No iptables support and VPN connections don't work and no linux-image installed?

bholland

Hello All,

I am trying to get a VPN working on the board but it appears to simply fail without any reason given. The exact same configuration works on an ubuntu 16.04 box on my laptop, so I know the configuration is correct.

Also, iptables fails with:

modprobe: ERROR: ../libkmod/libkmod.c:586 kmod_search_moddep() could not open moddep file '/lib/modules/4.4.114/modules.dep.bin'
modprobe: FATAL: Module ip_tables not found in directory /lib/modules/4.4.114
iptables v1.6.0: can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

/lib/modules does not exist. Is iptables compiled in the roc kernel?

Finally, there doesn't appear to be any linux-image package installed. Do you happen to know of a guide where I could update or upgrade the linux kernel that is running on this computer?

Thanks,
~Ben

rufus

Has anybody found a solution for this? I've installed postgreSQL and would like to connect to it from another PC. However, I can't configure the firewall as I'm getting the same error.

rufus

OK, that turned out to be a postgreSQL config issue, which I've been able to resolve. postgreSQL is running fine, now. I would still like to get the firewall/iptables issue resolved, but hopefully that'll be taken care of with an upcoming update.

the_rig

The ubuntu image provided by Libre/Firefly is crap, it misses a lot of kernel modules. I use Armbian now, they more-or-less support the ROK-RK3328-CC.

You can try the Armbian build I made, it's prepared for ipsec. https://www.dropbox.com/s/a2pqliuc2oyc7p3/Armbian_5.41_Roc-rk3328-cc_Ubuntu_xenial_default_4.4.120.img?dl=0

AndyH

That armbian build does not boot the board for me.

ces

@the_rig
Works with flashtool etcher, now asking for roc login, need username and password.
Edit: have it, root 1234 https://docs.armbian.com/User-Guide_Getting-Started/

bholland

Yea. The solution was to recompile the kernel using the firefly git repos. Definitely not an intuitive process. I can post my kernel config file somewhere. It enabled VPN and tables support, which firefly and rock should make standard. It is disingenuous to put out an "ubunutu" build without an attempt at the ubuntu kernel config.

loverpi

Next image from Firefly will have the proper headers for module compilation.

madd2008

Hello,
who can share the image with iptables support?

bholland

Hi Madd. I will post my config file when I get home tonight.

bholland

@loverpi the headers for VPN and iptables are not sufficient. They have to be compiled as modules or baked into the kernel. Otherwise, all you are saying is that you will enable the modules but not build them and force end users to build the kernel themselves anyway. When you include the options in the config file, it should build the modules and you should install the modules as part of the kernel build. It is also a good idea to have a small kernel with many modules that ubuntu can load on demand. Since I only have the 4GB board, I don't know how much ram is reserved for a kernel with everything compiled into it but it probably isn't even that large for a 1GB board.

Basically, you really can't sell "ubuntu" support and not provide the Ubuntu kernel. All you are really providing is a set of packages loosely based around an ubuntu build with a custom rockchip kernel. When you tell people that you are providing an Ubuntu build, they assume an Ubuntu kernel with application support. It might be an old kernel but that is what users will expect.

kibako

Really wish we could get iptables support this is killing me not being able to install docker because of this sheeeeshhhhh

switch

I hope they can release an updated image with iptables and vpn support soon

switch

TINY UPDATE

Corresponded with Libre today and vented about the images missing kernel modules and whatnot, and they told me...

"There's a wait for DRM work to land upstream. Originally Rockchip was planning everything to happen by 4.14 LTS but they missed the merge window on some items. It is mostly merged for 4.17 and we have begun work on integration."

alfie_attack

Is there an ETA on the new images containing the headers? @loverpi
Thanks!

philpulman

Mutamycete said:

You should definitely stop using this VPN. I went through a similar phase in my life when I had to use a horrible VPN, but I was lucky enough to find a solution. 2-3 months ago, I had to find a new VPN for work, and I couldn’t find anything worthy. Eventually, I found a website bestvpnprovider.co that had had reviews on the best VPN providers. I decided to give it a shot, and I wasn’t disappointed. I chose the best option, and now I’m really happy with my choice. I can easily recommend it to everyone who is facing a similar problem and I am sure that everyone will be able to find a good provider.

another link...

AlleeDreap

You most likely need a different VPN.

JodiReachy

Maybe you need to try something different to this VPN. I can recommend you use a Turkish proxy. In my opinion, proxy servers are better than VPNs. You just need to find the best proxy service. I am an SEO expert, and I always have clients from different countries, so I always have to use different proxy servers to analyse their websites normally. I always connect on servers in different countries, and I never had problems with the proxy servers. Also, the Internet speed is very good, and I like that it loads the webpages momentaneously without any problems.