Commit Graph

238 Commits

Author SHA1 Message Date
Daniel Pawlik
230ffc9841 Update branch for mediatek feed GH build 2024-11-28 15:13:43 +01:00
Daniel Pawlik
dcbcd5ffa9 Update dnscrypt-proxy2 config file; add block list file 2024-11-27 10:53:25 +01:00
Daniel Pawlik
4459e6328a Sync unbound settings 2024-11-25 10:49:15 +01:00
Daniel Pawlik
91c5f3bdf6 Add alternative script for generating unbound block list 2024-11-25 10:44:58 +01:00
Daniel Pawlik
4e8bcd67ea Improve unbound blocking domains script 2024-11-25 08:38:11 +01:00
Daniel Pawlik
cd7bbee2cf Add glibc-gconv-extra to avoid error:
Charset "ISO-8859-2" is not supported. msgfmt relies on iconv(),

in linux-utils package.
2024-11-24 14:29:23 +01:00
Daniel Pawlik
0fa1b7658b Switch Fedora version in Dockerfile; add file as required deps 2024-11-24 11:18:30 +01:00
Daniel Pawlik
b1e7cdb5a6 Update GH workflows release title and decription 2024-11-23 16:50:15 +01:00
Daniel Pawlik
47d7b79976 Disable temporary LTO on u6lite and uap ac lr 2024-11-23 16:41:41 +01:00
Daniel Pawlik
154f65bd41 Fix issue when enabled OpenSSL in Github workflows 2024-11-23 10:22:54 +01:00
Daniel Pawlik
78245f2b62 Change names of the GH workflows; change titles 2024-11-23 10:19:42 +01:00
Daniel Pawlik
39c71788d8 Configure openssl in GH workflows as separate task 2024-11-23 10:12:48 +01:00
Daniel Pawlik
2f7da1a218 Switch to main branch 2024-11-23 10:07:15 +01:00
Daniel Pawlik
7ed1e7fee0 Remove mr3420v3 device and forget I ever touched it 2024-11-22 14:16:55 +01:00
Daniel Pawlik
b0d32c634c Install just minimum openssl packages 2024-11-22 14:15:27 +01:00
Daniel Pawlik
969b04ad7c Do not block googleadservices.com 2024-11-22 09:15:56 +01:00
Daniel Pawlik
0c0f037551 Add adguardhome package 2024-11-20 11:29:39 +01:00
Daniel Pawlik
89a09ab728 Set DoT not normal DNS request in adguard 2024-11-20 08:55:08 +01:00
Daniel Pawlik
54b42211fc Add and comment adguard tracking list 2024-11-19 23:08:34 +01:00
Daniel Pawlik
bd24fbc770 Add config for adguardhome
Adguardhome is available on port: 8080.
CIDRs that can do queries: 192.168.88.0/24 and 127.0.0.0/24
DNS port: 5053
2024-11-19 22:57:00 +01:00
Daniel Pawlik
542e1a93c5 Add script to generate adblock / tracking block list
Until nextdns.io quota is reached, use script for blocking
tracking sites.
2024-11-19 11:31:23 +01:00
Daniel Pawlik
f3a6bf1b9b Install ca-certificates when unbound installed 2024-11-19 11:06:47 +01:00
Daniel Pawlik
3fb4488f5a Update packages name 2024-11-18 13:52:31 +01:00
Daniel Pawlik
645f424c02 Enable LTO in snapshot short config 2024-11-11 16:43:07 +01:00
Daniel Pawlik
1f8caa4b5a Disable usteer by default 2024-11-06 08:31:22 +01:00
Daniel Pawlik
8fce9b7d93 Remove deprecated package; disable usteer; add photos 2024-10-30 21:52:21 +01:00
Daniel Pawlik
eee99a5631 Update usteer configuration; enable once again usteer by default 2024-10-25 10:38:29 +02:00
Daniel Pawlik
4d2b61ef6c Add mt7915 into rpi-5 2024-10-24 16:46:20 +02:00
Daniel Pawlik
edc77807d5 Update router settings 2024-10-24 15:09:33 +02:00
Daniel Pawlik
6268e170d0 Add config for rpi-5; add github workflows for rpi-5
The workflow was added to create builds with and without nbd168
patch [1].

