Posted: Thu Dec 26, 2019 4:48 Post subject: easyddup a simple upgrade/downgrade utility
WARNING: This is an alpha version so experts who know how to recover their routers only for now.
Former Kong users know ddup. Here is easyddup for BrainSlayer builds.
Features:
o Menu driven firmware download
o Secure https firmware download
o Automatic hardware identification
o Caching of previous downloads
o Option to erase nvram or not
o Preserve basic settings (LAN and username/password)
o Possibity to save & automatically restore user settings
o Possibity to get email notifications of new builds
o Supports FAT and ext USB storage
o In place installation even if subnet not 192.168.1.x
HELP NEEDED: The file nvram-dd-wrt.ini lists the user settings variables that are stored in the restore point. When you find settings that you regularly enter manually that are missing let me know and I'll add them or better yet make the changes and I'll integrate them. There will be a lot missing at first...
Credits:
Uses a modified version of this no longer maintained project. That project seemed to be quite a time saver as discussed here. The included QuickStart.txt file is from that project.
Help:
easyddup -h
Easy ddd-wrt update Utility
easyddup.sh Version 0.9
Options: -h this help msg
-c Return count of available versions (does nothing)
-d Downgrade (default is to upgrade)
-f Force download even if build is cached
-m maxcount Search at most maxcount versions ahead/behind current
-n No firmware will be written but everything else is done
-p cache Path to local build cache (default ./fwcache)
-q Quiet (use with -c to check for updates silently)
-w wipe individual cache items or -W to wipe all
-y xxxx Use year xxxx (default is current year)
Install:
mkdir -p /path/to/where/easyddup/subdirectory/is/wanted
cd /path/to/where/easyddup/subdirectory/is/wanted
cp /my/downloads/easyddup.tgz .
tar zxvf easyddup.tgz
The easyddup subdirectory is created and contains the required files.
Run:
You should already have a BrainSlayer build installed. (can sort of work from Kong).
You need USB storage but so beginners might want to read this guide.
To upgrade:
easyddup.sh
To downgrade:
easyddup.sh -d
To restore user settings:
After initial reboot, enable USB support and run nvram-restore-latest.sh or the restore script with the date/time of your choice. Reboot and your settings are back.
Tips:
o You can answer q to any prompt to quit
o Read the warning about passwords in QuickStart.txt
easyddup.png
Description:
Screenshot of easyddup
Filesize:
147.26 KB
Viewed:
2690 Time(s)
easyddup.tgz
Description:
easyddup a simple upgrade/downgrade utility (2020-02-10)
Joined: 16 Nov 2015 Posts: 4104 Location: UK, London, just across the river..
Posted: Thu Dec 26, 2019 8:44 Post subject:
basically this is CLI update option....sadly the good thing in it was to do a signature check but BS builds does not provide it...like Kong was...
So, i don't see a necessity of it, as update via CLI does the same thing apart of offering/showing the current/last updates to choose from...
if you have an access to FTP or Https update site, you can fairly choose an update...
The only clever option was to do an auto-update, the option that i was scared to use....
But anyway it's a good job you did there, nice to have more options for the general mass.. _________________ Atheros
TP-Link WR740Nv1 -----DD-WRT 44538 BS AP,NAT
TP-Link WR740Nv4 -----DD-WRT 44251 BS WAP/Switch
TP-Link WR1043NDv2 ---DD-WRT 45229 BS AP,NAT,AP Isolation,Firewall,Local DNS,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 ---DD-WRT 45493 BS AP,NAT,AD Block,Firewall,Local DNS,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 ---Gargoyle OS 1.12.0 AP,NAT,QoS,Quotas
Qualcomm/IPQ8065
Netgear R7800 -----DD-WRT 45493 BS AP,NAT,AD-Block,AP&Net Isolation,VLAN's,Firewall,Local DNS,DoT
Broadcom
Netgear R7000 -----DD-WRT 45493 BS AP,Wi-Fi OFF,NAT,AD-Block,Firewall,Local DNS,Forced DNS,DoT,VPN
-----------------------------------------------------------------------------------------------
Stubby for DNS over TLS I DNSCrypt v2 by mac913
basically this is CLI update option....So, i don't see a necessity of it
Lets compare my situation for a downgrade from problematic build:
With easyddup:
1) Run easyddup (my past builds are all cached) so visually it's obvious to return to any previous one. No download for cached ones so it's fast and easy on dd-wrt's servers.
