https://blog-old.pages.dev/tags/openwrt/Recent content in OpenWRT on Canghai's BlogHugozhSat, 02 Sep 2023 00:00:00 +0000https://blog-old.pages.dev/posts/learn/230902-docker-install-openwrt/Sat, 02 Sep 2023 00:00:00 +0000https://blog-old.pages.dev/posts/learn/230902-docker-install-openwrt/<p>旁路由是在不改变网络架构的情况下最方便的升级网络环境的方式，OpenWRT社区生态丰富，基本可以满足你的绝大部分上网需求。</p> <h4 id="自制openwrt固件">自制OpenWRT固件</h4> <ul> <li><strong>OpenWRT</strong>作为一个成熟的路由系统，基本适配市面上绝大部分设备，不同人编译的固件搭载了不同的插件。这里推荐使用<strong>Github Action</strong>进行固件的自编译，选择需要的插件，编译一个适合自己的固件，具体过程这里就不过多介绍了。</li> <li>你也可以试试开源项目<a href="https://openwrt.ai" target="_blank" rel="noopener" style="color:#42b983";>OpenWRT.ai</a>，进行固件的自编译，这里给出OpenWRT.ai默认加载的插件，可以选择性精简。</li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span><span style="color:#f92672">-</span>luci<span style="color:#f92672">-</span>app<span style="color:#f92672">-</span>gpsysupgrade <span style="color:#f92672">-</span>luci<span style="color:#f92672">-</span>app<span style="color:#f92672">-</span>quickstart <span style="color:#f92672">-</span>luci<span style="color:#f92672">-</span>app<span style="color:#f92672">-</span>firewall <span style="color:#f92672">-</span>luci<span style="color:#f92672">-</span>app<span style="color:#f92672">-</span>advanced <span style="color:#f92672">-</span>luci<span style="color:#f92672">-</span>app<span style="color:#f92672">-</span>autoreboot <span style="color:#f92672">-</span>luci<span style="color:#f92672">-</span>app<span style="color:#f92672">-</span>cpufreq <span style="color:#f92672">-</span>luci<span style="color:#f92672">-</span>app<span style="color:#f92672">-</span>upnp <span style="color:#f92672">-</span>luci<span style="color:#f92672">-</span>app<span style="color:#f92672">-</span>fan <span style="color:#f92672">-</span>luci<span style="color:#f92672">-</span>app<span style="color:#f92672">-</span>wizard </span></span></code></pre></div><h4 id="上传镜像至dockerhub">上传镜像至DockerHub</h4> <ul> <li><strong>wget</strong>命令将编译好的镜像下载至服务器中，并使用<strong>mv</strong>命令改名</li> <li>解压文件</li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>gzip <span style="color:#f92672">-</span>d openwrt.img.gz </span></span></code></pre></div><ul> <li>挂载镜像</li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>modprobe nbd </span></span></code></pre></div><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>qemu<span style="color:#f92672">-</span>nbd <span style="color:#f92672">-</span>c <span style="color:#f92672">/</span>dev<span style="color:#f92672">/</span>nbd0 <span style="color:#f92672">-</span>f raw openwrt.img </span></span></code></pre></div><ul> <li>打包镜像</li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>mkdir <span style="color:#f92672">/</span>opt<span style="color:#f92672">/</span>openwrt </span></span></code></pre></div><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>mount <span style="color:#f92672">/</span>dev<span style="color:#f92672">/</span>nbd0p2 <span style="color:#f92672">/</span>opt<span style="color:#f92672">/</span>openwrt </span></span></code></pre></div><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>cd <span style="color:#f92672">/</span>opt<span style="color:#f92672">/</span>openwrt </span></span></code></pre></div><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>tar <span style="color:#f92672">-</span>czvf <span style="color:#f92672">/</span>opt<span style="color:#f92672">/</span>openwrt<span style="color:#f92672">/</span>openwrt.rootfs.tar.gz <span style="color:#f92672">*</span> </span></span></code></pre></div><ul> <li>导入镜像，<code>tag</code>部分注意修改</li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>docker import openwrt.rootfs.tar.gz user<span style="color:#f92672">/</span>app:latest </span></span></code></pre></div><ul> <li>通过<code>docker login</code>登录DockerHub</li> <li>推送镜像</li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>docker push user<span style="color:#f92672">/</span>app:latest </span></span></code></pre></div><h4 id="部署openwrt">部署OpenWRT</h4> <ul> <li>开启网卡混杂模式</li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>ip link set eth0 promisc on </span></span></code></pre></div><ul> <li>(Optional)也可以通过在<code>/etc/rc.local</code>中写入命令，永久开启网卡混杂模式</li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>ip