confd: regenerate factory-config if factory-config.gen is missing

Regenerate if either factory-config.gen or failure-config.gen is missing. This should not happen, but is better to check for the result rather than the intermediate result. Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
Fix #166 : drop SSDP entirely from Infix
2026-07-22 17:23:00 +02:00 · 2023-10-17 16:32:41 +02:00 · 2023-10-17 16:32:41 +02:00 · 2023-10-17 13:26:26 +02:00 · 2023-10-17 13:26:26 +02:00 · 2023-10-17 13:26:26 +02:00
371 changed files with 22579 additions and 9315 deletions
@@ -2,16 +2,15 @@ Contributing to Infix
 =====================

 We welcome any and all help in the form of bug reports, fixes, patches
-to add new features -- *preferably as GitHub pull requests*.  Other
-methods are of course also possible: emailing the [maintainers][] a
-patch or even a raw file, a feature request or an alert of a problem.
+to add new features -- *preferably as GitHub pull requests*.

-If you are unsure of what to do, or how to implement an idea or bugfix,
-open an issue with `"[RFC: Unsure if this is a bug ... ?"`, or use the
-GitHub discussions forum, so we can discuss it.  Talking about the code
-first is the best way to get started before submitting a pull request.
+If you are unsure of what to do, or how to implement an idea or bug fix,
+open an issue with `"[RFC]: Unsure if this is a bug ... ?"`, or use the
+[GitHub discussions forum](https://github.com/orgs/kernelkit/discussions).
+Talking about code and problems first is often the best way to get started
+before submitting a pull request.

-Either way, when sending an email, patch, or pull request, start by
+When submitting a bug report, patch, or pull request, please start by
 stating the version the change is made against, what it does, and why.

 Please take care to ensure you follow the project coding style and the
@@ -72,7 +71,6 @@ The *"maintainers have the right and responsibility to remove, edit,
 or reject comments, commits, code, wiki edits, issues, and other
 contributions that are not aligned to this Code of Conduct."*

-[1]:        ../doc/MAINTAINERS
 [KNF]:      https://en.wikipedia.org/wiki/Kernel_Normal_Form
 [gitbook]:  https://git-scm.com/book/ch5-2.html
 [conduct]:  CODE-OF-CONDUCT.md
@@ -0,0 +1 @@
+Paid support and development provided by Addiva Elektronik <https://addiva.se>
@@ -1,16 +1,20 @@
+# To enable this workflow of your Infix fork, set the repoistory or
+# organisation variable (not secret):
+#
+#     LATEST_BUILD = true
+#
+# https://docs.github.com/en/actions/learn-github-actions/variables#creating-configuration-variables-for-a-repository
 name: Bob the Builder

 on:
-  pull_request:
+  push:
    branches:
      - main
-    types:
-      - closed
  workflow_dispatch:

 jobs:
  build:
-    if: ${{github.ref == 'refs/heads/main' && github.event_name == 'push'}} || github.event_name == 'workflow_dispatch'
+    if: ${{ vars.LATEST_BUILD == 'true' }}
    name: Build ${{ matrix.platform }} ${{ matrix.variant }}
    runs-on: ubuntu-latest
    strategy:
@@ -72,7 +76,7 @@ jobs:
        with:
          path: output/${{ steps.vars.outputs.tgz }}
  release:
-    if: github.repository == 'kernelkit/infix' && github.ref == 'refs/heads/main'
+    if: ${{github.repository_owner == 'kernelkit' && github.ref_name == 'main'}}
    name: Upload Latest Build
    needs: build
    runs-on: ubuntu-latest
@@ -81,7 +85,7 @@ jobs:
      - uses: pyTooling/Actions/releaser@main
        with:
          tag: latest
-          rm: true
+          rm: false
          token: ${{ secrets.GITHUB_TOKEN }}
          files: artifact/*
      - name: Summary
@@ -1,3 +1,9 @@
+# To enable this workflow of your Infix fork, set the repoistory or
+# organisation variable (not secret):
+#
+#     REGRESSION_TEST = true
+#
+# https://docs.github.com/en/actions/learn-github-actions/variables#creating-configuration-variables-for-a-repository
 name: Reggie Regression

 on:
@@ -15,10 +21,13 @@ concurrency:

 jobs:
  build:
+    if: ${{ vars.REGRESSION_TEST == 'true' }}
    name: Regression Testing
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
+        with:
+          submodules: 'true'
      - name: Set Build Variables
        id: vars
        run: |
@@ -59,6 +68,11 @@ jobs:
        uses: actions/upload-artifact@v3
        with:
          path: output/${{ steps.vars.outputs.tgz }}
+
      - name: Regression Test
-        run: |
-          make test-qeneth
+        run: make test-qeneth
+
+      - name: Publish Test Result
+        # Ensure this runs even if Regression Test fails
+        if: always()
+        run: cat test/.log/last/result-gh.md >> $GITHUB_STEP_SUMMARY
@@ -78,10 +78,11 @@ jobs:
    needs: build
    runs-on: ubuntu-latest
    steps:
+      - uses: actions/checkout@v3
      - uses: actions/download-artifact@v3
      - name: Extract ChangeLog entry ...
        run: |
-          awk '/-----*/{if (x == 1) exit; x=1;next}x' ChangeLog.md \
+          awk '/-----*/{if (x == 1) exit; x=1;next}x' doc/ChangeLog.md \
              |head -n -1 > release.md
          cat release.md
      - uses: ncipollo/release-action@v1
@@ -0,0 +1,28 @@
+# To enable automatic sync of your Infix fork every day, or on dispatch,
+# set the repoistory or organisation variable (not secret):
+#
+#     SYNC_FORK = true
+#
+# You also need a GH_SYNC_REPO token allowed to update workflows.  For
+# more information on variables and secrets, see the GitHub docs.
+# See https://docs.github.com/en/actions/learn-github-actions/variables
+name: Synchronize your fork of Infix with upstream
+
+on:
+  schedule:
+    - cron: 42 2 * * *
+  workflow_dispatch:
+
+jobs:
+  sync_fork:
+    if: ${{github.repository_owner != 'kernelkit' && vars.SYNC_FORK == 'true' }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: TobKed/github-forks-sync-action@master
+        with:
+          github_token: ${{ secrets.GH_SYNC_REPO }}
+          upstream_repository: KernelKit/infix
+          upstream_branch: main
+          target_branch: main
+          force: false
+          tags: true
@@ -1,7 +1,10 @@
 *~
 .gdb_history
+/.backup
 /.ccache
 /dl
 /output*
+/x-*
 /test/.venv
+/test/.log
 /local.mk
@@ -1,58 +0,0 @@
-Change Log
-==========
-
-All notable changes to the project are documented in this file.
-
-
-[v23.06.0][] - 2023-06-23
-------------------------
-
-Midsummer release.  The first official Infix release, based on [Buildroot
-2023.02.2][br2023.02.2], with NETCONF support using the [sysrepo][] and
-[netopeer2][].
-
-Supported YANG models in addition to those used by sysrepo and netopeer:
-
- - [ietf-system][]
-   - Everything except radius authentication and timezone-utc-offset
-   - Augmented with MotD (Message of the Day), Infix YANG model
- - [ietf-interfaces][]
-   - [ietf-ip][] augmented with IPv4LL similar to standardized IPv6LL
-   - [ietf-if-vlan-encapsulation][], Linux VLAN interfaces, e.g. `eth0.10`
-   - Linux bridge interfaces with native VLAN support, Infix YANG model
-   - Linux VETH pairs, Infix YANG model
-
-> **DISCLAIMER:** the [Infix YANG models for Linux][yang23.06], are
-> still under heavy development.  New revisions are expected which may
-> not be backwards compatible.  When upgrading to a new release, test on
-> a GNS3 staging environment first, or start over from a factory reset.
-
-[br2023.02.2]:     https://git.busybox.net/buildroot/tag/?h=2023.02.2
-[ietf-system]:     https://www.rfc-editor.org/rfc/rfc7317.html
-[ietf-interfaces]: https://www.rfc-editor.org/rfc/rfc7223.html
-[ietf-ip]:         https://www.rfc-editor.org/rfc/rfc8344.html
-[ietf-if-vlan-encapsulation]: https://www.ietf.org/id/draft-ietf-netmod-sub-intf-vlan-model-08.html
-[yang23.06]:       https://github.com/kernelkit/infix/blob/aea74842e0475441d8df834f2dcd8cbc21fa253d/src/confd/yang/infix-interfaces%402023-06-05.yang
-
-### Changes
-
- - Bump sysrepo to v2.2.73
-   - Backport support for initializing factory-default data store with
-     default config data also for sysrepo internal modules.
-   - Add support for `sysrepocfg -Cfactory -d running`, for testing
- - Bump netopeer2 to v2.1.62
- - Bump libyang to v2.1.80
- - Add klish, a CLI for sysrepo
- - Add podman for container support, backported from upstream Buildroot
- - Add conmon for container support, backported from upstream Buildroot
- - Backport cni-plugins support for host-local and static plugins
-
-### Fixes
-
- - N/A
-
-[buildroot]:  https://buildroot.org/
-[UNRELEASED]: https://github.com/kernelkit/infix/compare/v23.06.0...HEAD
-[v23.06.0]:   https://github.com/kernelkit/infix/compare/BASE...v23.06.0
-[sysrepo]:    https://www.sysrepo.org/
-[netopeer2]:  https://github.com/CESNET/netopeer2
@@ -1,3 +1,108 @@
+menu "Branding"
+
+config INFIX_VENDOR
+	string "Vendor name"
+	default "KernelKit"
+	help
+	  The name of the operating system vendor. This is the name of the
+	  organization or company which produces the OS.
+
+	  This name is intended to be exposed in "About this system" UIs or
+	  software update UIs when needed to distinguish the OS vendor from
+	  the OS itself.  It is intended to be human readable.
+
+	  Used for VENDOR_NAME in /etc/os-release and GNS3 appliance files.
+
+config INFIX_VENDOR_HOME
+	string "Vendor URL"
+	help
+	  The homepage of the OS vendor.  The value should be in RFC3986
+	  format, and should be "http:" or "https:" URLs.  Only one URL shall
+	  be listed in the setting.
+
+	  Optional, used for VENDOR_HOME in /etc/os-release
+
+config INFIX_NAME
+	string "Operating system name"
+	default "Infix"
+	help
+	  Mandatory.  Used for identifying the OS as NAME in /etc/os-release
+	  and product_name in GNS3 appliance files.
+
+config INFIX_ID
+	string "Operating system identifier"
+	default "infix"
+	help
+	  A lower-case string (no spaces or other characters outside of 0–9,
+          a–z, '.', '_' and '-') identifying the operating system, excluding
+          any version information and suitable for processing by scripts or
+          usage in generated filenames.
+
+	  Mandatory.  Used for identifying the OS as ID in /etc/os-release and
+	  in the generated image name: ID-ARCH-VERSION.img
+
+config INFIX_IMAGE_ID
+	string "Operating system image name"
+	default "${INFIX_ID}-${BR2_ARCH}"
+	help
+	  A lower-case string (no spaces or other characters outside of 0–9,
+	  a–z, ".", "_" and "-"), for naming critical image files, directories
+	  and archives containting the operating system.
+
+	  Mandatory.  When INFIX_RELEASE is set, this string is appended to
+	  the IMAGE_ID with a '-' separator.
+
+config INFIX_TAGLINE
+	string "Operating system tagline"
+	default "Infix — a Network Operating System"
+	help
+	  Mandatory. Used for identifying the OS, e.g. as PRETTY_NAME in
+	  /etc/os-release and description in the GNS3 appliance.
+
+	  This is also show at boot when the system init process starts.
+
+config INFIX_DESC
+	string "Operating system description"
+	help
+	  Optional.  Used for long description texts about the OS.  E.g.,
+	  the GNS3 appliance file description field.  Saved in the file
+	  /etc/os-release as INFIX_DESC.
+
+config INFIX_HOME
+	string "Operating system URL"
+	help
+	  Used for identifying the OS, e.g. as HOME_URL in /etc/os-release
+
+config INFIX_DOC
+	string "Operating system docs"
+	help
+	  Optional.  Main documentation URL, will be shown in /etc/os-release
+	  as DOCUMENTATION_URL.
+
+config INFIX_SUPPORT
+	string "Operating system support"
+	help
+	  Main support page for the operating system, if there is any.  This
+	  is primarily intended for operating systems which vendors provide
+	  support for.  May be a http:, https:, or mailto: URI.
+
+	  Optional.  Shown, e.g., as SUPPORT_URL in /etc/os-release or
+	  maintainer_email in .gns3a.
+
+config INFIX_OEM_PATH
+	string "Path to OEM br2-external"
+	help
+	  A br2-external using Infix will likely want to version the branded
+	  OS using their own GIT tags.  Set this variable to point to the base
+	  directory (absolute path) and the Infix post-build.sh will call `git
+	  describe -C $INFIX_OEM_PATH`.
+
+	  Note: for release builds the global variable INFIX_RELEASE overrides
+	  the version information derived from `git describe`.  However, the
+	  GIT version is always saved as the BUILD_ID in /etc/os-releases.
+
+endmenu
+
 # For /etc/os-release, uses CondtionArchitechture= from systemd.unit(5)
 config INFIX_ARCH
 	string
@@ -1,217 +1,88 @@
-<img align="right" src="doc/text3134.png" alt="Infix Linux Networking Made Easy">
+<img align="right" src="doc/logo.png" alt="Infix - Linux <3 NETCONF" width=480>
+<details><summary><b>Documentation</b></summary>

-* [Introduction](#introduction)
-* [NETCONF Mode](#netconf-mode)
-  * [NETCONF Mode](#netconf-mode)
-  * [Classic Mode](#classic-mode)
-  * [Hybrid Mode](#hybrid-mode)
-* [Hardware](#hardware)
-* [Qemu](#qemu)
-* [GNS3](#gns3)
-* [Building](#building)
-* [Origin & Licensing](origin--licensing)
+ - **Infix In-Depth**
+   - [Infix Variants](doc/variant.md)
+   - [Boot Procedure](doc/boot.md)
+   - [Containers in Infix](doc/container.md)
+   - [Developer's Guide](doc/developers-guide.md)
+   - [Discover Your Device](doc/discovery.md)
+   - [Virtual Environments](doc/virtual.md)
+   - [Origin & Licensing](doc/license.md)
+- **CLI Topics**
+   - [Introduction to the CLI](doc/cli/introduction.md)
+   - [CLI User's Guide](doc/cli/tutorial.md)
+   - [Quick Overview](doc/cli/quick.md)

+</details>

-Introduction
------------
+Infix is a Linux Network Operating System (NOS) based on [Buildroot][1],
+and [sysrepo][2].  A powerful mix that ease porting to different
+platforms, simplify long-term maintenance, and provide made-easy
+management using NETCONF[^1] (remote) or the built-in [CLI][3].

-Infix is an embedded Linux Network Operating System (NOS) based on
-[Buildroot][1], [Finit][2], [ifupdown-ng][3], and [sysrepo][6].
-Providing an easy-to-maintain and easy-to-port Open Source base for
-networked equipment.
+<details><summary><b>Example CLI Session</b></summary>
+
+The CLI configure context is automatically generated from the loaded
+YANG models and their corresponding [sysrepo][2] plugins.  The following
+is brief example of how to set the IP address of an interface:
+
+```
+admin@infix-12-34-56:/> configure
+admin@infix-12-34-56:/config/> edit interfaces interface eth0
+admin@infix-12-34-56:/config/interfaces/interface/eth0/> set ipv4 <TAB>
+      address     autoconf bind-ni-name      enabled
+	  forwarding  mtu      neighbor
+admin@infix-12-34-56:/config/interfaces/interface/eth0/> set ipv4 address 192.168.2.200 prefix-length 24
+admin@infix-12-34-56:/config/interfaces/interface/eth0/> show
+type ethernetCsmacd;
+ipv4 address 192.168.2.200 prefix-length 24;
+ipv6 enabled true;
+admin@infix-12-34-56:/config/interfaces/interface/eth0/> diff
+interfaces {
+  interface eth0 {
+    ipv4 {
+      address 192.168.2.200 {
+        prefix-length 24;
+      }
+    }
+  }
+}
+admin@infix-12-34-56:/config/interfaces/interface/eth0/> leave
+admin@infix-12-34-56:/> show interfaces brief
+lo               UNKNOWN        00:00:00:00:00:00 <LOOPBACK,UP,LOWER_UP>
+eth0             UP             52:54:00:12:34:56 <BROADCAST,MULTICAST,UP,LOWER_UP>
+admin@infix-12-34-56:/> show ip brief
+lo               UNKNOWN        127.0.0.1/8 ::1/128
+eth0             UP             192.168.2.200/24 fe80::5054:ff:fe12:3456/64
+admin@infix-12-34-56:/> copy running-config startup-config
+```
+
+[Click here][3] for more details.
+</details>
+
+Infix can run on many different types of architectures and boards, much
+thanks to Linux and Buildroot.  Currently the focus is on 64-bit ARM
+devices, optionally with switching fabric supported by Linux switchdev.
+The [following boards](board/aarch64/README.md) are fully supported:
+
+ - Marvell CN9130 CRB
+ - Marvell EspressoBIN
+ - Microchip SparX-5i PCB135 (eMMC)
+
+An x86_64 build is also available, primarily intended for development
+and testing, but can also be used for evaluation and demo purposes.  For
+more information, see: [Infix in Virtual Environments](doc/virtual.md).

 > See the [GitHub Releases](https://github.com/kernelkit/infix/releases)
-> page for out pre-built images.  The *Latest Build* has the bleeding edge
-> images, if possible we recommend using a versioned release.
+> page for our pre-built images.  The *Latest Build* has the bleeding
+> edge images, if possible we recommend using a versioned release.
 >
-> For customer specific builds of Infix, see your respective repository.
+> For *customer specific builds* of Infix, see your product repository.

-Infix has two main *flavors*, or defconfigs:
+[^1]: NETCONF or RESTCONF, <https://datatracker.ietf.org/doc/html/rfc8040>,
+    for more information, see [Infix Variants](doc/variant.md).

