说明

本openwrt仅适用于x86_64的cpu.

名称	说明
IP	10.5.2.1
用户	root
密码

说明:构建本openwrt目的是自己使用,没有太多功能比较清爽,仅仅适用我个人使用.

构建openwrt或releases下载

• Fork本仓库-> Actions-> Build OpenWrt-> Run workflow

pve8构建lxc openwrt容器

• 进入容器,执行命令:

pct create xxx \
local:vztmpl/openwrt-xxx-rootfs.tar.gz \
--rootfs local:2 \
--ostype unmanaged \
--hostname openwrt \
--arch amd64 \
--cores 4 \
--memory 512 \
--swap 0 

• 配置文件路径

vim /etc/pve/lxc/xxx.conf

• lxc追加配置

注意: 网卡配置的type, veth为虚拟网卡, phys为真实网卡

onboot: 0
features: nesting=1
lxc.cgroup2.devices.allow: c 108:0 rwm
lxc.cgroup2.devices.allow: c 10:200 rwm
lxc.mount.auto: proc:mixed sys:ro cgroup:mixed
lxc.mount.entry: /dev/net/tun dev/net/tun none rw,bind,create=file 0 0
lxc.mount.entry: /dev/ppp dev/ppp none rw,bind,optional,create=file 0 0
lxc.net.0.flags: up 
lxc.net.0.type: veth
lxc.net.0.link: vmbr0
lxc.net.0.name: eth0
lxc.net.1.flags: up
lxc.net.1.type: phys
lxc.net.1.link: eth1  #真实网卡名
lxc.net.1.name: eth1

从lxc openwrt中dhcpv6服务获取ipv6

pve启动后负责拨号的openwrt还未启动无法获取ipv6地址,添加定时任务系统启动3分钟后获取ipv6,每12小时重新尝试获取

• 创建dhcpv6.service

cat >> /etc/systemd/system/dhcpv6.service << EOF
[Unit]
Description=OpenWrt DHCPv6 Server
After=network.target
[Service]
ExecStart=/usr/sbin/dhclient -6 vmbr0
[Install]
WantedBy=multi-user.target
EOF

• 创建dhcpv6.timer

cat >> /etc/systemd/system/dhcpv6.timer << EOF
[Unit]
Description=OpenWrt DHCPv6 Server
After=network.target
[Timer]
OnBootSec=3min
OnUnitActiveSec=12h
[Install]
WantedBy=multi-user.target
EOF

• 运行定时任务

systemctl daemon-reload
systemctl enable dhcpv6.timer
systemctl start dhcpv6.timer

Lxc AdgHome配置

• 创建lxc alpine容器，指定静态ip，10.5.2.2
• 进入容器执行

wget --no-verbose -O - https://raw.githubusercontent.com/AdguardTeam/AdGuardHome/master/scripts/install.sh | sh -s -- -v

• 配置上游dns

[/*.lan/]10.5.2.1 #解析本地设备
tls://dns.pub
https://dns.pub/dns-query
tls://dns.alidns.com
https://dns.alidns.com/dns-query
tls://dns.google.com
https://dns.google/dns-query
——————————————————
Bootstrap DNS
——————————————————
119.29.29.29
202.96.134.133
2402:4e00::
2400:3200::1

网络配置

• 接口 >> lan >> IPV6设置 >> 本地IPV6 >> DNS服务器取消勾选
• 接口 >> lan >> DHCP 选项 >> 6,10.5.2.2

NAT回环失效修复，ssh到openwrt

vim /etc/sysctl.conf

# 追加
net.bridge.bridge-nf-call-arptables = 0
net.bridge.bridge-nf-call-ip6tables = 0
net.bridge.bridge-nf-call-iptables = 0

sysctl -p

服务

1. OpenClash
2. AdguardHome
3. DDNS
4. SmartDns

鸣谢

• 感谢openwrt源码
• 感谢@P3TERX

使用了

1. P3TERX大佬的云编译
2. 最后感谢上面使用了但未提及的大佬们