link set eth0 promisc on </span></span></code></pre></div><ul> <li>创建Docker网络，具体信息请根据实际情况修改，容器内需<strong>IPV6</strong>支持，需要增加相关信息</li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>docker network create <span style="color:#f92672">-</span>d macvlan <span style="color:#f92672">--</span>subnet<span style="color:#f92672">=</span><span style="color:#ae81ff">192.168.10.0</span><span style="color:#f92672">/</span><span style="color:#ae81ff">24</span> <span style="color:#f92672">--</span>gateway<span style="color:#f92672">=</span><span style="color:#ae81ff">192.168.10.1</span> <span style="color:#f92672">-</span>o parent<span style="color:#f92672">=</span>eth0 openwrt </span></span></code></pre></div><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>docker network create <span style="color:#f92672">-</span>d macvlan <span style="color:#f92672">--</span>subnet<span style="color:#f92672">=</span><span style="color:#ae81ff">192.168.10.0</span><span style="color:#f92672">/</span><span style="color:#ae81ff">24</span> <span style="color:#f92672">--</span>gateway<span style="color:#f92672">=</span><span style="color:#ae81ff">192.168.10.1</span> <span style="color:#f92672">--</span>subnet<span style="color:#f92672">=</span>fe80<span style="color:#f92672">::/</span><span style="color:#ae81ff">16</span> <span style="color:#f92672">--</span>gateway<span style="color:#f92672">=</span>fe80<span style="color:#f92672">::</span><span style="color:#ae81ff">1</span> <span style="color:#f92672">-</span>o parent<span style="color:#f92672">=</span>eth0 openwrt </span></span></code></pre></div><ul> <li>拉取镜像</li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>docker run <span style="color:#f92672">-</span>d \ </span></span><span style="display:flex;"><span> <span style="color:#f92672">--</span>restart always \ </span></span><span style="display:flex;"><span> <span style="color:#f92672">--</span>name openwrt \ </span></span><span style="display:flex;"><span> <span style="color:#f92672">--</span>network openwrt \ </span></span><span style="display:flex;"><span> <span style="color:#f92672">--</span>privileged<span style="color:#f92672">=</span>true \ </span></span><span style="display:flex;"><span> user<span style="color:#f92672">/</span>app:latest \ </span></span><span style="display:flex;"><span> <span style="color:#f92672">/</span>sbin<span style="color:#f92672">/</span>init </span></span></code></pre></div><ul> <li>(Optional)如需<strong>IPV6</strong>支持需要在<code>sysctl.conf</code>中添加如下字段：</li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>docker exec <span style="color:#f92672">-</span>it openwrt bash </span></span></code></pre></div><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>vi <span style="color:#f92672">/</span>etc<span style="color:#f92672">/</span>sysctl.conf </span></span></code></pre></div><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>net.ipv6.conf.all.disable_ipv6<span style="color:#f92672">=</span><span style="color:#ae81ff">0</span> </span></span><span style="display:flex;"><span>net.ipv6.conf.<span style="color:#66d9ef">default</span>.disable_ipv6<span style="color:#f92672">=</span><span style="color:#ae81ff">0</span> </span></span><span style="display:flex;"><span>net.ipv6.conf.<span style="color:#66d9ef">default</span>.accept_ra<span style="color:#f92672">=</span><span style="color:#ae81ff">2</span> </span></span><span style="display:flex;"><span>net.ipv6.conf.all.accept_ra<span style="color:#f92672">=</span><span style="color:#ae81ff">2</span> </span></span></code></pre></div><ul> <li>(Optional)如编译时选择的OpenWRT地址不在局域网网段内需自行修改<code>ipaddr</code></li> </ul> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>docker exec <span style="color:#f92672">-</span>it openwrt bash </span></span></code></pre></div><div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code class="language-c" data-lang="c"><span style="display:flex;"><span>vi <span style="color:#f92672">/</span>etc<span style="color:#f92672">/</span>config<span style="color:#f92672">/</span>network </span></span></code></pre></div><ul> <li>重启后通过填写的局域网地址即可打开OpenWRT后台界面</li> </ul>