- - **NETCONF:** the default, managed using, e.g., the `cli` tool
- - **Classic:** built from `$ARCH_classic_defconfig`, more below
-
-Both flavors have an `admin` user, which is allowed to log in from
-remote, password `admin` on standard builds.  It is the recommended
-account to use for managing Infix.  (The `root` account is currently
-also available, but will soon become a non-login account used only for
-running system services.)
-
-
-### NETCONF Mode
-
-NETCONF is the primary reason Infix exists.  Configuration of an Infix
-device can be done either remotely, using tools like [netconf-client][]
-or [netopeer2-cli][], or locally using the [`cli` tool](doc/cli.md).
-
-Infix use [sysrepo][6] as the data store for NETCONF.  A set of plugins
-configure the network, using iproute2, generate configuration files in
-`/etc`, and control the system daemons, e.g., enable DHCP client on an
-interface.
-
-
-### Classic Mode
-
-Here it is up to the administrator to modify configuration files in
-`/etc` and control the system daemons using the `initctl` tool.
-
-See the online `help` command for an introduction to the system.
-
-
-### Hybrid Mode
-
-Since Infix is under heavy development, it does not yet have all bells
-and whistles in place, in particular in the default build.  To that end
-it is possible to manually manage certain services that are not yet
-possible to configure using NETCONF.
-
-At bootstrap Finit can start user scripts from a [run-parts(8)][] like
-directory: `/cfg/start.d`.  For example, the following starts OSPF:
-
-```sh
-root@infix:~$ mkdir /cfg/start.d
-root@infix:~$ cd /cfg/start.d
-root@infix:/cfg/start.d$ cat <<EOF >10-enable-ospf.sh
-#!/bin/sh
-# Use vtysh to modify the OSPF configuration
-rm /etc/frr/frr.conf
-ln -s /cfg/frr/frr.conf /etc/frr/
-initctl enable zebra
-initctl enable ospfd
-initctl enable bfdd
-exit 0
-EOF
-root@infix:/cfg/start.d$ chmod +x 10-enable-ospf.sh
-```
-
-> **Note:** Neither [Frr](https://frrouting.org) (Zebra/OSPF/BFD) or
-> [podman](https://podman.io) are enabled in default Infix builds.
-> Please use customer specific builds, or enable it yourself in Infix by
-> using `make menuconfig` followed by rebuilding the image.
-
-This is also the way to start containers (provided the images have been
-downloaded with `podman pull` first):
-
-```
-root@infix:/cfg/start.d$ cat <<EOF >20-enable-container.sh
-#!/bin/sh
-podman-service -e -d "Nginx container" -p "-p 80:80" nginx:alpine
-exit 0
-EOF
-root@infix:/cfg/start.d$ chmod +x 20-enable-container.sh
-```
-
-Reboot to activate the changes.  To activate the changes without
-rebooting, run the script and call `initctl reload`.
-
-
-Hardware
--------
-
-### aarch64
-
-By default, Infix builds with support for the following boards (you
-may enable additional boards in the config, of course):
-
- Marvell CN9130 CRB
- Marvell EspressoBIN
- Microchip SparX-5i PCB135 (eMMC)
-
-See the aarch64 specific [documentation](board/aarch64/README.md) for more
-information.
-
-### x86_64
-
-Primarily intended to be run under [QEMU][] for development & test as
-well as evaluation, demo and [training][] purposes, e.g. using [GNS3][]
-or [Qeneth][7].
-
-
-QEMU
----
-
-A virtualized instance can easily be launched from a Linux system, with
-Qemu installed, by issuing `make run`.
-
-Some settings, e.g. networking, can be configured via `make menuconfig`
-under `External options -> QEMU virtualization`.
-
-
-GNS3
----
-
-Download the [latest build][0] of the `x86_64`, or `x86_64_classic`
-flavor.  Unpack in a dedicated directory and use ["Import Appliance"][9]
-to install the `.gns3a` file into GNS3.  Infix (`x86_64`) is in the
-"Router" category, it has 10 interfaces available by default for use as
-switch ports or routing.  The *classic* build only has one interface by
-default, geared more towards acting as an end device.
-
-
-Building
--------
-
-Buildroot is almost stand-alone, but need a few locally installed tools
-to bootstrap itself.  For details, see the [excellent manual][manual].
-
-Briefly, to build an Infix image; select the target and then make:
-
-    make x86_64_defconfig
-    make
-
-Online help is available:
-
-    make help
-
-To see available defconfigs for supported targets, use:
-
-    make list-defconfigs
-
-> **Note:** build dependencies (Debian/Ubuntu): <kbd>sudo apt install make libssl-dev</kbd>
-
-
-Origin & Licensing
------------------
-
-Infix is entirely built on Open Source components (packages).  Most of
-them, as well as the build system with its helper scripts and tools, is
-from [Buiildroot][1], which is distributed under the terms of the GNU
-General Public License (GPL).  See the file COPYING for details.
-
-Some files in Buildroot contain a different license statement.  Those
-files are licensed under the license contained in the file itself.
-
-Buildroot and Infix also bundle patch files, which are applied to the
-sources of the various packages.  Those patches are not covered by the
-license of Buildroot or Infix.  Instead, they are covered by the license
-of the software to which the patches are applied.  When said software is
-available under multiple licenses, the patches are only provided under
-the publicly accessible licenses.
-
-Infix releases include the license information covering all Open Source
-packages.  This is extracted automatically at build time using the tool
-`make legal-info`.  Any proprietary software built on top of Infix, or
-Buildroot, would need separate auditing to ensure it does not link with
-any GPL[^1] licensed library.
-
-[^1]: Infix image builds use GNU libc (GLIBC) which is covered by the
-	[LGPL][4].  The LGPL *does allow* proprietary software, as long as
-	said software is linking dynamically, [not statically][5], to GLIBC.
-
-[0]: https://github.com/kernelkit/infix/releases/tag/latest
 [1]: https://buildroot.org/
-[2]: https://github.com/troglobit/finit
-[3]: https://github.com/ifupdown-ng/ifupdown-ng
-[4]: https://en.wikipedia.org/wiki/GNU_Lesser_General_Public_License
-[5]: https://lwn.net/Articles/117972/
-[6]: https://www.sysrepo.org/
-[7]: https://github.com/wkz/qeneth
-[8]: https://addiva-elektronik.github.io/2023/05/12/using-netconf-client-and-server-to-update-switch-configuration/
-[9]: https://docs.gns3.com/docs/using-gns3/beginners/import-gns3-appliance/
-[QEMU]: https://www.qemu.org/
-[GNS3]: https://gns3.com/
-[training]: https://addiva-elektronik.github.io/
-[manual]: https://buildroot.org/downloads/manual/manual.html
-[run-parts(8)]: https://manpages.ubuntu.com/manpages/trusty/man8/run-parts.8.html
-[netconf-client]: https://pypi.org/project/netconf-client/
-[netopeer2-cli]: https://github.com/CESNET/netopeer2
+[2]: https://www.sysrepo.org/
+[3]: doc/cli/introduction.md
@@ -0,0 +1,51 @@
+/ {
+	config {
+		environment {
+			/* After the MMC driver has enabled bus power,
+			 * the controller seems to sometimes detect a
+			 * card removal state , which causes it to
+			 * disable power again. This hack re-enables the
+			 * bus power in those cases.
+			 */
+			bootcmd = "
+setexpr.b pwrctl *0xf2780029
+setexpr pwrctl ${pwrctl} \"|\" 1
+mw.b 0xf2780029 ${pwrctl}
+
+run ixboot
+";
+			boot_targets = "mmc1";
+			ethprime = "eth1";
+
+			/* Uncomment this if you're debugging U-Boot
+			 *
+			 * This will allow you to break out of the
+                         * normal boot flow and into the interactive
+                         * console.
+			 *
+			 * To upgrade U-Boot itself, simply set the
+                         * `bootfile` variable to the path of
+                         * `flash-image.bin` on your TFTP server, then
+                         * issue `run ixupgradeboot`.
+			 */
+/* 			bootdelay = "2"; */
+/* 			ixupgradeboot = " */
+/* dhcp */
+/* setexpr fileblks ${filesize} + 0x1ff */
+/* setexpr fileblks ${fileblks} / 0x200 */
+
+/* mmc dev 1 */
+/* part start mmc 1 boot bootstart */
+/* part size  mmc 1 boot bootsize */
+
+
+/* mmc erase ${bootstart} ${bootsize} */
+/* mmc write ${fileaddr} ${bootstart} ${fileblks} */
+/* "; */
+		};
+	};
+};
+
+/* &cp0_eth0 { */
+/* 	phy-mode = "10gbase-r"; */
+/* }; */
@@ -0,0 +1,4 @@
+CONFIG_DEVICE_TREE_INCLUDES="infix-env.dtsi infix-key.dtsi cn9130-crb-env.dtsi"
+
+CONFIG_ENV_IS_NOWHERE=y
+# CONFIG_ENV_IS_IN_MMC is not set
@@ -0,0 +1,76 @@
+#ifndef _ALDER_MPP_H
+#define _ALDER_MPP_H
+
+#define CP_SMI_MDIO(X)        X( "mpp0",   none, 0, 0)
+#define CP_SMI_MDC(X)         X( "mpp1",   none, 0, 0)
+#define CP_XSMI_MDIO(X)       X( "mpp2",   none, 0, 0)
+#define CP_XSMI_MDC(X)        X( "mpp3",   none, 0, 0)
+/*  mpp4: Unused */
+/*  mpp5: Unused */
+/*  mpp6: Unused */
+#define SFP9_TX_FAULT(X)      X( "mpp7", cp0_gpio1,  7, GPIO_ACTIVE_HIGH)
+#define SFP9_TX_DISABLE(X)    X( "mpp8", cp0_gpio1,  8, GPIO_ACTIVE_HIGH)
+#define SFP9_MOD_ABS(X)       X( "mpp9", cp0_gpio1,  9, GPIO_ACTIVE_LOW)
+#define SW_RESETn(X)          X("mpp10", cp0_gpio1, 10, GPIO_ACTIVE_LOW)
+#define SFP9_RS0(X)           X("mpp11", cp0_gpio1, 11, GPIO_ACTIVE_HIGH)
+/* mpp12: Unused */
+#define CP_SPI1_MISO(X)       X("mpp13", none, 0, 0)
+#define CP_SPI1_CS0(X)        X("mpp14", none, 0, 0)
+#define CP_SPI1_MOSI(X)       X("mpp15", none, 0, 0)
+#define CP_SPI1_SCK(X)        X("mpp16", none, 0, 0)
+#define WDT_TICKLE(X)         X("mpp17", cp0_gpio1, 17, GPIO_ACTIVE_HIGH)
+/* mpp18: Unused */
+/* mpp19: Unused */
+/* mpp20: Unused */
+/* mpp21: Unused */
+/* mpp22: Unused */
+/* mpp23: Unused */
+#define SFP9_RX_LOS(X)        X("mpp24", cp0_gpio1, 24, GPIO_ACTIVE_HIGH)
+#define ETH9_RESETn(X)        X("mpp25", cp0_gpio1, 25, GPIO_ACTIVE_LOW)
+#define SW_INTn(X)            X("mpp26", cp0_gpio1, 26, IRQ_TYPE_LEVEL_LOW)
+#define SFP9_RS1(X)           X("mpp27", cp0_gpio1, 27, GPIO_ACTIVE_HIGH)
+#define SFP10_TX_FAULT(X)     X("mpp28", cp0_gpio1, 28, GPIO_ACTIVE_HIGH)
+#define CP_UA0_RXD(X)         X("mpp29", none, 0, 0)
+#define CP_UA0_TXD(X)         X("mpp30", none, 0, 0)
+#define SFP10_TX_DISABLE(X)   X("mpp31", cp0_gpio1, 31, GPIO_ACTIVE_HIGH)
+#define SFP10_MOD_ABS(X)      X("mpp32", cp0_gpio2,  0, GPIO_ACTIVE_LOW)
+#define I2C_IRQ(X)            X("mpp33", cp0_gpio2,  1, GPIO_ACTIVE_HIGH)
+#define SFP10_RS0(X)          X("mpp34", cp0_gpio2,  2, GPIO_ACTIVE_HIGH)
+#define CP_I2C1_SDA(X)        X("mpp35", none, 0, 0)
+#define CP_I2C1_SCK(X)        X("mpp36", none, 0, 0)
+#define CP_I2C0_SCK(X)        X("mpp37", none, 0, 0)
+#define CP_I2C0_SDA(X)        X("mpp38", none, 0, 0)
+#define SFP10_RX_LOS(X)       X("mpp39", cp0_gpio2,  7, GPIO_ACTIVE_HIGH)
+#define SFP10_RS1(X)          X("mpp40", cp0_gpio2,  8, GPIO_ACTIVE_HIGH)
+#define CP_SD_CRD_PWR_OFF(X)  X("mpp41", none,  0, 0)
+#define CP_SD_HST_18_EN(X)    X("mpp42", none,  0, 0)
+#define CP_SD_CRD_DT(X)       X("mpp43", none,  0, 0)
+#define ETH9_INTn(X)          X("mpp44", cp0_gpio2, 12, GPIO_ACTIVE_LOW)
+/* mpp45: Unused */
+#define ETH10_RESETn(X)       X("mpp46", cp0_gpio2, 14, GPIO_ACTIVE_LOW)
+#define I2C_RESETn(X)         X("mpp47", cp0_gpio2, 15, GPIO_ACTIVE_LOW)
+#define ETH10_INTn(X)         X("mpp48", cp0_gpio2, 16, GPIO_ACTIVE_LOW)
+#define DEV_MODEn(X)          X("mpp49", cp0_gpio2, 17, GPIO_ACTIVE_LOW)
+#define USB1_VBUS_ENABLE(X)   X("mpp50", cp0_gpio2, 18, GPIO_ACTIVE_HIGH)
+#define USB1_VBUS_ERROR_OC(X) X("mpp51", cp0_gpio2, 19, GPIO_ACTIVE_HIGH)
+/* mpp52: Unused */
+/* mpp53: Unused */
+/* mpp54: Unused */
+#define CP_SD_LED(X)          X("mpp55", none,  0, 0)
+#define CP_SD_CLK(X)          X("mpp56", none,  0, 0)
+#define CP_SD_CMD(X)          X("mpp57", none,  0, 0)
+#define CP_SD_D0(X)           X("mpp58", none,  0, 0)
+#define CP_SD_D1(X)           X("mpp59", none,  0, 0)
+#define CP_SD_D2(X)           X("mpp60", none,  0, 0)
+#define CP_SD_D3(X)           X("mpp61", none,  0, 0)
+#define DDR_TEN(X)            X("mpp62", cp0_gpio2, 30 GPIO_ACTIVE_HIGH)
+
+/* Macros to extract MPP info in different formats */
+#define MPP_ID(_mpp, _chip, _no, _flags) _mpp
+#define MPP_GPIO_CHIP(_mpp, _chip, _no, _flags) _chip
+
+#define MPP_GPIO_REF(_mpp, _chip, _no, _flags) <&_chip _no _flags>
+#define MPP_GPIO_REF_NO_CHIP(_mpp, _chip, _no, _flags) <_no _flags>
+#define MPP_IRQ_REF(_mpp, _chip, _no, _flags) <&_chip _no _flags>
+
+#endif	/* _ALDER_MPP_H */
@@ -0,0 +1,9 @@
+// SPDX-License-Identifier: (GPL-2.0+ OR MIT)
+/*
+ * Copyright (C) 2021 Marvell International Ltd.
+ * Copyright (C) 2023 Addiva Elektronik AB
+ *
+ * Device tree for Alder board
+ */
+
+#include "alder.dtsi"
@@ -0,0 +1,611 @@
+// SPDX-License-Identifier: (GPL-2.0+ OR MIT)
+/*
+ * Copyright (C) 2021 Marvell International Ltd.
+ * Copyright (C) 2023 Addiva Elektronik AB
+ *
+ * Device tree for Alder board
+ */
+
+#include <dt-bindings/gpio/gpio.h>
+#include <dt-bindings/leds/common.h>
+
+#include "../marvell/cn9130-patched.dtsi"
+
+#include "alder-mpp.h"
+
+/ {
+	model = "Alder";
+	compatible = "alder,alder",
+		"marvell,armada-ap807-quad",
+		"marvell,armada-ap807";
+
+	chosen {
+		stdout-path = "serial0:115200n8";
+	};
+
+	memory@0 {
+		device_type = "memory";
+		reg = <0x0 0x0 0x0 0x80000000>;
+	};
+};
+
+
+/* UART0 (Console) */
+
+&cp0_pinctrl {
+	cp0_uart0_pins: cp0-uart0-pins {
+		marvell,pins = CP_UA0_RXD(MPP_ID), CP_UA0_TXD(MPP_ID);
+		marvell,function = "uart0";
+	};
+};
+
+&uart0 {
+	status = "okay";
+	pinctrl-names = "default";
+	pinctrl-0 = <&cp0_uart0_pins>;
+};
+
+
+/* GPIO */
+
+&cp0_gpio1 {
+	status = "okay";
+};
+
+&cp0_gpio2 {
+	status = "okay";
+};
+
+
+/* I2C0 (EEPROM) */
+
+&cp0_pinctrl {
+	cp0_i2c0_pins: cp0-i2c0-pins {
+		marvell,pins = CP_I2C0_SCK(MPP_ID), CP_I2C0_SDA(MPP_ID);
+		marvell,function = "i2c0";
+	};
+};
+
+&cp0_i2c0 {
+	status = "okay";
+	pinctrl-names = "default";
+	pinctrl-0 = <&cp0_i2c0_pins>;
+
+	eeprom@50 {
+		// AT24C256C-MAHL-T
+		compatible = "atmel,24c256";
+                reg = <0x50>;
+	};
+};
+
+
+/* I2C1 (Mux) */
+
+&cp0_pinctrl {
+	cp0_i2c1_pins: cp0-i2c1-pins {
+		marvell,pins = CP_I2C1_SCK(MPP_ID), CP_I2C1_SDA(MPP_ID);
+		marvell,function = "i2c1";
+	};
+};
+
+&cp0_i2c1 {
+	status = "okay";
+	pinctrl-names = "default";
+	pinctrl-0 = <&cp0_i2c1_pins>;
+
+	i2cmux@70 {
+		compatible = "nxp,pca9548";
+		#address-cells = <1>;
+                #size-cells = <0>;
+                reg = <0x70>;
+
+		reset-gpios = I2C_RESETn(MPP_GPIO_REF);
+
+		i2c_sysmgmt: i2c@0 {
+			#address-cells = <1>;
+			#size-cells = <0>;
+			reg = <0>;
+		};
+
+		i2c_pwr: i2c@1 {
+			#address-cells = <1>;
+			#size-cells = <0>;
+			reg = <1>;
+		};
+
+		i2c_sw: i2c@2 {
+			#address-cells = <1>;
+			#size-cells = <0>;
+			reg = <2>;
+		};
+
+		i2c_sfp9: i2c@3 {
+			#address-cells = <1>;
+			#size-cells = <0>;
+			reg = <3>;
+		};
+
+		i2c_sfpa: i2c@4 {
+			#address-cells = <1>;
+			#size-cells = <0>;
+			reg = <4>;
+		};
+
+		i2c@5 {
+			status = "disabled";
+			#address-cells = <1>;
+			#size-cells = <0>;
+			reg = <5>;
+		};
+
+		i2c@6 {
+			status = "disabled";
+			#address-cells = <1>;
+			#size-cells = <0>;
+			reg = <6>;
+		};
+
+		i2c@7 {
+			status = "disabled";
+			#address-cells = <1>;
+			#size-cells = <0>;
+			reg = <7>;
+		};
+
+	};
+};
+
+
+/* System Management */
+
+&i2c_sysmgmt {
+	eeprom@b {
+		label = "vpd";
+                reg = <0x0b>;
+		compatible = "atmel,24c02";
+		read-only;
+
+		nvmem-layout {
+			compatible = "onie,tlv-layout";
+
+			base_mac: mac-address {
+				#nvmem-cell-cells = <1>;
+			};
+		};
+	};
+};
+
+/* AP SDHCI (eMMC) */
+
+&ap_sdhci0 {
+	status = "okay";
+	pinctrl-names = "default";
+	/* pinctrl-0 = <&ap_emmc_pins>; No pinctrl in Linux? */
+	bus-width = <8>;
+	mmc-ddr-1_8v;
+	mmc-hs400-1_8v;
+};
+
+
+/* CP SDHCI (Micro-SD) */
+
+/ {
+	cp0_reg_sd_vccq: cp0_sd_vccq@0 {
+		compatible = "regulator-gpio";
+		regulator-name = "cp0_sd_vccq";
+		regulator-min-microvolt = <1800000>;
+		regulator-max-microvolt = <3300000>;
+		/* gpios = <&CP_SD_HST_18_EN>; */
+		states = <1800000 0x1
+			  3300000 0x0>;
+	};
+
+	cp0_reg_sd_vcc: cp0_sd_vcc@0 {
+		compatible = "regulator-fixed";
+		regulator-name = "cp0_sd_vcc";
+		regulator-min-microvolt = <3300000>;
+		regulator-max-microvolt = <3300000>;
+		/* gpio = <&CP_SD_CRD_PWR_OFF>; */
+		enable-active-high;
+		regulator-always-on;
+	};
+};
+
+&cp0_pinctrl {
+	cp0_sdhci_pins: cp0-sdhi-pins-0 {
+		marvell,pins = \
+			CP_SD_CRD_PWR_OFF(MPP_ID), CP_SD_HST_18_EN(MPP_ID),	\
+			CP_SD_CRD_DT(MPP_ID), CP_SD_LED(MPP_ID),		\
+			CP_SD_CLK(MPP_ID), CP_SD_CMD(MPP_ID),			\
+			CP_SD_D0(MPP_ID), CP_SD_D1(MPP_ID), 			\
+			CP_SD_D2(MPP_ID), CP_SD_D3(MPP_ID);
+		marvell,function = "sdio";
+	};
+};
+
+&cp0_sdhci0 {
+	status = "disabled";
+	pinctrl-names = "default";
+	pinctrl-0 = <&cp0_sdhci_pins>;
+	bus-width = <4>;
+	/* cd-gpios = <&CP_SD_CRD_DT>; */
+	vqmmc-supply = <&cp0_reg_sd_vccq>;
+	vmmc-supply = <&cp0_reg_sd_vcc>;
+};
+
+
+/* SPI1 (Boot FLASH) */
+
+&cp0_pinctrl {
+	cp0_spi1_pins: cp0-spi-pins-0 {
+		marvell,pins = \
+			CP_SPI1_MISO(MPP_ID), CP_SPI1_CS0(MPP_ID), \
+			CP_SPI1_MOSI(MPP_ID), CP_SPI1_SCK(MPP_ID);
+		marvell,function = "spi1";
+	};
+};
+
+&cp0_spi1 {
+	status = "okay";
+	pinctrl-names = "default";
+	pinctrl-0 = <&cp0_spi1_pins>;
+
+	/* Boot flash */
+	spi-flash@0 {
+		#address-cells = <0x1>;
+		#size-cells = <0x1>;
+		compatible = "jedec,spi-nor", "spi-flash";
+		reg = <0x0>;
+		/* On-board MUX does not allow higher frequencies */
+		spi-max-frequency = <40000000>;
+
+		partitions {
+			compatible = "fixed-partitions";
+			#address-cells = <1>;
+			#size-cells = <1>;
+
+			boot0@0 {
+				label = "boot0";
+				reg = <0x0 0x200000>;
+			};
+
+			boot1@200000 {
+				label = "boot1";
+				reg = <0x200000 0x200000>;
+			};
+		};
+	};
+};
+
+
+/* USB1 */
+
+/ {
+	cp0_usb3_0_phy1: cp0_usb3_phy {
+		compatible = "usb-nop-xceiv";
+		vcc-supply = <&reg_cp0_usb3_vbus1>;
+	};
+
+	reg_cp0_usb3_vbus1: reg_cp0_usb3_vbus1 {
+		compatible = "regulator-fixed";
+		regulator-name = "cp0-xhci1-vbus";
+		regulator-min-microvolt = <5000000>;
+		regulator-max-microvolt = <5000000>;
+		enable-active-high;
+		gpio = USB1_VBUS_ENABLE(MPP_GPIO_REF);
+	};
+};
+
+&cp0_utmi {
+	status = "okay";
+};
+
+&cp0_utmi1 {
+	status = "okay";
+};
+
+&cp0_usb3_1 {
+	status = "disabled";
+	usb-phy = <&cp0_usb3_0_phy1>;
+	phys = <&cp0_utmi1>, <&cp0_comphy3 1>;
+	phy-names = "usb", "usb3";
+	dr_mode = "host";
+};
+
+
+
+
+/* ETH0 (DSA connection to switch) */
+
+&cp0_crypto {
+	status = "okay";
+};
+
+&cp0_ethernet {
+	status = "okay";
+};
+
+&cp0_eth0 {
+	status = "okay";
+	phy-mode = "10gbase-r";
+	phys = <&cp0_comphy4 0>;
+	managed = "in-band-status";
+
+	nvmem-cells = <&base_mac 0>;
+	nvmem-cell-names = "mac-address";
+};
+
+
+/* MDIO (Switch) */
+
+&cp0_pinctrl {
+	cp0_mdio_pins: cp0-mdio-pins-0 {
+		marvell,pins = CP_SMI_MDIO(MPP_ID), CP_SMI_MDC(MPP_ID);
+		marvell,function = "ge";
+	};
+};
+
+&cp0_mdio {
+	status = "okay";
+	pinctrl-names = "default";
+	pinctrl-0 = <&cp0_mdio_pins>;
+
+	sw: switch@0 {
+		compatible = "marvell,mv88e6190";
+		#address-cells = <1>;
+		#size-cells = <0>;
+		reg = <0>;
+
+		reset-gpios = SW_RESETn(MPP_GPIO_REF);
+
+		interrupts-extended = SW_INTn(MPP_IRQ_REF);
+		interrupt-controller;
+
+		dsa,member = <0 0>;
+
+		ports {
+			#address-cells = <1>;
+			#size-cells = <0>;
+			port@0 {
+				reg = <0x0>;
+				label = "cpu";
+				ethernet = <&cp0_eth0>;
+				phy-mode = "10gbase-r";
+				fixed-link {
+					speed = <10000>;
+					full-duplex;
+				};
+			};
+
+#define SWP(_n, _label, _mac_offs, _phymode, _phy) \
+			port@_n { \
+				reg = <0x ## _n>; \
+				label = _label; \
+				phy-mode = _phymode; \
+				phy-handle = <&_phy>; \
+				\
+				nvmem-cells = <&base_mac _mac_offs>; \
+				nvmem-cell-names = "mac-address"; \
+			}
+
+			SWP(9,  "x1",  1, "usxgmii",  xphy9);
+			SWP(a,  "x2",  2, "usxgmii",  xphya);
+
+			SWP(8,  "x3",  3,    "gmii", swphy8);
+			SWP(7,  "x4",  4,    "gmii", swphy7);
+			SWP(6,  "x5",  5,    "gmii", swphy6);
+			SWP(5,  "x6",  6,    "gmii", swphy5);
+			SWP(4,  "x7",  7,    "gmii", swphy4);
+			SWP(3,  "x8",  8,    "gmii", swphy3);
+			SWP(2,  "x9",  9,    "gmii", swphy2);
+			SWP(1, "x10", 10,    "gmii", swphy1);
+#undef SWP
+		};
+
+		mdio {
+			#address-cells = <1>;
+			#size-cells = <0>;
+			swphy1: ethernet-phy@1 { reg = <0x1>; };
+			swphy2: ethernet-phy@2 { reg = <0x2>; };
+			swphy3: ethernet-phy@3 { reg = <0x3>; };
+			swphy4: ethernet-phy@4 { reg = <0x4>; };
+			swphy5: ethernet-phy@5 { reg = <0x5>; };
+			swphy6: ethernet-phy@6 { reg = <0x6>; };
+			swphy7: ethernet-phy@7 { reg = <0x7>; };
+			swphy8: ethernet-phy@8 { reg = <0x8>; };
+		};
+	};
+};
+
+
+/* XMDIO (88X3310P 10G PHYs) */
+
+&cp0_pinctrl {
+	cp0_xmdio_pins: cp0-xmdio-pins-0 {
+		marvell,pins = CP_XSMI_MDIO(MPP_ID), CP_XSMI_MDC(MPP_ID);
+		marvell,function = "xg";
+	};
+};
+
+&ETH9_RESETn(MPP_GPIO_CHIP) {
+	xphy9-reset-hog {
+		gpio-hog;
+		gpios = ETH9_RESETn(MPP_GPIO_REF_NO_CHIP);
+		output-low;
+		line-name = "x1-phy-reset";
+	};
+};
+
+&ETH10_RESETn(MPP_GPIO_CHIP) {
+	xphya-reset-hog {
+		gpio-hog;
+		gpios = ETH10_RESETn(MPP_GPIO_REF_NO_CHIP);
+		output-low;
+		line-name = "x2-phy-reset";
+	};
+};
+
+&cp0_xmdio {
+	status = "okay";
+	pinctrl-names = "default";
+	pinctrl-0 = <&cp0_xmdio_pins>;
+
+	/* 88X3310 specifices 35ns minimum MDC period (28.57 MHz). */
+	clock-frequency = <28571428>;
+
+	xphy9: ethernet-phy@4 {
+		compatible = "ethernet-phy-ieee802.3-c45";
+		reg = <4>;
+		sfp = <&sfp9>;
+	};
+
+	xphya: ethernet-phy@5 {
+		compatible = "ethernet-phy-ieee802.3-c45";
+		reg = <5>;
+		sfp = <&sfpa>;
+	};
+};
+
+/ {
+	sfp9: sfp@9 {
+		compatible = "sff,sfp";
+		i2c-bus = <&i2c_sfp9>;
+		mod-def0-gpios = SFP9_MOD_ABS(MPP_GPIO_REF);
+		los-gpios = SFP9_RX_LOS(MPP_GPIO_REF);
+		tx-disable-gpios = SFP9_TX_DISABLE(MPP_GPIO_REF);
+		tx-fault-gpios = SFP9_TX_FAULT(MPP_GPIO_REF);
+		rate-select0-gpios = SFP9_RS0(MPP_GPIO_REF);
+		rate-select1-gpios = SFP9_RS1(MPP_GPIO_REF);
+		maximum-power-milliwatt = <3000>;
+	};
+
+	sfpa: sfp@a {
+		compatible = "sff,sfp";
+		i2c-bus = <&i2c_sfpa>;
+		mod-def0-gpios = SFP10_MOD_ABS(MPP_GPIO_REF);
+		los-gpios = SFP10_RX_LOS(MPP_GPIO_REF);
+		tx-disable-gpios = SFP10_TX_DISABLE(MPP_GPIO_REF);
+		tx-fault-gpios = SFP10_TX_FAULT(MPP_GPIO_REF);
+		rate-select0-gpios = SFP10_RS0(MPP_GPIO_REF);
+		rate-select1-gpios = SFP10_RS1(MPP_GPIO_REF);
+		maximum-power-milliwatt = <3000>;
+	};
+};
+
+
+/* Power Board */
+
+&i2c_pwr {
+	// Shared IRQ on I2C_IRQ
+
+	// 0x26  U13 PCF8574        GPIO I/O
+	gpio_pwr1: gpio@26 {
+		compatible = "nxp,pcf8574a";
+		#gpio-cells = <2>;
+		gpio-controller;
+		reg = <0x26>;
+#define GPIO_PWR1_UNUSED0	gpio_pwr1 0 GPIO_ACTIVE_HIGH
+#define GPIO_PWR1_UNUSED1	gpio_pwr1 1 GPIO_ACTIVE_HIGH
+#define GPIO_POE_PGOOD		gpio_pwr1 2 GPIO_ACTIVE_HIGH
+#define GPIO_RESET_BUTTON	gpio_pwr1 3 GPIO_ACTIVE_LOW
+#define GPIO_VIN1_PGOOD		gpio_pwr1 4 GPIO_ACTIVE_LOW
+#define GPIO_LED_VIN1_ALERT	gpio_pwr1 5 GPIO_ACTIVE_LOW
+#define GPIO_VIN2_PGOOD		gpio_pwr1 6 GPIO_ACTIVE_LOW
+#define GPIO_LED_VIN2_ALERT	gpio_pwr1 7 GPIO_ACTIVE_LOW
+	};
+
+	//0x27  U3  PCF8574        GPIO LED
+	gpio_pwr2: gpio@27 {
+		compatible = "nxp,pcf8574a";
+		#gpio-cells = <2>;
+		gpio-controller;
+		reg = <0x27>;
+#define GPIO_LED2G		gpio_pwr2 0 GPIO_ACTIVE_LOW
+#define GPIO_LED2R		gpio_pwr2 1 GPIO_ACTIVE_LOW
+#define GPIO_LED1G		gpio_pwr2 2 GPIO_ACTIVE_LOW
+#define GPIO_LED1R		gpio_pwr2 3 GPIO_ACTIVE_LOW
+#define GPIO_LED4G		gpio_pwr2 4 GPIO_ACTIVE_LOW
+#define GPIO_LED4R		gpio_pwr2 5 GPIO_ACTIVE_LOW
+#define GPIO_LED3G		gpio_pwr2 6 GPIO_ACTIVE_LOW
+#define GPIO_LED3R		gpio_pwr2 7 GPIO_ACTIVE_LOW
+	};
+
+	//0x28* U5  TPS23861PWR    PoE Controller
+	//0x30  U5  TPS23861PWR    PoE Controller broadcast
+
+	//0x50  U15 AT24C256C      EEPROM
+	eeprom@50 {
+		// AT24C256C-MAHL-T
+		compatible = "atmel,24c256";
+                reg = <0x50>;
+	};
+};
+
+
+/* System LEDs */
+
+/ {
+	leds: leds {
+		compatible = "gpio-leds";
+
+		led-statg {
+			function = LED_FUNCTION_STATUS;
+			color = <LED_COLOR_ID_GREEN>;
+			gpios = <&GPIO_LED1G>;
+		};
+
+		led-statr {
+			function = LED_FUNCTION_STATUS;
+			color = <LED_COLOR_ID_RED>;
+			gpios = <&GPIO_LED1R>;
+		};
+
+		led-faultg {
+			function = LED_FUNCTION_FAULT;
+			color = <LED_COLOR_ID_GREEN>;
+			gpios = <&GPIO_LED2G>;
+		};
+
+		led-faultr {
+			function = LED_FUNCTION_FAULT;
+			color = <LED_COLOR_ID_RED>;
+			gpios = <&GPIO_LED2R>;
+		};
+
+		led-lang {
+			function = LED_FUNCTION_LAN;
+			color = <LED_COLOR_ID_GREEN>;
+			gpios = <&GPIO_LED3G>;
+		};
+
+		led-lanr {
+			function = LED_FUNCTION_LAN;
+			color = <LED_COLOR_ID_RED>;
+			gpios = <&GPIO_LED3R>;
+		};
+
+		led-dbgg {
+			function = LED_FUNCTION_DEBUG;
+			color = <LED_COLOR_ID_GREEN>;
+			gpios = <&GPIO_LED4G>;
+		};
+
+		led-dbgr {
+			function = LED_FUNCTION_DEBUG;
+			color = <LED_COLOR_ID_RED>;
+			gpios = <&GPIO_LED4R>;
+		};
+
+		led-vin1_alert {
+			function = "power-1";
+			color = <LED_COLOR_ID_RED>;
+			gpios = <&GPIO_LED_VIN1_ALERT>;
+		};
+
+		led-vin2_alert {
+			function = "power-2";
+			color = <LED_COLOR_ID_RED>;
+			gpios = <&GPIO_LED_VIN2_ALERT>;
+		};
+	};
+};
@@ -0,0 +1,8 @@
+#include "cn9130.dtsi"
+
+&cp0_syscon0 {
+	cp0_pinctrl: pinctrl {
+		/* For some reason, this is missing from cn9130.dtsi */
+		compatible = "marvell,cp115-standalone-pinctrl";
+	};
+};
@@ -5,7 +5,7 @@
 */

 /dts-v1/;
-#include "microchip/sparx5_pcb135_emmc.dts"
+#include "sparx5_pcb135_emmc.dts"

 &cpu0 {
 	enable-method = "spin-table";
@@ -262,7 +262,7 @@ CONFIG_VETH=m
 CONFIG_VIRTIO_NET=y
 CONFIG_NLMON=y
 CONFIG_NET_VRF=y
-CONFIG_NET_DSA_MV88E6XXX=y
+CONFIG_NET_DSA_MV88E6XXX=m
 CONFIG_NET_DSA_MV88E6XXX_PTP=y
 # CONFIG_NET_VENDOR_3COM is not set
 # CONFIG_NET_VENDOR_ADAPTEC is not set
@@ -287,8 +287,8 @@ CONFIG_NET_DSA_MV88E6XXX_PTP=y
 # CONFIG_NET_VENDOR_GOOGLE is not set
 # CONFIG_NET_VENDOR_HISILICON is not set
 # CONFIG_NET_VENDOR_HUAWEI is not set
-CONFIG_MVNETA=y
-CONFIG_MVPP2=y
+CONFIG_MVNETA=m
+CONFIG_MVPP2=m
 # CONFIG_NET_VENDOR_MELLANOX is not set
 # CONFIG_NET_VENDOR_MICREL is not set
 CONFIG_SPARX5_SWITCH=y
@@ -326,15 +326,16 @@ CONFIG_8139CP=y
 # CONFIG_NET_VENDOR_XILINX is not set
 CONFIG_SFP=y
 CONFIG_MARVELL_PHY=y
-CONFIG_MARVELL_10G_PHY=y
+CONFIG_MARVELL_10G_PHY=m
 CONFIG_MICREL_PHY=y
 CONFIG_MICROCHIP_PHY=y
 CONFIG_MICROCHIP_T1_PHY=y
-CONFIG_MICROSEMI_PHY=y
+CONFIG_MICROSEMI_PHY=m
 CONFIG_MDIO_BITBANG=y
 CONFIG_MDIO_MVUSB=y
 CONFIG_MDIO_MSCC_MIIM=y
 CONFIG_MDIO_BUS_MUX_MMIOREG=y
+CONFIG_USB_RTL8152=y
 CONFIG_USB_USBNET=y
 CONFIG_USB_NET_CDC_EEM=y
 # CONFIG_USB_NET_CDC_NCM is not set
@@ -371,6 +372,7 @@ CONFIG_I2C_SLAVE=y
 CONFIG_SPI=y
 CONFIG_SPI_ARMADA_3700=y
 CONFIG_SPI_NXP_FLEXSPI=y
+CONFIG_SPI_ORION=y
 CONFIG_SPI_PL022=y
 CONFIG_SPI_MUX=y
 CONFIG_SPI_SPIDEV=m
@@ -458,6 +460,7 @@ CONFIG_MMC_SPI=y
 CONFIG_MMC_DW=y
 CONFIG_MMC_DW_EXYNOS=y
 CONFIG_MMC_DW_K3=y
+CONFIG_MMC_CQHCI=y
 CONFIG_MMC_SDHCI_XENON=y
 CONFIG_SCSI_UFSHCD=y
 CONFIG_SCSI_UFSHCD_PLATFORM=y
@@ -498,7 +501,9 @@ CONFIG_TI_ADC081C=y
 CONFIG_PWM=y
 CONFIG_PHY_XGENE=y
 CONFIG_PHY_MVEBU_CP110_COMPHY=y
+CONFIG_PHY_MVEBU_CP110_UTMI=y
 CONFIG_PHY_SAMSUNG_USB2=y
+CONFIG_NVMEM_LAYOUT_ONIE_TLV=y
 CONFIG_MUX_MMIO=y
 CONFIG_EXT2_FS=y
 CONFIG_EXT3_FS=y
@@ -533,6 +538,7 @@ CONFIG_IRQ_POLL=y
 CONFIG_PRINTK_TIME=y
 CONFIG_DEBUG_KERNEL=y
 CONFIG_MAGIC_SYSRQ=y
+CONFIG_DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT=y
 CONFIG_DEBUG_FS=y
 CONFIG_DETECT_HUNG_TASK=y
 # CONFIG_SCHED_DEBUG is not set
@@ -1,3 +1,4 @@
 label Infix (aarch64)
 	kernel /boot/Image
+	fdtdir /boot
 	append ${bootargs_root} ${bootargs_rauc} ${bootargs_log}
@@ -1,9 +1,10 @@
 [system]
 compatible=infix-aarch64
 bootloader=uboot
-statusfile=/var/lib/rauc/status
+statusfile=/mnt/aux/rauc.status
 mountprefix=/var/lib/rauc/mnt
 bundle-formats=-plain
+max-bundle-download-size=1073741824

 [keyring]
 directory=/etc/rauc/keys
@@ -17,5 +18,5 @@ device=/dev/disk/by-partlabel/secondary
 bootname=secondary

 [slot.net.0]
-device=/dev/ram
+device=/dev/ram0
 bootname=net
@@ -0,0 +1 @@
+x33x0fw_0_3_11_0_11832.hdr
@@ -415,17 +415,11 @@ a printer can publish IPP records with meta data on the printer type and model
 or donwload URL for drivers.  Switches and routers usually publish how they
 can be reached: HTTP/HTTPS and SSH.

-Note: there are other mechanisms for device discovery.  Microsoft have been
-      slow to adopt mDNS, having relied on their own SSDP protocol.  For the
-      full experince Apple's "Bonjour" can be installed in Windows.
-
-      mDNS is supported in this product and should be enabled by default.  To
-      verify it works, open the Windows File Explorer (Win+E) and scroll to
-      Network in the left-hand menu.  An icon with a matching hostname can be
-      found there which, when clicked, opens up the device's Web Interface.
-      macOS users have mDNS fully integrated by default.  Linux users can use
-      'mdns-scan' or Avahi, as shown above.  The latter two can also just set
-      their web browsers to https://hostname-01-02-03.local
+mDNS is supported in this product and should be enabled by default.  To
+verify that it works, in Windows, macOS, or Linux, open your web browser
+and point it to <https://hostname-01-02-03.local>.  This is the hostname
+and three last octets of the device's base MAC address.  You can also use
+mDNS browsers or command line tools like mdns-scan


 $(h2 "VLAN Interfaces")
@@ -0,0 +1,18 @@
+# System-wide .bashrc file for interactive bash(1) shells.
+
+# If not running interactively, don't do anything
+[ -z "$PS1" ] && return
+
+# Reevaluate for each line, in case hostname changes
+function prompt_command
+{
+    PS1="\u@$(hostname):\w\$ "
+}
+export PROMPT_COMMAND=prompt_command
+
+# check the window size after each command and, if necessary,
+# update the values of LINES and COLUMNS.
+shopt -s checkwinsize
+
+# Disble built-ins
+enable -n help
@@ -31,7 +31,7 @@ menuconfig DISK_IMAGE
 	  - Creating a GNS3 appliance
 	  - Developing/debugging issues in the boot process in QEMU

-config DISK_IMAGE_SIZE
+menuconfig DISK_IMAGE_SIZE
 	string "Image size"
 	depends on DISK_IMAGE
 	default "512M"
@@ -44,10 +44,63 @@ config DISK_IMAGE_SIZE

 	  Minimum supported size is 512M.

+choice
+	prompt "Bootloader"
+	depends on DISK_IMAGE
+	default DISK_IMAGE_BOOT_EFI if BR2_x86_64
+	default DISK_IMAGE_BOOT_NONE
+
+config DISK_IMAGE_BOOT_NONE
+	bool "None"
+	help
+	  Do not create any bootloader partition in the disk image.
+
+config DISK_IMAGE_BOOT_EFI
+	bool "EFI"
+	help
+	  Create a boot partition from a directory containing an EFI
+	  boot application, e.g. GRUB.
+
+config DISK_IMAGE_BOOT_BIN
+	bool "Binary"
+	help
+	  Create a boot partition from a raw image containing the boot
+	  application, e.g. U-Boot.
+
+endchoice
+
+config DISK_IMAGE_BOOT_DATA
+	string "Bootloader data"
+	depends on DISK_IMAGE
+	depends on DISK_IMAGE_BOOT_EFI || DISK_IMAGE_BOOT_BIN
+	default "${BINARIES_DIR}/efi-part/EFI" if BR2_x86_64
+	help
+	  Path to the directory or file holding the bootloader data.
+
+config DISK_IMAGE_BOOT_OFFSET
+	hex "Bootloader offset"
+	depends on DISK_IMAGE
+	depends on DISK_IMAGE_BOOT_EFI || DISK_IMAGE_BOOT_BIN
+	default 0x8000
+	help
+	  Offset at which the bootloader partition is placed. Remember
+	  to make sure that the GPT still fits at the start of the
+	  image.
+
+config DISK_IMAGE_RELEASE_URL
+	string "Infix URL"
+	depends on DISK_IMAGE
+	depends on !BR2_TARGET_ROOTFS_SQUASHFS
+	default "https://github.com/kernelkit/infix/releases/download/latest/infix-${BR2_ARCH}.tar.gz"
+	help
+	  In situations where Infix itself is not being built, but a
+	  disk image is, i.e. when building a bootloader: place this
+	  Infix release in the primary and secondary partitions.
+
 menuconfig GNS3_APPLIANCE
 	bool "GNS3 Appliance"
 	select DISK_IMAGE
-	default y if BR2_x86_64
+	default y
 	help
 	  Create a GNS3 appliance description that, together with the
 	  disk image, can be imported into GNS3.
@@ -1,7 +1,7 @@
 #
 # Automatically generated make config: don't edit
-# Busybox version: 1.35.0
-# Mon Dec 12 13:47:01 2022
+# Busybox version: 1.36.0
+# Tue Oct  3 18:00:40 2023
 #
 CONFIG_HAVE_DOT_CONFIG=y

@@ -93,6 +93,9 @@ CONFIG_FEATURE_BUFFERS_USE_MALLOC=y
 # CONFIG_FEATURE_BUFFERS_GO_IN_BSS is not set
 CONFIG_PASSWORD_MINLEN=6
 CONFIG_MD5_SMALL=1
+CONFIG_SHA1_SMALL=3
+CONFIG_SHA1_HWACCEL=y
+CONFIG_SHA256_HWACCEL=y
 CONFIG_SHA3_SMALL=1
 CONFIG_FEATURE_NON_POSIX_CP=y
 # CONFIG_FEATURE_VERBOSE_CP_MESSAGE is not set
@@ -123,6 +126,9 @@ CONFIG_LAST_SUPPORTED_WCHAR=0
 # CONFIG_UNICODE_BIDI_SUPPORT is not set
 # CONFIG_UNICODE_NEUTRAL_TABLE is not set
 # CONFIG_UNICODE_PRESERVE_BROKEN is not set
+# CONFIG_LOOP_CONFIGURE is not set
+# CONFIG_NO_LOOP_CONFIGURE is not set
+CONFIG_TRY_LOOP_CONFIGURE=y

 #
 # Applets
@@ -338,6 +344,7 @@ CONFIG_FEATURE_TR_CLASSES=y
 CONFIG_FEATURE_TR_EQUIV=y
 CONFIG_TRUE=y
 CONFIG_TRUNCATE=y
+CONFIG_TSORT=y
 CONFIG_TTY=y
 CONFIG_UNAME=y
 CONFIG_UNAME_OSNAME="GNU/Linux"
@@ -526,13 +533,13 @@ CONFIG_USE_BB_CRYPT_SHA=y
 CONFIG_ADDGROUP=y
 CONFIG_FEATURE_ADDUSER_TO_GROUP=y
 CONFIG_ADDUSER=y
-# CONFIG_FEATURE_CHECK_NAMES is not set
+CONFIG_FEATURE_CHECK_NAMES=y
 CONFIG_LAST_ID=60000
 CONFIG_FIRST_SYSTEM_ID=100
 CONFIG_LAST_SYSTEM_ID=999
 # CONFIG_CHPASSWD is not set
-CONFIG_FEATURE_DEFAULT_PASSWD_ALGO="md5"
-# CONFIG_CRYPTPW is not set
+CONFIG_FEATURE_DEFAULT_PASSWD_ALGO="sha512"
+CONFIG_CRYPTPW=y
 CONFIG_MKPASSWD=y
 CONFIG_DELUSER=y
 CONFIG_DELGROUP=y
@@ -549,7 +556,7 @@ CONFIG_SU=y
 CONFIG_FEATURE_SU_SYSLOG=y
 CONFIG_FEATURE_SU_CHECKS_SHELLS=y
 # CONFIG_FEATURE_SU_BLANK_PW_NEEDS_SECURE_TTY is not set
-CONFIG_SULOGIN=y
+# CONFIG_SULOGIN is not set
 CONFIG_VLOCK=y

 #
@@ -831,10 +838,12 @@ CONFIG_READAHEAD=y
 CONFIG_RFKILL=y
 CONFIG_RUNLEVEL=y
 CONFIG_RX=y
+CONFIG_SEEDRNG=y
 CONFIG_SETFATTR=y
 CONFIG_SETSERIAL=y
 CONFIG_STRINGS=y
 CONFIG_TIME=y
+CONFIG_TREE=y
 CONFIG_TS=y
 CONFIG_TTYSIZE=y
 CONFIG_UBIATTACH=y
@@ -1007,6 +1016,7 @@ CONFIG_UDHCPC=y
 CONFIG_FEATURE_UDHCPC_ARPING=y
 CONFIG_FEATURE_UDHCPC_SANITIZEOPT=y
 CONFIG_UDHCPC_DEFAULT_SCRIPT="/usr/share/udhcpc/default.script"
+CONFIG_UDHCPC6_DEFAULT_SCRIPT="/usr/share/udhcpc/default6.script"
 CONFIG_UDHCPC6=y
 CONFIG_FEATURE_UDHCPC6_RFC3646=y
 CONFIG_FEATURE_UDHCPC6_RFC4704=y
@@ -1141,6 +1151,7 @@ CONFIG_ASH_IDLE_TIMEOUT=y
 CONFIG_ASH_ECHO=y
 CONFIG_ASH_PRINTF=y
 CONFIG_ASH_TEST=y
+CONFIG_ASH_SLEEP=y
 CONFIG_ASH_HELP=y
 CONFIG_ASH_GETOPTS=y
 CONFIG_ASH_CMDCMD=y
@@ -30,7 +30,7 @@ image var.ext4 {
 	}
 }

-image disk.img {
+image @DISKIMG@ {
 	size = @TOTALSIZE@
 	hdimage {
 		partition-table-type = "gpt"
@@ -9,11 +9,20 @@ die()
    exit 1
 }

+# Find all matching key=value assignments in output/.config
+# E.g., load_cfg DISK_IMAGE sets the following variables:
+#
+#      DISK_IMAGE=y
+#      DISK_IMAGE_SIZE="512"
+#      etc.
+#
+# shellcheck disable=SC1090
 load_cfg()
 {
-    local tmp=$(mktemp -p /tmp)
+    tmp=$(mktemp -p /tmp)

-    grep "$1" $BR2_CONFIG >$tmp
-    .  $tmp
-    rm $tmp
+    grep -E "${1}.*=" "$BR2_CONFIG" >"$tmp"
+    .  "$tmp"
+
+    rm "$tmp"
 }
@@ -30,14 +30,14 @@ dimension()
 	cfgsize=$((256 << M))
 	# var is at least ~1.75G
    elif [ $total -ge $((1 << G)) ]; then
-	bootsize=$(( 4 << M))
-	auxsize=$((  4 << M))
+	bootsize=$(( 8 << M))
+	auxsize=$((  8 << M))
 	imgsize=$((256 << M))
 	cfgsize=$(( 64 << M))
 	# var is at least ~0.5G
    elif [ $total -ge $((512 << M)) ]; then
-	bootsize=$(( 4 << M))
-	auxsize=$((  4 << M))
+	bootsize=$(( 8 << M))
+	auxsize=$((  8 << M))
 	imgsize=$((192 << M))
 	cfgsize=$(( 16 << M))
 	# var is at least ~100M
@@ -80,7 +80,7 @@ probeboot()

 genboot()
 {
-    if [ -d $BINARIES_DIR/efi-part/EFI ]; then
+    if [ -d "$bootdata" ]; then
 	bootimg=$(cat <<EOF
 image efi-part.vfat {
 	size = $bootsize
@@ -102,6 +102,17 @@ EOF
 EOF
 		  )

+    elif [ -f "$bootdata" ]; then
+	bootpart=$(cat <<EOF
+	partition boot {
+		offset = $bootoffs
+		partition-type-uuid = U
+		bootable = true
+		image = $bootdata
+		size = $bootsize
+	}
+EOF
+		   )
    fi
 }

@@ -110,15 +121,26 @@ root=$BUILD_DIR/genimage.root
 tmp=$BUILD_DIR/genimage.tmp

 total=$((512 << M))
-bootoffs=
+bootoffs=$((32 << K))
+bootdata=
+diskimg=disk.img
 bootimg=
 bootpart=

-while getopts "a:s:" opt; do
+while getopts "a:b:B:n:s:" opt; do
    case ${opt} in
 	a)
 	    arch=$OPTARG
 	    ;;
+	b)
+	    bootdata=$OPTARG
+	    ;;
+	B)
+	    bootoffs=$(($OPTARG))
+	    ;;
+	n)
+	    diskimg=${OPTARG}
+	    ;;
 	s)
 	    total=$(size2int $OPTARG)
 	    ;;
@@ -140,6 +162,7 @@ awk \
 	  -vimgsize=$imgsize \
 	  -vcfgsize=$cfgsize \
 	  -vvarsize=$varsize \
+	  -vdiskimg=$diskimg \
 	  -vbootimg="$bootimg" -vbootpart="$bootpart" \
 	  '{
 		sub(/@TOTALSIZE@/, total);
@@ -148,7 +171,7 @@ awk \
 		sub(/@IMGSIZE@/, imgsize);
 		sub(/@CFGSIZE@/, cfgsize);
 		sub(/@VARSIZE@/, varsize);
-
+		sub(/@DISKIMG@/, diskimg);
 		sub(/@BOOTIMG@/, bootimg);
 		sub(/@BOOTPART@/, bootpart);
 	  }1' \
@@ -157,6 +180,7 @@ awk \
 mkdir -p $root/aux
 cp -f $BINARIES_DIR/rootfs.itbh $root/aux/primary.itbh
 cp -f $BINARIES_DIR/rootfs.itbh $root/aux/secondary.itbh
+cp -f $BINARIES_DIR/rauc.status $root/aux/rauc.status

 case "$arch" in
    aarch64)
@@ -18,12 +18,22 @@ load_cfg()
 load_cfg
 [ "$FIT_IMAGE" = "y" ] || exit 0

-work=$(pwd)/build/fit-image-local
+work=$BUILD_DIR/fit-image-local
 dtbs=$(find $BINARIES_DIR -name '*.dtb')
 kernel=$(find $BINARIES_DIR -name '*Image' | head -n1)
 squash=$BINARIES_DIR/rootfs.squashfs

 mkdir -p $work
+gzip <$kernel >$work/Image.gz
+kernel=$work/Image.gz
+
+rm -rf $work/rootfs
+unsquashfs -f -d $work/rootfs $squash
+rm -f $work/rootfs/boot/*Image
+
+squash=$work/rootfs-no-kernel.squashfs
+rm -f $squash
+mksquashfs $work/rootfs $squash

 # mkimage will only align images to 4 bytes, but U-Boot will leave
 # both DTB and ramdisk in place when starting the kernel. So we pad
@@ -79,7 +89,7 @@ cat <<EOF >$work/infix.its
 			arch = "$FIT_ARCH";
 			os = "linux";
 $(cat $work/kernel-load.itsi)
-			compression = "none";
+			compression = "gzip";
 			data = /incbin/("$kernel");
 		};

@@ -1,26 +1,66 @@
 #!/bin/sh
+# shellcheck disable=SC1091
+. "$TARGET_DIR/etc/os-release"

 if [ -n "$INFIX_RELEASE" ]; then
    rel="-${INFIX_RELEASE}"
 fi

-NM="${1:-custom}${rel}"
-RAM=${2:-512}
-IFNUM=${3:-1}
+ARCH=$1
+NM="${2:-custom}${rel}"
+DISK=$3
+RAM=${4:-512}
+IFNUM=${5:-1}
+
+# The aarch64 build currently has no "loader" but instead starts Linux
+# directly, so we need to add a basic cmdline.
+loader_args()
+{
+    if [ "$ARCH" = "aarch64" ]; then
+	cat <<EOF
+"kernel_command_line": "console=ttyAMA0 root=PARTLABEL=primary quiet",
+EOF
+    fi
+}
+
+loader_img()
+{
+    if [ "$ARCH" = "x86_64" ]; then
+	cat <<EOF
+"bios_image": "$loader",
+EOF
+    else
+	cat <<EOF
+"kernel_image": "$loader",
+EOF
+    fi
+}
+
+if [ "$ARCH" = "x86_64" ]; then
+    loader=OVMF.fd
+    accel=allow
+    opts=
+else
+    loader=Image
+    accel=disable
+    opts="-M virt -cpu cortex-a72"
+fi
+
+echo ">> Disk image MD5: $(md5sum "$BINARIES_DIR/$DISK" | awk '{print $1}')"

 cat <<EOF >"$BINARIES_DIR/${NM}.gns3a"
 {
    "name": "$NM",
    "category": "router",
-    "description": "Infix is a Network Operating System based on Linux.  It can be set up both as a switch, with offloading using switchdev, and a router with firewalling.",
-    "vendor_name": "KernelKit",
-    "vendor_url": "https://github.com/kernelkit/",
-    "product_name": "Infix",
+    "description": "$INFIX_DESC",
+    "vendor_name": "$VENDOR_NAME",
+    "vendor_url": "$VENDOR_HOME",
+    "product_name": "$NAME",
    "registry_version": 6,
    "status": "stable",
-    "maintainer": "KernelKit",
-    "maintainer_email": "kernelkit@googlegroups.com",
-    "usage": "Default console login is 'root', no password.  For remote login, default user/pass: admin/admin also works.\n\nType 'help' for an overview of commands and relevant configuration files.\n\nThe /etc directory is writable, use the passwd tool after login as part of your set up.\nFor networking, classify interfaces as switchports with /etc/mactab, syntax: 'MAC-address  eN', where N is the port number (1-MAX).\nTo set up bridging and management interfaces, use /etc/network/interfaces, and /etc/network/interfaces.d/",
+    "maintainer": "$VENDOR_NAME",
+    "maintainer_email": "${SUPPORT_URL#mailto:}",
+    "usage": "Default login, user/pass: admin/admin\n\nType 'help' for an overview of commands and relevant configuration files.\n\nFor Classic builds the following applies: the /etc directory is writable, use the passwd tool after login as part of your set up.\nFor networking, classify interfaces as switchports with /etc/mactab, syntax: 'MAC-address  eN', where N is the port number (1-MAX).\nTo set up bridging and management interfaces, use /etc/network/interfaces, and /etc/network/interfaces.d/",
    "port_name_format": "eth{0}",
    "linked_clone": true,
    "qemu": {
@@ -29,21 +69,24 @@ cat <<EOF >"$BINARIES_DIR/${NM}.gns3a"
        "ram": ${RAM},
        "cpus": 1,
        "hda_disk_interface": "virtio",
-        "arch": "x86_64",
+        "arch": "$ARCH",
        "console_type": "telnet",
-        "kvm": "allow"
+        $(loader_img)
+        $(loader_args)
+        "kvm": "$accel",
+	"options": "$opts"
    },
    "images": [
        {
-            "filename": "OVMF.fd",
-            "filesize": $(stat --printf='%s' "$BINARIES_DIR/OVMF.fd"),
-            "md5sum": "$(md5sum "$BINARIES_DIR/OVMF.fd" | awk '{print $1}')",
+            "filename": "$loader",
+            "filesize": $(stat --printf='%s' "$BINARIES_DIR/$loader"),
+            "md5sum": "$(md5sum "$BINARIES_DIR/$loader" | awk '{print $1}')",
            "version": "0.0"
        },
        {
-            "filename": "disk.img",
-            "filesize": $(stat --printf='%s' "$BINARIES_DIR/disk.img"),
-            "md5sum": "$(md5sum "$BINARIES_DIR/disk.img" | awk '{print $1}')",
+            "filename": "$DISK",
+            "filesize": $(stat --printf='%s' "$BINARIES_DIR/$DISK"),
+            "md5sum": "$(md5sum "$BINARIES_DIR/$DISK" | awk '{print $1}')",
            "version": "0.0"
        }
    ],
@@ -51,8 +94,8 @@ cat <<EOF >"$BINARIES_DIR/${NM}.gns3a"
        {
            "name": "0.0",
            "images": {
-                "bios_image": "OVMF.fd",
-                "hda_disk_image": "disk.img"
+                $(loader_img)
+                "hda_disk_image": "$DISK"
            }
        }
    ]
@@ -0,0 +1,35 @@
+#!/bin/sh
+
+set -e
+
+# Bootstrap a RAUC status file showing the newly created image
+# installed to both the primary and secondary slots. This then bundled
+# in the aux partition in mkdisk.sh, so that RAUC (on the target) can
+# always report the installed versions.
+rauc info --no-verify --output-format=shell $1 >/tmp/rauc-$$.info
+. /tmp/rauc-$$.info
+rm /tmp/rauc-$$.info
+tstamp=$(date -u +%FT%TZ)
+cat <<EOF
+[slot.rootfs.0]
+bundle.compatible=$RAUC_MF_COMPATIBLE
+bundle.version=$RAUC_MF_VERSION
+status=ok
+sha256=$RAUC_IMAGE_DIGEST_0
+size=$RAUC_IMAGE_SIZE_0
+installed.timestamp=$tstamp
+installed.count=1
+activated.timestamp=$tstamp
+activated.count=1
+
+[slot.rootfs.1]
+bundle.compatible=$RAUC_MF_COMPATIBLE
+bundle.version=$RAUC_MF_VERSION
+status=ok
+sha256=$RAUC_IMAGE_DIGEST_0
+size=$RAUC_IMAGE_SIZE_0
+installed.timestamp=$tstamp
+installed.count=1
+activated.timestamp=$tstamp
+activated.count=1
+EOF
@@ -3,11 +3,8 @@
 set -e

 GIT_VERSION=$(git -C $BR2_EXTERNAL_INFIX_PATH describe --always --dirty --tags)
-if [ -n "$INFIX_RELEASE" ]; then
-    rel="-${INFIX_RELEASE}"
-fi

-name=$1${rel}
+name=$1
 arch=$2
 sign=$3

@@ -7,19 +7,39 @@ if [ -n "${ID_LIKE}" ]; then
    ID="${ID} ${ID_LIKE}"
 fi

-GIT_VERSION=$(git -C "$BR2_EXTERNAL_INFIX_PATH" describe --always --dirty --tags)
+if [ -z "$GIT_VERSION" ]; then
+    infix_path="$BR2_EXTERNAL_INFIX_PATH"
+    if [ -n "$INFIX_OEM_PATH" ]; then
+	# Use version from br2-external OEM:ing Infix
+	infix_path="$INFIX_OEM_PATH"
+    fi
+    GIT_VERSION=$(git -C "$infix_path" describe --always --dirty --tags)
+fi
+
+# Override VERSION in /etc/os-release and filenames for release builds
+if [ -n "$INFIX_RELEASE" ]; then
+    VERSION="$INFIX_RELEASE"
+else
+    VERSION=$GIT_VERSION
+fi

 # This is a symlink to /usr/lib/os-release, so we remove this to keep
 # original Buildroot information.
 rm -f "$TARGET_DIR/etc/os-release"
 {
-    echo "NAME=\"Infix\""
-    echo "VERSION=${GIT_VERSION}"
-    echo "ID=infix"
+    echo "NAME=\"$INFIX_NAME\""
+    echo "ID=$INFIX_ID"
+    echo "PRETTY_NAME=\"$INFIX_TAGLINE\""
    echo "ID_LIKE=\"${ID}\""
-    echo "VERSION_ID=${GIT_VERSION}"
-    echo "BUILD_ID=\"${NAME} ${VERSION}\""
-    echo "PRETTY_NAME=\"Infix by KernelKit\""
+    echo "VERSION=\"${VERSION}\""
+    echo "VERSION_ID=${VERSION}"
+    echo "BUILD_ID=\"${GIT_VERSION}\""
+    if [ -n "$INFIX_IMAGE_ID" ]; then
+	echo "IMAGE_ID=\"$INFIX_IMAGE_ID\""
+    fi
+    if [ -n "$INFIX_RELEASE" ]; then
+	echo "IMAGE_VERSION=\"$INFIX_RELEASE\""
+    fi
    if [ "$INFIX_VARIANT_NETCONF" = "y" ]; then
 	echo "VARIANT=\"Managed NETCONF\""
 	echo "VARIANT_ID=netconf"
@@ -28,26 +48,35 @@ rm -f "$TARGET_DIR/etc/os-release"
 	echo "VARIANT_ID=classic"
    fi
    echo "ARCHITECTURE=\"${INFIX_ARCH}\""
-    echo "HOME_URL=https://github.com/KernelKit"
+    echo "HOME_URL=$INFIX_HOME"
+    if [ -n "$INFIX_VENDOR" ]; then
+	echo "VENDOR_NAME=\"$INFIX_VENDOR\""
+    fi
+    if [ -n "$INFIX_VENDOR_HOME" ]; then
+	echo "VENDOR_HOME=\"$INFIX_VENDOR_HOME\""
+    fi
+    if [ -n "$INFIX_DOC" ]; then
+	echo "DOCUMENTATION_URL=\"$INFIX_DOC\""
+    fi
+    if [ -n "$INFIX_SUPPORT" ]; then
+	echo "SUPPORT_URL=\"$INFIX_SUPPORT\""
+    fi
+    if [ -n "$INFIX_DESC" ]; then
+	echo "INFIX_DESC=\"$INFIX_DESC\""
+    fi
 } > "$TARGET_DIR/etc/os-release"

+echo "$INFIX_TAGLINE $VERSION -- $(date +"%b %e %H:%M %Z %Y")" > "$TARGET_DIR/etc/version"

-echo "Infix by KernelKit $GIT_VERSION -- $(date +"%b %e %H:%M %Z %Y")" > "$TARGET_DIR/etc/version"
-
-# Allow pdmenu (setup) and bash to be a login shells, bash
-# is added automatically when selected in menuyconfig, but
-# not when BusyBox provides a symlink (for ash).
+# Allow pdmenu (setup) and bash to be login shells, bash is added
+# automatically when selected in menuyconfig, but not when BusyBox
+# provides a symlink (for ash).  The /bin/{true,false} are old UNIX
+# beart means of disabling a user.
 grep -qsE '^/usr/bin/pdmenu$$' "$TARGET_DIR/etc/shells" \
        || echo "/usr/bin/pdmenu" >> "$TARGET_DIR/etc/shells"
 grep -qsE '^/bin/bash$$' "$TARGET_DIR/etc/shells" \
        || echo "/bin/bash" >> "$TARGET_DIR/etc/shells"
-
-# Menuconfig support for modifying Qemu args in release tarballs
-cp "$BR2_EXTERNAL_INFIX_PATH/board/common/qemu/qemu.sh" "$BINARIES_DIR/"
-sed "s/default QEMU_aarch64/default QEMU_$BR2_ARCH/" \
-    < "$BR2_EXTERNAL_INFIX_PATH/board/common/qemu/Config.in" \
-    > "$BINARIES_DIR/Config.in"
-rm -f "$BINARIES_DIR/qemu.cfg"
-CONFIG_="CONFIG_" BR2_CONFIG="$BINARIES_DIR/qemu.cfg" \
-       "$O/build/buildroot-config/conf" --olddefconfig "$BINARIES_DIR/Config.in"
-rm -f "$BINARIES_DIR/qemu.cfg.old" "$BINARIES_DIR/.config.old"
+grep -qsE '^/bin/true$$' "$TARGET_DIR/etc/shells" \
+        || echo "/bin/true" >> "$TARGET_DIR/etc/shells"
+grep -qsE '^/bin/false$$' "$TARGET_DIR/etc/shells" \
+        || echo "/bin/false" >> "$TARGET_DIR/etc/shells"
@@ -1,10 +1,23 @@
 #!/bin/sh
-common=$(dirname "$(readlink -f "$0")")
-. $common/lib.sh
+# shellcheck disable=SC2086

+common=$(dirname "$(readlink -f "$0")")
+. "$common/lib.sh"
+
+# shellcheck disable=SC1091
+. "$TARGET_DIR/etc/os-release"
+
+load_cfg INFIX_ID
+load_cfg BR2_ARCH
 load_cfg BR2_DEFCONFIG
 load_cfg BR2_EXTERNAL_INFIX_PATH
-NAME=infix-$(basename "$BR2_DEFCONFIG" _defconfig | tr _ - | sed 's/x86-64/x86_64/')
+load_cfg BR2_TARGET_ROOTFS
+if [ -n "$IMAGE_ID" ]; then
+    NAME="$IMAGE_ID"
+else
+    NAME="$INFIX_ID"-$(echo "$BR2_ARCH" | tr _ - | sed 's/x86-64/x86_64/')
+fi
+diskimg=disk.img

 ver()
 {
@@ -23,22 +36,34 @@ if [ "$SIGN_ENABLED" = "y" ]; then
    $common/sign.sh $BR2_ARCH $SIGN_KEY

    ixmsg "Creating RAUC Update Bundle"
-    $common/mkrauc.sh $NAME $BR2_ARCH $SIGN_KEY
+    $common/mkrauc.sh "$NAME$(ver)" $BR2_ARCH $SIGN_KEY
 fi

 load_cfg DISK_IMAGE
-load_cfg DISK_IMAGE_SIZE
 if [ "$DISK_IMAGE" = "y" ]; then
    ixmsg "Creating Disk Image"
-    $common/mkdisk.sh -a $BR2_ARCH -s $DISK_IMAGE_SIZE
+    diskimg="${NAME}-disk.img"
+    bootcfg=
+    if [ "$DISK_IMAGE_BOOT_DATA" ]; then
+	bootcfg="-b $DISK_IMAGE_BOOT_DATA -B $DISK_IMAGE_BOOT_OFFSET"
+    fi
+
+    if [ "$BR2_TARGET_ROOTFS_SQUASHFS" != "y" ] && \
+       [ ! -f "$BINARIES_DIR/rootfs.squashfs" ]; then
+	ixmsg "  Injecting $DISK_IMAGE_RELEASE_URL"
+	archive="$BINARIES_DIR/$(basename $DISK_IMAGE_RELEASE_URL)"
+	[ -f "$archive" ] || wget -O"$archive" "$DISK_IMAGE_RELEASE_URL"
+	tar -xa --strip-components=1 -C "$BINARIES_DIR" -f "$archive"
+    fi
+
+    $common/mkrauc-status.sh "$BINARIES_DIR/${NAME}.pkg" >"$BINARIES_DIR/rauc.status"
+    $common/mkdisk.sh -a $BR2_ARCH -n $diskimg -s $DISK_IMAGE_SIZE $bootcfg
 fi

 load_cfg GNS3_APPLIANCE
 if [ "$GNS3_APPLIANCE" = "y" ]; then
-    load_cfg GNS3_APPLIANCE_RAM
-    load_cfg GNS3_APPLIANCE_IFNUM
    ixmsg "Creating GNS3 Appliance, $GNS3_APPLIANCE_RAM MiB with $GNS3_APPLIANCE_IFNUM ports"
-    $common/mkgns3a.sh $NAME $GNS3_APPLIANCE_RAM $GNS3_APPLIANCE_IFNUM
+    $common/mkgns3a.sh $BR2_ARCH $NAME $diskimg $GNS3_APPLIANCE_RAM $GNS3_APPLIANCE_IFNUM
 fi

 load_cfg FIT_IMAGE
@@ -47,12 +72,25 @@ if [ "$FIT_IMAGE" = "y" ]; then
    $common/mkfit.sh
 fi

-if [ -z "${NAME##*minimal*}" ]; then
-    NAME=$(echo "$NAME" | sed 's/-minimal//')
+if [ "$BR2_TARGET_ROOTFS_SQUASHFS" = "y" ]; then
+    if [ -z "${NAME##*minimal*}" ]; then
+	NAME=$(echo "$NAME" | sed 's/-minimal//')
+    fi
+
+    rel=$(ver)
+    ln -sf rootfs.squashfs "$BINARIES_DIR/${NAME}${rel}.img"
+    if [ -n "$rel" ]; then
+	ln -sf "$BINARIES_DIR/${NAME}${rel}.img" "$BINARIES_DIR/${NAME}.img"
+    fi
 fi

-rel=$(ver)
-ln -sf rootfs.squashfs "$BINARIES_DIR/${NAME}${rel}.img"
-if [ -n "$rel" ]; then
-    ln -sf "$BINARIES_DIR/${NAME}${rel}.img" "$BINARIES_DIR/${NAME}.img"
-fi
+# Menuconfig support for modifying Qemu args in release tarballs
+cp "$BR2_EXTERNAL_INFIX_PATH/board/common/qemu/qemu.sh" "$BINARIES_DIR/"
+sed -e "s/@ARCH@/QEMU_$BR2_ARCH/" \
+    -e "s/@DISK_IMG@/$diskimg/"   \
+    < "$BR2_EXTERNAL_INFIX_PATH/board/common/qemu/Config.in.in" \
+    > "$BINARIES_DIR/Config.in"
+rm -f "$BINARIES_DIR/qemu.cfg"
+CONFIG_="CONFIG_" BR2_CONFIG="$BINARIES_DIR/qemu.cfg" \
+       "$O/build/buildroot-config/conf" --olddefconfig "$BINARIES_DIR/Config.in"
+rm -f "$BINARIES_DIR/qemu.cfg.old" "$BINARIES_DIR/.config.old"
@@ -2,7 +2,7 @@ mainmenu "QEMU Virtualization"

 choice
 	prompt "Target Architecture"
-	default QEMU_aarch64
+	default @ARCH@

 config QEMU_x86_64
 	bool "x86_64"
@@ -37,19 +37,34 @@ choice

 config QEMU_ROOTFS_MMC
     bool "MMC"
+     depends on QEMU_aarch64

 config QEMU_ROOTFS_INITRD
     bool "Initrd"
+     depends on QEMU_LOADER_KERNEL

 config QEMU_ROOTFS_VSCSI
     bool "Virtio SCSI"

 endchoice

+choice
+     prompt "Console"
+     default QEMU_CONSOLE_VIRTIO
+
+config QEMU_CONSOLE_VIRTIO
+     bool "Virtio (hvc0)"
+     depends on QEMU_LOADER_KERNEL
+
+config QEMU_CONSOLE_SERIAL
+     bool "Serial (ttyS0/ttyAMA0)"
+
+endchoice
+
 config QEMU_MACHINE
 	string
 	default "qemu-system-aarch64 -M virt -cpu cortex-a72 -m 256M"   if QEMU_aarch64
-	default "qemu-system-x86_64 -M q35,accel=kvm -cpu host -m 512M" if QEMU_x86_64
+	default "qemu-system-x86_64 -M q35,accel=kvm -cpu host -m 256M" if QEMU_x86_64

 config QEMU_KERNEL
 	string
@@ -65,15 +80,9 @@ config QEMU_BIOS

 config QEMU_ROOTFS
 	string
-	default "disk.img"        if !QEMU_ROOTFS_INITRD
+	default "@DISK_IMG@" if !QEMU_ROOTFS_INITRD
 	default "rootfs.squashfs" if QEMU_ROOTFS_INITRD

-config QEMU_CONSOLE
-	string
-	depends on !QEMU_ROOTFS_MMC
-	default "ttyAMA0" if QEMU_aarch64
-	default "ttyS0"   if QEMU_x86_64
-
 config QEMU_DTB_EXTEND
 	bool
 	depends on QEMU_LOADER_UBOOT
@@ -127,7 +136,7 @@ endchoice

 config QEMU_NET_MODEL
 	string "Interface model"
-	default "virtio"
+	default "virtio-net-pci"

 config QEMU_NET_BRIDGE_DEV
 	string "Bridge device"
@@ -69,14 +69,20 @@ loader_args()

 append_args()
 {
-# Disabled, not needed anymore with virtconsole (hvc0)
-#    [ "$CONFIG_QEMU_CONSOLE" ] && echo -n "console=$CONFIG_QEMU_CONSOLE "
+    if [ "$CONFIG_QEMU_CONSOLE_VIRTIO" ]; then
+	echo -n "console=hvc0 "
+    elif [ "$CONFIG_QEMU_x86_64" ]; then
+	echo -n "console=ttyS0 "
+    elif [ "$CONFIG_QEMU_aarch64" ]; then
+	echo -n "console=ttyAMA0 "
+    else
+	die "Unknown console"
+    fi

-    echo -n "console=hvc0 "
    if [ "$CONFIG_QEMU_ROOTFS_INITRD" = "y" ]; then
 	# Size of initrd, rounded up to nearest kb
 	local size=$((($(stat -c %s $CONFIG_QEMU_ROOTFS) + 1023) >> 10))
-	echo -n "root=/dev/ram ramdisk_size=${size} "
+	echo -n "root=/dev/ram0 ramdisk_size=${size} "
    elif [ "$CONFIG_QEMU_ROOTFS_VSCSI" = "y" ]; then
 	echo -n "root=PARTLABEL=primary "
    fi
@@ -103,6 +109,26 @@ rootfs_args()
    fi
 }

+serial_args()
+{
+    echo -n "-display none "
+    echo -n "-device virtio-serial "
+
+    echo -n "-chardev stdio,id=console0,mux=on "
+    echo -n "-mon chardev=console0 "
+
+    if [ "$CONFIG_QEMU_CONSOLE_VIRTIO" ]; then
+	echo -n "-device virtconsole,nr=0,name=console,chardev=console0 "
+    elif [ "$CONFIG_QEMU_CONSOLE_SERIAL" ]; then
+	echo -n "-serial chardev:console0 "
+    else
+	die "Unknown console"
+    fi
+
+    echo -n "-chardev socket,id=gdbserver,path=gdbserver.sock,server=on,wait=off "
+    echo -n "-device virtconsole,nr=1,name=gdbserver,chardev=gdbserver "
+}
+
 rw_args()
 {
    [ "$CONFIG_QEMU_RW" ] || return
@@ -126,31 +152,41 @@ rw_args()

 host_args()
 {
-    [ "${QEMU_HOST}" ] || return
+    [ "$CONFIG_QEMU_HOST" ] || return

-    echo -n "-virtfs local,path=${QEMU_HOST},security_model=none,writeout=immediate,mount_tag=hostfs "
+    echo -n "-virtfs local,path=$CONFIG_QEMU_HOST,security_model=none,writeout=immediate,mount_tag=hostfs "
+}
+
+net_dev_args()
+{
+    local name="e$1"
+    local mac=$(printf "02:00:00:00:00:%02x" $1)
+
+    echo -n "-device $CONFIG_QEMU_NET_MODEL,netdev=$name,mac=$mac "
+    echo "$name	$mac" >>"$mactab"
 }

 net_args()
 {
-    QEMU_NET_MODEL=${QEMU_NET_MODEL:-virtio}
+    # Infix will pick up this file via fwcfg and install it to /etc
+    mactab=$(dirname "$CONFIG_QEMU_ROOTFS")/mactab
+    :> "$mactab"
+    echo -n "-fw_cfg name=opt/mactab,file=$mactab "

    if [ "$CONFIG_QEMU_NET_BRIDGE" = "y" ]; then
-	QEMU_NET_BRIDGE_DEV=${QEMU_NET_BRIDGE_DEV:-virbr0}
-	echo -n "-nic bridge,br=$CONFIG_QEMU_NET_BRIDGE_DEV,model=$CONFIG_QEMU_NET_MODEL "
+	echo -n "-netdev bridge,id=e0,br=$CONFIG_QEMU_NET_BRIDGE_DEV "
+	net_dev_args 0
    elif [ "$CONFIG_QEMU_NET_TAP" = "y" ]; then
-	QEMU_NET_TAP_N=${QEMU_NET_TAP_N:-1}
-	mactab=$(dirname "$CONFIG_QEMU_ROOTFS")/mactab
-	rm -f "$mactab"
 	for i in $(seq 0 $(($CONFIG_QEMU_NET_TAP_N - 1))); do
-	    printf "e$i	52:54:00:12:34:%02x\n" $((0x56 + i)) >>"$mactab"
-	    echo -n "-netdev tap,id=nd$i,ifname=qtap$i -device e1000,netdev=nd$i "
+	    echo -n "-netdev tap,id=e$i,ifname=qtap$i "
+	    net_dev_args $i
 	done
-	echo -n "-fw_cfg name=opt/mactab,file=$mactab "
    elif [ "$CONFIG_QEMU_NET_USER" = "y" ]; then
-	[ "$CONFIG_QEMU_NET_USER_OPTS" ] && QEMU_NET_USER_OPTS="$CONFIG_QEMU_NET_USER_OPTS,"
+	local useropts=
+	[ "$CONFIG_QEMU_NET_USER_OPTS" ] && useropts=",$CONFIG_QEMU_NET_USER_OPTS"

-	echo -n "-nic user,${QEMU_NET_USER_OPTS}model=$CONFIG_QEMU_NET_MODEL "
+	echo -n "-netdev user,id=e0${useropts} "
+	net_dev_args 0
    else
 	echo -n "-nic none"
    fi
@@ -166,13 +202,9 @@ run_qemu()
    local qemu
    read qemu <<EOF
 	$CONFIG_QEMU_MACHINE \
-	  -display none -rtc base=utc,clock=vm \
-	  -device virtio-serial -chardev stdio,mux=on,id=console0 \
-	  -device virtconsole,chardev=console0 -mon chardev=console0 \
-	  -chardev socket,id=gdbserver,path=gdbserver.sock,server=on,wait=off \
-	  -device virtconsole,name=console1,chardev=gdbserver \
 	  $(loader_args) \
 	  $(rootfs_args) \
+	  $(serial_args) \
 	  $(rw_args) \
 	  $(host_args) \
 	  $(net_args) \
@@ -219,7 +251,7 @@ generate_dot()

    hostports="<qtap0> qtap0"
    targetports="<e0> e0"
-    edges="host:qtap0 -- target:e0;"
+    edges="host:qtap0 -- target:e0 [kind=mgmt];"
    for tap in $(seq 1 $(($CONFIG_QEMU_NET_TAP_N - 1))); do
 	hostports="$hostports | <qtap$tap> qtap$tap "
 	targetports="$targetports | <e$tap> e$tap "
@@ -1,5 +0,0 @@
-{
-    "ietf-system:system": {
-	"hostname": "infix"
-    }
-}
@@ -0,0 +1,88 @@
+#!/bin/sh
+
+# This file is part of avahi.
+#
+# avahi is free software; you can redistribute it and/or modify it
+# under the terms of the GNU Lesser General Public License as
+# published by the Free Software Foundation; either version 2 of the
+# License, or (at your option) any later version.
+#
+# avahi is distributed in the hope that it will be useful, but WITHOUT
+# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
+# or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public
+# License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public
+# License along with avahi; if not, write to the Free Software
+# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307
+# USA.
+
+set -e
+
+# Command line arguments:
+#   $1 event that happened:
+#          BIND:     Successfully claimed address
+#          CONFLICT: An IP address conflict happened
+#          UNBIND:   The IP address is no longer needed
+#          STOP:     The daemon is terminating
+#   $2 interface name
+#   $3 IP adddress
+
+PATH="$PATH:/usr/bin:/usr/sbin:/bin:/sbin"
+
+# Use a different metric for each interface, so that we can set
+# identical routes to multiple interfaces.
+
+METRIC=$((1000 + `cat "/sys/class/net/$2/ifindex" 2>/dev/null || echo 0`))
+
+if [ -x /bin/ip -o -x /sbin/ip ] ; then
+
+    # We have the Linux ip tool from the iproute package
+
+    case "$1" in
+        BIND)
+            ip addr flush dev "$2" label "$2:avahi"
+            ip addr add "$3"/16 brd 169.254.255.255 label "$2:avahi" scope link dev "$2" proto 6
+            ip route add default dev "$2" metric "$METRIC" scope link ||:
+            ;;
+
+        CONFLICT|UNBIND|STOP)
+            ip route del default dev "$2" metric "$METRIC" scope link ||:
+            ip addr del "$3"/16 brd 169.254.255.255 label "$2:avahi" scope link dev "$2"
+            ;;
+
+        *)
+            echo "Unknown event $1" >&2
+            exit 1
+            ;;
+    esac
+
+elif [ -x /bin/ifconfig -o -x /sbin/ifconfig ] ; then
+
+    # We have the old ifconfig tool
+
+    case "$1" in
+        BIND)
+            ifconfig "$2:avahi" inet "$3" netmask 255.255.0.0 broadcast 169.254.255.255 up
+            route add default dev "$2:avahi" metric "$METRIC" ||:
+            ;;
+
+        CONFLICT|STOP|UNBIND)
+            route del default dev "$2:avahi" metric "$METRIC" ||:
+            ifconfig "$2:avahi" down
+            ;;
+
+        *)
+            echo "Unknown event $1" >&2
+            exit 1
+            ;;
+    esac
+
+else
+
+    echo "No network configuration tool found." >&2
+    exit 1
+
+fi
+
+exit 0
@@ -13,6 +13,3 @@ export PROMPT_COMMAND=prompt_command
 # check the window size after each command and, if necessary,
 # update the values of LINES and COLUMNS.
 shopt -s checkwinsize
-
-# Disble built-ins
-enable -n help
@@ -0,0 +1,141 @@
+_cond()
+{
+    initctl -pt cond dump |  awk '{print $4}' | sed 's/<\(.*\)>/\1/'
+}
+
+_ident()
+{
+    if [ -n "$1" ]; then
+	initctl ident | grep -q $1
+    else
+	initctl ident
+    fi
+}
+
+_svc()
+{
+    initctl ls -pt | grep $1 | sed "s/.*\/\(.*\)/\1/g" | sort -u
+}
+
+_enabled()
+{
+    echo "$(_svc enabled)"
+}
+
+_available()
+{
+    all=$(mktemp)
+    ena=$(mktemp)
+    echo "$(_svc available)" >$all
+    echo "$(_svc enabled)"   >$ena
+    grep -v -f $ena $all
+    rm $all $ena
+}
+
+# Determine first non-option word. Usually the command
+_firstword() {
+	local firstword i
+
+	firstword=
+	for ((i = 1; i < ${#COMP_WORDS[@]}; ++i)); do
+		if [[ ${COMP_WORDS[i]} != -* ]]; then
+			firstword=${COMP_WORDS[i]}
+			break
+		fi
+	done
+
+	echo $firstword
+}
+
+# Determine last non-option word. Uusally a sub-command
+_lastword() {
+	local lastword i
+
+	lastword=
+	for ((i = 1; i < ${#COMP_WORDS[@]}; ++i)); do
+		if [[ ${COMP_WORDS[i]} != -* ]] && [[ -n ${COMP_WORDS[i]} ]] && [[ ${COMP_WORDS[i]} != $cur ]]; then
+			lastword=${COMP_WORDS[i]}
+		fi
+	done
+
+	echo $lastword
+}
+
+_initctl()
+{
+    local cur command
+
+    cur=${COMP_WORDS[COMP_CWORD]}
+    prev="${COMP_WORDS[COMP_CWORD-1]}"
+    firstword=$(_firstword)
+    lastword=$(_lastword)
+
+    commands="status cond debug help kill ls log version  list enable	\
+	      disable touch show cat edit create delete reload start	\
+	      stop restart signal cgroup ps top plugins runlevel reboot	\
+	      halt poweroff suspend utmp"
+    cond_cmds="set get clear status dump"
+    cond_types="hook net pid service task usr"
+    signals="int term hup stop tstp cont usr1 usr2 pwr"
+    options="-b --batch				\
+	     -c --create			\
+	     -d --debug				\
+	     -f --force				\
+	     -h --help				\
+	     -j --json				\
+	     -n --noerr				\
+	     -1 --once				\
+	     -p --plain				\
+	     -q --quiet				\
+	     -t --no-heading			\
+	     -v --verbose			\
+	     -V --version"
+
+    case "${firstword}" in
+	enable)
+	    COMPREPLY=($(compgen -W "$(_available)" -- $cur))
+	    ;;
+	disable|touch)
+	    COMPREPLY=($(compgen -W "$(_enabled)" -- $cur))
+	    ;;
+	show|cat|edit|delete)
+	    COMPREPLY=($(compgen -W "$(_svc .)" -- $cur))
+	    ;;
+	start|stop|restart|log|status)
+	    COMPREPLY=($(compgen -W "$(_ident)" -- $cur))
+	    ;;
+	signal|kill)
+	    if $(_ident "${prev}"); then
+		COMPREPLY=($(compgen -W "$signals" -- $cur))
+	    else
+		COMPREPLY=($(compgen -W "$(_ident)" -- $cur))
+	    fi
+	    ;;
+	cond)
+	    case "${lastword}" in
+		set|clear)
+		    compopt -o nospace
+		    COMPREPLY=($(compgen -W "usr/" -- $cur))
+		    ;;
+		get)
+		    COMPREPLY=($(compgen -W "$(_cond)" -- $cur))
+		    ;;
+		dump)
+		    COMPREPLY=($(compgen -W "$cond_types" -- $cur))
+		    ;;
+		*)
+		    COMPREPLY=($(compgen -W "$cond_cmds" -- $cur))
+		    ;;
+	    esac
+	    ;;
+	*)
+	    COMPREPLY=($(compgen -W "$commands" -- $cur))
+	    ;;
+    esac
+
+    if [[ $cur == -* ]]; then
+	COMPREPLY=($(compgen -W "$options" -- $cur))
+    fi
+}
+
+complete -F _initctl initctl
@@ -1,2 +1 @@
 set COLORTERM=yes
-runparts /cfg/start.d
@@ -1,2 +1,3 @@
-run [S] /lib/infix/sysctl-sync-ip-conf --
-run [S] /lib/infix/nameif -- Probing network interfaces
+run [S]                /lib/infix/probe -- Probing system information
+run [S] <pid/syslogd> /lib/infix/sysctl-sync-ip-conf --
+run [S] <pid/syslogd> /lib/infix/nameif -- Probing network interfaces
@@ -0,0 +1 @@
+service [2345789] log:prio:user.notice rauc service -- Software update service
@@ -1,2 +0,0 @@
-task [S] /lib/infix/ssh-hostkeys --
-service [2345789] <usr/ssh-hostkeys> /usr/sbin/sshd -D -- OpenSSH daemon
@@ -0,0 +1,5 @@
+# Override Finit plugin
+service cgroup.system name:dbus pid:!/run/messagebus.pid <pid/syslogd>    \
+	[S123456789] /usr/bin/dbus-daemon --nofork --system --syslog-only \
+	-- D-Bus message bus daemon
+
@@ -0,0 +1 @@
+../available/rauc.conf
@@ -1 +0,0 @@
-../available/sshd.conf
@@ -11,9 +11,6 @@ sysfs		/sys		sysfs		defaults		0	0
 debugfs	/sys/kernel/debug	debugfs		nofail			0	0
 cfgfs		/config		configfs	nofail,noauto		0	0

-# Optional host share when running in Qemu
-hostfs		/host		9p		nofail,cache=none,msize=16384	0	0
-
 # The chosen backing storage for the overlays placed on /cfg, /etc,
 # /home, /root, and /var, are determined dynamically by /lib/infix/mnt
 # depending on the available devices.
@@ -1,2 +1,3 @@
 1 port
 2 iface
+3 internal
@@ -0,0 +1,3 @@
+4 static
+5 dhcp
+6 random
@@ -4,17 +4,21 @@ alias ll='ls -alF'
 alias ls='ls --color=auto'

 export EDITOR=/usr/bin/edit
+export VISUAL=/usr/bin/edit
+export LESS="-P %f (press h for help or q to quit)"
 alias vim='vi'
 alias view='vi -R'
 alias emacs='mg'
 alias sensible-editor=edit
 alias sensible-pager=pager
+alias hd="hexdump -C"

 alias ip='ip --color=auto'
 alias ipb='ip -br'
 alias ipaddr='ip addr'
 alias iplink='ip link'
 alias bridge='bridge --color=auto'
-alias cli='klish'
+
+alias llping='ping -L ff02::1 -I'

 alias docker=podman
@@ -0,0 +1,361 @@
+# Network services, Internet style
+#
+# Updated from https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml .
+#
+# New ports will be added on request if they have been officially assigned
+# by IANA and used in the real-world or are needed by a debian package.
+# If you need a huge list of used numbers please install the nmap package.
+
+tcpmux		1/tcp				# TCP port service multiplexer
+echo		7/tcp
+echo		7/udp
+discard		9/tcp		sink null
+discard		9/udp		sink null
+systat		11/tcp		users
+daytime		13/tcp
+daytime		13/udp
+netstat		15/tcp
+qotd		17/tcp		quote
+chargen		19/tcp		ttytst source
+chargen		19/udp		ttytst source
+ftp-data	20/tcp
+ftp		21/tcp
+fsp		21/udp		fspd
+ssh		22/tcp				# SSH Remote Login Protocol
+telnet		23/tcp
+smtp		25/tcp		mail
+time		37/tcp		timserver
+time		37/udp		timserver
+whois		43/tcp		nicname
+tacacs		49/tcp				# Login Host Protocol (TACACS)
+tacacs		49/udp
+domain		53/tcp				# Domain Name Server
+domain		53/udp
+bootps		67/udp
+bootpc		68/udp
+tftp		69/udp
+gopher		70/tcp				# Internet Gopher
+finger		79/tcp
+http		80/tcp		www		# WorldWideWeb HTTP
+kerberos	88/tcp		kerberos5 krb5 kerberos-sec	# Kerberos v5
+kerberos	88/udp		kerberos5 krb5 kerberos-sec	# Kerberos v5
+iso-tsap	102/tcp		tsap		# part of ISODE
+acr-nema	104/tcp		dicom		# Digital Imag. & Comm. 300
+pop3		110/tcp		pop-3		# POP version 3
+sunrpc		111/tcp		portmapper	# RPC 4.0 portmapper
+sunrpc		111/udp		portmapper
+auth		113/tcp		authentication tap ident
+nntp		119/tcp		readnews untp	# USENET News Transfer Protocol
+ntp		123/udp				# Network Time Protocol
+epmap		135/tcp		loc-srv		# DCE endpoint resolution
+netbios-ns	137/udp				# NETBIOS Name Service
+netbios-dgm	138/udp				# NETBIOS Datagram Service
+netbios-ssn	139/tcp				# NETBIOS session service
+imap2		143/tcp		imap		# Interim Mail Access P 2 and 4
+snmp		161/tcp				# Simple Net Mgmt Protocol
+snmp		161/udp
+snmp-trap	162/tcp		snmptrap	# Traps for SNMP
+snmp-trap	162/udp		snmptrap
+cmip-man	163/tcp				# ISO mgmt over IP (CMOT)
+cmip-man	163/udp
+cmip-agent	164/tcp
+cmip-agent	164/udp
+mailq		174/tcp			# Mailer transport queue for Zmailer
+xdmcp		177/udp			# X Display Manager Control Protocol
+bgp		179/tcp				# Border Gateway Protocol
+smux		199/tcp				# SNMP Unix Multiplexer
+qmtp		209/tcp				# Quick Mail Transfer Protocol
+z3950		210/tcp		wais		# NISO Z39.50 database
+ipx		213/udp				# IPX [RFC1234]
+ptp-event	319/udp
+ptp-general	320/udp
+pawserv		345/tcp				# Perf Analysis Workbench
+zserv		346/tcp				# Zebra server
+rpc2portmap	369/tcp
+rpc2portmap	369/udp				# Coda portmapper
+codaauth2	370/tcp
+codaauth2	370/udp				# Coda authentication server
+clearcase	371/udp		Clearcase
+ldap		389/tcp			# Lightweight Directory Access Protocol
+ldap		389/udp
+svrloc		427/tcp				# Server Location
+svrloc		427/udp
+https		443/tcp				# http protocol over TLS/SSL
+https		443/udp				# HTTP/3
+snpp		444/tcp				# Simple Network Paging Protocol
+microsoft-ds	445/tcp				# Microsoft Naked CIFS
+kpasswd		464/tcp
+kpasswd		464/udp
+submissions	465/tcp		ssmtp smtps urd # Submission over TLS [RFC8314]
+saft		487/tcp			# Simple Asynchronous File Transfer
+isakmp		500/udp				# IPSEC key management
+rtsp		554/tcp			# Real Time Stream Control Protocol
+rtsp		554/udp
+nqs		607/tcp				# Network Queuing system
+asf-rmcp	623/udp		# ASF Remote Management and Control Protocol
+qmqp		628/tcp
+ipp		631/tcp				# Internet Printing Protocol
+ldp		646/tcp				# Label Distribution Protocol
+ldp		646/udp
+#
+# UNIX specific services
+#
+exec		512/tcp
+biff		512/udp		comsat
+login		513/tcp
+who		513/udp		whod
+shell		514/tcp		cmd syslog	# no passwords used
+syslog		514/udp
+printer		515/tcp		spooler		# line printer spooler
+talk		517/udp
+ntalk		518/udp
+route		520/udp		router routed	# RIP
+gdomap		538/tcp				# GNUstep distributed objects
+gdomap		538/udp
+uucp		540/tcp		uucpd		# uucp daemon
+klogin		543/tcp				# Kerberized `rlogin' (v5)
+kshell		544/tcp		krcmd		# Kerberized `rsh' (v5)
+dhcpv6-client	546/udp
+dhcpv6-server	547/udp
+afpovertcp	548/tcp				# AFP over TCP
+nntps		563/tcp		snntp		# NNTP over SSL
+submission	587/tcp				# Submission [RFC4409]
+ldaps		636/tcp				# LDAP over SSL
+ldaps		636/udp
+tinc		655/tcp				# tinc control port
+tinc		655/udp
+silc		706/tcp
+kerberos-adm	749/tcp				# Kerberos `kadmin' (v5)
+#
+domain-s	853/tcp				# DNS over TLS [RFC7858]
+domain-s	853/udp				# DNS over DTLS [RFC8094]
+rsync		873/tcp
+ftps-data	989/tcp				# FTP over SSL (data)
+ftps		990/tcp
+telnets		992/tcp				# Telnet over SSL
+imaps		993/tcp				# IMAP over SSL
+pop3s		995/tcp				# POP-3 over SSL
+#
+# From ``Assigned Numbers'':
+#
+#> The Registered Ports are not controlled by the IANA and on most systems
+#> can be used by ordinary user processes or programs executed by ordinary
+#> users.
+#
+#> Ports are used in the TCP [45,106] to name the ends of logical
+#> connections which carry long term conversations.  For the purpose of
+#> providing services to unknown callers, a service contact port is
+#> defined.  This list specifies the port used by the server process as its
+#> contact port.  While the IANA can not control uses of these ports it
+#> does register or list uses of these ports as a convienence to the
+#> community.
+#
+socks		1080/tcp			# socks proxy server
+proofd		1093/tcp
+rootd		1094/tcp
+openvpn		1194/tcp
+openvpn		1194/udp
+rmiregistry	1099/tcp			# Java RMI Registry
+lotusnote	1352/tcp	lotusnotes	# Lotus Note
+ms-sql-s	1433/tcp			# Microsoft SQL Server
+ms-sql-m	1434/udp			# Microsoft SQL Monitor
+ingreslock	1524/tcp
+datametrics	1645/tcp	old-radius
+datametrics	1645/udp	old-radius
+sa-msg-port	1646/tcp	old-radacct
+sa-msg-port	1646/udp	old-radacct
+kermit		1649/tcp
+groupwise	1677/tcp
+l2f		1701/udp	l2tp
+radius		1812/tcp
+radius		1812/udp
+radius-acct	1813/tcp	radacct		# Radius Accounting
+radius-acct	1813/udp	radacct
+cisco-sccp	2000/tcp			# Cisco SCCP
+nfs		2049/tcp			# Network File System
+nfs		2049/udp			# Network File System
+gnunet		2086/tcp
+gnunet		2086/udp
+rtcm-sc104	2101/tcp			# RTCM SC-104 IANA 1/29/99
+rtcm-sc104	2101/udp
+gsigatekeeper	2119/tcp
+gris		2135/tcp		# Grid Resource Information Server
+cvspserver	2401/tcp			# CVS client/server operations
+venus		2430/tcp			# codacon port
+venus		2430/udp			# Venus callback/wbc interface
+venus-se	2431/tcp			# tcp side effects
+venus-se	2431/udp			# udp sftp side effect
+codasrv		2432/tcp			# not used
+codasrv		2432/udp			# server port
+codasrv-se	2433/tcp			# tcp side effects
+codasrv-se	2433/udp			# udp sftp side effect
+mon		2583/tcp			# MON traps
+mon		2583/udp
+dict		2628/tcp			# Dictionary server
+f5-globalsite	2792/tcp
+gsiftp		2811/tcp
+gpsd		2947/tcp
+gds-db		3050/tcp	gds_db		# InterBase server
+icpv2		3130/udp	icp		# Internet Cache Protocol
+isns		3205/tcp			# iSNS Server Port
+isns		3205/udp			# iSNS Server Port
+iscsi-target	3260/tcp
+mysql		3306/tcp
+ms-wbt-server	3389/tcp
+nut		3493/tcp			# Network UPS Tools
+nut		3493/udp
+distcc		3632/tcp			# distributed compiler
+daap		3689/tcp			# Digital Audio Access Protocol
+svn		3690/tcp	subversion	# Subversion protocol
+suucp		4031/tcp			# UUCP over SSL
+sysrqd		4094/tcp			# sysrq daemon
+sieve		4190/tcp			# ManageSieve Protocol
+epmd		4369/tcp			# Erlang Port Mapper Daemon
+remctl		4373/tcp		# Remote Authenticated Command Service
+f5-iquery	4353/tcp			# F5 iQuery
+ntske		4460/tcp	# Network Time Security Key Establishment
+ipsec-nat-t	4500/udp			# IPsec NAT-Traversal [RFC3947]
+iax		4569/udp			# Inter-Asterisk eXchange
+mtn		4691/tcp			# monotone Netsync Protocol
+radmin-port	4899/tcp			# RAdmin Port
+sip		5060/tcp			# Session Initiation Protocol
+sip		5060/udp
+sip-tls		5061/tcp
+sip-tls		5061/udp
+xmpp-client	5222/tcp	jabber-client	# Jabber Client Connection
+xmpp-server	5269/tcp	jabber-server	# Jabber Server Connection
+cfengine	5308/tcp
+mdns		5353/udp			# Multicast DNS
+postgresql	5432/tcp	postgres	# PostgreSQL Database
+freeciv		5556/tcp	rptp		# Freeciv gameplay
+amqps		5671/tcp			# AMQP protocol over TLS/SSL
+amqp		5672/tcp
+amqp		5672/sctp
+x11		6000/tcp	x11-0		# X Window System
+x11-1		6001/tcp
+x11-2		6002/tcp
+x11-3		6003/tcp
+x11-4		6004/tcp
+x11-5		6005/tcp
+x11-6		6006/tcp
+x11-7		6007/tcp
+gnutella-svc	6346/tcp			# gnutella
+gnutella-svc	6346/udp
+gnutella-rtr	6347/tcp			# gnutella
+gnutella-rtr	6347/udp
+redis		6379/tcp
+sge-qmaster	6444/tcp	sge_qmaster	# Grid Engine Qmaster Service
+sge-execd	6445/tcp	sge_execd	# Grid Engine Execution Service
+mysql-proxy	6446/tcp			# MySQL Proxy
+babel		6696/udp			# Babel Routing Protocol
+ircs-u		6697/tcp		# Internet Relay Chat via TLS/SSL
+bbs		7000/tcp
+afs3-fileserver 7000/udp
+afs3-callback	7001/udp			# callbacks to cache managers
+afs3-prserver	7002/udp			# users & groups database
+afs3-vlserver	7003/udp			# volume location database
+afs3-kaserver	7004/udp			# AFS/Kerberos authentication
+afs3-volser	7005/udp			# volume managment server
+afs3-bos	7007/udp			# basic overseer process
+afs3-update	7008/udp			# server-to-server updater
+afs3-rmtsys	7009/udp			# remote cache manager service
+font-service	7100/tcp	xfs		# X Font Service
+http-alt	8080/tcp	webcache	# WWW caching service
+puppet		8140/tcp			# The Puppet master service
+bacula-dir	9101/tcp			# Bacula Director
+bacula-fd	9102/tcp			# Bacula File Daemon
+bacula-sd	9103/tcp			# Bacula Storage Daemon
+xmms2		9667/tcp	# Cross-platform Music Multiplexing System
+nbd		10809/tcp			# Linux Network Block Device
+zabbix-agent	10050/tcp			# Zabbix Agent
+zabbix-trapper	10051/tcp			# Zabbix Trapper
+amanda		10080/tcp			# amanda backup services
+dicom		11112/tcp
+hkp		11371/tcp			# OpenPGP HTTP Keyserver
+db-lsp		17500/tcp			# Dropbox LanSync Protocol
+dcap		22125/tcp			# dCache Access Protocol
+gsidcap		22128/tcp			# GSI dCache Access Protocol
+wnn6		22273/tcp			# wnn6
+
+#
+# Datagram Delivery Protocol services
+#
+rtmp		1/ddp			# Routing Table Maintenance Protocol
+nbp		2/ddp			# Name Binding Protocol
+echo		4/ddp			# AppleTalk Echo Protocol
+zip		6/ddp			# Zone Information Protocol
+
+#=========================================================================
+# The remaining port numbers are not as allocated by IANA.
+#=========================================================================
+
+# Kerberos (Project Athena/MIT) services
+kerberos4	750/udp		kerberos-iv kdc	# Kerberos (server)
+kerberos4	750/tcp		kerberos-iv kdc
+kerberos-master	751/udp		kerberos_master	# Kerberos authentication
+kerberos-master	751/tcp
+passwd-server	752/udp		passwd_server	# Kerberos passwd server
+krb-prop	754/tcp		krb_prop krb5_prop hprop # Kerberos slave propagation
+zephyr-srv	2102/udp			# Zephyr server
+zephyr-clt	2103/udp			# Zephyr serv-hm connection
+zephyr-hm	2104/udp			# Zephyr hostmanager
+iprop		2121/tcp			# incremental propagation
+supfilesrv	871/tcp			# Software Upgrade Protocol server
+supfiledbg	1127/tcp		# Software Upgrade Protocol debugging
+
+#
+# Services added for the Debian GNU/Linux distribution
+#
+poppassd	106/tcp				# Eudora
+moira-db	775/tcp		moira_db	# Moira database
+moira-update	777/tcp		moira_update	# Moira update protocol
+moira-ureg	779/udp		moira_ureg	# Moira user registration
+spamd		783/tcp				# spamassassin daemon
+skkserv		1178/tcp			# skk jisho server port
+predict		1210/udp			# predict -- satellite tracking
+rmtcfg		1236/tcp			# Gracilis Packeten remote config server
+xtel		1313/tcp			# french minitel
+xtelw		1314/tcp			# french minitel
+zebrasrv	2600/tcp			# zebra service
+zebra		2601/tcp			# zebra vty
+ripd		2602/tcp			# ripd vty (zebra)
+ripngd		2603/tcp			# ripngd vty (zebra)
+ospfd		2604/tcp			# ospfd vty (zebra)
+bgpd		2605/tcp			# bgpd vty (zebra)
+ospf6d		2606/tcp			# ospf6d vty (zebra)
+ospfapi		2607/tcp			# OSPF-API
+isisd		2608/tcp			# ISISd vty (zebra)
+fax		4557/tcp			# FAX transmission service (old)
+hylafax		4559/tcp			# HylaFAX client-server protocol (new)
+munin		4949/tcp	lrrd		# Munin
+rplay		5555/udp			# RPlay audio service
+nrpe		5666/tcp			# Nagios Remote Plugin Executor
+nsca		5667/tcp			# Nagios Agent - NSCA
+canna		5680/tcp			# cannaserver
+syslog-tls	6514/tcp			# Syslog over TLS [RFC5425]
+sane-port	6566/tcp	sane saned	# SANE network scanner daemon
+ircd		6667/tcp			# Internet Relay Chat
+zope-ftp	8021/tcp			# zope management by ftp
+tproxy		8081/tcp			# Transparent Proxy
+omniorb		8088/tcp			# OmniORB
+clc-build-daemon 8990/tcp			# Common lisp build daemon
+xinetd		9098/tcp
+git		9418/tcp			# Git Version Control System
+zope		9673/tcp			# zope server
+webmin		10000/tcp
+kamanda		10081/tcp			# amanda backup services (Kerberos)
+amandaidx	10082/tcp			# amanda backup services
+amidxtape	10083/tcp			# amanda backup services
+sgi-cmsd	17001/udp		# Cluster membership services daemon
+sgi-crsd	17002/udp
+sgi-gcd		17003/udp			# SGI Group membership daemon
+sgi-cad		17004/tcp			# Cluster Admin daemon
+binkp		24554/tcp			# binkp fidonet protocol
+asp		27374/tcp			# Address Search Protocol
+asp		27374/udp
+csync2		30865/tcp			# cluster synchronization tool
+dircproxy	57000/tcp			# Detachable IRC Proxy
+tfido		60177/tcp			# fidonet EMSI over telnet
+fido		60179/tcp			# fidonet EMSI over TCP
+
+# Local services
@@ -1 +1,2 @@
 net.core.fb_tunnels_only_for_init_net=2
+net.core.rmem_max=1000000
@@ -1 +0,0 @@
-local7.*		-/var/log/profinet.log
@@ -1,31 +0,0 @@
-#!/bin/sh
-set -e
-
-PATH=/lib/infix/factory:$PATH
-
-[ "$FACTORY_D" ] || FACTORY_D=/etc/auto-factory.d
-[ "$CFG_D" ]     || CFG_D=/cfg
-[ "$GENCFG_D" ]  || GENCFG_D=/cfg/factory.d
-mkdir -p $GENCFG_D
-
-gen-hostname   >$FACTORY_D/20-auto-hostname.json
-gen-interfaces >$FACTORY_D/20-auto-interfaces.json
-
-[ -s $GENCFG_D/20-auto-hostkey.json ] || gen-hostkeys >$GENCFG_D/20-auto-hostkey.json
-
-# shellcheck disable=SC2046
-jq -s 'reduce .[] as $item ({}; . * $item)' \
-   $(find $FACTORY_D -name '*.json') \
-   $(find $GENCFG_D  -name '*.json') \
-    >$CFG_D/auto-factory-config.cfg
-
-# TODO: Look for statically defined factory-config, based on the
-# system's product ID.
-
-# If we haven't found a better one, settle for auto-factory-config as
-# the system's factory-config.
-[ -h $CFG_D/factory-config.cfg ] || \
-    ln -sf auto-factory-config.cfg $CFG_D/factory-config.cfg
-
-# Bootstrap sysrepo db with all modules required by confd
-sysrepo-bootstrap.sh $CFG_D/factory-config.cfg $CFG_D/startup-config.cfg
@@ -1,47 +0,0 @@
-#!/bin/sh
-
-set -e
-
-gen_interface()
-{
-    cat <<EOF
-      ,{
-        "name": "$1",
-        "type": "iana-if-type:ethernetCsmacd",
-        "ietf-ip:ipv6": {
-	  "enabled": true,
-	  "forwarding": false,
-	  "dup-addr-detect-transmits": 1,
-	  "autoconf": {
-	    "create-global-addresses": true
-	  }
-	}
-      }
-EOF
-}
-
-phys_ifaces=$(ip -d -j link show | jq -r '
-	 .[] |
-	 select(.link_type == "ether") |
-	 select(has("linkinfo") | not) |
-	 .ifname')
-
-cat <<EOF
-{
-  "ietf-interfaces:interfaces": {
-    "interface": [
-      {
-        "name": "lo",
-        "type": "iana-if-type:softwareLoopback",
-        "ietf-ip:ipv4": {
-          "address": [{ "ip": "127.0.0.1", "prefix-length": 8 }]
-        },
-        "ietf-ip:ipv6": {
-          "address": [{ "ip": "::1", "prefix-length": 128 }]
-        }
-      }
-$(for iface in $phys_ifaces; do gen_interface $iface; done)
-    ]
-  }
-}
-EOF
@@ -25,19 +25,14 @@ for netif in /sys/class/net/*; do

