Initial parts of the OpenWRT subsystem skeleton

opkg-feed/installer/openwrt-sdxlemur-skel/control/busybox-selinux.conffiles

@@ -0,0 +1 @@
+/etc/syslog.conf

opkg-feed/installer/openwrt-sdxlemur-skel/control/busybox-selinux.control

@@ -0,0 +1,17 @@
+Package: busybox-selinux
+Version: 1.35.0-5
+Depends: libc, libpam, jsonfilter, libselinux
+Provides: busybox
+Source: package/utils/busybox
+SourceName: busybox-selinux
+License: GPL-2.0
+LicenseFiles: LICENSE archival/libarchive/bz/LICENSE
+Section: base
+Require-User: ntp=123:ntp=123
+SourceDateEpoch: 1723016807
+CPE-ID: cpe:/a:busybox:busybox
+Essential: yes
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: arm_cortex-a7_neon-vfpv4
+Installed-Size: 262965
+Description:  Core utilities for embedded Linux with SELinux support

opkg-feed/installer/openwrt-sdxlemur-skel/control/busybox-selinux.prerm

@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@

opkg-feed/installer/openwrt-sdxlemur-skel/control/jsonfilter.control

@@ -0,0 +1,12 @@
+Package: jsonfilter
+Version: 2018-02-04-c7e938d6-1
+Depends: libc, libubox20220515, libjson-c5
+Source: package/utils/jsonfilter
+SourceName: jsonfilter
+License: ISC
+Section: base
+SourceDateEpoch: 1690286952
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: arm_cortex-a7_neon-vfpv4
+Installed-Size: 9001
+Description:  OpenWrt JSON filter utility

opkg-feed/installer/openwrt-sdxlemur-skel/control/jsonfilter.prerm

@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@

opkg-feed/installer/openwrt-sdxlemur-skel/control/libc.control

@@ -0,0 +1,14 @@
+Package: libc
+Version: 1.2.3-4
+Depends: libgcc1
+Source: package/libs/toolchain
+SourceName: libc
+License: GPL-3.0-with-GCC-exception
+Section: libs
+SourceDateEpoch: 1690286952
+Status: unknown hold not-installed
+Essential: yes
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: arm_cortex-a7_neon-vfpv4
+Installed-Size: 259703
+Description:  C library

opkg-feed/installer/openwrt-sdxlemur-skel/control/libc.prerm

@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@

opkg-feed/installer/openwrt-sdxlemur-skel/control/libgcc1.control

@@ -0,0 +1,15 @@
+Package: libgcc1
+Version: 11.2.0-4
+Provides: libgcc
+Source: package/libs/toolchain
+SourceName: libgcc
+License: GPL-3.0-with-GCC-exception
+Section: libs
+SourceDateEpoch: 1690286952
+ABIVersion: 1
+Status: unknown hold not-installed
+Essential: yes
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: arm_cortex-a7_neon-vfpv4
+Installed-Size: 21227
+Description:  GCC support library

opkg-feed/installer/openwrt-sdxlemur-skel/control/libgcc1.prerm

@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@

opkg-feed/installer/openwrt-sdxlemur-skel/control/libjson-c5.control

@@ -0,0 +1,16 @@
+Package: libjson-c5
+Version: 0.15-2
+Depends: libc
+Provides: libjson-c
+Source: package/libs/libjson-c
+SourceName: libjson-c
+License: MIT
+LicenseFiles: COPYING
+Section: libs
+SourceDateEpoch: 1690286952
+ABIVersion: 5
+CPE-ID: cpe:/a:json-c_project:json-c
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: arm_cortex-a7_neon-vfpv4
+Installed-Size: 25429
+Description:  This package contains a library for javascript object notation backends.

opkg-feed/installer/openwrt-sdxlemur-skel/control/libjson-c5.prerm

@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@

opkg-feed/installer/openwrt-sdxlemur-skel/control/libpam.control

@@ -0,0 +1,14 @@
+Package: libpam
+Version: 1.5.1-1
+Depends: libc
+Source: owrt-feeds/packages/libs/libpam
+SourceName: libpam
+License: BSD-3c GPL
+LicenseFiles: COPYING Copyright
+Section: libs
+SourceDateEpoch: 1733820553
+CPE-ID: cpe:/a:kernel:linux-pam
+Maintainer: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>
+Architecture: arm_cortex-a7_neon-vfpv4
+Installed-Size: 44692
+Description:  The Linux-PAM Pluggable Authentication Modules.

opkg-feed/installer/openwrt-sdxlemur-skel/control/libpam.prerm

@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@

opkg-feed/installer/openwrt-sdxlemur-skel/control/libpcre.control

@@ -0,0 +1,14 @@
+Package: libpcre
+Version: 8.45-2
+Depends: libc
+Source: package/libs/pcre
+SourceName: libpcre
+License: BSD-3-Clause
+LicenseFiles: LICENCE
+Section: libs
+SourceDateEpoch: 1690286952
+CPE-ID: cpe:/a:pcre:pcre
+Maintainer: Thomas Heil <heil@terminal-consulting.de>
+Architecture: arm_cortex-a7_neon-vfpv4
+Installed-Size: 139329
+Description:  A Perl Compatible Regular Expression library

opkg-feed/installer/openwrt-sdxlemur-skel/control/libpcre.prerm

@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@

opkg-feed/installer/openwrt-sdxlemur-skel/control/libpthread.control

@@ -0,0 +1,14 @@
+Package: libpthread
+Version: 1.2.3-4
+Depends: libgcc1
+Source: package/libs/toolchain
+SourceName: libpthread
+License: GPL-3.0-with-GCC-exception
+Section: libs
+SourceDateEpoch: 1690286952
+Status: unknown hold not-installed
+Essential: yes
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: arm_cortex-a7_neon-vfpv4
+Installed-Size: 124
+Description:  POSIX thread library

opkg-feed/installer/openwrt-sdxlemur-skel/control/libpthread.prerm

@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@

opkg-feed/installer/openwrt-sdxlemur-skel/control/libselinux.control

@@ -0,0 +1,19 @@
+Package: libselinux
+Version: 3.3-2
+Depends: libc, libsepol, libpcre, musl-fts
+Source: package/libs/libselinux
+SourceName: libselinux
+License: libselinux-1.0
+LicenseFiles: LICENSE
+Section: libs
+SourceDateEpoch: 1690286952
+Maintainer: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
+Architecture: arm_cortex-a7_neon-vfpv4
+Installed-Size: 57915
+Description:  libselinux is the runtime SELinux library that provides
+ interfaces (e.g. library functions for the SELinux kernel
+ APIs like getcon(), other support functions like
+ getseuserbyname()) to SELinux-aware applications. libselinux
+ may use the shared libsepol to manipulate the binary policy
+ if necessary (e.g. to downgrade the policy format to an
+ older version supported by the kernel) when loading policy.

opkg-feed/installer/openwrt-sdxlemur-skel/control/libselinux.prerm

@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@

opkg-feed/installer/openwrt-sdxlemur-skel/control/libsepol.control

@@ -0,0 +1,12 @@
+Package: libsepol
+Version: 3.3-1
+Depends: libc
+Source: package/libs/libsepol
+SourceName: libsepol
+Section: libs
+SourceDateEpoch: 1690286952
+Maintainer: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
+Architecture: arm_cortex-a7_neon-vfpv4
+Installed-Size: 246731
+Description:  Libsepol is the binary policy manipulation library. It doesn't
+ depend upon or use any of the other SELinux components.

opkg-feed/installer/openwrt-sdxlemur-skel/control/libsepol.prerm

@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@

opkg-feed/installer/openwrt-sdxlemur-skel/control/libubox20220515.control

@@ -0,0 +1,14 @@
+Package: libubox20220515
+Version: 2022-05-15-d2223ef9-1
+Depends: libc
+Provides: libubox
+Source: package/libs/libubox
+SourceName: libubox
+License: ISC
+Section: libs
+SourceDateEpoch: 1702278598
+ABIVersion: 20220515
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: arm_cortex-a7_neon-vfpv4
+Installed-Size: 18119
+Description:  Basic utility library

opkg-feed/installer/openwrt-sdxlemur-skel/control/libubox20220515.prerm

@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@

opkg-feed/installer/openwrt-sdxlemur-skel/control/libuclient20201210.control

@@ -0,0 +1,14 @@
+Package: libuclient20201210
+Version: 2023-04-13-007d9454-1
+Depends: libc, libubox20220515
+Provides: libuclient
+Source: package/libs/uclient
+SourceName: libuclient
+License: ISC
+Section: libs
+SourceDateEpoch: 1699448151
+ABIVersion: 20201210
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: arm_cortex-a7_neon-vfpv4
+Installed-Size: 8658
+Description:  HTTP/1.1 client library

opkg-feed/installer/openwrt-sdxlemur-skel/control/libuclient20201210.prerm

@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@

opkg-feed/installer/openwrt-sdxlemur-skel/control/musl-fts.control

@@ -0,0 +1,13 @@
+Package: musl-fts
+Version: 1.2.7-1
+Depends: libc, libpthread
+Source: package/libs/musl-fts
+SourceName: musl-fts
+License: LGPL-2.1
+LicenseFiles: COPYING AUTHORS
+Section: libs
+SourceDateEpoch: 1690286952
+Maintainer: Lucian Cristian <lucian.cristian@gmail.com>
+Architecture: arm_cortex-a7_neon-vfpv4
+Installed-Size: 4279
+Description:  The musl-fts package implements the fts(3) functions fts_open, fts_read, fts_children, fts_set and fts_close, which are missing in musl libc.

opkg-feed/installer/openwrt-sdxlemur-skel/control/musl-fts.prerm

@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@

opkg-feed/installer/openwrt-sdxlemur-skel/control/opkg.conffiles

@@ -0,0 +1,2 @@
+/etc/opkg.conf
+/etc/opkg/customfeeds.conf

opkg-feed/installer/openwrt-sdxlemur-skel/control/opkg.control

@@ -0,0 +1,20 @@
+Package: opkg
+Version: 2022-02-24-d038e5b6-2
+Depends: libc, uclient-fetch, libpthread, libubox20220515
+Source: package/system/opkg
+SourceName: opkg
+License: GPL-2.0
+LicenseFiles: COPYING
+Section: base
+SourceDateEpoch: 1690286952
+Essential: yes
+Maintainer: Jo-Philipp Wich <jo@mein.io>
+Architecture: arm_cortex-a7_neon-vfpv4
+Installed-Size: 68562
+Description:  Lightweight package management system
+ opkg is the opkg Package Management System, for handling
+ installation and removal of packages on a system. It can
+ recursively follow dependencies and download all packages
+ necessary to install a particular package.
+ 
+ opkg knows how to install both .ipk and .deb packages.

opkg-feed/installer/openwrt-sdxlemur-skel/control/opkg.prerm

@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@

opkg-feed/installer/openwrt-sdxlemur-skel/control/uclient-fetch.control

@@ -0,0 +1,14 @@
+Package: uclient-fetch
+Version: 2023-04-13-007d9454-1
+Depends: libc, libuclient20201210
+Provides: wget
+Alternatives: 200:/usr/bin/wget:/bin/uclient-fetch
+Source: package/libs/uclient
+SourceName: uclient-fetch
+License: ISC
+Section: net
+SourceDateEpoch: 1699448151
+Maintainer: Felix Fietkau <nbd@nbd.name>
+Architecture: arm_cortex-a7_neon-vfpv4
+Installed-Size: 7875
+Description:  Tiny wget replacement using libuclient

opkg-feed/installer/openwrt-sdxlemur-skel/control/uclient-fetch.prerm

@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -s ${IPKG_INSTROOT}/lib/functions.sh ] || exit 0
+. ${IPKG_INSTROOT}/lib/functions.sh
+default_prerm $0 $@

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/ash

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/cat

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/chgrp

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/chmod

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/chown

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/cp

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/date

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/dd

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/df

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/dmesg

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/echo

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/egrep

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/false

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/fgrep

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/fsync

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/grep

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/gunzip

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/gzip

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/kill

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/ln

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/lock

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/login

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/ls

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/mkdir

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/mknod

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/mktemp

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/mount

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/mv

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/netmsg

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/netstat

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/nice

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/passwd

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/pidof

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/ping

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/ping6

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/printenv

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/ps

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/pwd

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/rm

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/rmdir

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/sed

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/sh

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/sleep

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/sync

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/tar

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/touch

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/traceroute

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/traceroute6

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/true

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/umount

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/uname

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/vi

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/bin/zcat

@@ -0,0 +1 @@
+busybox

opkg-feed/installer/openwrt-sdxlemur-skel/data/etc/capabilities/ntpd.json

@@ -0,0 +1,22 @@
+{
+	"bounding": [
+		"CAP_NET_BIND_SERVICE",
+		"CAP_SYS_TIME"
+	],
+	"effective": [
+		"CAP_NET_BIND_SERVICE",
+		"CAP_SYS_TIME"
+	],
+	"ambient": [
+		"CAP_NET_BIND_SERVICE",
+		"CAP_SYS_TIME"
+	],
+	"permitted": [
+		"CAP_NET_BIND_SERVICE",
+		"CAP_SYS_TIME"
+	],
+	"inheritable": [
+		"CAP_NET_BIND_SERVICE",
+		"CAP_SYS_TIME"
+	]
+}

opkg-feed/installer/openwrt-sdxlemur-skel/data/etc/init.d/cron

@@ -0,0 +1,41 @@
+#!/bin/sh /etc/rc.common
+# Copyright (C) 2006-2011 OpenWrt.org
+
+START=50
+
+USE_PROCD=1
+PROG=/usr/sbin/crond
+
+validate_cron_section() {
+	uci_validate_section system system "${1}" \
+		'cronloglevel:uinteger'
+}
+
+start_service() {
+	[ -z "$(ls /etc/crontabs/)" ] && return 1
+
+	loglevel="$(uci_get "system.@system[0].cronloglevel")"
+
+	[ -z "${loglevel}" ] || {
+		/sbin/validate_data uinteger "${loglevel}" 2>/dev/null
+		[ "$?" -eq 0 ] || {
+			echo "validation failed"
+			return 1
+		}
+	}
+
+	mkdir -p /var/spool/cron
+	ln -s /etc/crontabs /var/spool/cron/ 2>/dev/null
+
+	procd_open_instance
+	procd_set_param command "$PROG" -f -c /etc/crontabs -l "${loglevel:-5}"
+	for crontab in /etc/crontabs/*; do
+		 procd_set_param file "$crontab"
+	done
+	procd_set_param respawn
+	procd_close_instance
+}
+
+service_triggers() {
+	procd_add_validation validate_cron_section
+}

opkg-feed/installer/openwrt-sdxlemur-skel/data/etc/init.d/sysntpd

@@ -0,0 +1,130 @@
+#!/bin/sh /etc/rc.common
+# Copyright (C) 2011 OpenWrt.org
+
+START=98
+
+USE_PROCD=1
+PROG=/usr/sbin/ntpd
+HOTPLUG_SCRIPT=/usr/sbin/ntpd-hotplug
+
+get_dhcp_ntp_servers() {
+	local interfaces="$1"
+	local filter="*"
+	local interface ntpservers ntpserver
+
+	for interface in $interfaces; do
+		[ "$filter" = "*" ] && filter="@.interface='$interface'" || filter="$filter,@.interface='$interface'"
+	done
+
+	ntpservers=$(ubus call network.interface dump | jsonfilter -e "@.interface[$filter]['data']['ntpserver']")
+
+	for ntpserver in $ntpservers; do
+		local duplicate=0
+		local entry
+		for entry in $server; do
+			[ "$ntpserver" = "$entry" ] && duplicate=1
+		done
+		[ "$duplicate" = 0 ] && server="$server $ntpserver"
+	done
+}
+
+validate_ntp_section() {
+	uci_load_validate system timeserver "$1" "$2" \
+		'dhcp_interface:list(string)' \
+		'enable_server:bool:0' \
+		'enabled:bool:1' \
+		'interface:string' \
+		'server:list(host)' \
+		'use_dhcp:bool:1'
+}
+
+start_ntpd_instance() {
+	local peer
+
+	[ "$2" = 0 ] || {
+		echo "validation failed"
+		return 1
+	}
+
+	[ $enabled = 0 ] && return
+
+	[ $use_dhcp = 1 ] && get_dhcp_ntp_servers "$dhcp_interface"
+
+	[ -z "$server" -a "$enable_server" = "0" ] && return
+
+	procd_open_instance
+	procd_set_param command "$PROG" -n -N
+	if [ "$enable_server" = "1" ]; then
+		procd_append_param command -l
+		[ -n "$interface" ] && {
+			local ifname
+
+			network_get_device ifname "$interface" || \
+				ifname="$interface"
+			procd_append_param command -I "$ifname"
+			procd_append_param netdev "$ifname"
+		}
+	fi
+	[ -x "$HOTPLUG_SCRIPT" ] && procd_append_param command -S "$HOTPLUG_SCRIPT"
+	for peer in $server; do
+		procd_append_param command -p $peer
+	done
+	procd_set_param respawn
+	#[ -x /sbin/ujail -a -e /etc/capabilities/ntpd.json ] && {
+	#	procd_add_jail ntpd ubus
+	#	procd_add_jail_mount "$HOTPLUG_SCRIPT"
+	#	procd_add_jail_mount "/usr/share/libubox/jshn.sh"
+	#	procd_add_jail_mount "/usr/bin/env"
+	#	procd_add_jail_mount "/usr/bin/jshn"
+	#	procd_add_jail_mount "/bin/ubus"
+	#	procd_set_param capabilities /etc/capabilities/ntpd.json
+	#	procd_set_param user ntp
+	#	procd_set_param group ntp
+	#	procd_set_param no_new_privs 1
+	#}
+	procd_close_instance
+}
+
+start_service() {
+	. /lib/functions/network.sh
+	validate_ntp_section ntp start_ntpd_instance
+}
+
+service_triggers() {
+	local script name use_dhcp enable_server interface
+
+	script=$(readlink -f "$initscript")
+	name=$(basename ${script:-$initscript})
+
+	procd_add_config_trigger "config.change" "system" /etc/init.d/$name reload
+
+	config_load system
+	config_get use_dhcp ntp use_dhcp 1
+
+	[ $use_dhcp = 1 ] && {
+		local dhcp_interface
+		config_get dhcp_interface ntp dhcp_interface
+
+		if [ -n "$dhcp_interface" ]; then
+			for n in $dhcp_interface; do
+				procd_add_interface_trigger "interface.*" $n /etc/init.d/$name reload
+			done
+		else
+			procd_add_raw_trigger "interface.*" 1000 /etc/init.d/$name reload
+		fi
+	}
+
+	config_get_bool enable_server ntp enable_server 0
+	config_get interface ntp interface
+
+	[ $enable_server -eq 1 ] && [ -n "$interface" ] && {
+		local ifname
+
+		network_get_device ifname "$interface" || \
+			ifname="$interface"
+		procd_add_interface_trigger "interface.*" "$ifname" \
+			/etc/init.d/"$name" reload
+	}
+
+	procd_add_validation validate_ntp_section
+}

opkg-feed/installer/openwrt-sdxlemur-skel/data/etc/opkg.conf

@@ -0,0 +1,5 @@
+dest root /
+dest ram /tmp
+lists_dir ext /var/opkg-lists
+option overlay_root /overlay
+option check_signature

opkg-feed/installer/openwrt-sdxlemur-skel/data/etc/opkg/customfeeds.conf

@@ -0,0 +1,3 @@
+# add your custom package feeds here
+#
+# src/gz example_feed_name http://www.example.com/path/to/files

opkg-feed/installer/openwrt-sdxlemur-skel/data/etc/pam.conf

@@ -0,0 +1,15 @@
+# ---------------------------------------------------------------------------#
+# /etc/pam.conf								     #
+# ---------------------------------------------------------------------------#
+#
+# NOTE
+# ----
+#
+# NOTE: Most program use a file under the /etc/pam.d/ directory to setup their
+# PAM service modules. This file is used only if that directory does not exist.
+# ---------------------------------------------------------------------------#
+
+# Format:
+# serv.	module	   ctrl	      module [path]	...[args..]		     #
+# name	type	   flag							     #
+

opkg-feed/installer/openwrt-sdxlemur-skel/data/etc/pam.d/common-account

@@ -0,0 +1,20 @@
+#
+# /etc/pam.d/common-account - authorization settings common to all services
+#
+# This file is included from other service-specific PAM config files,
+# and should contain a list of the authorization modules that define
+# the central access policy for use on the system.  The default is to
+# only deny service to users whose accounts are expired in /etc/shadow.
+#
+
+# here are the per-package modules (the "Primary" block)
+account	[success=1 new_authtok_reqd=done default=ignore]	pam_unix.so 
+# here's the fallback if no module succeeds
+account	requisite			pam_deny.so
+# prime the stack with a positive return value if there isn't one already;
+# this avoids us returning an error just because nothing sets a success code
+# since the modules above will each just jump around
+account	required			pam_permit.so
+# and here are more per-package modules (the "Additional" block)
+
+# end of pam-auth-update config

opkg-feed/installer/openwrt-sdxlemur-skel/data/etc/pam.d/common-auth

@@ -0,0 +1,21 @@
+#
+# /etc/pam.d/common-auth - authentication settings common to all services
+#
+# This file is included from other service-specific PAM config files,
+# and should contain a list of the authentication modules that define
+# the central authentication scheme for use on the system
+# (e.g., /etc/shadow, LDAP, Kerberos, etc.).  The default is to use the
+# traditional Unix authentication mechanisms.
+#
+
+# here are the per-package modules (the "Primary" block)
+auth	[success=1 default=ignore]	login_pw.so
+# here's the fallback if no module succeeds
+auth	requisite			pam_deny.so
+# prime the stack with a positive return value if there isn't one already;
+# this avoids us returning an error just because nothing sets a success code
+# since the modules above will each just jump around
+auth	required			pam_permit.so
+# and here are more per-package modules (the "Additional" block)
+
+# end of pam-auth-update config

opkg-feed/installer/openwrt-sdxlemur-skel/data/etc/pam.d/common-password

@@ -0,0 +1,28 @@
+#
+# /etc/pam.d/common-password - password-related modules common to all services
+#
+# This file is included from other service-specific PAM config files,
+# and should contain a list of modules that define the services to be
+# used to change user passwords.  The default is pam_unix.
+
+# Explanation of pam_unix options:
+#
+# The "sha512" option enables salted SHA512 passwords.  Without this option,
+# the default is Unix crypt.  Prior releases used the option "md5".
+#
+# The "obscure" option replaces the old `OBSCURE_CHECKS_ENAB' option in
+# login.defs.
+#
+# See the pam_unix manpage for other options.
+
+# here are the per-package modules (the "Primary" block)
+password	[success=1 default=ignore]	pam_unix.so obscure sha512
+# here's the fallback if no module succeeds
+password	requisite			pam_deny.so
+# prime the stack with a positive return value if there isn't one already;
+# this avoids us returning an error just because nothing sets a success code
+# since the modules above will each just jump around
+password	required			pam_permit.so
+# and here are more per-package modules (the "Additional" block)
+
+# end of pam-auth-update config

opkg-feed/installer/openwrt-sdxlemur-skel/data/etc/pam.d/common-session

@@ -0,0 +1,25 @@
+#
+# /etc/pam.d/common-session - session-related modules common to all services
+#
+# This file is included from other service-specific PAM config files,
+# and should contain a list of modules that define tasks to be performed
+# at the start and end of sessions of *any* kind (both interactive and
+# non-interactive).
+#
+
+# here are the per-package modules (the "Primary" block)
+session	[default=1]			pam_permit.so
+# here's the fallback if no module succeeds
+session	requisite			pam_deny.so
+# prime the stack with a positive return value if there isn't one already;
+# this avoids us returning an error just because nothing sets a success code
+# since the modules above will each just jump around
+session	required			pam_permit.so
+# The pam_umask module will set the umask according to the system default in
+# /etc/login.defs and user settings, solving the problem of different
+# umask settings with different shells, display managers, remote sessions etc.
+# See "man pam_umask".
+session optional			pam_umask.so
+# and here are more per-package modules (the "Additional" block)
+session	required			pam_unix.so 
+# end of pam-auth-update config

opkg-feed/installer/openwrt-sdxlemur-skel/data/etc/pam.d/common-session-noninteractive

@@ -0,0 +1,25 @@
+#
+# /etc/pam.d/common-session-noninteractive - session-related modules
+# common to all non-interactive services
+#
+# This file is included from other service-specific PAM config files,
+# and should contain a list of modules that define tasks to be performed
+# at the start and end of all non-interactive sessions.
+#
+
+# here are the per-package modules (the "Primary" block)
+session	[default=1]			pam_permit.so
+# here's the fallback if no module succeeds
+session	requisite			pam_deny.so
+# prime the stack with a positive return value if there isn't one already;
+# this avoids us returning an error just because nothing sets a success code
+# since the modules above will each just jump around
+session	required			pam_permit.so
+# The pam_umask module will set the umask according to the system default in
+# /etc/login.defs and user settings, solving the problem of different
+# umask settings with different shells, display managers, remote sessions etc.
+# See "man pam_umask".
+session optional			pam_umask.so
+# and here are more per-package modules (the "Additional" block)
+session	required			pam_unix.so 
+# end of pam-auth-update config

opkg-feed/installer/openwrt-sdxlemur-skel/data/etc/pam.d/other

@@ -0,0 +1,16 @@
+#
+# /etc/pam.d/other - specify the PAM fallback behaviour
+#
+# Note that this file is used for any unspecified service; for example
+#if /etc/pam.d/cron  specifies no session modules but cron calls
+#pam_open_session, the session module out of /etc/pam.d/other is
+#used.  If you really want nothing to happen then use pam_permit.so or
+#pam_deny.so as appropriate.
+
+# We fall back to the system default in /etc/pam.d/common-*
+# 
+
+auth       include      common-auth
+account    include      common-account
+password   include      common-password
+session    include      common-session