Geekly Articles each Day
📜 ⬆️ ⬇️

Installing software from source for MGTS ZTE F-660 router in chroot environment


Hello to all! Thanks largely to MGTS and its GPON optical network, I became acquainted with the ZTE f-660 optical modem router. As soon as this device appeared at home, I immediately had the idea to install some firmware with software like dd-wrt or open-wrt.

During external examination, a usb port was detected at the router.
The following ways of using a router for domestic purposes came to mind:
  1. SipProxy server;
  2. Torrent client;
  3. FTP server;
  4. Dlna server;
  5. Primitive web hosting.

Internet search did not give anything. At various forums, there is basically a discussion of how to hang the wall or how to open the ports, moreover, I did not even find the “stock” firmware for it. But the router has telnet access (root root). When I started studying the inside of the firmware, I realized that everything is not so simple. The current firmware is tightly tied to the telephony and the optical modem, and changing it, I’ll probably lose both the phone and the Internet at best, and at worst, the router can’t be restored without repairing. Besides, it can lead to penalties from MGTS for the replacement of ro loss in the amount of ~ 1500R.
The only option that I saw at that moment is to launch the programs I need in the chroot environment from a flash drive formatted in ntfs. Naturally, I wanted to use the latest versions of the programs. So I decided to compile everything from source.
After examining the hardware base, I determined that there stands a regular mips processor running under Linux 2.6.30. Accordingly, we need to build gcc-tools for this architecture. To build the tulchan, I chose the usual ubuntu.
Before installation, we need to put development tools
sudo apt-get install gcc g++ make grep gawk automake

I will give the script below, and here I will describe the general plan and what you need to pay special attention to:
No patches needed;
The call syntax is as follows ./make-mips-toolchan <full path created by toolchan>;
To download all sources, use the get parameter;
Do not use the option -j> 1, fails to get a bunch of non-deterministic errors (Under ubuntu and gcc 4.8.1);
CLFS = “$ 1” directory in which we put the tulchan. SYSROOT = “$ CLFS / root”, the directory in which the result of the tool will be installed;
If it doesn’t meet the first time, comment on the steps already completed in the script and continue further;
In the script, the second parameter is the path to which the tulchans should be placed;
Installation steps are as follows:

