Turris OS 6.5.1 is in RC

Dear Turris users,

we just sent Turris OS version 6.5.1 into RC. It is really small fix for 6.5 addressing mainly OpenVPN client issue. But while at it, we already did a kernel update, so it is part of the release as well. We also updated a little bit a description for Firmware Updates.

Full release notes are as follows:

:pushpin: Updates
• kernel: Updated to version 5.15.147

:bug: Bug Fixes
• openvpn-client: Fix configuration path and make client work again

Let us know, if there is any new issue, we are still processing the rest of the feedback for 6.5.0, but we want to release this soon.

4 Likes

Good that I didnt update to 6.5.0 since the kernel is going to be updated once not twice 0,000001% mmc wear less. Anyway I have to recompile the kernel or maybe you could include my patch from here:

It improves the use of one SFP that I happen to use HALNy GSFP. Main improvment is that it negotiated full 2,5Gbps not 1Gig. Anyway I wrote alot in mentioned topic. If not then well pain in the ass work of recompiling the kernel each time its going to be upgraded.

After updating, pkgupdate ends with an error. Turris 1.x

root@turris:/# pkgupdate
line not found
line not found
line not found
ERROR:
runtime: /usr/lib/lua/json.lua:211: Failed to scan constant from string {
        "3g": {
                "title": "Extensions of network protocols for 3G/4G/5G",
                "description": "Support for Turris Omnia and Turris MOX LTE pack. Nowadays installed automatically whenever needed.",
                "url": "https://wiki.turris.cz/doc/en/howto/lte_modem_install",
                "labels": ["deprecated"]
        },
        "datacollect": {
                "title": "Advanced security & analytics - Turris Sentinel",
                "description": "Software for participation in threat detection program which provides distributed adaptive firewall and statistics.",
                "url": "https://docs.turris.cz/basics/collect/collect/",
                "options": {
                        "survey": {
                                "title": "Usage Survey",
                                "description": "Collects data about router usage (installed packages, Internet connection type and etc.).",
                                "default": true
                        },
                        "dynfw": {
                                "title": "Dynamic Firewall",
                                "description": "Adds firewall rules to block attackers detected by Turris Sentinel network.",
                                "default": true,
                                "url": "https://docs.turris.cz/basics/collect/dynfw/collect-dynfw/"
                        },
                        "dynfw_new": {
                                "title": "Experimental client for Dynamic Firewall",
                                "description": "New client that adds firewall rules to block attackers detected by Turris Sentinel network (replaces the old one).",
                                "default": false,
                                "labels": ["experimental"],
                                "url": "https://docs.turris.cz/basics/collect/dynfw/collect-dynfw/"
                        },
                        "fwlogs": {
                                "title": "Firewall Logs",
                                "description": "Threat detection tool. Collects firewall logs about failed connection attempts.",
                                "default": true
                        },
                        "minipot": {
                                "title": "Minipots",
                                "description": "Threat detection tool. Minimal honeypots to catch attackers by mimicking various protocols.",
                                "default": true
                        },
                        "haas": {
                                "title": "SSH Honeypot",
                                "description": "Threat detection tool. SSH honeypot using Honeypot as a Service (haas.nic.cz).",
                                "url": "https://docs.turris.cz/basics/collect/haas/"
                        }
                }
        },
        "atlas": {
                "title": "RIPE Atlas SW Probe",
                "description": "Global platform, which measures Internet connectivity and reachability.",
                "url": "https://docs.turris.cz/basics/apps/atlas/",
                "labels": ["community"]
        },
        "dvb": {
                "title": "DVB tuner",
                "description": "Software for sharing television received by a DVB tuner on Turris. Does not include device drivers.",
                "url": "https://wiki.turris.cz/doc/en/howto/dvb",
                "labels": ["community", "advanced"]
        },
        "hardening": {
                "title": "Hardening",
                "description": "Seccomp tools for system hardening.",
                "options": {
                        "common_passwords": {
                                "title": "Common passwords filter",
                                "description": "Compare new password you are about to set to access router with list of common passwords used by robots trapped in Turris honeypots.",
                                "default": true
                        },
                        "ujail": {
                                "title": "OpenWrt's process jail",
