Rock960 Ubuntu firewall


#1

Hi all,
I just bought this board for testing purposes and started playing with the Ubuntu image.
When I started looking at the firewall, for example trying the command sudo iptables -L to get the list of rules, I got the following exception

modprobe: ERROR: ../libkmod/libkmod.c:586 kmod_search_moddep() could not open moddep file '/lib/modules/4.4.103/modules.dep.bin'
modprobe: FATAL: Module ip_tables not found in directory /lib/modules/4.4.103
iptables v1.6.0: can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

Does anyone did some testing with the firewall?
What can I do in order to have it working? I’ve tried to see if there are available modules with asmod, but there are any.

Best regards,
Matteo


#2

Got same issue with Debian. We got this issue when we try to install AWS GreenGrass core into this devboard. Any updates on this issue?


#3

The error is due to the fact that the kernel does not have the necessary modules to use iptables. You need to compile the kernel with the required modules. This guide will help you.

I made some build scripts for my ROCK960 Model C and although I may include more modules and patches than you need (I use Docker and WireGuard), I think it might help you too.


#4

I think we have fixed this in the new released image, can you test it?

Debian stretch desktop:

https://dl.vamrs.com/products/rock960/images/debian/rock960ab-debian-stretch-desktop-armhf-20181218_2036-gpt.img.gz

Ubuntu bionic minial:

https://dl.vamrs.com/products/rock960/images/ubuntu/rock960ab-ubuntu-bionic-minimal-arm64-20181218_2036-gpt.img.gz

A lot of modules are now built into the kernel deb package, just modprobe ip_tables to use it.


#5

Thanks @hipboi and @hectorm now issue is resolved.