[nf-next/nf_tables8] Unable to compile kernel

[nf-next/nf_tables8] Unable to compile kernel

[Arturo Borrero Gonzalez]

Hi there,

I'm unable to compile the nf-next (branch nf_tables8) kernel:

[...]
  CC      init/version.o
  LD      init/built-in.o
net/built-in.o: In function `nft_exthdr_eval':
/home/aborrero/git/nf-next/net/netfilter/nft_exthdr.c:37: undefined
reference to `ipv6_find_hdr'
net/built-in.o: In function `nft_set_pktinfo_ipv6':
/home/aborrero/git/nf-next/include/net/netfilter/nf_tables_ipv6.h:18:
undefined reference to `ipv6_find_hdr'
/home/aborrero/git/nf-next/include/net/netfilter/nf_tables_ipv6.h:18:
undefined reference to `ipv6_find_hdr'
/home/aborrero/git/nf-next/include/net/netfilter/nf_tables_ipv6.h:18:
undefined reference to `ipv6_find_hdr'
make[2]: *** [vmlinux] Error 1
[...]

This is the code: http://1984.lsi.us.es/git/nf-next/tree/?h=nf_tables8

Could anyone give me some hints of what should I do to fix it?

Regards.

-- 
Arturo Borrero González
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: [nf-next/nf_tables8] Unable to compile kernel

[Pablo Neira Ayuso]

On Mon, Feb 18, 2013 at 05:39:49PM +0100, Arturo Borrero Gonzalez wrote:
> Hi there,
> 
> I'm unable to compile the nf-next (branch nf_tables8) kernel:
> 
> [...]
>   CC      init/version.o
>   LD      init/built-in.o
> net/built-in.o: In function `nft_exthdr_eval':
> /home/aborrero/git/nf-next/net/netfilter/nft_exthdr.c:37: undefined
> reference to `ipv6_find_hdr'
> net/built-in.o: In function `nft_set_pktinfo_ipv6':
> /home/aborrero/git/nf-next/include/net/netfilter/nf_tables_ipv6.h:18:
> undefined reference to `ipv6_find_hdr'
> /home/aborrero/git/nf-next/include/net/netfilter/nf_tables_ipv6.h:18:
> undefined reference to `ipv6_find_hdr'
> /home/aborrero/git/nf-next/include/net/netfilter/nf_tables_ipv6.h:18:
> undefined reference to `ipv6_find_hdr'
> make[2]: *** [vmlinux] Error 1
> [...]
> 
> This is the code: http://1984.lsi.us.es/git/nf-next/tree/?h=nf_tables8
> 
> Could anyone give me some hints of what should I do to fix it?

Did you enable IP6_NF_IPTABLES in .config? That function is defined
there. That dependency will be removed since that function now belongs
to the ipv6 core since recently.

BTW, please use this tree:

http://1984.lsi.us.es/git/nftables/

I will remove the nf_tables8 branch on nf-next asap.

Regards.

Re: [nf-next/nf_tables8] Unable to compile kernel

[Arturo Borrero Gonzalez]

2013/2/18 Pablo Neira Ayuso <pablo@netfilter.org>:
> Did you enable IP6_NF_IPTABLES in .config? That function is defined
> there. That dependency will be removed since that function now belongs
> to the ipv6 core since recently.
>

This is an excerpt of my .config

Shall I change something?

#
# IPv6: Netfilter Configuration
#
CONFIG_NF_DEFRAG_IPV6=m
CONFIG_NF_CONNTRACK_IPV6=m
CONFIG_NF_TABLES_IPV6=y
CONFIG_NFT_CHAIN_ROUTE_IPV6=y
CONFIG_NFT_CHAIN_NAT_IPV6=m
CONFIG_IP6_NF_IPTABLES=m
CONFIG_IP6_NF_MATCH_AH=m
CONFIG_IP6_NF_MATCH_EUI64=m
CONFIG_IP6_NF_MATCH_FRAG=m
CONFIG_IP6_NF_MATCH_OPTS=m
CONFIG_IP6_NF_MATCH_HL=m
CONFIG_IP6_NF_MATCH_IPV6HEADER=m
CONFIG_IP6_NF_MATCH_MH=m
CONFIG_IP6_NF_MATCH_RPFILTER=m
CONFIG_IP6_NF_MATCH_RT=m
CONFIG_IP6_NF_TARGET_HL=m
CONFIG_IP6_NF_FILTER=m
CONFIG_IP6_NF_TARGET_REJECT=m
CONFIG_IP6_NF_MANGLE=m
CONFIG_IP6_NF_RAW=m
CONFIG_IP6_NF_SECURITY=m
CONFIG_NF_NAT_IPV6=m
CONFIG_IP6_NF_TARGET_MASQUERADE=m
CONFIG_IP6_NF_TARGET_NPT=m



> BTW, please use this tree:
>
> http://1984.lsi.us.es/git/nftables/

I'm to use 'nftables' branch. Is this correct?