 #!/bin/sh TARGET="mips-unknown-linux-gnu" CLFS="$1" SYSROOT="$CLFS/root" HOST="x86_64-pc-linux-gnu" LINUX_VERSION=2.6.30 BINUTILS_VERSION=2.24 GCC_VERSION=4.8.2 EGLIB_VERSION=2.18-r24148 unset CFLAGS unset CXXFLAGS check_success() { if [ $? -ne 0 ] then echo Failed exit 1 fi echo Done } if [ "$2" = "get" ] then echo -n "Download sources..." wget http://www.kernel.org/pub/linux/kernel/v2.6/linux-$LINUX_VERSION.tar.bz2 wget http://ftp.gnu.org/gnu/binutils/binutils-$BINUTILS_VERSION.tar.gz wget http://ftp.gnu.org/gnu/gcc/gcc-$GCC_VERSION/gcc-$GCC_VERSION.tar.bz2 wget http://cross-lfs.org/files/eglibc-$EGLIB_VERSION.tar.xz echo -n "Extract archives..." tar -xjf linux-$LINUX_VERSION.tar.bz2 tar -xf binutils-$BINUTILS_VERSION.tar.gz tar -xjf gcc-$GCC_VERSION.tar.bz2 tar -xf eglibc-$EGLIB_VERSION.tar.xz cd ./gcc-$GCC_VERSION/ ./contrib/download_prerequisites cd .. check_success fi if [ "$2" = "clear" ] then rm -rfv $CLFS mkdir -p $SYSROOT check_success exit 1 fi mkdir -p $SYSROOT InstallKernelHeader() { echo -n "Install kernel headers..." cd linux-$LINUX_VERSION/ make mrproper make ARCH=mips headers_check make ARCH=mips INSTALL_HDR_PATH=$SYSROOT/usr headers_install cd .. check_success } InstallBinutils() { echo -n "Install binutils..." mkdir mips-binutils cd mips-binutils rm -rf ./* ../binutils-$BINUTILS_VERSION/configure --prefix=$CLFS --target=$TARGET --with-sysroot=$SYSROOT --disable-nls --disable-static --disable-multilib --enable-plugins make check_success make install check_success cd .. } InstallStaticGCC() { echo -n "Install static gcc..." mkdir mips-static-gcc cd mips-static-gcc rm -rf ./* ../gcc-$GCC_VERSION/configure --target=$TARGET --prefix=$CLFS --with-sysroot=$SYSROOT --disable-nls --disable-shared --without-headers --with-newlib --disable-decimal-float --disable-libgomp --disable-libmudflap --disable-libssp --disable-threads --disable-multilib --disable-libatomic --disable-libitm --disable-libsanitizer --disable-libquadmath --disable-target-libiberty --enable-languages=c --enable-checking=release make all-gcc check_success make all-target-libgcc check_success make install-gcc install-target-libgcc check_success cd .. } InstallEGLIB() { echo -n "Install eglibs header files..." mkdir mips-eglibs cd mips-eglibs rm -rf ./* BUILD_CC="gcc" \ CC="$CLFS/bin/$TARGET-gcc" \ AR="$CLFS/bin/$TARGET-ar" \ RANLIB="$CLFS/bin/$TARGET-ranlib" \ ../eglibc/libc/configure \ --prefix=/usr \ --with-headers=$SYSROOT/usr/include \ --build=$HOST \ --host=$TARGET \ --disable-profile --without-gd --without-cvs --enable-add-ons check_success make check_success make install install_root=$SYSROOT check_success cd .. } InstallFinallGCC() { echo -n "Install final gcc..." mkdir mips-final-gcc cd mips-final-gcc rm -rf ./* ../gcc-4.8.2/configure --prefix=$CLFS \ --build=$HOST --target=$TARGET --host=$HOST \ --with-sysroot=$SYSROOT --enable-shared --disable-static --enable-languages=c,c++ \ --with-libs=$SYSROOT/lib \ --enable-__cxa_atexit --enable-c99 --enable-long-long --enable-threads=posix \ --disable-multilib \ --enable-checking=release \ --disable-nls \ --enable-libstdcxx-time make AS_FOR_TARGET="$CLFS/bin/$TARGET-as" LD_FOR_TARGET="$CLFS/bin/$TARGET-ld" -j 4 check_success make install check_success cp $CLFS/mips-unknown-linux-gnu/lib/libgcc_s.so $SYSROOT/usr/lib cd $SYSROOT/usr/lib ln -s ./libgcc_s.so ./libgcc_s.so.1 cd - cd .. } InstallKernelHeader InstallBinutils InstallStaticGCC InstallEGLIB InstallFinallGCC

From this point on, you have a full-fledged gcc-tulchan who is able to build programs under our router. To do this, we need to specify the compiler and linker from the newly compiled toolchain to the stage of program configuration:
 unset CFLAGS unset CXXFLAGS export LD="mips-unknown-linux-gnu-ld" export CC="mips-unknown-linux-gnu-gcc" export AR="mips-unknown-linux-gnu-gcc-ar" export RANLIB="mips-unknown-linux-gnu-ranlib" export STRIP=“mips-unknown-linux-gnu-strip”

All tools are ready and we can start assembling programs.
As an example, we will collect the torrent client Transsmission and the sip proxy Sipproxd. The general plan is:
  1. Build statically linked bash interceptor;
  2. Building GnuInetCoreUtills networking utilities;
  3. Building basic utilities GnuCoreUtills;
  4. Build a text interface library NCurses (Need for Nano);
  5. Assembling the console notebook needed to edit the Nano configuration files;
  6. Build Zlib compression library;
  7. Build an openssl cryptographic library;
  8. Build a network library Curl (Need for transsmission);
  9. Build a library of events LibEvent (Need for transsmission);
  10. Build torrent client transsmission;
  11. Build the GnuSip library;
  12. Build SipProxy.

During the build process, I had to apply a series of patches, all of which are very simple, add or remove no more than one line.

