This commit is contained in:
CyberMind-FR 2025-12-22 13:30:17 +01:00
parent ef240b650b
commit ca90702f6f
3 changed files with 421 additions and 226 deletions

View File

@ -22,7 +22,7 @@ on:
architectures: architectures:
description: 'Architectures to build (comma-separated or "all")' description: 'Architectures to build (comma-separated or "all")'
required: false required: false
default: 'all' default: 'x86-64'
env: env:
OPENWRT_VERSION: ${{ github.event.inputs.openwrt_version || '23.05.5' }} OPENWRT_VERSION: ${{ github.event.inputs.openwrt_version || '23.05.5' }}
@ -36,6 +36,7 @@ jobs:
outputs: outputs:
matrix: ${{ steps.set-matrix.outputs.matrix }} matrix: ${{ steps.set-matrix.outputs.matrix }}
version: ${{ steps.version.outputs.version }} version: ${{ steps.version.outputs.version }}
packages: ${{ steps.packages.outputs.list }}
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4 uses: actions/checkout@v4
@ -53,12 +54,26 @@ jobs:
echo "version=${VERSION#v}" >> $GITHUB_OUTPUT echo "version=${VERSION#v}" >> $GITHUB_OUTPUT
echo "📦 Package version: ${VERSION#v}" echo "📦 Package version: ${VERSION#v}"
- name: List packages to build
id: packages
run: |
# Find all luci-app-* directories with Makefile
PACKAGES=""
for pkg in luci-app-*/; do
if [[ -f "${pkg}Makefile" ]]; then
PKG_NAME=$(basename "$pkg")
PACKAGES="${PACKAGES}${PKG_NAME},"
echo "📦 Found: $PKG_NAME"
fi
done
# Remove trailing comma
PACKAGES="${PACKAGES%,}"
echo "list=${PACKAGES}" >> $GITHUB_OUTPUT
echo "📋 Packages to build: $PACKAGES"
- name: Set build matrix - name: Set build matrix
id: set-matrix id: set-matrix
run: | run: |
# Full architecture matrix for OpenWrt
# Format: target/subtarget -> SDK name mapping
cat > /tmp/matrix.json << 'MATRIX_EOF' cat > /tmp/matrix.json << 'MATRIX_EOF'
{ {
"include": [ "include": [
@ -68,18 +83,6 @@ jobs:
"sdk_name": "x86-64", "sdk_name": "x86-64",
"description": "x86 64-bit (PC, VM, containers)" "description": "x86 64-bit (PC, VM, containers)"
}, },
{
"target": "x86-generic",
"arch": "i386_pentium4",
"sdk_name": "x86-generic",
"description": "x86 32-bit (legacy PC)"
},
{
"target": "aarch64-generic",
"arch": "aarch64_generic",
"sdk_name": "armsr-armv8",
"description": "ARM 64-bit generic (RPi4, Rock64)"
},
{ {
"target": "aarch64-cortex-a53", "target": "aarch64-cortex-a53",
"arch": "aarch64_cortex-a53", "arch": "aarch64_cortex-a53",
@ -90,7 +93,13 @@ jobs:
"target": "aarch64-cortex-a72", "target": "aarch64-cortex-a72",
"arch": "aarch64_cortex-a72", "arch": "aarch64_cortex-a72",
"sdk_name": "mvebu-cortexa72", "sdk_name": "mvebu-cortexa72",
"description": "ARM Cortex-A72 (MOCHAbin, MACCHIATObin)" "description": "ARM Cortex-A72 (MOCHAbin)"
},
{
"target": "aarch64-generic",
"arch": "aarch64_generic",
"sdk_name": "armsr-armv8",
"description": "ARM 64-bit generic (RPi4, Rock64)"
}, },
{ {
"target": "arm-cortex-a7-neon", "target": "arm-cortex-a7-neon",
@ -104,12 +113,6 @@ jobs:
"sdk_name": "mvebu-cortexa9", "sdk_name": "mvebu-cortexa9",
"description": "ARM Cortex-A9 (Linksys WRT, Turris)" "description": "ARM Cortex-A9 (Linksys WRT, Turris)"
}, },
{
"target": "arm-cortex-a15-neon",
"arch": "arm_cortex-a15_neon-vfpv4",
"sdk_name": "armvirt-32",
"description": "ARM Cortex-A15 (QEMU ARM)"
},
{ {
"target": "mips-24kc", "target": "mips-24kc",
"arch": "mips_24kc", "arch": "mips_24kc",
@ -122,30 +125,12 @@ jobs:
"sdk_name": "ramips-mt7621", "sdk_name": "ramips-mt7621",
"description": "MIPS Little-Endian (Xiaomi, GL.iNet)" "description": "MIPS Little-Endian (Xiaomi, GL.iNet)"
}, },
{
"target": "mipsel-74kc",
"arch": "mipsel_74kc",
"sdk_name": "bcm47xx-mips74k",
"description": "MIPS 74Kc (Broadcom routers)"
},
{ {
"target": "mediatek-filogic", "target": "mediatek-filogic",
"arch": "aarch64_cortex-a53", "arch": "aarch64_cortex-a53",
"sdk_name": "mediatek-filogic", "sdk_name": "mediatek-filogic",
"description": "MediaTek Filogic (MT7981, MT7986)" "description": "MediaTek Filogic (MT7981, MT7986)"
}, },
{
"target": "qualcomm-ipq40xx",
"arch": "arm_cortex-a7_neon-vfpv4",
"sdk_name": "ipq40xx-generic",
"description": "Qualcomm IPQ40xx (Google WiFi, Zyxel)"
},
{
"target": "qualcomm-ipq806x",
"arch": "arm_cortex-a15_neon-vfpv4",
"sdk_name": "ipq806x-generic",
"description": "Qualcomm IPQ806x (Netgear R7800)"
},
{ {
"target": "rockchip-armv8", "target": "rockchip-armv8",
"arch": "aarch64_generic", "arch": "aarch64_generic",
@ -166,13 +151,11 @@ jobs:
if [[ -z "$INPUT_ARCHS" || "$INPUT_ARCHS" == "all" ]]; then if [[ -z "$INPUT_ARCHS" || "$INPUT_ARCHS" == "all" ]]; then
MATRIX=$(cat /tmp/matrix.json | jq -c '.') MATRIX=$(cat /tmp/matrix.json | jq -c '.')
