module support is missing on phablet images

Bug #1194549 reported by Jamie Strandboge
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
touch-preview-images
Fix Released
High
Ricardo Salveti

Bug Description

This is related to bug #1191197 in that now the kernels have netfilter modules enabled, but '/usr/share/ufw/check-requirements -f' still fails because the modules aren't in the image in a way that netfilter can load them.

Changed in touch-preview-images:
assignee: nobody → Oliver Grawert (ogra)
Oliver Grawert (ogra)
summary: - netfilter module support is missing on phablet images
+ module support is missing on phablet images
Changed in touch-preview-images:
assignee: Oliver Grawert (ogra) → Ricardo Salveti (rsalveti)
Revision history for this message
Oliver Grawert (ogra) wrote :

copying the modules out of the kernel package into the device specific image needs to happen during android build ...

putting a link to these files into /lib/modules and running depmod can happen from the lxc-android-config packages "lxc-android-fstab" upstart job (which should probably renamed to lxc-android-firstboot since it does far more than just creating the fstab nowadays)

Changed in touch-preview-images:
status: New → In Progress
importance: Undecided → High
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

On grouper, this seems to be working now:
# /usr/share/ufw/check-requirements -f
Has python: pass (binary: python2.7, version: 2.7.5+, py2)
Has iptables: pass
Has ip6tables: pass

Has /proc/net/dev: pass
Has /proc/net/if_inet6: pass

This script will now attempt to create various rules using the iptables
and ip6tables commands. This may result in module autoloading (eg, for
IPv6).
== IPv4 ==
Creating 'ufw-check-requirements'... done
Inserting RETURN at top of 'ufw-check-requirements'... done
TCP: pass
UDP: pass
destination port: pass
source port: pass
ACCEPT: pass
DROP: pass
REJECT: pass
LOG: pass
hashlimit: pass
limit: pass
state (NEW): pass
state (RELATED): pass
state (ESTABLISHED): pass
state (INVALID): pass
state (new, recent set): pass
state (new, recent update): pass
state (new, limit): pass
interface (input): pass
interface (output): pass
multiport: pass
comment: pass
addrtype (LOCAL): pass
addrtype (MULTICAST): pass
addrtype (BROADCAST): pass
icmp (destination-unreachable): pass
icmp (source-quench): pass
icmp (time-exceeded): pass
icmp (parameter-problem): pass
icmp (echo-request): pass

== IPv6 ==
Creating 'ufw-check-requirements6'... done
Inserting RETURN at top of 'ufw-check-requirements6'... done
TCP: pass
UDP: pass
destination port: pass
source port: pass
ACCEPT: pass
DROP: pass
REJECT: pass
LOG: pass
hashlimit: pass
limit: pass
state (NEW): pass
state (RELATED): pass
state (ESTABLISHED): pass
state (INVALID): pass
state (new, recent set): pass
state (new, recent update): pass
state (new, limit): pass
interface (input): pass
interface (output): pass
multiport: pass
comment: pass
icmpv6 (destination-unreachable): pass
icmpv6 (packet-too-big): pass
icmpv6 (time-exceeded): pass
icmpv6 (parameter-problem): pass
icmpv6 (echo-request): pass
icmpv6 with hl (neighbor-solicitation): pass
icmpv6 with hl (neighbor-advertisement): pass
icmpv6 with hl (router-solicitation): pass
icmpv6 with hl (router-advertisement): pass
ipv6 rt: pass

All tests passed

Changed in touch-preview-images:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.