Show pagesourceOld revisionsBacklinksBack to top × Table of Contents OpenWrt 21.02.0-rc2 - Second Release Candidate - 31 May 2021 Changes between OpenWrt 21.02.0-rc1 and 21.02.0-rc2 Known issues New network configuration syntax LuCI update Software updates Misc changes Device support Highlights in OpenWrt 21.02.0 WPA3 support included by default TLS and HTTPS support included by default Initial DSA support Increased minimum hardware requirements: 8 MB flash, 64 MB RAM New hardware targets Dropped hardware targets ASLR activated Kernel with container support SELinux support Core components update Upgrading to 21.02.0-rc2 Final notes OpenWrt 21.02.0-rc2 - Second Release Candidate - 31 May 2021 _______ ________ __ | |.-----.-----.-----.| | | |.----.| |_ | - || _ | -__| || | | || _|| _| |_______|| __|_____|__|__||________||__| |____| |__| W I R E L E S S F R E E D O M ----------------------------------------------------- OpenWrt 21.02.0-rc2, r16122-c2139eef27 ----------------------------------------------------- The OpenWrt Project is a Linux operating system targeting embedded devices. It is a complete replacement for the vendor-supplied firmware of a wide range of wireless routers and non-network devices. See the Table of Hardware for supported devices. For more information about OpenWrt project organization, see the About OpenWrt pages. An upgrade from OpenWrt 19.07 to OpenWrt 21.02 is supported in many cases with the help of the sysupgrade utility which will also attempt to preserve the configuration. A configuration backup is advised nonetheless when upgrading to OpenWrt 21.02. (see “Upgrading” below). Get OpenWrt Firmware at: https://downloads.openwrt.org/releases/21.02.0-rc2/ Changes between OpenWrt 21.02.0-rc1 and 21.02.0-rc2 The OpenWrt community is proud to announce the second release candidate of the upcoming OpenWrt 21.02 stable version series. It incorporates over 5800 commits since branching the previous OpenWrt 19.07 release and has been under development for about one and a half year. Changes in this release candidate since the previous 21.02.0-rc1 release candidate are: Known issues LuCI network migration tool doesn't migrate custom bridge MAC addresses. Custom device MAC has to be set again manually. New network configuration syntax There have been several changes to the network configuration syntax in /etc/config/network: in config interface, option ifname has been renamed to device (since it refers to a device section) in config device of type bridge, ifname has been renamed to ports for new installs, the generated configuration now creates separate sections for layer 2 (config device) and layer 3 (config interface) configuration The old syntax is still supported to facilitate transition, and there is no automated migration when upgrading. However, the LuCI web interface detects old-style configuration and will propose to migrate it to the new syntax. This is necessary to be able to edit network configuration through LuCI. The new configuration style looks like this: config device option name 'br-lan' option type 'bridge' option macaddr '00:01:02:XX:XX:XX' list ports 'lan1' list ports 'lan2' list ports 'lan3' list ports 'lan4' config interface 'lan' option device 'br-lan' option proto 'static' option ipaddr '192.168.1.1' option netmask '255.255.255.0' option ip6assign '60' config device option name 'eth1' option macaddr '00:01:02:YY:YY:YY' config interface 'wan' option device 'eth1' option proto 'dhcp' config interface 'wan6' option device 'eth1' option proto 'dhcpv6' This example uses DSA with lanX interface names. A non-DSA device would use more classical ethX interface names. LuCI update LuCI has been updated to support the most recent network syntax (and migrate old config files if needed). In some cases migration will take 2 steps. Support for configuring devices (config device UCI sections) was added. It can be used for setting layer 2 options (like MTU and MAC address). It also supports bridge devices (including VLAN tagging). LuCI HTTPS LuCI is now available over HTTPS in addition to HTTP in the default images. After an upgrade from OpenWrt 19.07 to OpenWrt 21.02 unencrypted HTTP requests are redirected to HTTPS. On fresh OpenWrt 21.02 installations they are not redirected. It is possible to activate or deactivate the redirect to HTTPS like this: uci set uhttpd.main.redirect_https=1 # 1 to enable redirect, 0 to disable redirect uci commit uhttpd service uhttpd reload Software updates Linux kernel updated to version 5.4.119 (from 5.4.111 in v21.02.0-rc1) mac80211 updated to version 5.10.34-1 (from 5.10.16-1 in v21.02.0-rc1) mac80211 backport upstream fixes for the new FragAttacks vulnerabilities in 802.11 mt76 updated to latest version dnsmasq updated to version 2.85 (from 2.84 in v21.02.0-rc1) busybox updated to version 1.33.1 (from 1.33.0 in v21.02.0-rc1) Misc changes Linux kernel fix parsing fixed subpartitions Linux kernel Activate FORTIFY_SOURCE for MIPS kernel 5.4 busybox add SRV support to nslookup_lede.c patch busybox disable PREFER_IPV4_ADDRESS openwrt-keyring only copy sign key for 21.02 sdk, imagebuilder unset BINARY_FOLDER and DOWNLOAD_FOLDER in final archives uqmi fix network registration loop Device support Lantiq DSL multiple backports for DSL statistics New devices MikroTik SXTsq 5 ac, MikroTik hAP ac2 Device