Skip to content

[Bug Report] eBPF module fails to load on debian trixie #1481

@axis6404

Description

@axis6404

Describe the bug:

eBPF module fails to load on debian 13 trixie.
unable to load eBPF module (opensnitch-dns.o). Your kernel version (6.12.57+deb13-amd64) might not be compatible.
unable to load eBPF module (opensnitch.o). Your kernel version (6.12.57+deb13-amd64) might not be compatible.
unable to load eBPF module (opensnitch-procs.o). Your kernel version (6.12.57+deb13-amd64) might not be compatible.

Include the following information:

To Reproduce:

Start opensnitch

Post error logs:

unable to load eBPF module (opensnitch-dns.o). Your kernel version (6.12.57+deb13-amd64) might not be compatible.
unable to load eBPF module (opensnitch.o). Your kernel version (6.12.57+deb13-amd64) might not be compatible.
unable to load eBPF module (opensnitch-procs.o). Your kernel version (6.12.57+deb13-amd64) might not be compatible.

$ dpkg -l|grep opensnitch
ii opensnitch 1.6.9-3 amd64 GNU/Linux interactive application firewall
ii opensnitch-ebpf-modules 1.6.9-3 amd64 GNU/Linux interactive application firewall eBPF modules
ii python3-opensnitch-ui 1.6.9-3 all GNU/Linux interactive application firewall GUI

$ opensnitchd -check-requirements

    Checking system requirements for kernel version 6.12.57+deb13-amd64

    Checking => CONFIG_KPROBES=y
    Checking => CONFIG_KPROBES_ON_FTRACE=y
    Checking => CONFIG_HAVE_KPROBES=y
    Checking => CONFIG_HAVE_KPROBES_ON_FTRACE=y
    Checking => CONFIG_KPROBE_EVENTS=y

    * kprobes        ✔

    Checking => CONFIG_UPROBES=y
    Checking => CONFIG_UPROBE_EVENTS=y

    * uprobes        ✔

    Checking => CONFIG_FTRACE=y

    * ftrace         ✔

    Checking => CONFIG_HAVE_SYSCALL_TRACEPOINTS=y
    Checking => CONFIG_FTRACE_SYSCALLS=y

    * syscalls       ✔

    Checking => CONFIG_NETFILTER_NETLINK_QUEUE=[my]
    Checking => CONFIG_NFT_QUEUE=[my]
    Checking => CONFIG_NETFILTER_XT_TARGET_NFQUEUE=[my]

    * nfqueue        ✔

    Checking => CONFIG_NETFILTER_NETLINK=[my]
    Checking => CONFIG_NETFILTER_NETLINK_QUEUE=[my]
    Checking => CONFIG_NETFILTER_NETLINK_ACCT=[my]

    * netlink        ✔

    Checking => CONFIG_INET_DIAG=[my]
    Checking => CONFIG_INET_TCP_DIAG=[my]
    Checking => CONFIG_INET_UDP_DIAG=[my]
    Checking => CONFIG_INET_DIAG_DESTROY=[my]

    * net diagnostics        ✔

$ sudo bpftool prog load /usr/lib/opensnitchd/ebpf/opensnitch-dns.o /sys/fs/bpf/opensnitch_dns
libbpf: elf: skipping unrecognized data section(9) maps/addrinfo_args_hash
libbpf: elf: skipping unrecognized data section(10) maps/events
libbpf: elf: skipping unrecognized data section(27) .eh_frame
libbpf: elf: skipping relo section(28) .rel.eh_frame for section(27) .eh_frame
libbpf: prog 'uretprobe__gethostbyname': bad map relo against 'events' in section 'maps/events'
Error: failed to open object file

$ sudo bpftool prog load /usr/lib/opensnitchd/ebpf/opensnitch-procs.o /sys/fs/bpf/opensnitch_dns
libbpf: elf: skipping unrecognized data section(13) maps/heapstore
libbpf: elf: skipping unrecognized data section(14) maps/proc-events
libbpf: elf: skipping unrecognized data section(15) maps/execMap
libbpf: elf: skipping unrecognized data section(32) .eh_frame
libbpf: elf: skipping relo section(33) .rel.eh_frame for section(32) .eh_frame
libbpf: prog 'tracepoint__sched_sched_process_exit': bad map relo against 'execMap' in section 'maps/execMap'

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions