Rock960 Ubuntu firewall


#1

Hi all,
I just bought this board for testing purposes and started playing with the Ubuntu image.
When I started looking at the firewall, for example trying the command sudo iptables -L to get the list of rules, I got the following exception

modprobe: ERROR: ../libkmod/libkmod.c:586 kmod_search_moddep() could not open moddep file '/lib/modules/4.4.103/modules.dep.bin'
modprobe: FATAL: Module ip_tables not found in directory /lib/modules/4.4.103
iptables v1.6.0: can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

Does anyone did some testing with the firewall?
What can I do in order to have it working? I’ve tried to see if there are available modules with asmod, but there are any.

Best regards,
Matteo


#2

Got same issue with Debian. We got this issue when we try to install AWS GreenGrass core into this devboard. Any updates on this issue?


#3

The error is due to the fact that the kernel does not have the necessary modules to use iptables. You need to compile the kernel with the required modules. This guide will help you.

I made some build scripts for my ROCK960 Model C and although I may include more modules and patches than you need (I use Docker and WireGuard), I think it might help you too.


#4

I think we have fixed this in the new released image, can you test it?

Debian stretch desktop:

https://dl.vamrs.com/products/rock960/images/debian/rock960ab-debian-stretch-desktop-armhf-20181218_2036-gpt.img.gz

Ubuntu bionic minial:

https://dl.vamrs.com/products/rock960/images/ubuntu/rock960ab-ubuntu-bionic-minimal-arm64-20181218_2036-gpt.img.gz

A lot of modules are now built into the kernel deb package, just modprobe ip_tables to use it.


#5

Thanks @hipboi and @hectorm now issue is resolved.


#6

Please help me.

I also tried updating the kernel to solve the same problem as this topic

I try " Build & Update Linux kernel on Rock960".
but It does not work.

I changed the following
wget releases.linaro.org/components/toolchain/binaries/latest/aarch64-linux-gnu/gcc--x86_64_aarch64-linux-gnu.tar.xz

wget releases.linaro.org/components/toolchain/binaries/latest-7/aarch64-linux-gnu/gcc-
-x86_64_aarch64-linux-gnu.tar.xz
(latest→latest-7)

export CROSS_COMPILE=/aarch64-linux-gnu-gcc-

export CROSS_COMPILE=/aarch64-linux-gnu-

cd …/…/build

cd …/…

I succeeded make boot.img.No Error.
I succeeded flash image
rkdeveloptool wl 32768 boot.img

but I try
rkdeveloptool rd
rock960 is not start.

I retry flush old boot.img.I succeeded to start rock960.

Was there a mistake in the procedure I changed?


#7

You can try to check if boot.img is the right format.

file boot.img
sudo mount boot.img /mnt
ls /mnt

You should see the kernel and dtb files in /mnt


#8

I try it.
I can see
Image
rock960-model-ab-linux.dtb
extlinux/extlinux.conf


#9

The files should be right. What extlinux/extlinux.conf shows? You can compare not working one extlinux/extlinux.conf with the working extlinux/extlinux.conf


#10

Thank you.but it does not work.

I change follow it. fixed dtb file name
and flush image and I can start my rock960

new file
label kernel-4.4
kernel /Image
fdt /rk3399-sapphire-excavator-linux.dtb
append earlyprintk console=ttyFIQ0,1500000n8 rw root=PARTUUID=b921b045-1d rootfstype=ext4 init=/sbin/init rootwait

old
label kernel-4.4
kernel /Image
fdt /rock960-model-ab-linux.dtb
append earlyprintk console=ttyFIQ0,1500000n8 rw root=PARTUUID=b921b045-1d rootfstype=ext4 init=/sbin/init rootwait

but I can not solve modprove Error.
I try “uname -r”
4.4.103

I will review the work of my build again


#11

I try Update Linux kernel

-----start-----
wget releases.linaro.org/components/toolchain/binaries/7.4-2019.02/aarch64-linux-gnu/gcc--x86_64_aarch64-linux-gnu.tar.xz
tar -xf gcc-
-x86_64_aarch64-linux-gnu.tar.xz -C ./toolchain --strip-components=1
git clone https://github.com/96rocks/kernel.git
cd kernel
git checkout -t origin/rock960-4.4-dev
export ARCH=arm64
export CROSS_COMPILE=/aarch64-linux-gnu-
make rockchip_linux_defconfig
make Image dtbs -j$(nproc)
-----end-----

it was suceed.
but I can not my probrem.
I try “sudo iptables -L” on my Rock960
then “modprobe: ERROR”

Is the download URL incorrect?


#12

If you want to use iptables, you can just write the new images:

Debian stretch desktop:

https://dl.vamrs.com/products/rock960/images/debian/rock960ab-debian-stretch-desktop-armhf-20181218_2036-gpt.img.gz

Ubuntu bionic minial:

https://dl.vamrs.com/products/rock960/images/ubuntu/rock960ab-ubuntu-bionic-minimal-arm64-20181218_2036-gpt.img.gz

A lot of modules are now built into the kernel deb package, just modprobe ip_tables to use it.

If you want to build the kernel, you should follow this:


#13

Thanks hipboi

I created the kernel as below.
(It ran on Ubuntu 16.04)

mkdir toolchain
wget releases.linaro.org/components/toolchain/binaries/7.4-2019.02/aarch64-linux-gnu/gcc--x86_64_aarch64-linux-gnu.tar.xz
tar -xf gcc-
-x86_64_aarch64-linux-gnu.tar.xz -C ./toolchain --strip-components=1
git clone https://github.com/96rocks/kernel.git
cd kernel/
git checkout -t origin/rock960-4.4-dev
export ARCH=arm64
export CROSS_COMPILE=/home/parallels/rock960/testDir/toolchain/bin/aarch64-linux-gnu-
make rockchip_linux_defconfig
make Image dtbs -j$(nproc)

It was success.
I get “arch/arm64/boot/Image”,“arch/arm64/boot/dts/rockchip/rock960-model-ab-linux.dtb”
And,I built it as follows.

git clone https://github.com/96rocks/build.git
edit build/extlinux/rk3399.conf
*rk3399-sapphire-excavator-linux.dtb→rock960-model-ab-linux.dtb
mkdir out && cd out
mkdir kernel && cd kernel
cd …/…
./build/mk-image.sh -c rk3399 -t boot

It was success.
I get " boot.img",and I use rkdeveloptool

rkdeveloptool wl 32768 boot.img

It was success.
I could run my rock960.

but,I can’t use iptables.
I run in my rock960.

uname -r

4.4.103

This version seems to be the same as before the kernel change.
So far is that the kernel that responded to this problem is not released.

If you have a kernel that addresses this problem, I’d like to challenge, but I will give up if there is not.


#14

I will report it as the problem is resolved.
Iuse

I had probrem.
It was nmcli was not work.

but,I run

sudo touch /etc/NetworkManager/conf.d/10-globally-managed-devices.conf
It was clear.

II referred to the following.

Thank you for your cooperation.