On 8/20/14 9:43 AM, Richard Lamb wrote:
This is cool. Do you have a link to where I might find instructions to build
the DNSSEC capable dnsmasq for OpenWRTish devices?
Rick,
You don't have to build it, they have a dnsmasq-full package that
includes it. But be aware that this pulls in about 400k of other
packages to support the DNSSEC function, so you need to have the
available flash to support it.
I've had very good luck with building a custom image using the OpenWrt
Image Builder tool. They pre-compile all the packages, you download the
tarball, and then the makefile will put together what you want, and
leave out what you don't want. For example, I can get dnsmasq-full onto
an image for my current router if I leave out luci. But since I've
already got the configuration I need, that's not a great loss. You can
also include the conf files in the custom image, so when the router
comes up after flashing it is already configured and ready to roll.
Crunching packages into a custom image is also a lot more efficient than
adding them to the /overlay file system after install.
More info here:
http://wiki.openwrt.org/doc/howto/obtain.firmware.generate
... and btw, you have to start with Barrier Breaker to get the
DNSSEC-capable dnsmasq. They are currently on -rc3, and it seems to be
going Ok for me so far.
hth,
Doug
