OpenWrt/LEDE: When Two become One
Talkat Embedded Linux Conference + OpenIoT Summit North America 2017 · on Thursday, 2017-02-23· at 14:30· Atrium Ballroom·
summary
OpenWrt and LEDE converge around a GNU make build system that produces .ipk packages and can build a full toolchain, kernel (via fragments) and firmware image or SDK; it uses ubus/ubox IPC, UCI config, netifd, procd and LuCI web UI, supports image-builder upgrades that pivot to /tmp and use overlayfs/pivot root to preserve config, signs packages and enables relro/fortify/seccomp jails for security, ships a new release (17.01) and still lacks broad CI and upstream kernel cleanup.
AI-written summary · about
chapters (27)
- 0:00Intro
- 1:30Summary
- 3:12OpenWrt and LEDE in a nutshell
- 7:28Design goals #2
- 8:42OpenWrt/LEDE in the landscape
- 9:56Release time line
- 11:18About router security Home routers are a great attack targets
- 14:22Why not use buildroot or Yocto?
- 14:46Menuconfig based interface
- 15:46Toolchain
- 18:39Package makefile
- 21:37Example work flow
- 21:59Platform layer
- 24:55Platform definition
- 26:36Kernel example workflow
- 27:16Even kernel modules are packages!
- 29:00Development and deployment
- 31:45OpenWrtLEDE software stack
- 33:59System upgrades
- 34:45Overlay FS and failsafe
- 35:56Networking today
- 37:18And let netifd do the magic
- 38:22Build-time security features
- 39:09Run-time security features
- 40:40Areas of improvements
- 43:01What happened?
- 48:17Questions!
related talks
29mOpenWrt (One) build system: lessons in *all* the compliance and how to broadly...
54mBuildroot: What's New?
38mBuildroot: What's New?
19mEmbedded Linux Nuggets found in Buildroot Package Eldorado
43mSponsored Session: Why Don't You Love Me Back, Open-source Software?
44mHow we changed openSUSE developement
33mUsing Open Source Software to Build an Industrial-grade Embedded Linux Platform...
45mOverlay Images To the Rescue