I have testes build on 5.7 kernel on CentOS 8 (custom rpm package) You will find commit here https://github.com/sipwise/rtpengine/issues/975
Sergey On Fri, Sep 11, 2020 at 10:53 PM Daniel-Constantin Mierla <[email protected]> wrote: > Related to tainted kernel, I faced the same issue when I deployed > rtpengine on a Suse Enterprise many months ago, so I do not really remember > the exact steps, but there is a way to disable the check of signed kernel > modules (iirc, these are only the ones coming from the kernel source tree, > so if you need to load any external kernel module, you have to disable this > option). > > Quick check on the net, it may have to do with module.sig_enforce option > for kernel loading. > > Cheers, > Daniel > On 11.09.20 21:31, Andrew Chen wrote: > > Sorry let me clarify this line here: > > "...at the time, I was running an older version 8.0.x so I recompiled all > the ngcp packages under this kernel and completed the installation without > issues.." > > 8.0.x is the older ngcp version. I recompiled version 9.0.1.0 under that > new kernel version 5.3.0-1035-aws #37-Ubuntu > > > On Fri, Sep 11, 2020 at 3:29 PM Andrew Chen <[email protected]> wrote: > >> Thanks Alex. >> >> So it turns out my rtpengine stopped working after our latest kernel >> upgrade to: >> >> Linux sjomainrtpe30 5.3.0-1035-aws #37-Ubuntu SMP Sun Sep 6 01:17:09 UTC >> 2020 x86_64 x86_64 x86_64 GNU/Linux >> >> at the time, I was running an older version 8.0.x so I recompiled all the >> ngcp packages under this kernel and completed the installation without >> issues. >> >> As soon as we started making test calls, I received 0 audio from those >> test endpoints. Looking at the rtpengine logs, I see several messages >> that's quite concerning: >> >> Sep 11 18:43:41 sjomainrtpe30 kernel: [ 13.434623] xt_RTPENGINE: >> loading out-of-tree module taints kernel. >> Sep 11 18:43:41 sjomainrtpe30 kernel: [ 13.434670] xt_RTPENGINE: module >> verification failed: signature and/or required key missing - tainting kernel >> Sep 11 18:43:41 sjomainrtpe30 kernel: [ 13.434938] Registering >> xt_RTPENGINE module - version 9.0.1.0+0~mr9.0.1.0 >> >> and >> >> Sep 11 18:49:50 sjomainrtpe30 rtpengine[1030]: WARNING: >> [2-7859@2600:1f1c:4ff:3e01:f64d:2f67:c0fa:c931 >> port 50000]: No support for kernel packet forwarding available (decryption >> cipher or HMAC not supported by kernel module) >> >> which I assume is due to the first error I pasted. >> >> So I tried >> >> - rebooting the system which maybe the module wasn't loaded properly. >> - I reran modprobe to make sure the module is installed >> - I ran some dkms command to see if any error pop up due to the kernel >> version I'm running and I see no errors: >> >> dkms status >> falco, 0.20.0+d77080a, 5.3.0-1032-aws, x86_64: installed >> falco, 0.20.0+d77080a, 5.3.0-1035-aws, x86_64: installed >> ngcp-rtpengine, 9.0.1.0+0~mr9.0.1.0, 5.3.0-1032-aws, x86_64: installed >> ngcp-rtpengine, 9.0.1.0+0~mr9.0.1.0, 5.3.0-1035-aws, x86_64: installed >> >> So I'm running out of options. >> >> Any advice? >> >> >> On Fri, Sep 11, 2020 at 3:17 PM Alex Balashov <[email protected]> >> wrote: >> >>> There is an RTPEngine mailing list, I believe, but RTPEngine questions >>> are often posed here given its close association with Kamailio. What's >>> going on? >>> >>> On 9/11/20 2:57 PM, Andrew Chen wrote: >>> > Hey guys, >>> > >>> > Is this the right place to ask about rtpengine (ngcp) related issues >>> > with kernel packet forwarding? >>> > >>> > Thanks. >>> > >>> > -- >>> > Andy Chen >>> > Sr. Telephony Lead Engineer >>> > achen@ <mailto:[email protected]>fuze.com <http://fuze.com> >>> > >>> > >>> > >>> > *Confidentiality Notice: The information contained in this e-mail and >>> any >>> > attachments may be confidential. If you are not an intended recipient, >>> you >>> > are hereby notified that any dissemination, distribution or copying of >>> this >>> > e-mail is strictly prohibited. If you have received this e-mail in >>> error, >>> > please notify the sender and permanently delete the e-mail and any >>> > attachments immediately. You should not retain, copy or use this >>> e-mail or >>> > any attachment for any purpose, nor disclose all or any part of the >>> > contents to any other person. Thank you.* >>> > >>> > _______________________________________________ >>> > Kamailio (SER) - Users Mailing List >>> > [email protected] >>> > https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users >>> > >>> >>> -- >>> Alex Balashov | Principal | Evariste Systems LLC >>> >>> Tel: +1-706-510-6800 / +1-800-250-5920 (toll-free) >>> Web: http://www.evaristesys.com/, http://www.csrpswitch.com/ >>> >>> _______________________________________________ >>> Kamailio (SER) - Users Mailing List >>> [email protected] >>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users >>> >> >> >> -- >> Andy Chen >> Sr. Telephony Lead Engineer >> 415 516 5535 (M) >> achen@ <[email protected]>fuze.com >> >> > > -- > Andy Chen > Sr. Telephony Lead Engineer > 415 516 5535 (M) > achen@ <[email protected]>fuze.com > > > *Confidentiality Notice: The information contained in this e-mail and any > attachments may be confidential. If you are not an intended recipient, you > are hereby notified that any dissemination, distribution or copying of this > e-mail is strictly prohibited. If you have received this e-mail in error, > please notify the sender and permanently delete the e-mail and any > attachments immediately. You should not retain, copy or use this e-mail or > any attachment for any purpose, nor disclose all or any part of the > contents to any other person. Thank you.* > > _______________________________________________ > Kamailio (SER) - Users Mailing > [email protected]https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users > > -- > Daniel-Constantin Mierla -- www.asipto.comwww.twitter.com/miconda -- > www.linkedin.com/in/miconda > Funding: https://www.paypal.me/dcmierla > > _______________________________________________ > Kamailio (SER) - Users Mailing List > [email protected] > https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users >
_______________________________________________ Kamailio (SER) - Users Mailing List [email protected] https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
