配置UFW时提示`Module ip6_tables not found`

Chip Platform Rockchip
1

固件类型：官方提供的固件
固件文件名称：ROC-RK3399-PC_Ubuntu20.04-Gnome-r21156_v2.5.1b_220
固件下载地址：ROC-RK3399-PC_Ubuntu20.04-Gnome-r21156_v2.5.1b_220528.7z
Log日志：ufw-allow-failed.zip

问题和复现步骤：

  1. 烧录固件到SD卡
  2. sudo apt install ufw -y && sudo ufw default allow后，执行sudo ufw allow ssh 会提示如下：
<div>firefly@firefly:~$ sudo ufw allow http</div><div>ERROR: initcaps</div><div>[Errno 2] modprobe: FATAL: Module ip6_tables not found in directory /lib/modules/4.4.194+</div><div>ip6tables v1.8.4 (legacy): can't initialize ip6tables table `filter': Table does not exist (do you need to insmod?)</div><div>Perhaps ip6tables or your kernel needs to be upgraded.</div>

请问有人遇到这个问题么，如何解决的？

在其他的如下固件中，也遇到了该问题：

  • ROC-RK3399-PC_Ubuntu20.04-Minimal-r21156_v2.5.1b_220528
  • ROC-RK3399-PC_Ubuntu18.04-Minimal-r21156_v2.5.1b_220528
  • ROC-RK3399-PC_Ubuntu18.04-r21156_v2.5.1b_220528

谢谢~
tchip_askquestions
ufw-allow-failed.zip (1.31 KB)

2

需要在内核里开启 ip tables 相关选项
https://wiki.t-firefly.com/Core-3568J/kernel_introduction.html#kernel-shi-yong
这个是356x的维基，但3399同理的

3

Liuth 发表于 2022-9-28 09:36
需要在内核里开启 ip tables 相关选项
https://wiki.t-firefly.com/Core-3568J/kernel_introduction.html# …

谢谢~
参照说明，能编译生成 resource.img 和 kernel.img。
看到官方的烧录说明，是用内置eMMC存储才能烧录这两个分区？

有办法编译成.deb文件么？ 试过执行 ./build.sh kerneldeb ，但输出如下：

firefly@firefly:~/proj$ ./build.sh kerneldeb
processing option: kerneldeb
============Start building kernel deb============
TARGET_ARCH          =arm64
TARGET_KERNEL_CONFIG =firefly_roc-rk3399-pc_defconfig
TARGET_KERNEL_DTS    =rk3399-roc-pc
TARGET_KERNEL_CONFIG_FRAGMENT =
==========================================
/home/firefly/proj
\#
\# configuration written to .config
\#
scripts/kconfig/conf  --silentoldconfig Kconfig
  CHK     include/config/kernel.release
make KBUILD_SRC=
  CHK     include/config/kernel.release
  CHK     include/generated/uapi/linux/version.h
  CHK     include/generated/utsrelease.h
  CHK     scripts/mod/devicetable-offsets.h
  CHK     include/generated/timeconst.h
  CHK     include/generated/bounds.h
  CHK     include/generated/asm-offsets.h
  CALL    scripts/checksyscalls.sh
make[3]: 'include/generated/vdso-offsets.h' is up to date.
  CHK     include/generated/compile.h
  DTC     arch/arm64/boot/dts/rockchip/rk3399-roc-pc-exp.dtb
Error: arch/arm64/boot/dts/rockchip/rk3399-roc-pc-exp.dts:53.1-12 Label or path usb_charge not found
FATAL ERROR: Syntax error parsing input tree
scripts/Makefile.lib:320: recipe for target 'arch/arm64/boot/dts/rockchip/rk3399-roc-pc-exp.dtb' failed
make[4]: *** [arch/arm64/boot/dts/rockchip/rk3399-roc-pc-exp.dtb] Error 1
scripts/Makefile.build:484: recipe for target 'arch/arm64/boot/dts/rockchip' failed
make[3]: *** [arch/arm64/boot/dts/rockchip] Error 2
arch/arm64/Makefile:127: recipe for target 'dtbs' failed
make[2]: *** [dtbs] Error 2
make[2]: *** Waiting for unfinished jobs....
scripts/package/Makefile:96: recipe for target 'bindeb-pkg' failed
make[1]: *** [bindeb-pkg] Error 2
Makefile:1324: recipe for target 'bindeb-pkg' failed
make: *** [bindeb-pkg] Error 2
ERROR: Running build_kerneldeb failed!
ERROR: exit code 2 from line 758:
    make ARCH=$RK_ARCH bindeb-pkg RK_KERNEL_DTS=$RK_KERNEL_DTS -j$RK_JOBS

这边用的SD卡启动方式，没用到eMMC存储。

继续研究中~

4

编译完整固件然后烧录到sd卡

5

Liuth 发表于 2022-10-9 09:11
编译完整固件然后烧录到sd卡

谢谢提醒。

参照：https://wiki.t-firefly.com/zh_CN/ROC-RK3399-PC/linux_compile_gpt.html，目前能基于docker编译完整固件。默认状态没有问题。尝试修改kernel配置，以支持`IPTables`时，会提示：

root@firefly:~# ufw allow ssh
ERROR: initcaps
[Errno 2] modprobe: FATAL: Module ip6_tables not found in directory /lib/modules/4.4.194+
ip6tables v1.8.4 (legacy): can't initialize ip6tables table `filter': Table does not exist (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.

ufw enable 则会输出多个错误后，直接让系统挂掉。

（保持跟进…）

6

Liuth 发表于 2022-10-9 09:11
编译完整固件然后烧录到sd卡

root@firefly:~# uname -a
Linux firefly 4.4.194+ #1 SMP Thu Nov 10 02:13:30 UTC 2022 aarch64 aarch64 aarch64 GNU/Linux
root@firefly:~#