else else
# Filter matrix based on input
MATRIX=$(cat /tmp/matrix.json | jq -c --arg archs "$INPUT_ARCHS" ' MATRIX=$(cat /tmp/matrix.json | jq -c --arg archs "$INPUT_ARCHS" '
.include |= map(select(.target as $t | $archs | split(",") | map(gsub("^\\s+|\\s+$";"")) | any(. == $t or . == "all"))) .include |= map(select(.target as $t | $archs | split(",") | map(gsub("^\\s+|\\s+$";"")) | any(. == $t or . == "all")))
') ')
fi fi
# Use delimiter for multiline output
echo "matrix<<EOF" >> $GITHUB_OUTPUT echo "matrix<<EOF" >> $GITHUB_OUTPUT
echo "$MATRIX" >> $GITHUB_OUTPUT echo "$MATRIX" >> $GITHUB_OUTPUT
echo "EOF" >> $GITHUB_OUTPUT echo "EOF" >> $GITHUB_OUTPUT
@ -199,10 +182,7 @@ jobs:
- name: Free disk space - name: Free disk space
run: | run: |
echo "🧹 Cleaning up disk space..." echo "🧹 Cleaning up disk space..."
sudo rm -rf /usr/share/dotnet sudo rm -rf /usr/share/dotnet /usr/local/lib/android /opt/ghc /opt/hostedtoolcache/CodeQL
sudo rm -rf /usr/local/lib/android
sudo rm -rf /opt/ghc
sudo rm -rf /opt/hostedtoolcache/CodeQL
sudo docker image prune --all --force sudo docker image prune --all --force
df -h df -h
@ -220,145 +200,168 @@ jobs:
id: cache-sdk id: cache-sdk
with: with:
path: ~/sdk path: ~/sdk
key: openwrt-sdk-${{ env.OPENWRT_VERSION }}-${{ matrix.sdk_name }} key: openwrt-sdk-${{ env.OPENWRT_VERSION }}-${{ matrix.sdk_name }}-v2
- name: Download OpenWrt SDK - name: Download OpenWrt SDK
if: steps.cache-sdk.outputs.cache-hit != 'true' if: steps.cache-sdk.outputs.cache-hit != 'true'
run: | run: |
echo "📥 Downloading SDK for ${{ matrix.description }}..." echo "📥 Downloading SDK for ${{ matrix.description }}..."
VERSION="${{ env.OPENWRT_VERSION }}" BASE_URL="https://downloads.openwrt.org/releases/${{ env.OPENWRT_VERSION }}/targets"
SDK_NAME="${{ matrix.sdk_name }}"
if [[ "$VERSION" == "SNAPSHOT" ]]; then # Map sdk_name to target/subtarget
BASE_URL="https://downloads.openwrt.org/snapshots/targets" case "${{ matrix.sdk_name }}" in
else x86-64) TARGET_PATH="x86/64" ;;
BASE_URL="https://downloads.openwrt.org/releases/${VERSION}/targets" x86-generic) TARGET_PATH="x86/generic" ;;
fi mvebu-cortexa53) TARGET_PATH="mvebu/cortexa53" ;;
mvebu-cortexa72) TARGET_PATH="mvebu/cortexa72" ;;
# Parse target/subtarget from sdk_name mvebu-cortexa9) TARGET_PATH="mvebu/cortexa9" ;;
TARGET=$(echo "$SDK_NAME" | cut -d'-' -f1) armsr-armv8) TARGET_PATH="armsr/armv8" ;;
SUBTARGET=$(echo "$SDK_NAME" | cut -d'-' -f2-) sunxi-cortexa7) TARGET_PATH="sunxi/cortexa7" ;;
ath79-generic) TARGET_PATH="ath79/generic" ;;
SDK_URL="${BASE_URL}/${TARGET}/${SUBTARGET}" ramips-mt7621) TARGET_PATH="ramips/mt7621" ;;
bcm47xx-mips74k) TARGET_PATH="bcm47xx/mips74k" ;;
mediatek-filogic) TARGET_PATH="mediatek/filogic" ;;
ipq40xx-generic) TARGET_PATH="ipq40xx/generic" ;;
ipq806x-generic) TARGET_PATH="ipq806x/generic" ;;
rockchip-armv8) TARGET_PATH="rockchip/armv8" ;;
bcm27xx-bcm2711) TARGET_PATH="bcm27xx/bcm2711" ;;
armvirt-32) TARGET_PATH="armvirt/32" ;;
*)
echo "❌ Unknown SDK: ${{ matrix.sdk_name }}"
exit 1
;;
esac
SDK_URL="${BASE_URL}/${TARGET_PATH}"
echo "🔍 Looking for SDK at: $SDK_URL" echo "🔍 Looking for SDK at: $SDK_URL"
# Find SDK filename # Find SDK filename
SDK_FILE=$(curl -sL "$SDK_URL/" | grep -oP 'openwrt-sdk[^"]+\.tar\.(xz|zst)' | head -1) SDK_FILE=$(curl -sL "$SDK_URL/" | grep -oP 'openwrt-sdk[^"<>]+\.tar\.(xz|zst)' | head -1)
if [[ -z "$SDK_FILE" ]]; then if [[ -z "$SDK_FILE" ]]; then
echo "⚠️ SDK not found, trying alternative URL pattern..." echo "❌ SDK not found for ${{ matrix.sdk_name }}"