fixes for ALFA Network devices, Youku YK1, TP-Link AD7200, TP-Link EAP-225, TP-Link TL-WR810N v1, MikroTik RB922UAGS-5HPaCD Highlights in OpenWrt 21.02.0 WPA3 support included by default WPA3 was already supported in 19.07 but it was not provided by the default set of packages in OpenWrt images. With 21.02, all packages necessary to provide WPA3 are installed by default in OpenWrt images. TLS and HTTPS support included by default TLS support is now provided by default in OpenWrt images including the trusted CA certificates from Mozilla. It means that wget and opkg now support fetching resources over HTTPS out-of-the-box. The opkg download server is accessed through HTTPS by default. OpenWrt switched from mbed TLS to wolfSSL as the default SSL library, mbed TLS and OpenSSL are still available and can be installed manually. Initial DSA support DSA stands for Distributed Switch Architecture and is the Linux standard to deal with configurable Ethernet switches. OpenWrt 21.02 comes with initial support for DSA, which replaces the swconfig system that OpenWrt was using up until now. Not all targets have been ported: some devices still use swconfig while some devices already switched to DSA. This is a significant change to how switch ports and VLANs are managed. As such, sysupgrade will not be able to convert existing swconfig configuration to DSA configuration (see “Upgrading” below). The following targets are using a switch managed with DSA in OpenWrt 21.02: ath79 (only TP-Link TL-WR941ND) bcm4908 gemini kirkwood mediatek (most boards) mvebu octeon ramips (mt7621 subtarget only) realtek Increased minimum hardware requirements: 8 MB flash, 64 MB RAM Due to new features being introduced and the general size increase of the Linux kernel, devices now need at least 8 MB of flash and 64 MB of RAM to run a default build of OpenWrt. More flash space is recommended for extensibility, see 8/64 warning It is still possible to build custom OpenWrt images (e.g. using the ImageBuilder) that may fit devices with 4 MB of flash or 32 MB of RAM. However, the level of functionality will be reduced and there is no guarantee to stability. See OpenWrt on 4/32 devices for more details and guidance. New hardware targets A new realtek target has been added, which is often found in managed switches. As a result, it is now possible to run OpenWrt on devices with a significant number of Ethernet ports. See supported devices for realtek. In addition, new bcm4908 and rockchip targets have been added. Support for many new boards was added to the existing targets. Dropped hardware targets The ar71xx target was deprecated in OpenWrt 19.07 and has been gradually replaced by ath79, see ar71xx-ath79 migration. With OpenWrt 21.02, the ar71xx has now been removed and users must use ath79 instead. If you are still running with the ar71xx target, it is recommended to reinstall OpenWrt 21.02 from scratch. Users already on the ath79 target can use sysupgrade to upgrade to OpenWrt 21.02. Other targets were also removed: cns3xxx, rb532 and samsung. ASLR activated Network exposed user space applications are linked as position-independent executable (PIE) to allow full Address Space Layout Randomization (ASLR) support. This makes it harder for attackers to exploit OpenWrt. See Hardening build options for more details. Kernel with container support Multiple Linux kernel compile options, needed for Linux Containers (LXC) and procd-ujail are activated by default for most targets. This allows to use LXC and ujail with the normal release builds. SELinux support It is possible to compile OpenWrt with SELinux support. This is currently not activated by default. Core components update : this should be updated for the final 21.02.0 release. Core components have the following versions in 21.02.0: Updated toolchain: musl libc 1.1.24 glibc 2.33 gcc 8.4.0 binutils 2.34 Updated Linux kernel 5.4.119 for all targets Network: hostapd 2020-06-08, dnsmasq 2.85, dropbear 2020.81 cfg80211/mac80211 from kernel 5.10.34 wireguard backport from upstream Linux kernel System userland: busybox 1.33.1 In addition to the listed applications, many others were also updated. Upgrading to 21.02.0-rc2 Sysupgrade can be used to upgrade a device from 19.07 to 21.02, and configuration will be preserved in most cases. Sysupgrade from 18.06 to 21.02 is not supported. There is no migration path for targets that switched from swconfig to DSA. In that case, sysupgrade will refuse to proceed with an appropriate error message: Image version mismatch. image 1.1 device 1.0 Please wipe config during upgrade (force required) or reinstall. Config cannot be migrated from swconfig to DSA Image check failed The default root file system partition size changed for targets/devices relying on booting from mass storage (HDD, USB flash, SD card, etc.), so MBR will change and any additional partition will be deleted when sysupgrading. Final notes As always, a big thank you goes to all our active package maintainers, testers, documenters, and supporters. Have fun! The OpenWrt Community This website uses cookies. By using the website, you agree with storing cookies on your computer. Also you acknowledge that you have read and understand our Privacy Policy. If you do not agree leave the website.OKMore information about cookies Last modified: 2021/06/02 16:46by zorun