Packages for your router,
built and signed for it.

An apk repository for OpenWrt with AmneziaWG, zapret and more. Kernel modules are built against the exact kernel of each supported device.

OpenWrt 25.12.1apk · signed indexkept across sysupgrade

Install

Run on the router over SSH. Requires OpenWrt 25.12 or newer (apk).

Add the repository

Downloads the signing key and adds the feed for your release, architecture and target. Both files are also added to /etc/sysupgrade.conf so they survive a sysupgrade.

wget -qO- https://openwrt.razzmatazz.ru/install.sh | sh
Prefer to do it by hand?
. /etc/openwrt_release
wget -qO /etc/apk/keys/razzmatazz.pem https://openwrt.razzmatazz.ru/keys/razzmatazz.pem
cat > /etc/apk/repositories.d/razzmatazz.list <<EOF
https://openwrt.razzmatazz.ru/$DISTRIB_RELEASE/packages/$DISTRIB_ARCH/packages.adb
https://openwrt.razzmatazz.ru/$DISTRIB_RELEASE/targets/$DISTRIB_TARGET/packages/packages.adb
EOF
apk update

Install what you need

apk add amneziawg-tools kmod-amneziawg luci-proto-amneziawg
apk add zapret luci-app-zapret

Upgrade safely

Kernel modules must match the running kernel, so after a sysupgrade run apk update && apk upgrade. Routers flashed with firmware from this project already have the repository configured.

Supported devices

Every device runs the same pinned OpenWrt release (25.12.1).

Cudy

Cudy WR3000S v1

Target
mediatek/filogic
Arch
aarch64_cortex-a53
Profile
cudy_wr3000s-v1
Xiaomi

Xiaomi Mi Router AX3000T

Target
mediatek/filogic
Arch
aarch64_cortex-a53
Profile
xiaomi_mi-router-ax3000t

Other device? Architecture-independent packages work on any aarch64_cortex-a53 router, but kmod-* packages only match the targets listed above.

Packages

Scope tells you how a package is built: per kernel target or per CPU architecture.

Package Scope What it does
kmod-amneziawgtargetAmneziaWG kernel module, built against the exact kernel of each target.
amneziawg-toolsarchawg and awg-quick userspace tools.
luci-proto-amneziawgarchLuCI protocol support for AmneziaWG interfaces.
zapretarchDPI bypass tool (nfqws / tpws).
luci-app-zapretarchLuCI interface for zapret.

Trust

The package index is signed with an EC key. The public key is at keys/razzmatazz.pem. Review install.sh before piping it to a shell.