V2EX = way to explore

V2EX 是一个关于分享和探索的地方

现在注册

已注册用户请登录

这是一个创建于 1171 天前的主题，其中的信息可能已经有所发展或是发生改变。

RT,

光猫型号，hs8145x6, 电信最新款千兆猫，查了下自带 udp-tunnel.ko 。想着能不能编译下 wireguard 模块。居然好像成功了。

第 1 条附言 · 2021-09-10 09:26:59 +08:00

用 lsmod 查看，wireguard 模块加载是成功的。
运行 wg，没有显示协议不支持。

但是，用 ip link add wg0 type wireguard, 显示 segment fault.
dmesg 查看了下日志，没看懂。
暂时不搞了。
还是老老实实地用 ss 吧，毕竟不需要内核模块支持。

第 2 条附言 · 2021-09-10 09:32:05 +08:00

具体编译，wireguard-linux-compat

替换掉 Makefile

PWD := $(shell pwd)
obj-m += wireguard.o

all:
        make ARCH=arm -C $(KERNEL)  M=$(PWD) modules
clean:
        make -C $(KERNEL)  M=$(PWD) clean

make ARCH=arm KERNEL=/mnt/linux-4.4.197 CROSS_COMPILE=/mnt/buildroot/output/host/bin/arm-linux-

参考这里的编译方法。 github.com/0neday/OptiXstarHS8145X6/tree/main/persist-root-shell

第 3 条附言 · 2021-09-10 18:15:21 +08:00

编译报 undefined，可能与内核的 config 有关，现在找不到适配的 config

```
Building modules, stage 2.
MODPOST 1 modules
WARNING: "udp_tunnel_xmit_skb" [/mnt/wireguard-linux-compat/src/wireguard.ko] undefined!
WARNING: "udp_sock_create6" [/mnt/wireguard-linux-compat/src/wireguard.ko] undefined!
WARNING: "setup_udp_tunnel_sock" [/mnt/wireguard-linux-compat/src/wireguard.ko] undefined!
WARNING: "udp_tunnel_sock_release" [/mnt/wireguard-linux-compat/src/wireguard.ko] undefined!
WARNING: "udp_tunnel6_xmit_skb" [/mnt/wireguard-linux-compat/src/wireguard.ko] undefined!
WARNING: "udp_sock_create4" [/mnt/wireguard-linux-compat/src/wireguard.ko] undefined!
CC /mnt/wireguard-linux-compat/src/wireguard.mod.o
LD [M] /mnt/wireguard-linux-compat/src/wireguard.ko
make[1]: Leaving directory '/mnt/linux-4.4.197'
```

第 4 条附言 · 2021-09-10 18:16:08 +08:00

编译报 undefined ，可能与内核的 config 有关，现在找不到适配的 config


  Building modules, stage 2.
  MODPOST 1 modules
WARNING: "udp_tunnel_xmit_skb" [/mnt/wireguard-linux-compat/src/wireguard.ko] undefined!
WARNING: "udp_sock_create6" [/mnt/wireguard-linux-compat/src/wireguard.ko] undefined!
WARNING: "setup_udp_tunnel_sock" [/mnt/wireguard-linux-compat/src/wireguard.ko] undefined!
WARNING: "udp_tunnel_sock_release" [/mnt/wireguard-linux-compat/src/wireguard.ko] undefined!
WARNING: "udp_tunnel6_xmit_skb" [/mnt/wireguard-linux-compat/src/wireguard.ko] undefined!
WARNING: "udp_sock_create4" [/mnt/wireguard-linux-compat/src/wireguard.ko] undefined!
  CC      /mnt/wireguard-linux-compat/src/wireguard.mod.o
  LD [M]  /mnt/wireguard-linux-compat/src/wireguard.ko
make[1]: Leaving directory '/mnt/linux-4.4.197'

第 5 条附言 · 2021-09-10 18:51:58 +08:00

```
[root@x6 /mnt/jffs2/hw] # lsmod | grep wire
wireguard 0
ip6_udp_tunnel 2 wireguard,l2tp_core
udp_tunnel 2 wireguard,l2tp_core
ipv6 52 wireguard,bridge,datapath_v6ext,datapath...

# busybox
[root@x6 /mnt/jffs2/hw] # ip link add wg0 type wireguard
ip: RTNETLINK answers: Operation not supported

[root@x6 /mnt/jffs2/hw] # /bin/ip link add wg0 type wireguard
Segmentation fault

```

第 6 条附言 · 2021-09-10 18:54:21 +08:00

[root@x6 /mnt/jffs2/hw] # lsmod | grep wire
wireguard 0
ip6_udp_tunnel 2 wireguard,l2tp_core
udp_tunnel 2 wireguard,l2tp_core
ipv6 52 wireguard,bridge,datapath_v6ext,datapath...

# busybox
[root@x6 /mnt/jffs2/hw] # ip link add wg0 type wireguard
ip: RTNETLINK answers: Operation not supported

[root@x6 /mnt/jffs2/hw] # /bin/ip link add wg0 type wireguard
Segmentation fault

# dmesg
ip: unhandled page fault (11) , code 0x005
CPU: 1 PID: 20978 Comm: ip Tainted: P        W  O    4.4.197 #1
Hardware name: Hisilicon A9

第 7 条附言 · 2021-09-10 18:56:15 +08:00

[root@x6 /mnt/jffs2/hw] # wg setconf wg0 wg0.conf
Unable to modify interface: Protocol not supported

第 8 条附言 · 2021-09-11 08:45:08 +08:00

big thanks ysc3839

#static compile for armv7

GOARM=5 GOARCH=arm GOOS=linux CGO_ENABLED=0 go build -ldflags "-extldflags '-static' -w -s " -o wireguard-go-armv5

insmod tun.ko, 8145x6 tun.ko not default install

insmod  /lib/modules/4.4.197/kernel/drivers/net/tun.ko

exec

LOG_LEVEL=debug wireguard-go-armv5  wg0

check

[root@x6 /mnt/jffs2/hw] # ifconfig  wg0
wg0       Link encap:UNSPEC  HWaddr 
          POINTOPOINT NOARP MULTICAST  MTU:1420  Metric:1

第 9 条附言 · 2021-09-11 10:33:01 +08:00

#add conf

#set ip
ip -4 address add 172.16.0.2/32 dev wg0

#up wg0
ip link set mtu 1280 up dev wg0

#add route
ip -4 route add 172.217.0.1 dev wg0

#set conf
wg setconf wg0 wg0.conf

能在光猫 x6上 ping 172.217.0.1，在电脑上无法ping。很奇怪，难道要做什么iptables 策略吗？

第 10 条附言 · 2021-09-11 10:35:35 +08:00

```
[root@x6 /mnt/jffs2/hw] # route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 0.0.0.0 0.0.0.0 U 10 0 0 ppp257
10.0.1.1 0.0.0.0 255.255.255.255 UH 0 0 0 wg0

#ping test on x6
[root@x6 /mnt/jffs2/hw] # ping 10.0.1.1
PING 10.0.1.1 (10.0.1.1): 56 data bytes
64 bytes from 10.0.1.1: seq=0 ttl=64 time=19.197 ms
64 bytes from 10.0.1.1: seq=1 ttl=64 time=20.565 ms

#ping on pc
C:\Users\xxx>ping 10.0.1.1

Pinging 10.0.1.1 with 32 bytes of data:

```

wireguard

模块

udp-tunnel

hs8145x6

11 条回复 • 2021-11-18 10:02:56 +08:00