Turris OS 5.1 is available in HBT (Testing) branch

Pepe · July 29, 2020, 2:37pm

Dear Turris users,

We are proud to inform you that we released Turris OS 5.1 in HBT (Testing) branch!

In this release, there you can find various features, which we prepared for you. We have been working on Sentinel, reForis, and several improvements.

Let’s first start with reForis, because we deprecated a few tabs in Foris to introduce package lists and options, and reForis and Foris are for now side by side installed by default. About package options, don’t hesitate and take a look at the Updater tab. Some of you here on the forum said that in various cases improved 5 GHz Wi-Fi if we are talking about stability and such. If you do, you can try different Wi-Fi drivers to see if it better.

We were working on a new data collection system called Sentinel as some of you already know. Since Turris OS 4.0 (which was based on top of OpenWrt 18.06) contained just a dynamic firewall, but now, you can find there EULA agreement in the standalone tab to use other features of Sentinel. There is a new version of nikola, which collects firewall logs and brand new minipots! More of it will be published in an upcoming blog post.

Anyway, if you are using Nextcloud, this update can be longer than usual. It may depend on the device, where you have installed Nextcloud.

Here is a changelog of Turris OS 5.1:

* Introduced new data collection system Sentinel
* reForis (future default web interface)
  * Now installed by default
  * Added NetMetr, OpenVPN client, and remote devices plugins
* Package lists
  * Expanded with labels and additional options
  * Added option to select alternative WiFi drivers
* Nextcloud updated to version 18
* Removed old Device Detection based on Suricata

Do you want to try this release?
Login to the SSH of your router and proceed the following command: switch-branch hbt

If you find any bugs in this release, please let us know.

viktor · July 29, 2020, 4:07pm

Path to update u-boot is open!

Pepe · July 29, 2020, 4:23pm

I almost forget here is a known bugs. Almost same as usual.

Since Turris OS 3.x release:
This time, there was no any ddns-package update, so you don’t need to worry about, but if you came from earlier versions of Turris OS, be careful!

If you have installed ddns-scripts package, there is a possibility that update can take several minutes or you will need to uninstall ddns-scripts package and install it afterward. This is an upstream issue.
More details: https://gitlab.labs.nic.cz/turris/turris-os-packages/issues/265

Since Turris OS 4.x release:

In some cases, Turris MOX is not correctly rebooted.
You can not have installed ttyd and mosquitto at the same time. This is an upstream issue and it was reported to them. See https://github.com/openwrt/packages/issues/11632

Since Turris OS 5.0 release:

~~Package v4l-utils was not compiled. I didn’t make it to fix it with current RC1, but I promise that I will take a look into it at RC2.~~ Fixed in RC2.

And in this release, there is something unsual with telnet. It works when you tried it within your local network, but it does not work from WAN. We are working on this one. More details can be found here.

Bendys · July 29, 2020, 8:17pm

Omnia 2GB - msata boot

## Chyba z 29. 07. 2020 22:07:32

Updater selhal:

[string "transaction"]:333: [string "transaction"]:153: Collisions:

• /usr/lib/libwebsockets.so: libwebsockets-full (existing-file), libwebsockets-openssl (new-file)

• /usr/lib/libwebsockets.so.14: libwebsockets-full (existing-file), libwebsockets-openssl (new-file)

Turris 1.0

## Chyba z 29. 07. 2020 22:19:50

Updater selhal:

[string "transaction"]:333: [string "transaction"]:153: Collisions:

• /usr/lib/libwebsockets.so: libwebsockets-full (existing-file), libwebsockets-openssl (new-file)

• /usr/lib/libwebsockets.so.14: libwebsockets-full (existing-file), libwebsockets-openssl (new-file)

peci1 · July 29, 2020, 8:29pm

Is there a substitute for the old device detection?

Pepe · July 29, 2020, 8:35pm

It seems that on both routers you have installed the same thing and this is exactly the same issue, which is mentioned in the list of known bugs.

