[WireGuard] wireguard on gentoo (4.6.3)

[WireGuard] wireguard on gentoo (4.6.3)

[Michael Gerlach]

[-- Attachment #1: Type: text/plain, Size: 1405 bytes --]

Hey guys!

I tried to test wireguard on my gentoo machine running on kernel 4.6.3.
I followed the instructions on https://www.wireguard.io/install/ and
used the ebuild net-misc/wireguard-0.0.20160630.

I am not able to load the module - in dmesg this shows up:

[  126.576087] wireguard: no symbol version for udp_sock_create4
[  126.576092] wireguard: Unknown symbol udp_sock_create4 (err -22)
[  126.576113] wireguard: no symbol version for udp_tunnel6_xmit_skb
[  126.576115] wireguard: Unknown symbol udp_tunnel6_xmit_skb (err -22)
[  126.576170] wireguard: no symbol version for xt_request_find_match
[  126.576172] wireguard: Unknown symbol xt_request_find_match (err -22)
[  126.576282] wireguard: no symbol version for udp_tunnel_sock_release
[  126.576284] wireguard: Unknown symbol udp_tunnel_sock_release (err
-22)
[  126.576302] wireguard: no symbol version for setup_udp_tunnel_sock
[  126.576304] wireguard: Unknown symbol setup_udp_tunnel_sock (err -22)
[  126.576308] wireguard: no symbol version for udp_sock_create6
[  126.576310] wireguard: Unknown symbol udp_sock_create6 (err -22)
[  126.576340] wireguard: no symbol version for udp_tunnel_xmit_skb
[  126.576342] wireguard: Unknown symbol udp_tunnel_xmit_skb (err -22)

Any hints to get further on this?

best regards,


n3ph

-- 
Please use PGP - https://en.wikipedia.org/wiki/Pretty_Good_Privacy


[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 473 bytes --]

Re: [WireGuard] wireguard on gentoo (4.6.3)

[Jason A. Donenfeld]

Your kernel is missing CONFIG_NET_UDP_TUNNEL. For instructions on how
to enable it, see this section:

https://www.wireguard.io/install/#kernel-requirements

Re: [WireGuard] wireguard on gentoo (4.6.3)

[Jens Viisauksena]

On 05.07.2016 01:45, Jason A. Donenfeld wrote:
> Your kernel is missing CONFIG_NET_UDP_TUNNEL. For instructions on how

i was sitting right next to him - while i installed it on debian 4.4.6
kernel quiet easy.

we have done all the stuff mentioned, but with his 4.6.3 kernel some of
the namespaces changes slightly - thats what we guessed.
we tryd to build it as module and to build it fix inside kernel -
everytime with reboot - just in case.

the ebuild (ebuild net-misc/wireguard-0.0.20160630 ) runs smoothly with
all the hints from install page, so building was successfull but a
modprobe failed.

maybe he describe this in a deeper way way tomorrow , but if you have a
hint beyond that, that would be awesome

thx, greetz - jens

Re: [WireGuard] wireguard on gentoo (4.6.3)

[Jason A. Donenfeld]

Hey Jens,

He sent me another message offlist, so I replied offlist. I suspect,
from the dmesg he sent, that it actually might be an issue with
CONFIG_MODVERSIONS, so I suggested disabling this option, as a test.

Jason

Re: [WireGuard] wireguard on gentoo (4.6.3)

[Michael Gerlach]

[-- Attachment #1: Type: text/plain, Size: 1685 bytes --]

Ah! I wasn't looking closely enough to the headers.. The maillist is in CC.. I always
use List-Reply, which wasn't working so i guessed you already wrote
offlist so i replied directly.. :) 

I already tried to disable CONFIG_MODVERSIONS - which turned out to make
things get weired since mykernel was not starting anymore...  But I will
give it a try and have a look at it again.

Just for the details:

[01:50:36][n3ph@c3po:~][master]# zcat /proc/config.gz | grep -e
CONFIG_NET_UDP_TUNNEL -e CONFIG_IPV6 -e
CONFIG_NETFILTER_XT_MATCH_HASHLIMIT -e CONFIG_PADATA
CONFIG_PADATA=y
CONFIG_NET_UDP_TUNNEL=y
CONFIG_IPV6=y
CONFIG_IPV6_ROUTER_PREF=y
# CONFIG_IPV6_ROUTE_INFO is not set
# CONFIG_IPV6_OPTIMISTIC_DAD is not set
# CONFIG_IPV6_MIP6 is not set
# CONFIG_IPV6_ILA is not set
# CONFIG_IPV6_VTI is not set
CONFIG_IPV6_SIT=m
# CONFIG_IPV6_SIT_6RD is not set
CONFIG_IPV6_NDISC_NODETYPE=y
CONFIG_IPV6_TUNNEL=m
# CONFIG_IPV6_GRE is not set
# CONFIG_IPV6_MULTIPLE_TABLES is not set
# CONFIG_IPV6_MROUTE is not set
CONFIG_NETFILTER_XT_MATCH_HASHLIMIT=y
[01:50:37][n3ph@c3po:~][master]#

best regards,

n3ph


On Tue, Jul 05, 2016 at 01:54:13AM +0200, Jason A. Donenfeld wrote:
> Hey Jens,
> 
> He sent me another message offlist, so I replied offlist. I suspect,
> from the dmesg he sent, that it actually might be an issue with
> CONFIG_MODVERSIONS, so I suggested disabling this option, as a test.
> 
> Jason
> _______________________________________________
> WireGuard mailing list
> WireGuard@lists.zx2c4.com
> http://lists.zx2c4.com/mailman/listinfo/wireguard

-- 
Please use PGP - https://en.wikipedia.org/wiki/Pretty_Good_Privacy


[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 473 bytes --]

Re: [WireGuard] wireguard on gentoo (4.6.3)

[Jason A. Donenfeld]

Hey Michael,

There might be some other weirdness happening, then, with your kernel
tree. Perhaps the compiler changed in curious ways, or sources got
mixed around.

You might benefit from running something like:

# cd /usr/src/linux
# mount /boot
# cp .config ../backup-config
# make mrproper
# mv ../backup-config .
# make oldconfig
# make -j$(nproc)
# make -j$(nproc) modules
# make install
# make modules_install
# reboot

That should give you something perhaps a bit more clean. Then, once
that's running, try emerging wireguard again.

Jason

Re: [WireGuard] wireguard on gentoo (4.6.3)

[Jason A. Donenfeld]

Oops:

# mv ../backup-config .

-->

# mv ../backup-config .config

Re: [WireGuard] wireguard on gentoo (4.6.3)

[Michael Gerlach]

[-- Attachment #1: Type: text/plain, Size: 1346 bytes --]

Everythings fine - thanks for the hints.. I really do not know what went
wrong but now i have the kernel running without MOD_VERSIONING.
I recompiled the module and its working fine now..

[  277.546618] wireguard: WireGuard loaded. See www.wireguard.io for
information.
[  277.546622] wireguard: (C) Copyright 2015-2016 Jason A. Donenfeld
<Jason@zx2c4.com>. All Rights Reserved.

I will now retry this with MOD_VERSIONING - i guess i just forget to
recompile the module after altering the kernel accordingly for the
dependencies.. 



best regards,

n3ph



On Tue, Jul 05, 2016 at 02:14:18AM +0200, Jason A. Donenfeld wrote:
> Hey Michael,
> 
> There might be some other weirdness happening, then, with your kernel
> tree. Perhaps the compiler changed in curious ways, or sources got
> mixed around.
> 
> You might benefit from running something like:
> 
> # cd /usr/src/linux
> # mount /boot
> # cp .config ../backup-config
> # make mrproper
> # mv ../backup-config .
> # make oldconfig
> # make -j$(nproc)
> # make -j$(nproc) modules
> # make install
> # make modules_install
> # reboot
> 
> That should give you something perhaps a bit more clean. Then, once
> that's running, try emerging wireguard again.
> 
> Jason

-- 
Please use PGP - https://en.wikipedia.org/wiki/Pretty_Good_Privacy


[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 473 bytes --]

Re: [WireGuard] wireguard on gentoo (4.6.3)

[Jason A. Donenfeld]

Hey Michael,

Hooray! Glad to hear it works now.

Jason

Re: [WireGuard] wireguard on gentoo (4.6.3)

[Michael Gerlach]

[-- Attachment #1: Type: text/plain, Size: 442 bytes --]

Hey Jason,

it really seems like i simply forgot to recompile the module... Now with
CONFIG_MODVERSION enabled and recompiled ebuild the module is loading
fine.. 

Sorry for the noise.. 

best regards,


n3ph


On Tue, Jul 05, 2016 at 02:20:36AM +0200, Jason A. Donenfeld wrote:
> Hey Michael,
> 
> Hooray! Glad to hear it works now.
> 
> Jason

-- 
Please use PGP - https://en.wikipedia.org/wiki/Pretty_Good_Privacy


[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 473 bytes --]

Re: [WireGuard] wireguard on gentoo (4.6.3)

[Jason A. Donenfeld]

No problem.

Let me know how your experiments with WireGuard go. Would be
interested in all sorts of feedback from you and Jens.

Jason