---
description: IOPSYS configuration
packages:
  # EasySoC HAL #
  - qosmngr
  - ethmngr
  - mcastmngr
  - wifimngr
  # Multi-AP #
  - ieee1905
  - ieee1905-topology-plugin
  - decollector
  - map-agent
  - map-controller
  - libdpp
  # Network #
  - hostmngr
  - netmode
  - parental-control
  - ssdpd
  - testnet
  # System #
  - rulengd
  # TR-x69 #
  - bbfdmd
  - dm-service
  - icwmp
  - obuspa
  - obudpst
  - bulkdata
  - periodicstats
  - stunc
  - swmodd
  - twamp
  - udpecho-client
  - udpecho-server
  - userinterface
  - usermngr
  - xmppc
  - timemngr
  - dnsmngr
  - ddnsmngr
  - dhcpmngr
  - self-diagnostics
  - packet-capture-diagnostics
  - usbmngr
  - bridgemngr
  - tr143
  - tr471
  - wifidmd
  - netmngr
  - sysmngr
  - gateway-info
  # WebGUI #
  - sulu
  # Network #
  # Protocols #
  - 6in4
  - 6rd
  - 6to4
  - chat
  - comgt
  - comgt-directip
  - comgt-ncm
  - ds-lite
  - gre
  - map
  - ntfs-3g
  - odhcp6c
  - odhcpd
  - ppp-mod-pppoa
  - ppp-mod-pppoe
  - ppp-mod-pppol2tp
  - ppp-mod-pptp
  - ppp-multilink
  - relayd
  - umbim
  - uqmi
  - wwan
  - xl2tpd
  # Services #
  - firewall
  - miniupnpd-iptables
  - mosquitto-client-ssl
  - mosquitto-ssl
  - nginx
  - ntpd
  - openvpn-easy-rsa
  - openvpn-openssl
  - rdnssd
  - firewallmngr
  - sshmngr
  # Tools and Utilities #
  - curl
  - libcurl
  - ethtool
  - ip-bridge
  - ip-full
  - iperf3
  - ipset
  - iptables-zz-legacy
  - iptables-mod-conntrack-extra
  - iptables-mod-filter
  - iptables-mod-extra
  - iptables-mod-ipmark
  - iptables-mod-ipopt
  - iptables-mod-nflog
  - ip6tables-zz-legacy
  - iputils-arping
  - iputils-ping
  - logmngr
  - ndisc6
  - ntp-utils
  - owipcalc
  - rdisc6
  - resolveip
  - socat
  - tcpdump
  - traceroute6
  # System #
  - at
  - ca-certificates
  - crun
  - getopt
  - gpiod-tools
  - jq
  - libcap-bin
  - libustream-openssl
  - lscpu
  - nand-utils
  - openssl-util
  - quota
  - rpcd
  - rpcd-mod-rpcsys
  - rpcd-mod-rrdns
  - shadow-utils
  - strace
  - terminfo
  - uledd
  - usb-modeswitch
  - uuidgen
  - zoneinfo-core
  - zoneinfo-europe
diffconfig: |
  CONFIG_BUILD_LOG=y
  CONFIG_CCACHE=y
  CONFIG_DEBUG=y
  # CONFIG_KERNEL_DEBUG_INFO_REDUCED is not set
  CONFIG_DEVEL=y
  # CONFIG_USE_SSTRIP is not set
  CONFIG_USE_STRIP=y
  # CONFIG_SIGNED_PACKAGES is not set

  CONFIG_JSON_CYCLONEDX_SBOM=y
  CONFIG_INCLUDE_CONFIG=y
  CONFIG_TARGET_MULTI_PROFILE=y
  CONFIG_TARGET_PER_DEVICE_ROOTFS=y

  # Image #

  # Although UBIFS and EXT4 images work on all non-secure-boot devices,
  # squashfs is the only officially supported rootfs filesystem.
  # A writable rootfs is useful for developping an debugging preinit code.
  # CONFIG_TARGET_ROOTFS_UBIFS is not set
  # CONFIG_TARGET_ROOTFS_EXT4FS is not set

  # /etc/banner and /etc/device_info #
  CONFIG_IMAGEOPT=y
  CONFIG_VERSIONOPT=y
  CONFIG_VERSION_MANUFACTURER="IOPSYS"
  CONFIG_VERSION_MANUFACTURER_URL="https://iopsys.eu/"
  CONFIG_VERSION_DIST="IOWRT"

  # OpenWrt is given by CONFIG_VERSION_NUMBER which we do not want to override.
  # disabling CONFIG_VERSION_FILENAMES will hide the OpenWrt version from the image filename
  # CONFIG_VERSION_FILENAMES is not set

  # CONFIG_VERSION_CODE is set to the IOWRT version instead by the genconfig-script and
  # CONFIG_VERSION_CODE_FILENAMES will put it into the image filename.
  CONFIG_VERSION_CODE_FILENAMES=y

  CONFIG_VERSION_HOME_URL="https://iopsys.eu"
  CONFIG_VERSION_BUG_URL="https://iopsys.eu"
  CONFIG_VERSION_SUPPORT_URL="https://iopsys.eu"

  # /lib/preinit #
  CONFIG_PREINITOPT=y
  # CONFIG_TARGET_PREINIT_SUPPRESS_STDERR is not set
  CONFIG_TARGET_PREINIT_DISABLE_FAILSAFE=y
  CONFIG_TARGET_PREINIT_TIMEOUT=1
  # CONFIG_TARGET_PREINIT_SHOW_NETMSG is not set
  # CONFIG_TARGET_PREINIT_SUPPRESS_FAILSAFE_NETMSG is not set
  CONFIG_TARGET_PREINIT_IFNAME=""
  CONFIG_TARGET_PREINIT_IP=""
  CONFIG_TARGET_PREINIT_NETMASK=""
  CONFIG_TARGET_PREINIT_BROADCAST=""

  # Mirror #
  CONFIG_LOCALMIRROR="https://download.iopsys.eu/iopsys/mirror/"

  # Packages #
  # CONFIG_PACKAGE_dnsmasq is not set
  # CONFIG_PACKAGE_dropbear is not set
  # CONFIG_PACKAGE_firewall4 is not set
  # CONFIG_PACKAGE_iwatchdog is not set
  # CONFIG_PACKAGE_libustream-wolfssl is not set
  # CONFIG_PACKAGE_logd is not set
  # CONFIG_PACKAGE_ppp is not set
  CONFIG_PACKAGE_procd-ujail=m
  # CONFIG_PACKAGE_qos-scripts is not set
  # The urandom-seed package is very strange. It seeds urandom with urandom...
  # Disable it. Most SoCs nowadays has HW random generators anyway.
  # CONFIG_PACKAGE_urandom-seed is not set
  # CONFIG_PACKAGE_urngd is not set
  CONFIG_LIBCURL_CRYPTO_AUTH=y
  # CONFIG_LIBCURL_MBEDTLS is not set
  CONFIG_LIBCURL_OPENSSL=y
  # CONFIG_LUCI_JSMIN is not set
  # CONFIG_LUCI_CSSTIDY is not set
  CONFIG_OPENSSL_WITH_COMPRESSION=y
  CONFIG_OPENVPN_openssl_ENABLE_IPROUTE2=y

  # Multi-AP #
  CONFIG_IEEE1905_CMDU_SA_IS_ALMAC=y
  CONFIG_AGENT_USE_LIBDPP=y
  CONFIG_CONTROLLER_USE_LIBDPP=y

  #SULU
  CONFIG_SULU_DEFAULT_UI=y

  ############
  # BusyBox #
  ##########

  CONFIG_BUSYBOX_CUSTOM=y
  CONFIG_BUSYBOX_CONFIG_ADDUSER=y
  CONFIG_BUSYBOX_CONFIG_ASH_IDLE_TIMEOUT=y
  CONFIG_BUSYBOX_CONFIG_ASH_RANDOM_SUPPORT=y
  CONFIG_BUSYBOX_CONFIG_CTTYHACK=y
  CONFIG_BUSYBOX_CONFIG_DELUSER=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_UDHCP_8021Q=y
  CONFIG_BUSYBOX_CONFIG_FIRST_SYSTEM_ID=100
  # CONFIG_BUSYBOX_CONFIG_HTTPD is not set
  # CONFIG_BUSYBOX_CONFIG_INSMOD is not set
  # CONFIG_BUSYBOX_CONFIG_MODINFO is not set
  # CONFIG_BUSYBOX_CONFIG_MODPROBE is not set
  CONFIG_BUSYBOX_CONFIG_FEATURE_MODPROBE_BLACKLIST=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_CHECK_TAINTED_MODULE=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_MODUTILS_ALIAS=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_MODUTILS_SYMBOLS=y
  CONFIG_BUSYBOX_CONFIG_DEFAULT_MODULES_DIR="/lib/modules"
  CONFIG_BUSYBOX_CONFIG_DEFAULT_DEPMOD_FILE="modules.dep"
  # CONFIG_BUSYBOX_CONFIG_IP is not set
  CONFIG_BUSYBOX_CONFIG_LAST_SYSTEM_ID=999
  CONFIG_BUSYBOX_CONFIG_LOGIN=y
  # CONFIG_BUSYBOX_CONFIG_LSMOD is not set
  CONFIG_BUSYBOX_CONFIG_LSPCI=y
  CONFIG_BUSYBOX_CONFIG_LSUSB=y
  CONFIG_BUSYBOX_CONFIG_MICROCOM=y
  # CONFIG_BUSYBOX_CONFIG_RMMOD is not set
  CONFIG_BUSYBOX_CONFIG_STTY=y
  CONFIG_BUSYBOX_CONFIG_TFTP=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_CHECK_TAINTED_MODULE=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_AUTH_MD5=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_BASIC_AUTH=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_CGI=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_CONFIG_WITH_SCRIPT_INTERPR=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_ENCODE_URL_STR=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_ERROR_PAGES=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_GZIP=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_PROXY=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_RANGES=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_SETUID=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_SET_REMOTE_PORT_TO_ENV=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_HTTPD_USE_SENDFILE=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_LSMOD_PRETTY_2_6_OUTPUT=y
  # CONFIG_BUSYBOX_CONFIG_FEATURE_NOLOGIN is not set
  CONFIG_BUSYBOX_CONFIG_FEATURE_SECURETTY=y
  # CONFIG_BUSYBOX_CONFIG_FEATURE_TFTP_BLOCKSIZE is not set
  CONFIG_BUSYBOX_CONFIG_FEATURE_TFTP_GET=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_TFTP_PUT=y
  # CONFIG_BUSYBOX_CONFIG_WGET is not set
  # CONFIG_BUSYBOX_CONFIG_LOGIN_SCRIPTS is not set
  # CONFIG_BUSYBOX_CONFIG_LOGIN_SESSION_AS_CHILD is not set
  # CONFIG_BUSYBOX_CONFIG_PAM is not set
  # CONFIG_BUSYBOX_CONFIG_TFTP_DEBUG is not set
  # CONFIG_BUSYBOX_CONFIG_NTPD is not set
  CONFIG_BUSYBOX_CONFIG_MOUNTPOINT=y
  CONFIG_BUSYBOX_CONFIG_RUN_PARTS=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_RUN_PARTS_LONG_OPTIONS=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_RUN_PARTS_FANCY=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_GZIP_LEVELS=y
  CONFIG_BUSYBOX_CONFIG_GZIP_FAST=2
  CONFIG_BUSYBOX_CONFIG_FEATURE_FANCY_SLEEP=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_FLOAT_SLEEP=y
  CONFIG_BUSYBOX_CONFIG_FLOAT_DURATION=y
  CONFIG_BUSYBOX_CONFIG_USLEEP=y
  CONFIG_BUSYBOX_CONFIG_REALPATH=y
  CONFIG_BUSYBOX_CONFIG_TTY=y
  CONFIG_BUSYBOX_CONFIG_BLOCKDEV=y
  CONFIG_BUSYBOX_CONFIG_PARTPROBE=y
  CONFIG_BUSYBOX_CONFIG_LFS=y
  CONFIG_BUSYBOX_CONFIG_FDISK=y
  CONFIG_BUSYBOX_CONFIG_FDISK_SUPPORT_LARGE_DISKS=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_FDISK_WRITABLE=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_GPT_LABEL=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_FDISK_ADVANCED=y
  CONFIG_BUSYBOX_CONFIG_IONICE=y
  CONFIG_BUSYBOX_CONFIG_RENICE=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_VOLUMEID_BTRFS=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_VOLUMEID_F2FS=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_VOLUMEID_LINUXSWAP=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_VOLUMEID_SQUASHFS=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_VOLUMEID_UBIFS=y
  CONFIG_BUSYBOX_CONFIG_TIMEOUT=y
  CONFIG_BUSYBOX_CONFIG_NOHUP=y
  CONFIG_BUSYBOX_CONFIG_FEATURE_DEFAULT_PASSWD_ALGO="sha512"
  # CONFIG_BUSYBOX_CONFIG_ARPING is not set
  # CONFIG_BUSYBOX_CONFIG_PING is not set
  # CONFIG_BUSYBOX_CONFIG_PING6 is not set
  # CONFIG_BUSYBOX_CONFIG_FEATURE_FANCY_PING is not set
  # CONFIG_BUSYBOX_CONFIG_CHPASSWD is not set
  # CONFIG_BUSYBOX_CONFIG_PASSWD is not set
  # CONFIG_BUSYBOX_CONFIG_SU is not set
  CONFIG_BUSYBOX_CONFIG_CHRT=y
  CONFIG_BUSYBOX_CONFIG_TASKSET=y

  # TR-x69 #
  CONFIG_libstrophe-libxml2=y
  # CONFIG_libstrophe-expat is not set
  # CONFIG_MOSQUITTO_BRIDGE_SUPPORT is not set