Skip to content

Conversation

@asaf400
Copy link

@asaf400 asaf400 commented Sep 8, 2025

Package Source: https://github.com/openwrt/packages/tree/master/net/crowdsec-firewall-bouncer
Source Code: https://github.com/crowdsecurity/cs-firewall-bouncer

Entware/Entware#1193

✅I was able to build, install package and run the executable on my Asus RT-BE86U (w/ Merlin 🧙‍♂️🪄💙)
2025-09-08 04_02_25-NVIDIA GeForce Overlay DT

  • Disclaimer:
    This is my first dive into Entware or OpenWRT packaging,
    and I am still lacking some understandings..
  1. Upon installing the .ipk with opkg My AsusMerlin router attempted to installed the included files (initd + .config) under /etc and not under the relative installed location of Entware (/tmp/mnt/cruzer/entware/etc in my case)
    I needed to modify /tmp/mnt/cruzer/entware/etc/opkg.conf on my installation so that
    dest root is /mnt/cruzer/entware/

  2. I do not understand how to properly enable the service and what is the service binary used for on the router, I'm used to upstart or sys-v, with chkconfig as the 'enabler' and service action service_name commands (action is a function in the service's init file)

2.5 Lacking point 2, I was only able to test the running the Firewall Bouncer as a foreground process under SSH.

  1. Default config location, according to the docs is /etc/crowdsec/bouncers/crowdsec-firewall-bouncer.yaml how do we set that as default for the service to launch - my question is about the Makefiles cascading functionality with the file/ directory's dot config file, and initd file, all packages having the same filenames seems like there are mechanisms for handling those, so I'm not sure how to modify the behaviour to suit both Entware builds and the Crowd Security defaults..

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant