tollgate-wrt uninstallable on OpenWrt 25.12: nodogsplash's iptables deps missing from every 25.12 feed
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 35/100
- Issue type
- Bug
- Clarity
- Mostly clear
- Activity status
- Active
- Tech stack
- linux
- Domain
- devops, networking
Research direction
Start by reproducing the install failure on OpenWrt 25.12.5 and checking the nodogsplash package metadata against the available feeds; the issue does not identify repository files or tests. Verify whether a newer nftables-compatible nodogsplash release removes the missing iptables dependencies, then determine which proposed path is feasible. Done means the package installs on 25.12, or its unsupported status and supported target are clearly documented.
Written by the indexing model from the issue text.
Description
Summary
tollgate-wrt is uninstallable on OpenWrt 25.12.5 (the current apk-based release the CI's .apk targets exist for): its nodogsplash dependency cannot be resolved from any official 25.12.5 feed.
Reproduction (x86_64, clean 25.12.5)
# apk add --allow-untrusted /tmp/tollgate-wrt_0.6.0_alpha4_pre15_x86_64.apk
ERROR: unable to select packages:
nodogsplash (no such package):
required by: tollgate-wrt-…[nodogsplash]
Fetching nodogsplash-5.0.2-r2.apk from the 25.12.5 routing feed manually and staging it with jq:
# apk add --allow-unforced /tmp/*.apk
ERROR: unable to select packages:
iptables-mod-conntrack-extra (no such package): required by: nodogsplash-5.0.2-r2[…]
iptables-mod-ipopt (no such package): required by: nodogsplash-5.0.2-r2[…]
iptables-mod-nat-extra (no such package): required by: nodogsplash-5.0.2-r2[…]
iptables-nft (no such package): required by: nodogsplash-5.0.2-r2[…]
libmicrohttpd-no-ssl (no such package): required by: nodogsplash-5.0.2-r2[…]
libmicrohttpd-no-ssl comes from the packages feed (solvable). The four
iptables-* packages do not exist in any 25.12.5 feed (base/packages/
routing — the release dropped the iptables family from base, and the
routing feed's nodogsplash-5.0.2-r2 was not rebuilt against the
nftables-only world). Snapshots' routing feed has no newer nodogsplash
either. There is no dependency closure to hand-stage.
Why this matters
- Every
.apkCI target assumes a 25.x consumer; the package installs on
24.10 (ipk) only. - The router side of the test fleet can't move to 25.12.
- Found while provisioning a 25.12.5 OpenWrt AP VM for the Cuttlefish phone
lane (PRTA); the 24.10-based venue continues to work.
Options (not exhaustive)
- Carry/provide the four iptables compat packages from our feed
(FreedomTechFeed) for 25.12 — the old base versions still build. - Patch/rebuild nodogsplash for the nft-only world (upstream
nodogsplash ≥ 5.0.3 claims fw4 native support — worth verifying which
release dropped the iptables deps) and host it in FreedomTechFeed. - Short-term: pin
.apkartifacts to 24.10 users installing via apk on
24.10.x, and document 25.12 as unsupported until 1 or 2 lands.
Environment: OpenWrt 25.12.5 x86_64 (crosvm VM), tollgate-wrt
0.6.0-alpha4-pre15 from FreedomTechFeed/packages.
- Dominant language
- Go
- Stars
- 12
- Forks
- 14
- Avg merge
- 1d 5h
- Merged PRs (30d)
- 220
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from OpenTollGate/tollgate-module-basic-go
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
OpenTollGate/tollgate-module-basic-go#833 ·
Maintainers usually reply within 1 day
-
merchant: TestPurchaseSessionGuardHoldsThroughTheOutcomeUnknownWindow fails deterministically without ndsctl on PATH — harness installs no fake (needs installRenewalNdsctl)Possibly taken A pull request linked to this issue is open or already merged. Open
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
OpenTollGate/tollgate-module-basic-go#822 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
OpenTollGate/tollgate-module-basic-go#813 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
OpenTollGate/tollgate-module-basic-go#804 ·
Maintainers usually reply within 1 day
-
go-battery needs an ndsctl on PATH: TestPurchaseSessionGuardHoldsThroughTheOutcomeUnknownWindow fails on bare hosts (passes with stub)Possibly taken @Amperstrand claimed this 2 days ago. Open
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
OpenTollGate/tollgate-module-basic-go#726 · 2 comments ·
Maintainers usually reply within 1 day
All issues in OpenTollGate/tollgate-module-basic-go
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
siyuan-note/siyuan#20353 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
Maintainers usually reply within 1 day
-
attributes-natural-language "en-US" is rejected by PAPPL >= 1.4.12 printers (RFC 8011 requires lowercase)Possibly taken @ChrisEdgington claimed this today. Open
Difficulty 1/5 Under an hour Newbie friendliness 84/100
OpenPrinting/ipp-usb#140 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
containers/oci-delta#86 ·