From: Andrzej O. <an...@ma...> - 2012-03-07 13:21:17
|
Dear Heiko, Next surprise: tonight I tried the router with the new, 64-bit version, and no OpenVPN tunnel was set up. Meanwhile, a parallel 32-bit negotiates tunnels with no problem. Records in log are: > Mar 7 03:27:07 src@Gibraltar tls-47-05-server[4371]: /usr/sbin/ip link set dev tun2 up mtu 1500 > Mar 7 03:27:07 src@Gibraltar tls-47-05-server[4371]: Linux ip link set failed: could not execute external program > Mar 7 03:27:07 src@Gibraltar tls-47-05-server[4371]: Exiting Meanwhile, 32-bit version uses path /sbin/ip to iproute and this is ok. Probably ./configure assumes different paths for different architectures after --enable-iproute2 so I try now with enforcing path using --with-iproute-path=/sbin/ip I will report, about solving or not this problem. Best Regards -- Andrzej Odyniec |
From: Serge L. <ser...@gm...> - 2012-03-07 17:05:17
|
yes, you are right. I use the following config line: ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var --enable-password-save --enable-iproute2 --disable-selinux \ --with-ifconfig-path=/sbin/ifconfig --with-iproute-path=/sbin/ip --with-route-path=/sbin/route || exit 1 Serge On 03/07/2012 05:08 AM, Andrzej Odyniec wrote: > Dear Heiko, > > Next surprise: tonight I tried the router with the new, 64-bit version, and no > OpenVPN tunnel was set up. Meanwhile, a parallel 32-bit negotiates tunnels > with no problem. Records in log are: > >> Mar 7 03:27:07 src@Gibraltar tls-47-05-server[4371]: /usr/sbin/ip link set dev tun2 up mtu 1500 >> Mar 7 03:27:07 src@Gibraltar tls-47-05-server[4371]: Linux ip link set failed: could not execute external program >> Mar 7 03:27:07 src@Gibraltar tls-47-05-server[4371]: Exiting > > Meanwhile, 32-bit version uses path /sbin/ip to iproute and this is ok. > Probably ./configure assumes different paths for different architectures after > --enable-iproute2 so I try now with enforcing path using > --with-iproute-path=/sbin/ip > > I will report, about solving or not this problem. > > Best Regards > |
From: Heiko Z. <he...@zu...> - 2012-03-07 18:41:39
|
Serge, Quoting Serge Leschinsky <ser...@gm...>: > yes, you are right. I use the following config line: > > ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var > --enable-password-save --enable-iproute2 --disable-selinux \ > --with-ifconfig-path=/sbin/ifconfig --with-iproute-path=/sbin/ip > --with-route-path=/sbin/route || exit 1 Would you mind merging your changes with what we have in CVS? -- Regards Heiko Zuerker http://www.devil-linux.org |
From: Serge L. <ser...@gm...> - 2012-03-07 20:22:10
|
Heiko, No problem, but I tried with udev and it caused nonworking code in the repo :( I need to test the changes in DL (at least 64) before merging... The case with OpenVPN seems to be more simple though. I'll try to send it without the verification - I believe Andrzej will do more thoughtful verification than I can. Serge On 03/07/2012 10:41 AM, Heiko Zuerker wrote: > Serge, > > Quoting Serge Leschinsky<ser...@gm...>: > >> yes, you are right. I use the following config line: >> >> ./configure --prefix=/usr --sysconfdir=/etc --localstatedir=/var >> --enable-password-save --enable-iproute2 --disable-selinux \ >> --with-ifconfig-path=/sbin/ifconfig --with-iproute-path=/sbin/ip >> --with-route-path=/sbin/route || exit 1 > > Would you mind merging your changes with what we have in CVS? > |
From: Andrzej O. <an...@ma...> - 2012-03-09 12:52:48
|
Hi, Serge Leschinsky wrote: > No problem, but I tried with udev and it caused nonworking code in the repo :( > I need to test the changes in DL (at least 64) before merging... > The case with OpenVPN seems to be more simple though. I'll try to send it > without the verification - I believe Andrzej will do more thoughtful > verification than I can. So... last night I tested this in real conditions. After 64-bit recompilation of OpenVPN with correct path to iproute all my 15 static tunnels and 2 servers are working correct connecting with different clients on different machines. So probably this issue is solved. But next 64-bit compilation with new udev was not booted correctly. Ie. there was no network interfaces. We need test and maybe reconfigure this udev. I'll try this in testing environment next week. Regards -- Andrzej Odyniec |
From: Heiko Z. <he...@zu...> - 2012-03-09 14:28:21
