20200210_jeffrey - silenceuncrio/diary GitHub Wiki

0900

review

上禮拜五下班時 M360P proscend 外層的 make 已經做好了

來做 proscend 內層

做 proscend 內層前先修改 /etc/rc.local

#!/bin/sh -e
#
# rc.local
#
# This script is executed at the end of each multiuser runlevel.
# Make sure that the script will "exit 0" on success or any other
# value on error.
#
# In order to enable or disable this script just change the execution
# bits.
#
# By default this script does nothing.



# mount m350.vmdk
mkdir -p /home/jeffrey/m350
sudo mount UUID="7e970ddc-986b-4246-bbcf-f6eb90ed93b5" /home/jeffrey/m350
# execute once is enough ?
# sudo chown -R jeffrey:jeffrey /home/jeffrey/m350

# mount m360.vmdk
mkdir -p /home/jeffrey/m360
sudo mount UUID="c0386d28-334c-4729-9e93-669b8515aa27" /home/jeffrey/m360
# execute once is enough ?
# sudo chown -R jeffrey:jeffrey /home/jeffrey/m360



exit 0

將 jubuntu 重開機

發現 m360 有正常 mount 起來

自己來把 build-m360 container 叫起來

docker container start build-m360
docker exec -it -u user build-m360 bash

一進 container 的起手式

cd /home/user
source proenv.sh

再進 proscend 目錄做 make distclean

cd proscend
make distclean

make menuconfig

make menuconfig

Products/Vendor = M360P/2_PI

make clean 後再 make

make clean
make

proscend 內層一下子就 build 好了

找一片 M360P 透過 uboot 來做 upgrade

M360 - P2 - BGP with MD5 開工

1030

先準備以下環境

+-------+                                       +-------+
|       |                lan                    |       |
| M360P +-------------------+-------------------+ M300  |
|       | 192.168.1.11             192.168.1.13 |       |
+-------+                                       +-------+

已確定兩邊的 bgp 能正常工作

參考 20200121_jeffrey

該天為了評估該工作的可能性以及需要工時有 goole 了一下

參考 Adding MD5-enabled BGP Neighbors

在配置 MD5 時

M360P 與 M300 均出現了錯誤

M360P

Router> enable
Router# configure terminal
Router(config)# router bgp 11
Router(config-router)# neighbor 192.168.1.13 password mypassword
% Error while applying TCP-Sig to session(s)
Router(config-router)#

M300

Router> enable
Router# configure terminal
Router(config)# router bgp 13
Router(config-router)# neighbor 192.168.1.11 password mypassword
% Error while applying TCP-Sig to session(s)
Router(config-router)#

前一個禮拜軟體週會 winston 有提到 bgp with md5 需要打開一個 kernel 的選項

先自己 google 一下

M360P 上 bgp 的 log

2019/11/05 01:43:18 BGP: BGPd 1.1.0 starting: vty@2605, bgp@<all>:179 pid 8016
2019/11/05 01:47:46 BGP: Vty connection from 127.0.0.1
2019/11/05 01:51:22 BGP: Terminating on signal
2019/11/05 01:51:22 BGP: VRF 0 is to be deleted.
2019/11/05 01:51:22 BGP: VRF 0 is to be disabled.
2019/11/05 01:59:00 BGP: BGPd 1.1.0 starting: vty@2605, bgp@<all>:179 pid 23369
2019/11/05 01:59:01 BGP: stream_read_try: read failed on fd 12: Connection reset by peer
2019/11/05 01:59:01 BGP: 192.168.1.13 [Error] bgp_read_packet error: Connection reset by peer
2019/11/05 01:59:11 BGP: stream_read_try: read failed on fd 12: Connection reset by peer
2019/11/05 01:59:11 BGP: 192.168.1.13 [Error] bgp_read_packet error: Connection reset by peer
2019/11/05 01:59:21 BGP: stream_read_try: read failed on fd 12: Connection reset by peer
2019/11/05 01:59:21 BGP: 192.168.1.13 [Error] bgp_read_packet error: Connection reset by peer
2019/11/05 01:59:31 BGP: stream_read_try: read failed on fd 12: Connection reset by peer
2019/11/05 01:59:31 BGP: 192.168.1.13 [Error] bgp_read_packet error: Connection reset by peer
2019/11/05 01:59:39 BGP: %ADJCHANGE: neighbor 192.168.1.13 Up
2019/11/05 02:00:09 BGP: Vty connection from 127.0.0.1
2019/11/05 02:13:13 BGP: Vty connection from 127.0.0.1
2019/11/05 02:16:00 BGP: %NOTIFICATION: sent to neighbor 192.168.1.13 6/6 (Cease/Other Configuration Change) 0 bytes
2019/11/05 02:16:00 BGP: Notification sent to neighbor 192.168.1.13: configuration change
2019/11/05 02:16:00 BGP: sockopt_tcp_signature: setsockopt(7): Protocol not available
2019/11/05 02:16:00 BGP: can't set TCP_MD5SIG option on socket 7: Protocol not available
2019/11/05 02:16:00 BGP: %ADJCHANGE: neighbor 192.168.1.13 Down
2019/11/05 02:16:02 BGP: sockopt_tcp_signature: setsockopt(12): Protocol not available
2019/11/05 02:16:02 BGP: can't set TCP_MD5SIG option on socket 12: Protocol not available
2019/11/05 02:16:02 BGP: sockopt_tcp_signature: setsockopt(12): Protocol not available
2019/11/05 02:16:02 BGP: can't set TCP_MD5SIG option on socket 12: Protocol not available
2019/11/05 02:16:02 BGP: stream_read_try: read failed on fd 12: Connection reset by peer
2019/11/05 02:16:02 BGP: 192.168.1.13 [Error] bgp_read_packet error: Connection reset by peer
2019/11/05 02:16:03 BGP: %ADJCHANGE: neighbor 192.168.1.13 Up
2019/11/05 02:16:39 BGP: %NOTIFICATION: received from neighbor 192.168.1.13 6/6 (Cease/Other Configuration Change) 0 bytes
2019/11/05 02:16:39 BGP: %ADJCHANGE: neighbor 192.168.1.13 Down BGP Notification received
2019/11/05 02:16:40 BGP: sockopt_tcp_signature: setsockopt(12): Protocol not available
2019/11/05 02:16:40 BGP: can't set TCP_MD5SIG option on socket 12: Protocol not available
2019/11/05 02:16:40 BGP: sockopt_tcp_signature: setsockopt(12): Protocol not available
2019/11/05 02:16:40 BGP: can't set TCP_MD5SIG option on socket 12: Protocol not available
2019/11/05 02:16:40 BGP: stream_read_try: read failed on fd 12: Connection reset by peer
2019/11/05 02:16:40 BGP: 192.168.1.13 [Error] bgp_read_packet error: Connection reset by peer
2019/11/05 02:16:42 BGP: %ADJCHANGE: neighbor 192.168.1.13 Up

關鍵的 log

2019/11/05 02:16:00 BGP: sockopt_tcp_signature: setsockopt(7): Protocol not available
2019/11/05 02:16:00 BGP: can't set TCP_MD5SIG option on socket 7: Protocol not available

1120

在 winston 的幫忙下

在以下的關鍵處找到 CONFIG_TCP_MD5SIG

user@44e2d8d07479:~/build_dir/target-mipsel_24kec+dsp_uClibc-0.9.33.2/linux-ramips_mt7621/linux-3.10.14$ cat .config | grep MD5
# CONFIG_TCP_MD5SIG is not set
CONFIG_CRYPTO_MD5=y

又經過自己一番摸索後

透過 make kener_menuconfig 找到了

TCP: MD5 Signature Option support (RFC2385)

 .config - Linux/mips 3.10.14 Kernel Configuration
 > Networking support > Networking options ────────────────────────────────────
  ┌────────────────────────── Networking options ───────────────────────────┐
  │  Arrow keys navigate the menu.  <Enter> selects submenus --->.          │
  │  Highlighted letters are hotkeys.  Pressing <Y> includes, <N> excludes, │
  │  <M> modularizes features.  Press <Esc><Esc> to exit, <?> for Help, </> │
  │  for Search.  Legend: [*] built-in  [ ] excluded  <M> module  < >       │
  │ ┌────^(-)─────────────────────────────────────────────────────────────┐ │
  │ │    [ ]   PF_KEY MIGRATE                                             │ │
  │ │    [*] TCP/IP networking                                            │ │
  │ │    [*]   IP: multicasting                                           │ │
  │ │    [*]   IP: advanced router                                        │ │
  │ │    ...                                                              │ │
  │ │    [ ]   TCP: advanced congestion control  --->                     │ │
  │ │    [ ]   TCP: MD5 Signature Option support (RFC2385)                │ │
  │ │    <*>   The IPv6 protocol  --->                                    │ │
  │ └────┴(+)─────────────────────────────────────────────────────────────┘ │
  ├─────────────────────────────────────────────────────────────────────────┤
  │        <Select>    < Exit >    < Help >    < Save >    < Load >         │
  └─────────────────────────────────────────────────────────────────────────┘

修改 m360p_kernel_defconfig-3.10 如下

diff --git a/m360p_kernel_defconfig-3.10 b/m360p_kernel_defconfig-3.10
index 26c2e6a..b6db2c5 100644
--- a/m360p_kernel_defconfig-3.10
+++ b/m360p_kernel_defconfig-3.10
@@ -502,6 +502,7 @@ CONFIG_SYS_SUPPORTS_MULTITHREADING=y
 CONFIG_SYS_SUPPORTS_SCHED_SMT=y
 CONFIG_SYS_SUPPORTS_SMP=y
 # CONFIG_TCP_CONG_ADVANCED is not set
+CONFIG_TCP_MD5SIG=y
 # CONFIG_THIRD_IF_MT7615E is not set
 CONFIG_THIRD_IF_NONE=y
 CONFIG_TICK_CPU_ACCOUNTING=y
(END)

重新 compile kernel - refer to How to recompile the kernel only?

make target/linux/{clean,compile} V=s

進 proscend 重新產生 image

make clean
make

1300

proscend 目錄 make 有錯

...
cp /home/user/build_dir/target-mipsel_24kec+dsp_uClibc-0.9.33.2/linux-ramips_mt7621/vmlinux-mt7621.uImage image/mips_linux_kernel_image
cp: cannot stat ‘/home/user/build_dir/target-mipsel_24kec+dsp_uClibc-0.9.33.2/linux-ramips_mt7621/vmlinux-mt7621.uImage’: No such file or directory
make: *** [sysupgrade_bin] Error 1
user@44e2d8d07479:~/proscend$

kernel 沒有 install ?

user@44e2d8d07479:~$ make target/linux/install
 make[1] target/linux/install
 make[2] -C target/linux install

沒錯

proscend 下 image 已順利產生

透過 uboot upgrade

再去借一台 M360P

1330

跟 jessy 借了一台 M360P

搭建測試環境如下

+-------+                                       +-------+
|       |                lan                    |       |
| M360P +-------------------+-------------------+ M360P |
|       | 192.168.1.11             192.168.1.13 |       |
+-------+                                       +-------+

參考 Adding MD5-enabled BGP Neighbors

配置 MD5

看起來是建起來了

Router# write
Configuration saved to /etc/quagga/bgpd.conf
Router#
Router# exit

Connection closed by foreign host

write 後得到的 /etc/quagga/bgpd.conf 如下

以 M360P - 192.168.1.11 為例

!
! Zebra configuration saved from vty
!   2019/11/05 04:56:44
!
hostname Router
password zebra
log file /tmp/bgpd.log
!
router bgp 11
 bgp router-id 192.168.1.11
 redistribute kernel
 redistribute connected
 neighbor 192.168.1.13 remote-as 13
 neighbor 192.168.1.13 password mypassword
 neighbor 192.168.1.13 ebgp-multihop 255
!
 address-family ipv6
 exit-address-family
 exit
!
line vty
!

可以發現這多出來的關鍵 command

neighbor 192.168.1.13 password mypassword

1345

試著利用 tcpdump 抓一些封包幫助自己了解沒有 MD5 和有 MD5 的差別到底是什麼

參考使用 wireshark 查看 tcpdump 的抓包结果

1450

多了 neighbor 192.168.1.13 password mypassword 這 command 的差別

在於兩邊的 bgp neighbors 在進行 tcp 3 way handshake 時

TCP packets 會多出了一個 option

TCP MD5 signature

細節可以參考 RFC 2385

Protection of BGP Sessions via the TCP MD5 Signature Option

1530

ariel 注意到 m350 上 fontawesome 的 icon 有異常

我需要修改的是 fa-compress 和 fa-expand

fa-compress to fa-compress-alt
fa-expand to fa-expand-alt

待修改的 fa-compress 有三處

➜  www git:(develop) ✗ grep -r fa-compress
app/feature/dualSim.html:        <i class="fa fa-compress"></i>&nbsp;{{ 'CONNECT' | translate }}</button>
app/feature/dualSim_2apn.html:        <i class="fa fa-compress"></i>&nbsp;{{ 'CONNECT' | translate }}</button>
app/feature/apn_config.html:        <i class="fa fa-compress"></i>&nbsp;{{ 'CONNECT' | translate }}</button>

待修改的 fa-expand 有三處

ome/css/font-awesome.css:.fa-compress:before {
➜  www git:(develop) ✗ grep -r fa-expand
app/feature/dualSim.html:        <i class="fa fa-expand"></i>&nbsp;{{ 'DISCONNECT' | translate }}</button>
app/feature/dualSim_2apn.html:        <i class="fa fa-expand"></i>&nbsp;{{ 'DISCONNECT' | translate }}</button>
app/feature/apn_config.html:        <i class="fa fa-expand"></i>&nbsp;{{ 'DISCONNECT' | translate }}</button>

等 m360 告一段落再來修改

1545

ariel 表示 tty2tcp 需要 porting web ui 到

M300[release/v2.03]
M350[develop]

一樣是等 M360P 告一段落

1615

M360P 先告一段落

就一個修改等待 commit

diff --git a/m360p_kernel_defconfig-3.10 b/m360p_kernel_defconfig-3.10
index 26c2e6a..b6db2c5 100644
--- a/m360p_kernel_defconfig-3.10
+++ b/m360p_kernel_defconfig-3.10
@@ -502,6 +502,7 @@ CONFIG_SYS_SUPPORTS_MULTITHREADING=y
 CONFIG_SYS_SUPPORTS_SCHED_SMT=y
 CONFIG_SYS_SUPPORTS_SMP=y
 # CONFIG_TCP_CONG_ADVANCED is not set
+CONFIG_TCP_MD5SIG=y
 # CONFIG_THIRD_IF_MT7615E is not set
 CONFIG_THIRD_IF_NONE=y
 CONFIG_TICK_CPU_ACCOUNTING=y
(END)

切到 m350 工作 - 一樣使用 jubuntu

m350[develop]

Vendor/Products = CTCU/0_CTCU

先修 fontawesome 的 bug

diff --git a/proscend/prosrc/www/app/feature/apn_config.html b/proscend/prosrc/www/app/feature/apn_config.html
index 876df2d..9ef23a1 100644
--- a/proscend/prosrc/www/app/feature/apn_config.html
+++ b/proscend/prosrc/www/app/feature/apn_config.html
@@ -29,10 +29,10 @@
     <div class="col-sm-3" ng-show="vm.whoAmI.level >= 2">
       <button class="btn btn-primary" ng-show="vm.lte0_proto_state.npsts != 2 && vm.spinner==false"
         data-toggle="modal" data-target="#modal_info" ng-click="vm.connect()">
-        <i class="fa fa-compress"></i>&nbsp;{{ 'CONNECT' | translate }}</button>
+        <i class="fa fa-compress-alt"></i>&nbsp;{{ 'CONNECT' | translate }}</button>^M
       <button class="btn btn-primary" ng-show="vm.lte0_proto_state.npsts == 2 && vm.spinner==false"
         data-toggle="modal" data-target="#modal_info" ng-click="vm.disconnect()">
-        <i class="fa fa-expand"></i>&nbsp;{{ 'DISCONNECT' | translate }}</button>
+        <i class="fa fa-expand-alt"></i>&nbsp;{{ 'DISCONNECT' | translate }}</button>^M

       <button class="btn btn-primary" ng-show="vm.spinner == true">
         <i class="fa fa-spinner fa-pulse fa-fw"></i></button>
diff --git a/proscend/prosrc/www/app/feature/dualSim.html b/proscend/prosrc/www/app/feature/dualSim.html
index 04c733c..aae0773 100644
--- a/proscend/prosrc/www/app/feature/dualSim.html
+++ b/proscend/prosrc/www/app/feature/dualSim.html
@@ -32,10 +32,10 @@
     <div class="col-sm-4">
       <button class="btn btn-primary" ng-show="vm.current_lte.npsts != 2 && vm.spinner==false"
         data-toggle="modal" data-target="#modal_info" ng-click="vm.connect()">
-        <i class="fa fa-compress"></i>&nbsp;{{ 'CONNECT' | translate }}</button>
+        <i class="fa fa-compress-alt"></i>&nbsp;{{ 'CONNECT' | translate }}</button>^M
       <button class="btn btn-primary" ng-show="vm.current_lte.npsts == 2 && vm.spinner==false"
         data-toggle="modal" data-target="#modal_info" ng-click="vm.disconnect()">
-        <i class="fa fa-expand"></i>&nbsp;{{ 'DISCONNECT' | translate }}</button>
+        <i class="fa fa-expand-alt"></i>&nbsp;{{ 'DISCONNECT' | translate }}</button>^M

