Modify

Opened 8 years ago

Closed 7 years ago

Last modified 4 years ago

#5849 closed defect (fixed)

missing kernel modules, patches inside

Reported by: Thomas Jansen <mithi@…> Owned by: hauke
Priority: normal Milestone: Barrier Breaker 14.07
Component: kernel Version: Trunk
Keywords: Cc:

Description

Background:

I'm currently trying to run hipl on OpenWRT on ASUS WL-500W. Therefore I'm using the BCM947xx target, which has kernel version 2.6.28 as default. hipl makes extensive use of IPsec and needs some rarely used kernel modules.

Request:

I've created some patches to add missing kernel modules to packages I would expect them in. However I'm no expert on kernel configuration and the kmod Makefiles. The patches have a "worksforme" quality and should be reviewed with other kernel versions than 2.6.28 in mind. While netdevides.mk.patch is straightforward and only an enhancement, the other two patches should be considered bug fixes, as dependencies are missing. If you come to the same conclusion as I did please add them (or some other workaround, if thy don't meet your standards) to SVN.

Reasoning:

netdevices.mk.patch: Added a new kmod package for the dummy network interface. Not a bug, but an enhancement.

crypto.mk.patch: The crypto-core package defines CONFIG_CRYPTO_BLKCIPHER2, which leads to three kernel modules (see linux/crypto/Makefile: crypto_blkcipher.ko, chainiv.ko, eseqiv.ko). Only crypto_blkcipher.ko is added to the package, although all three are built. I therefore added the other two to the list.

The second bug is a dependency (CONFIG_CRYPTO_RNG2), that is introduced by CONFIG_CRYPTO_BLKCIPHER2 (see linux/crypto/Kconfig). It produces two kernel modules (rng.ko, krng.ko), that aren't in the list of packaged files. I added them as well.

netsupport.mk.patch: ipcomp and ipcomp6 are part of ipsec4 and ipsec6. Both rely on xfrm_ipcomp. Even though xfrm_ipcomp is built as a dependency, it is not packaged. I decided to add it to kmod-ipsec, as both kmod-ipsec4 and kmod-ipsec6 depend on kmod-ipsec and it's probably not a good idea to add xfrm_ipcomp to both packages.

Attachments (3)

crypto.mk.patch (854 bytes) - added by Thomas Jansen <mithi@…> 8 years ago.
patch for crypto kernel modules
netdevices.mk.patch (672 bytes) - added by Thomas Jansen <mithi@…> 8 years ago.
patch for network device kernel modules
netsupport.mk.patch (716 bytes) - added by Thomas Jansen <mithi@…> 8 years ago.
patch for network support kernel modules

Download all attachments as: .zip

Change History (10)

Changed 8 years ago by Thomas Jansen <mithi@…>

patch for crypto kernel modules

Changed 8 years ago by Thomas Jansen <mithi@…>

patch for network device kernel modules

Changed 8 years ago by Thomas Jansen <mithi@…>

patch for network support kernel modules

comment:1 Changed 8 years ago by anonymous

I believe that, are least, netsupport.mk.patch should be included inside trunk and kamikaze 8.09.2 release!

When i try to set up ipsec rules I get:

# setkey -c
add 192.168.1.1 192.168.1.130 esp 0987654321 -E des-cbc 0x2765af98de98761f ;
Protocol not supported.
^C

using strace you can see:

read(0, add 192.168.1.1 192.168.1.130 esp 0987654321 -E des-cbc 0x2765af98de98761f ;
"add 192.168.1.1 192.168.1.130 es"..., 4096) = 77
getpid()                                = 11373
setsockopt(3, SOL_SOCKET, SO_RCVTIMEO, "\0\0\0\1\0\0\0\0", 8) = 0
send(3, "\2\3\0\3\0\16\0\0\0\0\0\0\0\0,m\0\2\0\t\0@\0\0\'e\257\230\336\230v\37"..., 112, 0) = 112
recv(3, "\2\3x\3\0\2\0\0\0\0\0\0\0\0,m", 32768, 0) = 16
write(1, "Protocol not supported.\n", 24Protocol not supported.
) = 24

comment:2 Changed 8 years ago by blackmole <openwrt@…>

xfrm_ipcomp should really be included in a package, like netsupport does. Right now, you need to compile it yourself to get it working, and then copy it manually.
I also need kmod-crypto-authenc, not sure if it is for racoon or kmod-ipsec, for one of them, a dependency should be added.

comment:3 Changed 8 years ago by hauke

  • Owner changed from developers to hauke
  • Status changed from new to assigned

comment:4 Changed 7 years ago by hauke

xfrm_ipcomp was applied some time ago and the dummy netdevice was added in r24272.

Please change the crypto patch, so that the new modules are included in an extra package.

comment:5 Changed 7 years ago by Diego Biurrun <diego@…>

It appears that the crypto.mk patch is no longer necessary, we dropped it locally. I am the original reporter's coworker. You may wish to close this issue.

comment:6 Changed 7 years ago by hauke

  • Resolution set to fixed
  • Status changed from assigned to closed

Thank you for reporting and providing the patches.

Some parts are applied in r24272, the rest is not necessary any more.

comment:7 Changed 4 years ago by jow

  • Milestone changed from Attitude Adjustment 12.09 to Barrier Breaker 14.07

Milestone Attitude Adjustment 12.09 deleted

Add Comment

Modify Ticket

Action
as closed .
The resolution will be deleted. Next status will be 'reopened'.
Author


E-mail address and user name can be saved in the Preferences.

 
Note: See TracTickets for help on using tickets.