wireguard 🔥 HowTo - OpenWRT with any TorGuard's Wireguard IP

January 15

Ok thanks.

About github, can't find where to reach you via message or others...

January 15

3 minutes ago, James8078 said:

Ok thanks.

About github, can't find where to reach you via message or others...

[email protected] is email for that account to which you can send email, but honestly, I really check it only few times in a week (or a month), I guess if you have any questions or issues you can always open here a thread or on github an issue where it is not only me who can reply and help.

If you send me email, best is if you encrypt your message with gpg, you can find public key for [email protected], if not, it is in the attachment of this post.

If emails do not come from known sender and are not encrypted I normally do not bother a lot to read it.

[email protected]_PublicKey_ASCII_D761EE2E5E9790FD45B58224E4AA16A7442E2431.asc

January 16

On 1/15/2021 at 11:31 AM, 19807409 said:

if not, it is in the attachment of this post.

If emails do not come from known sender and are not encrypted I normally do not bother a lot to read it.

[email protected]_PublicKey_ASCII_D761EE2E5E9790FD45B58224E4AA16A7442E2431.ascUnavailable

the attchment here is working or not? seems unavailable?

January 16

3 minutes ago, James8078 said:

the attchment here is working or not? seems unavailable?

Indeed, strange, here it is in cleartext, copy save it as pubkey.asc:

January 17

2 hours ago, 19807409 said:

Indeed, strange, here it is in cleartext, copy save it as pubkey.asc:

ok good, I guess I can use FlowCrypt , to do that?

January 17

9 hours ago, James8078 said:

ok good, I guess I can use FlowCrypt , to do that?

For gmail in chrome and firefox based browsers use mailvelope: https://www.mailvelope.com/

Latest thunderbird has gpg support included if you use it.

For ubuntu/debian and most other linux distors gpg is included as well as app. You can install additionally some other tools like kleopatra.

For windows users, you can install this: https://www.gpg4win.org/download.html

You could also use keybase or similar services.

For your question about flashing:

Please read documentation about it as it explains everything pretty well, also things which I write now:

How to flash with Luci with keeping the settings: https://openwrt.org/docs/guide-quick-start/sysupgrade.luci
How to flash with CLI: https://openwrt.org/docs/guide-user/installation/sysupgrade.cli

So, first download image and check the hash, if hash is ok then flash your image.

# cd to tmp, if you need to free up more space, read about it on openwrt wiki for which you have a link above
cd /tmp

# Download image
wget https://downloads.openwrt.org/snapshots/targets/mvebu/cortexa9/openwrt-mvebu-cortexa9-linksys_wrt3200acm-squashfs-sysupgrade.bin

# Download hashsums file
wget https://downloads.openwrt.org/snapshots/targets/mvebu/cortexa9/sha256sums

# check hashsums
sha256sum -c sha256sums 2> /dev/null | grep OK

if hashsum is ok, you will see something like this and can flash:

openwrt-mvebu-cortexa9-linksys_wrt3200acm-squashfs-sysupgrade.bin: OK

Flash preserving your settings:

sysupgrade -v /tmp/openwrt-mvebu-cortexa9-linksys_wrt3200acm-squashfs-sysupgrade.bin

You can add the `-n` option if you DO NOT want to preserve any old configuration files and configure upgraded device from clean state (network/system settings will be lost as well)

sysupgrade -n /tmp/openwrt-mvebu-cortexa9-linksys_wrt3200acm-squashfs-sysupgrade.bin

Optionaly (you dont need it), If you want to create a /etc/backup/installed_packages.txt file which lists all your packages and where they are stored (you dont need it but you can if you want to have backup of those):

sysupgrade -k /tmp/openwrt-mvebu-cortexa9-linksys_wrt3200acm-squashfs-sysupgrade.bin

Wait until your router is flashed and ssh to your router

ssh YourRouterIP

then update and restore opkg (all your installed packages):

opkg update
opkg restore

Reboot

reboot -f

You asked also how it could be done daily, above you can see it, there are several ways how you can run a job which will check if there is a new image and flash it restoring all your settings, but this is something that you should not automate unless it is a development machine/router which is not used by other users. It is very rare, but it can happen that once in a year there is one bad image which would cause you troubles and if you update every single release (daily) then your chances running into that problem is 100% if one exists.

