speed = ethernet.get_speed(dev);
+	return speed;
+}
+
+function get_proto(proto) {
+	if (proto == "any")
+		return [ "udp", "tcp" ];
+	return [ proto ];
+}
+
+function get_range(port) {
+	if (port.range_end)
+		return sprintf("-%d", port.range_end)
+}
+
+let fs = require("fs");
+let file = fs.open("/tmp/qosify.conf", "w");
+for (let class in quality_of_service.classifier) {
+	for (let port in class.ports)
+		for (let proto in get_proto(port.protocol))
+			file.write(sprintf("%s:%d%s %s%s\n", proto, port.port,
+					   port.range_end ? sprintf("-%d", port.range_end) : "",
+					   port.reclassify ? "" : "+", class.dscp));
+	for (let fqdn in class.dns)
+		file.write(sprintf("dns:%s%s %s%s\n",
+				   fqdn.suffix_matching ? "*." : "", fqdn.fqdn,
+				   fqdn.reclassify ? "" : "+", class.dscp));
+}
+
+if (quality_of_service.services) {
+	let inputfile = fs.open('/usr/share/ucentral/qos.json', "r");
+	let db = json(inputfile.read("all"));
+
+	for (let k, v in db.classes) {
+%}
+set qosify.{{ k }}=class
+set qosify.{{ k }}.ingress={{ s(v.ingress) }}
+set qosify.{{ k }}.egress={{ s(v.egress) }}
+set qosify.{{ k }}.bulk_trigger_pps={{ s(v.bulk_pps) }}
+set qosify.{{ k }}.bulk_trigger_timeout={{ s(v.bulk_timeout) }}
+set qosify.{{ k }}.dscp_bulk={{ s(v.bulk_dscp) }}
+{%
+	}
+
+	let rules = [];
+	let all = 'all' in quality_of_service.services;
+	for (let k, v in db.services)
+		if (all || (k in quality_of_service.services))
+			for (let uses in v.uses)
+				push(quality_of_service.services, uses);
+	for (let k, v in db.services)
+		if (all || (k in quality_of_service.services)) {
+			for (let port in v.tcp)
+				push(rules, 'tcp:' + port + ' ' + v.classifier);
+			for (let port in v.udp)
+				push(rules, 'udp:' + port + ' ' + v.classifier);
+			for (let dns in v.fqdn)
+				push(rules, 'dns:' + dns + ' ' + v.classifier);
+		}
+
+	for (let rule in uniq(rules))
+		file.write(rule + '\n');
+}
+
+file.close();
+%}
+
+set qosify.@defaults[0].bulk_trigger_pps={{ quality_of_service?.bulk_detection?.packets_per_second || 0}}
+set qosify.@defaults[0].dscp_bulk={{ quality_of_service?.bulk_detection?.dscp }}
+
+{% for (let dev in egress): %}
+set qosify.{{ dev }}=device
+set qosify.{{ dev }}.name={{ s(dev) }}
+set qosify.{{ dev }}.bandwidth_up='{{ get_speed(dev, quality_of_service.bandwidth_up) }}mbit'
+set qosify.{{ dev }}.bandwidth_down='{{ get_speed(dev, quality_of_service.bandwidth_down) }}mbit'
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/radius_gw_proxy.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/radius_gw_proxy.uc
new file mode 100644
index 0000000..8a3bf7a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/radius_gw_proxy.uc
@@ -0,0 +1,7 @@
+{%
+if (!services.is_present("radius-gw-proxy"))
+	return;
+let ssids = services.lookup_ssids("radius-gw-proxy");
+let enable = length(ssids);
+services.set_enabled("radius-gw-proxy", enable);
+%}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/radius_proxy.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/radius_proxy.uc
new file mode 100644
index 0000000..dfd9551
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/radius_proxy.uc
@@ -0,0 +1,93 @@
+{% if (!services.is_present("radsecproxy")) return %}
+{% let enable = (length(radius_proxy) && length(radius_proxy.realms)) %}
+{% services.set_enabled("radsecproxy", enable) %}
+{% if (!enable) return %}
+
+add radsecproxy options
+add_list radsecproxy.@options[-1].ListenUDP='localhost:1812'
+add_list radsecproxy.@options[-1].ListenUDP='localhost:1813'
+
+add radsecproxy client
+set radsecproxy.@client[-1].name='client'
+set radsecproxy.@client[-1].host='localhost'
+set radsecproxy.@client[-1].type='udp'
+set radsecproxy.@client[-1].secret={{ s(radius_proxy.proxy_secret) }}
+
+{% for (idx, realm in radius_proxy.realms): %}
+
+{%   let certs = {};
+     if (realm.use_local_certificates) {
+	cursor.load("system");
+	certs = cursor.get_all("system", "@certificates[-1]");
+     } else if (realm.ca_certificate && realm.certificate && realm.private_key) {
+	certs.ca = files.add_anonymous(location, 'ca' + idx, b64dec(realm.ca_certificate));
+	certs.cert = files.add_anonymous(location, 'cert' + idx, b64dec(realm.certificate));
+	certs.key = files.add_anonymous(location, 'key' + idx, b64dec(realm.private_key));
+     } else if (realm.protocol == "radsec") {
+	warn("invalid certificate settings");
+	continue;
+     }
+%}
+
+{%   if (realm.protocol == "radsec"): %}
+set radsecproxy.tls{{ idx }}=tls
+set radsecproxy.@tls[-1].name='tls{{ idx }}'
+set radsecproxy.@tls[-1].CACertificateFile={{ s(certs.ca) }}
+set radsecproxy.@tls[-1].certificateFile={{ s(certs.cert) }}
+set radsecproxy.@tls[-1].certificateKeyFile={{ s(certs.key) }}
+set radsecproxy.@tls[-1].certificateKeyPassword=''
+
+set radsecproxy.server{{ idx }}=server
+set radsecproxy.@server[-1].name='server{{ idx }}'
+{%     if (realm.auto_discover): %}
+set radsecproxy.@server[-1].dynamicLookupCommand='/usr/libexec/naptr_lookup.sh'
+{%     else %}
+set radsecproxy.@server[-1].host={{ s(realm.host) }}
