The current luci-light collection includes many router (layer-3)
specific package dependencies that are inappropriate for inclusion on
switches and APs. Let's create an even lighter top-level package to
accommodate those devices as they rapidly are becoming more popular.
Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
Instead of making the main LuCI packages depend on
luci-app-attendedsysupgrade, only activate it by default when BUILDBOT
is seletced.
This way it is not selected by default in custom builds, but it will be
automatically selected in builds with CONFIG_BUILDBOT set. Even when
CONFIG_BUILDBOT is set it is possible to deactivate it.
This still depends on LuCI, it will only be activated in OpenWrt release
builds which are build with LuCI and not in OpenWrt main branch builds.
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Add the luci-app-attendedsysupgrade package as default package when
luci-app-package-manager is already added.
This should spread the usage of ASU more in the next release.
This adds the following 3 packages to the default LuCi image:
5131 bin/packages/aarch64_cortex-a53/base/rpcd-mod-rpcsys-2025.11.07~91700007-r1.apk
8781 bin/packages/aarch64_cortex-a53/luci/luci-app-attendedsysupgrade-25.302.55139~cf868f4.apk
1322 bin/packages/aarch64_cortex-a53/packages/attendedsysupgrade-common-9.apk
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
Currently, the regular and nginx collections include package manager
by default but SSL collections dont, so lets include package manager on
SSL collections as well.
Signed-off-by: Robert Marko <robimarko@gmail.com>
Rename luci-app-opkg to luci-app-package-manager and add APK support to
it.
The idea is to adapt APK to mimic OPKG output to require minimal changes
to the luci app.
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
Since upstream commit
f5d7a26531
it is not possible to ship non-ssl nginx flavors anymore.
Drop the luci-ssl-nginx collection, retain just luci-nginx and let it provide
a virtual luci-ssl-nginx package for backwards compatibility.
Fixes: #7024
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
The package is only useful when running an official build. The
ImageBuilders used for this service can not contain any special compiler
flags etc. used by custom builds.
Instead of installing the package whenever `luci` is installed, it
should be installed via the buildbots itself, like it's currently done
for `luci`.
Signed-off-by: Paul Spooren <mail@aparcar.org>
OpenWrt has switched the default SSL library to be mbedtls instead
of WolfSSL. To avoid the need of installing both SSL libraries,
switch luci-ssl to use the mbedtls variant of libustream and px5g.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
The `luci` collection contains package management and attended
sysupgrades support, which are not that useful if not even undesired for
self-compiled images.
Rework the `luci-light` collection to exclude the two above mentioned
features, and make `luci` instead depend on the light collection in
additon to those features.
The `luci-ssl` and `luci-ssl-openssl` collections then only need
to depend on `luci-light`.
We now have three variants with won't pull in `luci-app-opkg` or
`luci-app-attendedsysupgrade`, making everybody happy.
Signed-off-by: Andre Heider <a.heider@gmail.com>
None of the components pulled in by the standard luci collection require
server side Lua processing anymore, so we're free to drop the explicit
dependency on the libiwinfo Lua binding.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
The attendedsysupgrade makes it trivial to upgrade to newer releases by
requesting custom firmware images from an API.
Signed-off-by: Paul Spooren <mail@aparcar.org>
OpenWrt installs WolfSSL per default to offer WPA3. To save some space
switch to a WolfSSL based px5g implementation for self-signed
certificate generation instead of a MbedTLS version.
Signed-off-by: Paul Spooren <mail@aparcar.org>
Commit 391e82d6a3 in 2018 added luci-app-opkg dependency to
the 'luci' collection and its derivatives, but as nginx collections
do not depend on main 'luci', they did not get the intended change.
Fixes#4148
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
As nginx-ssl is now available, we fix luci-ssl-nginx package dep to use the right package. DRop luci-ssl-openssl-nginx as openssl is needed by nginx anyway.
Signed-off-by: Ansuel Smith <ansuelsmth@gmail.com>
Replace a dependency for px5g with openssl-util. Both LEDE and
Openwrt have now uhttpd versions that can generate keys with
OpenSSL cmd tools if px5g is not found. This change enables an
"OpenSSL-only" version of LuCI without mbedTLS/PolarSSL.
(Note: if px5g is found, uhttpd will prefer that.)
Relevant commits in uhttpd:
LEDE:
3c4858eeb282132540a39097dc5ad8
Openwrt:
6ec32832d2
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
px5g still requires libmbedtls (in LEDE) or libpolarssl (in Openwrt).
In LEDE it is also possible to replace px5g with openssl-util and
achieve "openssl-only" build without libmbedtls, as uhttpd can also
generate keys with openssl commandline tools if px5g is not present.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
Add a new OpenSSL-based collection that uses libustream-openssl
instead of the default libustream-polarssl.
(Note: px5g still needs libpolarssl, so both libs will be included)
Mention PolarSSL in the title of luci-ssl.
Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi>
* Rename subdirectories to their repective OpenWrt package names
* Make each LuCI module its own standalone package
* Deploy a shared luci.mk which is used by each module Makefile
Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>
