* [nf-next/nf_tables8] Unable to compile kernel
@ 2013-02-18 16:39 Arturo Borrero Gonzalez
2013-02-18 16:59 ` Pablo Neira Ayuso
0 siblings, 1 reply; 9+ messages in thread
From: Arturo Borrero Gonzalez @ 2013-02-18 16:39 UTC (permalink / raw)
To: netfilter-devel; +Cc: Pablo Neira Ayuso
Hi there,
I'm unable to compile the nf-next (branch nf_tables8) kernel:
[...]
CC init/version.o
LD init/built-in.o
net/built-in.o: In function `nft_exthdr_eval':
/home/aborrero/git/nf-next/net/netfilter/nft_exthdr.c:37: undefined
reference to `ipv6_find_hdr'
net/built-in.o: In function `nft_set_pktinfo_ipv6':
/home/aborrero/git/nf-next/include/net/netfilter/nf_tables_ipv6.h:18:
undefined reference to `ipv6_find_hdr'
/home/aborrero/git/nf-next/include/net/netfilter/nf_tables_ipv6.h:18:
undefined reference to `ipv6_find_hdr'
/home/aborrero/git/nf-next/include/net/netfilter/nf_tables_ipv6.h:18:
undefined reference to `ipv6_find_hdr'
make[2]: *** [vmlinux] Error 1
[...]
This is the code: http://1984.lsi.us.es/git/nf-next/tree/?h=nf_tables8
Could anyone give me some hints of what should I do to fix it?
Regards.
--
Arturo Borrero González
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
^ permalink raw reply [flat|nested] 9+ messages in thread
* Re: [nf-next/nf_tables8] Unable to compile kernel
2013-02-18 16:39 [nf-next/nf_tables8] Unable to compile kernel Arturo Borrero Gonzalez
@ 2013-02-18 16:59 ` Pablo Neira Ayuso
2013-02-18 17:04 ` Arturo Borrero Gonzalez
0 siblings, 1 reply; 9+ messages in thread
From: Pablo Neira Ayuso @ 2013-02-18 16:59 UTC (permalink / raw)
To: Arturo Borrero Gonzalez; +Cc: netfilter-devel
On Mon, Feb 18, 2013 at 05:39:49PM +0100, Arturo Borrero Gonzalez wrote:
> Hi there,
>
> I'm unable to compile the nf-next (branch nf_tables8) kernel:
>
> [...]
> CC init/version.o
> LD init/built-in.o
> net/built-in.o: In function `nft_exthdr_eval':
> /home/aborrero/git/nf-next/net/netfilter/nft_exthdr.c:37: undefined
> reference to `ipv6_find_hdr'
> net/built-in.o: In function `nft_set_pktinfo_ipv6':
> /home/aborrero/git/nf-next/include/net/netfilter/nf_tables_ipv6.h:18:
> undefined reference to `ipv6_find_hdr'
> /home/aborrero/git/nf-next/include/net/netfilter/nf_tables_ipv6.h:18:
> undefined reference to `ipv6_find_hdr'
> /home/aborrero/git/nf-next/include/net/netfilter/nf_tables_ipv6.h:18:
> undefined reference to `ipv6_find_hdr'
> make[2]: *** [vmlinux] Error 1
> [...]
>
> This is the code: http://1984.lsi.us.es/git/nf-next/tree/?h=nf_tables8
>
> Could anyone give me some hints of what should I do to fix it?
Did you enable IP6_NF_IPTABLES in .config? That function is defined
there. That dependency will be removed since that function now belongs
to the ipv6 core since recently.
BTW, please use this tree:
http://1984.lsi.us.es/git/nftables/
I will remove the nf_tables8 branch on nf-next asap.
Regards.
^ permalink raw reply [flat|nested] 9+ messages in thread
* Re: [nf-next/nf_tables8] Unable to compile kernel
2013-02-18 16:59 ` Pablo Neira Ayuso
@ 2013-02-18 17:04 ` Arturo Borrero Gonzalez
2013-02-18 17:16 ` Arturo Borrero Gonzalez
0 siblings, 1 reply; 9+ messages in thread
From: Arturo Borrero Gonzalez @ 2013-02-18 17:04 UTC (permalink / raw)
To: Pablo Neira Ayuso; +Cc: netfilter-devel
2013/2/18 Pablo Neira Ayuso <pablo@netfilter.org>:
> Did you enable IP6_NF_IPTABLES in .config? That function is defined
> there. That dependency will be removed since that function now belongs
> to the ipv6 core since recently.
>
This is an excerpt of my .config
Shall I change something?
#
# IPv6: Netfilter Configuration
#
CONFIG_NF_DEFRAG_IPV6=m
CONFIG_NF_CONNTRACK_IPV6=m
CONFIG_NF_TABLES_IPV6=y
CONFIG_NFT_CHAIN_ROUTE_IPV6=y
CONFIG_NFT_CHAIN_NAT_IPV6=m
CONFIG_IP6_NF_IPTABLES=m
CONFIG_IP6_NF_MATCH_AH=m
CONFIG_IP6_NF_MATCH_EUI64=m
CONFIG_IP6_NF_MATCH_FRAG=m
CONFIG_IP6_NF_MATCH_OPTS=m
CONFIG_IP6_NF_MATCH_HL=m
CONFIG_IP6_NF_MATCH_IPV6HEADER=m
CONFIG_IP6_NF_MATCH_MH=m
CONFIG_IP6_NF_MATCH_RPFILTER=m
CONFIG_IP6_NF_MATCH_RT=m
CONFIG_IP6_NF_TARGET_HL=m
CONFIG_IP6_NF_FILTER=m
CONFIG_IP6_NF_TARGET_REJECT=m
CONFIG_IP6_NF_MANGLE=m
CONFIG_IP6_NF_RAW=m
CONFIG_IP6_NF_SECURITY=m
CONFIG_NF_NAT_IPV6=m
CONFIG_IP6_NF_TARGET_MASQUERADE=m
CONFIG_IP6_NF_TARGET_NPT=m
> BTW, please use this tree:
>
> http://1984.lsi.us.es/git/nftables/
I'm to use 'nftables' branch. Is this correct?
Regards.
--
Arturo Borrero González
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
^ permalink raw reply [flat|nested] 9+ messages in thread
* Re: [nf-next/nf_tables8] Unable to compile kernel
2013-02-18 17:04 ` Arturo Borrero Gonzalez
@ 2013-02-18 17:16 ` Arturo Borrero Gonzalez
2013-02-18 17:28 ` Pablo Neira Ayuso
0 siblings, 1 reply; 9+ messages in thread
From: Arturo Borrero Gonzalez @ 2013-02-18 17:16 UTC (permalink / raw)
To: Pablo Neira Ayuso; +Cc: netfilter-devel
2013/2/18 Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>:
> I'm to use 'nftables' branch. Is this correct?
>
> Regards.
>
Also, i'm unable to clone the repo:
~$ git clone git://1984.lsi.us.es/nftables
Cloning into 'nftables'...
fatal: The remote end hung up unexpectedly
Any idea?
--
Arturo Borrero González
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
^ permalink raw reply [flat|nested] 9+ messages in thread
* Re: [nf-next/nf_tables8] Unable to compile kernel
2013-02-18 17:16 ` Arturo Borrero Gonzalez
@ 2013-02-18 17:28 ` Pablo Neira Ayuso
2013-02-18 17:41 ` Arturo Borrero Gonzalez
0 siblings, 1 reply; 9+ messages in thread
From: Pablo Neira Ayuso @ 2013-02-18 17:28 UTC (permalink / raw)
To: Arturo Borrero Gonzalez; +Cc: netfilter-devel
On Mon, Feb 18, 2013 at 06:16:21PM +0100, Arturo Borrero Gonzalez wrote:
> 2013/2/18 Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>:
> > I'm to use 'nftables' branch. Is this correct?
> >
> > Regards.
> >
>
> Also, i'm unable to clone the repo:
>
> ~$ git clone git://1984.lsi.us.es/nftables
> Cloning into 'nftables'...
> fatal: The remote end hung up unexpectedly
>
> Any idea?
$ git clone git://1984.lsi.us.es/nftables.git
Cloning into 'nftables'...
Remote: Counting objects: 75738
Should be working now.
^ permalink raw reply [flat|nested] 9+ messages in thread
* Re: [nf-next/nf_tables8] Unable to compile kernel
2013-02-18 17:28 ` Pablo Neira Ayuso
@ 2013-02-18 17:41 ` Arturo Borrero Gonzalez
2013-02-18 21:00 ` Arturo Borrero Gonzalez
0 siblings, 1 reply; 9+ messages in thread
From: Arturo Borrero Gonzalez @ 2013-02-18 17:41 UTC (permalink / raw)
To: Pablo Neira Ayuso; +Cc: netfilter-devel
2013/2/18 Pablo Neira Ayuso <pablo@netfilter.org>:
>
> $ git clone git://1984.lsi.us.es/nftables.git
> Cloning into 'nftables'...
> Remote: Counting objects: 75738
>
> Should be working now.
Ok,
thanks.
--
Arturo Borrero González
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
^ permalink raw reply [flat|nested] 9+ messages in thread
* Re: [nf-next/nf_tables8] Unable to compile kernel
2013-02-18 17:41 ` Arturo Borrero Gonzalez
@ 2013-02-18 21:00 ` Arturo Borrero Gonzalez
2013-02-18 22:08 ` Pablo Neira Ayuso
0 siblings, 1 reply; 9+ messages in thread
From: Arturo Borrero Gonzalez @ 2013-02-18 21:00 UTC (permalink / raw)
To: Pablo Neira Ayuso; +Cc: netfilter-devel
2013/2/18 Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>:
> 2013/2/18 Pablo Neira Ayuso <pablo@netfilter.org>:
>>
>> $ git clone git://1984.lsi.us.es/nftables.git
>> Cloning into 'nftables'...
>> Remote: Counting objects: 75738
>>
>> Should be working now.
Same problem again on brach "nftables" of sources
http://1984.lsi.us.es/git/nftables/
CC init/version.o
LD init/built-in.o
net/built-in.o: In function `nft_exthdr_eval':
/home/aborrero/git/nftables/net/netfilter/nft_exthdr.c:37: undefined
reference to `ipv6_find_hdr'
net/built-in.o: In function `nft_set_pktinfo_ipv6':
/home/aborrero/git/nftables/include/net/netfilter/nf_tables_ipv6.h:18:
undefined reference to `ipv6_find_hdr'
/home/aborrero/git/nftables/include/net/netfilter/nf_tables_ipv6.h:18:
undefined reference to `ipv6_find_hdr'
/home/aborrero/git/nftables/include/net/netfilter/nf_tables_ipv6.h:18:
undefined reference to `ipv6_find_hdr'
make[2]: *** [vmlinux] Error 1
make[1]: *** [deb-pkg] Error 2
With .config:
#
# IPv6: Netfilter Configuration
#
CONFIG_NF_DEFRAG_IPV6=m
CONFIG_NF_CONNTRACK_IPV6=m
CONFIG_NF_TABLES_IPV6=y
CONFIG_NFT_CHAIN_ROUTE_IPV6=y
CONFIG_NFT_CHAIN_NAT_IPV6=m
CONFIG_IP6_NF_IPTABLES=m
CONFIG_IP6_NF_MATCH_AH=m
CONFIG_IP6_NF_MATCH_EUI64=m
CONFIG_IP6_NF_MATCH_FRAG=m
CONFIG_IP6_NF_MATCH_OPTS=m
CONFIG_IP6_NF_MATCH_HL=m
CONFIG_IP6_NF_MATCH_IPV6HEADER=m
CONFIG_IP6_NF_MATCH_MH=m
CONFIG_IP6_NF_MATCH_RPFILTER=m
CONFIG_IP6_NF_MATCH_RT=m
CONFIG_IP6_NF_TARGET_HL=m
CONFIG_IP6_NF_FILTER=m
CONFIG_IP6_NF_TARGET_REJECT=m
CONFIG_IP6_NF_MANGLE=m
CONFIG_IP6_NF_RAW=m
CONFIG_IP6_NF_SECURITY=m
CONFIG_NF_NAT_IPV6=m
CONFIG_IP6_NF_TARGET_MASQUERADE=m
CONFIG_IP6_NF_TARGET_NPT=m
any idea?
--
Arturo Borrero González
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
^ permalink raw reply [flat|nested] 9+ messages in thread
* Re: [nf-next/nf_tables8] Unable to compile kernel
2013-02-18 21:00 ` Arturo Borrero Gonzalez
@ 2013-02-18 22:08 ` Pablo Neira Ayuso
2013-02-18 23:12 ` Arturo Borrero Gonzalez
0 siblings, 1 reply; 9+ messages in thread
From: Pablo Neira Ayuso @ 2013-02-18 22:08 UTC (permalink / raw)
To: Arturo Borrero Gonzalez; +Cc: netfilter-devel
On Mon, Feb 18, 2013 at 10:00:58PM +0100, Arturo Borrero Gonzalez wrote:
> 2013/2/18 Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>:
> > 2013/2/18 Pablo Neira Ayuso <pablo@netfilter.org>:
> >>
> >> $ git clone git://1984.lsi.us.es/nftables.git
> >> Cloning into 'nftables'...
> >> Remote: Counting objects: 75738
> >>
> >> Should be working now.
