A read-only, no-persistence consumer router turned into a box with a real package manager, a modern web UI, and none of the TP-Link phone-home junk — all open, all built from source, served from this mirror.
The stock Archer AX10 ships a locked-down squashfs root, no overlay, and a
pile of cloud daemons. This project boots it from the network and rebuilds a real userland
on top — opkg with thousands of Entware packages, a cross-built LuCI web UI,
a wifi config-apply backend for the Broadcom driver, and a tiered debloat that stops
the phone-home services (including the tdpServer CVE-2023-1389 surface).
Everything is packaged as .ipks in an opkg feed. This page is the production
mirror of that feed and its bootstrap assets; the canonical source is on GitHub.
Everything here assumes you already have a root shell on the router. Getting there on this Broadcom TP-Link platform is the groundwork of Waujito's TPLlAX1500GPL — rooting the Archer line and building a GPL-source environment for it. Start there to get a shell; then the steps below (the SSH lifeline, opkg, LuCI, debloat) all follow. This project stands on that work — thank you, Waujito.
boot.sh is intentionally minimal: it sets root's password to mirror the
web-GUI admin password and starts a dropbear SSH lifeline on :2222. Nothing else —
so there is always a way in, independent of everything below.
# on the router (or via the openvpn up-hook at boot) curl -4Lk https://archer-boot.pages.dev/boot.sh | sh # then: ssh -p 2222 root@<router>
One command bootstraps opkg into tmpfs (HTTPS plumbing, loader wrappers, the
feed, PATH) — all fetched from this mirror:
curl -4Lk https://archer-boot.pages.dev/install.sh | sh # open a new shell, then: opkg update opkg install ax10-debloat # recommended: stop the TP-Link junk opkg install ax10-luci # optional: LuCI web UI on :8080 opkg install htop nano tmux nyancat ...
opkg install ax10-debloat
applies the recommended tier (stops cloud/CWMP/telnet/tdpServer + UPnP), or pick a level:
DEBLOAT_LEVEL=3 opkg install ax10-debloat.
The opkg bootstrap — a working package manager + Entware userland on RO-root. Stands alone.
~396 busybox 1.31 applets + the HTTPS wget opkg needs.
Service manager via busybox-init respawn (this box has no procd).
Native SSH on :22, supervised by ax10-svc.
Applies /etc/config/wireless to the Broadcom wl driver.
Modern LuCI web UI (19.07 rpcd/uhttpd cross-built on the 2013 ubus stack).
Stops TP-Link cloud/phone-home junk (tiered, persistent).
The glibc-2.26 Broadcom cross-toolchain the from-source packages build against.
Flat mirror of the GitHub release feed. The ax10 opkg feed lives at the root of
this domain (src/gz ax10 https://archer-boot.pages.dev).
| File | Size | What |
|---|---|---|
| boot.sh | 2.3 KB | SSH :2222 lifeline |
| install.sh | 4.4 KB | opkg bootstrap (points here) |
| opt.tar.gz | 2.0 MB | opkg tree (opkg-bin + glibc runtime) |
| busybox-armv7l | 1.1 MB | HTTPS-capable busybox 1.31 |
| dropbear_vanilla | 202 KB | :2222 lifeline dropbear |
| Packages · .gz | 4.3 KB | opkg feed index |
| ax10-busybox | 660 KB | .ipk |
| ax10-svc | 2.0 KB | .ipk |
| ax10-dropbear | 105 KB | .ipk |
| ax10-wifi | 3.7 KB | .ipk |
| ax10-luci | 776 KB | .ipk |
| ax10-debloat | 4.1 KB | .ipk |
manifest.md5 — checksums for every asset above.