It does work OK, but I think it uses linux-lts-headers (due to KERNEL_DIR="$KDIR" KERNEL_HEADERS="$KDIR") which I also have. The problem is that currently either having or forcing not to have linux-headers installed can both be problematic in linux-lts systems. Thinking about it the issue could actually be in linux-lts not providing linux.
Search Criteria
Package Details: opensnitch-ebpf-module 1.6.5-2
Package Actions
| Git Clone URL: | https://aur.archlinux.org/opensnitch-ebpf-module.git (read-only, click to copy) |
|---|---|
| Package Base: | opensnitch-ebpf-module |
| Description: | eBPF process monitor module for opensnitch |
| Upstream URL: | https://github.com/evilsocket/opensnitch |
| Licenses: | GPL3 |
| Submitter: | nns |
| Maintainer: | nns |
| Last Packager: | nns |
| Votes: | 20 |
| Popularity: | 0.85 |
| First Submitted: | 2023-02-06 09:27 (UTC) |
| Last Updated: | 2024-04-02 21:37 (UTC) |
Dependencies (7)
- opensnitch (opensnitch-gitAUR)
- bc (bc-ghAUR) (make)
- clang (llvm-rocm-gitAUR, llvm-gitAUR, clang-minimal-gitAUR) (make)
- libelf (elfutils-gitAUR) (make)
- linux-headers (linux-headers-binAUR) (make)
- llvm (llvm-rocm-gitAUR, llvm-gitAUR, llvm-minimal-gitAUR) (make)
- llvm (llvm-rocm-gitAUR, llvm-gitAUR, llvm-minimal-gitAUR) (check)
Required by (0)
Sources (1)
drws commented on 2024-03-18 20:49 (UTC)
nns commented on 2024-03-18 14:04 (UTC)
Does the eBPF module not work on the LTS kernel when compiled against linux-headers?
drws commented on 2024-03-18 14:00 (UTC)
This package works with linux-lts, but it should depend on linux-lts-headers in this case. Everything else works fine.
marcool04 commented on 2024-03-11 11:56 (UTC)
Yeah I get that so do I. Thanks for maintaining the PKGBUILD.
Regards, Mark.
nns commented on 2024-03-11 11:45 (UTC)
I do actually have a notifier bot set up to let me know when the main repo package updates, but since opensnitch is updated so rarely, I had forgotten about it. I haven't fully automated the updating of this package because I like manually ensuring it builds and functions as expected.
marcool04 commented on 2024-03-11 11:41 (UTC)
Oh right yeah. I knew pinning was generally a "bad idea" but didn't think it through. Those scenarios do indeed make it problematic, especially with one in the AUR and the other in the main repos... As I perform upgrades with paru I always have everything updated together, but that can't be assumed for sure. I guess the only way to go really is for you to closely watch when opensnitch arch packages is actually updated and only do your own version bump them. Could be automated if you want too, with github actions or something like that.
nns commented on 2024-03-11 11:19 (UTC)
marcool04: Whoops, updating it was my bad. Someone flagged this package out of date since 1.6.5 was released upstream - I forgot to check whether the Arch package had been updated before bumping this package's version.
I don't think pinning it is a good idea, as I think it will break upgrades for people who try updating their system when a new version of the opensnitch package is released but I haven't had a chance to bump this package yet. Also, I'm unsure how this would affect upgrades even if both are updated - pacman isn't aware that this package would be upgraded alongside opensnitch and I think would complain about breaking dependencies when trying to upgrade opensnitch. Maybe someone can correct me on this.
marcool04 commented on 2024-03-08 10:23 (UTC)
Just a note that as you have updated the pkgver here but the opensnitch package is still on 1.6.4 there are issues when performing a full system upgrade as that leaves you with a mismatch in versions. See here: https://github.com/evilsocket/opensnitch/issues/1099. Is it possible to pin this to the same version of opensnitch with a depends=(opensnitch=$pkgver), would that be safe?
YrGVyFszGuSBeVLK commented on 2023-10-04 11:34 (UTC) (edited on 2023-10-04 11:56 (UTC) by YrGVyFszGuSBeVLK)
The new kernel doesn't seem to be supported, received an error message stating that.
Edit: But it seems to be still working, strange.
nns commented on 2023-07-07 10:40 (UTC) (edited on 2024-04-06 06:48 (UTC) by nns)
MANJARO USERS, READ ME
Manjaro does not create the /usr/src/linux symlink, which should point to the current kernel headers and is required for this package to build properly. If you wish to use this package, your options are to:
-
Manually edit the PKGBUILD before building and change the
KDIRvariable inbuild()to point to your kernel headers. -
Create a pacman hook for the kernel header package which creates the symbolic link automatically. An example can be seen in this comment: https://aur.archlinux.org/packages/opensnitch-ebpf-module?O=30#comment-919081
Pinned Comments
nns commented on 2023-07-07 10:40 (UTC) (edited on 2024-04-06 06:48 (UTC) by nns)
MANJARO USERS, READ ME
Manjaro does not create the
/usr/src/linuxsymlink, which should point to the current kernel headers and is required for this package to build properly. If you wish to use this package, your options are to:Manually edit the PKGBUILD before building and change the
KDIRvariable inbuild()to point to your kernel headers.Create a pacman hook for the kernel header package which creates the symbolic link automatically. An example can be seen in this comment: https://aur.archlinux.org/packages/opensnitch-ebpf-module?O=30#comment-919081
nns commented on 2022-11-15 09:17 (UTC) (edited on 2023-07-11 10:02 (UTC) by nns)
This is the latest RELEASE version of opensnitch's eBPF module. It is meant to be used with the regular opensnitch package, not the
-gitversion in the AUR. If you're using the-gitversion of opensnitch, you're looking for this version of the eBPF module package instead.I intend to keep this up to date with the OpenSnitch releases (as soon as the main package updates).