                                "description": "ujail allows to limit processes by limiting syscalls and file-system access",
                                "labels": ["community", "experimental"]
                        },
                        "seccomp": {
                                "title": "Secure Computing Mode (seccomp)",
                                "description": "Optional support for seccomp allowing processes to isolate from them self",
                                "labels": ["community", "experimental"]
                        }
                }
        },
        "luci_controls": {
                "title": "LuCI extensions",
                "description": "Several additional tabs and controls for the advanced LuCI interface.",
                "options": {
                        "adblock": {
                                "title": "AdBlock",
                                "description": "Script to block ad/abuse domains."
                        },
                        "sqm": {
                                "title": "SQM",
                                "description": "Active Queue Management to boost performance on heavily loaded network."
                        },
                        "tinyproxy": {
                                "title": "Tinyproxy",
                                "description": "HTTP(S) proxy."
                        },
                        "upnp": {
                                "title": "UPnP",
                                "description": "Universal Plug and Play service."
                        },
                        "printserver": {
                                "title": "Print server (p910nd)",
                                "description": "Services allowing to connect a printer to the router and use it for remote printing.",
                                "url": "https://openwrt.org/docs/guide-user/services/print_server/p910ndprinterserver"
                        },
                        "statistics": {
                                "title": "Statistics",
                                "description": "Gather and render diagrams for system statistics by using collectd.",
                                "url": "https://openwrt.org/docs/guide-user/perf_and_log/statistic.collectd"
                        },
                        "easybird": {
                                "title": "Bird",
                                "description": "Simplified Bird configuration supporting OSPF and Babel.",
                                "labels": ["advanced", "experimental"]
                        },
                        "wireguard": {
                                "title": "WireGuard",
                                "description": "Alternative to OpenVPN, it provides fast, modern and secure VPN tunnel.",
                                "url": "https://openwrt.org/docs/guide-user/services/vpn/wireguard/start",
                                "labels": ["advanced"]
                        }
                },
                "labels": ["community"]
        },
        "lxc": {
                "title": "LXC utilities",
                "description": "Set of utilities to manage Linux Containers (lightweight virtualization technology).",
                "url": "https://docs.turris.cz/geek/lxc/lxc/",
                "labels": ["storage", "high_memory", "advanced"]
        },
        "nas": {
                "title": "NAS",
                "description": "Services allowing to connect a disk to the router and use it as network data store.",
                "url": "https://wiki.turris.cz/doc/en/howto/nas",
                "options": {
                        "samba": {
                                "title": "Samba",
                                "description": "Implementation of SMB network protocol."
                        },
                        "dlna": {
                                "title": "DLNA",
                                "description": "Digital media sharing server."
                        },
                        "transmission": {
                                "title": "Transmission",
                                "description": "BitTorrent client."
                        },
                        "raid": {
                                "title": "mdadm",
                                "description": "Software RAID storage support using mdadm.",
                                "labels": ["advanced"]
                        },
                        "encrypt": {
                                "title": "Encrypted Storage",
                                "description": "Add support to access encrypted storage devices using dm-crypt.",
                                "labels": ["advanced"]
                        }
                },
                "labels": ["community"]
        },
        "net_monitoring": {
                "title": "Network monitoring and parental control",
                "description": "Tools to monitor local network and users on it.",
                "options": {
                        "netmetr": {
                                "title": "Internet connection speed measurement",
                                "description": "Actively measures speed of Internet connection using netmetr.cz service.",
                                "url": "https://docs.turris.cz/basics/apps/netmetr/",
                                "labels": ["deprecated"]
                        },

