Re: [nf-next/nf_tables8] Unable to compile kernel

[Pablo Neira Ayuso <pablo@netfilter.org>]

On Mon, Feb 18, 2013 at 10:00:58PM +0100, Arturo Borrero Gonzalez wrote:
> 2013/2/18 Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>:
> > 2013/2/18 Pablo Neira Ayuso <pablo@netfilter.org>:
> >>
> >> $ git clone git://1984.lsi.us.es/nftables.git
> >> Cloning into 'nftables'...
> >> Remote: Counting objects: 75738
> >>
> >> Should be working now.
> 
> Same problem again on brach "nftables" of sources
> http://1984.lsi.us.es/git/nftables/
> 
>   CC      init/version.o
>   LD      init/built-in.o
> net/built-in.o: In function `nft_exthdr_eval':
> /home/aborrero/git/nftables/net/netfilter/nft_exthdr.c:37: undefined
> reference to `ipv6_find_hdr'
> net/built-in.o: In function `nft_set_pktinfo_ipv6':
> /home/aborrero/git/nftables/include/net/netfilter/nf_tables_ipv6.h:18:
> undefined reference to `ipv6_find_hdr'
> /home/aborrero/git/nftables/include/net/netfilter/nf_tables_ipv6.h:18:
> undefined reference to `ipv6_find_hdr'
> /home/aborrero/git/nftables/include/net/netfilter/nf_tables_ipv6.h:18:
> undefined reference to `ipv6_find_hdr'
> make[2]: *** [vmlinux] Error 1
> make[1]: *** [deb-pkg] Error 2
> 
> With .config:
> 
> #
> # IPv6: Netfilter Configuration
> #
> CONFIG_NF_DEFRAG_IPV6=m
> CONFIG_NF_CONNTRACK_IPV6=m
> CONFIG_NF_TABLES_IPV6=y
                       ^^
Please, try: CONFIG_NF_TABLES_IPV6=m

I don't see CONFIG_NFT_EXTHDR, make sure it's also =m.

This problem will be fixed once nftables is upon 3.8 (currently is
based upon 3.7) with this patch:

commit f8f626754ebeca613cf1af2e6f890cfde0e74d5b
Author: Jesse Gross <jesse@nicira.com>
Date:   Fri Nov 9 17:05:07 2012 -0800

    ipv6: Move ipv6_find_hdr() out of Netfilter code.

So using =m as workaround by now should be just fine.

Please, pass me your full .config in case you still hit problem so I
can reproduce it here.

Thanks.

> CONFIG_NFT_CHAIN_ROUTE_IPV6=y
> CONFIG_NFT_CHAIN_NAT_IPV6=m
> CONFIG_IP6_NF_IPTABLES=m
> CONFIG_IP6_NF_MATCH_AH=m
> CONFIG_IP6_NF_MATCH_EUI64=m
> CONFIG_IP6_NF_MATCH_FRAG=m
> CONFIG_IP6_NF_MATCH_OPTS=m
> CONFIG_IP6_NF_MATCH_HL=m
> CONFIG_IP6_NF_MATCH_IPV6HEADER=m
> CONFIG_IP6_NF_MATCH_MH=m
> CONFIG_IP6_NF_MATCH_RPFILTER=m
> CONFIG_IP6_NF_MATCH_RT=m
> CONFIG_IP6_NF_TARGET_HL=m
> CONFIG_IP6_NF_FILTER=m
> CONFIG_IP6_NF_TARGET_REJECT=m
> CONFIG_IP6_NF_MANGLE=m
> CONFIG_IP6_NF_RAW=m
> CONFIG_IP6_NF_SECURITY=m
> CONFIG_NF_NAT_IPV6=m
> CONFIG_IP6_NF_TARGET_MASQUERADE=m
> CONFIG_IP6_NF_TARGET_NPT=m
> 
> any idea?
> 
> -- 
> Arturo Borrero González
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html