>
> Same problem again on brach "nftables" of sources
> http://1984.lsi.us.es/git/nftables/
>
> CC init/version.o
> LD init/built-in.o
> net/built-in.o: In function `nft_exthdr_eval':
> /home/aborrero/git/nftables/net/netfilter/nft_exthdr.c:37: undefined
> reference to `ipv6_find_hdr'
> net/built-in.o: In function `nft_set_pktinfo_ipv6':
> /home/aborrero/git/nftables/include/net/netfilter/nf_tables_ipv6.h:18:
> undefined reference to `ipv6_find_hdr'
> /home/aborrero/git/nftables/include/net/netfilter/nf_tables_ipv6.h:18:
> undefined reference to `ipv6_find_hdr'
> /home/aborrero/git/nftables/include/net/netfilter/nf_tables_ipv6.h:18:
> undefined reference to `ipv6_find_hdr'
> make[2]: *** [vmlinux] Error 1
> make[1]: *** [deb-pkg] Error 2
>
> With .config:
>
> #
> # IPv6: Netfilter Configuration
> #
> CONFIG_NF_DEFRAG_IPV6=m
> CONFIG_NF_CONNTRACK_IPV6=m
> CONFIG_NF_TABLES_IPV6=y
^^
Please, try: CONFIG_NF_TABLES_IPV6=m
I don't see CONFIG_NFT_EXTHDR, make sure it's also =m.
This problem will be fixed once nftables is upon 3.8 (currently is
based upon 3.7) with this patch:
commit f8f626754ebeca613cf1af2e6f890cfde0e74d5b
Author: Jesse Gross <jesse@nicira.com>
Date: Fri Nov 9 17:05:07 2012 -0800
ipv6: Move ipv6_find_hdr() out of Netfilter code.
So using =m as workaround by now should be just fine.
Please, pass me your full .config in case you still hit problem so I
can reproduce it here.
Thanks.
> CONFIG_NFT_CHAIN_ROUTE_IPV6=y
> CONFIG_NFT_CHAIN_NAT_IPV6=m
> CONFIG_IP6_NF_IPTABLES=m
> CONFIG_IP6_NF_MATCH_AH=m
> CONFIG_IP6_NF_MATCH_EUI64=m
> CONFIG_IP6_NF_MATCH_FRAG=m
> CONFIG_IP6_NF_MATCH_OPTS=m
> CONFIG_IP6_NF_MATCH_HL=m
> CONFIG_IP6_NF_MATCH_IPV6HEADER=m
> CONFIG_IP6_NF_MATCH_MH=m
> CONFIG_IP6_NF_MATCH_RPFILTER=m
> CONFIG_IP6_NF_MATCH_RT=m
> CONFIG_IP6_NF_TARGET_HL=m
> CONFIG_IP6_NF_FILTER=m
> CONFIG_IP6_NF_TARGET_REJECT=m
> CONFIG_IP6_NF_MANGLE=m
> CONFIG_IP6_NF_RAW=m
> CONFIG_IP6_NF_SECURITY=m
> CONFIG_NF_NAT_IPV6=m
> CONFIG_IP6_NF_TARGET_MASQUERADE=m
> CONFIG_IP6_NF_TARGET_NPT=m
>
> any idea?
>
> --
> Arturo Borrero González
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
^ permalink raw reply [flat|nested] 9+ messages in thread
* Re: [nf-next/nf_tables8] Unable to compile kernel
2013-02-18 22:08 ` Pablo Neira Ayuso
@ 2013-02-18 23:12 ` Arturo Borrero Gonzalez
0 siblings, 0 replies; 9+ messages in thread
From: Arturo Borrero Gonzalez @ 2013-02-18 23:12 UTC (permalink / raw)
To: Pablo Neira Ayuso; +Cc: netfilter-devel
2013/2/18 Pablo Neira Ayuso <pablo@netfilter.org>:
> Please, try: CONFIG_NF_TABLES_IPV6=m
>
> I don't see CONFIG_NFT_EXTHDR, make sure it's also =m.
>
Ok, all went fine this time.
thanks.
--
Arturo Borrero González
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
^ permalink raw reply [flat|nested] 9+ messages in thread
end of thread, other threads:[~2013-02-18 23:12 UTC | newest]
Thread overview: 9+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2013-02-18 16:39 [nf-next/nf_tables8] Unable to compile kernel Arturo Borrero Gonzalez
2013-02-18 16:59 ` Pablo Neira Ayuso
2013-02-18 17:04 ` Arturo Borrero Gonzalez
2013-02-18 17:16 ` Arturo Borrero Gonzalez
2013-02-18 17:28 ` Pablo Neira Ayuso
2013-02-18 17:41 ` Arturo Borrero Gonzalez
2013-02-18 21:00 ` Arturo Borrero Gonzalez
2013-02-18 22:08 ` Pablo Neira Ayuso
2013-02-18 23:12 ` Arturo Borrero Gonzalez
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.