                        "dev_detect": {
                                "title": "New devices detection",
                                "description": "Software for detecting new devices on local network.",
                                "labels": ["experimental"]
                        },
                        "pakon": {
                                "title": "Pakon",
                                "description": "Software for in depth monitoring of your traffic using Suricata.",
                                "url": "https://docs.turris.cz/basics/apps/pakon/",
                                "labels": ["experimental", "netload", "high_memory", "storage"]
                        },
                        "morce": {
                                "title": "Morce",
                                "description": "Simple integration of Intrusion Detection System.",
                                "url": " https://docs.turris.cz/basics/apps/morce/",
                                "labels": ["experimental", "netload", "high_memory", "storage"]
                        }
                }
        },
        "netboot": {
                "title": "Turris MOX network boot",
                "description": "Server-side for Turris MOX without microSD card used as Wi-Fi access point.",
                "url": "https://docs.turris.cz/basics/apps/netboot",
                "labels": ["high_storage", "experimental"]
        },
        "netdata": {
                "title": "Netdata",
                "description": "Real-time perfomance and health monitoring options.",
                "url": "https://docs.turris.cz/geek/netdata/netdata/",
                "labels": ["community", "high_memory"]
        },
        "nextcloud": {
                "title": "Nextcloud",
                "description": "Self-hosted files hosting and productivity platform that keeps you in control. Alternative to services such as Dropbox or Google Drive.",
                "url": "https://docs.turris.cz/geek/nextcloud/nextcloud/",
                "labels": ["experimental", "storage"]
        },

        "openvpn": {
                "title": "OpenVPN",
                "description": "Easy setup of the OpenVPN client and server from Foris.",
                "url": "https://docs.turris.cz/basics/apps/openvpn-server/openvpn/"
        },
        "kresd6": {
                "title": "Knot Resolver 6",
                "description": "Upcoming version of Knot Resolver. Currently without manager module.",
                "url": "https://knot.pages.nic.cz/knot-resolver/upgrading-to-6.html",
                "labels": ["experimental"]
        },
        "tor": {
                "title": "Tor",
                "description": "Service to increase anonymity on the Internet.",
                "labels": ["advanced", "community"]
        },
        "drivers": {
                "title": "Alternative core drivers",
                "description": "These options allow you to use alternative drivers over those available in default installation. You can try to enable these if you encounter some problems with default ones.",
                "options": {
                        "ath10k_ct": {
                                "title": "Candela Technologies Wi-Fi drivers for Qualcomm Atheros QCA988x",
                                "description": "Alternative driver from Candela Technologies.",
                                "boards": ["omnia", "turris1x"]
                        },
                        "ath10k_ct_htt": {
                                "title": "Candela Technologies Wi-Fi drivers for Qualcomm Atheros QCA988x with improved stability in busy networks",
                                "description": "Alternative driver from Candela Technologies. It uses HTT TX data path for management frames, which improves stability in busy networks."
                        }
                },
                "labels": ["advanced", "community"]
        },
        "firmware_update": {
                "title": "Latest firmware",

ifndef(OMNIA,           "description": "Keeps your NOR content and factory image up-to-date",)
                "labels": ["experimental"],
                "options": {
                        "nor": {
                                "title": "U-Boot and rescue image",
                                "labels": ["experimental", "advanced"],
                                "description": "Most risky option, U-Boot is needed to boot your board. In case something goes wrong, your router will not boot and you will need to reflash it using serial cable.
                                "url": "https://docs.turris.cz/hw/omnia/serial-boot/"
                        },
but otherwise quite safe."
                        }
                        "factory": {
                                "title": "Factory image",
                                "description": "Keeps image that is used for factory reset up to date. The safest option of all."
                        }
                }
        }
}
 at starting position 9020

/reforis/overview returns an error:
An error occurred while fetching data.

/reforis/package-management/packages
An unknown API error occurred.