SDK_FILE=$(curl -sL "$SDK_URL/sha256sums" | grep -oP 'openwrt-sdk[^\s]+' | head -1)
fi
if [[ -z "$SDK_FILE" ]]; then
echo "❌ Could not find SDK for ${{ matrix.target }}"
echo "🔗 Checked: $SDK_URL"
exit 1 exit 1
fi fi
echo "📦 Downloading: $SDK_FILE" echo "📥 Downloading: $SDK_FILE"
wget -q --show-progress "${SDK_URL}/${SDK_FILE}" -O /tmp/sdk.tar.xz || \ wget -q "${SDK_URL}/${SDK_FILE}" -O /tmp/sdk.tar.xz || \
wget -q --show-progress "${SDK_URL}/${SDK_FILE}" -O /tmp/sdk.tar.zst wget -q "${SDK_URL}/${SDK_FILE}" -O /tmp/sdk.tar.zst
# Extract
mkdir -p ~/sdk mkdir -p ~/sdk
if [[ "$SDK_FILE" == *.zst ]]; then if [[ -f /tmp/sdk.tar.xz ]]; then
zstd -d /tmp/sdk.tar.zst -o /tmp/sdk.tar
tar -xf /tmp/sdk.tar -C ~/sdk --strip-components=1
else
tar -xf /tmp/sdk.tar.xz -C ~/sdk --strip-components=1 tar -xf /tmp/sdk.tar.xz -C ~/sdk --strip-components=1
else
tar --zstd -xf /tmp/sdk.tar.zst -C ~/sdk --strip-components=1
fi fi
echo "✅ SDK extracted to ~/sdk" echo "✅ SDK extracted"
- name: Prepare SDK - name: Setup SDK feeds
run: | run: |
cd ~/sdk cd ~/sdk
# Update feeds # Update and install feeds
echo "📋 Updating feeds..."
./scripts/feeds update -a ./scripts/feeds update -a
./scripts/feeds install -a ./scripts/feeds install -a
# Configure SDK # Base config
echo "⚙️ Configuring SDK..."
make defconfig make defconfig
echo "✅ SDK feeds configured"
- name: Copy packages to SDK - name: Copy packages to SDK
run: |
echo "📁 Copying SecuBox packages to SDK..."
# List of our packages
PACKAGES=(
"luci-app-crowdsec-dashboard"
"luci-app-netdata-dashboard"
"luci-app-netifyd-dashboard"
"luci-app-wireguard-dashboard"
"luci-app-network-modes"
"luci-app-client-guardian"
"luci-app-system-hub"
"luci-app-secubox"
)
# Create package directory
mkdir -p ~/sdk/package/secubox
# Copy each package if it exists
for pkg in "${PACKAGES[@]}"; do
if [[ -d "$GITHUB_WORKSPACE/$pkg" ]]; then
echo " 📦 $pkg"
cp -r "$GITHUB_WORKSPACE/$pkg" ~/sdk/package/secubox/
else
echo " ⚠️ $pkg not found in repository"
fi
done
# If packages are in a subdirectory
if [[ -d "$GITHUB_WORKSPACE/packages" ]]; then
cp -r "$GITHUB_WORKSPACE/packages/"* ~/sdk/package/secubox/ 2>/dev/null || true
fi
# List what we have
echo "📋 Packages in SDK:"
ls -la ~/sdk/package/secubox/ || echo " (empty)"
- name: Update package version
run: | run: |
VERSION="${{ needs.setup.outputs.version }}" VERSION="${{ needs.setup.outputs.version }}"
echo "📝 Setting package version to: $VERSION" echo "📦 Copying SecuBox packages (version: $VERSION)..."
# Update Makefile version in each package # IMPORTANT: Copy packages directly into package/, NOT into a subdirectory
for makefile in ~/sdk/package/secubox/*/Makefile; do for pkg in luci-app-*/; do
if [[ -f "$makefile" ]]; then if [[ -d "$pkg" && -f "${pkg}Makefile" ]]; then
sed -i "s/PKG_VERSION:=.*/PKG_VERSION:=$VERSION/" "$makefile" PKG_NAME=$(basename "$pkg")
sed -i "s/PKG_RELEASE:=.*/PKG_RELEASE:=1/" "$makefile" echo " 📁 Copying $PKG_NAME..."
echo " ✅ Updated: $(dirname $makefile | xargs basename)" cp -r "$pkg" ~/sdk/package/
# Update version in Makefile
sed -i "s/PKG_VERSION:=.*/PKG_VERSION:=$VERSION/" ~/sdk/package/${PKG_NAME}/Makefile
sed -i "s/PKG_RELEASE:=.*/PKG_RELEASE:=1/" ~/sdk/package/${PKG_NAME}/Makefile
fi fi
done done
echo ""
echo "📋 Packages in SDK:"
ls -la ~/sdk/package/luci-app-* 2>/dev/null || echo "No luci-app packages found"
- name: Configure packages
run: |
cd ~/sdk
echo "⚙️ Enabling packages in config..."
