xtables-addons-dkms 1.42-2: xtables-addons kernel module failed to build

Status changed to 'Confirmed' because the bug affects multiple users.

Same for me.

As a workaround, remove the failing modules, run this and let it fail.
module-assistant -o --verbose --text-mode auto-install xtables-addons

  CC [M] /space2/src/modules/xtables-addons/xt_RAWNAT.o
/space2/src/modules/xtables-addons/xt_RAWNAT.c: In function 'rawnat6_prepare_l4':
/space2/src/modules/xtables-addons/xt_RAWNAT.c:184:3: error: too few arguments to function 'ipv6_find_hdr'
In file included from /space2/src/modules/xtables-addons/xt_RAWNAT.c:20:0:
include/linux/netfilter_ipv6/ip6_tables.h:307:12: note: declared here
make[4]: *** [/space2/src/modules/xtables-addons/xt_RAWNAT.o] Error 1

Remove the lines with the failing modules in the file mconfig
build_RAWNAT=m
build_SYSRQ=m
build_length2=m

Build it again.
module-assistant -o --verbose --text-mode auto-install xtables-addons

Workaround functions, but with a gotcha: there are two mconfig files on my system:

- /usr/src/modules/xtables-addons/mconfig (editing this file works as described)
- /usr/src/xtables-addons-1.42/mconfig (seems to be an entirely independent source tree)

Not sure where the second source tree came from. For now, the workaround seems to work.

12.10 quantal with kernel 3.5.0-34-lowlatency and xtables-addons-dkms 1.42.2...

the circumention worked for me when I commented-out the three lines from post #3.

As mentioned in post #4, the correct file to edit is the copy in /usr/src/modules/xtables-addons/mconfig

I was only partly correct in post #5. The circumvention allowed module-assistant to successfully build xtables-addons, so that was good news. Unfortunately, when I rebooted my system there was another crash - this time with xt-ACCOUNT.c. Following the advice in one of the many bug reports on this subject, I also commented that line in mconfig (both copies), but the m-a build failed again, saying it could not find xtables and recommended I ran m-a -f get. That seemed to reinstall the package, but it would not build properly... because of xt_RAWNAT again!

So I edited both copies of mconfig, successfully ran module-assistant, rebooted to another crash. It happens every time I reboot.

When I have rebooted, after the inevitable crash, I can see:
/usr/src/modules/xtables-addons/mconfig still contains my comments.
/usr/src/xtables-addons-1.42/mconfig has lost my comments and has been restored to the distribution state.
/usr/src/ contains xtables-addons.tar.bz2 and xtables-addons-modules-3.5.0-34-lowlatency_1.42-2_i386.deb

dpkg --list xtables-addons-dkms and xtables-addons-common both show status of "ii", so I do not understand why a reboot causes the module to be rebuilt and fail.

I tried apt-get remove xtables-addons-dkms, then install, then edited both mconfigs, but that just takes me round the loop again. It feels like groundhog day.

Would life get better for me if I downloaded the source and built my own debs, or would I just waste more time?

Hi

Maybe you also can try if the new version works for you.

See my comments in bug #1092724
https://bugs.launchpad.net/ubuntu/+source/xtables-addons/+bug/1092724

I did not get any crashes like you get once this broken version compiled and installed.

--
Johan

Thanks for your suggestion, jth. It took me a while to get the launchpad bzr set up properly. I also had to install the dh-autoreconf package before the dpkg-buildpackage would run.

It ran very well for a while, then failed with a pile of warnings and errors. The crucial ones seem to be while compiling extensions/xt_DNETMAP.c

(include) extensions/compat_xtables.h:12:3: warning: #warning Kernels below 3.7 not supported

followed by many errors like this:
extensions/xt_DNETMAP.h:16:22: error: field 'prefix' has incompete type

and so on...

I am runnung quantal with a 3.5 kernel. Does that mean I must upgrade before I can have any hope of using ipset support?

Yes, it look like you need the new kernel. You can upgrade only the kernel on quantal or upgrade the hole stsyem from quantal to raring.
Can help you more later. Need to go now.

Bad news for me! I am experimenting on a laptop running quantal, so there isn't a problem (except my time and effort) upgrading. I even have plans to move it to raring 13.04 "properly" and so could consider doing it sooner.

Unfortunately, my production firewall system which really needs xtables-addons (only the ipsets feature) is also running quantal, but with a custom-built kernel. It is a mini-itx that does not have pae support, and all the distribution ubuntu kernels from quantal onwards are built with pae as a pre-requisite. I only moved the system off 12.04 LTS to get around some different problems, and am now stuck with a high maintenance 12.10. The life expectancy of 13.04 is quite short, so I didn't want to keep upgrading this system - it is supposed to be stable!

It is probably too late to downgrade it to 12.04, even if we could be sure there was a suitable xtables-addons package for that distribution.

It looks as if I'm stuck between a rock and a hard place. When in doubt... do nothing.