doc: openwrt raspberry pi 4b adblock

[grencez]

might as well document the steps as i go through them

https://openwrt.org/toh/raspberry_pi_foundation/raspberry_pi is a great starting point

https://openwrt.org/docs/guide-user/services/dns/adguard-home is recommended instead of pihole

[grencez]

• go to https://openwrt.org/toh/raspberry_pi_foundation/raspberry_pi
• click "Factory Image" in the Installation table to download
• follow directions to install to a SD card

gzip -d openwrt-24.10.0-bcm27xx-bcm2711-rpi-4-squashfs-factory.img.gz

sudo bash
dev_filepath=/dev/mmcblk0
img_filename=$(ls -t -- openwrt-*.img | head -n 1)
dd "if=${img_filename}" "of=${dev_filepath}" bs=2M conv=fsync
sync
cfdisk "${dev_filepath}"
# Highlight to the 2nd partition, which is named something like /dev/mmcblk0p2.
# Select "Resize", and hit Enter again. The default size expands the partition to use all available free space.
# Select "Write", then type "yes" before hitting Enter.
# Select "Quit".

[grencez]

connected directly to another device ethernet. i need to ssh in and change some stuff

on that host, i ran:

ifconfig eth0 up
ifconfig wlan0 down
ip route add 192.168.1.2 dev eth0
ip route add default via 192.168.1.2 dev eth0

ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -- root@192.168.1.1
passwd  # set password

uci set network.lan.ipaddr=192.168.1.253
uci set network.lan.gateway=192.168.1.254
uci set network.lan.dns=8.8.8.8
uci commit
/etc/init.d/network restart

[grencez]

ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -- root@192.168.1.253
# Change hostname.
uci set "system.@system[0].hostname=rpi4b-owrt0-host"
/etc/init.d/system reload

# For: device tree support
opkg update
opkg install kmod-i2c-bcm2835
# For: real-time clock
opkg install kmod-rtc-ds1307
# For: fan
opkg install kmod-hwmon-gpiofan

cat >>/boot/config.txt <<"HEREDOC"
# For: device tree support
dtparam=i2c1=on
dtparam=spi=on
dtparam=i2s=on
# For: real-time clock
dtoverlay=i2c-rtc,ds1307
# For: fan
dtoverlay=gpio-fan,gpiopin=14,temp=80000
HEREDOC

[grencez]

uci set network.wan=interface
uci set network.wan.proto=static
uci set network.wan.ipaddr=192.168.1.251
uci set network.wan.gateway=192.168.1.254
uci set network.wan.dns=8.8.8.8
uci set network.wan.device=br-lan
uci commit
/etc/init.d/network restart

uci set network.wan.ipaddr=192.168.1.253
uci set network.lan.ipaddr=192.168.1.251
uci del network.lan.dns
uci commit
/etc/init.d/network restart

# uci set network.wlan.netmask=255.255.255.0

[grencez]

#uci add network device
#uci set network.@device[-1].name=br-wlan
#uci set network.@device[-1].type=bridge
#uci add_list network.@device[-1].ports=phy0-ap0

uci set network.wlan=interface
#uci set network.wlan.device=phy0-ap0
uci set network.wlan.proto=static
uci set network.wlan.ipaddr=192.168.10.1
uci set network.wlan.netmask=255.255.255.0

uci set wireless.default_radio0.network=wlan
uci commit
/etc/init.d/network restart

[grencez]

uci set dhcp.wlan=dhcp
uci set dhcp.wlan.interface=wlan
uci set dhcp.wlan.dhcpv4=server
uci set dhcp.wlan.dhcpv6=server
uci set dhcp.wlan.ra=server

[grencez]

https://openwrt.org/docs/guide-user/network/wifi/routedap

uci set network.wlan=interface
uci set network.wlan.proto=static
uci set network.wlan.ipaddr=192.168.10.1
uci set network.wlan.netmask=255.255.255.0
uci set network.wlan.gateway=192.168.10.1

uci add firewall zone
uci set firewall.@zone[-1].name=wlan
uci add_list firewall.@zone[-1].network=wlan
uci set firewall.@zone[-1].input=ACCEPT
uci set firewall.@zone[-1].output=ACCEPT
uci set firewall.@zone[-1].forward=REJECT

uci add firewall forwarding
uci set firewall.@forwarding[-1].src=wlan
uci set firewall.@forwarding[-1].dest=wan

uci add firewall forwarding
uci set firewall.@forwarding[-1].src=lan
uci set firewall.@forwarding[-1].dest=wan

uci add firewall forwarding
uci set firewall.@forwarding[-1].src=wlan
uci set firewall.@forwarding[-1].dest=lan


uci get firewall.@zone[0].name
# Assuming that says 'lan', we set it to masquerade.
uci set firewall.@zone[0].masq=1

uci commit

[grencez]

Things can connect to wifi and reach the internet with IPv4, but IPv6 is not configured at all.

https://openwrt.org/docs/guide-user/network/ipv6/configuration#upstream_configuration_for_wan_interfaces

uci set network.wan4=interface
uci set network.wan4.device=eth0
uci set network.wan4.proto=static
uci set network.wan4.ipaddr=192.168.1.253
uci set network.wan4.netmask=255.255.255.0
uci set network.wan4.gateway=192.168.1.254
uci set network.wan4.dns=8.8.8.8

uci get firewall.@zone[1].name
# Assuming that says 'wan'.
uci add_list firewall.@zone[1].network=wan4

uci set network.wan6=interface
uci set network.wan6.device=eth0
uci set network.wan6.proto=dhcpv6

uci set network.wlan.ip6assign=64
uci set network.wlan.ip6class=wan6

uci del network.lan

uci get network.@device[0].name
# Assuming that says 'br-lan'.
uci del network.@device[0]

uci commit
/etc/init.d/network restart

[grencez]

opkg install adguardhome

NET_ADDR=$(/sbin/ip -o -4 addr list phy0-ap0 | awk 'NR==1{ split($4, ip_addr, "/"); print ip_addr[1]; exit }')
echo "Router IPv4 : ""${NET_ADDR}"
uci set dhcp.@dnsmasq[0].port="54"
uci set dhcp.@dnsmasq[0].domain="lan"
uci set dhcp.@dnsmasq[0].local="/lan/"
uci set dhcp.@dnsmasq[0].expandhosts="1"
uci set dhcp.@dnsmasq[0].cachesize="0"
uci set dhcp.@dnsmasq[0].noresolv="1"
uci -q del dhcp.@dnsmasq[0].server

uci -q del dhcp.wlan.dhcp_option
uci -q del dhcp.wlan.dns
uci add_list dhcp.wlan.dhcp_option='3,'"${NET_ADDR}"
 
uci add_list dhcp.wlan.dhcp_option='6,'"${NET_ADDR}" 
 
uci add_list dhcp.wlan.dhcp_option='15,'"lan"
  
uci commit dhcp
service dnsmasq restart
service odhcpd restart