+set radsecproxy.@server[-1].port={{ s(realm.port) }}
+set radsecproxy.@server[-1].secret={{ s(realm.secret) }}
+{%     endif %}
+set radsecproxy.@server[-1].type='tls'
+set radsecproxy.@server[-1].tls='tls{{ idx }}'
+set radsecproxy.@server[-1].statusServer='0'
+set radsecproxy.@server[-1].certificateNameCheck='0'
+{%     for (name in realm.realm): %}
+add radsecproxy realm
+set radsecproxy.@realm[-1].name='{{ name }}'
+set radsecproxy.@realm[-1].server='server{{ idx }}'
+set radsecproxy.@realm[-1].accountingServer='server{{ idx }}'
+{%     endfor %}
+{%   endif %}
+
+{%   if (realm.protocol == "radius"): %}
+set radsecproxy.server{{ idx + "auth" }}=server
+set radsecproxy.@server[-1].name='server{{ idx }}auth'
+set radsecproxy.@server[-1].host={{ s(realm.auth_server) }}
+set radsecproxy.@server[-1].port={{ s(realm.auth_port) }}
+set radsecproxy.@server[-1].secret={{ s(realm.auth_secret) }}
+set radsecproxy.@server[-1].type='udp'
+{%     if (realm.acct_server): %}
+set radsecproxy.server{{ idx + "acct" }}=server
+set radsecproxy.@server[-1].name='server{{ idx }}acct'
+set radsecproxy.@server[-1].host={{ s(realm.acct_server) }}
+set radsecproxy.@server[-1].port={{ s(realm.acct_port) }}
+set radsecproxy.@server[-1].secret={{ s(realm.acct_secret) }}
+set radsecproxy.@server[-1].type='udp'
+{%     endif %}
+{%     for (name in realm.realm): %}
+add radsecproxy realm
+set radsecproxy.@realm[-1].name='{{ name }}'
+set radsecproxy.@realm[-1].server='server{{ idx }}auth'
+{%       if (realm.acct_server): %}
+set radsecproxy.@realm[-1].accountingServer='server{{ idx }}acct'
+{%       endif %}
+{%     endfor %}
+{%   endif %}
+
+{%   if (realm.protocol == "block"): %}
+{%     for (name in realm.realm): %}
+add radsecproxy realm
+set radsecproxy.@realm[-1].name='{{ name }}'
+set radsecproxy.@realm[-1].replyMessage={{ s(realm.message) }}
+{%     endfor %}
+{%   endif %}
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/rrm.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/rrm.uc
new file mode 100644
index 0000000..ea01f81
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/rrm.uc
@@ -0,0 +1,8 @@
+{%
+if (!services.is_present("rrmd"))
+	return;
+services.set_enabled("rrmd", true);
+%}
+
+set rrmd.@base[0].beacon_request_assoc={{ rrm?.beacon_request_assoc || 0 }}
+set rrmd.@base[0].station_stats_interval={{ rrm?.station_stats_interval || 0 }}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/rtty.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/rtty.uc
new file mode 100644
index 0000000..68950a3
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/rtty.uc
@@ -0,0 +1,12 @@
+{% if (!services.is_present("rtty")) return %}
+{% let enable = length(rtty) %}
+{% services.set_enabled("rtty", enable) %}
+{% if (!enable) return %}
+
+# RTTY service configuration
+
+set rtty.@rtty[-1].enable={{ b((rtty.token && rtty.host && rtty.port)) }}
+set rtty.@rtty[-1].token={{ s(rtty.token) }}
+set rtty.@rtty[-1].host={{ s(rtty.host) }}
+set rtty.@rtty[-1].port={{ s(rtty.port) }}
+set rtty.@rtty[-1].ssl={{ b(rtty.mutual_tls) }}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/ssh.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/ssh.uc
new file mode 100644
index 0000000..9642119
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/ssh.uc
@@ -0,0 +1,31 @@
+{%
+let interfaces = services.lookup_interfaces("ssh");
+let enable = length(interfaces);
+
+if (restrict.ssh && enable) {
+	warn('SSH is restricted');
+	enable = false;
+}
+
+services.set_enabled("dropbear", enable);
+if (!enable)
+	return;
+files.add_named("/etc/dropbear/authorized_keys", join("\n", ssh.authorized_keys || []) + "\n");
+%}
+
+# SSH service configuration
+
+set dropbear.@dropbear[-1].enable={{ b(enable) }}
+set dropbear.@dropbear[-1].Port={{ s(ssh.port) }}
+set dropbear.@dropbear[-1].PasswordAuth={{ b(ssh.password_authentication) }}
+
+{% for (let interface in interfaces): %}
+{%    let name = ethernet.calculate_name(interface) %}
+
+add firewall rule
+set firewall.@rule[-1].name='Allow-ssh-{{ name }}'
+set firewall.@rule[-1].src='{{ name }}'
+set firewall.@rule[-1].dest_port='{{ ssh.port }}'
+set firewall.@rule[-1].proto='tcp'
+set firewall.@rule[-1].target='ACCEPT'
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/wifi_steering.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/wifi_steering.uc
new file mode 100644
index 0000000..1457c30
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/wifi_steering.uc
@@ -0,0 +1,29 @@
+{% if (!services.is_present("usteer")) return %}
+{% let ssids = services.lookup_ssids("wifi-steering") %}
+{% let enable = length(ssids) %}
+{% services.set_enabled("usteer", enable) %}
+{% if (!enable) return %}
+{% let name = wifi_steering.mode == 'local' ? ethernet.find_interface("upstream", 0) : '' %}
+# Wifi-Steering service configuration
+
+add usteer usteer
+set usteer.@usteer[-1].network={{ s(name) }}
+set usteer.@usteer[-1].ipv6={{ b(wifi_steering.ipv6) }}
+set usteer.@usteer[-1].key={{ s(wifi_steering.key) }}
+set usteer.@usteer[-1].assoc_steering={{ b(wifi_steering.assoc_steering) }}
