[Script request]: OpenWrt LXC

[rapdodge]

Application Name

OpenWrt

Website

https://openwrt.org/

Description

OpenWrt is the best linux router (at least for me) with minimal footprint and resources, and it will be even great if we've had the LXC one

I found a script that could do that semi-automatic
https://github.com/DazzyWalkman/oplxc4pve
I wish it possible to having it fully automatic via community scripts

BR,

Due Diligence

• I have searched existing scripts and found no duplicates.
• I have searched existing discussions and found no duplicate requests.

[SoTHISIsFitness]

There was a procedure out there for creating an OpenWRT LXC a year or two ago that I followed and it did work, so I imagine it could be built as a helper script here. I'll have to remember to find that guide to share it here...

[michelroegl-brunner]

This would require a massive rework of our backend scripts to make this possible as a LXC, as we currently only support one LAN interface. To be used a Firewall needs at least two interfaces to work, and we dont support this for now.
I deffere it for the moment and add it to our backlog. When the more pressing issues are done maybe i can look into it.

But for now this is not possible to do.

[ryukora]

But how would you use your firewall then? There is no point in it if it has not two interfaces allready. And we will get flodded with issues when it is not working out of the box. Not speaking of you here directly, but we know what happens if we only have a half assed solution.

Tbh, I'm not using OpenWrt as firewall... But as plain home gateway only...

For firewall, it would be better if using Pf/OPNsense...

I agree with @rapdodge's answer. Why not just make the Script an OpenWRT LXC then?

[reflymukudoriofficial]

Hi @rapdodge,

Thanks for clarifying that you're looking to use the OpenWrt LXC as a 'plain home gateway' rather than a full firewall. This is a helpful distinction!

To help @michelroegl-brunner and others assess the feasibility and scope of a script for this, could you perhaps elaborate a bit on the minimal essential functions you envision for this 'plain home gateway' LXC?

For example, are you primarily looking for:

Access to the OpenWrt Web UI (LuCI) for configuration? (You mentioned wanting to access the web UI).
A DHCP server for a specific network segment/bridge it would connect to?
A DNS forwarder/caching server for that same segment?
And regarding routing/connectivity, which of these (or something else) best describes your need:
    Do you expect this OpenWrt LXC to perform NAT and act as the primary gateway to another network (e.g., the internet) for devices on its segment?
    Or would it mainly provide services (like DHCP/DNS) to an existing network that is already routed/firewalled by the Proxmox host or another main router, perhaps with the LXC having just one primary network interface?

Providing a clear list of these core requirements might make it easier for the maintainers to see if a simpler LXC solution could meet your needs (especially considering the current script backend supports one LAN interface for LXCs), or to identify what specific networking capabilities would be essential.

This clarification could really help bridge the current understanding and potentially move your script request forward.

Thanks!

[rapdodge]

Let me make it clear,

The OpenWrt VM version is already more than enough for basic needs, which is it got preconfigured for the LAN interface for us to make it easier to access the LuCI (basically like a quick start)

So, it would be nice if we've had a unified script like this community-scripts adopted from script that I've sent when I'm opening this request

I'm just wishing that we could have OpenWrt LXC, because we've already had the VM version

BR,

[michelroegl-brunner]

I've had some ideas, i tinker with it when time alows and i see what i can come up with.

[ryukora]

I've had some ideas, i tinker with it when time alows and i see what i can come up with.

I can't wait! I am looking forward to the OpenWRT LXC Script for more.