|
Andrzej, Quoting Andrzej Odyniec <an...@ma...>: > Serge Leschinsky wrote: >> No problem, but I tried with udev and it caused nonworking code in >> the repo :( >> I need to test the changes in DL (at least 64) before merging... >> The case with OpenVPN seems to be more simple though. I'll try to send it >> without the verification - I believe Andrzej will do more thoughtful >> verification than I can. > > So... last night I tested this in real conditions. After 64-bit recompilation > of OpenVPN with correct path to iproute all my 15 static tunnels and > 2 servers > are working correct connecting with different clients on different machines. > So probably this issue is solved. > > But next 64-bit compilation with new udev was not booted correctly. Ie. there > was no network interfaces. We need test and maybe reconfigure this udev. I'll > try this in testing environment next week. Check if there are any files in /etc/udev/rules.d , other than the aoe one. This may be causing issues. I'm testing on vmware and the devices show up fine. If I get a chance I'll test on real hardware this weekend. -- Regards Heiko Zuerker http://www.devil-linux.org |
From: Serge L. <ser...@gm...> - 2012-03-09 16:58:26
Attachments:
aoe6-79.patch
|
Heiko, please try this patch (I tested it on my machine, it seems to be correct). Serge |
From: Heiko Z. <he...@zu...> - 2012-03-11 19:35:25
|
Patch has been applied. -- Regards Heiko Zuerker http://www.devil-linux.org > -----Original Message----- > From: Serge Leschinsky [mailto:ser...@gm...] > Sent: Friday, March 09, 2012 10:58 AM > To: dev...@li... > Subject: Re: [Devil-linux-develop] In 64-bit DL OpenVPN is not working > > Heiko, > > please try this patch (I tested it on my machine, it seems to be correct). > > Serge > |
From: Heiko Z. <he...@zu...> - 2012-03-10 23:25:46
|
> I'm testing on vmware and the devices show up fine. If I get a chance I'll test > on real hardware this weekend. The network devices show up on my physical hardware too. -- Regards Heiko Zuerker http://www.devil-linux.org |
From: Heiko Z. <he...@zu...> - 2012-03-11 19:24:06
|
Hey, I found a bug in the build system and fixed it. Try again with the latest code from CVS. -- Regards Heiko Zuerker http://www.devil-linux.org |
From: Serge L. <ser...@gm...> - 2012-03-09 17:00:59
|
Andrzej, On 03/09/2012 04:52 AM, Andrzej Odyniec wrote: > But next 64-bit compilation with new udev was not booted correctly. Ie. there > was no network interfaces. We need test and maybe reconfigure this udev. I'll > try this in testing environment next week. > Can you please check kernel messages? Do you have a message abt wrong module capabilities (SYS_CAP) for the module ? Serge |
From: Andrzej O. <an...@ma...> - 2012-03-12 02:36:34
|
Serge Leschinsky wrote: > Andrzej, > > On 03/09/2012 04:52 AM, Andrzej Odyniec wrote: > >>But next 64-bit compilation with new udev was not booted correctly. Ie. there >>was no network interfaces. We need test and maybe reconfigure this udev. I'll >>try this in testing environment next week. > > Can you please check kernel messages? Do you have a message abt wrong module > capabilities (SYS_CAP) for the module ? Serge, I'm not so fast, because my hardware copy of my router is unfortunatelly broken from some days. So I can test it only in night and not every. My last try was on last night. There are console messages: First compilation with new udev: > Version 1.6.0-RC3-2012-03-08 > Kernel 3.2.9-grsec > > INIT: version 2.88 booting > > [ OK ] > Creating devices in /dev > udevd[570]: NAME="%k" is ignored, because it breaks kernel supplied names, please remove it from /etc/udev/rules.d/60-aoe.rules:26 > udevd[570]: IMPORT{} type missing, ignoring IMPORT /lib/udev/rules.d/60-persistent-serial.rules:9 > udevd[570]: IMPORT{} type missing, ignoring IMPORT /lib/udev/rules.d/60-persistent-serial.rules:13 > udevd[570]: IMPORT{} type missing, ignoring IMPORT /lib/udev/rules.d/60-persistent-storage-tape.rules:15 > udevd[570]: IMPORT{} type missing, ignoring IMPORT /lib/udev/rules.d/79-fstab_import.rules:1 > udevd[570]: unknown key 'RUN{ignore_error}' in /lib/udev/rules.d/80-drivers.rules:5 > udevd[570]: invalid rule '/lib/udev/rules.d/80-drivers.rules:5' > [ OK ] > Sync'ing filesystems[ OK ] > > Last compilation with ACPI dev switched off in kernel config (before Heiko bug patch): > Version 1.6.0-RC3-2012-03-10 > Kernel 3.2.9-grsec > > INIT: version 2.88 booting > > [ OK ] > Creating devices in /dev > udevd[558]: NAME="%k" is ignored, because it breaks kernel supplied names, please remove it from /etc/udev/rules.d/60-aoe.rules:26 > udevd[558]: IMPORT{} type missing, ignoring IMPORT /lib/udev/rules.d/60-persistent-serial.rules:9 > udevd[558]: IMPORT{} type missing, ignoring IMPORT /lib/udev/rules.d/60-persistent-serial.rules:13 > udevd[558]: IMPORT{} type missing, ignoring IMPORT /lib/udev/rules.d/60-persistent-storage-tape.rules:15 > udevd[558]: IMPORT{} type missing, ignoring IMPORT /lib/udev/rules.d/79-fstab_import.rules:1 > udevd[558]: unknown key 'RUN{ignore_error}' in /lib/udev/rules.d/80-drivers.rules:5 > udevd[558]: invalid rule '/lib/udev/rules.d/80-drivers.rules:5' > [ OK ] > Sync'ing filesystems[ OK ] Above but after removing rules from /shm/etc-mods/udev/rules.d: > Version 1.6.0-RC3-2012-03-10 > Kernel 3.2.9-grsec > > INIT: version 2.88 booting > > [ OK ] > Creating devices in /dev > udevd[556]: IMPORT{} type missing, ignoring IMPORT /lib/udev/rules.d/60-persistent-serial.rules:9 > udevd[556]: IMPORT{} type missing, ignoring IMPORT /lib/udev/rules.d/60-persistent-serial.rules:13 > udevd[556]: IMPORT{} type missing, ignoring IMPORT /lib/udev/rules.d/60-persistent-storage-tape.rules:15 > udevd[556]: IMPORT{} type missing, ignoring IMPORT /lib/udev/rules.d/79-fstab_import.rules:1 > udevd[556]: unknown key 'RUN{ignore_error}' in /lib/udev/rules.d/80-drivers.rules:5 > udevd[556]: invalid rule '/lib/udev/rules.d/80-drivers.rules:5' > [ OK ] > Sync'ing filesystems[ OK ] Above, but after removing all rules from /etc/udev/rules.d: > Version 1.6.0-RC3-2012-03-10 > Kernel 3.2.9-grsec > > > INIT: version 2.88 booting > > [ OK ] > Creating devices in /dev > udevd[558]: IMPORT{} type missing, ignoring IMPORT /lib/udev/rules.d/60-persistent-serial.rules:9 > udevd[558]: IMPORT{} type missing, ignoring IMPORT /lib/udev/rules.d/60-persistent-serial.rules:13 > udevd[558]: IMPORT{} type missing, ignoring IMPORT /lib/udev/rules.d/60-persistent-storage-tape.rules:15 > udevd[558]: IMPORT{} type missing, ignoring IMPORT /lib/udev/rules.d/79-fstab_import.rules:1 > udevd[558]: unknown key 'RUN{ignore_error}' in /lib/udev/rules.d/80-drivers.rules:5 > udevd[558]: invalid rule '/lib/udev/rules.d/80-drivers.rules:5' > [ OK ] > Sync'ing filesystems[ OK ] Ofcourse, in all above boots after complete boot there is no ethernet interfaces, only lo and ifb's. Probably Heiko corrected this problem, but I can build last CVS on monday afternoon. I will try to change Power supply in my testing hardware. If this is the only problem, I will try faster, because I will test in middle of day. Regards -- Andrzej Odyniec |
From: Heiko Z. <he...@zu...> - 2012-03-12 13:13:36
|
Andrzej, the errors you're seeing are caused by a bug in the "finalize" script. Update from CVS and a simple "make clean all" should generate you an ISO which works correctly. -- Regards Heiko Zuerker http://www.devil-linux.org |
From: Andrzej O. <an...@ma...> - 2012-03-12 14:06:34
|
Heiko Zuerker wrote: > the errors you're seeing are caused by a bug in the "finalize" script. > Update from CVS and a simple "make clean all" should generate you an > ISO which works correctly. Heiko, As I wrote, Console messages I sent just in case. As I mentioned at the end, I suspected that your patch fixes the problem. Now I'm building a new version. I'll let you know when I'll check the result. Best regards -- Andrzej Odyniec |
From: Serge L. <ser...@gm...> - 2012-03-07 21:01:15
|
That's would be great. However, it's not only for iproute2 - there are more tools/libs which might be used from "incorrect" places. I don't remember if I mentioned, but I made initial lfssystem completely empty to avoid mixing "olg" and "new" binaries. There is no chance to include "old" tool into the resulting image or, which is worse, link something with "old" library. I believe it's a major feature :) I'd suggest uploading everything I have to sourcesforge, but I'm afraid it might confuse users - I significantly modified init scripts and added new functionality which is not documented (like multi boot environments). The toolchain and packages are also not completely aligned... Due to some business specific, those changes are critical for me and I cannot just switch to DL_64 Anyway, I'll be happy to share this work. Serge On 03/07/2012 12:31 PM, Heiko Zuerker wrote: > Should we change our iproute2 package to actually install all the > binaries into the build system and remove the old version from the > "wrong" directories? > > Heiko > > Quoting Serge Leschinsky<ser...