       <button class="btn btn-primary" ng-show="vm.spinner == true">
         <i class="fa fa-spinner fa-pulse fa-fw"></i></button>
diff --git a/proscend/prosrc/www/app/feature/dualSim_2apn.html b/proscend/prosrc/www/app/feature/dualSim_2apn.html
index 1faf100..a858279 100644
--- a/proscend/prosrc/www/app/feature/dualSim_2apn.html
+++ b/proscend/prosrc/www/app/feature/dualSim_2apn.html
@@ -29,10 +29,10 @@
     <div class="col-sm-3">
       <button class="btn btn-primary" ng-show="vm.lte0_proto_state.npsts != 2 && vm.spinner==false"
         data-toggle="modal" data-target="#modal_info" ng-click="vm.connect()">
-        <i class="fa fa-compress"></i>&nbsp;{{ 'CONNECT' | translate }}</button>
+        <i class="fa fa-compress-alt"></i>&nbsp;{{ 'CONNECT' | translate }}</button>^M
       <button class="btn btn-primary" ng-show="vm.lte0_proto_state.npsts == 2 && vm.spinner==false"
         data-toggle="modal" data-target="#modal_info" ng-click="vm.disconnect()">
-        <i class="fa fa-expand"></i>&nbsp;{{ 'DISCONNECT' | translate }}</button>
+        <i class="fa fa-expand-alt"></i>&nbsp;{{ 'DISCONNECT' | translate }}</button>^M

       <button class="btn btn-primary" ng-show="vm.spinner == true">
         <i class="fa fa-spinner fa-pulse fa-fw"></i></button>
(END)

build image 實際試試

透過 web 做 firmware upgrade

1600

重開機後發現 web 起不來

複製 /tmp/icos/web/lighttpd.conf 並修改 server.port 方便測試

root@ICR-401:/home/admin# cp /tmp/icos/web/lighttpd.conf /tmp/
root@ICR-401:/home/admin# vi /tmp/lighttpd.conf

執行失敗

root@ICR-401:/home/admin# lighttpd -f /tmp/lighttpd.conf

/usr/sbin/lighttpd: symbol 'getrandom': can't resolve symbol

從沒見過的錯誤

先回退到一個好的點 - 利用 git checkout 到上禮拜四的 commit

產生 image

透過 tftp upload firmware.img 後來做 firmware upgrade

web 還是一樣起不來 - /home/log/web.log 不停的刷新

不過 m350 我一上電 web 有起來

我還是透過 web 來做 firmware upgrade

試著透過 uboot 來做 upgrade

發現 lighttpd 一樣起不來

1710

參考 20200206_jeffrey

我最後一次在 m350 做的 commit 使用的虛擬機是 jjbox 而不是 jubuntu

目前懷疑是 jubuntu 造成的問題

jubuntu 關機

jjbox 開機

透過 tftp 來 upgrade jjbox 裡的 image - firmware.img

結果一樣...

透過 uboot 來 upgrade

好了... 奇怪...

1730

目前使用 jjbox

pull 最新的 m350[develop]

再修正一次 fontawesome 的錯誤

透過 web 來做 firmware upgrade

lighttpd 正常工作

修正 fontawesome 的錯誤也正確

上 code

m350[develop] - correct the icon name since we update Font Awesome from version 4.6.3 to 5.1

fa-compress to fa-compress-alt
fa-expand to fa-expand-alt

commit 9feb8529c673a673e356bf26161396c17256018c
Refs: [develop], {origin/develop}
Author: jeffrey <[email protected]>
Date:   Mon Feb 10 17:46:26 2020 +0800

    correct the icon name since we update Font Awesome from version 4.6.3 to 5.1
    - fa-compress to fa-compress-alt
    - fa-expand to fa-expand-alt

 proscend/prosrc/www/app/feature/apn_config.html   | 4 ++--
 proscend/prosrc/www/app/feature/dualSim.html      | 4 ++--
 proscend/prosrc/www/app/feature/dualSim_2apn.html | 4 ++--
 3 files changed, 6 insertions(+), 6 deletions(-)

jubuntu 上 m350 的問題待查不過可以放後面一點

明天繼續利用 jjbox 來做 m350 的 tty2tcp web ui