Preconfiguring LEDE or OpenWrt with UCI

OpenWrt/LEDE rely on the UCI framework for configuring the devices they run on. All common services (DNS, DHCP, firewall, dynamic DNS, ...) are configured through UCI, with the human-readable results being saved into configuration files in /etc/config. However, that's just for the user's convenience; UCI itself is a command …

Read More

LibreELEC: an OpenELEC fork

Just wanted to drop a quick line on the young LibreELEC project, a fork of OpenELEC. It's still in its infancy, but it aims to address a few issues that the latter has been coping with. Quite a few developers joined already, and they intend to be open and transparent …

Read More

Starting or stopping services when on AC or battery

I have been experimenting with Saltstack - more commonly known as just 'Salt' - and running the master on my laptop. Since it seems to be consuming CPU cycles all the time and I'd like to optimise my laptop's autonomy, I started looking into ways to disable it on battery, and enable …

Read More

Quick Debian repo setup with aptly

The right tool for the job

Aptly is a neat tool that allows you to quickly build Debian or Ubuntu repositories. You can grab it from Debian's repositories. Build a repo with the name 'zfs':

$ aptly repo create -distribution=jessie -component=contrib zfs

Add your packages. You can add separate …

Read More

SSL support in OpenWrt on devices with 4 MiB flash

I recently decided to move my remote firmware update process to HTTPS. The most obvious and ubiquitous candidate was the wget utility. The downside is it only supports OpenSSL. While modern routers with 8 MiB or more flash, like my Netgear WNDR3700, have no trouble accomodating the bigger library (libopenssl …

Read More

Unbound as a secondary DNS resolver

If you're looking on how to implement Unbound as your primary DNS resolver, read on here.

Dnsmasq configuration

Dnsmasq requires a bit more work in this scenario.

  • First, we comment the resolvfile line, since that file will contain your ISP's DNS servers.
  • The noresolv option needs to be set to …
Read More

Implementing DNSSEC on OpenWrt

DNSSEC is a set of extensions to DNS. As Wikipedia states, it is

a set of extensions to DNS which provide to DNS clients (resolvers) origin authentication of DNS data, authenticated denial of existence, and data integrity, but not availability or confidentiality.

While it is by no means a perfect …

Read More

« Page 2 / 5 »