January 18

@

19807409

Im not able to open your mails, it says that I need keys and I dont have the good one (mailenvelope)

On 1/15/2021 at 11:31 AM, 19807409 said:

[email protected] is email for that account to which you can send email, but honestly, I really check it only few times in a week (or a month), I guess if you have any questions or issues you can always open here a thread or on github an issue where it is not only me who can reply and help.

If you send me email, best is if you encrypt your message with gpg, you can find public key for [email protected], if not, it is in the attachment of this post.

If emails do not come from known sender and are not encrypted I normally do not bother a lot to read it.

[email protected]_PublicKey_ASCII_D761EE2E5E9790FD45B58224E4AA16A7442E2431.ascUnavailable

January 18

12 minutes ago, James8078 said:

Im not able to open your mails, it says that I need keys and I dont have the good one (mailenvelope)

the email you sent had attachment, you public key. You used FlowCrypt to encrypt it, by that I would assume that you imported your private key into FlowCrypt.

-----BEGIN PGP MESSAGE-----
Version: FlowCrypt Email Encryption 8.0.1
Comment: Seamlessly send and receive encrypted email

Also, you must have created your gpg key. If you created it on debian, then start Passwords application and there you can export your private key.

When you got your private key, then import it to mailvelope and you will be able to decrypt.

If you got confused, you did not use this key anyway for anything except sending that one email. You can create a new key with passwords utility in debian/ubuntu, for windows with kleopatra (gpg4win package includes it).

If you want to create it in terminal, then you can run as example:

gpg --full-generate

It is always good idea to read documentation about those things, save also a link of some gpg cheat sheet (as example one by duckduckgo)

January 22

On 1/17/2021 at 4:53 AM, 19807409 said:
sysupgrade -k /tmp/openwrt-mvebu-cortexa9-linksys_wrt3200acm-squashfs-sysupgrade.bin
Wait until your router is flashed and ssh to your router
ssh YourRouterIP
then update and restore opkg (all your installed packages):
opkg update
opkg restore
Reboot
reboot -f
s

hi,

when you wrote : opkg restore (all packages) you mean that I need to restore all with commands? Like
opkg restore adblock banip openvpn dnscrypt proxy 2 etc etc? Cause when I did it, after ''opkg restore'' Ive had in terminal kind of ''okpk command line help''

January 22

4 hours ago, James8078 said:

when you wrote : opkg restore (all packages) you mean that I need to restore all with commands?

by that I mean just opkg restore without anything. You seem not to have followed instructions: https://openwrt.org/docs/guide-user/installation/generic.sysupgrade

If opkg backup and opkg restore are not available, then you do not have that script which I wrote you should install extras: https://openwrt.org/docs/guide-user/additional-software/opkg#instructions

opkg restore

will restore all your packages.

PS: congrats for decrypting

January 22

7 hours ago, 19807409 said:
by that I mean just opkg restore without anything. You seem not to have followed instructions: https://openwrt.org/docs/guide-user/installation/generic.sysupgrade

If opkg backup and opkg restore are not available, then you do not have that script which I wrote you should install extras: https://openwrt.org/docs/guide-user/additional-software/opkg#instructions
opkg restore
will restore all your packages.

PS: congrats for decrypting

everything worked fine during process, but in your case, if you do ''restore'' what do you see in shell sfter that?

January 22

7 hours ago, 19807409 said:

If opkg backup and opkg restore are not available, then you do not have that script which I wrote you should install extras: https://openwrt.org/docs/guide-user/additional-software/opkg#instructions

can I paste all those commands form the link and put in terminal? thats it

January 22

39 minutes ago, James8078 said:

can I paste all those commands form the link and put in terminal? thats it

yes

January 22

44 minutes ago, James8078 said:

everything worked fine during process, but in your case, if you do ''restore'' what do you see in shell sfter that?

I see all packages which I had installed being installed.

January 22

1 hour ago, 19807409 said:

I see all packages which I had installed being installed.

Ok on my side it wasn't.