[1] https://nbd.name/p/44208690
2024-10-22 10:47:45 +02:00
Daniel Pawlik
ca37b45252 Add minimalist version; remove not required packages from config 2024-10-21 11:30:35 +02:00
Daniel Pawlik
df33736c37 Change dnscrypt-proxy2 to unbound; add fping 2024-10-21 10:39:20 +02:00
Daniel Pawlik
93a7312421 Make smaller images for Ubiquiti devices for snapshot
There is not enough space on the device to keep those packages.
2024-10-17 15:13:45 +02:00
Daniel Pawlik
5caac4c84f Update path for creating BPI-R4 with MT7996 from Mediatek Feed 2024-10-14 16:09:24 +02:00
Daniel Pawlik
ece5735cd1 Update main and dumbAP router config; go back to DAWN 2024-10-14 09:04:10 +02:00
Daniel Pawlik
a6ed67de0e Add github workflows with Mediatek Feed for BPi-R4
Commit base on the manual [1].

[1] d7d5c7502b/autobuild/unified/Readme.md
2024-10-12 22:19:36 +02:00
Daniel Pawlik
d5921d64e4 Improve openssl config Mediatek_mt7988a_bpi-r4_be14_all_packages_eht-v15-luci-eht-2024-10-11 2024-10-10 10:04:32 +02:00
Daniel Pawlik
8e2413e237 Simplify build mediatek image script 2024-10-09 23:04:59 +02:00
Daniel Pawlik
13e8e751e2 Once again improve script for mediatek build 2024-10-09 20:30:41 +02:00
Daniel Pawlik
7392c08495 Improve mediatek build script 2024-10-09 19:32:59 +02:00
Daniel Pawlik
e6e980807a Add script to deploy OpenWRT with mediatek feed 2024-10-09 14:54:00 +02:00
Daniel Pawlik
08a8d6fcbb Improve once again openssl config; force enable /dev/crypto 2024-10-08 19:39:17 +02:00
Daniel Pawlik
8181745f7d Enable kmod-crypto-user in openssl; enable engine support in libcrypto
Probably this kmod was missing in the config file that later on
executing:

    root@BPI-R4:~# openssl engine -t -c -pre DUMP_INFO
    (dynamic) Dynamic engine loading support
    [Failure]: DUMP_INFO
    30CDC49A7F000000:error:13000089:engine routines:int_ctrl_helper:invalid cmd name:crypto/engine/eng_ctrl.c:90:
    30CDC49A7F000000:error:13000089:engine routines:ENGINE_ctrl_cmd_string:invalid cmd name:crypto/engine/eng_ctrl.c:258:
         [ unavailable ]

With new configuration, the error disappear:

    root@BPI-R4:~# openssl engine -t -c -pre DUMP_INFO
    (dynamic) Dynamic engine loading support
    [Failure]: DUMP_INFO
    30BDEBBE7F000000:error:13000089:engine routines:int_ctrl_helper:invalid cmd name:crypto/engine/eng_ctrl.c:90:
    30BDEBBE7F000000:error:13000089:engine routines:ENGINE_ctrl_cmd_string:invalid cmd name:crypto/engine/eng_ctrl.c:258:
         [ unavailable ]
    (devcrypto) /dev/crypto engine
    Information about ciphers supported by the /dev/crypto engine:
    Cipher DES-CBC, NID=31, /dev/crypto info: id=1, driver=safexcel-cbc-des (hw accelerated)
    Cipher DES-EDE3-CBC, NID=44, /dev/crypto info: id=2, driver=safexcel-cbc-des3_ede (hw accelerated)
    Cipher BF-CBC, NID=91, /dev/crypto info: id=3, CIOCGSESSION (session open call) failed
    Cipher CAST5-CBC, NID=108, /dev/crypto info: id=4, CIOCGSESSION (session open call) failed
    Cipher AES-128-CBC, NID=419, /dev/crypto info: id=11, driver=safexcel-cbc-aes (hw accelerated)
    Cipher AES-192-CBC, NID=423, /dev/crypto info: id=11, driver=safexcel-cbc-aes (hw accelerated)
    Cipher AES-256-CBC, NID=427, /dev/crypto info: id=11, driver=safexcel-cbc-aes (hw accelerated)
    Cipher RC4, NID=5, /dev/crypto info: id=12, CIOCGSESSION (session open call) failed
    Cipher AES-128-CTR, NID=904, /dev/crypto info: id=21, driver=ctr-aes-ce (software)
    Cipher AES-192-CTR, NID=905, /dev/crypto info: id=21, driver=ctr-aes-ce (software)
    Cipher AES-256-CTR, NID=906, /dev/crypto info: id=21, driver=ctr-aes-ce (software)
    Cipher AES-128-ECB, NID=418, /dev/crypto info: id=23, driver=safexcel-ecb-aes (hw accelerated)
    Cipher AES-192-ECB, NID=422, /dev/crypto info: id=23, driver=safexcel-ecb-aes (hw accelerated)
    Cipher AES-256-ECB, NID=426, /dev/crypto info: id=23, driver=safexcel-ecb-aes (hw accelerated)

    Information about digests supported by the /dev/crypto engine:
    Digest MD5, NID=4, /dev/crypto info: id=13, driver=safexcel-md5 (hw accelerated), CIOCCPHASH capable
    Digest SHA1, NID=64, /dev/crypto info: id=14, driver=safexcel-sha1 (hw accelerated), CIOCCPHASH capable
    Digest RIPEMD160, NID=117, /dev/crypto info: id=102, driver=unknown. CIOCGSESSION (session open) failed
    Digest SHA224, NID=675, /dev/crypto info: id=103, driver=safexcel-sha224 (hw accelerated), CIOCCPHASH capable
    Digest SHA256, NID=672, /dev/crypto info: id=104, driver=safexcel-sha256 (hw accelerated), CIOCCPHASH capable
    Digest SHA384, NID=673, /dev/crypto info: id=105, driver=safexcel-sha384 (hw accelerated), CIOCCPHASH capable
    Digest SHA512, NID=674, /dev/crypto info: id=106, driver=safexcel-sha512 (hw accelerated), CIOCCPHASH capable

    [Success]: DUMP_INFO
     [DES-CBC, DES-EDE3-CBC, AES-128-CBC, AES-192-CBC, AES-256-CBC, AES-128-ECB, AES-192-ECB, AES-256-ECB]
         [ available ]
2024-10-08 15:28:53 +02:00
Daniel Pawlik
bf3d4c38c9 Add more packages for openssl common config
Let's check if by enabling more packages as it was suggested [1]
will help to use the /dev/crypto.

[1] https://github.com/openwrt/openwrt/pull/16628
2024-10-08 14:50:36 +02:00
Daniel Pawlik
2c720deadc Improve task names and description in community workflow 2024-10-08 13:09:33 +02:00
Daniel Pawlik
218160d7af Switch to branch v15 for BPI-R4 2024-10-08 08:19:26 +02:00
Daniel Pawlik
ff41dd5d9c Add build for clean AX3600 build 2024-10-07 17:13:45 +02:00
Daniel Pawlik
537ba600e9 Add libopenssl-devcrypto to be installed in openwrt-configure.sh script 2024-10-07 17:09:39 +02:00
Daniel Pawlik
850782323d Add choice option to create community image for BPI-R4 2024-10-06 18:27:26 +02:00
Daniel Pawlik
e97086c653 Add 'poe' suffix to the title if that version is chosen
The 'poe' suffix will help to recognize proper relase.
2024-10-03 08:27:30 +02:00