FHE 2026 and post updates, sync-up (#268)

* update to br 2026.5 rc1

* try this patch

* oops

* kernel push

* fix pi 3 defconfig

* remove dma alignment patch

* try 6.12 patch nrc

* try 6.12 patch nrc 2

* new networking, some lte utils

* attempt to use mbox

* update nrc patch

* settings for this year

* another fix

* another fix

* mvp lte

* disable nrc, fix mosquitto

* ap

* ap full config test

* wheel password

* take wheel pwd

* oops

* balnking

* oops

* oops and perms

Author: jr1221

.github/workflows/build_image.yml

@@ -51,9 +51,10 @@ jobs:
             ODY_AP_ROOT_PASSWORD: ${{ secrets.ODY_AP_ROOT_PASSWORD }}
             ODY_TPU_ROOT_PASSWORD: ${{ secrets.ODY_TPU_ROOT_PASSWORD }}
             ODY_WHEEL_ROOT_PASSWORD: ${{ secrets.ODY_WHEEL_ROOT_PASSWORD }}
+            ODY_WHEEL_AP_PASSWORD: ${{ secrets.ODY_WHEEL_AP_PASSWORD }}
             ODY_IROH_ROOT_PASSWORD: ${{ secrets.ODY_IROH_ROOT_PASSWORD }}
             MASTER_PASSWORD: ${{ secrets.ODY_MASTER_PASSWORD }}
-        run:  for i in ODY_AP_ROOT_PASSWORD ODY_TPU_ROOT_PASSWORD ODY_WHEEL_ROOT_PASSWORD ODY_IROH_ROOT_PASSWORD ODY_BASE_WIFI_PASSWORD ODY_BASE_FIELD_WIFI_PASSWORD; do echo "$i=${!i}" >> SECRETS.env; done; echo "" >> SECRETS.env; gpg --batch --symmetric --passphrase "$MASTER_PASSWORD" --no-symkey-cache --cipher-algo AES256 SECRETS.env
+        run:  for i in ODY_AP_ROOT_PASSWORD ODY_TPU_ROOT_PASSWORD ODY_WHEEL_ROOT_PASSWORD ODY_WHEEL_AP_PASSWORD ODY_IROH_ROOT_PASSWORD ODY_BASE_WIFI_PASSWORD ODY_BASE_FIELD_WIFI_PASSWORD; do echo "$i=${!i}" >> SECRETS.env; done; echo "" >> SECRETS.env; gpg --batch --symmetric --passphrase "$MASTER_PASSWORD" --no-symkey-cache --cipher-algo AES256 SECRETS.env
       # This step uses the `docker/build-push-action` action to build the image, based on your repository's `Dockerfile`. If the build succeeds, it pushes the image to GitHub Packages.
       # It uses the `context` parameter to define the build's context as the set of files located in the specified path. For more information, see "[Usage](https://github.com/docker/build-push-action#usage)" in the README of the `docker/build-push-action` repository.
       # It uses the `tags` and `labels` parameters to tag and label the image with the output from the "meta" step.

Dockerfile

@@ -37,8 +37,7 @@ RUN apt-get update && apt-get install -y \
 
 # add all buildroot files there
 WORKDIR /home/odysseus/build
-
-RUN  git clone https://gitlab.com/buildroot.org/buildroot.git && cd ./buildroot && git checkout 2025.11.1 && curl https://patchwork.ozlabs.org/series/460278/mbox/ | git apply
+RUN  git clone https://gitlab.com/buildroot.org/buildroot.git && cd ./buildroot && git checkout 2026.05-rc1 && curl https://patchwork.ozlabs.org/series/504330/mbox/ | git apply
 
