Skip to content

Generate friWrt Firmware #392

Generate friWrt Firmware

Generate friWrt Firmware #392

Workflow file for this run

#=====================================================================================
# Description: Build OpenWrt and ImmortalWrt with Image Builder
# Instructions: https://openwrt.org/docs/guide-user/additional-software/imagebuilder
# Download from: https://downloads.openwrt.org/releases
# https://downloads.immortalwrt.org/releases
#=====================================================================================
name: Generate friWrt Firmware
on:
workflow_dispatch:
inputs:
target:
description: "Select device target:"
required: true
default: "Raspberry Pi 4B"
type: choice
options:
- all
- Raspberry Pi 3B
- Raspberry Pi 4B
- NanoPi-R2S
- NanoPi-R5S
- x86-64
release_branch:
description: "Select the release branch:"
required: true
default: "openwrt:23.05.3"
type: choice
options:
- openwrt:snapshots
- openwrt:21.02.7
- openwrt:23.05.2
- openwrt:23.05.3
- immortalwrt:snapshots
- immortalwrt:21.02.7
- immortalwrt:23.05.1
- immortalwrt:23.05.2
tunnel:
description: "Select VPN Client app (!neko and passwall only support for newer branch with fw4 firewall!):"
required: true
default: "all"
type: choice
options:
- all
- openclash
- neko
- passwall
- neko-openclash
- openclash-passwall
- neko-passwall
- openclash-passwall-neko
- no-tunnel
clean:
description: "Do 'make clean' for each run"
required: false
default: "true"
type: boolean
squashfs:
description: "Generate squashfs image"
required: false
default: "false"
type: boolean
upload-artifacts:
description: "Upload compiled image to Artifacts only"
required: false
default: "false"
type: boolean
upload-prerelease:
description: "Upload as pre-release"
required: false
default: "false"
type: boolean
revision-tag:
description: "Revision img tag"
required: false
default: "false"
type: boolean
env:
RELEASE_BRANCH: ${{ inputs.release_branch }}
ROOTFS_SQUASHFS: ${{ inputs.squashfs }}
TUNNEL: ${{ inputs.tunnel }}
CLEAN: ${{ inputs.clean }}
TZ: Asia/Jakarta
PRE_RELEASE: ${{ inputs.upload-prerelease }}
REVISION_TAG: ${{ inputs.revision-tag }}
jobs:
prebuild:
runs-on: ubuntu-latest
name: ${{ inputs.release_branch }}
outputs:
target: ${{ steps.set-matrix.outputs.target }}
steps:
- name: Set Matrix Run
id: set-matrix
run: |
if [ "${{ inputs.target }}" == "all" ]; then
echo "target=['Raspberry Pi 3B','Raspberry Pi 4B','x86-64']" >> $GITHUB_OUTPUT
else
echo "target=['${{ inputs.target }}']" >> $GITHUB_OUTPUT
fi
- name: Checking Tunnel Option
run: |
if [[ ("$TUNNEL" == "neko" || "$TUNNEL" == "passwall" || "$TUNNEL" == "openclash-passwall" || "$TUNNEL" == "neko-passwall" || "$TUNNEL" == "neko-openclash" || "$TUNNEL" == "openclash-passwall-neko") && "${RELEASE_BRANCH#*:}" == "21.02.7" ]]; then
echo "Cannot continue the process because the selected tunnel [ $TUNNEL ]"
echo "only support for newer branch with fw4 firewall!"
