mirror of
https://dev.iopsys.eu/feed/iopsys.git
synced 2026-02-10 13:53:07 +01:00
f00e7fe965
In IOPSYSWRT, we use OpenSSL. Instead of shipping WolfSSL just for the OpenWrt libustream library (which powers the uclient-fetch / wget commands), make libustream use OpenSSL as well. This decreases security maintenance and reduces overhead in image size and memory usage.
225 lines
7.4 KiB
Text
225 lines
7.4 KiB
Text
CONFIG_BUILD_NLS=y
|
|
CONFIG_BUSYBOX_CUSTOM=y
|
|
CONFIG_CCACHE=y
|
|
CONFIG_DEBUG=y
|
|
CONFIG_DEVEL=y
|
|
CONFIG_PACKAGE_6in4=y
|
|
CONFIG_PACKAGE_6rd=y
|
|
CONFIG_PACKAGE_6to4=y
|
|
CONFIG_PACKAGE_at=y
|
|
CONFIG_PACKAGE_atftp=m
|
|
CONFIG_PACKAGE_atftpd=m
|
|
CONFIG_PACKAGE_bulkdata=y
|
|
CONFIG_PACKAGE_chat=y
|
|
CONFIG_PACKAGE_comgt=y
|
|
CONFIG_PACKAGE_comgt-directip=y
|
|
CONFIG_PACKAGE_comgt-ncm=y
|
|
CONFIG_PACKAGE_ddns-scripts=y
|
|
CONFIG_PACKAGE_ds-lite=y
|
|
CONFIG_PACKAGE_ethtool=y
|
|
CONFIG_PACKAGE_getopt=y
|
|
CONFIG_PACKAGE_glib2=y
|
|
CONFIG_PACKAGE_gre=y
|
|
CONFIG_PACKAGE_icwmp=y
|
|
CONFIG_PACKAGE_ieee1905=y
|
|
CONFIG_PACKAGE_map-topology=y
|
|
CONFIG_PACKAGE_mosquitto-client-ssl=y
|
|
CONFIG_PACKAGE_mosquitto-ssl=y
|
|
CONFIG_PACKAGE_wfadatad=y
|
|
CONFIG_PACKAGE_imonitor=m
|
|
CONFIG_PACKAGE_inbd=y
|
|
CONFIG_PACKAGE_ip-full=y
|
|
CONFIG_PACKAGE_iperf3=y
|
|
CONFIG_PACKAGE_ipset=y
|
|
CONFIG_PACKAGE_iptables=y
|
|
CONFIG_PACKAGE_iptables-mod-conntrack-extra=y
|
|
CONFIG_PACKAGE_iptables-mod-filter=y
|
|
CONFIG_PACKAGE_iptables-mod-ipopt=y
|
|
# CONFIG_PACKAGE_iwatchdog is not set
|
|
CONFIG_PACKAGE_jq=y
|
|
CONFIG_PACKAGE_libreswan=m
|
|
CONFIG_PACKAGE_libwifi=y
|
|
CONFIG_PACKAGE_lscpu=y
|
|
CONFIG_PACKAGE_luci-nginx=y
|
|
# CONFIG_LUCI_JSMIN is not set
|
|
# CONFIG_LUCI_CSSTIDY is not set
|
|
CONFIG_PACKAGE_luci-mod-dashboard=y
|
|
CONFIG_PACKAGE_luci-theme-openwrt-2020=y
|
|
CONFIG_PACKAGE_map=y
|
|
CONFIG_PACKAGE_miniupnpd=y
|
|
CONFIG_PACKAGE_mwan3=y
|
|
CONFIG_PACKAGE_nand-utils=y
|
|
CONFIG_PACKAGE_ndisc6=y
|
|
CONFIG_PACKAGE_netmode=y
|
|
CONFIG_PACKAGE_ntfs-3g=y
|
|
CONFIG_PACKAGE_ntpd=y
|
|
CONFIG_PACKAGE_obuspa=y
|
|
CONFIG_PACKAGE_odhcp6c=y
|
|
CONFIG_PACKAGE_odhcpd=y
|
|
CONFIG_PACKAGE_openssl-util=y
|
|
CONFIG_OPENSSL_WITH_COMPRESSION=y
|
|
CONFIG_PACKAGE_openvpn-easy-rsa=y
|
|
CONFIG_PACKAGE_openvpn-openssl=y
|
|
CONFIG_PACKAGE_owsd=y
|
|
CONFIG_PACKAGE_periodicstats=y
|
|
CONFIG_PACKAGE_peripheral_manager=y
|
|
CONFIG_PACKAGE_port-management=y
|
|
CONFIG_PACKAGE_ppp-mod-pppoa=y
|
|
CONFIG_PACKAGE_ppp-mod-pppoe=y
|
|
CONFIG_PACKAGE_ppp-mod-pppol2tp=y
|
|
CONFIG_PACKAGE_ppp-mod-pptp=y
|
|
CONFIG_PACKAGE_ppp-multilink=y
|
|
# CONFIG_PACKAGE_ppp is not set
|
|
# CONFIG_PACKAGE_qos-scripts is not set
|
|
CONFIG_PACKAGE_questd=y
|
|
CONFIG_PACKAGE_rdisc6=y
|
|
CONFIG_PACKAGE_rdnssd=y
|
|
CONFIG_PACKAGE_relayd=y
|
|
CONFIG_PACKAGE_resolveip=y
|
|
CONFIG_PACKAGE_rpcd=y
|
|
CONFIG_PACKAGE_rpcd-mod-rpcsys=y
|
|
CONFIG_PACKAGE_rulengd=y
|
|
CONFIG_PACKAGE_strace=y
|
|
CONFIG_PACKAGE_sulu=y
|
|
CONFIG_PACKAGE_swmodd=m
|
|
CONFIG_PACKAGE_tcpdump=y
|
|
CONFIG_PACKAGE_terminfo=y
|
|
CONFIG_PACKAGE_traceroute6=y
|
|
CONFIG_PACKAGE_uledd=y
|
|
CONFIG_PACKAGE_umbim=y
|
|
CONFIG_PACKAGE_uqmi=y
|
|
CONFIG_PACKAGE_urlfilter=y
|
|
CONFIG_PACKAGE_usb-modeswitch=y
|
|
CONFIG_PACKAGE_uspd=y
|
|
CONFIG_PACKAGE_vsftpd-tls=m
|
|
CONFIG_PACKAGE_wwan=y
|
|
CONFIG_PACKAGE_wifimngr=y
|
|
CONFIG_PACKAGE_uuidgen=y
|
|
CONFIG_PACKAGE_xl2tpd=y
|
|
CONFIG_PACKAGE_zoneinfo-core=y
|
|
CONFIG_PACKAGE_zoneinfo-europe=y
|
|
CONFIG_TARGET_CUSTOMER="IOPSYS"
|
|
# CONFIG_USE_SSTRIP is not set
|
|
CONFIG_USE_STRIP=y
|
|
CONFIG_BUILD_LOG=y
|
|
CONFIG_BUSYBOX_CONFIG_ADDUSER=y
|
|
CONFIG_BUSYBOX_CONFIG_ARPING=y
|
|
CONFIG_BUSYBOX_CONFIG_ASH_IDLE_TIMEOUT=y
|
|
CONFIG_BUSYBOX_CONFIG_ASH_RANDOM_SUPPORT=y
|
|
CONFIG_BUSYBOX_CONFIG_CTTYHACK=y
|
|
CONFIG_BUSYBOX_CONFIG_DELUSER=y
|
|
# CONFIG_BUSYBOX_CONFIG_DEVMEM is not set
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_UDHCP_8021Q=y
|
|
CONFIG_BUSYBOX_CONFIG_FIRST_SYSTEM_ID=100
|
|
# CONFIG_BUSYBOX_CONFIG_HTTPD is not set
|
|
# CONFIG_BUSYBOX_CONFIG_INSMOD is not set
|
|
# CONFIG_BUSYBOX_CONFIG_MODINFO is not set
|
|
# CONFIG_BUSYBOX_CONFIG_MODPROBE is not set
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_MODPROBE_BLACKLIST=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_CHECK_TAINTED_MODULE=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_MODUTILS_ALIAS=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_MODUTILS_SYMBOLS=y
|
|
CONFIG_BUSYBOX_CONFIG_DEFAULT_MODULES_DIR="/lib/modules"
|
|
CONFIG_BUSYBOX_CONFIG_DEFAULT_DEPMOD_FILE="modules.dep"
|
|
CONFIG_BUSYBOX_CONFIG_LAST_SYSTEM_ID=999
|
|
CONFIG_BUSYBOX_CONFIG_LOGIN=y
|
|
# CONFIG_BUSYBOX_CONFIG_LSMOD is not set
|
|
CONFIG_BUSYBOX_CONFIG_LSPCI=y
|
|
CONFIG_BUSYBOX_CONFIG_LSUSB=y
|
|
CONFIG_BUSYBOX_CONFIG_MICROCOM=y
|
|
# CONFIG_BUSYBOX_CONFIG_RMMOD is not set
|
|
CONFIG_BUSYBOX_CONFIG_STTY=y
|
|
CONFIG_BUSYBOX_CONFIG_TFTP=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_CHECK_TAINTED_MODULE=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_AUTH_MD5=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_BASIC_AUTH=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_CGI=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_ENCODE_URL_STR=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_ERROR_PAGES=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_GZIP=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_PROXY=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_RANGES=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_SETUID=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_SET_REMOTE_PORT_TO_ENV=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_USE_SENDFILE=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_LSMOD_PRETTY_2_6_OUTPUT=y
|
|
# CONFIG_BUSYBOX_CONFIG_FEATURE_NOLOGIN is not set
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_SECURETTY=y
|
|
# CONFIG_BUSYBOX_CONFIG_FEATURE_TFTP_BLOCKSIZE is not set
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_TFTP_GET=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_TFTP_PUT=y
|
|
# CONFIG_BUSYBOX_CONFIG_WGET is not set
|
|
# CONFIG_BUSYBOX_CONFIG_LOGIN_SCRIPTS is not set
|
|
# CONFIG_BUSYBOX_CONFIG_LOGIN_SESSION_AS_CHILD is not set
|
|
# CONFIG_BUSYBOX_CONFIG_PAM is not set
|
|
# CONFIG_BUSYBOX_CONFIG_TFTP_DEBUG is not set
|
|
# CONFIG_BUSYBOX_CONFIG_NTPD is not set
|
|
CONFIG_BUSYBOX_CONFIG_MOUNTPOINT=y
|
|
CONFIG_BUSYBOX_CONFIG_RUN_PARTS=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_RUN_PARTS_LONG_OPTIONS=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_RUN_PARTS_FANCY=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_GZIP_LEVELS=y
|
|
CONFIG_BUSYBOX_CONFIG_GZIP_FAST=2
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_FANCY_SLEEP=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_FLOAT_SLEEP=y
|
|
CONFIG_BUSYBOX_CONFIG_FLOAT_DURATION=y
|
|
CONFIG_BUSYBOX_CONFIG_USLEEP=y
|
|
CONFIG_BUSYBOX_CONFIG_REALPATH=y
|
|
CONFIG_BUSYBOX_CONFIG_TTY=y
|
|
CONFIG_BUSYBOX_CONFIG_BLOCKDEV=y
|
|
CONFIG_BUSYBOX_CONFIG_PARTPROBE=y
|
|
CONFIG_BUSYBOX_CONFIG_LFS=y
|
|
CONFIG_BUSYBOX_CONFIG_FDISK=y
|
|
CONFIG_BUSYBOX_CONFIG_FDISK_SUPPORT_LARGE_DISKS=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_FDISK_WRITABLE=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_GPT_LABEL=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_FDISK_ADVANCED=y
|
|
CONFIG_BUSYBOX_CONFIG_IONICE=y
|
|
CONFIG_BUSYBOX_CONFIG_RENICE=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_VOLUMEID_BTRFS=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_VOLUMEID_F2FS=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_VOLUMEID_LINUXSWAP=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_VOLUMEID_SQUASHFS=y
|
|
CONFIG_BUSYBOX_CONFIG_FEATURE_VOLUMEID_UBIFS=y
|
|
CONFIG_BUSYBOX_CONFIG_TIMEOUT=y
|
|
CONFIG_BUSYBOX_CONFIG_NOHUP=y
|
|
CONFIG_LIBCURL_CRYPTO_AUTH=y
|
|
# CONFIG_LIBCURL_MBEDTLS is not set
|
|
CONFIG_LIBCURL_OPENSSL=y
|
|
CONFIG_OPENVPN_openssl_ENABLE_IPROUTE2=y
|
|
# CONFIG_SIGNED_PACKAGES is not set
|
|
CONFIG_KERNEL_DEVTMPFS=y
|
|
CONFIG_KERNEL_DEVTMPFS_MOUNT=y
|
|
# CONFIG_BUSYBOX_CONFIG_IP is not set
|
|
CONFIG_LOCALMIRROR="https://download.iopsys.eu/iopsys/mirror/"
|
|
|
|
# Generation of /etc/banner.
|
|
CONFIG_IMAGEOPT=y
|
|
CONFIG_VERSIONOPT=y
|
|
CONFIG_VERSION_MANUFACTURER="iopsysWrt"
|
|
CONFIG_VERSION_MANUFACTURER_URL="https://iopsys.eu/"
|
|
|
|
# Disable as much as possible of OpenWrt messy "pre-init" stuff.
|
|
CONFIG_PREINITOPT=y
|
|
# CONFIG_TARGET_PREINIT_SUPPRESS_STDERR is not set
|
|
CONFIG_TARGET_PREINIT_DISABLE_FAILSAFE=y
|
|
CONFIG_TARGET_PREINIT_TIMEOUT=1
|
|
# CONFIG_TARGET_PREINIT_SHOW_NETMSG is not set
|
|
# CONFIG_TARGET_PREINIT_SUPPRESS_FAILSAFE_NETMSG is not set
|
|
CONFIG_TARGET_PREINIT_IFNAME=""
|
|
CONFIG_TARGET_PREINIT_IP=""
|
|
CONFIG_TARGET_PREINIT_NETMASK=""
|
|
CONFIG_TARGET_PREINIT_BROADCAST=""
|
|
|
|
# Generate rootfs tar file
|
|
CONFIG_TARGET_ROOTFS_TARGZ=y
|
|
|
|
# The urandom-seed package is very strange. It seeds urandom with urandom...
|
|
# Disable it. Most SoCs nowadays has HW random generators anyway.
|
|
# CONFIG_PACKAGE_urandom-seed is not set
|
|
# CONFIG_PACKAGE_urngd is not set
|
|
|
|
# We use OpenSSL, no need to ship multiple TLS libraries
|
|
CONFIG_PACKAGE_libustream-openssl=y
|
|
# CONFIG_PACKAGE_libustream-wolfssl is not set
|