I will try the Cli you gave me as link.

I do that when I upgrade or i can paste that script anytime, like now?

January 22

2 minutes ago, James8078 said:

Ok on my side it wasn't.

I will try the Cli you gave me as link.

I do that when I upgrade or i can paste that script anytime, like now?

Its quite straight forward, paste all of this simply in terminal:

mkdir -p /etc/profile.d
cat  << "EOF_cat" > /etc/profile.d/opkg.sh
# Wrap Opkg calls
opkg() {
    local OPKG_CMD="${1}"
    local OPKG_CMDS=" backup restore import uci destlist proc allupgrade newconf "
    if echo "${OPKG_CMDS}" | grep -q -e "\s${OPKG_CMD}\s"
    then opkg_"${@}"
    else command opkg "${@}"
    fi
}
 
# Initialize Opkg configuration
opkg_uci() {
    if ! uci -q show opkg > /dev/null
    then uci import opkg < /dev/null
    fi
    uci -q batch << EOF
delete opkg.overlay
delete opkg.rom
delete opkg.rwm
set opkg.overlay=list
set opkg.rom=list
set opkg.rwm=list
set opkg.custom=list
$(sed -r -e "s/^(.*)\s(.*)$/add_list opkg.\2.pkg=\1/")
commit opkg
EOF
}
 
# Import Opkg configuration from sysupgrade backup
opkg_import() {
    local OPKG_BACK="${1:-/etc/backup/installed_packages.txt}"
    sed -e "s/\sunknown$/\trwm/" "${OPKG_BACK}" | opkg_uci
}
 
# Back up the list of installed packages
opkg_backup() {
    opkg_destlist | opkg_uci
}
 
# Restore packages from the list
opkg_restore() {
    local OPKG_LIST="${1:-overlay}"
    local OPKG_PKGS="$(uci get opkg."${OPKG_LIST}".pkg | sed -e "s/\s/\n/g")"
    local OPKG_INST="$(mktemp -t opkg.XXXXXX)"
    local OPKG_DEL="$(mktemp -t opkg.XXXXXX)"
    local OPKG_ADD="$(mktemp -t opkg.XXXXXX)"
    opkg list-installed | sed -e "s/\s.*$//" > "${OPKG_INST}"
    echo "${OPKG_PKGS}" | sed -n -e "s/^-//p" > "${OPKG_DEL}"
    echo "${OPKG_PKGS}" | sed -e "/^-/d" > "${OPKG_ADD}"
    opkg_proc remove $(grep -x -f "${OPKG_INST}" "${OPKG_DEL}")
    opkg_proc install $(grep -v -x -f "${OPKG_INST}" "${OPKG_ADD}")
    rm -f "${OPKG_INST}" "${OPKG_DEL}" "${OPKG_ADD}"
}
 
# List packages by destination
opkg_destlist() {
    find /usr/lib/opkg/info -name "*.control" "(" \
    "(" -exec test -f /rom/{} ";" -exec echo {} rom ";" ")" -o \
    "(" -exec test -f /overlay/upper/{} ";" -exec echo {} overlay ";" ")" -o \
    "(" -exec echo {} rwm ";" ")" ")" | sed -e "s/.*\///;s/\.control\s/\t/"
}
 
# Process packages one by one
opkg_proc() {
    local OPKG_PKG=""
    local OPKG_CMD="${1:?}"
    if [ -z "${2}" ]
    then local OPKG_PKGS=""
    else local OPKG_PKGS="${@#* }"
    fi
    for OPKG_PKG in ${OPKG_PKGS}
    do opkg --force-depends "${OPKG_CMD}" "${OPKG_PKG}"
    done
}
 
# Upgrade all installed packages
opkg_allupgrade() {
    local OPKG_DEST="${1:-.*}"
    local OPKG_INST="$(mktemp -t opkg.XXXXXX)"
    local OPKG_UPGR="$(mktemp -t opkg.XXXXXX)"
    opkg_destlist | sed -n -e "s/\s${OPKG_DEST}$//p" > "${OPKG_INST}"
    opkg list-upgradable | sed -e "s/\s.*$//" > "${OPKG_UPGR}"
    opkg_proc upgrade $(grep -x -f "${OPKG_INST}" "${OPKG_UPGR}")
    rm -f "${OPKG_INST}" "${OPKG_UPGR}"
}
 
# Find new configurations
opkg_newconf() {
    find /etc -name "*-opkg"
}
EOF_cat
. /etc/profile

that would be it, now run opkg backup, firmware upgrade, on next book opkg restore, if opkg restore is not availble, then paste again the code above which simply creates /etc/profile.d/opkg.sh script.

