https://blog-test-1bi.pages.dev/tags/openwrt/Recent content in OpenWRT on Canghai's BlogHugozhSat, 02 Sep 2023 00:00:00 +0000https://blog-test-1bi.pages.dev/posts/learn/230902-docker-install-openwrt/Sat, 02 Sep 2023 00:00:00 +0000https://blog-test-1bi.pages.dev/posts/learn/230902-docker-install-openwrt/<p>旁路由是在不改变网络架构的情况下最方便的升级网络环境的方式，OpenWRT社区生态丰富，基本可以满足你的绝大部分上网需求。</p> <h4 id="自制openwrt固件">自制OpenWRT固件</h4> <ul> <li><strong>OpenWRT</strong>作为一个成熟的路由系统，基本适配市面上绝大部分设备，不同人编译的固件搭载了不同的插件。这里推荐使用<strong>Github Action</strong>进行固件的自编译，选择需要的插件，编译一个适合自己的固件，具体过程这里就不过多介绍了。</li> <li>你也可以试试开源项目<a href="https://openwrt.ai">OpenWRT.ai</a>，进行固件的自编译，这里给出OpenWRT.ai默认加载的插件，可以选择性精简。</li> </ul> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="o">-</span><span class="n">luci</span><span class="o">-</span><span class="n">app</span><span class="o">-</span><span class="n">gpsysupgrade</span> <span class="o">-</span><span class="n">luci</span><span class="o">-</span><span class="n">app</span><span class="o">-</span><span class="n">quickstart</span> <span class="o">-</span><span class="n">luci</span><span class="o">-</span><span class="n">app</span><span class="o">-</span><span class="n">firewall</span> <span class="o">-</span><span class="n">luci</span><span class="o">-</span><span class="n">app</span><span class="o">-</span><span class="n">advanced</span> <span class="o">-</span><span class="n">luci</span><span class="o">-</span><span class="n">app</span><span class="o">-</span><span class="n">autoreboot</span> <span class="o">-</span><span class="n">luci</span><span class="o">-</span><span class="n">app</span><span class="o">-</span><span class="n">cpufreq</span> <span class="o">-</span><span class="n">luci</span><span class="o">-</span><span class="n">app</span><span class="o">-</span><span class="n">upnp</span> <span class="o">-</span><span class="n">luci</span><span class="o">-</span><span class="n">app</span><span class="o">-</span><span class="n">fan</span> <span class="o">-</span><span class="n">luci</span><span class="o">-</span><span class="n">app</span><span class="o">-</span><span class="n">wizard</span> </span></span></code></pre></div><h4 id="上传镜像至dockerhub">上传镜像至DockerHub</h4> <ul> <li><strong>wget</strong>命令将编译好的镜像下载至服务器中，并使用<strong>mv</strong>命令改名</li> <li>解压文件</li> </ul> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">gzip</span> <span class="o">-</span><span class="n">d</span> <span class="n">openwrt</span><span class="p">.</span><span class="n">img</span><span class="p">.</span><span class="n">gz</span> </span></span></code></pre></div><ul> <li>挂载镜像</li> </ul> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">modprobe</span> <span class="n">nbd</span> </span></span></code></pre></div><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">qemu</span><span class="o">-</span><span class="n">nbd</span> <span class="o">-</span><span class="n">c</span> <span class="o">/</span><span class="n">dev</span><span class="o">/</span><span class="n">nbd0</span> <span class="o">-</span><span class="n">f</span> <span class="n">raw</span> <span class="n">openwrt</span><span class="p">.</span><span class="n">img</span> </span></span></code></pre></div><ul> <li>打包镜像</li> </ul> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">mkdir</span> <span class="o">/</span><span class="n">opt</span><span class="o">/</span><span class="n">openwrt</span> </span></span></code></pre></div><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">mount</span> <span class="o">/</span><span class="n">dev</span><span class="o">/</span><span class="n">nbd0p2</span> <span class="o">/</span><span class="n">opt</span><span class="o">/</span><span class="n">openwrt</span> </span></span></code></pre></div><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">cd</span> <span class="o">/</span><span class="n">opt</span><span class="o">/</span><span class="n">openwrt</span> </span></span></code></pre></div><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">tar</span> <span class="o">-</span><span class="n">czvf</span> <span class="o">/</span><span class="n">opt</span><span class="o">/</span><span class="n">openwrt</span><span class="o">/</span><span class="n">openwrt</span><span class="p">.</span><span class="n">rootfs</span><span class="p">.</span><span class="n">tar</span><span class="p">.</span><span class="n">gz</span> <span class="o">*</span> </span></span></code></pre></div><ul> <li>导入镜像，<code>tag</code>部分注意修改</li> </ul> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">docker</span> <span class="n">import</span> <span class="n">openwrt</span><span class="p">.</span><span class="n">rootfs</span><span class="p">.</span><span class="n">tar</span><span class="p">.</span><span class="n">gz</span> <span class="n">user</span><span class="o">/</span><span class="nl">app</span><span class="p">:</span><span class="n">latest</span> </span></span></code></pre></div><ul> <li>通过<code>docker login</code>登录DockerHub</li> <li>推送镜像</li> </ul> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">docker</span> <span class="n">push</span> <span class="n">user</span><span class="o">/</span><span class="nl">app</span><span class="p">:</span><span class="n">latest</span> </span></span></code></pre></div><h4 id="部署openwrt">部署OpenWRT</h4> <ul> <li>开启网卡混杂模式</li> </ul> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">ip</span> <span class="n">link</span> <span class="n">set</span> <span class="n">eth0</span> <span class="n">promisc</span> <span class="n">on</span> </span></span></code></pre></div><ul> <li>(Optional)也可以通过在<code>/etc/rc.local</code>中写入命令，永久开启网卡混杂模式</li> </ul> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">ip</span> <span