gurabli
-
Posts
33 -
Joined
-
Last visited
Content Type
Forums
Store
Crowdfunding
Applications
Events
Raffles
Community Map
Posts posted by gurabli
-
-
7 minutes ago, Igor said:
I know it is
It's set here: https://github.com/armbian/build/blob/master/lib/compilation-prepare.sh#L92
Everything understood! Many thanks!
-
2 minutes ago, Igor said:
WG author usually ping me when its time to switch to a new version. For the rest, ask at Wireguard forums. Not a problem of Armbian. If dkms is broken, do something to fix it before next release.
I just wanted to understand correctly who this works (the questions I asked regarding kernel, ppa, dkms). I think I got it right, and basically everything is working as it should.
Just to confirm, your version of wg from dmesg is also 0.0.20190702
-
1 minute ago, Igor said:
Next update is scheduled for 02/2020 but first the issue has to be accepted on the to do list.OK, so I was right, that the version available now in the kernel is not the most recent wg version and it will be updated when you push the update to the kernel? It is how it goes?
So basically the downside of having wg in the kernel is that it can't be updated from ppa, a new kernel update is required?
The upside is that there is no need for dkms build since wg is already in the kernel?
Can I try to install the kernel headers for the new kernel and try apt install wireguard-dkms or it will fail to build?
-
On 11/22/2019 at 8:49 AM, Igor said:
We made several manual upgrades which are noted in that document and it seems its alright.
If you start with a new image, tools are also installed. Otherwise apt get wg-tools ...
I managed to upgrade my NEO2 to the 5.3.9 kernel as per your instructions. It looks everything is running fine.
However, I'm still not on the latest Wireguard verion:
[ 15.833259] wireguard: WireGuard 0.0.20190702 loaded. See www.wireguard.com for information. [ 15.833268] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
I have the official Ubuntu PPA added,
deb http://ppa.launchpad.net/wireguard/wireguard/ubuntu bionic mainand if I install wireguard with apt install wireguard the latest version wireguard-0.0.20191012 is installed, still, even after restart, the version loaded is 0.0.20190702
What do you think, why is this? Maybe this is because the version in the kernel is not updated to the latest 191012 version? If you push that update then it will simply install with an apt update & upgrade?
-
16 minutes ago, Igor said:
where WG is latest by default anyway ... while DKMS needs some bug fixing.
Wow, many thanks Igor.
So it is safe to uograde my Nanopi Neo2 and Orange Pi Zero boards to Kernel 5.x,and these are the stable versions. On upgrading it should not brake anything, if I'm correct, as I don't have access to one of my devices, only over ssh.
And kernel 5.x already has WG integrated, so only wg-tools needs to be installes - and that is really good!
Thanks for your hard work!
-
37 minutes ago, DIYprojectz said:
It depends whether you want to add expansion board someday or not. If you do, 14x14x6 heatsink is the better choice, otherwise choose 14x14xsomething according to your desire and budget. I would recommend a fan regardless, those things get hot. You can read about mounting a fan here (SBC is very similar Orange Pi R1, fan mounts the same). Here you can buy the heatsinks, check Aliexpress too maybe they are cheaper there. I also strongly suggest cutting one of the heatsinks to fit on the RAM module, it benefits too.
Many thanks! I don't use any expansion board. And I really don't want to use a fan, needs to stay passive.
I will look into these heatsinks. I see these don't have adhesive tape, what is the best way to glue/install these on the SoC and the memory chip?
Thanks
Edit: this 14x14x10 should be ok?
HUF 488.72 6%OFF | En-Labs 10pcs Aluminum Heatsink 14*14*10mm Electronic Chip Radiator Cooler w/ 3M Brand 9448A Thermal Double Sided Adhesive Tape
https://s.click.aliexpress.com/e/rOdNOldQAnd what is the size of the memory chip? I don't have access to the devicw now.
-
On 1/11/2019 at 7:12 PM, devman said:
Sorry, I did it on a Armbian/Ubuntu on Nanopi Neo 2, so your specifics will vary. Hopefully the following will still work:
First, you're going to need the kernel headers, so (for my specific version/device):
apt install linux-headers-4.14.70-sunxi64In my case, this brings in headers for *every* arch, and the current wireguard install doesn't like this, so:
cd /usr/src/linux-headers-4.14.70-sunxi64/ mkdir unusedArch cd arch sudo mv * ../unusedArch/ cd ../unusedArch/ mv arm64/* ../arch/ add-apt-repository ppa:wireguard/wireguard apt update apt install wireguard wireguard-tools wireguard-dkmsHope it helps.
I have a problem now with installing kernel headers:
Welcome to Ubuntu Bionic with Armbian Linux 4.19.63-sunxi64
System load: 0.10 0.09 0.08 Up time: 1 day
Memory usage: 26 % of 481MB Zram usage: 9 % of 240Mb IP: 192.168.1.125 10.66.66.1
CPU temp: 60°C
Usage of /: 3% of 59G[ General system configuration (beta): armbian-config ]
Last login: Fri Nov 22 06:43:30 2019 from xxxxx
nanopi@nanopineo2:~$ sudo apt install linux-headers-4.19.63-sunxi64
[sudo] password for nanopi:
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Unable to locate package linux-headers-4.19.63-sunxi64
E: Couldn't find any package by glob 'linux-headers-4.19.63-sunxi64'
E: Couldn't find any package by regex 'linux-headers-4.19.63-sunxi64'
nanopi@nanopineo2:~$I would like to uograde to the latest Wireguard version, but installing wireguard-dkms fails, can't build the requires modules without the kernel headers, I guess. Simply installing WG from the ppa doesn't update to the newest version on system level. I managed to update last time like this, but if I remember correctly, I was abke to install headers. I tried with armbian-config, installed headers, but still doesn't work. Any ideas?
-
21 minutes ago, guidol said:
take a look at the last message in this thread
for blacklisting
- xradio_wlan
- mac80211
- cfg80211
So much thanks, I will try this.
I see the last step, thas it mean after a kernel update I need to issue this again?
-
Thanks, I will look into this.
Not an expect enough to locate what module is for wifi and how to backlist, but will do my best.
USB can be disabled in armbian-config, correct?
-
Armbianmonitor:
I run the OPi Zero as a Pihole with etherned, and I would like to minimize power consumption as low as possible.
1. I did change the frequency to be between 120 - 960 Mhz, and ondemand. This probably reduces power and heat too.
2. I'm not sure how to disable USB (I don't need it at all) and WiFi. I read the threads, like this but not sure how to do. Can you please guide me?
3. I saw there are other options too, with a tool h3consuption, but I don't know how to install it and what can I do to squeze down a couple of mW's more.
Your help is very much appreciated!
-
Hi,
anybody knows what size of a heatsink can I put on an Orange Pi Zero? It is in the small cube enclosure (without additional addon board).
Maybe a link to eBay or Aliexpress?
Thanks!
-
Hi,
I just got my Orange Pi Zero for a Pihole. Running with a quality PSU and a SanDisk Ultra 16GB A1 card.
Everything went perfectly fine, Pihole is the DNS for LAN, while my router handles WAN DNS (DNS over TLS with Cloudflare).
I'm concerned a little bit about logging. What do you recommend to keep the sd card safe. I think Pihole is logging to /var/log/ whete running for less than 24 hours I have pihole.log 3MB size, with pihole.log.1 around 2MB.
Is there a way to use log2ram for this or a good practice of log rotation, writing to RAM, etc? Your help is welcome!
-
Many thanks, Igor
This is really great news. Add it, for sure! WG is really a beast!
-
Hi,
I'm thinking about getting a HC2, but I would like to be sure if Wireguard is supported on Odroid. Did you manage to make it work?
I run Armbian on a NEO2 and Wireguard works perfectly.
Thanks!
-
I managed to configure Wireguard on my remote NEO2 server and my home server. The NEO2 is configured as the server. It works amazing. Fast and easy, waaay faster then SSH tunneling, not to mentione OpenVPN. Sure, it maybe not as secure as OpenVPN or SSH, sinve no audit yet on Wireguard, but in my use case it is perfect.
Great job and thanks for your support.
It is awsome what a small piece of board like NEO2 can do with a great and optimized OS like Armbian
-
Excellent! I will do the configuration, sure.
So it is not a problem that modprobe doesn't give anything back? Strange, that I had apt isntall error too. But I will check. Thanks.
-
2 hours ago, Igor said:
and what is dmesg saying ?
I'm feom phone now, but strange, last two lines of dmesg say ok. Even if I had error during apt install.
[ 76.932990] wireguard: WireGuard 0.0.20190702 loaded. See
www.wireguard.com for information.
[ 76.932998] wireguard: Copyright (C) 2015-2019 Jason A. D
onenfeld <Jason@zx2c4.com>. All Rights Reserved.What do you think, is it actually working?
-
1 hour ago, Igor said:
And what you get if you type:
modprobe wireguard... module is already present.
Nothing, empty.
-
Hi,
I'm running Armbian Ubuntu Server on my Neo2 and works quite good. I just can't install Wireguard. I have installed kernel headers from armbian config, bit still fails. I use the ppa repo.
Kernel stable latest, 4.19.57
Any ideas how to proceed and install?
-
Thanks. I'm running Armbian Ubuntu image.
But how do I activete and configure watchdog?
-
1 hour ago, sfx2000 said:
Patches are usually against a specific version, and there's a number of 1.1 releases...
Well, I think I mixed up, I wanted to say patch OpenSSH. As the patch is required to be able to build OpenSSH agains OpenSSL 1.1. Still, I apply the patch to the correct version of OpenSSH, and fails.
-
Yes, lesson learned for sure. I did consider this when I was working on it. Will have access to the device soon.
I will need to configure (hardware) watchdog, I opened a thread about this. In this case watchdod wouldn't help me, but in many other cases certainly would.
Still, I don't get it why I couldn't patch OpenSSL 1.1.
-
12 hours ago, sfx2000 said:
They have a patch for OpenSSL 1.1x compatibility...
https://sourceforge.net/projects/hpnssh/
https://github.com/rapier1/openssh-portable
Yes, I see the patch for OpenSSL 1.1x compatibility, but I get errors when I apply the patch to OpenSSL. Don't know why. And the HPN-SSH patch should be applied after the OpenSSL patch? I'm not too familiar with patching. Did you manage to apply both patches and build OpenSSH?
I configured HPN-SSH successfully on my home and VPS servers running Ubuntu Server 16.04 LTS, and the performance is amazing, compared to stock SSH. I can fully max out my ISP upload, I have download speed over remote locations of around 10 MB/s, while on stock SSH it was 1-2,5 MB/s max.
I'm using aes128-cb cipher now, but no noticeable difference with most ciphers. If a depreciated arcfour cipher is used, then it will give way less stress on SoC, still maintaining encryption, but not too secure. However, it depends on the use case, I stream hts from Tvheadend and want to keep some level of encryption on the stream and server-client communication.
But I really struggle of how to compile HPN-SSH on Armbian, and now I messed up the system and have no access (and it is on a remote location). Yeah, one should never mess with system like this on remote, non-VPS system:)
-
Bionic apt update "File has unexpected size"
in Beginners
Posted
Thanks, this did the trick for me. A choose manually a mirror and worked.