Jump to content

dolphs

Members
  • Posts

    272
  • Joined

  • Last visited

Everything posted by dolphs

  1. isn't jessie deprecated now anyway, since stretch came to life officially last year. I am aware many are still on jessie as it will be maintained till 2020? Anyway, DNS I assume in Stretch either " /etc/resolvconf/resolv.conf.d " or as it used to be ( thru /etc/network/interfaces ) in Jessie.
  2. thanks a lot, this helped a lot. I managed now by cleaning file " head " as that contained the google DNS entry I was looking for and is the primary entry. The tool " nmtui " still can be used to add DNS entries, but instead I believe these can be added to " head " so no need to use the text user interface. thanks again
  3. Hi - I flashed a new nanopineo2 with debian9 ( Armbian_5.44.180510_Nanopineo2_Debian_stretch_next_4.14.40 ) and set this to stable build before updating to latest "stable". Next step after reboot is to configure my static network ( eth0 ), but here things tend to be a bit different than previous flash ? Previously in advanced I edited /etc/network/interfaces to add my DNS-servers but in this build it seems " Network is managed by NetworkManager " so I instea I used " nmtui " to set these for "Wired Connection 1". Unfortunately I still see in /etc/resolv.conf : " nameserver 8.8.8.8 " first before my entries. I like to get rid of this nameserver but I am unable to find it. Anyone please? TiA!
  4. OK meanwhile tried " Armbian_5.44.180510_Nanopineo2_Debian_stretch_next_4.14.40 " which can be dl-ed here and that one boots fine …
  5. Hi - Just checked out latest greatest code from git to compile new stretch image for my NanoPiNeo2 ( Armbian_5.46_Nanopineo2_Debian_stretch_next_4.14.47 ) but seems it won't boot up. Tried two SDcards and two different boards but same result. Tried both Etscher ( 1.4.4 ) and Rufus ( 3 ) but same result, any issue known that I missed ? Please note I am building a standard image ( thus no customised settings ) also came to my attention the board becomes quite warm, this is unusual . Thanks
  6. 4.14.3 incorporated, well done guys ! Donation just sent to support the project: keep up the good work
  7. Hi Igor, In reply to your comment below I like to find out the status today in kernel 4.14.3 , thus if the patches meanwhile are adapted to the new LTS ? I am just wondering since the kernel page says 4.14.3 is supported? thanks
  8. looks like there was a game changer ... 4.14.1 released Yet it seems also this board is supported by the kernel. Kernel upgrade is scheduled for the stable images that got built with 4.13.x ? IMHO 4.14 is the stable kernel now which has the " long term " status
  9. Hi - I noticed for some boards kernel 4.14 is available to deploy ( eg Allwinner A10 ) already, when can this be expected for Allwinner H5 boards ( eg nanopineo2 ) please?
  10. For people using Linux Mint, please temporarily update your " /etc/lsb-release " to DISTRIB_CODENAME=xenial and things should roll
  11. compiled today " ARMBIAN 5.32 user-built Debian GNU/Linux 8 (jessie) 4.12.0-odroidc2 " and outpur of " openssl speed -elapsed -evp aes-128-cbc " was a bit disappointing as it seems it does not use the hardware encryption. Just built the default, however might check later if module needs to be compiled in ( or modprobed ) root@odroidc2:~# openssl speed -elapsed -evp aes-128-cbc You have chosen to measure elapsed time instead of user CPU time. Doing aes-128-cbc for 3s on 16 size blocks: 9017781 aes-128-cbc's in 3.00s Doing aes-128-cbc for 3s on 64 size blocks: 2785443 aes-128-cbc's in 3.00s Doing aes-128-cbc for 3s on 256 size blocks: 746427 aes-128-cbc's in 3.00s Doing