class="n">link</span> <span class="n">set</span> <span class="n">eth0</span> <span class="n">promisc</span> <span class="n">on</span> </span></span></code></pre></div><ul> <li>创建Docker网络，具体信息请根据实际情况修改，容器内需<strong>IPV6</strong>支持，需要增加相关信息</li> </ul> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">docker</span> <span class="n">network</span> <span class="n">create</span> <span class="o">-</span><span class="n">d</span> <span class="n">macvlan</span> <span class="o">--</span><span class="n">subnet</span><span class="o">=</span><span class="mf">192.168.10.0</span><span class="o">/</span><span class="mi">24</span> <span class="o">--</span><span class="n">gateway</span><span class="o">=</span><span class="mf">192.168.10.1</span> <span class="o">-</span><span class="n">o</span> <span class="n">parent</span><span class="o">=</span><span class="n">eth0</span> <span class="n">openwrt</span> </span></span></code></pre></div><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">docker</span> <span class="n">network</span> <span class="n">create</span> <span class="o">-</span><span class="n">d</span> <span class="n">macvlan</span> <span class="o">--</span><span class="n">subnet</span><span class="o">=</span><span class="mf">192.168.10.0</span><span class="o">/</span><span class="mi">24</span> <span class="o">--</span><span class="n">gateway</span><span class="o">=</span><span class="mf">192.168.10.1</span> <span class="o">--</span><span class="n">subnet</span><span class="o">=</span><span class="n">fe80</span><span class="o">::/</span><span class="mi">16</span> <span class="o">--</span><span class="n">gateway</span><span class="o">=</span><span class="n">fe80</span><span class="o">::</span><span class="mi">1</span> <span class="o">-</span><span class="n">o</span> <span class="n">parent</span><span class="o">=</span><span class="n">eth0</span> <span class="n">openwrt</span> </span></span></code></pre></div><ul> <li>拉取镜像</li> </ul> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">docker</span> <span class="n">run</span> <span class="o">-</span><span class="n">d</span> \ </span></span><span class="line"><span class="cl"> <span class="o">--</span><span class="n">restart</span> <span class="n">always</span> \ </span></span><span class="line"><span class="cl"> <span class="o">--</span><span class="n">name</span> <span class="n">openwrt</span> \ </span></span><span class="line"><span class="cl"> <span class="o">--</span><span class="n">network</span> <span class="n">openwrt</span> \ </span></span><span class="line"><span class="cl"> <span class="o">--</span><span class="n">privileged</span><span class="o">=</span><span class="nb">true</span> \ </span></span><span class="line"><span class="cl"> <span class="n">user</span><span class="o">/</span><span class="nl">app</span><span class="p">:</span><span class="n">latest</span> \ </span></span><span class="line"><span class="cl"> <span class="o">/</span><span class="n">sbin</span><span class="o">/</span><span class="n">init</span> </span></span></code></pre></div><ul> <li>(Optional)如需<strong>IPV6</strong>支持需要在<code>sysctl.conf</code>中添加如下字段：</li> </ul> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">docker</span> <span class="n">exec</span> <span class="o">-</span><span class="n">it</span> <span class="n">openwrt</span> <span class="n">bash</span> </span></span></code></pre></div><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">vi</span> <span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">sysctl</span><span class="p">.</span><span class="n">conf</span> </span></span></code></pre></div><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">net</span><span class="p">.</span><span class="n">ipv6</span><span class="p">.</span><span class="n">conf</span><span class="p">.</span><span class="n">all</span><span class="p">.</span><span class="n">disable_ipv6</span><span class="o">=</span><span class="mi">0</span> </span></span><span class="line"><span class="cl"><span class="n">net</span><span class="p">.</span><span class="n">ipv6</span><span class="p">.</span><span class="n">conf</span><span class="p">.</span><span class="k">default</span><span class="p">.</span><span class="n">disable_ipv6</span><span class="o">=</span><span class="mi">0</span> </span></span><span class="line"><span class="cl"><span class="n">net</span><span class="p">.</span><span class="n">ipv6</span><span class="p">.</span><span class="n">conf</span><span class="p">.</span><span class="k">default</span><span class="p">.</span><span class="n">accept_ra</span><span class="o">=</span><span class="mi">2</span> </span></span><span class="line"><span class="cl"><span class="n">net</span><span class="p">.</span><span class="n">ipv6</span><span class="p">.</span><span class="n">conf</span><span class="p">.</span><span class="n">all</span><span class="p">.</span><span class="n">accept_ra</span><span class="o">=</span><span class="mi">2</span> </span></span></code></pre></div><ul> <li>(Optional)如编译时选择的OpenWRT地址不在局域网网段内需自行修改<code>ipaddr</code></li> </ul> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">docker</span> <span class="n">exec</span> <span class="o">-</span><span class="n">it</span> <span class="n">openwrt</span> <span class="n">bash</span> </span></span></code></pre></div><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-c" data-lang="c"><span class="line"><span class="cl"><span class="n">vi</span> <span class="o">/</span><span class="n">etc</span><span class="o">/</span><span class="n">config</span><span class="o">/</span><span class="n">network</span> </span></span></code></pre></div><ul> <li>重启后通过填写的局域网地址即可打开OpenWRT后台界面</li> </ul>