2) Say 'y' to save/restore basic settings and erase nvram
3) After reboot run nvram-restore-latest.sh and reboot
Without easyddup:
1) Go to other building an retrieve router from difficult to access location.
2) Return to desk in office
3) Disconnect computer from network and connect to router
4) Find old stable build or hammer dd-wrt's servers and perform update with reset and reboot
5) Reconfigure my computer's LAN to 192.168.1.x subnet
6) Connect to the router and set the admin password and correct LAN settings and reboot.
7) Reconfigure my computer's LAN to correct LAN settings
8) Go through all of the dd-wrt settings that I use and re-enter them one by one. Turns out the most stable build was not one I had previously installed. Do not forget any or make any mistakes!
9) Reconnect computer to network
10) Return router to other building and reconnect everything
The huge gain is eliminating the time consuming/error prone step 8. For this to work for everyone, nvram-dd-wrt.ini will need some additions as mentioned in the OP.
As for signatures that's up to BS to provide them.
Joined: 16 Nov 2015 Posts: 4104 Location: UK, London, just across the river..
Posted: Thu Dec 26, 2019 17:04 Post subject:
yoyoma2 wrote:
Alozaros wrote:
basically this is CLI update option....So, i don't see a necessity of it
Lets compare my situation for a downgrade from problematic build:
With easyddup:
1) Run easyddup (my past builds are all cached) so visually it's obvious to return to any previous one. No download for cached ones so it's fast and easy on dd-wrt's servers.
2) Say 'y' to save/restore basic settings and erase nvram
3) After reboot run nvram-restore-latest.sh and reboot
Without easyddup:
1) Go to other building an retrieve router from difficult to access location.
2) Return to desk in office
3) Disconnect computer from network and connect to router
4) Find old stable build or hammer dd-wrt's servers and perform update with reset and reboot
5) Reconfigure my computer's LAN to 192.168.1.x subnet
6) Connect to the router and set the admin password and correct LAN settings and reboot.
7) Reconfigure my computer's LAN to correct LAN settings
Go through all of the dd-wrt settings that I use and re-enter them one by one. Turns out the most stable build was not one I had previously installed. Do not forget any or make any mistakes!
9) Reconnect computer to network
10) Return router to other building and reconnect everything
The huge gain is eliminating the time consuming/error prone step 8. For this to work for everyone, nvram-dd-wrt.ini will need some additions as mentioned in the OP.
As for signatures that's up to BS to provide them.
1. too much bias in this compere
2. cli update eliminates all those struggles described above
3. normally cli update keeps all the settings, but you can erase them if so
4. i haven't seen stable build, all is beta
5. Kongs ddup was great only cause sig checks
6. if you push BS to provide sig it will be great way to update firmware... plus...
7. Kong was saying that he provides sig check only because his auto ddup
could be exploited _________________ Atheros
TP-Link WR740Nv1 -----DD-WRT 44538 BS AP,NAT
TP-Link WR740Nv4 -----DD-WRT 44251 BS WAP/Switch
TP-Link WR1043NDv2 ---DD-WRT 45229 BS AP,NAT,AP Isolation,Firewall,Local DNS,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 ---DD-WRT 45493 BS AP,NAT,AD Block,Firewall,Local DNS,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 ---Gargoyle OS 1.12.0 AP,NAT,QoS,Quotas
Qualcomm/IPQ8065
Netgear R7800 -----DD-WRT 45493 BS AP,NAT,AD-Block,AP&Net Isolation,VLAN's,Firewall,Local DNS,DoT
Broadcom
Netgear R7000 -----DD-WRT 45493 BS AP,Wi-Fi OFF,NAT,AD-Block,Firewall,Local DNS,Forced DNS,DoT,VPN
-----------------------------------------------------------------------------------------------
Stubby for DNS over TLS I DNSCrypt v2 by mac913
@Alozaros: Erasing nvram is just better. Sure most things work most of the time but I simply prefer the best option. You do what you prefer.
Alozaros wrote:
2. cli update eliminates all those struggles described above
3. normally cli update keeps all the settings, but you can erase them if so
Tell me how to access my router remotely after it has the wrong subnet.
Alozaros wrote:
4. i haven't seen stable build, all is beta
I wasn't clear. All builds are obviously beta but reading individual build threads informs you which ones are more "stable" than others.
