Hardy Kernel builders

I have been using JeOS successfully as a platform for OpenVPN.
I now need to move to a firewall project on the same or a connected VM
and plan to use Shorewall to generate netfilter configuration.

I noticed however that a needed kernel module has been omitted from the
images used by JeOS (-virtual): nf_conntrack_sip. I will need this to
fixup SIP when doing SNAT.

The server image includes this module but someone decided to leave it
out of JeOS. I could use server but would prefer to carry on using JeOS.
So advice please on the best way to solve this - do I have to go back to
the JeOS kernel development package and build the module myself?

Many thanks

Roger Henry

--
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam

On Sun, Jun 22, 2008 at 1:19 PM, Roger Henry <r.henry@inform.co.uk> wrote:
> Hardy Kernel builders
>
> I have been using JeOS successfully as a platform for OpenVPN.
> I now need to move to a firewall project on the same or a connected VM
> and plan to use Shorewall to generate netfilter configuration.
>
> I noticed however that a needed kernel module has been omitted from the
> images used by JeOS (-virtual): nf_conntrack_sip. I will need this to
> fixup SIP when doing SNAT.
>
> The server image includes this module but someone decided to leave it
> out of JeOS. I could use server but would prefer to carry on using JeOS.
> So advice please on the best way to solve this - do I have to go back to
> the JeOS kernel development package and build the module myself?
>
> Many thanks
>
> Roger Henry
>


I don't have a Hardy machine available to check, but is there a
package called "user-mode-linux" available from apt? The
nf_conntrack_sip module should be in there.

James

--
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam

On Mon, Jun 23, 2008 at 09:25:36AM -0500, James Dinkel wrote:
> I don't have a Hardy machine available to check, but is there a
> package called "user-mode-linux" available from apt? The
> nf_conntrack_sip module should be in there.

Yes, but that would be for user-mode-linux and not for "real" kernel.

--
Soren Hansen |
Virtualisation specialist | Ubuntu Server Team
Canonical Ltd. | http://www.ubuntu.com/
--
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam

Thanks James

Don't need a Hardy machine if the repository database is up to date - a
search on packages.ubuntu.com gives:

/lib/modules/2.6.24-16-386/kernel/net/netfilter/nf_conntrack_sip.ko
linux-image-2.6.24-16-386

/lib/modules/2.6.24-16-generic/kernel/net/netfilter/nf_conntrack_sip.ko linux-image-2.6.24-16-generic

/lib/modules/2.6.24-16-openvz/kernel/net/netfilter/nf_conntrack_sip.ko
linux-image-2.6.24-16-openvz

/lib/modules/2.6.24-16-rt/kernel/net/netfilter/nf_conntrack_sip.ko
linux-image-2.6.24-16-rt

/lib/modules/2.6.24-16-server/kernel/net/netfilter/nf_conntrack_sip.ko
linux-image-2.6.24-16-server

/lib/modules/2.6.24-16-xen/kernel/net/netfilter/nf_conntrack_sip.ko
linux-image-2.6.24-16-xen

/usr/lib/uml/modules/2.6.22-rc5/kernel/net/netfilter/nf_conntrack_sip.ko
user-mode-linux

/usr/src/linux-headers-2.6.24-16-openvz/include/linux/netfilter/nf_conntrack_sip.h

linux-headers-2.6.24-16-openvz

/usr/src/linux-headers-2.6.24-16/include/linux/netfilter/nf_conntrack_sip.h
linux-headers-2.6.24-16

So it is in several other kernel images apart from JeOS. Just not sure I
can lift it out of another kernel image and expect it to work with the
JeOS kernel.

Regards

Roger


James Dinkel wrote:
> On Sun, Jun 22, 2008 at 1:19 PM, Roger Henry <r.henry@inform.co.uk> wrote:
>> Hardy Kernel builders
>>
>> I have been using JeOS successfully as a platform for OpenVPN.
>> I now need to move to a firewall project on the same or a connected VM
>> and plan to use Shorewall to generate netfilter configuration.
>>
>> I noticed however that a needed kernel module has been omitted from the
>> images used by JeOS (-virtual): nf_conntrack_sip. I will need this to
>> fixup SIP when doing SNAT.
>>
>> The server image includes this module but someone decided to leave it
>> out of JeOS. I could use server but would prefer to carry on using JeOS.
>> So advice please on the best way to solve this - do I have to go back to
>> the JeOS kernel development package and build the module myself?
>>
>> Many thanks
>>
>> Roger Henry
>>
>
>
> I don't have a Hardy machine available to check, but is there a
> package called "user-mode-linux" available from apt? The
> nf_conntrack_sip module should be in there.
>
> James


--
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam

On Mon, Jun 23, 2008 at 10:12 AM, Roger Henry <r.henry@inform.co.uk> wrote:
> Thanks James
>
> Don't need a Hardy machine if the repository database is up to date - a
> search on packages.ubuntu.com gives:
>
<snip>
>
> So it is in several other kernel images apart from JeOS. Just not sure I
> can lift it out of another kernel image and expect it to work with the
> JeOS kernel.
>
> Regards
>
> Roger
>

It looks like you're out of luck then, but you can always just install
the server kernel. Granted there are drawbacks to that, but it would
be an easy and maintainable fix to your problem.

James

--
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam