Distributions and plumbing roundup for 2026-09-22

OpenWrt contributors reported working NSS offload on recent kernels and advanced LuCI interface work that also surfaced a security flaw. Fedora discussions centered on the oo7 secrets provider for release 45, with related install failures, plus lower-priority packaging and documentation proposals.

NSS offload for IPQ5018 on kernel 6.18

Working NSS offload for IPQ5018 NAT using the upstream stmmac ethernet stack on kernel 6.18 is available in public branches, with reports covering multiple boards including the GL-B3000. OpenWrt developers and users of Qualcomm IPQ devices gain hardware-accelerated NAT without relying on out-of-tree stacks. The work ties directly into the mainline ethernet path now shipping in that kernel series.

Stored XSS via Footstrap LuCI theme uploads

A new LuCI theme named Footstrap, described as twice as fast as bootstrap, prompted extended forum discussion. The thread identified a stored unauthenticated SVG XSS issue through wallpaper upload handling that serves content as image/svg+xml. LuCI operators and theme maintainers need to treat the upload path as a security boundary until fixed.

Fedora 45 oo7 system-wide Secrets Service proposal

A change proposal for Fedora 45 would adopt oo7 as the system-wide SecretService provider. Discussion encountered migration bugs and raised security concerns about upstream AI-generated code. Desktop and GNOME users who depend on the secrets API will be affected by the switch and its readiness.

AI-assisted LuCI dashboard rewrite merged

The luci-mod-dashboard package, an AI-assisted modernization of the LuCI UI, has been merged to master. It introduces charts, cards, and plans for a customizable layout. OpenWrt users receive a refreshed status and monitoring interface without waiting for a full LuCI overhaul.

oo7 keyring creation failure on Fedora 45 installs

Fresh Fedora 45 installations omit gnome-keyring, and the oo7 daemon fails to create an initial keyring for new users. The problem appears in the same secrets-service transition covered by the system-wide change proposal. New installs can leave desktop sessions without a working secrets store until the daemon behavior is corrected.

Ethernet port name flip on OpenWrt reboot

Users reported eth0 and eth1 swapping order after reboot or power cycle on certain access points. One participant supplied an stmmac kernel patch that forces interface names from device-tree aliases. Multi-port OpenWrt devices using the stmmac driver remain exposed to unstable naming until such fixes land.

NixOS debate on documentation for AI agents

A short NixOS thread examined whether to maintain a separate repository for AI-agent documentation or keep human-first priority. Participants disagreed on ecosystem focus and maintenance cost. Nix contributors deciding how to support agent tooling will find the arguments collected there.

Fedora proposal to replace LibreOffice with Collabora

A user proposed retiring LibreOffice and shipping Collabora as the default out-of-the-box office suite. Replies noted that required packaging work and package ownership details are absent. The change cannot advance under Fedora process rules without those elements supplied.