 	dsa="dsa$num"
 	logger -k -p user.notice -t "$ident" "Found DSA interface, renaming $iface -> $dsa"
-	ip link set dev "$iface" name $dsa
+	ip link set dev "$iface" name $dsa group internal
 	num=$((num + 1))
 done

 # Find and mark all switch ports
-ports=$(devlink port 2>/dev/null | awk '/flavour physical/{print $5}')
-for iface in $ports; do
-	ip link set "$iface" group port
-done
-
-# Testing, e.g., using /etc/mactab may use TAP devices to create
-# emulated switch ports, make sure to mark them as well
-ports=$(ip -json link | jq -r '.[].ifname | match("^e[[:digit:]]+").string')
+ports=$(devlink -j port | jq -r '.port[]
+				 | select(.flavour == "physical")
+				 | .netdev')
 for iface in $ports; do
 	ip link set "$iface" group port
 done
@@ -0,0 +1,6 @@
+#!/bin/sh
+# Probe for various types of harware features
+
+if dmesg |grep -q QEMU || test -d /sys/module/qemu_fw_cfg; then
+   initctl cond set qemu
+fi
@@ -1,9 +0,0 @@
-#!/bin/sh
-
-for type in ecdsa ed25519 rsa; do
-    [ -f /var/lib/ssh/ssh_host_${type}_key ] \
-	|| ssh-keygen -N "" -t $type -f /var/lib/ssh/ssh_host_${type}_key \
-	|| exit 1
-done
-
-initctl cond set ssh-hostkeys
@@ -4,11 +4,14 @@
 # existing interfaces. This syncs the default settings to all known
 # interfaces at boot, such that physical interfaces will start from
 # the same point as virtual ones.
+tmp=$(mktemp)

-sysctl net.ipv4.conf.default  >/tmp/sysctl-ip-default
-sysctl net.ipv6.conf.default >>/tmp/sysctl-ip-default
+sysctl net.ipv4.conf.default  >$tmp
+sysctl net.ipv6.conf.default >>$tmp

 for iface in $(ip -j link show | jq -r .[].ifname); do
-    sed -e "s/.default./.${iface}./g" /tmp/sysctl-ip-default \
-	| sysctl -p -
+    sed -e "s/.default./.${iface}./g" $tmp | sysctl -p -
 done
+
+rm $tmp
+
@@ -1 +1 @@
-nano
+mg
@@ -1 +1 @@
-nano
+mg
@@ -0,0 +1,134 @@
+#!/bin/sh
+
+# udhcpc script edited by Tim Riker <Tim@Rikers.org>
+
+[ -z "$1" ] && echo "Error: should be called from udhcpc" && exit 1
+
+ACTION="$1"
+RESOLV_CONF="/etc/resolv.conf"
+[ -e $RESOLV_CONF ] || touch $RESOLV_CONF
+[ -n "$broadcast" ] && BROADCAST="broadcast $broadcast"
+[ -n "$subnet" ] && NETMASK="$subnet"
+# Handle stateful DHCPv6 like DHCPv4
+[ -n "$ipv6" ] && ip="$ipv6/128"
+
+if [ -z "${IF_WAIT_DELAY}" ]; then
+	IF_WAIT_DELAY=10
+fi
+
+wait_for_ipv6_default_route() {
+	printf "Waiting for IPv6 default route to appear"
+	while [ $IF_WAIT_DELAY -gt 0 ]; do
+		if ip -6 route list | grep -q default; then
+			printf "\n"
+			return
+		fi
+		sleep 1
+		printf "."
+		: $((IF_WAIT_DELAY -= 1))
+	done
+	printf " timeout!\n"
+}
+
+flush_dhcp_addresses() {
+	addrs=$(ip -j addr show dev $interface | jq -c \
+		'.[0].addr_info[] | select(.family == "inet") | select(.protocol == "dhcp")')
+
+	for addr in $addrs; do
+		ip="$(echo "$addr" | jq -r '."local"')"
+		prefix="$(echo "$addr" | jq -r '."prefixlen"')"
+		ip addr del "$ip/$prefix" dev "$interface"
+	done
+}
+
+case "$ACTION" in
+	deconfig)
+		flush_dhcp_addresses
+
+		/bin/ip link set dev $interface up
+
+		# drop info from this interface
+		# resolv.conf may be a symlink to /tmp/, so take care
+		TMPFILE=$(mktemp)
+		grep -vE "# $interface\$" $RESOLV_CONF > $TMPFILE
+		cat $TMPFILE > $RESOLV_CONF
+		rm -f $TMPFILE
+
+		if [ -x /usr/sbin/avahi-autoipd ]; then
+			/usr/sbin/avahi-autoipd -c $interface && /usr/sbin/avahi-autoipd -k $interface
+		fi
+		;;
+
+	leasefail|nak)
+		if [ -x /usr/sbin/avahi-autoipd ]; then
+			/usr/sbin/avahi-autoipd -c $interface || /usr/sbin/avahi-autoipd -wD $interface --no-chroot
+		fi
+		;;
+
+	renew|bound)
+		if [ -x /usr/sbin/avahi-autoipd ]; then
+			/usr/sbin/avahi-autoipd -c $interface && /usr/sbin/avahi-autoipd -k $interface
+		fi
+		/bin/ip addr add dev $interface $ip/$NETMASK $BROADCAST proto 5
+		if [ -n "$ipv6" ] ; then
+			wait_for_ipv6_default_route
+		fi
+
+		# RFC3442: If the DHCP server returns both a Classless
+		# Static Routes option and a Router option, the DHCP
+		# client MUST ignore the Router option.
+		if [ -n "$staticroutes" ]; then
+			echo "deleting routers"
+			route -n | while read dest gw mask flags metric ref use iface; do
+				[ "$iface" != "$interface" -o "$gw" = "0.0.0.0" ] || \
+					route del -net "$dest" netmask "$mask" gw "$gw" dev "$interface"
+			done
+
+			# format: dest1/mask gw1 ... destn/mask gwn
+			set -- $staticroutes
+			while [ -n "$1" -a -n "$2" ]; do
+				route add -net "$1" gw "$2" dev "$interface"
+				shift 2
+			done
+		elif [ -n "$router" ] ; then
+			echo "deleting routers"
+			while route del default gw 0.0.0.0 dev $interface 2> /dev/null; do
+				:
+			done
+
+			for i in $router ; do
+				route add default gw $i dev $interface
+			done
+		fi
+
+		# drop info from this interface
+		# resolv.conf may be a symlink to /tmp/, so take care
+		TMPFILE=$(mktemp)
+		grep -vE "# $interface\$" $RESOLV_CONF > $TMPFILE
+		cat $TMPFILE > $RESOLV_CONF
+		rm -f $TMPFILE
+
+		# prefer rfc3397 domain search list (option 119) if available
+		if [ -n "$search" ]; then
+			search_list=$search
+		elif [ -n "$domain" ]; then
+			search_list=$domain
+		fi
+
+		[ -n "$search_list" ] &&
+			echo "search $search_list # $interface" >> $RESOLV_CONF
+
+		for i in $dns ; do
+			echo adding dns $i
+			echo "nameserver $i # $interface" >> $RESOLV_CONF
+		done
+		;;
+esac
+
+HOOK_DIR="$0.d"
+for hook in "${HOOK_DIR}/"*; do
+    [ -f "${hook}" -a -x "${hook}" ] || continue
+    "${hook}" "$ACTION"
+done
+
+exit 0
@@ -3,11 +3,17 @@ CONFIG_DEVICE_TREE_INCLUDES="infix-env.dtsi infix-key.dtsi"

 CONFIG_ENV_IMPORT_FDT=y

+CONFIG_RSA=y
+CONFIG_RSA_VERIFY=y
+
 CONFIG_FIT=y
 CONFIG_FIT_SIGNATURE=y
 CONFIG_BLKMAP=y

+CONFIG_NET_RANDOM_ETHADDR=y
+
 CONFIG_DISTRO_DEFAULTS=y
+CONFIG_CMD_SETEXPR=y
 CONFIG_CMD_SETEXPR_FMT=y

 CONFIG_MMC=y
@@ -2,9 +2,11 @@ for tgt in "${boot_targets}"; do
    if test "${tgt}" = "mmc0"; then
 	setenv devtype "mmc"
 	setenv devnum 0
+	mmc dev 0
    elif test "${tgt}" = "mmc1"; then
 	setenv devtype "mmc"
 	setenv devnum 1
+	mmc dev 1
    else
 	setenv devtype "${tgt}"
 	setenv devnum 0
@@ -5,7 +5,7 @@ if test "${slot}" = "primary"; then
    run ixprepblk
 elif test "${slot}" = "secondary"; then
    run ixprepblk
-elif test "${slot}" = "dhcp"; then
+elif test "${slot}" = "net"; then
    run ixprepdhcp
 fi

@@ -10,7 +10,7 @@ if load ${devtype} ${devnum}:${auxpart} ${ramdisk_addr_r} /${slot}.itbh; then

 	if part start ${devtype} ${devnum} ${slot} devoffs; then
 	    if ${devtype} read ${sqaddr} ${devoffs} ${sqblkcnt}; then
-		setenv bootargs_root "root=PARTLABEL=${slot}"
+		setenv bootargs_root "root=PARTLABEL=${slot} rootwait"
 		setenv prepared ok
 	    fi
 	fi
@@ -7,3 +7,7 @@ if [ -L "$TARGET_DIR/var/lib/avahi-autoipd" ]; then
 	rm    "$TARGET_DIR/var/lib/avahi-autoipd"
 	mkdir "$TARGET_DIR/var/lib/avahi-autoipd"
 fi
+
+# Allow clish (symlink to /usr/bin/klish) to be a login shell
+grep -qsE '^/bin/clish$$' "$TARGET_DIR/etc/shells" \
+        || echo "/bin/clish" >> "$TARGET_DIR/etc/shells"
@@ -0,0 +1 @@
+../usr/bin/klish
@@ -0,0 +1 @@
+alias cli='clish'
@@ -0,0 +1,244 @@
+#!/usr/bin/env python3
+import json
+import sys
+import argparse
+
+parser = argparse.ArgumentParser(description="JSON CLI Pretty Printer")
+parser.add_argument("module", help="IETF Module")
+parser.add_argument("-n", "--name", help="Focus on specific name")
+args = parser.parse_args()
+
+class Pad:
+    iface = 16
+    proto = 11
+    state = 12
+    data = 41
+
+class Decore():
+    @staticmethod
+    def decorate(sgr, txt, restore="0"):
+        return f"\033[{sgr}m{txt}\033[{restore}m"
+
+    @staticmethod
+    def invert(txt):
+        return Decore.decorate("7", txt)
+
+    @staticmethod
+    def red(txt):
+        return Decore.decorate("31", txt, "39")
+
+    @staticmethod
+    def green(txt):
+        return Decore.decorate("32", txt, "39")
+
+class Iface:
+    def __init__(self, data):
+        self.data = data
+        self.name = data.get('name', '')
+        self.index = data.get('if-index', '')
+        self.oper_status = data.get('oper-status', '')
+        self.phys_address = data.get('phys-address', '')
+
+        if data.get('statistics'):
+            self.in_octets = data.get('statistics').get('in-octets', '')
+            self.out_octets = data.get('statistics').get('out-octets', '')
+        else:
+            self.in_octets = ''
+            self.out_octets = ''
+
+        self.parent = data.get('ietf-if-extensions:parent-interface', None)
+
+        if self.data.get('ietf-ip:ipv4'):
+            self.mtu = self.data.get('ietf-ip:ipv4').get('mtu', '')
+            self.ipv4_addr = self.data.get('ietf-ip:ipv4').get('address', '')
+        else:
+            self.mtu = ''
+            self.ipv4_addr = []
+
+        if self.data.get('ietf-ip:ipv6'):
+            self.ipv6_addr = self.data.get('ietf-ip:ipv6').get('address', '')
+        else:
+            self.ipv6_addr = []
+
+        if self.data.get('infix-interfaces:bridge-port'):
+            self.bridge = self.data.get('infix-interfaces:bridge-port').get('bridge', None)
+        else:
+            self.bridge = ''
+
+    def is_vlan(self):
+        return self.data['type'] == "infix-if-type:vlan"
+
+    def is_bridge(self):
+        return self.data['type'] == "infix-if-type:bridge"
+
+    def pr_name(self, pipe=""):
+        print(f"{pipe}{self.name:<{Pad.iface - len(pipe)}}", end="")
+
+
+    def pr_proto_ipv4(self, pipe=''):
+        for addr in self.ipv4_addr:
+            origin = f"({addr['origin']})" if addr.get('origin') else ""
+
+            row =  f"{pipe:<{Pad.iface}}"
+            row += f"{'ipv4':<{Pad.proto}}"
+            row += f"{'':<{Pad.state}}{addr['ip']}/{addr['prefix-length']} {origin}"
+            print(row)
+
+    def pr_proto_ipv6(self, pipe=''):
+        for addr in self.ipv6_addr:
+            origin = f"({addr['origin']})" if addr.get('origin') else ""
+
+            row =  f"{pipe:<{Pad.iface}}"
+            row += f"{'ipv6':<{Pad.proto}}"
+            row += f"{'':<{Pad.state}}{addr['ip']}/{addr['prefix-length']} {origin}"
+            print(row)
+
+    def pr_proto_eth(self):
+        row = f"{'ethernet':<{Pad.proto}}"
+        dec = Decore.green if self.oper_status == "up" else Decore.red
+        row += dec(f"{self.oper_status.upper():<{Pad.state}}")
+        row += f"{self.data['phys-address']:<{Pad.data}}"
+        print(row)
+
+    def pr_bridge(self, _ifaces):
+        self.pr_name(pipe="")
+        self.pr_proto_eth()
+
+
+        lowers = []
+        for _iface in [Iface(data) for data in _ifaces]:
+            if _iface.bridge and _iface.bridge == self.name:
+                lowers.append(_iface)
+
+        if lowers:
+            self.pr_proto_ipv4(pipe='│')
+            self.pr_proto_ipv6(pipe='│')
+        else:
+            self.pr_proto_ipv4()
+            self.pr_proto_ipv6()
+
+        for i, lower in enumerate(lowers):
+            pipe = '└ ' if (i == len(lowers) -1)  else '├ '
+            lower.pr_name(pipe)
+            lower.pr_proto_eth()
+
+    def pr_vlan(self, _ifaces):
+        self.pr_name(pipe="")
+        self.pr_proto_eth()
+
+        if self.parent:
+            self.pr_proto_ipv4(pipe='│')
+            self.pr_proto_ipv6(pipe='│')
+        else:
+            self.pr_proto_ipv4()
+            self.pr_proto_ipv6()
+            return
+
+        parent = find_iface(_ifaces, self.parent)
+        if not parent:
+            print(f"Error, didn't find parent interface for vlan {self.name}")
+            sys.exit(1)
+        parent.pr_name(pipe='└ ')
+        parent.pr_proto_eth()
+
+    def pr_iface(self):
+        print(f"{'name':<{20}}: {self.name}")
+        print(f"{'index':<{20}}: {self.index}")
+        if self.mtu:
+            print(f"{'mtu':<{20}}: {self.mtu}")
+        if self.oper_status:
+            print(f"{'operational status':<{20}}: {self.oper_status}")
+        if self.phys_address:
+            print(f"{'physical address':<{20}}: {self.phys_address}")
+
+        if self.ipv4_addr:
+            first = True
+            for addr in self.ipv4_addr:
+                origin = f"({addr['origin']})" if addr.get('origin') else ""
+                key = 'ipv4 addresses' if first else ''
+                colon = ':' if first else ' '
+                row = f"{key:<{20}}{colon} "
+                row += f"{addr['ip']}/{addr['prefix-length']} {origin}"
+                print(row)
+                first = False
+        else:
+                print(f"{'ipv4 addresses':<{20}}:")
+
+        if self.ipv6_addr:
+            first = True
+            for addr in self.ipv6_addr:
+                origin = f"({addr['origin']})" if addr.get('origin') else ""
+                key = 'ipv6 addresses' if first else ''
+                colon = ':' if first else ' '
+                row = f"{key:<{20}}{colon} "
+                row += f"{addr['ip']}/{addr['prefix-length']} {origin}"
+                print(row)
+                first = False
+        else:
+                print(f"{'ipv6 addresses':<{20}}:")
+
+        if self.in_octets and self.out_octets:
+            print(f"{'in-octets':<{20}}: {self.in_octets}")
+            print(f"{'out-octets':<{20}}: {self.out_octets}")
+
+
+def find_iface(_ifaces, name):
+    for _iface in [Iface(data) for data in _ifaces]:
+        if _iface.name == name:
+            return _iface
+
+    return False
+
+
+def pr_interface_list(json):
+    hdr = (f"{'INTERFACE':<{Pad.iface}}"
+           f"{'PROTOCOL':<{Pad.proto}}"
+           f"{'STATE':<{Pad.state}}"
+           f"{'DATA':<{Pad.data}}")
+
+    print(Decore.invert(hdr))
+
+    ifaces = sorted(json["ietf-interfaces:interfaces"]["interface"], key=lambda x: x['name'])
+
+    for iface in [Iface(data) for data in ifaces]:
+        if iface.is_bridge():
+            iface.pr_bridge(ifaces)
+            continue
+
+        if iface.is_vlan():
+            iface.pr_vlan(ifaces)
+            continue
+
+        # These interfaces are printed by there parent, such as bridge
+        if iface.parent:
+            continue
+        if iface.bridge:
+            continue
+
+        iface.pr_name()
+        iface.pr_proto_eth()
+        iface.pr_proto_ipv4()
+        iface.pr_proto_ipv6()
+
+def ietf_interfaces(json, name):
+    if not json or not json.get("ietf-interfaces:interfaces"):
+        print(f"Error, top level \"ietf-interfaces:interfaces\" missing")
+        sys.exit(1)
+
+    if not name:
+        return pr_interface_list(json)
+
+    iface = find_iface(json["ietf-interfaces:interfaces"]["interface"], name)
+    if not iface:
+        print(f"Interface {name} not found")
+        sys.exit(1)
+    return iface.pr_iface()
+
+
+json = json.load(sys.stdin)
+
+if args.module == "ietf-interfaces":
+    sys.exit(ietf_interfaces(json, args.name))
+else:
+    print(f"Error, unknown module {args.module}")
+    sys.exit(1)
@@ -1,8 +1,9 @@
 test-dir := $(BR2_EXTERNAL_INFIX_PATH)/test
-INFIX_TESTS ?= $(test-dir)/case/all.yaml
+INFIX_TESTS ?= $(test-dir)/case/all-unit.yaml $(test-dir)/case/all.yaml

 test-env = $(test-dir)/env \
 	-f $(BINARIES_DIR)/infix-x86_64.img \
+	-p $(BINARIES_DIR)/infix-x86_64.pkg \
 	$(1) $(2)

 test-env-qeneth = $(call test-env,-q $(test-dir)/virt/dual,$(1))
@@ -21,8 +22,11 @@ test-run: | ~/.infix-test-venv
 	$(call test-env-run,\
 		$(BR2_EXTERNAL_INFIX_PATH)/9pm/9pm.py \
 			$(INFIX_TESTS))
-test-run-sh:
+test-run-sh: | ~/.infix-test-venv
 	$(call test-env-run,/bin/sh)

+test-run-play: | ~/.infix-test-venv
+	$(call test-env-run,$(test-dir)/case/meta/play.py)
+
 ~/.infix-test-venv:
 	$(test-dir)/docker/init-venv.sh $(test-dir)/docker/pip-requirements.txt
@@ -56,7 +56,7 @@ submenu "net" "$log"  {
 	set root=(initrd)

 	set slot="$1"
-	set append="console=ttyS0 root=/dev/ram ramdisk_size=65536 $2"
+	set append="console=ttyS0 root=/dev/ram0 ramdisk_size=65536 $2"
 	source /boot/grub/grub.cfg
    else
 	if [ -z "$net_efinet0_dhcp_next_server" ]; then
@@ -2,9 +2,10 @@
 compatible=infix-x86_64
 bootloader=grub
 grubenv=/mnt/aux/grub/grubenv
-statusfile=/var/lib/rauc/status
+statusfile=/mnt/aux/rauc.status
 mountprefix=/var/lib/rauc/mnt
 bundle-formats=-plain
+max-bundle-download-size=1073741824

 [keyring]
 directory=/etc/rauc/keys
@@ -18,5 +19,5 @@ device=/dev/disk/by-partlabel/secondary
 bootname=secondary

 [slot.net.0]
-device=/dev/ram
+device=/dev/ram0
 bootname=net
@@ -12,7 +12,7 @@ BR2_TARGET_GENERIC_ISSUE="Infix by KernelKit"
 BR2_INIT_FINIT=y
 BR2_ROOTFS_DEVICE_CREATION_DYNAMIC_MDEV=y
 BR2_ROOTFS_DEVICE_TABLE="system/device_table.txt ${BR2_EXTERNAL_INFIX_PATH}/board/common/xattrs"
-BR2_TARGET_GENERIC_GETTY_TERM="linux"
+BR2_TARGET_GENERIC_GETTY_TERM="xterm"
 BR2_SYSTEM_DHCP="eth0"
 BR2_ENABLE_LOCALE_WHITELIST="C en_US en_CA"
 BR2_GENERATE_LOCALE="en_US en_CA"
@@ -22,15 +22,18 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="${BR2_EXTERNAL_INFIX_PATH}/board/common/post-build
 BR2_ROOTFS_POST_IMAGE_SCRIPT="${BR2_EXTERNAL_INFIX_PATH}/board/common/post-image.sh"
 BR2_LINUX_KERNEL=y
 BR2_LINUX_KERNEL_CUSTOM_VERSION=y
-BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="5.19.17"
+BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.5.6"
 BR2_LINUX_KERNEL_USE_CUSTOM_CONFIG=y
 BR2_LINUX_KERNEL_CUSTOM_CONFIG_FILE="${BR2_EXTERNAL_INFIX_PATH}/board/aarch64/linux_defconfig"
 BR2_LINUX_KERNEL_DTS_SUPPORT=y
-BR2_LINUX_KERNEL_INTREE_DTS_NAME="marvell/armada-3720-espressobin marvell/armada-3720-espressobin-emmc marvell/armada-3720-espressobin-v7 marvell/armada-3720-espressobin-v7-emmc marvell/armada-3720-espressobin-ultra marvell/cn9130-crb-A marvell/cn9130-crb-B sparx5_pcb135_emmc_no_psci"
-BR2_LINUX_KERNEL_CUSTOM_DTS_PATH="${BR2_EXTERNAL_INFIX_PATH}/board/aarch64/dts/microchip/sparx5_pcb135_emmc_no_psci.dts"
+BR2_LINUX_KERNEL_INTREE_DTS_NAME="alder/alder marvell/armada-3720-espressobin marvell/armada-3720-espressobin-emmc marvell/armada-3720-espressobin-v7 marvell/armada-3720-espressobin-v7-emmc marvell/armada-3720-espressobin-ultra marvell/cn9130-crb-A marvell/cn9130-crb-B microchip/sparx5_pcb135_emmc_no_psci"
+BR2_LINUX_KERNEL_CUSTOM_DTS_OVERLAY="${BR2_EXTERNAL_INFIX_PATH}/board/aarch64/dts"
+BR2_LINUX_KERNEL_DTB_KEEP_DIRNAME=y
 BR2_LINUX_KERNEL_INSTALL_TARGET=y
 BR2_PACKAGE_BUSYBOX_CONFIG="${BR2_EXTERNAL_INFIX_PATH}/board/common/busybox_defconfig"
 BR2_PACKAGE_BUSYBOX_SHOW_OTHERS=y
+BR2_PACKAGE_STRACE=y
+BR2_PACKAGE_STRESS_NG=y
 BR2_PACKAGE_JQ=y
 BR2_PACKAGE_MDIO_TOOLS=y
 BR2_PACKAGE_RNG_TOOLS=y
@@ -46,6 +49,7 @@ BR2_PACKAGE_AVAHI=y
 # BR2_PACKAGE_AVAHI_AUTOIPD is not set
 BR2_PACKAGE_AVAHI_DAEMON=y
 BR2_PACKAGE_AVAHI_DEFAULT_SERVICES=y
+BR2_PACKAGE_CHRONY=y
 BR2_PACKAGE_DHCPCD=y
 BR2_PACKAGE_DNSMASQ=y
 BR2_PACKAGE_DROPBEAR=y
@@ -69,7 +73,6 @@ BR2_PACKAGE_NMAP_NMAP=y
 BR2_PACKAGE_NMAP_NPING=y
 BR2_PACKAGE_OPENRESOLV=y
 BR2_PACKAGE_SOCAT=y
-BR2_PACKAGE_SSDP_RESPONDER=y
 BR2_PACKAGE_TCPDUMP=y
 BR2_PACKAGE_TRACEROUTE=y
 BR2_PACKAGE_DIALOG=y
@@ -96,6 +99,10 @@ BR2_PACKAGE_HOST_RAUC=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SUPPORT=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SIGNATURE_SUPPORT=y
+INFIX_VENDOR_HOME="https://github.com/kernelkit"
+INFIX_DESC="Infix is a Network Operating System based on Linux.  It can be set up both as a switch, with offloading using switchdev, and a router with firewalling."
+INFIX_HOME="https://github.com/kernelkit/infix/"
+INFIX_DOC="https://github.com/kernelkit/infix/tree/main/doc"
 INFIX_VARIANT_CLASSIC=y
 BR2_PACKAGE_FACTORY=y
 BR2_PACKAGE_FINIT_SULOGIN=y
@@ -13,8 +13,7 @@ BR2_TARGET_GENERIC_ISSUE="Infix by KernelKit"
 BR2_INIT_FINIT=y
 BR2_ROOTFS_DEVICE_CREATION_DYNAMIC_EUDEV=y
 BR2_ROOTFS_DEVICE_TABLE="system/device_table.txt ${BR2_EXTERNAL_INFIX_PATH}/board/common/xattrs ${BR2_EXTERNAL_INFIX_PATH}/board/netconf/xattrs"
-BR2_SYSTEM_BIN_SH_BASH=y
-BR2_TARGET_GENERIC_GETTY_TERM="linux"
+BR2_TARGET_GENERIC_GETTY_TERM="xterm"
 BR2_SYSTEM_DHCP="eth0"
 BR2_ENABLE_LOCALE_WHITELIST="C en_US en_CA"
 BR2_GENERATE_LOCALE="en_US en_CA"
@@ -24,29 +23,31 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="${BR2_EXTERNAL_INFIX_PATH}/board/common/post-build
 BR2_ROOTFS_POST_IMAGE_SCRIPT="${BR2_EXTERNAL_INFIX_PATH}/board/common/post-image.sh"
 BR2_LINUX_KERNEL=y
 BR2_LINUX_KERNEL_CUSTOM_VERSION=y
-BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="5.19.17"
+BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.5.6"
 BR2_LINUX_KERNEL_USE_CUSTOM_CONFIG=y
 BR2_LINUX_KERNEL_CUSTOM_CONFIG_FILE="${BR2_EXTERNAL_INFIX_PATH}/board/aarch64/linux_defconfig"
 BR2_LINUX_KERNEL_DTS_SUPPORT=y
-BR2_LINUX_KERNEL_INTREE_DTS_NAME="marvell/armada-3720-espressobin marvell/armada-3720-espressobin-emmc marvell/armada-3720-espressobin-v7 marvell/armada-3720-espressobin-v7-emmc marvell/armada-3720-espressobin-ultra marvell/cn9130-crb-A marvell/cn9130-crb-B sparx5_pcb135_emmc_no_psci"
-BR2_LINUX_KERNEL_CUSTOM_DTS_PATH="${BR2_EXTERNAL_INFIX_PATH}/board/aarch64/dts/microchip/sparx5_pcb135_emmc_no_psci.dts"
+BR2_LINUX_KERNEL_INTREE_DTS_NAME="alder/alder marvell/armada-3720-espressobin marvell/armada-3720-espressobin-emmc marvell/armada-3720-espressobin-v7 marvell/armada-3720-espressobin-v7-emmc marvell/armada-3720-espressobin-ultra marvell/cn9130-crb-A marvell/cn9130-crb-B microchip/sparx5_pcb135_emmc_no_psci"
+BR2_LINUX_KERNEL_CUSTOM_DTS_OVERLAY="${BR2_EXTERNAL_INFIX_PATH}/board/aarch64/dts"
+BR2_LINUX_KERNEL_DTB_KEEP_DIRNAME=y
 BR2_LINUX_KERNEL_INSTALL_TARGET=y
 BR2_PACKAGE_BUSYBOX_CONFIG="${BR2_EXTERNAL_INFIX_PATH}/board/common/busybox_defconfig"
 BR2_PACKAGE_BUSYBOX_SHOW_OTHERS=y
 BR2_PACKAGE_STRACE=y
 BR2_PACKAGE_STRESS_NG=y
 BR2_PACKAGE_JQ=y
-BR2_PACKAGE_MDIO_TOOLS=y
 BR2_PACKAGE_DBUS_CXX=y
 BR2_PACKAGE_DBUS_GLIB=y
 BR2_PACKAGE_DBUS_TRIGGERD=y
 BR2_PACKAGE_EUDEV_RULES_GEN=y
 # BR2_PACKAGE_EUDEV_ENABLE_HWDB is not set
+BR2_PACKAGE_MDIO_TOOLS=y
 BR2_PACKAGE_RNG_TOOLS=y
 BR2_PACKAGE_UBOOT_TOOLS=y
 BR2_PACKAGE_UBOOT_TOOLS_FIT_SUPPORT=y
 BR2_PACKAGE_UBOOT_TOOLS_FIT_SIGNATURE_SUPPORT=y
 BR2_PACKAGE_UBOOT_TOOLS_FIT_CHECK_SIGN=y
+BR2_PACKAGE_PYTHON3=y
 BR2_PACKAGE_CA_CERTIFICATES=y
 BR2_PACKAGE_LIBOPENSSL_BIN=y
 BR2_PACKAGE_LIBCURL_CURL=y
@@ -64,6 +65,7 @@ BR2_PACKAGE_FPING=y
 # BR2_PACKAGE_IFUPDOWN_SCRIPTS is not set
 BR2_PACKAGE_IPTABLES=y
 BR2_PACKAGE_IPTABLES_NFTABLES=y
+BR2_PACKAGE_IPUTILS=y
 BR2_PACKAGE_LLDPD=y
 BR2_PACKAGE_NETCALC=y
 BR2_PACKAGE_NETCAT_OPENBSD=y
@@ -76,7 +78,6 @@ BR2_PACKAGE_NMAP_NPING=y
 BR2_PACKAGE_OPENRESOLV=y
 BR2_PACKAGE_OPENSSH=y
 BR2_PACKAGE_SOCAT=y
-BR2_PACKAGE_SSDP_RESPONDER=y
 BR2_PACKAGE_TCPDUMP=y
 BR2_PACKAGE_TRACEROUTE=y
 BR2_PACKAGE_ULOGD=y
@@ -85,11 +86,13 @@ BR2_PACKAGE_IRQBALANCE=y
 BR2_PACKAGE_KMOD_TOOLS=y
 BR2_PACKAGE_PWGEN=y
 BR2_PACKAGE_RAUC=y
+BR2_PACKAGE_RAUC_DBUS=y
 BR2_PACKAGE_RAUC_GPT=y
 BR2_PACKAGE_RAUC_NETWORK=y
 BR2_PACKAGE_SYSKLOGD=y
 BR2_PACKAGE_SYSKLOGD_LOGGER=y
 BR2_PACKAGE_WATCHDOGD=y
+BR2_PACKAGE_LESS=y
 BR2_PACKAGE_MG=y
 BR2_PACKAGE_NANO=y
 BR2_TARGET_ROOTFS_SQUASHFS=y
@@ -102,19 +105,25 @@ BR2_PACKAGE_HOST_RAUC=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SUPPORT=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SIGNATURE_SUPPORT=y
+INFIX_VENDOR_HOME="https://github.com/kernelkit"
+INFIX_DESC="Infix is a Network Operating System based on Linux.  It can be set up both as a switch, with offloading using switchdev, and a router with firewalling."
+INFIX_HOME="https://github.com/kernelkit/infix"
+INFIX_DOC="https://github.com/kernelkit/infix/tree/main/doc"
+INFIX_SUPPORT="mailto:kernelkit@googlegroups.com"
 BR2_PACKAGE_CONFD=y
+BR2_PACKAGE_STATD=y
 BR2_PACKAGE_FACTORY=y
-BR2_PACKAGE_FINIT_SULOGIN=y
 BR2_PACKAGE_FINIT_PLUGIN_HOTPLUG=y
 BR2_PACKAGE_FINIT_PLUGIN_HOOK_SCRIPTS=y
 BR2_PACKAGE_FINIT_PLUGIN_MODULES_LOAD=y
-BR2_PACKAGE_FINIT_PLUGIN_MODPROBE=y
 BR2_PACKAGE_FINIT_PLUGIN_RTC=y
 BR2_PACKAGE_FINIT_PLUGIN_TTY=y
 BR2_PACKAGE_FINIT_PLUGIN_URANDOM=y
-BR2_PACKAGE_KLINFIX=y
+BR2_PACKAGE_KLISH_PLUGIN_INFIX=y
+BR2_PACKAGE_LOWDOWN=y
 BR2_PACKAGE_NET=y
 BR2_PACKAGE_TETRIS=y
 BR2_PACKAGE_QUERIERD=y
+DISK_IMAGE_BOOT_BIN=y
 GNS3_APPLIANCE_RAM=512
 GNS3_APPLIANCE_IFNUM=10
@@ -11,6 +11,7 @@ BR2_GLOBAL_PATCH_DIR="$(BR2_EXTERNAL_INFIX_PATH)/patches"
 BR2_SSP_NONE=y
 BR2_INIT_NONE=y
 BR2_SYSTEM_BIN_SH_NONE=y
+BR2_ROOTFS_POST_IMAGE_SCRIPT="${BR2_EXTERNAL_INFIX_PATH}/board/common/post-image.sh"
 # BR2_PACKAGE_BUSYBOX is not set
 # BR2_PACKAGE_IFUPDOWN_SCRIPTS is not set
 # BR2_TARGET_ROOTFS_TAR is not set
@@ -23,7 +24,20 @@ BR2_TARGET_ARM_TRUSTED_FIRMWARE_ADDITIONAL_VARIABLES="USE_COHERENT_MEM=0"
 BR2_TARGET_BINARIES_MARVELL=y
 BR2_TARGET_MV_DDR_MARVELL=y
 BR2_TARGET_UBOOT=y
+BR2_TARGET_UBOOT_BUILD_SYSTEM_KCONFIG=y
+BR2_TARGET_UBOOT_CUSTOM_VERSION=y
+BR2_TARGET_UBOOT_CUSTOM_VERSION_VALUE="2023.07.02"
 BR2_TARGET_UBOOT_BOARD_DEFCONFIG="mvebu_crb_cn9130"
+BR2_TARGET_UBOOT_CONFIG_FRAGMENT_FILES="$(BR2_EXTERNAL_INFIX_PATH)/board/common/uboot/extras.config $(BR2_EXTERNAL_INFIX_PATH)/board/aarch64/cn9130-crb/uboot/extras.config"
+BR2_TARGET_UBOOT_FORMAT_DTB=y
+BR2_TARGET_UBOOT_CUSTOM_DTS_PATH="$(BR2_EXTERNAL_INFIX_PATH)/board/aarch64/cn9130-crb/uboot/cn9130-crb-env.dtsi"
+BR2_PACKAGE_HOST_GENIMAGE=y
+BR2_PACKAGE_HOST_RAUC=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SUPPORT=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SIGNATURE_SUPPORT=y
+# SIGN_ENABLED is not set
+DISK_IMAGE=y
+DISK_IMAGE_BOOT_BIN=y
+DISK_IMAGE_BOOT_DATA="${BINARIES_DIR}/flash-image.bin"
+DISK_IMAGE_BOOT_OFFSET=0x00200000
@@ -11,7 +11,7 @@ BR2_TARGET_GENERIC_ISSUE="Infix by KernelKit"
 BR2_INIT_FINIT=y
 BR2_ROOTFS_DEVICE_CREATION_DYNAMIC_MDEV=y
 BR2_ROOTFS_DEVICE_TABLE="system/device_table.txt ${BR2_EXTERNAL_INFIX_PATH}/board/common/xattrs"
-BR2_TARGET_GENERIC_GETTY_TERM="linux"
+BR2_TARGET_GENERIC_GETTY_TERM="xterm"
 BR2_SYSTEM_DHCP="eth0"
 BR2_ENABLE_LOCALE_WHITELIST="C en_US en_CA"
 BR2_GENERATE_LOCALE="en_US en_CA"
@@ -21,7 +21,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/qemu/x86_64/post-build.sh ${BR2_EXTERNAL_INF
 BR2_ROOTFS_POST_IMAGE_SCRIPT="${BR2_EXTERNAL_INFIX_PATH}/board/common/post-image.sh"
 BR2_LINUX_KERNEL=y
 BR2_LINUX_KERNEL_CUSTOM_VERSION=y
-BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="5.19.17"
+BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.5.6"
 BR2_LINUX_KERNEL_USE_CUSTOM_CONFIG=y
 BR2_LINUX_KERNEL_CUSTOM_CONFIG_FILE="${BR2_EXTERNAL_INFIX_PATH}/board/x86_64/linux_defconfig"
 BR2_LINUX_KERNEL_INSTALL_TARGET=y
@@ -65,7 +65,6 @@ BR2_PACKAGE_NMAP_NMAP=y
 BR2_PACKAGE_NMAP_NPING=y
 BR2_PACKAGE_OPENRESOLV=y
 BR2_PACKAGE_SOCAT=y
-BR2_PACKAGE_SSDP_RESPONDER=y
 BR2_PACKAGE_TCPDUMP=y
 BR2_PACKAGE_TRACEROUTE=y
 BR2_PACKAGE_DIALOG=y
@@ -100,6 +99,10 @@ BR2_PACKAGE_HOST_RAUC=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SUPPORT=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SIGNATURE_SUPPORT=y
+INFIX_VENDOR_HOME="https://github.com/kernelkit"
+INFIX_DESC="Infix is a Network Operating System based on Linux.  It can be set up both as a switch, with offloading using switchdev, and a router with firewalling."
+INFIX_HOME="https://github.com/kernelkit/infix/"
+INFIX_DOC="https://github.com/kernelkit/infix/tree/main/doc"
 INFIX_VARIANT_CLASSIC=y
 BR2_PACKAGE_FACTORY=y
 BR2_PACKAGE_FINIT_SULOGIN=y
@@ -112,3 +115,4 @@ BR2_PACKAGE_FINIT_PLUGIN_TTY=y
 BR2_PACKAGE_FINIT_PLUGIN_URANDOM=y
 BR2_PACKAGE_IFUPDOWN_NG=y
 BR2_PACKAGE_TETRIS=y
+DISK_IMAGE_BOOT_BIN=y
@@ -12,8 +12,7 @@ BR2_TARGET_GENERIC_ISSUE="Infix by KernelKit"
 BR2_INIT_FINIT=y
 BR2_ROOTFS_DEVICE_CREATION_DYNAMIC_EUDEV=y
 BR2_ROOTFS_DEVICE_TABLE="system/device_table.txt ${BR2_EXTERNAL_INFIX_PATH}/board/common/xattrs ${BR2_EXTERNAL_INFIX_PATH}/board/netconf/xattrs"
-BR2_SYSTEM_BIN_SH_BASH=y
-BR2_TARGET_GENERIC_GETTY_TERM="linux"
+BR2_TARGET_GENERIC_GETTY_TERM="xterm"
 BR2_SYSTEM_DHCP="eth0"
 BR2_ENABLE_LOCALE_WHITELIST="C en_US en_CA"
 BR2_GENERATE_LOCALE="en_US en_CA"
@@ -23,7 +22,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/qemu/x86_64/post-build.sh ${BR2_EXTERNAL_INF
 BR2_ROOTFS_POST_IMAGE_SCRIPT="${BR2_EXTERNAL_INFIX_PATH}/board/common/post-image.sh"
 BR2_LINUX_KERNEL=y
 BR2_LINUX_KERNEL_CUSTOM_VERSION=y
-BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="5.19.17"
+BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.5.6"
 BR2_LINUX_KERNEL_USE_CUSTOM_CONFIG=y
 BR2_LINUX_KERNEL_CUSTOM_CONFIG_FILE="${BR2_EXTERNAL_INFIX_PATH}/board/x86_64/linux_defconfig"
 BR2_LINUX_KERNEL_INSTALL_TARGET=y
@@ -44,6 +43,7 @@ BR2_PACKAGE_UBOOT_TOOLS=y
 BR2_PACKAGE_UBOOT_TOOLS_FIT_SUPPORT=y
 BR2_PACKAGE_UBOOT_TOOLS_FIT_SIGNATURE_SUPPORT=y
 BR2_PACKAGE_UBOOT_TOOLS_FIT_CHECK_SIGN=y
+BR2_PACKAGE_PYTHON3=y
 BR2_PACKAGE_CA_CERTIFICATES=y
 BR2_PACKAGE_LIBOPENSSL_BIN=y
 BR2_PACKAGE_LIBCURL_CURL=y
@@ -61,6 +61,7 @@ BR2_PACKAGE_FPING=y
 # BR2_PACKAGE_IFUPDOWN_SCRIPTS is not set
 BR2_PACKAGE_IPTABLES=y
 BR2_PACKAGE_IPTABLES_NFTABLES=y
+BR2_PACKAGE_IPUTILS=y
 BR2_PACKAGE_LLDPD=y
 BR2_PACKAGE_NETCALC=y
 BR2_PACKAGE_NETCAT_OPENBSD=y
@@ -73,7 +74,6 @@ BR2_PACKAGE_NMAP_NPING=y
 BR2_PACKAGE_OPENRESOLV=y
 BR2_PACKAGE_OPENSSH=y
 BR2_PACKAGE_SOCAT=y
-BR2_PACKAGE_SSDP_RESPONDER=y
 BR2_PACKAGE_TCPDUMP=y
 BR2_PACKAGE_TRACEROUTE=y
 BR2_PACKAGE_ULOGD=y
@@ -82,11 +82,13 @@ BR2_PACKAGE_IRQBALANCE=y
 BR2_PACKAGE_KMOD_TOOLS=y
 BR2_PACKAGE_PWGEN=y
 BR2_PACKAGE_RAUC=y
+BR2_PACKAGE_RAUC_DBUS=y
 BR2_PACKAGE_RAUC_GPT=y
 BR2_PACKAGE_RAUC_NETWORK=y
 BR2_PACKAGE_SYSKLOGD=y
 BR2_PACKAGE_SYSKLOGD_LOGGER=y
 BR2_PACKAGE_WATCHDOGD=y
+BR2_PACKAGE_LESS=y
 BR2_PACKAGE_MG=y
 BR2_PACKAGE_NANO=y
 BR2_TARGET_ROOTFS_SQUASHFS=y
@@ -107,17 +109,22 @@ BR2_PACKAGE_HOST_RAUC=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SUPPORT=y
 BR2_PACKAGE_HOST_UBOOT_TOOLS_FIT_SIGNATURE_SUPPORT=y
+INFIX_VENDOR_HOME="https://github.com/kernelkit"
+INFIX_DESC="Infix is a Network Operating System based on Linux.  It can be set up both as a switch, with offloading using switchdev, and a router with firewalling."
+INFIX_HOME="https://github.com/kernelkit/infix/"
+INFIX_DOC="https://github.com/kernelkit/infix/tree/main/doc"
+INFIX_SUPPORT="mailto:kernelkit@googlegroups.com"
 BR2_PACKAGE_CONFD=y
+BR2_PACKAGE_STATD=y
 BR2_PACKAGE_FACTORY=y
-BR2_PACKAGE_FINIT_SULOGIN=y
 BR2_PACKAGE_FINIT_PLUGIN_HOTPLUG=y
 BR2_PACKAGE_FINIT_PLUGIN_HOOK_SCRIPTS=y
 BR2_PACKAGE_FINIT_PLUGIN_MODULES_LOAD=y
-BR2_PACKAGE_FINIT_PLUGIN_MODPROBE=y
 BR2_PACKAGE_FINIT_PLUGIN_RTC=y
 BR2_PACKAGE_FINIT_PLUGIN_TTY=y
 BR2_PACKAGE_FINIT_PLUGIN_URANDOM=y
-BR2_PACKAGE_KLINFIX=y
+BR2_PACKAGE_KLISH_PLUGIN_INFIX=y
+BR2_PACKAGE_LOWDOWN=y
 BR2_PACKAGE_NET=y
 BR2_PACKAGE_TETRIS=y
 BR2_PACKAGE_QUERIERD=y
@@ -12,8 +12,7 @@ BR2_TARGET_GENERIC_ISSUE="Minfix by KernelKit"
 BR2_INIT_FINIT=y
 BR2_ROOTFS_DEVICE_CREATION_DYNAMIC_EUDEV=y
 BR2_ROOTFS_DEVICE_TABLE="system/device_table.txt ${BR2_EXTERNAL_INFIX_PATH}/board/common/xattrs ${BR2_EXTERNAL_INFIX_PATH}/board/netconf/xattrs"
-BR2_SYSTEM_BIN_SH_BASH=y
-BR2_TARGET_GENERIC_GETTY_TERM="linux"
+BR2_TARGET_GENERIC_GETTY_TERM="xterm"
 BR2_SYSTEM_DHCP="eth0"
 BR2_ENABLE_LOCALE_WHITELIST="C en_US en_CA"
 BR2_GENERATE_LOCALE="en_US en_CA"
@@ -23,7 +22,7 @@ BR2_ROOTFS_POST_BUILD_SCRIPT="board/qemu/x86_64/post-build.sh ${BR2_EXTERNAL_INF
 BR2_ROOTFS_POST_IMAGE_SCRIPT="${BR2_EXTERNAL_INFIX_PATH}/board/common/post-image.sh"
 BR2_LINUX_KERNEL=y
 BR2_LINUX_KERNEL_CUSTOM_VERSION=y
-BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="5.19.17"
+BR2_LINUX_KERNEL_CUSTOM_VERSION_VALUE="6.5.6"
 BR2_LINUX_KERNEL_USE_CUSTOM_CONFIG=y
 BR2_LINUX_KERNEL_CUSTOM_CONFIG_FILE="${BR2_EXTERNAL_INFIX_PATH}/board/x86_64/linux_defconfig"
 BR2_LINUX_KERNEL_INSTALL_TARGET=y
@@ -51,24 +50,28 @@ BR2_PACKAGE_ETHTOOL=y
 BR2_PACKAGE_LLDPD=y
 BR2_PACKAGE_OPENRESOLV=y
 BR2_PACKAGE_OPENSSH=y
-BR2_PACKAGE_SSDP_RESPONDER=y
 BR2_PACKAGE_TCPDUMP=y
 BR2_PACKAGE_KMOD_TOOLS=y
+BR2_PACKAGE_BASH_COMPLETION=y
+BR2_PACKAGE_PWGEN=y
 BR2_PACKAGE_SYSKLOGD=y
 BR2_PACKAGE_SYSKLOGD_LOGGER=y
+BR2_PACKAGE_LESS=y
 BR2_TARGET_ROOTFS_SQUASHFS=y
 # BR2_TARGET_ROOTFS_TAR is not set
 BR2_PACKAGE_CONFD=y
+BR2_PACKAGE_STATD=y
 BR2_PACKAGE_FACTORY=y
 BR2_PACKAGE_FINIT_SULOGIN=y
 BR2_PACKAGE_FINIT_PLUGIN_HOTPLUG=y
 BR2_PACKAGE_FINIT_PLUGIN_HOOK_SCRIPTS=y
 BR2_PACKAGE_FINIT_PLUGIN_MODULES_LOAD=y
-BR2_PACKAGE_FINIT_PLUGIN_MODPROBE=y
 BR2_PACKAGE_FINIT_PLUGIN_RTC=y
 BR2_PACKAGE_FINIT_PLUGIN_TTY=y
 BR2_PACKAGE_FINIT_PLUGIN_URANDOM=y
-BR2_PACKAGE_KLINFIX=y
+BR2_PACKAGE_KLISH_PLUGIN_INFIX=y
 BR2_PACKAGE_NET=y
+BR2_PACKAGE_PYTHON3=y
+BR2_PACKAGE_PYTHON3_PYC_ONLY=y
 # SIGN_ENABLED is not set
 # GNS3_APPLIANCE is not set
@@ -0,0 +1,224 @@
+Change Log
+==========
+
+All notable changes to the project are documented in this file.
+
+
+[v23.09.0][] - 2023-10-02
+-------------------------
+
+> **Note:** upcoming releases will lock the `root` user for system-only
+> services.  Instead an `admin` user will be the only default user with
+> the CLI as its login shell.  This user is already available, so please
+> consider updating any guidelines or documentation you may have.
+
+### YANG Status
+
+ - [ietf-system][]:
+   - [infix-system][]: MotD (Message of the Day) augment
+   - [infix-system][]: user login shell augment, default: `/bin/false`
+   - [infix-system-software][]: system-state/software augment for
+     remotely querying firmware version information
+   - [infix-system-software][]: firmware upgrade with `install-bundle` RPC
+   - [infix-system][]: timezone-name deviation, replaced with IANA timezones
+   - [infix-system][]: username deviation, clarifying Linux restrictions
+   - [infix-system][]: deviations for unsupported features, e.g. RADIUS
+ - [ietf-interfaces][]:
+   - [infix-interfaces][]: deviation for `if:phys-address` to allow read-write
+   - [ietf-ip][]: augmented with IPv4LL similar to standardized IPv6LL
+   - [infix-ip][]: deviations (`not-supported`) added for IPv4 and IPv6:
+     - `/if:interfaces/if:interface/ip:ipv4/ip:address/ip:subnet/ip:netmask`
+	 - `/if:interfaces/if:interface/ip:ipv6/ip:address/ip:status`
+	 - `/if:interfaces/if:interface/ip:ipv4/ip:mtu`
+	 - `/if:interfaces/if:interface/ip:ipv6/ip:mtu`
+	 - `/if:interfaces/if:interface/ip:ipv4/ip:neighbor`
+     - `/if:interfaces/if:interface/ip:ipv6/ip:neighbor`
+   - [ietf-if-vlan-encapsulation][]: Linux VLAN interfaces, e.g. `eth0.10`
+   - [infix-if-bridge][]: Linux bridge interfaces with native VLAN support
+   - [infix-if-veth][]: Linux VETH pairs
+   - [infix-if-type][]: deviation for interface types, limiting number
+     to supported types only.  New identities are derived from default
+     IANA interface types, ensuring compatibility with other standard
+     models, e.g., `ieee802-ethernet-interface.yang`
+ - Configurable services:
+   - [ieee802-dot1ab-lldp][]: stripped down to an `enabled` setting
+   - [infix-services][]: support for enabling mDNS and SSDP discovery
+
+[br2023.02.2]:     https://git.busybox.net/buildroot/tag/?h=2023.02.2
+[ieee802-dot1ab-lldp]: https://github.com/kernelkit/infix/tree/50a550b/src/confd/yang/ieee802-dot1ab-lldp%402022-03-15.yang
+[ietf-system]:     https://www.rfc-editor.org/rfc/rfc7317.html
+[ietf-interfaces]: https://www.rfc-editor.org/rfc/rfc7223.html
+[ietf-ip]:         https://www.rfc-editor.org/rfc/rfc8344.html
+[ietf-if-vlan-encapsulation]: https://www.ietf.org/id/draft-ietf-netmod-sub-intf-vlan-model-08.html
+[infix-if-bridge]: https://github.com/kernelkit/infix/tree/784c175/src/confd/yang/infix-if-bridge%402023-08-21.yang
+[infix-if-type]:   https://github.com/kernelkit/infix/tree/784c175/src/confd/yang/infix-if-type%402023-08-21.yang
+[infix-if-veth]:   https://github.com/kernelkit/infix/tree/784c175/src/confd/yang/infix-if-veth%402023-06-05.yang
+[infix-interfaces]: https://github.com/kernelkit/infix/tree/784c175/src/confd/yang/infix-interfaces%402023-09-19.yang
+[infix-ip]:        https://github.com/kernelkit/infix/tree/784c175/src/confd/yang/infix-ip%402023-09-14.yang
+[infix-services]:  https://github.com/kernelkit/infix/tree/784c175/src/confd/yang/infix-services%402023-08-22.yang
+[infix-system]:    https://github.com/kernelkit/infix/tree/784c175/src/confd/yang/infix-system%402023-08-15.yang
+[infix-system-software]: https://github.com/kernelkit/infix/tree/784c175/src/confd/yang/infix-system-software%402023-06-27.yang
+
+### Changes
+
+- The following new NETCONF interface operational status have been added:
+  - admin-status
+  - IP address origin (dhcp, static, link-layer, random, other)
+  - bridge
+  - parent-interface
+  - basic statistics (`in_octets`, `out_octets`)
+- Support for custom interface `phys-address` (MAC address)
+- The CLI admin-exec command `show interfaces` now fully uses NETCONF
+  operational data to display both available interfaces and all of their
+  IP addresses.  Displaying an individual interface will show more info.
+- The CLI admin-exec command `password encrypt` now default to SHA512
+
+### Fixes
+
+- Fix #136: IPv6 autoconf `create-global-addresses true` does not bite
+- Fix #138: Not possible to have static IP and DHCP at the same time
+- Minor fixes and updates to documentation (faulty links, references)
+- The `sync-fork.yml` workflow has finally been fixed.
+
+
+[v23.08.0][] - 2023-08-31
+-------------------------
+
+> **Note:** upcoming releases will lock the `root` user for system-only
+> services.  Instead an `admin` user will be the only default user with
+> the CLI as its login shell.  This user is already available, so please
+> consider updating any guidelines or documentation you may have.
+
+### YANG Status
+
+ - [ietf-system][]:
+   - [infix-system][]: MotD (Message of the Day) augment
+   - [infix-system][]: user login shell augment, default: `/bin/false`
+   - [infix-system-software][]: system-state/software augment for
+     remotely querying firmware version information
+   - [infix-system-software][]: firmware upgrade with `install-bundle` RPC
+   - [infix-system][]: timezone-name deviation, replaced with IANA timezones
+   - [infix-system][]: username deviation, clarifying Linux restrictions
+   - [infix-system][]: deviations for unsupported features, e.g. RADIUS
+ - [ietf-interfaces][]:
+   - [ietf-ip][]: augmented with IPv4LL similar to standardized IPv6LL
+   - [ietf-if-vlan-encapsulation][]: Linux VLAN interfaces, e.g. `eth0.10`
+   - [infix-if-bridge][]: Linux bridge interfaces with native VLAN support
+   - [infix-if-veth][]: Linux VETH pairs
+   - [infix-if-type][]: deviation for interface types, limiting number
+     to supported types only.  New identities are derived from default
+     IANA interface types, ensuring compatibility with other standard
+     models, e.g., `ieee802-ethernet-interface.yang`
+ - Configurable services:
+   - [ieee802-dot1ab-lldp][]: stripped down to an `enabled` setting
+   - [infix-services][]: support for enabling mDNS and SSDP discovery
+
+[br2023.02.2]:     https://git.busybox.net/buildroot/tag/?h=2023.02.2
+[ieee802-dot1ab-lldp]: https://github.com/kernelkit/infix/tree/50a550b/src/confd/yang/ieee802-dot1ab-lldp%402022-03-15.yang
+[ietf-system]:     https://www.rfc-editor.org/rfc/rfc7317.html
+[ietf-interfaces]: https://www.rfc-editor.org/rfc/rfc7223.html
+[ietf-ip]:         https://www.rfc-editor.org/rfc/rfc8344.html
+[ietf-if-vlan-encapsulation]: https://www.ietf.org/id/draft-ietf-netmod-sub-intf-vlan-model-08.html
+[infix-if-bridge]: https://github.com/kernelkit/infix/tree/50a550b/src/confd/yang/infix-if-bridge%402023-08-21.yang
+[infix-if-veth]:   https://github.com/kernelkit/infix/tree/50a550b/src/confd/yang/infix-if-veth%402023-06-05.yang
+[infix-if-type]:   https://github.com/kernelkit/infix/tree/50a550b/src/confd/yang/infix-if-type%402023-08-21.yang
+[infix-services]:  https://github.com/kernelkit/infix/tree/50a550b/src/confd/yang/infix-services%402023-08-22.yang
+[infix-system]:    https://github.com/kernelkit/infix/tree/50a550b/src/confd/yang/infix-system%402023-08-15.yang
+[infix-system-software]: https://github.com/kernelkit/infix/tree/50a550b/src/confd/yang/infix-system-software%402023-06-27.yang
+
+### Changes
+
+ - Bump Linux kernel: v5.19 to v6.1
+ - Updated board support for Microchip SparX-5i and Marvell CN9130 CRB
+ - New logo and significant updates to the documentation
+ - New NETCONF RPC `factory-default` to reset `running-config`
+ - Replaced limited BusyBox ping with iputils-ping
+ - Most system services are now disabled by default, support for enabling
+   LLDP, mDNS-SD, and SSDP using NETCONF, enabled in `factory-config`
+ - Firmware upgrade framework, based on [RAUC](https://rauc.io/), added
+   - Matching YANG model (see above) and an `install-bundle` RPC
+   - Currently supported upgrade protocols: HTTP/HTTPS, FTP, SCP
+ - Initial support for interface operational status, in ietf-interfaces
+ - Add support for setting user login shell: `bash`, `clish`, `false`
+ - Default login shell for new users: `false`
+ - Massive updates and fixes to the CLI (klish):
+   - Line editing now works as similar CLI:s from major vendors
+   - Hotkey fixes: Ctrl-D and Ctrl-Z now work as expected
+   - Prompt changed from JunOS style to be more similar to Bash
+   - Online help commands, both in admin-exec and configure context,
+     type `help` after entering the CLI to get started
+   - Improved help for configure context using YANG descriptions
+   - Support for reading and setting system "datetime" (RPC), an
+     optional `iso` keyword can be used when reading time to see the
+     format required when setting the time
+   - Support for showing interfaces status, using above operational data
+   - Support for showing bridge status: links, fdb, mdb, vlans
+   - Support for showing log files, including tailing with `follow`
+   - Support for `password generate` and `password encrypt`, highly
+     useful from configure context when creating new users: use the
+	 `do password encrypt type sha256` to generate the hash
+   - Support show uptime, version, calling `netcalc`, ping, and tcpdump
+
+### Fixes
+
+ - Fix #57: unneccesary lldpd restarts on configuration change
+ - Ensure mDNS advertises the correct hostname after hostname change
+ - Fix regression in enabling IPv4 ZeroConf address
+ - Loopback interface now shows `UP` operstate instead of `UNKNOWN`
+ - Fix adding user without password, i.e., login using SSH keys only
+
+
+[v23.06.0][] - 2023-06-23
+-------------------------
+
+Midsummer release.  The first official Infix release, based on [Buildroot
+2023.02.2][br2023.02.2], with NETCONF support using the [sysrepo][] and
+[netopeer2][].
+
+Supported YANG models in addition to those used by sysrepo and netopeer:
+
+ - [ietf-system][]
+   - Everything except radius authentication and timezone-utc-offset
+   - Augmented with MotD (Message of the Day), Infix YANG model
+ - [ietf-interfaces][]
+   - [ietf-ip][] augmented with IPv4LL similar to standardized IPv6LL
+   - [ietf-if-vlan-encapsulation][], Linux VLAN interfaces, e.g. `eth0.10`
+   - Linux bridge interfaces with native VLAN support, Infix YANG model
+   - Linux VETH pairs, Infix YANG model
+
+> **DISCLAIMER:** the [Infix YANG models for Linux][yang23.06], are
+> still under heavy development.  New revisions are expected which may
+> not be backwards compatible.  When upgrading to a new release, test on
+> a GNS3 staging environment first, or start over from a factory reset.
+
+[br2023.02.2]:     https://git.busybox.net/buildroot/tag/?h=2023.02.2
+[ietf-system]:     https://www.rfc-editor.org/rfc/rfc7317.html
+[ietf-interfaces]: https://www.rfc-editor.org/rfc/rfc7223.html
+[ietf-ip]:         https://www.rfc-editor.org/rfc/rfc8344.html
+[ietf-if-vlan-encapsulation]: https://www.ietf.org/id/draft-ietf-netmod-sub-intf-vlan-model-08.html
+[yang23.06]:       https://github.com/kernelkit/infix/blob/aea74842e0475441d8df834f2dcd8cbc21fa253d/src/confd/yang/infix-interfaces%402023-06-05.yang
+
+### Changes
+
+ - Bump sysrepo to v2.2.73
+   - Backport support for initializing factory-default data store with
+     default config data also for sysrepo internal modules.
+   - Add support for `sysrepocfg -Cfactory -d running`, for testing
+ - Bump netopeer2 to v2.1.62
+ - Bump libyang to v2.1.80
+ - Add klish, a CLI for sysrepo
+ - Add podman for container support, backported from upstream Buildroot
+ - Add conmon for container support, backported from upstream Buildroot
+ - Backport cni-plugins support for host-local and static plugins
+
+### Fixes
+
+ - N/A
+
+[buildroot]:  https://buildroot.org/
+[UNRELEASED]: https://github.com/kernelkit/infix/compare/v23.08.0...HEAD
+[v23.09.0]:   https://github.com/kernelkit/infix/compare/v23.08.0...v23.09.0
+[v23.08.0]:   https://github.com/kernelkit/infix/compare/v23.06.0...v23.08.0
+[v23.06.0]:   https://github.com/kernelkit/infix/compare/BASE...v23.06.0
+[sysrepo]:    https://www.sysrepo.org/
+[netopeer2]:  https://github.com/CESNET/netopeer2
@@ -1,2 +0,0 @@
-Tobias Waldekranz <tobias@waldekranz.com>
-Joachim Wiberg <troglobit@gmail.com>
@@ -0,0 +1 @@
+variant.md
@@ -1,221 +0,0 @@
-Infix System Configuration and RESTCONF API
-===========================================
-
-This document shows how to configure settings in the Infix CLI and how
-to remotely inspect and change the configuration, as well as send RPC
-commands, using the RESTCONF API.
-
-
-Configuration
-------------
-
-
-### NTP Client
-
-How to configure two NTP servers with different options:
-
-```
-set system ntp 
-set system ntp server default 
-set system ntp server default udp address 1.2.3.4
-set system ntp server default udp port 1231
-set system ntp server default iburst true
-set system ntp server default prefer true
-set system ntp server foo 
-set system ntp server foo udp address 4.3.2.1
-set system ntp server foo iburst false
-commit
-```
-
-How to set up an actually working configuration when the system has a
-valid IP address:
-
-```
-set system ntp server bar
-set system ntp server bar udp address 192.168.122.1
-commit
-```
-
-
-### Static IP Address
-
-DHCP support not yet ready, but would be the default in a product
-with NETCONF as the primary interface.  This eliminates the need
-to set up the device and give a works-out-of-the-box experience.
-(Pending separate discussion on security aspects, of course).
-
-```
-set interface eth0 
-set interface eth0 type ianaift:ethernetCsmacd
-set interface eth0 enabled true
-set interface eth0 ipv4 
-set interface eth0 ipv4 enabled true
-set interface eth0 ipv4 address 192.168.122.22 
-set interface eth0 ipv4 address 192.168.122.22 prefix-length 24
-commit
-```
-
-Multiple IP addresses per interface will be in the final product.
-
-```
-> show configuration
-ietf-system:system {
-   hostname flood;
-}
-ietf-interfaces:interfaces {
-   interface eth0 {
-      type ianaift:ethernetCsmacd;
-      enabled true;
-      ietf-ip:ipv4 {
-         enabled true;
-         address 192.168.122.22 {
-            prefix-length 24;
-         }
-      }
-   }
-   interface eth1 {
-   }
-}
-clixon-restconf:restconf {
-   enable true;
-   auth-type none;
-   fcgi-socket /run/clixon/restconf.sock;
-}
-```
-
-**Note:** authentication disabled for demo purposes.
-
-To save the configuration so that it persists across reboots:
-
-```
-copy running startup
-```
-
-
-RESTCONF API
------------
-
-Get a subset of the configuration:
-
-```
-$ curl -X GET http://192.168.122.22/restconf/data/ietf-system:system
-{
-   "ietf-system:system": {
-      "hostname": "foo"
-   }
-}
-```
-
-```
-$ curl -k -X GET http://192.168.122.22/restconf/data/ietf-system:system-state/
-{
-   "ietf-system:system-state": {
-      "platform": {
-         "os-name": "Infix",
-         "os-release": "Buildroot 2023.02",
-         "os-version": "latest-227-g51c35e9-dirty",
-         "machine": "x86_64"
-      },
-      "clock": {
-         "current-datetime": "2023-03-23T22:15:53+01:00",
-         "boot-datetime": "2023-03-23T22:08:42+01:00"
-      }
-   }
-}
-```
-
-
-List available RPC operations:
-
-```
-$ curl -X GET http://192.168.122.22/restconf/operations
-{"operations": {
-"ietf-system:set-current-datetime": [null],
-	"ietf-system:system-restart": [null],
-	"ietf-system:system-shutdown": [null],
-	"clixon-lib:debug": [null],
-	"clixon-lib:ping": [null],
-	"clixon-lib:stats": [null],
-	"clixon-lib:restart-plugin": [null],
-	"clixon-lib:process-control": [null],
-	"ietf-netconf-monitoring:get-schema": [null],
-	"ietf-netconf:get-config": [null],
-	"ietf-netconf:edit-config": [null],
-	"ietf-netconf:copy-config": [null],
-	"ietf-netconf:delete-config": [null],
-	"ietf-netconf:lock": [null],
-	"ietf-netconf:unlock": [null],
-	"ietf-netconf:get": [null],
-	"ietf-netconf:close-session": [null],
-	"ietf-netconf:kill-session": [null],
-	"ietf-netconf:commit": [null],
-	"ietf-netconf:discard-changes": [null],
-	"ietf-netconf:cancel-commit": [null],
-	"ietf-netconf:validate": [null],
-	"clixon-rfc5277:create-subscription": [null],
-	"ietf-netconf-nmda:get-data": [null],
-	"ietf-netconf-nmda:edit-data": [null]}
-}
-```
-
-
-### Set hostname remotely
-
-```
-$ curl -is -H 'Content-Type: application/yang-data+json' -H 'Accept: application/yang-data+json' -X PATCH -d @hostname.cfg http://192.168.122.22/restconf/data/ietf-system:system
-HTTP/1.1 204 No Content
-Server: nginx/1.22.1
-Date: Thu, 16 Mar 2023 13:53:53 GMT
-Connection: keep-alive
-```
-
-The file `hostname.cfg` is in JSON format and looks like this:
-
-```
-{
-   "ietf-system:system": {
-      "hostname": "foo"
-   }
-}
-```
-
-One-liner command without external `.cfg` file:
-
-```
-$ curl -is -H 'Content-Type: application/yang-data+json' -H 'Accept: application/yang-data+json' -X PATCH -d '{"ietf-system:system":{"hostname":"flood"}}' http://192.168.122.22/restconf/data/ietf-system:system
-HTTP/1.1 204 No Content
-Server: nginx/1.22.1
-Date: Thu, 16 Mar 2023 14:1
-```
-
-Run this on a PC connected to the "switch" to see how the settings take effect immediately:
-
-```
-$ watch 'lldpcli show neighbors |grep -A20 tap0'
-```
-
-### RPCs
-
-Perform system reboot remotely:
-
-```
-$ curl -k -X POST http://192.168.122.22/restconf/operations/ietf-system:system-restart
-```
-
-Enable debug remotely:
-
-```
-$ curl -Ssik -X POST -H "Content-Type: application/yang-data+json" http://192.168.122.22/restconf/operations/clixon-lib:debug -d '{"clixon-lib:input":{"level":1}}'
-```
-
-Set current date/time:
-
-```
-$ curl -Ssik -X POST -H "Content-Type: application/yang-data+json" http://192.168.122.22/restconf/operations/ietf-system:set-current-datetime -d '{"ietf-system:input":{"current-datetime":"2023-03-23T22:15:53+01:00"}}'
-HTTP/1.1 204 No Content
-Server: nginx/1.22.1
-Date: Thu, 23 Mar 2023 22:46:52 GMT
-Connection: keep-alive
-```
-$ curl -Ssik -X POST -H "Content-Type: application/yang-data+json" http://192.168.122.22/restconf/operations/ietf-system:set-current-datetime -d '{"ietf-system:input":{"current-datetime":"2023-03-23T20:15:53+05:00"}}'
-
@@ -1,7 +1,7 @@
 * TODO doc: User Guide