exit 1
else
echo "Selected tunnel option: [ $TUNNEL ]"
fi
Devices:
needs: prebuild
runs-on: ubuntu-latest
name: "${{ matrix.target }}"
strategy:
fail-fast: false
matrix:
target: ${{fromJSON(needs.prebuild.outputs.target)}}
max-parallel: 1
steps:
- name: Initialization System Environment
run: |
sudo apt-get -qq update
sudo apt-get -qq install build-essential libncurses5-dev libncursesw5-dev zlib1g-dev gawk git gettext libssl-dev xsltproc rsync wget unzip tar gzip qemu-utils mkisofs
sudo timedatectl set-timezone "$TZ"
echo "TARGET=${{ matrix.target }}" >> $GITHUB_ENV
- name: Setup Environment Variables
run: |
if [ "$TARGET" == "Raspberry Pi 3B" ]; then
echo "PROFILE=rpi-3" >> $GITHUB_ENV
echo "TARGET_SYSTEM=bcm27xx/bcm2710" >> $GITHUB_ENV
echo "TARGET_NAME=bcm27xx-bcm2710" >> $GITHUB_ENV
TARGET_NAME="bcm27xx-bcm2710"
echo "ARCH_1=armv7" >> $GITHUB_ENV
echo "ARCH_2=aarch64" >> $GITHUB_ENV
echo "ARCH_3=aarch64_cortex-a53" >> $GITHUB_ENV
elif [ "$TARGET" == "Raspberry Pi 4B" ]; then
echo "PROFILE=rpi-4" >> $GITHUB_ENV
echo "TARGET_SYSTEM=bcm27xx/bcm2711" >> $GITHUB_ENV
echo "TARGET_NAME=bcm27xx-bcm2711" >> $GITHUB_ENV
TARGET_NAME="bcm27xx-bcm2711"
echo "ARCH_1=arm64" >> $GITHUB_ENV
echo "ARCH_2=aarch64" >> $GITHUB_ENV
echo "ARCH_3=aarch64_cortex-a72" >> $GITHUB_ENV
elif [ "$TARGET" == "NanoPi-R2S" ]; then
echo "PROFILE=friendlyarm_nanopi-r2s" >> $GITHUB_ENV
echo "TARGET_SYSTEM=rockchip/armv8" >> $GITHUB_ENV
echo "TARGET_NAME=rockchip-armv8" >> $GITHUB_ENV
TARGET_NAME="rockchip-armv8"
echo "ARCH_1=armv8" >> $GITHUB_ENV
echo "ARCH_2=aarch64" >> $GITHUB_ENV
echo "ARCH_3=aarch64_generic" >> $GITHUB_ENV
elif [ "$TARGET" == "NanoPi-R5S" ]; then
echo "PROFILE=friendlyarm_nanopi-r5s" >> $GITHUB_ENV
echo "TARGET_SYSTEM=rockchip/armv8" >> $GITHUB_ENV
echo "TARGET_NAME=rockchip-armv8" >> $GITHUB_ENV
TARGET_NAME="rockchip-armv8"
echo "ARCH_1=armv8" >> $GITHUB_ENV
echo "ARCH_2=aarch64" >> $GITHUB_ENV
echo "ARCH_3=aarch64_generic" >> $GITHUB_ENV
elif [ "$TARGET" == "x86-64" ]; then
echo "PROFILE=generic" >> $GITHUB_ENV
echo "TARGET_SYSTEM=x86/64" >> $GITHUB_ENV
echo "TARGET_NAME=x86-64" >> $GITHUB_ENV
TARGET_NAME="x86-64"
echo "ARCH_1=amd64" >> $GITHUB_ENV
echo "ARCH_2=x86_64" >> $GITHUB_ENV
echo "ARCH_3=x86_64" >> $GITHUB_ENV
fi
echo "WORKING_DIR="${RELEASE_BRANCH%:*}"-imagebuilder-"$TARGET_NAME".Linux-x86_64" >> $GITHUB_ENV
echo "DOWNLOAD_BASE=https://downloads."${RELEASE_BRANCH%:*}".org" >> $GITHUB_ENV
echo "BASE=${RELEASE_BRANCH%:*}" >> $GITHUB_ENV
echo "BRANCH=${RELEASE_BRANCH#*:}" >> $GITHUB_ENV
echo "DATE=$(date +'%Y%m%d')" >> $GITHUB_ENV
echo "DATETIME=$(date +'%Y.%m.%d-%H:%M:%S')" >> $GITHUB_ENV
echo "DATEMONTH=$(date +"%B-%Y" | awk '{print tolower($0)}')" >> $GITHUB_ENV
- name: Checkout
uses: actions/checkout@v4
with:
path: origin
- name: Download Image Builder
id: download
run: |
SNAPSHOTS="$DOWNLOAD_BASE/$BRANCH/targets/$TARGET_SYSTEM/$BASE-imagebuilder-$TARGET_NAME.Linux-x86_64.tar.xz"
RELEASE="$DOWNLOAD_BASE/releases/$BRANCH/targets/$TARGET_SYSTEM/$BASE-imagebuilder-$BRANCH-$TARGET_NAME.Linux-x86_64.tar.xz"
[ "$BRANCH" == "snapshots" ] && wget -nv "$SNAPSHOTS" || wget -nv "$RELEASE"
tar -xJf *-imagebuilder-* && sync && rm -f *-imagebuilder-*.tar.xz && mv *-imagebuilder-* $WORKING_DIR && sync
cp -r $GITHUB_WORKSPACE/origin/* $GITHUB_WORKSPACE/$WORKING_DIR
echo "status=success" >> $GITHUB_OUTPUT
- name: Download External Packages
id: packages
if: steps.download.outputs.status == 'success' && !cancelled()
run: |
cd $WORKING_DIR
bash scripts/external-package-urls.sh
[ "$ARCH_1" == "amd64" ] && ARCH_1=x86
if [[ "$BRANCH" == "21.02.7" ]]; then
grep -E "^all-all|^old-21.02|^$ARCH_1-21.02|^$ARCH_1" external-package-urls.txt | awk '{print $2}' > output_url.txt
else
grep -E "^all-all|^all|^$ARCH_1" external-package-urls.txt | grep -vE "^$ARCH_1-21.02" | awk '{print $2}' > output_url.txt
fi
wget --no-check-certificate -i output_url.txt -nv -P packages
echo "status=success" >> $GITHUB_OUTPUT
- name: Run Patch and DIY Scripts
id: scripts
if: steps.packages.outputs.status == 'success' && !cancelled()
run: |
cd $WORKING_DIR
bash scripts/builder-patch.sh
bash scripts/agh-core.sh
bash scripts/misc.sh
if [[ "$TUNNEL" == "all" && "$BRANCH" != "21.02.7" ]]; then
echo "VPN Client: $TUNNEL"
bash scripts/tunnel_app.sh openclash-passwall-neko
elif [[ ("$TUNNEL" == "passwall" || "$TUNNEL" == "openclash-passwall" || "$TUNNEL" == "neko-passwall" || "$TUNNEL" == "neko-openclash" || "$TUNNEL" == "openclash-passwall-neko") && "$BRANCH" != "21.02.7" || "$TUNNEL" == "openclash" || "$TUNNEL" == "neko" ]]; then
echo "VPN Client: $TUNNEL"
bash scripts/tunnel_app.sh "$TUNNEL"
elif [[ "$TUNNEL" == "all" && "$BRANCH" = "21.02.7" ]]; then
echo "VPN Client: $TUNNEL"
bash scripts/tunnel_app.sh openclash
else
echo "No VPN Client selected"
fi
if [ "$TUNNEL" = "openclash" ] || [ "$TUNNEL" = "openclash-passwall" ]; then bash scripts/clash-core.sh; fi
if [ "$TUNNEL" = "neko" ] || [ "$TUNNEL" = "neko-passwall" ]; then bash scripts/neko_core.sh; fi
if [ "$TUNNEL" = "openclash-passwall-neko" ] || [ "$TUNNEL" == "neko-openclash" ] || [ "$TUNNEL" = "all" ]; then bash scripts/clash-core.sh; bash scripts/neko_core.sh; fi
echo "Total custom packages: $(find packages -type f -name "*.ipk" | wc -l)"
ls packages
echo "status=success" >> $GITHUB_OUTPUT
echo -e "Server space usage before starting to compile: \n$(df -hT ${PWD}) \n"
- name: Set Matrix Run Tunnel
id: set-matrix-tunnel
run: |
if [ "${{ inputs.tunnel }}" == "all" ]; then
echo "tunnel=['openclash','neko','passwall','neko-openclash','openclash-passwall','neko-passwall','openclash-passwall-neko','no-tunnel']" >> $GITHUB_OUTPUT
else
echo "tunnel=['${{ inputs.tunnel }}']" >> $GITHUB_OUTPUT
fi
Compile:
needs: Devices
runs-on: ubuntu-latest
name: "${{ matrix.tunnel }}"