January 22

If that file is not available after flashing, then add it to sysupgrade.conf:

/etc/profile.d/opkg.sh

and it will be available.

January 23

another build created but I still have to install Luci app via ssh , I dont know why, I choose Luci app in ''make menuconfig'' during my building but I need to install anyway..

January 23

On 1/22/2021 at 11:25 AM, 19807409 said:
If that file is not available after flashing, then add it to sysupgrade.conf:
/etc/profile.d/opkg.sh
and it will be available.

[email protected]:~# opkg restore
uci: Entry not found

January 24

On 1/23/2021 at 5:46 AM, James8078 said:

another build created but I still have to install Luci app via ssh , I dont know why, I choose Luci app in ''make menuconfig'' during my building but I need to install anyway..

I already explained it in several posts. I do not know what and why you build and with which settings, for that help you should go to openwrt, once again, I suggest and suggested you to use snapshot images and not to compile. You probably added luci modified, but again, this would be fully offtopic here to talk/explain about how to build openwrt images, especially as it is done daily and found under snapshots as well as those online are upgradeable and your compiled is not compatible to them.

I posted you links to sysupgrade but your questions tell me that you did not read it which you should do. Sysupgrade documentation explains you all what I write and wrote in details and by that I feel it is a waste of time to explain what is written there if one can read it up.

Read and run this script (upgradefw-wrt3200acm.zip in the attachment) and inspect it and how it works and what it does. It will flash your router.

Before you run it, add tginstall, opkg backup script and other things which you might need to /etc/sysupgrade.conf

# if this script IS NOT available after reboot, then delete comment sign, if it is available, leave it as it is or delete
# /etc/profile.d/opkg.sh
# torguard and tgapi
/etc/torguard/
/etc/config/torguard
/etc/init.d/tgapi
/usr/bin/tgapitest
/usr/bin/tginit
/usr/bin/tgsetup
/usr/bin/tginit-uci-basic
/usr/bin/tguninstall
/usr/bin/tgfunctions
/usr/bin/tginstall
/usr/bin/tgupgrade
# root folder
/root/

save upgradefw on your router, lets say as /root/bin/upgradefw. It will create restore script in /root/bin/restore (that is why I included /root in sysupgrade.conf)

/root/bin/upgradefw

and make it executable with

chmod +x /root/bin/upgradefw

Thats it, now you can upgrade only firmware and then manually restore. In my example, I run those commands from my notebook, this is just a scratch, as example, you can add a check for when your device gets up so that waiting 240 seconds can be skipped and done automatically:

#!/bin/sh
LOG="upgradefw.log"
ROUTERIP="IPOFYOURROUTER"
ssh [email protected]${ROUTERIP} "/root/bin/upgradefw" | tee ${LOG};
echo "Wait 240 seconds until router reboots" && sleep 240 &&
ssh [email protected]${ROUTERIP} "/root/bin/restore" | tee -a ${LOG}
echo "firmware upgrade finished"

There are also other ways of how one can keep automated upgrade but I will get not deeper into it in this thread as it is fully offtopic here, we already slide too much away from wireguard on openwrt away. If you go and read sysupgrade documentation you will know much more about it and different options.