+set usteer.@usteer[-1].min_snr={{ wifi_steering.required_snr }}
+set usteer.@usteer[-1].min_connect_snr={{ wifi_steering.required_probe_snr }}
+set usteer.@usteer[-1].roam_scan_snr={{ wifi_steering.required_roam_snr }}
+set usteer.@usteer[-1].load_kick_enabled={{ b(wifi_steering.load_kick_threshold) }}
+set usteer.@usteer[-1].load_kick_threshold={{ wifi_steering.load_kick_threshold }}
+set usteer.@usteer[-1].autochannel={{ b(wifi_steering.auto_channel) }}
+{% for (let ssid in ssids): %}
+add_list usteer.@usteer[-1].ssid_list={{ s(ssid.name) }}
+{% endfor %}
+
+add firewall rule
+set firewall.@rule[-1].name='Allow-usteer-{{ name }}'
+set firewall.@rule[-1].src='{{ name }}'
+set firewall.@rule[-1].dest_port='16720'
+set firewall.@rule[-1].proto='udp'
+set firewall.@rule[-1].target='ACCEPT'
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/services/wireguard_overlay.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/services/wireguard_overlay.uc
new file mode 100644
index 0000000..f808e95
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/services/wireguard_overlay.uc
@@ -0,0 +1,116 @@
+{%
+let wireguard = length(services.lookup_interfaces("wireguard-overlay"));
+let vxlan = length(services.lookup_interfaces("vxlan-overlay"));
+
+if (!wireguard && !vxlan) {
+	services.set_enabled("unetd", false);
+	return;
+}
+
+if (wireguard + vlxan > 1) {
+	warn('only a single wireguard/vxlan-overlay is allowed\n');
+	services.set_enabled("unetd", false);
+	return;
+}
+
+if (!wireguard_overlay.root_node.key ||
+    !wireguard_overlay.root_node.endpoint ||
+    !wireguard_overlay.root_node.ipaddr) {
+	warn('root node is not configured correctly\n');
+	services.set_enabled("unetd", false);
+	return;
+}
+
+services.set_enabled("unetd", true);
+
+let ips = [];
+
+wireguard_overlay.root_node.name = "gateway";
+wireguard_overlay.root_node.groups = [ "gateway" ];
+
+for (let ip in wireguard_overlay.root_node.ipaddr)
+	push(ips, ip);
+
+if (wireguard)
+	wireguard_overlay.root_node.subnet = [ '0.0.0.0/0' ];
+
+latency.add(wireguard_overlay.root_node.endpoint, 4);
+
+let cfg = {
+	'config': {
+		'port': wireguard_overlay.peer_port,
+		'peer-exchange-port': wireguard_overlay.peer_exchange_port,
+		'keepalive': 10
+	},
+	'hosts': {
+		gateway: wireguard_overlay.root_node,
+	}
+};
+
+let pipe = require('fs').popen(sprintf('echo "%s" | wg pubkey', wireguard_overlay.private_key));
+let pubkey = replace(pipe.read("all"), '\n', '');
+pipe.close();
+for (let host in wireguard_overlay.hosts)
+	if (host.name) {
+		if (!host.name || !host.key) {
+			warn('host is not configured correctly\n');
+			return;
+		}
+
+		cfg.hosts[host.name] = host;
+		cfg.hosts[host.name].groups = [ 'ap' ];
+		if (host.key == pubkey)
+			continue;
+		for (let ip in host.ipaddr)
+			push(ips, ip);
+	}
+if (vxlan) {
+	cfg.services = {
+		"l2-tunnel": {
+			"type": "vxlan",
+			"config": {
+				port: wireguard_overlay?.vxlan?.port || 4789,
+			},
+			"members": [ "gateway", "@ap" ]
+		}
+	};
+
+	if (wireguard_overlay?.vxlan?.isolate ?? true)
+		cfg.services['l2-tunnel'].config.forward_ports = [ "gateway" ];
+}
+
+system('rm /tmp/unet.*.json');
+let filename = '/tmp/unet.' + time() + '.json';
+
+files.add_named(filename, cfg);
+
+include('../interface/firewall.uc', { name: 'unet', ipv4_mode: true, ipv6_mode: true, interface: { role: 'upstream' }, networks: [ 'unet' ] });
+%}
+
+
+# Wireguard Overlay Configuration
+set network.unet=interface
+set network.unet.proto=unet
+set network.unet.device=unet
+set network.unet.file={{ s(filename) }}
+set network.unet.key={{ s(wireguard_overlay.private_key) }}
+set network.unet.domain=unet
+set network.unet.ip4table='{{ routing_table.get('wireguard_overlay') }}'
+{% if (vxlan): %}
+set network.unet.tunnels='vx-unet=l2-tunnel'
+
+add firewall rule
+set firewall.@rule[-1].name='Allow-VXLAN-unet'
+set firewall.@rule[-1].src='unet'
+set firewall.@rule[-1].proto='udp'
+set firewall.@rule[-1].target='ACCEPT'
+set firewall.@rule[-1].dest_port={{ wireguard_overlay?.vxlan?.port || 3457 }}
+{% endif %}
+
+{% for (let ip in ips): %}
+add network route
+set network.@route[-1].interface='unet'
+set network.@route[-1].target={{ s(ip) }}
+set network.@route[-1].table='local'
+{% latency.add(ip, 4) %}
+{% endfor %}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/spotfilter.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/spotfilter.uc
new file mode 100644
index 0000000..08a7eed
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/spotfilter.uc
@@ -0,0 +1,52 @@
+{%
+let interfaces = services.lookup_interfaces_by_ssids("captive");
+let enable = length(interfaces);
+if (enable != 1)
+	return;
+
+for (let name, data in captive.interfaces) {
+	let config = {
+		name,
+		devices: [],
+		config: {
+			default_class: 0,
+			default_dns_class: 1,
+			client_autoremove: false,
+			class: [
+				{
+					index: 0,
+					device_macaddr: split(name, '_')[0],
+					fwmark: 1,
+					fwmark_mask: 127
+				}, {
+					index: 1,
+					fwmark: 2,
+					fwmark_mask: 127
+				}
+			],
+			whitelist: [
+	                        {