 - Feature set and scope, e.g.
-  - Device discovery: SSDP, LLDP, mDNS-SD how do they work, interfacing with Windows/macOS/Linux
+  - Device discovery: LLDP, mDNS-SD how do they work, interfacing with Windows/macOS/Linux
  - Network redundancy protocols: STP/RSTP, MRP
 - Configuring the system; using ifupdown2, enabling/disabling services
 - Diagnosing the system; using rmon, port mirroring, debugging services, searching logs
@@ -243,26 +243,26 @@ following layout. The disk is expected to use the GPT partitioning
 scheme. Partitions marked with an asterisk are optional.

    .-----------.
-	| GPT Table |
-	:-----------:
-	|    boot*  |
-	:-----------:
-	|    aux    |
-	:-----------:
-	|           |
-	|  primary  |
-	|           |
-	:-----------:
-	|           |
-	| secondary |
-	|           |
-	:-----------:
-	|    cfg    |
-	:-----------:
-	|           |
-	|    var*   |
-	|           |
-	'-----------'
+    | GPT Table |
+    :-----------:
+    |    boot*  |
+    :-----------:
+    |    aux    |
+    :-----------:
+    |           |
+    |  primary  |
+    |           |
+    :-----------:
+    |           |
+    | secondary |
+    |           |
+    :-----------:
+    |    cfg    |
+    :-----------:
+    |           |
+    |    var*   |
+    |           |
+    '-----------'

 ### `boot` - Bootloader

@@ -295,8 +295,8 @@ Typical layout when using U-Boot bootloader:

    /
    ├ primary.itbh
-	├ secondary.itbh
-	└ uboot.env
+    ├ secondary.itbh
+    └ uboot.env

 During boot, an ITB header along with the corresponding root
 filesystem image are concatenated in memory, by U-Boot, to form a
@@ -0,0 +1,124 @@
+Branding & Releases
+===================
+
+This document is for projects using Infix as a br2-external, i.e., OEMs.
+
+
+Branding
+--------
+
+Branding is done in menuconfig, there are several settings affecting
+it, most are in the Infix external subsection called "Branding", but
+there is also `BR2_TARGET_GENERIC_HOSTNAME`, which deserves a
+special mention.
+
+The hostname is used for the system default `/etc/hostname`, which
+is the base name for the "unique:ified" hostname + the last three
+octets of the base MAC[^1] address, e.g., `infix-c0-ff-ee`.  This in
+turn is the hostname that is set at first boot and also advertised
+by device discovery protocols like mDNS-SD and LLDP.
+
+See the help texts for the *Infix Branding* settings to understand
+which ones are mandatory and which are optional, menuconfig does not
+check this for you and you may end up with odd results.
+
+Verify the result after a build by inspecting:
+
+  - `output/images/*`: names, missing prefix, etc.
+  - `output/target/etc/os-release`: this file is sourced by
+    other build scripts, e.g., `mkgns3a.sh`.  For reference, see
+	https://www.freedesktop.org/software/systemd/man/os-release.html
+
+> **Note:** to get proper GIT revision (hash) from your composed OS,
+> remember in menuconfig to set `INFIX_OEM_PATH`.  When unset the
+> Infix `post-build.sh` script defaults to the Infix base path.  The
+> revision is stored in the file `/etc/os-release` as BUILD_ID and
+> is also in the file `/etc/version`.  See below for more info.
+
+[^1]: The base MAC address is defined in the device's Vital Product
+    Data (VPD) EEPROM, or similar, which is used by the kernel to
+    create the system interfaces.  This MAC address is usually also
+    printed on a label on the device.
+
+
+Integration
+-----------
+
+When integrating your software stack with Infix there may be protocols
+that want to change system settings like hostname and dynamically set
+IP address and default gateway, e.g. PROFINET.  This section detail a
+few recommendations for maintaining co-existence in this scenario of
+the multiple producers problem.
+
+First, there's a clear difference between "singleton" like hostsname
+and an interface IP address.  Consider the case of a static IP and a
+DHCP assigned IP, these can co-exist because of the `proto NUM` field
+available in iproute2.  This is used in Infix so that static addresses
+can be flushed independently of DHCP addresses.  The same can be done
+by other "address providers", e.g., PROFINET.
+
+Changing properties like hostname should be done by injecting a change
+into Infix, by for example calling `sysrepocfg -Ediff.xml`.  Here is an
+example of how to get the current hostname and apply an XML diff:
+
+```
+root@infix-00-00-00:~# sysrepocfg -X -x "/system/hostname" > hostnm.xml
+root@infix-00-00-00:~# cat hostnm.xml
+<system xmlns="urn:ietf:params:xml:ns:yang:ietf-system">
+  <hostname>infix-00-00-00</hostname>
+</system>
+root@infix-00-00-00:~# edit hostnm.xml
+root@infix-00-00-00:~# sysrepocfg -Ehostnm.xml
+root@example:~# 
+```
+
+Second, perform all changes on `running-config`, the running datastore.
+That way you have a clear state to return to if your application needs
+to do a factory reset.  E.g., in PROFINET a type 1/2 factory reset will
+reset only the PROFINET specific settings.  That way you can actually
+have your system `startup-config` disable all physical ports and the
+PROFINET application enables only ports that are not deactivated.  (On
+factory reset it will not know of any ports to deactivate so it will
+activate all.)
+
+You can consider the system composed of two entities:
+
+  - NETCONF starts up the system using `startup-config`, then
+  - Hands over control to your application at runtime
+
+Infix is prepared for this by already having two "runlevels" for these
+two states.  The `startup-config` is applied in runlevel S (bootstrap)
+and the system then enters runlevel 2 for normal operation.
+
+This allow you to keep a set of functionality that is provided by the
+underlying system, and another managed by your application.  You can
+of course in your br2-external provide a sysrepo plugin that block 
+operations on certain datastores when your application is enabled.
+E.g., to prevent changes to startup after initial deployment.  In
+that case a proper factory reset would be needed to get back to a
+"pre-deployment" state where you can reconfigure your baseline.
+
+
+Releases
+--------
+
+A release build requires the global variable `INFIX_RELEASE` to be set.
+It can be derived from GIT, if the source tree is kept in GIT VCS.
+
+### `INFIX_RELEASE`
+
+This global variable **must be** a lower-case string (no spaces or
+other characters outside of 0–9, a–z, '.', '_' and '-') identifying
+the operating system version, excluding any OS name information or
+release code name, and suitable for processing by scripts or usage
+in generated filenames.
+
+Used for `VERSION` and `VERSION_ID` in `/etc/os-release` and
+generated file names like disk images, etc.
+
+**Default:** generated using `git describe --always --dirty --tags`,
+with an additional `-C $infix_path`.  This variable defaults to the
+Infix tree and can be changed by setting the menuconfig branding
+variable `INFIX_OEM_PATH` to that of the br2-external.  It is also
+possible to set the `GIT_VERSION` variable in your `post-build.sh`
+script to change how the VCS version is extracted.
@@ -1,139 +0,0 @@
-CLI User Guide
-==============
-
-The Infix CLI is built on the [klish project][1], which is a framework
-for implementing a CISCO, or Juniper Networs JunOS-like CLI on a UNIX
-systems.
-
-Currently, when the `admin` user logs in the default shell is Bash.  To
-access the CLI, type:
-
-    cli
-
-Key commands available in any context are:
-
-    help
-	show
-
-For each command it is also possible to press the `?` key and `TAB` to
-get more help and suggestions for completion.
-
-
-Admin Exec
----------
-
-The top-level context after logging in and starting the CLI is the
-admin-exec or "main" context.  It is used for querying system status,
-managing configuration files/profiles and doing advanced debugging.
-
-Available commands can be seen by pressing `?` at the prompt:
-
-```
-root@infix-12-34-56:exec> 
-  configure  Create new candidate-config based on running-config
-  copy       Copy
-  exit       Exit
-  logout     Alias for exit
-  shell      Enter system shell
-  show       Show
-```
-
-Configure Context
-----------------
-
-Enter the configure context from admin-exec by typing `configure`
-followed by Enter.  Available commands, press `?` at the prompt:
-
-```
-root@infix-12-34-56:configure> 
-  abort     Abandon candidate
-  check     Validate candidate
-  commit    Commit current candidate to running-config
-  delete    Delete configuration setting(s)
-  diff      Summarize uncommitted changes
-  do        Execute operational mode command
-  edit      Descend to the specified configuration node
-  exit      Ascend to the parent configuration node, or abort (from top)
-  leave     Finalize candidate and apply to running-config
-  no        Alias for delete
-  rollback  Restore candidate to running-config
-  set       Set configuration setting
-  show      Show configuration
-  top       Ascend to the configuration root
-  up        Ascend to the parent configuration node
-[edit]
-```
-
-The `edit` command lets you change to a sub-configure context, e.g.:
-
-```
-root@infix-12-34-56:configure> edit interfaces interface eth0 
-[edit interfaces interface eth0]
-```
-
-Notice the `[edit ...]` displayed, it shows your current location.
-Use `up` to go back to the previous context.
-
-```
-root@infix-12-34-56:configure> up
-[edit]
-```
-
-### Set IP Address on an Interface
-
-```
-root@infix-12-34-56:configure> 
-[edit]
-root@infix-12-34-56:configure> edit interfaces interface eth0 
-[edit interfaces interface eth0]
-root@infix-12-34-56:configure> set ipv4 address 192.168.2.200 prefix-length 24
-[edit interfaces interface eth0]
-```
-
-From anywhere in configure context you can see the changes you have
-made by typing `diff`:
-
-```
-root@infix-12-34-56:configure> diff
-interfaces {
-  interface eth0 {
-+    ipv4 {
-+      address 192.168.2.200 {
-+        prefix-length 24;
-+      }
-+    }
-  }
-}
-```
-
-### Saving Changes
-
-Apply the changes (from candidate to running):
-
-```
-root@infix-12-34-56:configure> leave
-root@infix-12-34-56:exec> show running-config 
-interfaces {
-  interface eth0 {
-    type ethernetCsmacd;
-    ipv4 {
-      address 192.168.2.200 {
-        prefix-length 24;
-      }
-    }
-  }
-```
-
-Since we did not get any warnings we can save the running (RAM only)
-configuration to startup, so the changes are made persistent across
-reboots:
-
-```
-root@infix-12-34-56:exec> copy running-config startup-config 
-```
-
-> **Note:** most (all) commands need to be spelled out, no short forms
-> are allowed at the moment.  Use the `TAB` key to make this easier.
-
-
-[1]: https://src.libcode.org/pkun/klish
@@ -0,0 +1 @@
+introduction.md
@@ -0,0 +1,106 @@
+# Introduction
+
+The command line interface (CLI, see-ell-i) is the traditional way of
+interacting with single network equipment like switches and routers.
+Today more advanced graphical NETCONF-based tools are available that
+allows for managing entire fleets of installed equipment.
+
+Nevertheless, when it comes to initial deployment and debugging, it
+is very useful to know how to navigate and use the CLI.  This very
+short guide intends to help you with that.
+
+## Key Concepts
+
+The two modes in the CLI are the admin-exec and the configure context.
+When logging in to the system, be it from console or SSH, you land in
+admin-exec.  Here you can inspect the system status and do operations
+to debug networking issues, e.g. ping.  You can also enter configure
+context by typing: `configure`
+
+The system has several datastores (or files):
+
+ - `factory-config` consists of a set of default configurations, some
+   static and others generated per-device, e.g., a unique hostname and
+   number of ports/interfaces.   This file is generated at boot, if it
+   does not exist, i.e., only on first boot or after factory reset.
+ - `startup-config` is created from `factory-config` at boot if it does
+   not exist.  It is loaded as the system configuration on each boot.
+ - `running-config` is what is actively running on the system.  If no
+   changes have been made since the system booted, it is the same as
+   `startup-config`.
+ - `candidate-config` is created from `running-config` when entering the
+   configure context.  Any changes made here can be discarded (`abort`,
+   `rollback`) or committed (`commit`, `leave`) to `running-config`.
+
+To save configuration changes made to the `running-config` so the system
+will use them consecutive reboots, use the `copy` command:
+
+    admin@infix-12-34-56:/> copy running-config startup-config
+
+In *configure context* the following commands are available:
+
+| **Command**       | **Description**                                        |
+|-------------------|--------------------------------------------------------|
+| `set foo bar val` | Set `bar` leaf node in `foo` subcontext to `val`       |
+| `no foo bar`      | Clear/delete configuration made to `bar` in `foo`      |
+| `edit foo baz`    | Enter `baz` sub-sub-context in `foo` subcontext        |
+| `abort`           | Abort changes in configuration, return to admin-exec   |
+| `exit`            | Exit one level sub-context, or abort from top-level    |
+| `leave`           | Save changes to `running-config`, return to admin-exec |
+| `show [foo]`      | Show configured values (optionally in subcontext)      |
+| `diff [foo]`      | Show uncommitted changes in candidate                  |
+| `do command`      | Call admin-exec command: `do show log`                 |
+| `commit`          |                                                        |
+
+### Example Session
+
+> Remember to use the `TAB` and `?` keys to speed up your navigation.
+> See `help keybindings` for more tips!
+
+In this example we enter configure context to add an IPv4 address to
+interface `eth0`, then we apply the changes using the `leave` command.
+
+We inspect the system status to ensure the change took effect.  Then we
+save the changes for the next reboot.
+
+```
+admin@infix-12-34-56:/> configure
+admin@infix-12-34-56:/config/> edit interfaces interface eth0
+admin@infix-12-34-56:/config/interfaces/interface/eth0/> set ipv4 <TAB>
+      address     autoconf bind-ni-name      enabled
+	  forwarding  mtu      neighbor
+admin@infix-12-34-56:/config/interfaces/interface/eth0/> set ipv4 address 192.168.2.200 prefix-length 24
+admin@infix-12-34-56:/config/interfaces/interface/eth0/> show
+type ethernetCsmacd;
+ipv4 address 192.168.2.200 prefix-length 24;
+ipv6 enabled true;
+admin@infix-12-34-56:/config/interfaces/interface/eth0/> diff
+interfaces {
+  interface eth0 {
+    ipv4 {
+      address 192.168.2.200 {
+        prefix-length 24;
+      }
+    }
+  }
+}
+admin@infix-12-34-56:/config/interfaces/interface/eth0/> leave
+admin@infix-12-34-56:/> show interfaces brief
+lo               UNKNOWN        00:00:00:00:00:00 <LOOPBACK,UP,LOWER_UP>
+eth0             UP             52:54:00:12:34:56 <BROADCAST,MULTICAST,UP,LOWER_UP>
+admin@infix-12-34-56:/> show ip brief
+lo               UNKNOWN        127.0.0.1/8 ::1/128
+eth0             UP             192.168.2.200/24 fe80::5054:ff:fe12:3456/64
+admin@infix-12-34-56:/> copy running-config startup-config
+```
+
+One of the ideas behind a separate running and startup configuration is
+to be able to verify a configuration change.  In case of an inadvertent
+change that, e.g., breaks networking, it is trivial to revert back by:
+
+```
+admin@infix-12-34-56:/> copy startup-config running-config
+```
+
+Or restarting the device.
+
@@ -0,0 +1,48 @@
+# Keybindings
+
+Writing CLI commands by hand is very tedious.  To make things easier the
+CLI has several keybindings, most significant first:
+
+| **Key** | **Cmd/Key**    | **Description**                                  |
+|---------|----------------|--------------------------------------------------|
+| TAB     |                | Complete current command, see below for example  |
+| ?       |                | Show available commands, or arguments, with help |
+| Ctrl-c  |                | Cancel everything on current line                |
+| Ctrl-d  | `abort`/`exit` | Delete character, or abort/exit on empty line    |
+| Ctrl-z  | `leave`        | Leave and activate changes in configure context  |
+| Ctrl-f  | Right arrow    | Move cursor forward one character                |
+| Ctrl-b  | Left arrow     | Move cursor back one character                   |
+| Meta-f  | Ctrl-Right     | Move cursor forward one word                     |
+| Meta-b  | Ctrl-Left      | Move cursor back one word                        |
+| Ctrl-e  | End            | Move cursor to end of line                       |
+| Ctrl-a  | Home           | Move cursor to beginning of line                 |
+| Ctrl-k  |                | Kill (cut) text from cursor to end of line       |
+| Ctrl-u  |                | Delete (cut) entire line                         |
+| Ctrl-y  |                | Yank (paste) from kill buffer to cursor          |
+| Meta-.  |                | Yank (paste) last argument from previous line    |
+| Ctrl-w  | Meta-Backspace | Delete (cut) word to the left                    |
+|         | Meta-Delete    | Delete (cut) word to the right                   |
+| Ctrl-l  |                | Clear screen and refresh current line            |
+| Ctrl-p  | Up arrow       | History, previous command                        |
+| Ctrl-n  | Down arrow     | History, next command                            |
+| Ctrl-r  |                | History, reversed interactive search (i-search)  |
+
+> **Note:** the Meta key is called Alt on most modern keyboards.  If you
+> have neither, first tap the Esc key instead of holding down Alt/Meta.
+
+## Examples
+
+Complete a word.  Start by typing a few characters, then tap the TAB key
+on your keyboard:
+
+    conf<TAB> --> configure
+
+See possible arguments, with brief help text, to a command:
+
+    show ?
+    bridge          Show bridge (ports/fdb/mdb/vlans)
+    datetime        Show current date and time, default RFC2822 format
+    ...
+
+Type the command, then tap the `?` key.
+
@@ -0,0 +1,25 @@
+# Quick Overview
+
+The question mark `?` key along with the `Tab` key are your best friends
+in the command line interface.  They provide context help and completion
+of commands you input.  See the table below for a handful of examples.
+
+| **Command**         | **Description**                                    |
+|---------------------|----------------------------------------------------|
+| `help`              | Overview of topics/settings in the current context |
+| `?`                 | Lists commands + brief help in the current context |
+| `<Tab>`             | Lists commands available in the current context    |
+| `partial<Tab>`      | Completes a partial command name                   |
+| `command <Tab>`     | Lists keywords/arguments associated with a command |
+| `command keyword ?` | Lists arguments associated with a keyword + help   |
+
+Explore the following topics for more information.  Note, the
+keybindings are really useful to learn!
+
+| **Command**         | **Description**                            |
+|---------------------|--------------------------------------------|
+| `help introduction` | An introduction to the CLI                 |
+| `help keybindings`  | Lists keybindings and other helpful tricks |
+| `help tutorial`     | The CLI User Guide                         |
+
+
@@ -0,0 +1,296 @@
+User Guide
+==========
+
+The command line interface (CLI, see-el-i) is built on the open source
+component [klish][1], which implements a CISCO like, or Juniper Networks
+JunOS-like CLI on a UNIX system.
+
+New users always get the CLI as the default "shell" when logging in, but
+the default `admin` user logs in to the Bash.  To access the CLI, type:
+
+    cli
+
+Key commands available in any context are:
+
+    help
+    show
+
+For each command it also possible to press the `?` key and `TAB` to get
+more help and suggestions for completion.
+
+> **Note:** for the sake of brevity, the hostname in the following
+> examples has been shortened to `host`.  The default name is composed
+> from a product specific string followed by the last three octets of
+> the system base MAC address, e.g., `infix-12-34-56`.  An example of
+> how to change the hostname is included below.
+
+
+Admin Exec
+----------
+
+The top-level context after logging in and starting the CLI is the
+admin-exec or "main" context.  It is used for querying system status,
+managing configuration files/profiles and doing advanced debugging.
+
+Available commands can be seen by pressing `?` at the prompt:
+
+```
+admin@host:/>
+  configure  Create new candidate-config based on running-config
+  copy       Copy
+  exit       Exit
+  logout     Alias for exit
+  shell      Enter system shell
+  show       Show
+```
+
+Configure Context
+-----------------
+
+Enter the configure context from admin-exec by typing `configure`
+followed by Enter.  Available commands, press `?` at the prompt:
+
+```
+admin@host:/> configure
+admin@host:/config/>
+  abort     Abandon candidate
+  check     Validate candidate
+  commit    Commit current candidate to running-config
+  delete    Delete configuration setting(s)
+  diff      Summarize uncommitted changes
+  do        Execute operational mode command
+  edit      Descend to the specified configuration node
+  exit      Ascend to the parent configuration node, or abort (from top)
+  leave     Finalize candidate and apply to running-config
+  no        Alias for delete
+  rollback  Restore candidate to running-config
+  set       Set configuration setting
+  show      Show configuration
+  top       Ascend to the configuration root
+  up        Ascend to the parent configuration node
+```
+
+The `edit` command lets you change to a sub-configure context, e.g.:
+
+```
+admin@host:/config/> edit interfaces interface eth0
+admin@host:/config/interfaces/interface/eth0/>
+```
+
+Use `up` to go up one level.
+
+```
+admin@host:/config/interfaces/interface/eth0/> up
+admin@host:/config/interfaces/>
+```
+
+> **Note:** the tree structure in the configure context is automatically
+> generated from the system's supported NETCONF YANG models, which may
+> vary between products.  However, the `ietf-interfaces.yang` and
+> `ietf-ip.yang` models, for instance, that provide basic networking
+> support are common to all systems.
+
+
+### Set IP Address on an Interface
+
+```
+admin@host:/config/> edit interfaces interface eth0
+admin@host:/config/interfaces/interface/eth0/>
+admin@host:/config/interfaces/interface/eth0/> set ipv4 address 192.168.2.200 prefix-length 24
+```
+
+From anywhere in configure context you can see the changes you have
+made by typing `diff`:
+
+```
+admin@host:/config/interfaces/interface/eth0/> diff
+interfaces {
+  interface eth0 {
+    ipv4 {
+      address 192.168.2.200 {
+        prefix-length 24;
+      }
+    }
+  }
+}
+```
+
+
+### Saving Changes
+
+Apply the changes (from candidate to `running-config`):
+
+```
+admin@host:/config/interfaces/> leave
+admin@host:/> show running-config
+...
+interfaces {
+  interface eth0 {
+	type ethernetCsmacd;
+	ipv4 {
+	  address 192.168.2.200 {
+		prefix-length 24;
+	  }
+	}
+  }
+...
+```
+
+Since we did not get any warnings we can save the running (RAM only)
+configuration to startup, so the changes are made persistent across
+reboots:
+
+```
+admin@host:/> copy running-config startup-config
+```
+
+The `startup-config` can also be inspected with the `show` command to
+verify the changes are saved.
+
+> **Note:** most (all) commands need to be spelled out, no short forms
+> are allowed at the moment.  Use the `TAB` key to make this easier.
+
+
+### Changing Hostname
+
+Settings like hostname are located in the `ietf-system.yang` model.
+Here is how it can be set.
+
+```
+admin@host:/config/> edit system
+admin@host:/config/system/> set hostname example
+admin@host:/config/system/> leave
+admin@example:/> 
+```
+
+Notice how the hostname in the prompt does not change until the change
+is committed.
+
+> **Note:** critical services like syslog, mDNS, LLDP, and similar that
+> advertise the hostname, are restarted when the hostname is changed.
+
+
+### Changing Password
+
+User management, including passwords, is also a part of `ietf-system`.
+
+```
+admin@host:/config/> edit system authentication
+admin@host:/config/system/authentication/> do password encrypt
+Password: ******
+$1$oVHGR0AP$6Pad1Pm8jPwPsan5WHULS1
+admin@host:/config/system/authentication/> set user admin password $1$oVHGR0AP$6Pad1Pm8jPwPsan5WHULS1
+admin@host:/config/system/> leave
+```
+
+The call to `do password encrypt` brings up the helpful admin-exec
+command to hash, and optionally salt, your password.  This encrypted
+string is what goes into the system configuration.
+
+> **Tip:** if you are having trouble thinking of a password, there is
+> also `do password generate`, which generates random but readable
+> strings using the UNIX command `pwgen`.
+
+
+### Creating a VETH Pair
+
+The following example creates a `veth0a <--> veth0b` virtual Ethernet
+pair which is useful for connecting, e.g., a container to the physical
+world.  Here we also add an IPv4 address to one end of the pair.
+
+```
+admin@host:/config/> edit interfaces interface veth0a
+admin@host:/config/interfaces/interface/veth0a/> set veth peer veth0b
+admin@host:/config/interfaces/interface/veth0a/> set ipv4 address 192.168.0.1 prefix-length 24
+admin@host:/config/interfaces/interface/veth0a/> up
+admin@host:/config/interfaces/> diff
+interfaces {
+  interface veth0a {
+    type veth;
+    ipv4 {
+      address 192.168.0.1 {
+        prefix-length 24;
+      }
+    }
+    veth {
+      peer veth0b;
+    }
+  }
+  interface veth0b {
+    type veth;
+    veth {
+      peer veth0a;
+    }
+  }
+}
+admin@host:/config/interfaces/> leave
+```
+
+See the bridging example below for more.
+
+> **Note:** in the CLI you do not have to create the `veth0b` interface.
+> The system _infers_ this for you.  When setting up a VETH pair using
+> NETCONF, however, you must include the `veth0b` interface.
+
+
+### Creating a Bridge
+
+Building on the previous example, we now create a non-VLAN filtering
+bridge (`br0`) that forwards any, normally link-local, LLDP traffic
+between both its bridge ports: `eth0` and `vet0b`.
+
+```
+admin@host:/> configure
+admin@host:/config/> edit interfaces interface br0
+admin@host:/config/interfaces/interface/br0/> set bridge ieee-group-forward lldp
+admin@host:/config/interfaces/interface/br0/> up
+admin@host:/config/interfaces/> set interface eth0 bridge-port bridge br0
+admin@host:/config/interfaces/> set interface veth0b bridge-port bridge br0
+admin@host:/config/interfaces/> diff
+interfaces {
+  interface br0 {
+    type bridge;
+    bridge {
+      ieee-group-forward lldp;
+    }
+  }
+  interface eth0 {
+    bridge-port {
+      bridge br0;
+    }
+  }
+  interface veth0a {
+    type veth;
+    ipv4 {
+      address 192.168.0.1 {
+        prefix-length 24;
+      }
+    }
+    veth {
+      peer veth0b;
+    }
+  }
+  interface veth0b {
+    type veth;
+    veth {
+      peer veth0a;
+    }
+    bridge-port {
+      bridge br0;
+    }
+  }
+}
+```
+
+Both a physical port `eth0` and a virtual port `veth0b` (bridge side of
+the VETH pair from the previous example) are now bridged.  Any traffic
+ingressing one port will egress the other.  Only reserved IEEE multicast
+is filtered, except LLDP frames as shown above.
+
+> **Note:** the bridge can be named anything, provided the interface
+> name is not already taken.  However, for any name outside the pattern
+> `br[0-9]+`, you have to set the interface type manually to `bridge`.
+
+
+
+[1]: https://src.libcode.org/pkun/klish
@@ -1,50 +1,52 @@
 Containers in Infix
 ===================