 
 WORKDIR /home/odysseus/outputs/

compose.yml

@@ -1,7 +1,7 @@
 services:
     odysseus:
         build: .
-        image: ghcr.io/northeastern-electric-racing/odysseus:develop-stability-and-improvements
+        image: ghcr.io/northeastern-electric-racing/odysseus:fhe-25-static
         command: /bin/bash
         tty: true
         stdin_open: true
@@ -24,6 +24,7 @@ services:
             - ODY_AP_ROOT_PASSWORD=password
             - ODY_BASE_WIFI_PASSWORD=password
             - ODY_WHEEL_ROOT_PASSWORD=password
+            - ODY_WHEEL_AP_PASSWORD=password
 volumes:
     shared_data:
         labels:

docker_scripts/setup_env.sh

@@ -5,7 +5,6 @@ alias load-secrets="source /home/odysseus/scripts/load-secrets.sh"
 
 # for each defconfig make output subdirectory 
 make -C /home/odysseus/build/buildroot O=/home/odysseus/outputs/tpu BR2_EXTERNAL=/home/odysseus/build/odysseus_tree raspberrypi4_64_tpu_defconfig
-make -C /home/odysseus/build/buildroot O=/home/odysseus/outputs/ap-pi4 BR2_EXTERNAL=/home/odysseus/build/odysseus_tree raspberrypi4_64_ap_defconfig
 make -C /home/odysseus/build/buildroot O=/home/odysseus/outputs/iroh BR2_EXTERNAL=/home/odysseus/build/odysseus_tree raspberrypi3_64_iroh_defconfig
 make -C /home/odysseus/build/buildroot O=/home/odysseus/outputs/ap-pi5 BR2_EXTERNAL=/home/odysseus/build/odysseus_tree raspberrypi5_ap_defconfig
 make -C /home/odysseus/build/buildroot O=/home/odysseus/outputs/tpu-cm5 BR2_EXTERNAL=/home/odysseus/build/odysseus_tree raspberrypicm5io_tpu_defconfig

odysseus_tree/configs/raspberrypi3_64_iroh_defconfig

@@ -17,8 +17,8 @@ BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypi3-64/post-image.sh"
 BR2_ROOTFS_POST_SCRIPT_ARGS="IROH"
 BR2_LINUX_KERNEL=y
 BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
-BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,bba53a117a4a5c29da892962332ff1605990e17a)/linux-bba53a117a4a5c29da892962332ff1605990e17a.tar.gz"
-BR2_LINUX_KERNEL_DEFCONFIG="bcmrpi3"
+BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
+BR2_LINUX_KERNEL_DEFCONFIG="bcm2711"
 BR2_LINUX_KERNEL_DTS_SUPPORT=y
 BR2_LINUX_KERNEL_INTREE_DTS_NAME="broadcom/bcm2710-rpi-3-b broadcom/bcm2710-rpi-3-b-plus broadcom/bcm2710-rpi-cm3"
 BR2_LINUX_KERNEL_NEEDS_HOST_OPENSSL=y

odysseus_tree/configs/raspberrypi4_64_ap_defconfig

@@ -18,7 +18,7 @@ BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypi4-64/post-image.sh"
 BR2_ROOTFS_POST_SCRIPT_ARGS="TPU"
 BR2_LINUX_KERNEL=y
 BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
-BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,bba53a117a4a5c29da892962332ff1605990e17a)/linux-bba53a117a4a5c29da892962332ff1605990e17a.tar.gz"
+BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
 BR2_LINUX_KERNEL_PATCH="$(BR2_EXTERNAL_ODY_TREE_PATH)/linux_patches/nrc_halow"
 BR2_LINUX_KERNEL_DEFCONFIG="bcm2711"
 BR2_LINUX_KERNEL_DTS_SUPPORT=y
@@ -57,6 +57,7 @@ BR2_PACKAGE_CA_CERTIFICATES=y
 BR2_PACKAGE_OPENSSL=y
 BR2_PACKAGE_DTC=y
 BR2_PACKAGE_DTC_PROGRAMS=y
+BR2_PACKAGE_LIBQMI=y
 BR2_PACKAGE_X264=y
 BR2_PACKAGE_LIBCURL=y
 # BR2_PACKAGE_LIBCURL_COOKIES_SUPPORT is not set
@@ -69,6 +70,7 @@ BR2_PACKAGE_AVAHI_DEFAULT_SERVICES=y
 BR2_PACKAGE_BMON=y
 BR2_PACKAGE_CAN_UTILS=y
 BR2_PACKAGE_CHRONY=y
+BR2_PACKAGE_CLOUDFLARED=y
 BR2_PACKAGE_DHCPCD=y
 BR2_PACKAGE_DROPBEAR=y
 BR2_PACKAGE_ETHTOOL=y