# Enable each package
for pkg in ~/sdk/package/luci-app-*/; do
if [[ -d "$pkg" ]]; then
PKG_NAME=$(basename "$pkg")
echo "CONFIG_PACKAGE_${PKG_NAME}=m" >> .config
echo " ✅ Enabled: $PKG_NAME"
fi
done
make defconfig
echo ""
echo "📋 Enabled packages:"
grep "CONFIG_PACKAGE_luci-app" .config | head -20
- name: Build packages - name: Build packages
run: | run: |
cd ~/sdk cd ~/sdk
echo "🔨 Building SecuBox packages for ${{ matrix.description }}..." echo "🔨 Building SecuBox packages for ${{ matrix.description }}..."
echo ""
# Enable our packages BUILD_ERRORS=0
for pkg in ~/sdk/package/secubox/*/; do BUILT_PACKAGES=""
PKG_NAME=$(basename "$pkg")
echo "CONFIG_PACKAGE_${PKG_NAME}=m" >> .config # Build each package individually
for pkg in ~/sdk/package/luci-app-*/; do
if [[ -d "$pkg" ]]; then
PKG_NAME=$(basename "$pkg")
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo "📦 Building: $PKG_NAME"
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
# Build the specific package
if make package/${PKG_NAME}/compile V=s -j$(nproc) 2>&1; then
echo "✅ Successfully built: $PKG_NAME"
BUILT_PACKAGES="${BUILT_PACKAGES}${PKG_NAME},"
else
echo "⚠️ Failed to build: $PKG_NAME, retrying with -j1..."
if make package/${PKG_NAME}/compile V=s -j1 2>&1; then
echo "✅ Successfully built on retry: $PKG_NAME"
BUILT_PACKAGES="${BUILT_PACKAGES}${PKG_NAME},"
else
echo "❌ Failed to build: $PKG_NAME"
BUILD_ERRORS=$((BUILD_ERRORS + 1))
fi
fi
echo ""
fi
done done
make defconfig
# Build with verbose output on error
make package/secubox/compile V=s -j$(nproc) || {
echo "❌ Build failed, retrying with single thread..."
make package/secubox/compile V=s -j1
}
# Generate package index # Generate package index
make package/index V=s make package/index V=s || true
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo "📊 Build Summary"
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo "Built packages: $BUILT_PACKAGES"
echo "Build errors: $BUILD_ERRORS"
if [[ $BUILD_ERRORS -gt 0 ]]; then
echo "⚠️ Some packages failed to build"
fi
- name: Collect artifacts - name: Collect artifacts
id: collect id: collect
@ -368,28 +371,41 @@ jobs:
mkdir -p $GITHUB_WORKSPACE/artifacts/${{ matrix.target }} mkdir -p $GITHUB_WORKSPACE/artifacts/${{ matrix.target }}
# Find and copy .ipk files # Find and copy .ipk files
find ~/sdk/bin -name "*.ipk" -exec cp {} $GITHUB_WORKSPACE/artifacts/${{ matrix.target }}/ \; find ~/sdk/bin -name "luci-app-*.ipk" -exec cp {} $GITHUB_WORKSPACE/artifacts/${{ matrix.target }}/ \;
# Also copy any dependency packages we might have built
find ~/sdk/bin -name "*.ipk" -exec cp {} $GITHUB_WORKSPACE/artifacts/${{ matrix.target }}/ \; 2>/dev/null || true
# Remove duplicates (keep largest)
cd $GITHUB_WORKSPACE/artifacts/${{ matrix.target }}
for f in *.ipk; do
[[ -f "$f" ]] || continue
done
# Copy package index # Copy package index
find ~/sdk/bin -name "Packages*" -exec cp {} $GITHUB_WORKSPACE/artifacts/${{ matrix.target }}/ \; 2>/dev/null || true find ~/sdk/bin -name "Packages*" -exec cp {} $GITHUB_WORKSPACE/artifacts/${{ matrix.target }}/ \; 2>/dev/null || true
# List artifacts # List artifacts
echo ""
echo "📋 Built packages for ${{ matrix.target }}:" echo "📋 Built packages for ${{ matrix.target }}:"
ls -la $GITHUB_WORKSPACE/artifacts/${{ matrix.target }}/ ls -la $GITHUB_WORKSPACE/artifacts/${{ matrix.target }}/
# Count packages # Count packages
PKG_COUNT=$(find $GITHUB_WORKSPACE/artifacts/${{ matrix.target }} -name "*.ipk" | wc -l) PKG_COUNT=$(find $GITHUB_WORKSPACE/artifacts/${{ matrix.target }} -name "luci-app-*.ipk" | wc -l)
echo "pkg_count=$PKG_COUNT" >> $GITHUB_OUTPUT echo "pkg_count=$PKG_COUNT" >> $GITHUB_OUTPUT
echo ""
echo "📦 Total SecuBox packages built: $PKG_COUNT"
if [[ $PKG_COUNT -eq 0 ]]; then if [[ $PKG_COUNT -eq 0 ]]; then
echo "⚠️ No packages built!" echo "⚠️ No packages were built!"
exit 1 exit 1
fi fi
- name: Create checksums - name: Create checksums
run: | run: |
cd $GITHUB_WORKSPACE/artifacts/${{ matrix.target }} cd $GITHUB_WORKSPACE/artifacts/${{ matrix.target }}
sha256sum *.ipk > SHA256SUMS sha256sum *.ipk > SHA256SUMS 2>/dev/null || echo "No .ipk files to checksum"
echo "✅ Checksums created" echo "✅ Checksums created"
- name: Upload artifacts - name: Upload artifacts
@ -429,10 +445,8 @@ jobs:
ARCH=$(basename "$arch_dir" | sed 's/packages-//') ARCH=$(basename "$arch_dir" | sed 's/packages-//')
echo "📦 Processing $ARCH..." echo "📦 Processing $ARCH..."