Regards.


-- 
Arturo Borrero González
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: [nf-next/nf_tables8] Unable to compile kernel

[Arturo Borrero Gonzalez]

2013/2/18 Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>:
> I'm to use 'nftables' branch. Is this correct?
>
> Regards.
>

Also, i'm unable to clone the repo:

~$ git clone git://1984.lsi.us.es/nftables
Cloning into 'nftables'...
fatal: The remote end hung up unexpectedly

Any idea?

-- 
Arturo Borrero González
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: [nf-next/nf_tables8] Unable to compile kernel

[Pablo Neira Ayuso]

On Mon, Feb 18, 2013 at 06:16:21PM +0100, Arturo Borrero Gonzalez wrote:
> 2013/2/18 Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>:
> > I'm to use 'nftables' branch. Is this correct?
> >
> > Regards.
> >
> 
> Also, i'm unable to clone the repo:
> 
> ~$ git clone git://1984.lsi.us.es/nftables
> Cloning into 'nftables'...
> fatal: The remote end hung up unexpectedly
> 
> Any idea?

$ git clone git://1984.lsi.us.es/nftables.git
Cloning into 'nftables'...
Remote: Counting objects: 75738 

Should be working now.

Re: [nf-next/nf_tables8] Unable to compile kernel

[Arturo Borrero Gonzalez]

2013/2/18 Pablo Neira Ayuso <pablo@netfilter.org>:
>
> $ git clone git://1984.lsi.us.es/nftables.git
> Cloning into 'nftables'...
> Remote: Counting objects: 75738
>
> Should be working now.

Ok,

thanks.

-- 
Arturo Borrero González
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: [nf-next/nf_tables8] Unable to compile kernel

[Arturo Borrero Gonzalez]

2013/2/18 Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>:
> 2013/2/18 Pablo Neira Ayuso <pablo@netfilter.org>:
>>
>> $ git clone git://1984.lsi.us.es/nftables.git
>> Cloning into 'nftables'...
>> Remote: Counting objects: 75738
>>
>> Should be working now.

Same problem again on brach "nftables" of sources
http://1984.lsi.us.es/git/nftables/

  CC      init/version.o
  LD      init/built-in.o
net/built-in.o: In function `nft_exthdr_eval':
/home/aborrero/git/nftables/net/netfilter/nft_exthdr.c:37: undefined
reference to `ipv6_find_hdr'
net/built-in.o: In function `nft_set_pktinfo_ipv6':
/home/aborrero/git/nftables/include/net/netfilter/nf_tables_ipv6.h:18:
undefined reference to `ipv6_find_hdr'
/home/aborrero/git/nftables/include/net/netfilter/nf_tables_ipv6.h:18:
undefined reference to `ipv6_find_hdr'
/home/aborrero/git/nftables/include/net/netfilter/nf_tables_ipv6.h:18:
undefined reference to `ipv6_find_hdr'
make[2]: *** [vmlinux] Error 1
make[1]: *** [deb-pkg] Error 2

With .config:

#
# IPv6: Netfilter Configuration
#
CONFIG_NF_DEFRAG_IPV6=m
CONFIG_NF_CONNTRACK_IPV6=m
CONFIG_NF_TABLES_IPV6=y
CONFIG_NFT_CHAIN_ROUTE_IPV6=y
CONFIG_NFT_CHAIN_NAT_IPV6=m
CONFIG_IP6_NF_IPTABLES=m
CONFIG_IP6_NF_MATCH_AH=m
CONFIG_IP6_NF_MATCH_EUI64=m
CONFIG_IP6_NF_MATCH_FRAG=m
CONFIG_IP6_NF_MATCH_OPTS=m
CONFIG_IP6_NF_MATCH_HL=m
CONFIG_IP6_NF_MATCH_IPV6HEADER=m
CONFIG_IP6_NF_MATCH_MH=m
CONFIG_IP6_NF_MATCH_RPFILTER=m
CONFIG_IP6_NF_MATCH_RT=m
CONFIG_IP6_NF_TARGET_HL=m
CONFIG_IP6_NF_FILTER=m
CONFIG_IP6_NF_TARGET_REJECT=m
CONFIG_IP6_NF_MANGLE=m
CONFIG_IP6_NF_RAW=m
CONFIG_IP6_NF_SECURITY=m
CONFIG_NF_NAT_IPV6=m
CONFIG_IP6_NF_TARGET_MASQUERADE=m
CONFIG_IP6_NF_TARGET_NPT=m

any idea?

-- 
Arturo Borrero González
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: [nf-next/nf_tables8] Unable to compile kernel

[Pablo Neira Ayuso]

On Mon, Feb 18, 2013 at 10:00:58PM +0100, Arturo Borrero Gonzalez wrote:
> 2013/2/18 Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>:
> > 2013/2/18 Pablo Neira Ayuso <pablo@netfilter.org>:
> >>
> >> $ git clone git://1984.lsi.us.es/nftables.git
> >> Cloning into 'nftables'...
> >> Remote: Counting objects: 75738
> >>
> >> Should be working now.
> 
> Same problem again on brach "nftables" of sources
> http://1984.lsi.us.es/git/nftables/
> 
>   CC      init/version.o
>   LD      init/built-in.o
> net/built-in.o: In function `nft_exthdr_eval':
> /home/aborrero/git/nftables/net/netfilter/nft_exthdr.c:37: undefined
> reference to `ipv6_find_hdr'
> net/built-in.o: In function `nft_set_pktinfo_ipv6':
> /home/aborrero/git/nftables/include/net/netfilter/nf_tables_ipv6.h:18:
> undefined reference to `ipv6_find_hdr'
> /home/aborrero/git/nftables/include/net/netfilter/nf_tables_ipv6.h:18:
> undefined reference to `ipv6_find_hdr'
> /home/aborrero/git/nftables/include/net/netfilter/nf_tables_ipv6.h:18:
> undefined reference to `ipv6_find_hdr'
> make[2]: *** [vmlinux] Error 1
> make[1]: *** [deb-pkg] Error 2
> 
> With .config:
> 
> #
> # IPv6: Netfilter Configuration
> #
> CONFIG_NF_DEFRAG_IPV6=m
> CONFIG_NF_CONNTRACK_IPV6=m
> CONFIG_NF_TABLES_IPV6=y
                       ^^
Please, try: CONFIG_NF_TABLES_IPV6=m

I don't see CONFIG_NFT_EXTHDR, make sure it's also =m.

This problem will be fixed once nftables is upon 3.8 (currently is
based upon 3.7) with this patch:

commit f8f626754ebeca613cf1af2e6f890cfde0e74d5b
Author: Jesse Gross <jesse@nicira.com>
Date:   Fri Nov 9 17:05:07 2012 -0800

    ipv6: Move ipv6_find_hdr() out of Netfilter code.

So using =m as workaround by now should be just fine.

Please, pass me your full .config in case you still hit problem so I
can reproduce it here.

Thanks.

> CONFIG_NFT_CHAIN_ROUTE_IPV6=y
> CONFIG_NFT_CHAIN_NAT_IPV6=m
> CONFIG_IP6_NF_IPTABLES=m
> CONFIG_IP6_NF_MATCH_AH=m
> CONFIG_IP6_NF_MATCH_EUI64=m
> CONFIG_IP6_NF_MATCH_FRAG=m
> CONFIG_IP6_NF_MATCH_OPTS=m
> CONFIG_IP6_NF_MATCH_HL=m
> CONFIG_IP6_NF_MATCH_IPV6HEADER=m
> CONFIG_IP6_NF_MATCH_MH=m
> CONFIG_IP6_NF_MATCH_RPFILTER=m
> CONFIG_IP6_NF_MATCH_RT=m
> CONFIG_IP6_NF_TARGET_HL=m
> CONFIG_IP6_NF_FILTER=m
> CONFIG_IP6_NF_TARGET_REJECT=m
> CONFIG_IP6_NF_MANGLE=m
> CONFIG_IP6_NF_RAW=m
> CONFIG_IP6_NF_SECURITY=m
> CONFIG_NF_NAT_IPV6=m
> CONFIG_IP6_NF_TARGET_MASQUERADE=m
> CONFIG_IP6_NF_TARGET_NPT=m
> 
> any idea?
> 
> -- 
> Arturo Borrero González
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Re: [nf-next/nf_tables8] Unable to compile kernel

[Arturo Borrero Gonzalez]

2013/2/18 Pablo Neira Ayuso <pablo@netfilter.org>:
> Please, try: CONFIG_NF_TABLES_IPV6=m
>
> I don't see CONFIG_NFT_EXTHDR, make sure it's also =m.
>

Ok, all went fine this time.

thanks.

-- 
Arturo Borrero González
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html