aes-128-cbc for 3s on 1024 size blocks: 189960 aes-128-cbc's in 3.00s Doing aes-128-cbc for 3s on 8192 size blocks: 23811 aes-128-cbc's in 3.00s OpenSSL 1.0.1t 3 May 2016 built on: Fri Jan 27 00:08:40 2017 options:bn(64,64) rc4(ptr,char) des(idx,cisc,16,int) aes(partial) blowfish(ptr) compiler: gcc -I. -I.. -I../include -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -g -O2 -fstack-protector-strong -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -Wl,-z,relro -Wa,--noexecstack -Wall The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 48094.83k 59422.78k 63695.10k 64839.68k 65019.90k root@odroidc2:~# openssl speed -elapsed aes-128-cbc You have chosen to measure elapsed time instead of user CPU time. Doing aes-128 cbc for 3s on 16 size blocks: 10634655 aes-128 cbc's in 3.00s Doing aes-128 cbc for 3s on 64 size blocks: 2917504 aes-128 cbc's in 3.00s Doing aes-128 cbc for 3s on 256 size blocks: 753598 aes-128 cbc's in 3.00s Doing aes-128 cbc for 3s on 1024 size blocks: 190469 aes-128 cbc's in 3.00s Doing aes-128 cbc for 3s on 8192 size blocks: 23818 aes-128 cbc's in 3.00s OpenSSL 1.0.1t 3 May 2016 built on: Fri Jan 27 00:08:40 2017 options:bn(64,64) rc4(ptr,char) des(idx,cisc,16,int) aes(partial) blowfish(ptr) compiler: gcc -I. -I.. -I../include -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -g -O2 -fstack-protector-strong -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2 -Wl,-z,relro -Wa,--noexecstack -Wall The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128 cbc 56718.16k 62240.09k 64307.03k 65013.42k 65039.02k root@odroidc2:~$ lsmod Module Size Used by cfg80211 282624 0 rfkill 32768 1 cfg80211 cpufreq_powersave 16384 0 cpufreq_userspace 16384 0 cpufreq_conservative 16384 0 meson_drm 45056 0 drm_kms_helper 172032 1 meson_drm drm 393216 2 meson_drm,drm_kms_helper meson_rng 16384 0 meson_gxbb_wdt 16384 0 rng_core 16384 1 meson_rng fuse 98304 1 ipv6 401408 26 btrfs 962560 0 xor 20480 1 btrfs zlib_deflate 28672 1 btrfs raid6_pq 106496 1 btrfs dwmac_generic 16384 0 realtek 16384 1 dwmac_meson8b 16384 0 stmmac_platform 20480 2 dwmac_generic,dwmac_meson8b stmmac 110592 3 stmmac_platform,dwmac_generic,dwmac_meson8b According to my info crypto engine has AES block cipher with 128/192/256 bits keys, standard 16 bytes block size and streaming ECB, CBC and CTR modes. ( Paragraph 3.3 Crypto Engine ). So I upgraded debian jessie to stretch ( which has openssl1.1.0f instead of openssl1.0.1t ) and yet the hardware seems to do some acceleration but still hoped for more ... openssl speed -elapsed -evp aes-128-cbc You have chosen to measure elapsed time instead of user CPU time. Doing aes-128-cbc for 3s on 16 size blocks: 8240239 aes-128-cbc's in 3.00s Doing aes-128-cbc for 3s on 64 size blocks: 2872650 aes-128-cbc's in 3.00s Doing aes-128-cbc for 3s on 256 size blocks: 802740 aes-128-cbc's in 3.00s Doing aes-128-cbc for 3s on 1024 size blocks: 206766 aes-128-cbc's in 3.00s Doing aes-128-cbc for 3s on 8192 size blocks: 26072 aes-128-cbc's in 3.00s Doing aes-128-cbc for 3s on 16384 size blocks: 13041 aes-128-cbc's in 3.00s OpenSSL 1.1.0f 25 May 2017 built on: reproducible build, date unspecified options:bn(64,64) rc4(char) des(int) aes(partial) blowfish(ptr) compiler: gcc -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_THREADS -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DECP_NISTZ256_ASM -DPOLY1305_ASM -DOPENSSLDIR="\"/usr/lib/ssl\"" -DENGINESDIR="\"/usr/lib/aarch64-linux-gnu/engines-1.1\"" The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes 16384 bytes aes-128-cbc 43947.94k 61283.20k 68500.48k 70576.13k 71193.94k 71221.25k root@odroidc2:/home/ykoot# openssl speed -elapsed aes-128-cbc You have chosen to measure elapsed time instead of user CPU time. Doing aes-128 cbc for 3s on 16 size blocks: 9273969 aes-128 cbc's in 3.00s Doing aes-128 cbc for 3s on 64 size blocks: 2507648 aes-128 cbc's in 3.00s Doing aes-128 cbc for 3s on 256 size blocks: 645224 aes-128 cbc's in 3.00s Doing aes-128 cbc for 3s on 1024 size blocks: 162484 aes-128 cbc's in 3.00s Doing aes-128 cbc for 3s on 8192 size blocks: 20352 aes-128 cbc's in 3.00s Doing aes-128 cbc for 3s on 16384 size blocks: 10176 aes-128 cbc's in 3.00s OpenSSL 1.1.0f 25 May 2017 built on: reproducible build, date unspecified options:bn(64,64) rc4(char) des(int) aes(partial) blowfish(ptr) compiler: gcc -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_THREADS -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DECP_NISTZ256_ASM -DPOLY1305_ASM -DOPENSSLDIR="\"/usr/lib/ssl\"" -DENGINESDIR="\"/usr/lib/aarch64-linux-gnu/engines-1.1\"" The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes 16384 bytes aes-128 cbc 49461.17k 53496.49k 55059.11k 55461.21k 55574.53k 55574.53k
  12. thanks for clarifying Igor, will RTFM next time better ... Don't worry will try not to bug too much and build from scratch, as long I can use NanoPi NEO2 crypto engine Id be more than happy ;-)
  13. Nice piece of work this armbian building script! However which should I use for the NanoPi NEO2, as " nanopineo " has an Allwinner H3 instead of H5. So from this point " pine64 " looks similar or should I stick to these builds for the moment. Will use KERNEL_CONFIGURE="yes" anyhow. cheers
  14. thanks for the URL Igor, my goal is to build a headless debian9 and indeed for time being sed jessie to stretch ;-). will start with these instructions setting up a VM running Ubuntu 16.04.2 LTS , first things first as it might take a while these boards will reach my home ...
  15. Hi guys, the other day I became quite enthousiastic about the NanoPi NEO2 board so I decided to order two boards. It seems the Allwinner H5 has very good crypto hardware kernel driver support ( AES-128-CBC ) and therefore I like to run oVPN on these. Meanwhile I like to find out if stretch images are available for download and maybe even already with the latest 4.12 kernel? Also is there an easy howto to crosscompile a kernel for this board ( regarding boot etc ).
  16. I see, thanks a lot for your prompt response. will dive in to it! For the recors AES-NI and J3060, " openssl speed -elapsed -evp aes-128-cbc " : The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes 16384 bytes aes-128-cbc 174663.71k 303354.15k 387050.67k 415766.19k 424572.25k 425268.57k
  17. Hi Igor can you supply me a link (PM) to this M1 Plus2 as I do not see it on FriendlyFarm. Looks very interesting as it "blows" away my J3060 ( with AES-NI ) mainboard, cheers
  18. kernel 4.12 is now available ( mainline ) , however what about the hardware crypto engine? Is AES working as I deerly hope this is the board I have been waiting for to use it with OpenVPN. From the Status Matrix I see " WIP " so that does not look promising, nevertheless maybe someone can give me an output of " openssl speed -elapsed -evp aes-128-cbc " as well 256. TiA!
  19. Hi - I am trying to find out from the fora topics here as well the technical details page if the ODROID-C2 has an extension to the ARMv8 instruction set to improve the speed of applications, like openssl/openvpn, performing encryption and decryption. On the intel platforms this feature is known as AES-NI. Therefore is similar hardware on board and if so, which kernel module enables this feature please? Also when will " Armbian " stretch be available ( 17 July just like debian 9? ). Cheers
×
×
  • Create New...