openwrt package and GH workflow

[Habbie]

This currently sits on top of #145

TODO:

• bumping curl in openwrt would be cool as we can then use websockets without spending space on verbose messages
• add websocket support to the openwrt curl package (curl: add LIBCURL_WEBSOCKETS flag openwrt/packages#25654) (this PR currently works around this by patching the package)
• upstream, or patch on our end, the quickjs-ng fenv stuff (https://git.musl-libc.org/cgit/musl/tree/arch/arm/bits/fenv.h). fixed: upstream already did it! bump quickjs-ng to fresh master, fixing our armv5 fenv issue #147
• figure out if, and why, we need all of TARGET_LDFLAGS += -latomic -static -lstdc++ -lgcc_eh. Especially that last one feels so wrong.

[Habbie]

as of now, this emits a 5165643 byte binary that has no obvious defects, has working DNS, and can attempt TLS (although I have not seen it succeed yet)

[Habbie]

can attempt TLS (although I have not seen it succeed yet)

it works! just sometimes fails immediately with * ssl_handshake returned: (-0x7280) SSL - The connection indicated an EOF which warrants more debugging later

[Habbie]

The connection indicated an EOF

this is literally the remote end (nabu casa's proxy service) sending RST after it gets ClientHello

[Habbie]

Squashed a lot. This is now:

• 5 commits from replace xxd with a Python script #145 (should disappear automatically)
• one commit to drop openssl
• one commit from bump quickjs-ng to fresh master, fixing our armv5 fenv issue #147 (to drop when that is merged
• (currently) one commit adding openwrt support, which I will clean up in further commits

[Habbie]

the curl build currently has

|   WebSockets:       enabled
|   Protocols:        file ftp ftps http https ipfs ipns mqtt ws wss
|   Features:         alt-svc HSTS HTTPS-proxy IPv6 Largefile NTLM SSL threadsafe UnixSockets

I suppose there's not much more to strip there!

[Habbie]

the /dev/random hack mentioned in https://voorkant.org/devices/ isn't even necessary any more, even for TLS

[Habbie]

as of now, this emits a 5165643 byte binary that has no obvious defects, has working DNS, and can attempt TLS (although I have not seen it succeed yet)

I switched from openwrt master to openwrt 24.10 (.0-rc4) for a more stable build environment, this added 8kbyte to the binary, making it 5173843 bytes.

[Habbie]

I think this is all cleaned up now. Once built in GH, I will test the debian-built and openwrt-built static binaries, and if they work, merge this :)

[Habbie]

both binaries work, and the openwrt one works for TLS too