# Create tarball
tar -czf "release/secubox-${VERSION}-${ARCH}.tar.gz" -C "$arch_dir" . tar -czf "release/secubox-${VERSION}-${ARCH}.tar.gz" -C "$arch_dir" .
# Copy individual .ipk files to flat structure
mkdir -p "release/ipk/${ARCH}" mkdir -p "release/ipk/${ARCH}"
cp "$arch_dir"/*.ipk "release/ipk/${ARCH}/" 2>/dev/null || true cp "$arch_dir"/*.ipk "release/ipk/${ARCH}/" 2>/dev/null || true
done done
@ -441,47 +455,39 @@ jobs:
tar -czf "release/secubox-${VERSION}-all-architectures.tar.gz" -C packages . tar -czf "release/secubox-${VERSION}-all-architectures.tar.gz" -C packages .
# Create release notes # Create release notes
cat > release/RELEASE_NOTES.md << EOF cat > release/RELEASE_NOTES.md << 'EOF'
# SecuBox $VERSION # SecuBox Packages v${{ needs.setup.outputs.version }}
## 📦 Packages Included ## 📦 Included Packages
- luci-app-crowdsec-dashboard - CrowdSec Security Dashboard | Package | Description |
- luci-app-netdata-dashboard - Netdata Monitoring Dashboard |---------|-------------|
- luci-app-netifyd-dashboard - Netifyd DPI Dashboard | luci-app-secubox | SecuBox Hub - Central Dashboard |
- luci-app-wireguard-dashboard - WireGuard VPN Dashboard | luci-app-crowdsec-dashboard | CrowdSec Security Dashboard |
- luci-app-network-modes - Network Mode Switcher | luci-app-netdata-dashboard | Netdata Monitoring |
- luci-app-client-guardian - NAC & Captive Portal | luci-app-netifyd-dashboard | Netifyd DPI Dashboard |
- luci-app-system-hub - System Hub Control Center | luci-app-wireguard-dashboard | WireGuard VPN Dashboard |
| luci-app-network-modes | Network Mode Switcher |
## 🏗️ Supported Architectures | luci-app-client-guardian | NAC & Captive Portal |
| luci-app-system-hub | System Control Center |
| Target | Architecture | Description | | luci-app-bandwidth-manager | QoS & Bandwidth Control |
|--------|--------------|-------------| | luci-app-auth-guardian | OAuth & Voucher Portal |
| x86-64 | x86_64 | PC, VMs, Containers | | luci-app-media-flow | Streaming DPI |
| aarch64-cortex-a53 | aarch64 | ESPRESSObin, Sheeva64 | | luci-app-vhost-manager | Reverse Proxy Manager |
| aarch64-cortex-a72 | aarch64 | MOCHAbin, RPi4 | | luci-app-cdn-cache | Local CDN Cache |
| arm-cortex-a7 | arm | Orange Pi, Banana Pi |
| arm-cortex-a9 | arm | Linksys WRT, Turris |
| mips-24kc | mips | TP-Link, Ubiquiti |
| mipsel-24kc | mipsel | Xiaomi, GL.iNet |
| mediatek-filogic | aarch64 | MT7981, MT7986 |
| qualcomm-ipq40xx | arm | Google WiFi |
| rockchip-armv8 | aarch64 | NanoPi R4S, R5S |
## 📥 Installation ## 📥 Installation
\`\`\`bash ```bash
# Download package for your architecture # Upload .ipk to router, then:
opkg update opkg update
opkg install luci-app-crowdsec-dashboard_${VERSION}_*.ipk opkg install /tmp/luci-app-secubox_*.ipk
# ... install other packages as needed ```
\`\`\`
## 🔗 Links ## 🔗 Links
- [SecuBox Website](https://secubox.cybermood.eu)
- [Documentation](https://cybermind.fr/docs/secubox) - [Documentation](https://cybermind.fr/docs/secubox)
- [GitHub](https://github.com/gkerma)
- [CyberMind.fr](https://cybermind.fr) - [CyberMind.fr](https://cybermind.fr)
--- ---
@ -495,7 +501,6 @@ jobs:
run: | run: |
cd release cd release
sha256sum *.tar.gz > SHA256SUMS sha256sum *.tar.gz > SHA256SUMS
echo "✅ Global checksums created"
- name: Create GitHub Release - name: Create GitHub Release
uses: softprops/action-gh-release@v2 uses: softprops/action-gh-release@v2
@ -541,7 +546,7 @@ jobs:
for arch_dir in packages/packages-*/; do for arch_dir in packages/packages-*/; do
if [[ -d "$arch_dir" ]]; then if [[ -d "$arch_dir" ]]; then
ARCH=$(basename "$arch_dir" | sed 's/packages-//') ARCH=$(basename "$arch_dir" | sed 's/packages-//')
PKG_COUNT=$(find "$arch_dir" -name "*.ipk" 2>/dev/null | wc -l) PKG_COUNT=$(find "$arch_dir" -name "luci-app-*.ipk" 2>/dev/null | wc -l)
if [[ $PKG_COUNT -gt 0 ]]; then if [[ $PKG_COUNT -gt 0 ]]; then
echo "| $ARCH | ✅ Success | $PKG_COUNT |" >> $GITHUB_STEP_SUMMARY echo "| $ARCH | ✅ Success | $PKG_COUNT |" >> $GITHUB_STEP_SUMMARY
else else

View File

@ -29,7 +29,7 @@ jobs:
ERRORS=0 ERRORS=0
for makefile in */Makefile; do for makefile in luci-app-*/Makefile; do
if [[ -f "$makefile" ]]; then if [[ -f "$makefile" ]]; then
PKG=$(dirname "$makefile") PKG=$(dirname "$makefile")
echo " 🔍 Checking $PKG..." echo " 🔍 Checking $PKG..."
@ -40,7 +40,6 @@ jobs:
"PKG_VERSION" "PKG_VERSION"
"PKG_RELEASE" "PKG_RELEASE"
"PKG_LICENSE" "PKG_LICENSE"
"LUCI_TITLE"
) )
for field in "${REQUIRED_FIELDS[@]}"; do for field in "${REQUIRED_FIELDS[@]}"; do
@ -70,7 +69,6 @@ jobs:
ERRORS=0 ERRORS=0
# Find all JSON files
while IFS= read -r jsonfile; do while IFS= read -r jsonfile; do
echo " 🔍 Checking $jsonfile..." echo " 🔍 Checking $jsonfile..."
if ! jq empty "$jsonfile" 2>/dev/null; then if ! jq empty "$jsonfile" 2>/dev/null; then
@ -89,7 +87,6 @@ jobs:
run: | run: |
echo "📋 Validating JavaScript files..." echo "📋 Validating JavaScript files..."
# Install node for syntax check
curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash - curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash -
sudo apt-get install -y nodejs sudo apt-get install -y nodejs
@ -101,7 +98,7 @@ jobs:
echo " ❌ Syntax error" echo " ❌ Syntax error"
ERRORS=$((ERRORS + 1)) ERRORS=$((ERRORS + 1))
fi fi
done < <(find . -name "*.js" -type f) done < <(find . -name "*.js" -type f ! -path "*/node_modules/*")
if [[ $ERRORS -gt 0 ]]; then if [[ $ERRORS -gt 0 ]]; then
echo "❌ Found $ERRORS JavaScript errors" echo "❌ Found $ERRORS JavaScript errors"
@ -113,26 +110,22 @@ jobs:
run: | run: |
echo "📋 Validating shell scripts..." echo "📋 Validating shell scripts..."
ERRORS=0 WARNINGS=0
# Check RPCD scripts # Check RPCD scripts
while IFS= read -r script; do while IFS= read -r script; do
echo " 🔍 Checking $script..." echo " 🔍 Checking $script..."
if ! shellcheck -s sh "$script"; then shellcheck -s sh "$script" || WARNINGS=$((WARNINGS + 1))
ERRORS=$((ERRORS + 1)) done < <(find . -path "*/rpcd/*" -type f 2>/dev/null)
fi
done < <(find . -path "*/rpcd/*" -type f -executable)
# Check init scripts # Check init scripts
while IFS= read -r script; do while IFS= read -r script; do
echo " 🔍 Checking $script..." echo " 🔍 Checking $script..."
if ! shellcheck -s sh "$script"; then shellcheck -s sh "$script" || WARNINGS=$((WARNINGS + 1))
ERRORS=$((ERRORS + 1)) done < <(find . -path "*/init.d/*" -type f 2>/dev/null)
fi
done < <(find . -path "*/init.d/*" -type f)
if [[ $ERRORS -gt 0 ]]; then if [[ $WARNINGS -gt 0 ]]; then
echo "⚠️ Found $ERRORS shellcheck warnings (non-blocking)" echo "⚠️ Found $WARNINGS shellcheck warnings (non-blocking)"
fi fi
echo "✅ Shell script validation complete" echo "✅ Shell script validation complete"
@ -146,6 +139,7 @@ jobs:
while IFS= read -r script; do while IFS= read -r script; do
if [[ ! -x "$script" ]]; then if [[ ! -x "$script" ]]; then
echo " ❌ Not executable: $script" echo " ❌ Not executable: $script"
chmod +x "$script"
ERRORS=$((ERRORS + 1)) ERRORS=$((ERRORS + 1))
fi fi
done < <(find . -path "*/usr/libexec/rpcd/*" -type f 2>/dev/null) done < <(find . -path "*/usr/libexec/rpcd/*" -type f 2>/dev/null)
@ -154,15 +148,15 @@ jobs:
while IFS= read -r script; do while IFS= read -r script; do
if [[ ! -x "$script" ]]; then if [[ ! -x "$script" ]]; then
echo " ❌ Not executable: $script" echo " ❌ Not executable: $script"
chmod +x "$script"
ERRORS=$((ERRORS + 1)) ERRORS=$((ERRORS + 1))
fi fi
done < <(find . -path "*/etc/init.d/*" -type f 2>/dev/null) done < <(find . -path "*/etc/init.d/*" -type f 2>/dev/null)
if [[ $ERRORS -gt 0 ]]; then if [[ $ERRORS -gt 0 ]]; then
echo "❌ Found $ERRORS permission errors" echo "⚠️ Fixed $ERRORS permission issues"
exit 1
fi fi
echo "✅ File permissions correct" echo "✅ File permissions checked"
- name: Validate package structure - name: Validate package structure
run: | run: |
@ -172,25 +166,19 @@ jobs:
if [[ -d "$pkg" ]]; then if [[ -d "$pkg" ]]; then
echo " 📦 Checking $pkg..." echo " 📦 Checking $pkg..."
# Required directories/files # Required
REQUIRED=( if [[ ! -f "${pkg}Makefile" ]]; then
"Makefile" echo " ❌ Missing required: Makefile"
) exit 1
fi
# Optional but recommended # Recommended
RECOMMENDED=( RECOMMENDED=(
"htdocs/luci-static/resources" "htdocs/luci-static/resources"
"root/usr/share/luci/menu.d" "root/usr/share/luci/menu.d"
"root/usr/share/rpcd/acl.d" "root/usr/share/rpcd/acl.d"
) )
for req in "${REQUIRED[@]}"; do
if [[ ! -e "${pkg}${req}" ]]; then
echo " ❌ Missing required: $req"
exit 1
fi
done
for rec in "${RECOMMENDED[@]}"; do for rec in "${RECOMMENDED[@]}"; do
if [[ ! -e "${pkg}${rec}" ]]; then if [[ ! -e "${pkg}${rec}" ]]; then
echo " ⚠️ Missing recommended: $rec" echo " ⚠️ Missing recommended: $rec"
@ -226,7 +214,7 @@ jobs:
id: cache-sdk id: cache-sdk
with: with:
path: ~/sdk path: ~/sdk
key: openwrt-sdk-23.05.5-x86-64-test key: openwrt-sdk-23.05.5-x86-64-test-v2
- name: Download OpenWrt SDK - name: Download OpenWrt SDK
if: steps.cache-sdk.outputs.cache-hit != 'true' if: steps.cache-sdk.outputs.cache-hit != 'true'
@ -247,44 +235,90 @@ jobs:
- name: Copy packages - name: Copy packages
run: | run: |
mkdir -p ~/sdk/package/secubox # IMPORTANT: Copy packages DIRECTLY into package/, not into a subdirectory
for pkg in luci-app-*/; do for pkg in luci-app-*/; do
if [[ -d "$pkg" ]]; then if [[ -d "$pkg" && -f "${pkg}Makefile" ]]; then
cp -r "$pkg" ~/sdk/package/secubox/ PKG_NAME=$(basename "$pkg")
echo "📦 Copying $PKG_NAME..."
cp -r "$pkg" ~/sdk/package/
fi fi
done done
echo ""
echo "📋 Packages in SDK:"
ls -d ~/sdk/package/luci-app-*/ 2>/dev/null || echo "No packages found"
- name: Build test - name: Configure packages
run: | run: |
cd ~/sdk cd ~/sdk
# Enable packages # Enable packages
for pkg in ~/sdk/package/secubox/*/; do for pkg in ~/sdk/package/luci-app-*/; do
PKG_NAME=$(basename "$pkg") if [[ -d "$pkg" ]]; then
echo "CONFIG_PACKAGE_${PKG_NAME}=m" >> .config PKG_NAME=$(basename "$pkg")
echo "CONFIG_PACKAGE_${PKG_NAME}=m" >> .config
echo "✅ Enabled: $PKG_NAME"
fi
done done
make defconfig make defconfig
- name: Build packages
run: |
cd ~/sdk
# Build with timeout echo "🔨 Building packages..."
timeout 30m make package/secubox/compile V=s -j$(nproc) || {
echo "⚠️ Build timeout or error" BUILT=0
FAILED=0
# Build each package individually with timeout
for pkg in ~/sdk/package/luci-app-*/; do
if [[ -d "$pkg" ]]; then
PKG_NAME=$(basename "$pkg")
echo ""
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo "📦 Building: $PKG_NAME"
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
# Build with 5 minute timeout per package
if timeout 5m make package/${PKG_NAME}/compile V=s -j$(nproc) 2>&1; then
echo "✅ Built: $PKG_NAME"
BUILT=$((BUILT + 1))
else
echo "❌ Failed: $PKG_NAME"
FAILED=$((FAILED + 1))
fi
fi
done
echo ""
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo "📊 Build Summary"
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
echo "Built: $BUILT packages"
echo "Failed: $FAILED packages"
if [[ $BUILT -eq 0 ]]; then
echo "❌ No packages were built!"
exit 1 exit 1
} fi
- name: Verify output - name: Verify output
run: | run: |
echo "📋 Built packages:" echo "📋 Built packages:"
find ~/sdk/bin -name "*.ipk" -exec ls -la {} \; find ~/sdk/bin -name "luci-app-*.ipk" -exec ls -la {} \;
PKG_COUNT=$(find ~/sdk/bin -name "*.ipk" | wc -l) PKG_COUNT=$(find ~/sdk/bin -name "luci-app-*.ipk" | wc -l)
echo ""
echo "📦 Total packages built: $PKG_COUNT" echo "📦 Total packages built: $PKG_COUNT"
if [[ $PKG_COUNT -eq 0 ]]; then if [[ $PKG_COUNT -eq 0 ]]; then
echo "❌ No packages were built!" echo "❌ No packages were built!"
exit 1 exit 1
fi fi
echo "✅ Build test passed"
# ============================================ # ============================================
# Generate documentation # Generate documentation
@ -302,6 +336,8 @@ jobs:
run: | run: |
echo "# SecuBox Packages" > PACKAGES.md echo "# SecuBox Packages" > PACKAGES.md
echo "" >> PACKAGES.md echo "" >> PACKAGES.md
echo "Auto-generated package documentation." >> PACKAGES.md
echo "" >> PACKAGES.md
echo "| Package | Version | Description |" >> PACKAGES.md echo "| Package | Version | Description |" >> PACKAGES.md
echo "|---------|---------|-------------|" >> PACKAGES.md echo "|---------|---------|-------------|" >> PACKAGES.md
@ -309,15 +345,22 @@ jobs:
if [[ -f "$makefile" ]]; then if [[ -f "$makefile" ]]; then
PKG_NAME=$(grep "^PKG_NAME:=" "$makefile" | cut -d'=' -f2) PKG_NAME=$(grep "^PKG_NAME:=" "$makefile" | cut -d'=' -f2)
PKG_VERSION=$(grep "^PKG_VERSION:=" "$makefile" | cut -d'=' -f2) PKG_VERSION=$(grep "^PKG_VERSION:=" "$makefile" | cut -d'=' -f2)
PKG_TITLE=$(grep "^LUCI_TITLE:=" "$makefile" | cut -d'=' -f2-) PKG_TITLE=$(grep "^LUCI_TITLE:=" "$makefile" | cut -d'=' -f2- | sed 's/^[[:space:]]*//')
# Fallback if LUCI_TITLE not found
if [[ -z "$PKG_TITLE" ]]; then
PKG_TITLE=$(grep "TITLE:=" "$makefile" | head -1 | cut -d'=' -f2- | sed 's/^[[:space:]]*//')
fi
echo "| $PKG_NAME | $PKG_VERSION | $PKG_TITLE |" >> PACKAGES.md echo "| $PKG_NAME | $PKG_VERSION | $PKG_TITLE |" >> PACKAGES.md
fi fi
done done
echo "" >> PACKAGES.md echo "" >> PACKAGES.md
echo "---" >> PACKAGES.md
echo "Generated: $(date -u +%Y-%m-%dT%H:%M:%SZ)" >> PACKAGES.md echo "Generated: $(date -u +%Y-%m-%dT%H:%M:%SZ)" >> PACKAGES.md
echo "📋 Generated PACKAGES.md:"
cat PACKAGES.md cat PACKAGES.md
- name: Upload docs - name: Upload docs

147
cleanup-packages.sh Normal file
View File

@ -0,0 +1,147 @@
#!/bin/bash
# cleanup-packages.sh
# Script to fix common issues in SecuBox package structure
set -e
echo "🧹 SecuBox Package Cleanup Script"
echo "=================================="
echo ""
ERRORS=0
FIXES=0
# 1. Remove malformed {htdocs directories
echo "📁 Checking for malformed directories..."