odysseus_tree/configs/raspberrypi4_64_tpu_defconfig

@@ -17,7 +17,7 @@ BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypi5/post-image.sh"
 BR2_ROOTFS_POST_SCRIPT_ARGS="AP"
 BR2_LINUX_KERNEL=y
 BR2_LINUX_KERNEL_CUSTOM_TARBALL=y
-BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,bba53a117a4a5c29da892962332ff1605990e17a)/linux-bba53a117a4a5c29da892962332ff1605990e17a.tar.gz"
+BR2_LINUX_KERNEL_CUSTOM_TARBALL_LOCATION="$(call github,raspberrypi,linux,21b410140c47ffab5668399f6f143c7d7b935c8b)/linux-21b410140c47ffab5668399f6f143c7d7b935c8b.tar.gz"
 BR2_LINUX_KERNEL_PATCH="$(BR2_EXTERNAL_ODY_TREE_PATH)/linux_patches/nrc_halow"
 BR2_LINUX_KERNEL_DEFCONFIG="bcm2712"
 BR2_LINUX_KERNEL_CONFIG_FRAGMENT_FILES="board/raspberrypi/linux-4k-page-size.fragment"

odysseus_tree/configs/raspberrypi5_ap_defconfig

@@ -12,7 +12,7 @@ BR2_TARGET_GENERIC_ROOT_PASSWD="$(ODY_WHEEL_ROOT_PASSWORD)"
 BR2_TARGET_TZ_INFO=y
 BR2_TARGET_LOCALTIME="America/New_York"
 BR2_ROOTFS_OVERLAY="$(BR2_EXTERNAL_ODY_TREE_PATH)/overlays/rootfs_overlay_common $(BR2_EXTERNAL_ODY_TREE_PATH)/overlays/rootfs_overlay_wheel"
-BR2_ROOTFS_POST_BUILD_SCRIPT="$(BR2_EXTERNAL_ODY_TREE_PATH)/post-build-os-release.sh $(BR2_EXTERNAL_ODY_TREE_PATH)/post-build-base-connect.sh board/raspberrypicm5io/post-build.sh"
+BR2_ROOTFS_POST_BUILD_SCRIPT="$(BR2_EXTERNAL_ODY_TREE_PATH)/post-build-os-release.sh $(BR2_EXTERNAL_ODY_TREE_PATH)/post-build-base-connect.sh $(BR2_EXTERNAL_ODY_TREE_PATH)/post-build-hostapd-pass.sh board/raspberrypicm5io/post-build.sh"
 BR2_ROOTFS_POST_IMAGE_SCRIPT="board/raspberrypicm5io/post-image.sh"
 BR2_ROOTFS_POST_SCRIPT_ARGS="WHEEL"
 BR2_LINUX_KERNEL=y
@@ -77,8 +77,11 @@ BR2_PACKAGE_BMON=y
 BR2_PACKAGE_CAN_UTILS=y
 BR2_PACKAGE_CHRONY=y
 BR2_PACKAGE_DHCPCD=y
+BR2_PACKAGE_DNSMASQ=y
+BR2_PACKAGE_DNSMASQ_CONNTRACK=y
 BR2_PACKAGE_DROPBEAR=y
 BR2_PACKAGE_GESFTPSERVER=y
+BR2_PACKAGE_HOSTAPD=y
 # BR2_PACKAGE_IFUPDOWN_SCRIPTS is not set
 BR2_PACKAGE_IPERF3=y
 BR2_PACKAGE_IPROUTE2=y