strategy:
fail-fast: false
matrix:
tunnel: ${{fromJSON(needs.Devices.outputs.tunnel)}}
steps:
- name: Tunnel Option
run: |
echo "TUNNEL=${{ matrix.tunnel }}" >> $GITHUB_ENV
- name: Compile Firmware
id: compile
run: |
cd $WORKING_DIR
mkdir -p compiled_images
if [ "$CLEAN" == "true" ]; echo "Start 'make clean' before building images."; then make clean; fi
time bash make-build.sh "$PROFILE" "$TUNNEL"
rm -rf bin/targets/"$TARGET_SYSTEM"/*.{json,manifest,bin,*-rootfs*,*factory*,sha256sums}
for file in bin/targets/"$TARGET_SYSTEM"/*-"$TARGET_NAME"-*.img.gz; do mv "$file" compiled_images/fri_$(basename "$file" .img.gz)$( echo "_$t" )_$DATE$([ "$REVISION_TAG" == "true" ] && echo _rev).img.gz; done
if wget -q https://github.com/frizkyiman/friWrt-MyWrtBuilder/releases/download/${{ env.PROFILE }}-${{ env.BASE }}-${{ env.BRANCH }}-${{ env.DATEMONTH }}/sha256sums; then
sha256sum compiled_images/fri_*.img.gz >> compiled_images/sha256sums
else
sha256sum compiled_images/fri_*.img.gz > compiled_images/sha256sums
fi
ls -l compiled_images
echo "RELEASE_TAG=$PROFILE-$BASE-$BRANCH-$DATEMONTH$([ "$REVISION_TAG" == "true" ] && echo -rev)" >> $GITHUB_ENV
echo "status=success" >> $GITHUB_OUTPUT
echo -e "Server space usage after compilation: \n$(df -hT ${PWD}) \n"
- name: Upload All Firmware to Artifacts
if: github.event.inputs.upload-artifacts == 'true'
uses: actions/upload-artifact@v4
with:
name: ${{ env.RELEASE_TAG }}
path: ${{ env.WORKING_DIR }}/compiled_images//*
- name: Add changelog info to new release description
if: github.event.inputs.upload-artifacts == 'false'
id: changelog
shell: bash
run: |
cd $WORKING_DIR
r=$(awk '/^\*\*Changelog\*\*/ {if(found) exit; found=1} found' changelog.md)
r="${r//'%'/'%25'}"
r="${r//$'\n'/'%0A'}"
r="${r//$'\r'/'%0D'}"
echo "CHANGELOG=$r" >> $GITHUB_OUTPUT
- name: Upload Firmware to Release
uses: svenstaro/upload-release-action@v2
if: github.event.inputs.upload-artifacts == 'false'
with:
repo_token: ${{ secrets.GITHUB_TOKEN }}
file_glob: true
file: ${{ env.WORKING_DIR }}/compiled_images//*
asset_name: ${{ github.event.repository.name }}-${{ github.sha }}
tag: ${{ env.RELEASE_TAG }}
release_name: ${{ env.RELEASE_TAG }}
overwrite: true
prerelease: ${{ env.PRE_RELEASE }}
body: |
![GitHub Downloads (all assets, specific tag)](https://img.shields.io/github/downloads/frizkyiman/friWrt-MyWrtBuilder/${{ env.RELEASE_TAG }}/total?style=for-the-badge&logo=Openwrt)
### friWrt ${{ env.BASE }}-${{ env.BRANCH }} Image information
Build date: ${{ env.DATETIME }}
${{ steps.changelog.outputs.CHANGELOG }}
See [here](https://github.com/frizkyiman/friWrt-MyWrtBuilder?tab=readme-ov-file#firmware-details) for more detail feature and other information.
- Default IP: 192.168.1.1
- Default username: root
- Default password: friwrt
- Default WIFI name: friWrt_2g | friWrt_5g (if device supported)
- Default WIFI password: friwrt2024 (if device supported)