The script itself:
 #!/bin/bash check_success() { if [ $? -ne 0 ] then echo Failed exit 1 fi echo Done } if [ "$2" = "get" ] then echo -n "Download sources..." wget "http://ftp.gnu.org/gnu/coreutils/coreutils-8.22.tar.xz" wget "http://ftp.gnu.org/gnu/bash/bash-4.2.tar.gz" wget "http://www.openssl.org/source/openssl-1.0.1e.tar.gz" wget "http://zlib.net/zlib-1.2.8.tar.gz" wget "http://mirror.yandex.ru/pub/OpenBSD/OpenSSH/portable/openssh-6.4p1.tar.gz" wget "http://curl.haxx.se/download/curl-7.34.0.tar.gz" wget "http://download.transmissionbt.com/files/transmission-2.82.tar.xz" wget "http://ftp.gnu.org/gnu/inetutils/inetutils-1.9.2.tar.gz" wget "http://ftp.gnu.org/pub/gnu/ncurses/ncurses-5.9.tar.gz" wget "http://www.nano-editor.org/dist/v2.2/nano-2.2.6.tar.gz" wget "https://github.com/downloads/libevent/libevent/libevent-2.0.21-stable.tar.gz" wget "http://siproxd.tuxworld.ch/siproxd-01Feb2014.tar.gz" wget "http://ftp.gnu.org/gnu/osip/libosip2-4.1.0.tar.gz" echo -n "Extract archives..." tar -xf zlib-1.2.8.tar.gz && rm zlib-1.2.8.tar.gz* tar -xf openssl-1.0.1e.tar.gz && rm openssl-1.0.1e.tar.gz* tar -Jxf coreutils-8.22.tar.xz && rm coreutils-8.22.tar.xz* tar -xf bash-4.2.tar.gz && rm bash-4.2.tar.gz* tar -xf openssh-6.4p1.tar.gz && rm openssh-6.4p1.tar.gz* tar -xf curl-7.34.0.tar.gz && rm curl-7.34.0.tar.gz* tar -xf transmission-2.82.tar.xz && rm transmission-2.82.tar.xz* tar -xf inetutils-1.9.2.tar.gz && rm inetutils-1.9.2.tar.gz* tar -xf ncurses-5.9.tar.gz && rm ncurses-5.9.tar.gz* tar -xf nano-2.2.6.tar.gz && rm nano-2.2.6.tar.gz* tar -xf libevent-2.0.21-stable.tar.gz && rm libevent-2.0.21-stable.tar.gz* tar -xf siproxd-01Feb2014.tar.gz && rm siproxd-21Jan2014.tar.gz* tar -xf libosip2-4.1.0.tar.gz && rm libosip2-4.1.0.tar.gz* check_success fi InstallCoreUtils() { cd coreutils-8.22 make clean ./configure --prefix=/ --host=$HOST patch Makefile < ../dummymake.patch patch ./man/dummy-man < ../dummyman.patch make -j 4 make install DESTDIR=$SYSROOT cd .. } InstallBash() { cd bash-4.2 make clean ./configure --without-bash-malloc --prefix=/ --host=$HOST #--enable-static-link patch execute_cmd.c < ../bashjobcontrol.patch make -j 4 check_success make install DESTDIR=$SYSROOT check_success cd .. } InstallInetUtils() { cd inetutils-1.9.2 make clean ./configure --prefix=/usr --host=$HOST patch ./ifconfig/system/linux.c < ../inetutilpathprocspath.patch make -j 4 check_success make install DESTDIR=$SYSROOT check_success cd .. } InstallZlib() { cd zlib-1.2.8 make clean ./configure --prefix=/usr make -j 4 check_success make install DESTDIR=$SYSROOT check_success cd .. } InstallOpenSSl() { cd openssl-1.0.1e make clean ./Configure linux-elf --prefix=/usr no-asm -fPIC make check_success make install INSTALL_PREFIX=$SYSROOT check_success cd .. } InstallOpenSSH() { cd openssh-6.4p1 make clean ./configure --prefix=/usr --host=$HOST --sysconfdir=/etc/ssh make LDFLAGS="-dynamic-linker /lib/ld.so.1 $SYSROOT/usr/lib/crt1.o $SYSROOT/usr/lib/crti.o $SYSROOT/usr/lib/crtn.o -L. -Lopenbsd-compat/ -L$SYSROOT/lib -lc -lgcc_s" CFLAGS="-DHAVE_SETLOGIN -UHAVE_PROC_PID -fPIC -g -O2 -Wall -Wpointer-arith -Wuninitialized -Wsign-compare -Wformat-security -Wsizeof-pointer-memaccess -Wno-pointer-sign -Wno-unused-result -fno-strict-aliasing -D_FORTIFY_SOURCE=2 -fno-builtin-memset -fstack-protector-all" -j 3 check_success -j 4 make DESTDIR=$SYSROOT STRIP_OPT="--strip-program=mips-unknown-linux-gnu-strip" install-nokeys check_success cd .. } InstallCurl() { cd curl-7.34.0 make clean ./configure --prefix=/usr --host=$HOST make check_success make install DESTDIR=$SYSROOT check_success cd .. } InstallLibEvent() { cd libevent-2.0.21-stable make clean ./configure --prefix=/usr --host=$HOST make -j 4 check_success make install DESTDIR=$SYSROOT check_success cd .. } InstallTransmission() { cd transmission-2.82 make clean with_ssl=$SYSROOT/usr CFLAGS="-w" \ LIBEVENT_CFLAGS="-I$SYSROOT/usr/include/curl" LIBEVENT_LIBS="-L$SYSROOT/usr/lib/ -levent" \ LIBCURL_CFLAGS="-I$SYSROOT/usr/include/event2" LIBCURL_LIBS="-L$SYSROOT/usr/lib/ -lcurl" \ LDFLAGS="-L$SYSROOT/usr/lib/ -lssl -ldl" \ ./configure --prefix=/usr --host=$HOST --disable-gtk --disable-cli --disable-libnotify --disable-nls --disable-mac --disable-wx --disable-beos make -j 4 check_success make install DESTDIR=$SYSROOT check_success cd .. } InstallNcurses() { cd ncurses-5.9 make clean ./configure --prefix=/usr --host=$HOST make check_success make install DESTDIR=$SYSROOT check_success cd .. } InstallNano() { cd nano-2.2.6 mkdir buidnano cd buidnano rm -rfv ./* make clean ../configure --prefix=/usr --host=$HOST CFLAGS="-I$SYSROOT/usr/include/ncurses" make -j 4 check_success make install DESTDIR=$SYSROOT check_success cd ../.. } InstallLibSip() { cd libosip2-4.1.0 make clean ./configure --prefix=/usr --host=$HOST make -j 4 check_success make install DESTDIR=$SYSROOT check_success cd .. } InstallSipProxd() { cd siproxd-0.8.2dev make clean ./configure --prefix=/usr --host=$HOST --with-libosip-prefix=$SYSROOT/usr replacestr=$SYSROOT/usr/lib sed -i -e 's|/usr/lib|'$replacestr'|g' $SYSROOT/usr/lib/libosipparser2.la sed -i -e 's|/usr/lib|'$replacestr'|g' $SYSROOT/usr/lib/libosip2.la patch ./src/dejitter.c < ../siproxytime.patch make -j 4 check_success make install DESTDIR=$SYSROOT check_success cd .. } CLFS="$1" SYSROOT="$CLFS/root" HOST="mips-unknown-linux-gnu" export PATH=$CLFS/bin/:$PATH unset CFLAGS unset CXXFLAGS export LD="mips-unknown-linux-gnu-ld" export CC="mips-unknown-linux-gnu-gcc" export AR="mips-unknown-linux-gnu-gcc-ar" export RANLIB="mips-unknown-linux-gnu-ranlib" export STRIP="mips-unknown-linux-gnu-strip" InstallBash InstallInetUtils InstallCoreUtils InstallNcurses InstallNano InstallZlib InstallOpenSSl #InstallOpenSSH InstallCurl InstallLibEvent InstallTransmission InstallLibSip InstallSipProxd


Next, you need to transfer our root folder which is located in the directory of our tool to a pre-formatted nfts flash drive. Also on the USB flash drive you need to put a statically linked busybox ready can be taken from here: www.busybox.net/downloads/binaries/latest/busybox-mips .
Next, we need to "jump" into our sandbox by running a small script:
 #!/bin/ash export TERMINFO=/usr/share/terminfo export HOME=/root cp -rf /etc/* /mnt/usb1_1/root/etc mkdir -p /mnt/usb1_1/root/root mkdir -p /mnt/usb1_1/root/dev mkdir -p /mnt/usb1_1/root/proc mkdir -p /mnt/usb1_1/root/sys mkdir -p /mnt/usb1_1/root/dev/pts mount -o bind /dev /mnt/usb1_1/root/dev mount -o bind /proc /mnt/usb1_1/root/proc mount -o bind /sys /mnt/usb1_1/root/sys mount -o bind /dev/pts /mnt/usb1_1/root/dev/pts ./busybox-mips chroot /mnt/usb1_1/root/ /bin/bash

We will see the bash interpreter command line. Perform dynamic library configuration with the ldconfig -v command
From this point on, we can do anything as we are separated from the main system.
Let's start the transmission-daemon torrent client. Go to 192.168.1.1:9091. We see the standard response to unauthorized access

Next, you need to edit the settings file (it was just created)
 nano /root/.config/transmission-daemon/settings.json

Replace settings
"Rpc-whitelist": "127.0.0.1"
On
"Rpc-whitelist": “*. *. *. *”
')
Press F2 to save and exit.
Restart the daemon. Go to the same address.

Next, I will make a small digression and tell you about Sip-Proxy and the system which I understand is now used in MGTS. Now MGTS almost completely rejects analog communication. All calls go on the sip protocol, those in fact our router is essentially a normal sip client. Consequently, we can use any sip-phone and connect to the sip-server and call from the Moscow number from anywhere. It sounds tempting, but there is one problem. The fact is that we can not connect to the SIP server as we are behind naty (in this judgment I do not claim objectivity just one of the versions). We can use a sip proxy as a solution. He will deal with the transfer of packets from clients to the server, pretending that he is a client, as the usual http-proxy actually does.
Let's make some changes to the configuration file.
cd / usr / etc /
cp ./siproxd.conf.example ./siproxd.conf
nano ./siproxd.conf
We make the following changes:
if_inbound = br0
if_outbound = nbif1
daemonize = 0
outbound_proxy_host = 192.168.68.97
outbound_proxy_port = 5060
F2-save
Let's run the proxy server itself in logging mode
siproxd -d -1 0
Let us enter the sip client settings in the router itself and indicate that the proxy is now itself. After pressing the button to apply, we see how the logs are packets from our client.

00:16:23 accessctl.c: 99 access check = 3
00:16:23 security.c: 48 security_check_raw: size = 440
00:16:23 siproxd.c: 481 checking Max-Forwards (= 70)
00:16:23 siproxd.c: 526 received SIP type REQ: REGISTER
00:16:23 utils.c: 129 DNS lookup - previous resolution failed: msk.ims.mgts.ru

But for some reason, the proxy tries to get the server address, instead of simply passing on the packet without change. To be honest, this is one of the reasons why I posted an article on Habré. I just do not know how to solve this problem, and I hope that the community will help to solve this problem.

To summarize: as we can see, we managed to build a fairly large amount of software from sources. I would especially like to note that all the collected software is fresh, we did not have to either flash the device or use any ancient repository. At the same time, we used very simple patches. If the note causes sufficient interest in the habr-community and I manage to solve the problem of sip-proxy, then in my next note I can consider issues related to installing on a multi-route router openssh, softether VPN and launching x11 applications. In general, I would like to receive feedback and other articles on this topic from other authors may appear, because this terminal is very common in Moscow.

Scripts and patches are in the archive .
Update (Links corrected):
For the laziest archive from the root directory of the stick, with installed programs

Source: https://habr.com/ru/post/211759/

More articles:


All Articles