staging/pepe2k/include/image-commands.mk, branch v22.03.7

build: escape whitespaces in VERSION_DIST for Netgear images

2023-05-27T19:32:47Z

Prevents subshell commands from failing to parse options when having defined a whitespace in the VERSION_DIST. As the called resulting images unlikely will handle whitespace correctly, we replace them by "-". Signed-off-by: Sven Roederer (cherry picked from commit 4071398b13aeee873cb5a48b00b6c90074763d5f)

Revert "image-commands.mk: Be consistent in command invocation"

2022-12-22T12:20:39Z

This reverts commit fcff234fd89e8b24aa3ad2f352ddbb5304c38dc1. $(STAGING_DIR_HOST)/bin/gzip is not available in openwrt-22.03. The change broke the build because the build process could not find this file. For example ath79/generic netgear_wndap360 was affected. Signed-off-by: Hauke Mehrtens

image-commands.mk: Be consistent in command invocation

2022-12-21T23:14:30Z

Most/all other tools use the staging dir prefix, gzip should as well. Signed-off-by: Olliver Schinagl Acked-by: Christian Marangi (cherry picked from commit 47df168dd279d52127f6bbc623e79bdeeb6c8fd4)

image: add support for Netgear encrypted image

2022-07-21T14:58:00Z

Netgear encrypted image is used in various devices including WAX202, WAX206, and EX6400v3. This image format also requires a dummy squashfs4 image which is added here as well. References in WAX202 GPL source: https://www.downloads.netgear.com/files/GPL/WAX202_V1.0.5.1_Source.rar * openwrt/bootloader/u-boot-mt7621-2018.09-gitb178829-20200526/board/ralink/common/dual_image.c Bootloader code that verifies the presence of a squashfs4 image, thus a dummy image is added here. * openwrt/tools/imgencoder/src/gj_enc.c Contains code that generates the encrypted image. There is support for adding an RSA signature, but it does not look like the signature is verified by the stock firmware or bootloader. * openwrt/tools/imgencoder/src/imagekey.h Contains the encryption key and IV. It appears the same key/IV is used for other Netgear devices including WAX206 and EX6400v3. Signed-off-by: Wenli Looi (cherry picked from commit efca76ffce5cf464e82d8269d79877f442209a0a)

image: strip metadata from images when used in other artifacts

2022-04-15T13:12:23Z

Image metadata and signature is of no use for images which are included inside other artifacts (like an SD-card image). Strip them off before using images in artifacts or stashing them for the ImageBuilder as the contained signature breaks reproducibility. Signed-off-by: Daniel Golle (cherry picked from commit 7a256d97d9ded84d1bfd531e775099774e7b6b06)

build: store sha256_unsigned in JSON

2022-04-06T13:03:58Z

Introduce `sha256_unsigned` which is a checksum of the image _before_ a signature is attached. This is helpful to compare image reproducibility. Since the `.sha256sum` file is located in the $(KDIR) folder, switch $(BIN_DIR) with $(KDIR) to simplify the code. The value of $(BIN_DIR) itself is not stored inside the resulting JSON file, so it can be replaced. Signed-off-by: Paul Spooren (cherry picked from commit 8822a8d850ba2df69b81289758959bb90643a696)

tools: zip: fetch SOURCE_DATE_EPOCH directly

2022-03-09T06:38:23Z

Remove "--mtime" option introduced in commit 18c9faa03211 ("tools: zip: add option for reproducible archives") and instead fetch SOURCE_DATE_EPOCH environment variable directly in the code. Ref: https://sourceforge.net/p/infozip/patches/25/ Signed-off-by: Sungbo Eo

build: image: use UTC for zip timestamp

2022-03-09T06:38:23Z

Zip uses DOS timestamp for mtime which is stored in local time and hence depends on the timezone of the build system. Force zip to use UTC timezone to make image builds more reproducible. Signed-off-by: Sungbo Eo

image-commands.mk: Use ERROR_MESSAGE for imagesize fails

2022-02-28T22:52:13Z

If a image is bigger than the device can handle, an error message is printed. This is usually silenced and silently ignored, making it harder to debug. While it's possible to run the build in verbose mode (via `make V=s`) and grep for *is too big*, it's more intuitive to print the error message directly. For that use the newly unlocked `$(call ERROR_MESSAGE,...)` definition which now also print in non-verbose mode. Fixes: FS#50 (aka #7604) Signed-off-by: Paul Spooren

ramips: add support for ipTIME AX2004M

2022-02-11T13:30:04Z

ipTIME AX2004M is an 802.11ax (Wi-Fi 6) router, based on MediaTek MT7621A. Specifications: * SoC: MT7621A * RAM: 256 MiB * Flash: NAND 128 MiB * Wi-Fi: * MT7915D: 2.4/5 GHz (DBDC) * Ethernet: 5x 1GbE * Switch: SoC built-in * USB: 1x 3.0 * UART: J4 (115200 baud) * Pinout: [3V3] (TXD) (RXD) (GND) MAC addresses: | interface | MAC address | source | comment |-----------|-------------------|----------------|--------- | LAN | 58:xx:xx:00:xx:9B | | [1] | WAN | 58:xx:xx:00:xx:99 | | | WLAN 2G | 58:xx:xx:00:xx:98 | factory 0x4 | | WLAN 5G | 5A:xx:xx:40:xx:98 | | | | 58:xx:xx:00:xx:98 | config ethaddr | [1] Used in this patch as WLAN 5G MAC address with the local bit set Load addresses: * stock * 0x80010000: FIT image * 0x81001000: kernel image -> entry * OpenWrt * 0x80010000: FIT image * 0x82000000: uncompressed kernel+relocate image * 0x80001000: relocated kernel image -> entry Notes: * This device has a dual-boot partition scheme, but this firmware works only on boot partition 1. The stock web interface will flash only on the inactive boot partition, but the recovery web page will always flash on boot partition 1. Installation via recovery mode: 1. Press reset button, power up the device, wait >10s for CPU LED to stop blinking. 2. Upload recovery image through the recovery web page at 192.168.0.1. Revert to stock firmware: 1. Install stock image via recovery mode. Signed-off-by: Sungbo Eo