Alozaros wrote:
5. Kongs ddup was great only cause sig checks
6. if you push BS to provide sig it will be great way to update firmware... plus...
7. Kong was saying that he provides sig check only because his auto ddup
could be exploited
Well easyddup uses https only (Kong's ddup used http). Microsoft uses https only for downloading Win10 ISO's so it will be difficult to convince BS that more security is needed for dd-wrt.
No one is forcing anyone to use easyddup although help improving it would be greatly appreciated as mentioned in the OP. The old underlying nvram save/restore tool revived by easyddup, was so appreciated that it generated over 800 mostly positive comments so it can't be all bad.
Joined: 16 Nov 2015 Posts: 4104 Location: UK, London, just across the river..
Posted: Thu Dec 26, 2019 22:05 Post subject:
erasing nvram before and after is not the best option in the world....
well its good for the developers, but it fries the nvram, i destroyed an old 1043v2 like that, doing a
rests before and after, nope its not necessary unless
there are serious changes, mem locations changes or so...I do not recommend over doing it...its BAD
and yep will be more than happy to see easyddup in action again and BS supporting it.... _________________ Atheros
TP-Link WR740Nv1 -----DD-WRT 44538 BS AP,NAT
TP-Link WR740Nv4 -----DD-WRT 44251 BS WAP/Switch
TP-Link WR1043NDv2 ---DD-WRT 45229 BS AP,NAT,AP Isolation,Firewall,Local DNS,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 ---DD-WRT 45493 BS AP,NAT,AD Block,Firewall,Local DNS,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 ---Gargoyle OS 1.12.0 AP,NAT,QoS,Quotas
Qualcomm/IPQ8065
Netgear R7800 -----DD-WRT 45493 BS AP,NAT,AD-Block,AP&Net Isolation,VLAN's,Firewall,Local DNS,DoT
Broadcom
Netgear R7000 -----DD-WRT 45493 BS AP,Wi-Fi OFF,NAT,AD-Block,Firewall,Local DNS,Forced DNS,DoT,VPN
-----------------------------------------------------------------------------------------------
Stubby for DNS over TLS I DNSCrypt v2 by mac913
Joined: 16 Nov 2015 Posts: 4104 Location: UK, London, just across the river..
Posted: Thu Dec 26, 2019 22:14 Post subject:
kernel-panic69 wrote:
@Alozaros, current CLI update methods can be exploited. That is why <Kong> added the cryptographic signature and check. It would be great if we could get BS to cryptographically sign firmware images to verify them, though.
yep i know ... tried that in the past...
but now we all trust BS...FTP and https site...it is what it is...
back in the days there was a thread about if someone
corrupts a flash file and adds a code to it, than that code will get into the BS mess, and that code has only a 1% chance to work... heheehe...
so if you dont trust the source, than do not flash.. stay at home next to the stove its X mass.. _________________ Atheros
TP-Link WR740Nv1 -----DD-WRT 44538 BS AP,NAT
TP-Link WR740Nv4 -----DD-WRT 44251 BS WAP/Switch
TP-Link WR1043NDv2 ---DD-WRT 45229 BS AP,NAT,AP Isolation,Firewall,Local DNS,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 ---DD-WRT 45493 BS AP,NAT,AD Block,Firewall,Local DNS,Forced DNS,DoT,VPN,VLAN
TP-Link WR1043NDv2 ---Gargoyle OS 1.12.0 AP,NAT,QoS,Quotas
Qualcomm/IPQ8065
Netgear R7800 -----DD-WRT 45493 BS AP,NAT,AD-Block,AP&Net Isolation,VLAN's,Firewall,Local DNS,DoT
Broadcom
Netgear R7000 -----DD-WRT 45493 BS AP,Wi-Fi OFF,NAT,AD-Block,Firewall,Local DNS,Forced DNS,DoT,VPN
-----------------------------------------------------------------------------------------------
Stubby for DNS over TLS I DNSCrypt v2 by mac913
Uploaded a new version of easyddup in the OP. The description of the attachment includes the date of the version. Although easyddup.sh -h prints a version number, it won't be changed for every tweak during alpha.
Changes:
Add a check to see if there are no builds available for the requested year. This helps in the first few days of the year before a single build is available or if an invalid year is attempted: easyddup.sh -y 1984
Go through 
tried that in the past...
heheehe...