You can not have installed ttyd and mosquitto at the same time. This is an upstream issue and it was reported to them. See [master,22.03,21.02,19.07,18.06] ttyd: can not be installed it due conflict libwebsockets-full/openssl · Issue #11632 · openwrt/packages · GitHub

If you want, you can send us an email to tech.support@turris.cz so we can help you with that issue. We are using by default libwebsockets-openssl and it is possible that you installed libwebsockets-full for some pakage.

Pepe · July 29, 2020, 8:42pm

Don’t worry. I can tell you that as I am on board there shouldn’t that we will drop anything without bringing you replacement or we wouldn’t let you know about that. This is not this case. We are just dropping old, unmaintained piece of code.

Since the beginning of Turris OS 4.0 (in this case beta2), we introduced a lightweight implementation of Device Detection, which no longer depends on Suricata. As far as I know, the majority of users installed old device detection and as it depends on Pakon they were not aware that it creates two DBs and it may fulfill their RAM due to their network traffic. If you want to take a look at source code and documentation for new Dev Detect, here you go: https://gitlab.nic.cz/turris/dev-detect

brm · July 30, 2020, 8:20am

Any idea if Nextcloud is updated in Release 5.1?

Pepe · July 30, 2020, 8:25am

Yes, Nextcloud is updated to version 18, which is still supported. Version 18.0.7 was released 2 weeks ago. It is not recommended either supported to update multiple major versions. For example from version 17 to version 19 and we need to update it by versions one by one. However, I had some struggles with version 19 last time and I didn’t look at it further so far.

X-dark · August 5, 2020, 12:40pm

It seems something is wrong with netmetr:

root@turris:~# opkg update
Downloading https://repo.turris.cz/hbt/omnia/packages/core/Packages.gz
Updated list of available packages in /var/opkg-lists/turrisos_core
Downloading https://repo.turris.cz/hbt/omnia/packages/core/Packages.sig
Signature check passed.
Downloading https://repo.turris.cz/hbt/omnia/packages/base/Packages.gz
Updated list of available packages in /var/opkg-lists/turrisos_base
Downloading https://repo.turris.cz/hbt/omnia/packages/base/Packages.sig
Signature check passed.
Downloading https://repo.turris.cz/hbt/omnia/packages/cesnet/Packages.gz
Updated list of available packages in /var/opkg-lists/turrisos_cesnet
Downloading https://repo.turris.cz/hbt/omnia/packages/cesnet/Packages.sig
Signature check passed.
Downloading https://repo.turris.cz/hbt/omnia/packages/luci/Packages.gz
Updated list of available packages in /var/opkg-lists/turrisos_luci
Downloading https://repo.turris.cz/hbt/omnia/packages/luci/Packages.sig
Signature check passed.
Downloading https://repo.turris.cz/hbt/omnia/packages/node/Packages.gz
Updated list of available packages in /var/opkg-lists/turrisos_node
Downloading https://repo.turris.cz/hbt/omnia/packages/node/Packages.sig
Signature check passed.
Downloading https://repo.turris.cz/hbt/omnia/packages/openwisp/Packages.gz
Updated list of available packages in /var/opkg-lists/turrisos_openwisp
Downloading https://repo.turris.cz/hbt/omnia/packages/openwisp/Packages.sig
Signature check passed.
Downloading https://repo.turris.cz/hbt/omnia/packages/packages/Packages.gz
Updated list of available packages in /var/opkg-lists/turrisos_packages
Downloading https://repo.turris.cz/hbt/omnia/packages/packages/Packages.sig
Signature check passed.
Downloading https://repo.turris.cz/hbt/omnia/packages/routing/Packages.gz
Updated list of available packages in /var/opkg-lists/turrisos_routing
Downloading https://repo.turris.cz/hbt/omnia/packages/routing/Packages.sig
Signature check passed.
Downloading https://repo.turris.cz/hbt/omnia/packages/sidn/Packages.gz
Updated list of available packages in /var/opkg-lists/turrisos_sidn
Downloading https://repo.turris.cz/hbt/omnia/packages/sidn/Packages.sig
Signature check passed.
Downloading https://repo.turris.cz/hbt/omnia/packages/telephony/Packages.gz
Updated list of available packages in /var/opkg-lists/turrisos_telephony
Downloading https://repo.turris.cz/hbt/omnia/packages/telephony/Packages.sig
Signature check passed.
Downloading https://repo.turris.cz/hbt/omnia/packages/turrispackages/Packages.gz
Updated list of available packages in /var/opkg-lists/turrisos_turrispackages
Downloading https://repo.turris.cz/hbt/omnia/packages/turrispackages/Packages.sig
Signature check passed.
root@turris:~# opkg install reforis-netmetr-plugin 
Installing reforis-netmetr-plugin (0.1.1-3.7-1) to root...
Downloading https://repo.turris.cz/hbt/omnia/packages/turrispackages/reforis-netmetr-plugin_0.1.1-3.7-1_arm_cortex-a9_vfpv3-d16.ipk
Installing netmetr (1.5.5-3.7-1.6) to root...
Collected errors:
 * opkg_download_pkg: Package netmetr is not available from any configured src.
 * opkg_install_pkg: Failed to download netmetr. Perhaps you need to run 'opkg update'?
 * opkg_install_cmd: Cannot install package reforis-netmetr-plugin.

1.5.5-3.7-1 is available in the repo, not 1.5.5-3.7-1.6. Manually downloading it and installing it works fine.

DIKKEHENK · August 5, 2020, 1:14pm

Hi there… any news on the Blog part of the Sentinel part, and specific about the ‘dynamic’ part of the whole thingie?

Pepe · August 6, 2020, 12:00pm

From the output, it seems to be that you have installed package netmetr in localrepo. Can you please check it with the command localrepo list? If it is there, you can remove it with localrepo rm netmetr.

Pepe · August 6, 2020, 12:04pm

Hello @DIKKEHENK,

I am working this one, but several things need to be done before it will be published. But stay tuned. You will see it on Twitter and other social media including this forum.

Pepe · August 7, 2020, 9:55am

Dear Turris users,

This time we are going a big exception in our schedule. There are a few improvements and several bug fixes and various package updates, which you shouldn’t miss in Turris OS 5.1.0 RC2, which was released just now on Friday morning.

A few highlights:

There is a new updater, which fixes pretty annoying warnings:

WARN:Package wpad is in cyclic dependency. It might fail its post-install script.

WARN:Package hostapd is in cyclic dependency. It might fail its post-install script.

reForis now supports 160 MHz wireless cards
Fixed known bug that libv4l was not compiled.

Pepe · August 17, 2020, 10:24pm

2 posts were split to a new topic: Turris OS 5.2 - HBL

jada4p · August 9, 2020, 7:41pm

MOX Classic, ,5 GB, WiFi, simple config, HBK branch, 5.0.4 - after updating (via CLI pkgupdate) to 5.1 RC2 (update stuck on notice that some user config were modified and thus saved, after some time of inactivity I rebooted the OS), update repeated 2nd time with stucking again, nevertheless after reboot OS manifest itself as 5.1 HBK… Failed reboot attempts persistent, moreover both WiFi radios were changed to “Enable guest WiFi” ON! without any input from my side. Otherwise MOX seems to work OK with this simple config.

snarfel · August 11, 2020, 10:46pm

Looking forward to having all bugs since 5.0 closed out by the final 5.1 RC!

Pepe · August 17, 2020, 8:07am

Hello @jada4p,

may I ask you if you have installed ddns scripts? That could be a culprit in your case. In any case, there is a possibility which I can not know from your message that you interrupted update during running it on the background.

