Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

[gentoo-user] Linux 4.19.8 kernel panics with netfilter/iptables

42 views
Skip to first unread message

Ralph Seichter

unread,
Dec 12, 2018, 8:50:03 AM12/12/18
to
With kernel versions 4.19.0 to 4.19.8, I see kernel panics whenever
I activate some iptables rules. The same ruleset works fine with all
earlier kernel versions.

I found https://marc.info/?l=netfilter-devel&m=154211825506348&w=2 and
was wondering if there is any workaround/patch availabe in Gentoo?

-Ralph

Hasan Ç.

unread,
Dec 12, 2018, 9:10:02 AM12/12/18
to
Can you share your iptables rules i am on 4.19.8 too with exact version of kernel c headers & updated glibc.
I can share my results.

Hasan.

Ralph Seichter <m16+g...@monksofcool.net>, 12 Ara 2018 Çar, 16:40 tarihinde şunu yazdı:

Ralph Seichter

unread,
Dec 12, 2018, 1:30:03 PM12/12/18
to
* Hasan Ç.:

> Can you share your iptables rules i am on 4.19.8 too with exact
> version of kernel c headers & updated glibc.

Here you go: https://pastebin.com/f8V8DfFU

As you can see, I obfuscated some IP addresses, but other than that,
this is the original ruleset.

-Ralph

Ralph Seichter

unread,
Dec 17, 2018, 10:50:02 AM12/17/18
to
* Hasan Ç.:

> I can share my results.

Have you been able to run some tests yet?

-Ralph

Andrew Savchenko

unread,
Dec 23, 2018, 10:40:03 AM12/23/18
to
You can apply patches by your own. This is easy:

1. Create dir /etc/portage/patches/sys-kernel/gentoo-sources-4.19.8
(or whatever kernel you are using).
2. Put patches there, ensure file names end with ".patch".

More details are here:
https://wiki.gentoo.org/wiki//etc/portage/patches

Best regards,
Andrew Savchenko

Hasan Ç.

unread,
Jan 15, 2019, 1:00:04 PM1/15/19
to
Hi Ralph,

Sorry for very very late answer.I am on prod. with 4.19.8 kernel and i confirm that i don't have a such problem with iptables.I am not sure what is the exact solution of your problem but the one thing i guess your linux headers (4.13 or 4.14 if you follow mainstream) & kernel .config and kernel version mistmatch.I have own compiled kernel and also re-compiled glibc with 4.19.8 headers also re-compiled @world and @system :)

The only issue i faced with this setup is kernel audit. sys-process/audit package can't compile because of 4.19.8 headers.


Andrew Savchenko <bir...@gentoo.org>, 23 Ara 2018 Paz, 18:34 tarihinde şunu yazdı:
0 new messages