Skip to content

Enable kernel modules for container (Docker/Podman) and WireGuard support #12

Description

@HAHermsen

Describe the bug

Summary
Several important kernel modules are missing from the current firmware build (OpenWrt 25.12.0-rc3, kernel 6.12.66), preventing the use of containers (Docker/Podman) and WireGuard VPN on the Mono Gateway Development Kit.

Missing kernel modules
Required for Podman (container support)

kmod-veth (CONFIG_VETH)

Additionally required for Docker

kmod-veth (CONFIG_VETH)
kmod-ipt-nat (CONFIG_IP_NF_NAT)
kmod-ipt-nat6 (CONFIG_IP6_NF_NAT)
kmod-ipt-physdev (CONFIG_NETFILTER_XT_MATCH_PHYSDEV)
kmod-ipt-extra (CONFIG_NETFILTER_XT_MATCH_ADDRTYPE)
kmod-nf-ipvs (CONFIG_IP_VS)
kmod-fs-btrfs (optional, needed by containerd dependency btrfs-progs)

Required for WireGuard VPN

kmod-wireguard (CONFIG_WIREGUARD)

Why this matters
The Gateway DK has 8GB RAM and quad-core A53 with DPAA hardware offload handling routing. This leaves significant CPU and memory headroom for running containerized services — which is one of the most compelling use cases for a device like this.
Popular services users would run in containers:

AdGuard Home / Pi-hole (DNS ad-blocking)
Uptime Kuma (monitoring)
Grafana + Prometheus (metrics)
Nginx Proxy Manager (reverse proxy)
Home Assistant (home automation)
CrowdSec (intrusion prevention)

WireGuard is the most popular modern VPN protocol and a common expectation on any OpenWrt-based router.
Current behavior
root@OpenWrt:~# apk info -a podman
...
Required dependency package kmod-veth is not available in any repository.

root@OpenWrt:~# apk info -a wireguard-tools
...
Required dependency package kmod-wireguard is not available in any repository.
Expected behavior
These kernel modules should be available as installable packages via apk add, or built into the kernel.
Environment

Device: Mono Gateway Development Kit
Firmware: OpenWrt 25.12.0-rc3 r32486-30527a4c34
Kernel: 6.12.66
SoC: NXP QorIQ LS1046A

Notes
At minimum, enabling CONFIG_VETH and CONFIG_WIREGUARD would unlock the two most requested features. The additional iptables/netfilter modules for full Docker support would be a bonus.

Thank you for the great hardware — looking forward to unlocking its full potential!

OpenWrt version

25.12.0-rc3

OpenWrt release

25.12.0-rc3

OpenWrt target/subtarget

layerscape/armv8_64b

Device

Mono Gateway Development Kit

Image kind

Official downloaded image

Steps to reproduce

No response

Actual behaviour

No response

Expected behaviour

No response

Additional info

No response

Diffconfig


Terms

  • I am reporting an issue for OpenWrt, not an unsupported fork.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions