How I have installed Orb.
root@rt-mro:~# wget -qO- https://pkgs.orb.net/install.sh | sh
Installing Orb for openwrt 24, using method opkg
Found opkg config at /etc/opkg/customfeeds.conf
Found opkg keys directory at /etc/opkg/keys
ArchLinux: https://archlinux.org/ Main documentaion: https://docs.portainer.io/start/install-ce
Instead of creating Docker volume, just use mount:
# One time setup
docker volume create portainer_data
Install necessary packages
opkg update
opkg install luci-proto-wireguard
Generate keys on each peer. I use https://github.com/warner/wireguard-vanity-address to have some nice prefix
opkg update opkg install umdns
mkdir /etc/umdns
SSH advertisemnt comes from dropbear. Add following to afvertise LUCI:
ubus call umdns update ubus call umdns browse
I prefer to run UniFi controller in my DMZ network zone, instead of doing Docker port forward. So I just created VLAN aware Docker network.
docker network create --driver=ipvlan --subnet=192.168.17.0/24 --gateway=192.168.17.1 --ip-range=192.168.17.64/28 -o parent=enp1s0 ipvlan17
Updates to /etc/config/network should include the following:
# on the eth1 interface that is wired to ONT, we want to enable baby jumbo frame
# this will allow pppoe client to set MTU of 1500 matching ethernet MTU on lan interface
config device
option name 'eth1'
option mtu '1508'
| # Install Docker first | |
| pacman -S docker | |
| # Create subvolume for Docker images | |
| cd /mnt/t20root | |
| btrfs subvolume create svols/docker | |
| # Create subvolume 'svols/docker' | |
| btrfs subvolume list . | |
| # ID 256 gen 1349 top level 5 path svols/root |
| # Generate initial login password for installation | |
| tr -dc A-Za-z0-9 </dev/urandom | head -c 15 ; echo '' | |
| # Clear known SSH key after (re-) installing OS on bare metal: | |
| ssh-keygen -R 195.154.112.70 | |
| # # Host 195.154.112.70 found: line 52 | |
| # /c/Users/proko/.ssh/known_hosts updated. | |
| # Original contents retained as /c/Users/proko/.ssh/known_hosts.old | |
| # Try to SSH to new server using username and password from server properties. |