Trying knot 3.0.3 - deb package build fails on Debian Buster

This variant of libbpf, which is available on Debian Buster, isn't supported by Knot DNS. You can choose solution:

Compile Knot DNS with its embedded libbpf via configure --enable-xdp=yes
Install proper libbpf (>= 0.0.6) from source https://github.com/libbpf/libbpf
Disable XDP if you don't need it via configure --enable-xdp=no

Note that Debian testing contains suitable version already https://packages.debian.org/bullseye/libbpf-dev You could also inspire by our packaging https://gitlab.nic.cz/knot/knot-dns/-/tree/master/distro/deb

I installed packages from sid (seems the same ones as are in testing) and I get:

IC -o libknot/xdp/.libs/la-bpf-user.o
In file included from ./libknot/xdp/bpf-user.h:19,
                 from libknot/xdp/bpf-user.c:27:
/usr/include/bpf/xsk.h: In function ‘xsk_ring_prod__needs_wakeup’:
/usr/include/bpf/xsk.h:82:21: error: ‘XDP_RING_NEED_WAKEUP’ undeclared (first use in this function)
  return *r->flags & XDP_RING_NEED_WAKEUP;
                     ^~~~~~~~~~~~~~~~~~~~
/usr/include/bpf/xsk.h:82:21: note: each undeclared identifier is reported only once for each function it appears in
/usr/include/bpf/xsk.h: In function ‘xsk_umem__extract_addr’:
/usr/include/bpf/xsk.h:173:16: error: ‘XSK_UNALIGNED_BUF_ADDR_MASK’ undeclared (first use in this function)
  return addr & XSK_UNALIGNED_BUF_ADDR_MASK;
                ^~~~~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/bpf/xsk.h: In function ‘xsk_umem__extract_offset’:
/usr/include/bpf/xsk.h:178:17: error: ‘XSK_UNALIGNED_BUF_OFFSET_SHIFT’ undeclared (first use in this function)
  return addr >> XSK_UNALIGNED_BUF_OFFSET_SHIFT;
                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Version is:

Package: libbpf-dev
Version: 1:0.2-1

I needed to add some definitions from the newer kernel:

/* Workaround */
#define XDP_RING_NEED_WAKEUP (1 << 0)
#define XSK_UNALIGNED_BUF_OFFSET_SHIFT 48
#define XSK_UNALIGNED_BUF_ADDR_MASK \
    ((1ULL << XSK_UNALIGNED_BUF_OFFSET_SHIFT) - 1)

I think that using the embedded libbpf library would be more straightforward way :-)

@exander77 Any news?

@dsalzman It works after the change I did above.

So far no need to complain.

I did some yaml changes in Debian files (but I had to do it before) and my patches from 2.9.3 went in ok. I am using a version get by apt-get source from unstable so this was kind of expected.

I have to figure out a mechanism so I need less messing with it in the future, but I am using a modified synthrecord. Maybe making it into a separate module and using a stock knot and just loading it? Any thoughts?

And do you use the XDP mode? If so, I would recommend some feedback on this feature. Feel free to send us an email :-)

The yaml-related stuff in Debian is obsolete. We will try to remove it from downstream (unstable/stable). But our packages (https://gitlab.nic.cz/knot/knot-dns/-/tree/master/distro/deb) don't contain it.

Could you describe your modifications of the module? You can rename the modified module and load it dynamically along with the original one.

I read about XDP, I can test it, but I am maintaining DNS server just for my 20 or so domains, but why not. This is personal use. :) So I am not sure if I see any boost. I basically just upgraded to version 3. I plan to enable deterministic ECDSA.

This is my hobby project, I am assigning a domain name to each IPv4 address, actually a lot of domain names.

A simple algorithm is used that assigns names consisting of 6 or more [-a-z0-9] characters. I have a tool to generate these names from IP and then DNS server is able to resolve them through modified synthrecord (I preserved the original functionally, but I have extended it by my own algorithm).

https://257.cz/adns//10
https://257.cz/adns/1.0.0.0/10
https://257.cz/adns/ip/count/offset

Empty ip means current remote IP.

Example input:

https://257.cz/adns/1.0.0.0/10

Example output:

lgyb4z.257.cz
29em9s5.257.cz
3yca8ec.257.cz
5m9z70j.257.cz
7a7n5nq.257.cz
8z5b49x.257.cz
an2-2x3.257.cz
cb0o1ja.257.cz
dzzc05h.257.cz
fnw-zso.257.cz

Example resolve:

000000.257.cz has address 1.0.0.0
1oyozn7.257.cz has address 1.0.0.0
3cwcy9e.257.cz has address 1.0.0.0
50u0wwl.257.cz has address 1.0.0.0
46prpvis.257.cz has address 1.0.0.0
8dpdu4z.257.cz has address 1.0.0.0
a1n1ss5.257.cz has address 1.0.0.0
bqkqrec.257.cz has address 1.0.0.0
deieq0j.257.cz has address 1.0.0.0
f2g2onq.257.cz has address 1.0.0.0

Records are online signed by DNSSEC.

I want to extend it for IPv6 and maybe implement zone walking ability.

Btw, since the new version, I have not seen any issues with signing, I reported in the past: #672 (closed)

Ok, thanks for the info. I thought you want to use XDP.

closed

Trying knot 3.0.3 - deb package build fails on Debian Buster

Designs

Child items ...

Activity

Admin message

Trying knot 3.0.3 - deb package build fails on Debian Buster

Activity