And I am wondering how did you configure the Wi-Fi. Do you have more details about enabled guest Wi-Fi? Most likely it will help the configure /etc/config/wireless (without the password, SSID and so on), but diagnostics would provide that.

jada4p · August 17, 2020, 9:30am

As far as I know I didn’t knowingly install ddns scripts (DNS setting, as to reForis, is: Use forwading; Forwarders: CZ.NIC; Enable DNSSEC). I’m sending you diagnostics in separate mail. (Note: I made diagnostics via reForis, but trying to download it, there were repeatedly network errors [in spite of being able to ping seznam.cz site via Win10 cmd window and being able to read Turris forum in Firefox browser]. Anyhow, download of diagnostics was without any problem using Foris

Maybe is too late, I disabled guest WiFi (not sure whether via Foris or ReForis) when I discovered it is enabled. If needed, I could return to last previous (prior 5.1.0) OS version… and repeat 5.1 RC update…

WiFi config

root@turris:~# cat /etc/config/wireless

config wifi-device ‘radio0’
option type ‘mac80211’
option hwmode ‘11a’
option macaddr ‘04:f0:21:45:cd:3c’
option country ‘CZ’
option channel ‘44’
option htmode ‘HT20’
option disabled ‘0’

config wifi-iface ‘default_radio0’
option device ‘radio0’
option network ‘lan’
option mode ‘ap’
option disabled ‘0’
option ssid ‘TOjp’
option hidden ‘0’
option encryption ‘psk2+ccmp’
option wpa_group_rekey ‘86400’
option key ‘************’

config wifi-device ‘radio1’
option type ‘mac80211’
option macaddr ‘d0:c5:d3:33:da:9b’
option country ‘CZ’
option channel ‘4’
option hwmode ‘11g’
option htmode ‘HT20’
option disabled ‘0’

config wifi-iface ‘default_radio1’
option device ‘radio1’
option network ‘lan’
option mode ‘ap’
option disabled ‘0’
option ssid ‘TOjp2’
option hidden ‘0’
option encryption ‘psk2+ccmp’
option wpa_group_rekey ‘86400’
option key ‘************’

config wifi-iface ‘guest_iface_0’
option device ‘radio0’
option disabled ‘1’

config wifi-iface ‘guest_iface_1’
option device ‘radio1’
option disabled ‘1’

EDIT for @Pepe
Sorry I didn’t realize it sooner: I mounted last snapshot before updating to 5.1 (which in this time was 5.0.4 HBK), from it I displayed /etc/config/wireless from which I saw that guest WiFi was disabled.

WiFi config old

config wifi-device ‘radio0’
option type ‘mac80211’
option hwmode ‘11a’
option macaddr ‘04:f0:21:45:cd:3c’
option country ‘CZ’
option disabled ‘0’
option channel ‘44’
option htmode ‘HT20’

config wifi-iface ‘default_radio0’
option device ‘radio0’
option network ‘lan’
option mode ‘ap’
option disabled ‘0’
option ssid ‘TOjp’
option hidden ‘0’
option encryption ‘psk2+ccmp’
option wpa_group_rekey ‘86400’
option key ‘****************’

config wifi-device ‘radio1’
option type ‘mac80211’
option macaddr ‘d0:c5:d3:33:da:9b’
option country ‘CZ’
option disabled ‘0’
option channel ‘4’
option hwmode ‘11g’
option htmode ‘HT20’

config wifi-iface ‘default_radio1’
option device ‘radio1’
option network ‘lan’
option mode ‘ap’
option disabled ‘0’
option ssid ‘TOjp2’
option hidden ‘0’
option encryption ‘psk2+ccmp’
option wpa_group_rekey ‘86400’
option key ‘*****************’

config wifi-iface ‘guest_iface_0’
option disabled ‘1’
option device ‘radio0’

config wifi-iface ‘guest_iface_1’
option disabled ‘1’
option device ‘radio1’

This I think support my previous statement that “both WiFi radios were changed to “Enable guest WiFi” ON! without any input from my side”.

Pepe · August 17, 2020, 12:20pm

Released another RC3 of Turris OS 5.1!

Updated kernel 4.14.193

Packages feed:

Apache updated to version 2.4.46
Golang updated to version 1.13.15
Nano updated version 5.1
RTL 433 updated 20.02

Turrispackages feed:

HaaS proxy updated to version 2.0.2
ReForis updated to version 0.9.3