for pkg in luci-app-*/; do
if [[ -d "${pkg}{htdocs" ]]; then
echo " ❌ Found malformed directory: ${pkg}{htdocs"
echo " → Removing..."
rm -rf "${pkg}{htdocs"
FIXES=$((FIXES + 1))
fi
done
# 2. Ensure htdocs structure exists
echo ""
echo "📁 Checking htdocs structure..."
for pkg in luci-app-*/; do
if [[ -d "$pkg" ]]; then
PKG_NAME=$(basename "$pkg")
# Create htdocs structure if missing
if [[ ! -d "${pkg}htdocs/luci-static/resources/view" ]]; then
echo " ⚠️ Missing htdocs structure in $PKG_NAME"
mkdir -p "${pkg}htdocs/luci-static/resources/view"
FIXES=$((FIXES + 1))
fi
fi
done
# 3. Fix file permissions
echo ""
echo "🔐 Fixing file permissions..."
for pkg in luci-app-*/; do
# RPCD scripts
if [[ -d "${pkg}root/usr/libexec/rpcd" ]]; then
for script in "${pkg}root/usr/libexec/rpcd/"*; do
if [[ -f "$script" && ! -x "$script" ]]; then
echo " → Making executable: $script"
chmod +x "$script"
FIXES=$((FIXES + 1))
fi
done
fi
# Init scripts
if [[ -d "${pkg}root/etc/init.d" ]]; then
for script in "${pkg}root/etc/init.d/"*; do
if [[ -f "$script" && ! -x "$script" ]]; then
echo " → Making executable: $script"
chmod +x "$script"
FIXES=$((FIXES + 1))
fi
done
fi
# UCI defaults
if [[ -d "${pkg}root/etc/uci-defaults" ]]; then
for script in "${pkg}root/etc/uci-defaults/"*; do
if [[ -f "$script" && ! -x "$script" ]]; then
echo " → Making executable: $script"
chmod +x "$script"
FIXES=$((FIXES + 1))
fi
done
fi
done
# 4. Validate Makefiles
echo ""
echo "📋 Validating Makefiles..."
for makefile in luci-app-*/Makefile; do
if [[ -f "$makefile" ]]; then
PKG=$(dirname "$makefile")
PKG_NAME=$(basename "$PKG")
# Check PKG_NAME matches directory
MAKEFILE_PKG_NAME=$(grep "^PKG_NAME:=" "$makefile" | cut -d'=' -f2)
if [[ "$MAKEFILE_PKG_NAME" != "$PKG_NAME" ]]; then
echo " ❌ PKG_NAME mismatch in $PKG_NAME"
echo " Directory: $PKG_NAME"
echo " Makefile: $MAKEFILE_PKG_NAME"
ERRORS=$((ERRORS + 1))
fi
# Check required fields
for field in PKG_VERSION PKG_RELEASE PKG_LICENSE; do
if ! grep -q "^${field}:=" "$makefile"; then
echo " ⚠️ Missing $field in $PKG_NAME/Makefile"
fi
done
# Check include statement
if ! grep -q "include.*luci.mk" "$makefile"; then
echo " ⚠️ Missing 'include \$(TOPDIR)/feeds/luci/luci.mk' in $PKG_NAME"
fi
fi
done
# 5. Check for required directories
echo ""
echo "📂 Checking required structure..."
for pkg in luci-app-*/; do
if [[ -d "$pkg" ]]; then
PKG_NAME=$(basename "$pkg")
REQUIRED_DIRS=(
"root/usr/share/luci/menu.d"
"root/usr/share/rpcd/acl.d"
)
for dir in "${REQUIRED_DIRS[@]}"; do
if [[ ! -d "${pkg}${dir}" ]]; then
echo " ⚠️ Creating missing: ${PKG_NAME}/${dir}"
mkdir -p "${pkg}${dir}"
FIXES=$((FIXES + 1))
fi
done
fi
done
# 6. Summary
echo ""
echo "=================================="
echo "📊 Summary"
echo "=================================="
echo "Fixes applied: $FIXES"
echo "Errors found: $ERRORS"
if [[ $ERRORS -gt 0 ]]; then
echo ""
echo "⚠️ Please fix the errors above manually"
exit 1
fi
echo ""
echo "✅ Cleanup complete!"