You are not logged in.

#1 2018-02-21 22:09:13

jernst
Member
From: Silicon Valley
Registered: 2014-03-04
Posts: 290
Website

[SOLVED] Default CONFIG_BPF_SYSCALL to y?

I'm getting lots of journal messages like this:

Feb 21 22:04:33 ubos-container systemd[1]: File /usr/lib/systemd/system/systemd-journald.service:33 configures an IP firewall (IPAddressDeny=any), but the local system does not support BPF/cgroup based firewalling.
Feb 21 22:04:33 ubos-container systemd[1]: Proceeding WITHOUT firewalling in effect!

According to this issue [1]:

Solved by setting CONFIG_BPF_SYSCALL=y in the Linux kernel configuration.

So ... does it make sense to make this the default for future kernels?




[1] https://github.com/systemd/systemd/issues/7188

Last edited by jernst (2018-02-22 19:53:03)

Offline

#2 2018-02-21 22:17:08

loqs
Member
Registered: 2014-03-06
Posts: 17,192

Re: [SOLVED] Default CONFIG_BPF_SYSCALL to y?

Offline

#3 2018-02-22 19:52:25

jernst
Member
From: Silicon Valley
Registered: 2014-03-04
Posts: 290
Website

Re: [SOLVED] Default CONFIG_BPF_SYSCALL to y?

I guess I'm too late :-)

Offline

#4 2018-02-22 20:44:48

loqs
Member
Registered: 2014-03-06
Posts: 17,192

Re: [SOLVED] Default CONFIG_BPF_SYSCALL to y?

You did not specify what kernel or version you were using so I linked the config for the linux kernel in core that already has CONFIG_BPF_SYSCALL so that does not seem to be the cause of your issue.

Offline

Board footer

Powered by FluxBB