PS: I tested and did run the script on archer-c5v1, it should work with any openwrt, just edit the script var in the header of upgradefw. I do not have wrt3200acm and can not test it.

upgradefw-wrt3200acm.zip upgrade-and-restore.log-archer-c5v1-snapshot.zip

January 24

Oh, and yes, I almost forgot torguard api service. If you have some manually created startup scripts, then you will have to activate them as per default they will be deactivated after reflashing, if you use torguard api script, then your upgrade script which you run on your pc could look like like this:

#!/bin/sh
LOG="upgradefw.log"
ROUTERIP="IPOFYOURROUTER"
ssh [email protected]${ROUTERIP} "/root/bin/upgradefw" | tee ${LOG};
echo "Wait 240 seconds until router reboots" && sleep 240 &&
ssh [email protected]${ROUTERIP} "/root/bin/restore" | tee -a ${LOG}
echo "Run Torguard api on router to make sure that settings are valid"
ssh [email protected]${ROUTERIP} "/etc/init.d/tgapi enable;/etc/init.d/tgapi restart" | tee -a ${LOG}
echo "firmware upgrade finished"

echo "Reboot your router"
ssh [email protected]${ROUTERIP} "reboot -f" | tee -a ${LOG}

January 24

5 hours ago, 19807409 said:
Oh, and yes, I almost forgot torguard api service. If you have some manually created startup scripts, then you will have to activate them as per default they will be deactivated after reflashing, if you use torguard api script, then your upgrade script which you run on your pc could look like like this:
#!/bin/sh
LOG="upgradefw.log"
ROUTERIP="IPOFYOURROUTER"
ssh [email protected]${ROUTERIP} "/root/bin/upgradefw" | tee ${LOG};
echo "Wait 240 seconds until router reboots" && sleep 240 &&
ssh [email protected]${ROUTERIP} "/root/bin/restore" | tee -a ${LOG}
echo "Run Torguard api on router to make sure that settings are valid"
ssh [email protected]${ROUTERIP} "/etc/init.d/tgapi enable;/etc/init.d/tgapi restart" | tee -a ${LOG}
echo "firmware upgrade finished"

echo "Reboot your router"
ssh [email protected]${ROUTERIP} "reboot -f" | tee -a ${LOG}

thanks a lot again.
your attachments have problem, it seems not available

January 24

2 hours ago, James8078 said:

thanks a lot again.
your attachments have problem, it seems not available

you are welcome.

no, they do not, I checked it after posting:

you have to be logged in for ability to download attachments on this forum. I pasted it first as codebox, but forum does not allow it (which is stupid, as it is a codebox), however, attachments are available and downloadable.

January 24

2 hours ago, 19807409 said:

you are welcome.

no, they do not, I checked it after posting:

you have to be logged in for ability to download attachments on this forum. I pasted it first as codebox, but forum does not allow it (which is stupid, as it is a codebox), however, attachments are available and downloadable.

IM crazy or what.... I can't download them..... it seems a pics lol

January 24

2 minutes ago, James8078 said:

IM crazy or what.... I can't download them..... it seems a pics lol

This post made my day today 💥💥💥 🤣

Yes, thats a screenshot and they are clickable in the original post. You have to be logged in for ability to download it, you should see it like in a screenshot which you tried to click in hope to be download links

wireguard 🔥 HowTo - OpenWRT with any TorGuard's Wireguard IP

Recommended Posts

James8078 5

Link to post

Share on other sites

Top Posters In This Topic

Popular Days

Top Posters In This Topic

Popular Days

Popular Posts

Posted Images

19807409 31

Link to post

Share on other sites

James8078 5

Link to post

Share on other sites

19807409 31

Link to post

Share on other sites

James8078 5

Link to post

Share on other sites

19807409 31

Link to post

Share on other sites

James8078 5

19807409

Link to post

Share on other sites

19807409 31

Link to post

Share on other sites

James8078 5

Link to post

Share on other sites

19807409 31

Link to post

Share on other sites

James8078 5

Link to post

Share on other sites

James8078 5

Link to post

Share on other sites

19807409 31

Link to post

Share on other sites

19807409 31

Link to post

Share on other sites

James8078 5

Link to post

Share on other sites

19807409 31

Link to post

Share on other sites

19807409 31

Link to post

Share on other sites

James8078 5

Link to post

Share on other sites

James8078 5

Link to post

Share on other sites

19807409 31

Link to post

Share on other sites

19807409 31

Link to post

Share on other sites

James8078 5

Link to post

Share on other sites

19807409 31

Link to post

Share on other sites

James8078 5

Link to post