Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Securing an OPKG repository

I'm working on setting up an OPKG repository to be used by embedded linux devices. We'd like to secure the server so that only our devices have access to the packages. I couldn't find any information on how to do this other than some references to http proxy username and passwords. Is there a way this can be achieved? I believe opkg repositories use the same system as ipkg.

like image 739
gabe_torres Avatar asked Jan 09 '15 19:01

gabe_torres


People also ask

How to download opkg packages from local repository?

You can download packages from a local or a remote Opkg repository. To c reate a new local repository that supports Opkg, in the Administration module, go to Repositories | Repositories | Local and set the Package Type to Opkg. Artifactory supports the common Opkg index scheme which indexes each feed location according to all ipk packages in it.

What is Artifactory’s opkg repository?

As a fully-fledged Opkg repository, Artifactory generates index files that are fully compliant with the Opkg client. The ability to provision ipk packages from Artifactory to an Opkg client from local and remote repositories.

What is opkg in Linux?

The opkg utility is the lightweight package manager used for this job. Opkg is a fork of ipkg, the package manager used in NSLU2's Optware, which is designed to add software to stock firmware of embedded devices. Opkg is a full package manager for the root file system, including kernel modules and drivers, while ipkg is just a way ...

What are the options available in opkg administrative commands?

Informational commands Options Examples Configuration Adjust repositories Change architectures Proxy support Troubleshooting Verbose opkg update Out of space Local repository Non-standard installation destinations Opkg package manager


1 Answers

You don't really need to modify the sources - compiling OPKG with libcurl will enable http basic auth: ./configure --enable-curl before running make

In opkg.conf just add option http_auth user:pass and it works.

I remember seeing this change was added some time ago - don't recall when or which version but it works with the latest.

like image 65
danf Avatar answered Sep 20 '22 23:09

danf