+	                                "class": 1,
+	                                "hosts": [ ],
+					"address": [],
+	                        }
+	                ]
+		}
+	};
+
+	for (let iface in data.iface)
+		push(config.devices, 'wlanc' + iface);
+
+	for (let fqdn in data.walled_garden_fqdn)
+		push(config.config.whitelist[0].hosts, fqdn);
+
+	for (let ipaddr in data.walled_garden_ipaddr)
+		push(config.config.whitelist[0].address, ipaddr);
+
+	let fs = require('fs');
+	let file = fs.open('/tmp/spotfilter-' + name + '.json', 'w');
+	file.write(config);
+	file.close();
+	services.set_enabled("uhttpd", true)
+}
+%}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/switch.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/switch.uc
new file mode 100644
index 0000000..a7b7098
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/switch.uc
@@ -0,0 +1,21 @@
+{% if (state.switch.port_mirror && state.switch.port_mirror.monitor_ports && state.switch.port_mirror.analysis_port): %}
+
+{%
+    let analysis = ethernet.lookup_by_select_ports([state.switch.port_mirror.analysis_port]);
+    ethernet.reserve_port(state.switch.port_mirror.analysis_port);
+    let mirrors = ethernet.lookup_by_select_ports(state.switch.port_mirror.monitor_ports);
+%}
+
+# Switch  port-mirror configuration
+
+set switch.mirror=port-mirror
+{%   for (let mirror in mirrors): %}
+add_list switch.mirror.monitor={{ s(mirror) }}
+{%   endfor %}
+set switch.mirror.analysis={{ s(analysis[0]) }}
+
+{% endif %}
+
+set network.mirror=interface
+set network.mirror.ifname=eth1
+set network.mirror.proto=none
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/toplevel.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/toplevel.uc
new file mode 100644
index 0000000..604307a
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/toplevel.uc
@@ -0,0 +1,190 @@
+{%
+	let fs = require('fs');
+
+	// reject the config if there is no valid upstream configuration
+	if (!state.uuid) {
+		state.strict = true;
+		error('Configuration must contain a valid UUID. Rejecting whole file');
+		return;
+	}
+
+	include('admin_ui.uc');
+
+	// reject the config if there is no valid upstream configuration
+	let upstream;
+	for (let i, interface in state.interfaces) {
+		if (interface.role != 'upstream')
+			continue;
+		upstream = interface;
+	}
+
+	if (!upstream) {
+		state.strict = true;
+		error('Configuration must contain at least one valid upstream interface. Rejecting whole file');
+		return;
+	}
+
+	for (let i, interface in state.interfaces)
+		interface.index = i;
+
+	/* reserve all ieee8021x ports */
+	for (let i, interface in state.interfaces) {
+		let ports = ethernet.lookup_by_select_ports(interface.ieee8021x_ports);
+		for (let port in ports)
+			ethernet.reserve_port(port);
+	}
+
+	/* find out which vlans are used and which should be assigned dynamically */
+	let vlans = [];
+	for (let i, interface in state.interfaces)
+		if (ethernet.has_vlan(interface))
+			push(vlans, interface.vlan.id);
+		else
+			interface.vlan = { id: 0};
+
+	// populate the broad-band profile if present. This needs to happen after the default vlans 
+	// and before the dynamic vlan are assigned
+	let profile = local_profile.get();
+	if (profile && profile.broadband)
+		include('broadband.uc', { broadband: profile.broadband });
+
+	let vid = 4090;
+	function next_free_vid() {
+		while (index(vlans, vid) >= 0)
+			vid--;
+		return vid--;
+	}
+
+	/* dynamically assign vlan ids to all interfaces that have none yet */
+	for (let i, interface in state.interfaces) {
+		if (!interface.vlan.id)
+			interface.vlan.dyn_id = next_free_vid();
+		if (interface.ieee8021x_ports)
+			interface.dot1x_vlan = next_free_vid();
+	}
+
+	/* dynamically assign vlans to all swconfig ports */
+	let swconfig = false;
+	for (let k, port in ethernet.ports) {
+		if (port.swconfig == null)
+			continue;
+		port.vlan = next_free_vid();
+		port.switch = capab.switch_ports[port.netdev];
+		port.netdev += '.' + port.vlan;
+		swconfig = true;
+	}
+
+	if (swconfig) {
+		ethernet.swconfig = {};
+		for (let k, port in ethernet.ports) {
+			if (!port.switch)
+				continue;
+			ethernet.swconfig[port.netdev] = port;
+		}
+	} else {
+		// reject config if a wired port is used twice in un-tagged mode
+		let untagged_ports = [];
+		for (let i, interface in state.interfaces) {
+			if (interface.role != 'upstream')
+				continue;
+			let eth_ports = ethernet.lookup_by_interface_vlan(interface);
+			for (let port in keys(eth_ports)) {
+				if (ethernet.port_vlan(interface, eth_ports[port]))
+					continue;
+				if (port in untagged_ports) {
+					state.strict = true;
+					error('duplicate usage of un-tagged ports: ' + port);
+					return;
+				}
+				push(untagged_ports, port);
+			}
+		}
+	}
+
+	/* force auto channel if there are any sta interfaces on the radio */
+	for (let i, radio in state.radios) {
+		if (!radio.channel || radio.channel == 'auto')
+			continue;
+		for (let j, iface in state.interfaces)
+			for (let s, ssid in iface.ssids)
+				if (ssid.bss_mode in [ 'sta', 'wds-sta', 'wds-repeater' ]) {
+					warn('Forcing Auto-Channel as a STA interface is present');
+					delete radio.channel;
+				}
+	}
+
+	include('base.uc');
+
+	if (state.unit)
+		include('unit.uc', { location: '/unit', unit: state.unit });
+
+	if (!state.services)
+                state.services = {};
+
+	for (let service in services.lookup_services())
+		tryinclude('services/' + service + '.uc', {
+			location: '/services/' + service,
+			[service]: state.services[service] || {}
+		});
+
+	if (!state.metrics)
+		state.metrics = {};
+
+	let file = fs.open('/etc/events.json', 'r');
+	let events = [];
+	if (file) {
+		try {
+			events = json(file.read('all'));
+		} catch(e) {
+
+		}
+		file.close();
+	}
+	for (let metric in services.lookup_metrics())
+		tryinclude('metric/' + metric + '.uc', {
+			location: '/metric/' + metric,
+			[metric]: state.metrics[metric] || {},
+			events
+		});
+
+	if (state.switch)
+		tryinclude('switch.uc', {
+			location: '/switch/'
+		});
+
+	for (let i, ports in state.ethernet)
+		include('ethernet.uc', { location: '/ethernet/' + i, ports });
+
+	for (let i, radio in state.radios)
+		include('radio.uc', { location: '/radios/' + i, radio });
+
+	function iterate_interfaces(role) {
+		for (let i, interface in state.interfaces) {
+			if (interface.role != role)
+				continue;
+			include('interface.uc', { location: '/interfaces/' + i, interface, vlans });
+		}
+	}
+
+	iterate_interfaces("upstream");
+	iterate_interfaces("downstream");
+
+	let fs = require('fs');
+	for (let name in fs.glob('/usr/share/ucentral/templates/third-party/*.uc')) {
+		name = split(fs.basename(name), '.')[0];
+		let config = state.third_party ? state.third_party[name] : {};
+		tryinclude('third-party/' + name + '.uc', {
+			location: '/third-party/' + name,
+			[replace(name, '-', '_')]: config
+		});
+	}
+	services.set_enabled("usteer2", true);
+
+	include('spotfilter.uc');
+
+	if (state.config_raw)
+		include("config_raw.uc", { location: '/config_raw', config_raw: state.config_raw });
+
+	latency.write();
+	services.set_enabled("bridger", false);
+%}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/templates/unit.uc b/ucentral-client/rootfs/usr/share/ucentral/templates/unit.uc
new file mode 100644
index 0000000..c93fef9
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/templates/unit.uc
@@ -0,0 +1,19 @@
+
+# Basic unit configuration
+{% if (unit.name): %}
+set system.@system[-1].description={{ s(unit.name) }}
+{% endif %}
+{% if (unit.hostname): %}
+set system.@system[-1].hostname={{ s(unit.hostname) }}
+{% endif %}
+{% if (unit.location): %}
+set system.@system[-1].notes={{ s(unit.location) }}
+{% endif %}
+{% if (unit.timezone): %}
+set system.@system[-1].timezone={{ s(unit.timezone) }}
+{% endif %}
+set system.@system[-1].leds_off={{ b(!unit.leds_active) }}
+{%
+shell.password(unit.random_password);
+services.set_enabled("led", true);
+%}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/ucentral.uc b/ucentral-client/rootfs/usr/share/ucentral/ucentral.uc
new file mode 100755
index 0000000..f509c8b
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/ucentral.uc
@@ -0,0 +1,127 @@
+#!/usr/bin/ucode
+push(REQUIRE_SEARCH_PATH,
+	"/usr/lib/ucode/*.so",
+	"/usr/share/ucentral/*.uc");
+
+let schemareader = require("schemareader");
+let renderer = require("renderer");
+let fs = require("fs");
+let ubus = require("ubus").connect();
+
+let inputfile = fs.open(ARGV[0], "r");
+let inputjson = json(inputfile.read("all"));
+let custom_config = (split(ARGV[0], ".")[0] != "/etc/ucentral/ucentral");
+
+let error = 0;
+
+inputfile.close();
+let logs = [];
+
+function set_service_state(state) {
+	for (let service, enable in renderer.services_state()) {
+		if (enable != state)
+			continue;
+		printf("%s %s\n", service, enable ? "starting" : "stopping");
+		system(sprintf("/etc/init.d/%s %s", service, (enable || enable == 'early') ? "restart" : "stop"));
+	}
+	system("/etc/init.d/dnsmasq restart");
+}
+
+try {
+	for (let cmd in [ 'rm -rf /tmp/ucentral',
+			  'mkdir /tmp/ucentral',
+			  'rm /tmp/dnsmasq.conf',
+			  '/etc/init.d/spotfilter stop',
+			  'touch /tmp/dnsmasq.conf' ])
+		system(cmd);
+
+	let state = schemareader.validate(inputjson, logs);
+
+	let batch = state ? renderer.render(state, logs) : "";
+
+	if (state?.strict && length(logs)) {
+		push(logs, 'Rejecting config due to strict-mode validation');
+		state = null;
+	}
+
+	fs.stdout.write("Log messages:\n" + join("\n", logs) + "\n\n");
+
+	if (state) {
+		fs.stdout.write("UCI batch output:\n" + batch + "\n");
+
+		let outputjson = fs.open("/tmp/ucentral.uci", "w");
+		outputjson.write(batch);
+		outputjson.close();
+
+		for (let cmd in [ 'rm -rf /tmp/config-shadow',
+				  'cp -r /etc/config-shadow /tmp' ])
+			system(cmd);
+
+		let apply = fs.popen("/sbin/uci -c /tmp/config-shadow batch", "w");
+		apply.write(batch);
+		apply.close();
+
+		renderer.write_files(logs);
+
+		set_service_state(false);
+
+		for (let cmd in [ 'uci -c /tmp/config-shadow commit',
+				  'cp /tmp/config-shadow/* /etc/config/',
+				  'rm -rf /tmp/config-shadow'])
+			system(cmd);
+
+		set_service_state('early');
+
+		ubus.call('state', 'reload');
+
+		for (let cmd in [ 'reload_config',
+				  '/etc/init.d/ratelimit reload',
+				  '/etc/init.d/dnsmasq restart',
+				  '/etc/init.d/ucentral-state restart'])
+			system(cmd);
+
+		if (!custom_config) {
+			fs.unlink('/etc/ucentral/ucentral.active');
+			fs.symlink(ARGV[0], '/etc/ucentral/ucentral.active');
+			let cfgs = [];
+			for (let k, v in fs.lsdir('/etc/ucentral/'))
+				if (wildcard(v, 'ucentral.cfg.1*', true))
+					push(cfgs, v);
+			cfgs = sort(cfgs);
+			while (length(cfgs) >= 5) {
+				fs.unlink('/etc/ucentral/' + cfgs[0]);
+				shift(cfgs);
+			}
+		}
+
+		set_service_state(true);
+	} else {
+		error = 1;
+	}
+	if (!length(batch) || !state)
+		error = 2;
+	else if (length(logs))
+		error = 1;
+}
+catch (e) {
+	error = 2;
+	warn("Fatal error while generating UCI: ", e, "\n", e.stacktrace[0].context, "\n");
+}
+
+if (inputjson.uuid && inputjson.uuid > 1 && !custom_config) {
+	let text = [ 'Success', 'Rejects', 'Failed' ];
+	let status = {
+		error,
+		text: text[error] || "Failed",
+	};
+	if (length(logs))
+		status.rejected = logs;
+
+	ubus.call("ucentral", "result", {
+		uuid: inputjson.uuid || 0,
+		id: +ARGV[1] || 0,
+		status,
+	});
+	if (error > 1)
+		exit(1);
+}
diff --git a/ucentral-client/rootfs/usr/share/ucentral/wifi/iface.uc b/ucentral-client/rootfs/usr/share/ucentral/wifi/iface.uc
new file mode 100644
index 0000000..b69b5eb
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/wifi/iface.uc
@@ -0,0 +1,79 @@
+let nl = require("nl80211");
+let def = nl.const;
+
+const NL80211_IFTYPE_STATION = 2;
+const NL80211_IFTYPE_AP = 3;
+const NL80211_IFTYPE_MESH_POINT = 7;
+let iftypes = {
+	[NL80211_IFTYPE_STATION]: "station",
+	[NL80211_IFTYPE_AP]: "ap",
+	[NL80211_IFTYPE_MESH_POINT]: "mesh",
+};
+
+const NL80211_CHAN_WIDTH_20 = 1;
+const NL80211_CHAN_WIDTH_40 = 2;
+const NL80211_CHAN_WIDTH_80 = 3;
+const NL80211_CHAN_WIDTH_80P80 = 4;
+const NL80211_CHAN_WIDTH_160 = 5;
+const NL80211_CHAN_WIDTH_5 = 6;
+const NL80211_CHAN_WIDTH_10 = 7;
+let chwidth = {
+	[NL80211_CHAN_WIDTH_20]: "20",
+	[NL80211_CHAN_WIDTH_40]: "40",
+	[NL80211_CHAN_WIDTH_80]: "80",
+	[NL80211_CHAN_WIDTH_80P80]: "80p80",
+	[NL80211_CHAN_WIDTH_160]: "160",
+	[NL80211_CHAN_WIDTH_5]: "5",
+	[NL80211_CHAN_WIDTH_10]: "10",
+};
+
+function freq2channel(freq) {
+	if (freq == 2484)
+		return 14;
+	else if (freq < 2484)
+		return (freq - 2407) / 5;
+	else if (freq >= 4910 && freq <= 4980)
+		return (freq - 4000) / 5;
+	else if(freq >= 56160 + 2160 * 1 && freq <= 56160 + 2160 * 6)
+		return (freq - 56160) / 2160;
+	else if (freq >= 5955 && freq <= 7115)
+		return (freq - 5950) / 5;
+	else
+		return (freq - 5000) / 5;
+}
+
+function wif_get(wdev) {
+        let res = nl.request(def.NL80211_CMD_GET_INTERFACE, def.NLM_F_DUMP);
+
+        if (res === false)
+                warn("Unable to lookup interfaces: " + nl.error() + "\n");
+
+        return res;
+}
+
+function lookup_wifs() {
+	let wifs = wif_get();
+	let rv = {};
+	for (let wif in wifs) {
+		if (!wif.wiphy_freq || !iftypes[wif.iftype])
+			continue;
+		let w = {};
+		w.ssid = wif.ssid;
+		w.bssid = wif.mac;
+		w.mode = iftypes[wif.iftype];
+		w.channel = [];
+		w.frequency = [];
+		w.tx_power = (wif.wiphy_tx_power_level / 100) || 0;
+		for (let f in [ wif.wiphy_freq, wif.center_freq1, wif.center_freq2 ])
+			if (f) {
+				push(w.channel, freq2channel(f));
+				push(w.frequency, f);
+			}
+		if (chwidth[wif.channel_width])
+			w.ch_width = chwidth[wif.channel_width];
+		rv[wif.ifname] = w;
+	}
+	return rv;
+}
+
+return lookup_wifs();
diff --git a/ucentral-client/rootfs/usr/share/ucentral/wifi/mesh.uc b/ucentral-client/rootfs/usr/share/ucentral/wifi/mesh.uc
new file mode 100644
index 0000000..21bf18c
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/wifi/mesh.uc
@@ -0,0 +1,40 @@
+let nl = require("nl80211");
+let def = nl.const;
+
+const NL80211_IFTYPE_MESH_POINT = 7;
+
+function wif_get(wdev) {
+        let res = nl.request(def.NL80211_CMD_GET_INTERFACE, def.NLM_F_DUMP);
+
+        if (res === false)
+                warn("Unable to lookup interfaces: " + nl.error() + "\n");
+
+        return res;
+}
+
+function lookup_mesh() {
+	let wifs = wif_get();
+	let rv = {};
+	for (let wif in wifs) {
+		if (!wif.wiphy_freq || wif.iftype != NL80211_IFTYPE_MESH_POINT)
+			continue;
+		let w = [];
+		let params = { dev: wif.ifname };
+		let mpath = nl.request(def.NL80211_CMD_GET_MPATH, def.NLM_F_DUMP, params);
+		for (let path in mpath) {
+			push(w, {
+				destinantion: path.mac,
+				next_hop: path.mpath_next_hop,
+				metric: path.mpath_info.metric,
+				expire: path.mpath_info.expire,
+				discovery_timeout: path.mpath_info.discovery_timeout,
+				discovery_retries: path.mpath_info.discovery_retries,
+				hop_count: path.mpath_info.hop_count,
+			});
+		}
+		rv[wif.ifname] = w;
+	}
+	return rv;
+}
+
+return lookup_mesh();
diff --git a/ucentral-client/rootfs/usr/share/ucentral/wifi/phy.uc b/ucentral-client/rootfs/usr/share/ucentral/wifi/phy.uc
new file mode 100644
index 0000000..95510ba
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/wifi/phy.uc
@@ -0,0 +1,170 @@
+let fs = require('fs');
+let uci = require("uci");
+let cursor = uci ? uci.cursor() : null;
+let nl = require("nl80211");
+let def = nl.const;
+
+function freq2channel(freq) {
+	if (freq == 2484)
+		return 14;
+	else if (freq < 2484)
+		return (freq - 2407) / 5;
+	else if (freq >= 4910 && freq <= 4980)
+		return (freq - 4000) / 5;
+	else if(freq >= 56160 + 2160 * 1 && freq <= 56160 + 2160 * 6)
+		return (freq - 56160) / 2160;
+	else if (freq >= 5955 && freq <= 7115)
+		return (freq - 5950) / 5;
+	else
+		return (freq - 5000) / 5;
+}
+
+function phy_get(wdev) {
+        let res = nl.request(def.NL80211_CMD_GET_WIPHY, def.NLM_F_DUMP, { split_wiphy_dump: true });
+
+        if (res === false)
+                warn("Unable to lookup phys: " + nl.error() + "\n");
+
+        return res;
+}
+
+let paths = {};
+
+function add_path(path, phy, index) {
+	if (!phy)
+		return;
+	phy = fs.basename(phy);
+	paths[phy] = path;
+	if (index)
+		paths[phy] += '+' + index;
+}
+
+function lookup_paths() {
+	let wireless = cursor.get_all('wireless');
+	for (let k, section in wireless) {
+		if (section['.type'] != 'wifi-device' || !section.path)
+			continue;
+		let phys = fs.glob(sprintf('/sys/devices/%s/ieee80211/phy*', section.path));
+		if (!length(phys))
+			phys = fs.glob(sprintf('/sys/devices/platform/%s/ieee80211/phy*', section.path));
+		if (!length(phys))
+			continue;
+		sort(phys);
+		let index = 0;
+		for (let phy in phys)
+			add_path(section.path, phy, index++);
+	}
+}
+
+function get_hwmon(phy) {
+	let hwmon = fs.glob(sprintf('/sys/class/ieee80211/%s/hwmon*/temp*_input', phy));
+	if (!hwmon)
+		return 0;
+	let file = fs.open(hwmon[0], 'r');
+	if (!file)
+		return 0;
+	let temp = +file.read('all');
+	file.close();
+	return temp;
+}
+
+function lookup_phys() {
+	lookup_paths();
+
+	let phys = phy_get();
+	let ret = {};
+	for (let phy in phys) {
+		let phyname = 'phy' + phy.wiphy;
+		let path = paths[phyname];
+		if (!path)
+			continue;
+
+		let p = {};
+		let temp = get_hwmon('phy' + phy.wiphy);
+		if (temp)
+			p.temperature = temp / 1000;
+
+		p.tx_ant = phy.wiphy_antenna_tx;
+		p.rx_ant = phy.wiphy_antenna_rx;
+		p.tx_ant_avail = phy.wiphy_antenna_avail_tx;
+		p.rx_ant_avail = phy.wiphy_antenna_avail_rx;
+		p.frequencies = [];
+		p.channels = [];
+		p.dfs_channels = [];
+		p.htmode = [];
+		p.band = [];
+		for (let band in phy.wiphy_bands) {
+			for (let freq in band?.freqs) {
+				if (freq.disabled)
+					continue;
+				push(p.frequencies, freq.freq);
+				push(p.channels, freq2channel(freq.freq));
+				if (freq.radar)
+					push(p.dfs_channels, freq2channel(freq.freq));
+				if (freq.freq >= 6000)
+					push(p.band, '6G');
+				else if (freq.freq <= 2484)
+					push(p.band, '2G');
+				else if (freq.freq >= 5160 && freq.freq <= 5885)
+					push(p.band, '5G');
+			}
+			if (band?.ht_capa) {
+				p.ht_capa = band.ht_capa;
+				push(p.htmode, 'HT20');
+				if (band.ht_capa & 0x2)
+					push(p.htmode, 'HT40');
+			}
+			if (band?.vht_capa) {
+				p.vht_capa = band.vht_capa;
+				push(p.htmode, 'VHT20', 'VHT40', 'VHT80');
+				let chwidth = (band?.vht_capa >> 2) & 0x3;
+				switch(chwidth) {
+				case 2:
+					push(p.htmode, 'VHT80+80');
+					/* fall through */
+				case 1:
+					push(p.htmode, 'VHT160');
+				}
+			}
+			for (let iftype in band?.iftype_data) {
+				if (iftype.iftypes?.ap) {
+					p.he_phy_capa = iftype?.he_cap_phy;
+					p.he_mac_capa = iftype?.he_cap_mac;
+					push(p.htmode, 'HE20');
+					let chwidth = (iftype?.he_cap_phy[0] || 0) & 0xff;
+					if (chwidth & 0x2 || chwidth & 0x4)
+						push(p.htmode, 'HE40');
+					if (chwidth & 0x4)
+						push(p.htmode, 'HE80');
+					if (chwidth & 0x8 || chwidth & 0x10)
+						push(p.htmode, 'HE160');
+					if (chwidth & 0x10)
+						push(p.htmode, 'HE80+80');
+					if (iftype.eht_cap_phy) {
+						p.eht_phy_capa = iftype?.eht_cap_phy;
+						p.eht_mac_capa = iftype?.eht_cap_mac;
+						push(p.htmode, 'EHT20');
+						if (chwidth & 0x2 || chwidth & 0x4)
+							push(p.htmode, 'EHT40');
+						if (chwidth & 0x4)
+							push(p.htmode, 'EHT80');
+						if (chwidth & 0x8 || chwidth & 0x10)
+							push(p.htmode, 'EHT160');
+						if (chwidth & 0x10)
+							push(p.htmode, 'EHT80+80');
+                                                if ('6G' in p.band)
+                                                        push(p.htmode, 'EHT320');
+					}
+				}
+			}
+		}
+
+		p.band = uniq(p.band);
+		if (!length(p.dfs_channels))
+			delete p.dfs_channels;
+		ret[path] = p;
+	}
+	return ret;
+}
+
+return lookup_phys();
diff --git a/ucentral-client/rootfs/usr/share/ucentral/wifi/station.uc b/ucentral-client/rootfs/usr/share/ucentral/wifi/station.uc
new file mode 100644
index 0000000..20b2e95
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/wifi/station.uc
@@ -0,0 +1,103 @@
+let nl = require("nl80211");
+let def = nl.const;
+
+
+function parse_bitrate(info) {
+	let rate = {
+		bitrate: (info.bitrate32 || info.bitrate) * 100
+	};
+
+	if (info.short_gi)
+		rate.sgi = true;
+
+	if (info.mcs) {
+		rate.ht = true;
+		rate.mcs = info.mcs;
+	}
+	else if (info.vht_mcs) {
+		rate.vht = true;
+		rate.mcs = info.vht_mcs;
+		rate.nss = info.vht_nss;
+	}
+	else if (info.he_mcs) {
+		rate.he = true;
+		rate.mcs = info.he_mcs;
+		rate.nss = info.he_nss;
+		rate.he_gi = info.he_gi;
+		rate.he_dcm = info.he_dcm;
+	}
+
+	if (info.width_40)
+		rate.chwidth = 40;
+	else if (info.width_80)
+		rate.chwidth = 80;
+	else if (info.width_80p80)
+		rate.chwidth = 8080;
+	else if (info.width_160)
+		rate.chwidth = 160;
+	else if (info.width_10)
+		rate.chwidth = 10;
+	else if (info.width_5)
+		rate.chwidth = 5;
+	else
+		rate.chwidth = 20;
+	return rate;
+}
+
+function iface_assoclist(wif) {
+	let params = { dev: wif.ifname };
+	let res = nl.request(def.NL80211_CMD_GET_STATION, def.NLM_F_DUMP, params);
+
+	if (res === false) {
+		warn("Unable to lookup associations: " + nl.error() + "\n");
+		return [];
+	}
+	let assocdev = [];
+	for (let sta in res) {
+		let assoc = {
+			bssid: wif.mac,
+			station: sta.mac,
+			connected: +sta.sta_info?.connected_time,
+			inactive: +sta.sta_info?.inactive_time / 1000,
+			tx_duration: +sta.sta_info?.tx_duration,
+			rx_duration: +sta.sta_info?.rx_duration,
+			rssi: +sta.sta_info?.signal,
+			ack_signal: +sta.sta_info?.ack_signal,
+			ack_signal_avg: +sta.sta_info?.ack_signal_avg,
+			rx_packets: +sta.sta_info?.rx_packets,
+			tx_packets: +sta.sta_info?.tx_packets,
+			rx_bytes: +sta.sta_info?.rx_bytes64,
+			tx_bytes: +sta.sta_info?.tx_bytes64,
+			tx_retries: +sta.sta_info?.tx_retries,
+			tx_failed: +sta.sta_info?.tx_failed,
+			rx_rate: parse_bitrate(sta.sta_info?.rx_bitrate || {}),
+			tx_rate: parse_bitrate(sta.sta_info?.tx_bitrate || {}),
+		};
+		if (global.tid_stats)
+			assoc.tid_stats = sta.sta_info?.tid_stats || [];
+		push(assocdev, assoc);
+	};
+	return assocdev;
+}
+
+function wif_get(wdev) {
+        let res = nl.request(def.NL80211_CMD_GET_INTERFACE, def.NLM_F_DUMP);
+
+        if (res === false)
+                warn("Unable to lookup interfaces: " + nl.error() + "\n");
+
+        return res;
+}
+
+function lookup_stations() {
+	let rv = {};
+	let wifs = wif_get();
+	for (let wif in wifs) {
+		let assoc = iface_assoclist(wif);
+		if (length(assoc))
+			rv[wif.ifname] = assoc;
+	}
+	return rv;
+}
+
+return lookup_stations();
diff --git a/ucentral-client/rootfs/usr/share/ucentral/wifi/survey.uc b/ucentral-client/rootfs/usr/share/ucentral/wifi/survey.uc
new file mode 100644
index 0000000..365c3d2
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/wifi/survey.uc
@@ -0,0 +1,36 @@
+let nl = require("nl80211");
+let def = nl.const;
+let rv = { survey: [] };
+//let frequency = 5660;
+
+function survey_get(dev) {
+        let res = nl.request(def.NL80211_CMD_GET_SURVEY, def.NLM_F_DUMP, { dev });
+
+        if (res === false)
+                warn("Unable to lookup survey: " + nl.error() + "\n");
+
+        return res;
+}
+
+function wif_get(wdev) {
+	let res = nl.request(def.NL80211_CMD_GET_INTERFACE, def.NLM_F_DUMP);
+
+	if (res === false)
+		warn("Unable to lookup interfaces: " + nl.error() + "\n");
+
+	return res;
+}
+
+function lookup_survey() {
+	let wifs = wif_get();
+
+	for (let wif in wifs)
+		for (let survey in survey_get(wif.ifname))
+			if (!frequency || survey.survey_info.frequency == frequency)
+				if (survey.survey_info?.time)
+					push(rv.survey, survey.survey_info);
+}
+
+lookup_survey();
+//printf('%.J\n', rv);
+return rv;
diff --git a/ucentral-client/rootfs/usr/share/ucentral/wifi_max_user.uc b/ucentral-client/rootfs/usr/share/ucentral/wifi_max_user.uc
new file mode 100755
index 0000000..e82f2fd
--- /dev/null
+++ b/ucentral-client/rootfs/usr/share/ucentral/wifi_max_user.uc
@@ -0,0 +1,16 @@
+#!/usr/bin/ucode 
+
+let nl = require("nl80211");
+let def = nl.const;
+
+function phy_get() {
+	let res = nl.request(def.NL80211_CMD_GET_WIPHY, def.NLM_F_DUMP, { split_wiphy_dump: true });
+
+	if (res === false)
+		warn("Unable to lookup phys: " + nl.error() + "\n");
+
+	return res;
+}
+
+let phys = phy_get();
+printf("%d\n", phys[0].max_ap_assoc || 32);
diff --git a/vyos/README.md b/vyos/README.md
index 5b02d01..f966e56 100644
--- a/vyos/README.md
+++ b/vyos/README.md
@@ -1 +1,22 @@
 # VyOS
+
+### 📦 Container Image Generation for VyOS
+Follow these steps to download a VyOS rolling release ISO and build a Docker-image from it.
+
+1. Download the VyOS ISO
+Go to the VyOS nightly builds page or official download page and fetch the desired version, e.g.:
+https://vyos.net/get/nightly-builds/
+
+2. Extract contents from ISO and prepare docker container image.
+```bash
+mkdir vyos && cd vyos
+mkdir rootfs
+sudo mount -o loop vyos-2025.09.10-0018-rolling-generic-amd64.iso rootfs
+sudo apt-get install -y squashfs-tools
+mkdir unsquashfs
+sudo unsquashfs -f -d unsquashfs/ rootfs/live/filesystem.squashfs
+sudo tar -C unsquashfs -c . | docker import - vyos-2025.09.10-0018-rolling-generic
+sudo umount rootfs
+cd ..
+sudo rm -rf vyos
+```