@gm...>: > >> Heiko, >> >> No problem, but I tried with udev and it caused nonworking code in >> the repo :( >> I need to test the changes in DL (at least 64) before merging... >> The case with OpenVPN seems to be more simple though. I'll try to send it >> without the verification - I believe Andrzej will do more thoughtful >> verification than I can. >> >> Serge >> >> >> On 03/07/2012 10:41 AM, Heiko Zuerker wrote: >>> Serge, >>> >>> Quoting Serge Leschinsky<ser...@gm...>: >>> >>>> yes, you are right. I use the following config line: >>>> >>>> ./configure --prefix=/usr --sysconfdir=/etc >>>> --localstatedir=/var >>>> --enable-password-save --enable-iproute2 --disable-selinux \ >>>> --with-ifconfig-path=/sbin/ifconfig >>>> --with-iproute-path=/sbin/ip >>>> --with-route-path=/sbin/route || exit 1 >>> >>> Would you mind merging your changes with what we have in CVS? >>> >> >> >> ------------------------------------------------------------------------------ >> Virtualization& Cloud Management Using Capacity Planning >> Cloud computing makes use of virtualization - but cloud computing >> also focuses on allowing computing to be delivered as a service. >> http://www.accelacomm.com/jaw/sfnl/114/51521223/ >> _______________________________________________ >> Devil-linux-develop mailing list >> Dev...@li... >> https://lists.sourceforge.net/lists/listinfo/devil-linux-develop > > |
From: Heiko Z. <he...@zu...> - 2012-03-08 14:20:55
|
Serge, I like your approach with using a very clean lfssystem, with the bare minimum required. I'll document it in Mantis. Unfortunately creating new clean lfssystems is a pain in the a$$ and takes a lot of time... Heiko Quoting Serge Leschinsky <ser...@gm...>: > That's would be great. However, it's not only for iproute2 - there are more > tools/libs which might be used from "incorrect" places. I don't remember if I > mentioned, but I made initial lfssystem completely empty to avoid > mixing "olg" > and "new" binaries. There is no chance to include "old" tool into > the resulting > image or, which is worse, link something with "old" library. I believe it's a > major feature :) > > I'd suggest uploading everything I have to sourcesforge, but I'm > afraid it might > confuse users - I significantly modified init scripts and added new > functionality which is not documented (like multi boot environments). The > toolchain and packages are also not completely aligned... Due to > some business > specific, those changes are critical for me and I cannot just switch to DL_64 > Anyway, I'll be happy to share this work. > > Serge > > On 03/07/2012 12:31 PM, Heiko Zuerker wrote: >> Should we change our iproute2 package to actually install all the >> binaries into the build system and remove the old version from the >> "wrong" directories? >> >> Heiko >> >> Quoting Serge Leschinsky<ser...@gm...>: >> >>> Heiko, >>> >>> No problem, but I tried with udev and it caused nonworking code in >>> the repo :( >>> I need to test the changes in DL (at least 64) before merging... >>> The case with OpenVPN seems to be more simple though. I'll try to send it >>> without the verification - I believe Andrzej will do more thoughtful >>> verification than I can. >>> >>> Serge >>> >>> >>> On 03/07/2012 10:41 AM, Heiko Zuerker wrote: >>>> Serge, >>>> >>>> Quoting Serge Leschinsky<ser...@gm...>: >>>> >>>>> yes, you are right. I use the following config line: >>>>> >>>>> ./configure --prefix=/usr --sysconfdir=/etc >>>>> --localstatedir=/var >>>>> --enable-password-save --enable-iproute2 --disable-selinux \ >>>>> --with-ifconfig-path=/sbin/ifconfig >>>>> --with-iproute-path=/sbin/ip >>>>> --with-route-path=/sbin/route || exit 1 >>>> >>>> Would you mind merging your changes with what we have in CVS? >>>> >>> >>> >>> ------------------------------------------------------------------------------ >>> Virtualization& Cloud Management Using Capacity Planning >>> Cloud computing makes use of virtualization - but cloud computing >>> also focuses on allowing computing to be delivered as a service. >>> http://www.accelacomm.com/jaw/sfnl/114/51521223/ >>> _______________________________________________ >>> Devil-linux-develop mailing list >>> Dev...