You are not logged in.
Good Afternoon (here at least)!
I am attempting to compile the Linux Memory Extractor from its source for my laptop. However I get the following error on compile:
make -C /lib/modules/5.10.15-arch1-1/build M="/home/user/Documents/Work/Resources/Forensics/LiME/src" modules
make[1]: Entering directory '/usr/lib/modules/5.10.15-arch1-1/build'
Makefile:221: *** building multiple external modules is not supported. Stop.
make[1]: Leaving directory '/usr/lib/modules/5.10.15-arch1-1/build'
make: *** [Makefile:35: default] Error 2I tried using asp to create a clean version of the kernel on the chance that it was some weird config thing that was flying under my radar. Same error returned.
The irritating thing is on a clean VM of Ubuntu the kernel module compiled with no issues. However, it is not using Arch's kernel, so I can't use that compiled module on my main machine.
Any insights would be greatly appreciated.
Offline
$ git clone https://github.com/504ensicsLabs/LiME.git
Cloning into 'LiME'...
remote: Enumerating objects: 5, done.
remote: Counting objects: 100% (5/5), done.
remote: Compressing objects: 100% (5/5), done.
remote: Total 349 (delta 0), reused 1 (delta 0), pack-reused 344
Receiving objects: 100% (349/349), 1.61 MiB | 3.05 MiB/s, done.
Resolving deltas: 100% (185/185), done.
$ cd LiME/src/
$ make
make -C /lib/modules/5.10.11-arch1-1/build M="/tmp/LiME/src" modules
make[1]: Entering directory '/usr/lib/modules/5.10.11-arch1-1/build'
CC [M] /tmp/LiME/src/tcp.o
CC [M] /tmp/LiME/src/disk.o
CC [M] /tmp/LiME/src/main.o
CC [M] /tmp/LiME/src/hash.o
CC [M] /tmp/LiME/src/deflate.o
LD [M] /tmp/LiME/src/lime.o
MODPOST /tmp/LiME/src/Module.symvers
CC [M] /tmp/LiME/src/lime.mod.o
LD [M] /tmp/LiME/src/lime.ko
make[1]: Leaving directory '/usr/lib/modules/5.10.11-arch1-1/build'
strip --strip-unneeded lime.ko
mv lime.ko lime-5.10.11-arch1-1.koSorry for using an old kernel, failing hardware is making me hold off on package updates.
Last edited by loqs (2021-02-11 21:57:58)
Offline
Thanks for the reply loqs.
I spun up a bare-bones Arch VM inside VirtualBox and it worked with the 5.10.15-arch1-1 kernel.
So now the question is: What was causing the issues on my main machines? I tried it on two separate laptops. One used the nvidia drivers and both had virtualbox installed already. Would that matter? Is there some output I could look at to compare the machines?
Thanks again!
Offline
make V=1 #more verbose output might help
uname -a #check running kernel version
type -a make #check if there is something unusual with make
type -a gcc
pacman -Qikk linux linux-headers #check kernel packagesOffline