-The default builds of Infix do not enable any container support.  This
-because it is not a common customer feature, and it extends build times
-due to bringing in a build-time dependency on Go.
+* [Introduction](#introduction)
+* [Docker Containers with Podman](#docker-containers-with-podman)
+  * [Multiple Networks](#multiple-networks)
+  * [Hybrid Mode](#hybrid-mode)
+* [Enabling Containers](#enabling-containers)
+* [Debugging Containers](#debugging-containers)

-However,customer specific builds may have it, and you can also roll your
-own based on any of the available `defconfigs`.  For example:

-    cd infix/
-    make x86_64_defconfig
+Introduction
+------------
+
+Default builds of Infix do not enable any container support.  See below
+section, [Enabling Container Support](#enabling-container-support), for
+details on how to enable it using Podman.
+
+Networking in containers is provided by both Infix and the Container
+Network Interface ([CNI](https://www.cni.dev/)) that Podman supports.
+
+> A convenience alias `docker=podman` is available in Infix, remember,
+> not all features or syntax of docker is available in podman.


 Docker Containers with Podman
 -----------------------------

-Run menuconfig, search for `podman`, enable that and build:
-
-	make menuconfig
-	...
-	make
-
-Enabling [podman][] select `crun`, `conmon`, and all other dependencies.
-The build will take a while, but eventually you can:
-
-    make run
-
-> A convenience alias `docker=podman` is available, but remember, not
-> all features or syntax of docker is available in podman.
-
-Test it out with an example:
+We assume you've booted into Infix and start with a familiar example.
+This downloads the `hello-world` example container image and runs it:

    podman run -it --rm docker://hello-world

-or a little web server:
+We can also set up a port forward to a little web server:

    podman run -d --rm -p 80:80 docker://nginx:alpine

-In detached (`-d`) state you can check the status using `podman ps` or
+In detached (`-d`) state you can check the status using `podman ps` and
 try to connect to the web server:

    curl http://localhost

-or
+or connect to port 80 of your running Infix system with a browser.  See
+the following sections for how to add more interfaces and start/stop the
+container at boot/reboot.

-    lynx http://localhost
+> To add your own content to web server, place the HTML files in, e.g.,
+> `/cfg/www/*.html` and add `-v /cfg/www:/usr/share/nginx/html:ro` to
+> the command line (above).  <https://hub.docker.com/_/nginx/>


 ### Multiple Networks
@@ -53,15 +55,16 @@ It is also possible to start a container with multiple networks.  The
 approach shown here uses CNI profiles, which means the interfaces names
 inside the container will always be: `eth0`, `eth1`, etc.

-Pending VETH support in Infix/NETCONF, the following example sets up a
-VETH pair, then creates a CNI profile, and finally starts a container
-with two profiles, the default podman bridge and the VETH profile:
+A common setup is to use a VETH pair, with one end in the container and
+the other end routed, or bridged, to the rest of the world.  The Infix
+[CLI Guide](cli/introduction.md) provides examples of both.  In either case you need
+to create a matching CNI profile for one end of the VETH pair before
+starting the container, here we use two network profiles, the default
+podman bridge and the VETH profile:

-     ip link add local1 type veth peer local1_peer
-     ip link set local1 up
-     ip addr add 192.168.0.1/24 dev local1
-     cni create host net1 local1_peer 192.168.0.42/24
-     podman run -d --rm --net=podman,net1 --privileged docker://troglobit/buildroot:latest
+     cni create host net1 veth0a 192.168.0.42/24
+     podman run -d --rm --net=podman,net1 --entrypoint "/linuxrc" \
+             --privileged docker://troglobit/buildroot:latest

 The first profile (`podman`) is a the default bridged profile.  When a
 container is started with that (default behavior), podman dynamically
@@ -79,22 +82,93 @@ used to hand over control of physical ports to a container.
 > might not be what you want for a production system.  For that at least
 > SECCOMP is recommended, which is out of scope for this tutorial.

+### Real Example

-### NETCONF Build
+To be able to preserve state in containers between reboots we need a
+writable layer, this is done with `podman create`, after which we can
+use `podman start`.   We build on the previous example:

-If you've followed this tutorial then you now have a NETCONF based Infix
-system running.  To run containers on it you need to leverage the Hybrid
-mode, described in the README but also repeated below.
+    cni create host net1 veth0a 192.168.0.42/24
+    podman create --name system --conmon-pidfile=/run/pod:system.pid \
+           --restart=no --systemd=false --tz=local --privileged      \
+           --net=podman,net1 --entrypoint "/linuxrc" -p 222:22       \
+           docker://troglobit/buildroot:latest
+
+Here we map the host port 222 to the SSH port of the container, but one
+can just as easily map the host's port 22 (SSH).  Just make sure to
+first disable the host's SSH service.
+
+> **Note:** the new options used here are required for enabling
+> monitoring and automate start/stop of containers at boot/reboot.
+
+This creates the named container `system` which we can now start:
+
+    podman start system
+
+and stop:
+
+    podman stop system
+
+For this particular image[^1] we need to modify its defaults a bit,
+because it is set up to run a DHCP client on the first Ethernet
+interface, which in our case is the `podman` default CNI bridge.  In
+fact, we don't want the container to set up any networking since that is
+handled by Infix and podman.
+
+    root@infix-12-34-56:~$ podman start system
+    root@infix-12-34-56:~$ podman exec -it system sh
+    / # rm -rf /etc/network/interfaces
+    / # exit
+    root@infix-12-34-56:~$ podman stop system
+
+The change is now saved in the writable layer and the next time the
+container is started it will look like this:
+
+    root@infix-12-34-56:~$ podman start system
+    root@infix-12-34-56:~$ podman exec -it system sh
+    / # ifconfig
+    eth0      Link encap:Ethernet  HWaddr A2:32:4C:2B:5E:51
+              inet addr:10.88.0.11  Bcast:10.88.255.255  Mask:255.255.0.0
+              inet6 addr: fe80::a032:4cff:fe2b:5e51/64 Scope:Link
+              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
+              RX packets:204 errors:0 dropped:107 overruns:0 frame:0
+              TX packets:15 errors:0 dropped:0 overruns:0 carrier:0
+              collisions:0 txqueuelen:0
+              RX bytes:48240 (47.1 KiB)  TX bytes:1102 (1.0 KiB)
+    
+    eth1      Link encap:Ethernet  HWaddr 56:B5:4E:D1:9C:E5
+              inet addr:192.168.0.42  Bcast:192.168.0.255  Mask:255.255.255.0
+              inet6 addr: fe80::54b5:4eff:fed1:9ce5/64 Scope:Link
+              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
+              RX packets:274 errors:0 dropped:213 overruns:0 frame:0
+              TX packets:16 errors:0 dropped:0 overruns:0 carrier:0
+              collisions:0 txqueuelen:1000
+              RX bytes:60926 (59.4 KiB)  TX bytes:1377 (1.3 KiB)
+
+Automating start/stop at boot/reboot is documented in the next section.
+
+[^1]: A common task one has to do for many other standard images, e.g.,
+    Alpine Linux and BusyBox available on Docker Hub.
+
+### Hybrid Mode
+
+Since container setup and configuration is not modeled in YANG yet, we
+use the Infix *Hybrid mode*, described in [Infix Variants](variant.md).

 To start containers in *Hybrid Mode*, provided the images have been
-downloaded with `podman pull` first):
+downloaded with `podman pull docker://troglobit/buildroot:latest` and
+a container created (above):

 ```
 root@infix:/cfg/start.d$ cat <<EOF >20-enable-container.sh
 #!/bin/sh
-podman-service -e -d "Nginx container" -p "-p 80:80" nginx:alpine
-exit 0
+# Remember to create the veth0a <--> vet0b pair in the CLI first!
+cni create host net1 veth0a 192.168.0.42/24
+cat <<EOF > /etc/finit.d/available/pod:system.conf
+service name:pod :system pid:!/run/pod:system.pid podman --syslog start system -- System container
 EOF
+initctl enable pod:system
+exit 0
 root@infix:/cfg/start.d$ chmod +x 20-enable-container.sh
 ```

@@ -106,4 +180,123 @@ rebooting, run the script and call `initctl reload`.
 > need to either save them and restore in the script above, or recreate
 > them on every boot.

+
+Enabling Container Support
+--------------------------
+
+Container support is not enabled by default because it is not a common
+customer feature, it also prolongs build times a lot due to bringing in
+a build-time dependency on Go.
+
+However, customer specific builds may have it, and you can also roll
+your own based on any of the available `defconfigs`.  For example:
+
+    cd infix/
+    make x86_64_defconfig
+
+Run menuconfig, search for `podman` using `/`, enable it and build:
+
+	make menuconfig
+	...
+	make
+
+Enabling [podman][] select `crun`, `conmon`, and all other dependencies.
+The build will take a while, but eventually you can:
+
+    make run
+
+
+Debugging Containers
+--------------------
+
+If the host system is not powered down or rebooted properly, containers
+may not start up as they should on the following boot.  Below is a very
+common problem and solution shown.
+
+```
+root@infix-12-34-56:~$ podman ps
+CONTAINER ID  IMAGE       COMMAND     CREATED     STATUS      PORTS       NAMES
+root@infix-12-34-56:~$ grep nginx /var/log/syslog
+Jun 25 10:15:48 infix-12-34-56 finit[1]: Service pod:nginx[2376] died, restarting in 5000 msec (10/10)
+Jun 25 10:15:48 infix-12-34-56 finit[1]: Starting pod:nginx[2408]
+Jun 25 10:15:53 infix-12-34-56 finit[1]: Service pod:nginx keeps crashing, not restarting.
+```
+
+If this the system is isolated from remote network access, start by
+verifying the image is downloaded:
+
+```
+root@infix-12-34-56:/cfg/start.d$ podman images
+REPOSITORY                     TAG         IMAGE ID      CREATED      SIZE
+docker.io/library/nginx        alpine      4937520ae206  10 days ago  43.2 MB
+docker.io/troglobit/buildroot  latest      68faf6b20f1a  6 weeks ago  41.4 MB
+```
+
+OK, let's see what the `podman-service` step (above) created:
+
+```
+root@infix-12-34-56:/cfg/start.d$ initctl show pod-nginx.conf
+service name:pod :nginx podman run --name nginx --rm  -p 80:80 nginx:alpine   -- Nginx container
+```
+
+Try starting the container manually.  Remember to add the `-d` flag to
+emulate detached/background operation:
+
+```
+root@infix-12-34-56:/cfg/start.d$ podman run --name nginx --rm -d -p 8080:80 nginx:alpine
+Error: creating container storage: the container name "nginx" is already in use by 9c73bd8d505b1585d241595bfadede361b87f6c1be9a5656253b5a4d73da57e0. You have to remove that container to be able to reuse that name: that name is already in use
+```
+
+Aha, a lingering image with the same name!  Where is it?
+
+```
+root@infix-12-34-56:/cfg/start.d$ podman ps --all
+CONTAINER ID  IMAGE                                 COMMAND               CREATED            STATUS                        PORTS               NAMES
+f3386ae9517f  docker.io/troglobit/buildroot:latest                        About an hour ago  Exited (0) About an hour ago                      ecstatic_panini
+bf0c6178ea26  docker.io/troglobit/buildroot:latest                        About an hour ago  Exited (0) About an hour ago                      determined_brown
+385155f479c0  docker.io/troglobit/buildroot:latest                        About an hour ago  Exited (0) About an hour ago                      vibrant_engelbart
+99a1b3319d9e  docker.io/troglobit/buildroot:latest                        About an hour ago  Exited (0) About an hour ago                      dreamy_tesla
+9c73bd8d505b  docker.io/library/nginx:alpine        nginx -g daemon o...  11 minutes ago     Created                       0.0.0.0:80->80/tcp  nginx
+8a5290504ebc  docker.io/troglobit/buildroot:latest                        10 minutes ago     Created                                           mystifying_liskov
+```
+
+Oh, we have two lingering containers that were created but did not stop
+correctly.  Let's remove them:
+
+```
+root@infix-12-34-56:/cfg/start.d$ docker rm -f 9c73bd8d505b
+9c73bd8d505b
+root@infix-12-34-56:/cfg/start.d$ docker rm -f 8a5290504ebc
+8a5290504ebc
+```
+
+Now we can manually restart the (supervised) container:
+
+```
+root@infix-12-34-56:/cfg/start.d$ initctl restart pod:nginx
+root@infix-12-34-56:/cfg/start.d$ initctl status pod:nginx
+     Status : running
+   Identity : pod:nginx
+Description : Nginx container
+     Origin : /etc/finit.d/enabled/pod-nginx.conf
+    Command : podman run --name nginx --rm -p 80:80 nginx:alpine
+   PID file : none
+        PID : 2669
+       User : root
+      Group : root
+     Uptime : 15 sec
+   Restarts : 11 (0/10)
+  Runlevels : [---234-----]
+     Memory : 63.8M
+     CGroup : /system/pod-nginx cpu 0 [100, max] mem [0, max]
+              ├─ 2669 podman run --name nginx --rm -p 80:80 nginx:alpine
+              └─ 2816 conmon --api-version 1 -c 44d24aa7e98b67ff811596984462b902af3b09a04b4f9bef86e11d246b8cc2ff -u 44d24aa7e98b67ff8
+
+Jun 25 10:15:48 infix-12-34-56 finit[1]: Service pod:nginx[2376] died, restarting in 5000 msec (10/10)
+Jun 25 10:15:48 infix-12-34-56 finit[1]: Starting pod:nginx[2408]
+Jun 25 10:15:53 infix-12-34-56 finit[1]: Service pod:nginx keeps crashing, not restarting.
+Jun 25 10:47:55 infix-12-34-56 finit[1]: Starting pod:nginx[2669]
+```
+
+
 [podman]: https://podman.io
@@ -0,0 +1,150 @@
+Developer's Guide
+=================
+
+Cloning
+-------
+
+When [pre-built releases][0] are not enough, for instance when you want
+to add or modify some Open Source components, you can clone the Infix
+tree to your PC:
+
+```bash
+$ mkdir ~/Projects; cd ~/Projects
+$ git clone https://github.com/kernelkit/infix.git
+$ cd infix/
+$ git submodule update --init
+```
+
+> Please see the [Contributing](#contributing) section, below, for
+> details on how to fork and clone when contributing to Infix.
+
+
+### Customer Builds
+
+Customer builds add product specific device trees, more OSS packages,
+e.g., Frr and podman, and sometimes integrates proprietary software.
+What's *important to remember*, however, is that they are all made by
+setting up Infix as a GIT submodule, similar to how Infix set up a GIT
+submodule for Buildroot.
+
+So, in addition to using the customer's specific defconfig(s), one must
+also make sure to update *all submodules*, otherwise you will likely end
+up with a broken build.
+
+```bash
+$ ...
+$ git submodule update --init --recursive
+                              ~~~~~~~~~~~
+```
+
+Other caveats should be documented in the customer specific trees.
+
+
+Building
+--------
+
+Buildroot is almost stand-alone, it needs a few locally installed tools
+to bootstrap itself.  The most common ones are usually part of the base
+install of the OS, but specific ones for building need the following.
+The instructions here are for Debian/Ubuntu based systems (YMMV):
+
+```bash
+$ sudo apt install bc binutils build-essential bzip2 cpio \
+                   diffutils file findutils git gzip      \
+                   libncurses-dev libssl-dev perl patch   \
+                   python rsync sed tar unzip wget
+```
+
+> For details, see the Getting Started and System Requirements sections
+> of the [excellent manual][1].
+
+To build an Infix image; select the target and then make:
+
+    make x86_64_defconfig
+    make
+
+Online help is available:
+
+    make help
+
+To see available defconfigs for supported targets, use:
+
+    make list-defconfigs
+
+
+Development
+-----------
+
+When changing a package, locally kept sources, or when using `local.mk`,
+you only want to rebuild the parts you have modified:
+
+    make foo-rebuild
+
+or
+
+    make foo-reconfigure
+
+or, when nothing seems to bite:
+
+    make foo-dirclean foo-rebuild
+
+As shown here, you can combine multiple build targets and steps in one
+go, like this:
+
+    make foo-rebuild bar-rebuild all run
+
+This rebuilds (and installs) `foo` and `bar`, the `all` target calls
+on Buildroot to finalize the target filesystem and generate the images.
+The final `run` argument is explained below.
+
+
+Testing
+-------
+
+Manual testing can be done using Qemu by calling <kbd>make run</kbd>,
+see also [Infix in Virtual Environments](virtual.md).
+
+The Infix automated test suite is built around Qemu and [Qeneth][2], see:
+
+ * [Testing](testing.md)
+ * [Docker Image](../test/docker/README.md)
+
+
+Contributing
+------------
+
+Infix is built from many parts, when contributing you need to set up
+your own fork, create a local branch for your change, push to your fork,
+and then use GitHub to create a *Pull Reqeuest*.
+
+For this to work as painlessly as possible:
+
+  1. Fork Infix to your own user or organization[^1]
+  2. Fork all the Infix submodules, e.g., `buildroot` to your own user
+     or organization as well
+  3. Clone your fork of Infix to your laptop/workstation
+
+If you use a GitHub organization you get the added benefit of having
+local peer reviews of changes before making a pull request to the
+upstream Infix repository.
+
+```bash
+$ cd ~/Projects
+$ git clone https://github.com/YOUR_USER_NAME/infix.git
+$ cd infix/
+$ git submodule update --init
+```
+
+> **Note:** when updating/synchronizing with upstream Infix changes you
+> may have to synchronize your forks as well.  GitHub have a `Sync fork`
+> button in the GUI for your fork for this purpose.
+
+[^1]: Organizations should make sure to lock the `main` (or `master`)
+    branch of their clones to ensure members do not accidentally merge
+    changes there.  Keeping these branches in sync with upstream Infix
+    is highly recommended as a baseline and reference.  For integration
+	of local changes another company-specific branch can be used instead.
+
+[0]: https://github.com/kernelkit/infix/releases
+[1]: https://buildroot.org/downloads/manual/manual.html
+[2]: https://github.com/wkz/qeneth
@@ -41,8 +41,9 @@ admin@infix-00-00-00:~$

 ## Discovery mechanisms available in Infix

-Infix advertises its presence via the [mDNS](#mdns) and [SSDP](#ssdp) discovery
-protocols in addition to [LLDP](#lldp).
+Infix advertises its presence via the [mDNS](#mdns) and [LLDP](#lldp)
+discovery protocols.
+

 ### LLDP

@@ -173,29 +174,3 @@ linux-pc:#
 [^2]: [mdns-scan](http://0pointer.de/lennart/projects/mdns-scan/): a
    tool for scanning for mDNS/DNS-SD published services on the local
    network
-
-### SSDP
-
-For Windows clients, Infix advertises itself via the SSDP
-protocol. The Infix unit will appear as a *Network Infrastructure* 
-equipment icon in the *Network* tab of Windows Explorer.
-
-In Linux, the *ssdp-scan*[^3] tool can be used to find Infix units via
-SSDP.
-
-```
-linux-pc:# ssdp-scan tap0
-+ infix-00-00-00                            http://10.0.1.1
-linux-pc:# 
-```
-
-> Note 1: Infix presents itself with a HTTP URL, however, currently no
-> Web server is running. Still, the IP address 10.0.1.1 is discovered
-> and can be used for SSH access, etc.
-
-> Note 2: SSDP is limited to IPv4. Thus, it is only valid as discovery
-> mechanism when Infix as well as the client PC has an IPv4 address
-> assigned.
-
-[^3]: [SSDP Responder for
-    Linux/UNIX](https://github.com/troglobit/ssdp-responder)
@@ -1,55 +0,0 @@
-Infix Goals
-===========
-
-The founding ideas that drive Infix are:
-
- - Use Buildroot, it is:
-   - High quality, track their LTS releases whenever possible
-   - Well maintained and responsive community
-   - Easy to use (c.f. Yocto or roll-your-own)
-   - Well curated Open Source components
-   - Take active part in Buildroot to secure investment in key components
- - Extend with other Open Source components for system monitoring,
-   networking, etc.  With the intent of upstreaming them to become parts
-   of Buildroot proper
- - Rely on standards, i.e., use NETCONF and YANG
- - When standards are not enough create models that fit well with Linux
-   and chosen Open Source components
- - Keep as much as possible Open Source, no need to maintain stuff that
-   is not core business
- - Secure boot by default
- - Use RAUC for upgrades, it works
- - Serve as a stand-alone(!) base for other projects that use Infix as
-   their Buildroot external -- this makes Infix a great layer for where
-   to publish used Open Source components and patches used in customer
-   projects
-
-**Note:** projects derived from Infix (as a Buildroot external) will be
-  able to seamlessly extend the CLI with other models.
-
-Short Term
----------
-
-  - Integrate Clixon and some well-chosen IETF/IEEE YANG models
-    (ietf-system, ietf-interfaces/ip)
-  - Get the (from YANG) automatically generated CLI working similar to
-    Cisco, HP ProCurve, and other well-known command line interfaces,
-	with a focus on usability
-  - First baseline release, from Buildroot 2023.02 (LTS) -> v23.6.0
-
-
-Medium Term
-----------
-
-  - First Web interface built on top of RESTCONF API
-  - Static routing, firewalling, and other advanced YANG models
-  - OSPF YANG model integrated with Frr as backend
-  - Second release -> v23.10.0
-
-
-Long Term
---------
-
-  - Not determined.
-  - Third release -> v24.6.0
-
--- a/Show More
+++ b/Show More
				`@@ -0,0 +1 @@`
				`Paid support and development provided by Addiva Elektronik <https://addiva.se>`
				`@@ -0,0 +1 @@`
				`service [2345789] log:prio:user.notice rauc service -- Software update service`