@li... >>> https://lists.sourceforge.net/lists/listinfo/devil-linux-develop >> >> > > > ------------------------------------------------------------------------------ > Virtualization & Cloud Management Using Capacity Planning > Cloud computing makes use of virtualization - but cloud computing > also focuses on allowing computing to be delivered as a service. > http://www.accelacomm.com/jaw/sfnl/114/51521223/ > _______________________________________________ > Devil-linux-develop mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-develop -- Regards Heiko Zuerker http://www.devil-linux.org |
From: Andrzej O. <an...@ma...> - 2012-03-13 13:28:11
|
I wrote: > As I wrote, Console messages I sent just in case. As I mentioned at the end, I > suspected that your patch fixes the problem. Now I'm building a new version. > > I'll let you know when I'll check the result. I tested new build last night. Now all interfaces was present and worked properly (in a short period of time, because after hour I reverted soft to 32-bit). But in real environment under 64-bit worked correct: -- dhcpd -- dnscache -- tinydns -- axfrdns -- ntpd -- arpwatch -- sshd -- openvpn with severe static tunnels -- zebra and bgpd -- vsftpd Only ntop did not start, maybe because of databases incompatibility. This is for check in my virtual environment. Best Regards -- Andrzej Odyniec |
From: Heiko Z. <he...@zu...> - 2012-03-13 13:58:55
|
Andrzej, Quoting Andrzej Odyniec <an...@ma...>: > I wrote: >> As I wrote, Console messages I sent just in case. As I mentioned at >> the end, I >> suspected that your patch fixes the problem. Now I'm building a new version. >> >> I'll let you know when I'll check the result. > > I tested new build last night. Now all interfaces was present and worked > properly (in a short period of time, because after hour I reverted soft to > 32-bit). > > But in real environment under 64-bit worked correct: > > -- dhcpd > -- dnscache > -- tinydns > -- axfrdns > -- ntpd > -- arpwatch > -- sshd > -- openvpn with severe static tunnels > -- zebra and bgpd > -- vsftpd > > Only ntop did not start, maybe because of databases incompatibility. This is > for check in my virtual environment. Thanks for the testing! I'm only aware of 2 other issues, one is that mysql doesn't start after the boot (have to analyze it) and the other one that install-on-usb doesn't support grub2. I'm only intending to fix the mysql issue (don't have enough time for the install-on-usb), then I'll release RC3 or maybe even name it 1.6. -- Regards Heiko Zuerker http://www.devil-linux.org |
From: Heiko Z. <he...@zu...> - 2012-03-07 20:31:32
|
Should we change our iproute2 package to actually install all the binaries into the build system and remove the old version from the "wrong" directories? Heiko Quoting Serge Leschinsky <ser...@gm...>: > Heiko, > > No problem, but I tried with udev and it caused nonworking code in > the repo :( > I need to test the changes in DL (at least 64) before merging... > The case with OpenVPN seems to be more simple though. I'll try to send it > without the verification - I believe Andrzej will do more thoughtful > verification than I can. > > Serge > > > On 03/07/2012 10:41 AM, Heiko Zuerker wrote: >> Serge, >> >> Quoting Serge Leschinsky<ser...@gm...>: >> >>> yes, you are right. I use the following config line: >>> >>> ./configure --prefix=/usr --sysconfdir=/etc >>> --localstatedir=/var >>> --enable-password-save --enable-iproute2 --disable-selinux \ >>> --with-ifconfig-path=/sbin/ifconfig >>> --with-iproute-path=/sbin/ip >>> --with-route-path=/sbin/route || exit 1 >> >> Would you mind merging your changes with what we have in CVS? >> > > > ------------------------------------------------------------------------------ > Virtualization & Cloud Management Using Capacity Planning > Cloud computing makes use of virtualization - but cloud computing > also focuses on allowing computing to be delivered as a service. > http://www.accelacomm.com/jaw/sfnl/114/51521223/ > _______________________________________________ > Devil-linux-develop mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-develop -- Regards Heiko Zuerker http://www.devil-linux.org |