/reforis/sentinel/overview and /reforis/sentinel/agreement

An unknown API error occurred.
5 Likes

I have the same problems on my both Turris Omnia routers after update to 6.5.1
They persists after restart router.

1 Like

Same here. Via reForis I see 5 notifications waiting for me, but cannot read them as the Notifications Overview gives the error “An error occurred while fetching data.”

The notification e-mails I have received show me the same information as reported above by @czlada

The e-mails seem to be from the regular check for updates.

Duncan

1 Like

Same here on MOX - updater fails and the dashboard in reForis fails to fetch data, but notification bell shows number of events.

1 Like

I’m having the same problem. Somehow there’s an unexpected ifndef(OMNIA, in the string.

1 Like

I have the same problem on MOX.

1 Like

Yip have the same on my Omnia

1 Like

MOX classic, HBK branch, .5 GB, 2x WiFi, simple config. All seems OK.

I was able to fix this.

The updater downloads a list of packages to /usr/share/updater/pkglists.json

The JSON inside it broken in the end:

"firmware_update": {
                "title": "Latest firmware",
                "description": "Keeps your NOR content, MCU firmware and factory image up-to-date",
ifndef(OMNIA,           "description": "Keeps your NOR content and factory image up-to-date",)
                "labels": ["experimental"],
                "options": {
                        "nor": {
                                "title": "U-Boot and rescue image",
                                "labels": ["experimental", "advanced"],
                                "description": "Most risky option, U-Boot is needed to boot your board. In case something goes wrong, your router will not boot and you will need to reflash it using serial cable.
                                "url": "https://docs.turris.cz/hw/omnia/serial-boot/"
                        },

                        "mcu": {
                                "title": "MCU",
                                "description": "Controls power distribution and LEDs. Dont reboot during update
                        "factory": {
                                "title": "Factory image",
                                "description": "Keeps image that is used for factory reset up to date. The safest option of all."
                        }
                }
        }
}

Here you may see ifndef(OMNIA, and broken JSON like missing commas.

I opened the file and just removed the whole “firmware_update” section. Note that the trailing comma from previous drivers needs to be removed.
Then I executed pkgupdate and it looks successful INFO:Target Turris OS: 6.5.1.
I don’t know how long this fix will work but hope for now it will stop annoying.

Dear Turris Team, please have a look.

2 Likes

ifndef() doesn’t belong to JSON at all. No idea how it appears there, the code helping to generate the JSON may have ifndef() but still no idea how it leaked into the JSON.

I can see a bunch of pkglists-related commits, ending with pkglists: Hopefully last fix (2c2d92a5) · Commits · Turris / Turris OS / Turris OS packages · GitLab 22 hours ago. So I guess it should be fixed now? Or does it need another RC release for the fixes to take effect?

2 Likes

6.5.0 → 6.5.1 RC1 update ok (except above JSON decoding problem), no unintended cable/wifi or internet downtime. Restart needed.

The JSON problem also breaks the following reforis pages: Overview, Sentinel/Overview, Sentinel/License Agreement, Package Management/Packages.


Turris Omnia 2017, 1 GB RAM, dead eMMC, system running from mSATA SSD, original wifi cards, UBoot 2022.10. Storage plugin enabled, LXC containers, tor relay, USB HDD shared over samba4 and minidlna, SQM, Hardwario gateway + MQTT IoT bridge, OpenVPN, PPtP VPN, Strongswan IKEv2 VPN, morce.

1 Like

We are sorry for the inconvenience, should be fixed now in RC (we just updated it), but unfortunately it broke updater as well. Simple way to fix it is to run the following command:
opkg update && opkg install --force-reinstall pkglists

5 Likes

Does that mean routers with RC1 installed will not recover themselves automatically?

1 Like

There is the new package which can be installed through Luci. This solves all the problems.

They wouldn’t :frowning: You can rollback to before the RC or you can use the fix described above.