openthread / ot-br-posix

OpenThread Border Router, a Thread border router for POSIX-based platforms.
https://openthread.io/
BSD 3-Clause "New" or "Revised" License
420 stars 235 forks source link

Error running ./script/setup in Build and install OTBR #2273

Closed DSimeone1989 closed 6 months ago

DSimeone1989 commented 7 months ago

Describe the bug A clear and concise description of what the bug is. Dear all, I try to follow this guide: https://openthread.io/codelabs/openthread-border-router#1 And unfortunately I am having issues with ./script/setup / INFRA_IF_NAME=wlan0 ./script/setup. I get following error and do not know what to do or to enable.

Console/log output If applicable, add console/log output to help explain your problem.

Running ./script/setup

dsimeone1@RPi1:~/ot-br-posix $ ./script/setup +++ dirname ./script/setup ++ cd ./script/.. ++ [[ ! -n '' ]] ++ grep -s 'BeagleBone Black' /sys/firmware/devicetree/base/model ++ case "${OSTYPE}" in ++ have_or_die lsb_release ++ have lsb_release ++ command -v lsb_release +++ lsb_release -i +++ cut -c17- +++ tr '[:upper:]' '[:lower:]' ++ PLATFORM=debian ++ echo 'Current platform is debian' Current platform is debian ++ with BORDER_ROUTING ++ local value +++ printenv BORDER_ROUTING ++ value= ++ [[ -z '' ]] ++ [[ -f examples/platforms/debian/default ]] +++ . examples/platforms/debian/default ++++ NAT64=0 ++++ DNS64=0 ++++ DHCPV6_PD=0 ++++ NETWORK_MANAGER=0 ++++ BACKBONE_ROUTER=1 ++++ BORDER_ROUTING=1 ++++ REST_API=1 +++ eval echo '${BORDER_ROUTING-}' ++++ echo 1 ++ value=1 ++ [[ 1 == 1 ]] ++ with DHCPV6_PD ++ local value +++ printenv DHCPV6_PD ++ value= ++ [[ -z '' ]] ++ [[ -f examples/platforms/debian/default ]] +++ . examples/platforms/debian/default ++++ NAT64=0 ++++ DNS64=0 ++++ DHCPV6_PD=0 ++++ NETWORK_MANAGER=0 ++++ BACKBONE_ROUTER=1 ++++ BORDER_ROUTING=1 ++++ REST_API=1 +++ eval echo '${DHCPV6_PD-}' ++++ echo 0 ++ value=0 ++ [[ 0 == 1 ]] ++ with BORDER_ROUTING ++ local value +++ printenv BORDER_ROUTING ++ value= ++ [[ -z '' ]] ++ [[ -f examples/platforms/debian/default ]] +++ . examples/platforms/debian/default ++++ NAT64=0 ++++ DNS64=0 ++++ DHCPV6_PD=0 ++++ NETWORK_MANAGER=0 ++++ BACKBONE_ROUTER=1 ++++ BORDER_ROUTING=1 ++++ REST_API=1 +++ eval echo '${BORDER_ROUTING-}' ++++ echo 1 ++ value=1 ++ [[ 1 == 1 ]] ++ with NETWORK_MANAGER ++ local value +++ printenv NETWORK_MANAGER ++ value= ++ [[ -z '' ]] ++ [[ -f examples/platforms/debian/default ]] +++ . examples/platforms/debian/default ++++ NAT64=0 ++++ DNS64=0 ++++ DHCPV6_PD=0 ++++ NETWORK_MANAGER=0 ++++ BACKBONE_ROUTER=1 ++++ BORDER_ROUTING=1 ++++ REST_API=1 +++ eval echo '${NETWORK_MANAGER-}' ++++ echo 0 ++ value=0 ++ [[ 0 == 1 ]] ++ STAGE_DIR=/home/dsimeone1/ot-br-posix/stage ++ BUILD_DIR=/home/dsimeone1/ot-br-posix/build ++ [[ -d /home/dsimeone1/ot-br-posix/stage ]] ++ [[ -d /home/dsimeone1/ot-br-posix/build ]] ++ export PATH=/home/dsimeone1/ot-br-posix/stage/usr/bin:/home/dsimeone1/ot-br-posix/stage/usr/sbin:/home/dsimeone1/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/games:/usr/games:/home/dsimeone1/n/bin:/home/dsimeone1/.local/bin:/home/dsimeone1/.local/bin ++ PATH=/home/dsimeone1/ot-br-posix/stage/usr/bin:/home/dsimeone1/ot-br-posix/stage/usr/sbin:/home/dsimeone1/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/games:/usr/games:/home/dsimeone1/n/bin:/home/dsimeone1/.local/bin:/home/dsimeone1/.local/bin +++ basename ./script/setup ++ TASKNAME=setup ++ BEFORE_HOOK=examples/platforms/debian/before_setup ++ AFTER_HOOK=examples/platforms/debian/after_setup ++ [[ ! -f examples/platforms/debian/before_setup ]] ++ BEFORE_HOOK=/dev/null ++ [[ ! -f examples/platforms/debian/after_setup ]] ++ AFTER_HOOK=/dev/null

CMake Deprecation Warning at third_party/cJSON/repo/CMakeLists.txt:2 (cmake_minimum_required): Compatibility with CMake < 2.8.12 will be removed from a future version of CMake.

Update the VERSION argument value or use a ... suffix to tell CMake that the project does not need compatibility with older versions.

CMake Warning (dev) at third_party/cJSON/repo/CMakeLists.txt:4 (project): Policy CMP0048 is not set: project() command manages VERSION variables. Run "cmake --help-policy CMP0048" for policy details. Use the cmake_policy command to set the policy and suppress this warning.

The following variable(s) would be set to empty:

PROJECT_VERSION
PROJECT_VERSION_MAJOR
PROJECT_VERSION_MINOR
PROJECT_VERSION_PATCH

This warning is for project developers. Use -Wno-dev to suppress it.

-- Configuring done -- Generating done -- Build files have been written to: /home/dsimeone1/ot-br-posix/build/otbr

The deamon I find for this is running.

dsimeone1@RPi1:~ $ systemctl status mdnsd.service ● mdns.service - LSB: Apple Multicast DNS / DNS Service Discovery daemon Loaded: loaded (/etc/init.d/mdns; generated) Active: active (running) since Fri 2024-05-03 13:32:50 CEST; 1min 49s ago Docs: man:systemd-sysv-generator(8) Tasks: 1 (limit: 8738) CPU: 88ms CGroup: /system.slice/mdns.service └─967 /usr/sbin/mdnsd

May 03 13:32:50 RPi1 systemd[1]: Starting mdns.service - LSB: Apple Multicast DNS / DNS Service Discovery daemon... May 03 13:32:50 RPi1 mdns[928]: Starting Apple Darwin Multicast DNS / DNS Service Discovery daemon: mdnsd. May 03 13:32:50 RPi1 systemd[1]: Started mdns.service - LSB: Apple Multicast DNS / DNS Service Discovery daemon. May 03 13:32:50 RPi1 mDNSResponder[967]: Default: mDNSResponder (Engineering Build) (May 3 2024 12:15:46) starting

Additional context Add any other context about the problem here. I also followed this guide: https://openthread.io/codelabs/openthread-hardware#2 I was able to get to step 4 without any hiccups.

Hope you can help me out. Thanks in advance.

wgtdkp commented 7 months ago

Have you ran ./script/bootstrap?

DSimeone1989 commented 7 months ago

Yes, I did.

It mentioned something like this:

In file included from NetMonitor.c:26: ../mDNSCore/mDNS.c: In function ‘mDNS_StopQueryWithRemoves’: ../mDNSCore/mDNS.c:14272:74: warning: implicit conversion from ‘enum ’ to ‘QC_result’ [-Wenum-conversion] 14272 | question->QuestionCallback(m, question, &cr->resrec, mDNSfalse); | ^~~~~ ../mDNSCore/mDNS.c: In function ‘mDNS_DeactivateNetWake_internal’: ../mDNSCore/mDNS.c:15216:68: warning: implicit conversion from ‘enum ’ to ‘QC_result’ [-Wenum-conversion] 15216 | m->SPSBrowseCallback(m, &set->NetWakeBrowse, mDNSNULL, mDNSfalse); | ^~~~~ cc objects/prod/mDNSPosix.c.o objects/prod/mDNSUNP.c.o objects/prod/mDNSDebug.c.o objects/prod/GenLinkedList.c.o objects/prod/DNSDigest.c.o objects/prod/uDNS.c.o objects/prod/DNSCommon.c.o objects/prod/PlatformCommon.c.o objects/prod/dso.c.o objects/prod/dso-transport.c.o objects/prod/dnssd_clientshim.c.o objects/prod/mdns_addr_tailq.c.o objects/prod/misc_utilities.c.o objects/prod/NetMonitor.c.o -o build/prod/mDNSNetMonitor NetMonitor done cc -I../mDNSCore -I../mDNSShared -I../mDNSShared/utilities -I../DSO -I../ServiceRegistration -Iobjects/prod -fwrapv -W -Wall -DPOSIX_BUILD -DPID_FILE=\"/var/run/mdnsd.pid\" -DMDNS_UDS_SERVERPATH=\"/var/run/mdnsd\" -D_GNU_SOURCE -DHAVE_IPV6 -DNOT_HAVE_SA_LEN -DUSES_NETLINK -DHAVE_LINUX -DTARGET_OS_LINUX -ftabstop=4 -Wno-expansion-to-defined -g -DMDNS_DEBUGMSGS=0 -c -fPIC -o objects/prod/nss_mdns.c.so.o nss_mdns.c cc -shared -o build/prod/libnss_mdns-0.2.so objects/prod/dnssd_clientlib.c.so.o objects/prod/dnssd_clientstub.c.so.o objects/prod/dnssd_ipc.c.so.o objects/prod/dnssd_errstring.c.so.o objects/prod/nss_mdns.c.so.o strip -S build/prod/libnss_mdns-0.2.so Name Service Switch module done

The bootstrap script ended with:

. /usr/sbin/mdnsd installed cp build/prod/libdns_sd.so /usr/lib/libdns_sd.so.1 ln -s -f /usr/lib/libdns_sd.so.1 /usr/lib/libdns_sd.so /usr/lib/libdns_sd.so.1 /usr/include/dns_sd.h installed /usr/share/man/man8/mdnsd.8 installed cp ../Clients/build/dns-sd /usr/bin/dns-sd /usr/bin/dns-sd installed cp build/prod/libnss_mdns-0.2.so /lib/libnss_mdns-0.2.so chmod 444 /lib/libnss_mdns-0.2.so ln -s -f /lib/libnss_mdns-0.2.so /lib/libnss_mdns.so.2 ldconfig /lib/libnss_mdns.so.2 /etc/nss_mdns.conf /usr/share/man/man5/nss_mdns.conf.5 /usr/share/man/man8/libnss_mdns.8 installed

I "sudo systemctl daemon-reload" and tried it again. The error in the setup script is still the same.

SEGGER/JLink, nRF5x Command Line Tools and ARM GNU Toolchain are installed.

wgtdkp commented 7 months ago

Thanks! Could you help provide below information:

  1. The git commit id of your ot-br-posix checkout
  2. file /usr/include/dns_sd.h on your RPi
  3. Can you confirm that it is "mDNSResponder-1790.80.10" being installed in your script/bootstrap? You can check by looking at the source code of file script/bootstrap (search "mDNSResponder-1790.80.10")
DSimeone1989 commented 7 months ago

Hi, 1. commit ae8b4a8ac4fca7b385d143387f6083ae49dffdef (grafted, HEAD -> main, origin/main, origin/HEAD) Author: dependabot[bot] 49699333+dependabot[bot]@users.noreply.github.com Date: Thu May 2 08:27:54 2024 -0700

  1. dns_sdh.txt

  2. I would say "yes", but look for yourself. Log_bootstrap.txt

Thanks.

DSimeone1989 commented 6 months ago

Dear all, Any updates on this one? Is anything missing? Thx.

superwhd commented 6 months ago

Your dns_sd.h may be too old according to its content.

The copyright section of your dns_sd.h:

 * Copyright (c) 2003-2004, Apple Computer, Inc. All rights reserved.\

Mine (which is version 1661):

Copyright (c) 2003-2023 Apple Inc. All rights reserved.

I'm not sure why it wasn't updated at the bootstrap step though.

wgtdkp commented 6 months ago

Your Log_bootstrap.txt doesn't include the full bootstrap log.

My suspect is that it's not successfully installing the mDNSResponder in the bootstrap script, but you are using the existing old version on your raspberry pi. Could you just install the latest version of mDNSRsponder by yourself?

E.g.

  1. Download and unzip https://github.com/apple-oss-distributions/mDNSResponder/releases/tag/mDNSResponder-2200.100.94.0.2
  2. go to mDNSPosix folder and run make install
DSimeone1989 commented 6 months ago

Dear all, First of all thank you very much. Here the complete bootstrap file: script_bootstrap.txt

It seems I have installed mDNSResponder-1790.80.10. I did as you said - see my steps: mDNSResponder.txt

At the end I get this error:

../mDNSShared/PlatformCommon.c: In function ‘getMillisecondsFromTicks’: ../mDNSShared/PlatformCommon.c:803:37: error: ‘UINT_MAX’ undeclared (first use in this function) 803 | const mDNSu32 maxMilliseconds = UINT_MAX; | ^~~~ ../mDNSShared/PlatformCommon.c:41:1: note: ‘UINT_MAX’ is defined in header ‘’; did you forget to ‘#include ’? 40 | #include "mdns_strict.h" +++ |+#include 41 | ../mDNSShared/PlatformCommon.c:803:37: note: each undeclared identifier is reported only once for each function it appears in 803 | const mDNSu32 maxMilliseconds = UINT_MAX; | ^~~~ ../mDNSShared/PlatformCommon.c:810:47: error: ‘INT_MAX’ undeclared (first use in this function) 810 | const mDNSu32 maxWholeSecsFromMaxTicks = (INT_MAX / (mDNSu32)mDNSPlatformOneSecond); | ^~~ ../mDNSShared/PlatformCommon.c:810:47: note: ‘INT_MAX’ is defined in header ‘’; did you forget to ‘#include ’? make: *** [Makefile:514: objects/prod/PlatformCommon.c.o] Error 1

Can you help me once again? Thank you very much.

superwhd commented 6 months ago

For manual installation of mDNSResponder, I think you can just add #include <limits.h> in mDNSShared/PlatformCommon.c and it will be buildable

DSimeone1989 commented 6 months ago

Dear superwhd,

did that already and got this in the process. PlatformCommonc.txt mbedtls_error.txt

I am so sorry to bother you again and again. But I am a noob in this.

Thx

DSimeone1989 commented 6 months ago

Dear all,

I think I am at the last step... Log bootstrap: bootstrap_new.txt Log setup: setup_new.txt

Last step fails (27/27). I am running my Raspberry Pi 4B with Homebridge on Avahi. Do I have to change it or is there a way around?

Thanks.

superwhd commented 6 months ago

I think you need to check which version of mDNSResponder is installed and referenced by otbr-agent when building. Maybe you can take a look at dns_sd.h to see if it's the desired version.

Also, I saw two versions 2200.100.94.0.2 and 1790.80.10 in your logs. If you'd like to install mDNSResponder manually instead of letting script/boostrap handle it, you should skip the step of installing it in script/bootstrap.

DSimeone1989 commented 6 months ago

Dear all,

I handled the script/boostrap concerning mDNSResonder. But I do not know what to do with dns_sd.h and otbr-agent. Can you explain what I have to do exactly?

Thanks.

superwhd commented 6 months ago

Your log:

/usr/bin/ld: src/mdns/libotbr-mdns.a(mdns_mdnssd.cpp.o): in function `otbr::Mdns::PublisherMDnsSd::HostSubscription::Resolve()':\
mdns_mdnssd.cpp:(.text+0x412c): undefined reference to `DNSServiceGetAddrInfo'\

It indicates that the version of your dns_sd.h header is incorrect, which means you may not failed to install the header file.

You may check if /usr/include/dns_sd.h is the same as mDNSShared/dns_sd.h. If not, you may consider manually removing it and rerun script/bootstrap to install mDNSResponder.

DSimeone1989 commented 6 months ago

Dear all,

I deleted /usr/include/dns_sd.h, I installed 2200.100.94.0.2 manually and edited #mDNS in the bootstrap to not getting 1790.80.10, I edited #include to mDNSShared/PlatformCommon.c, I switched to eth0, then I ran every command again and still get the same result.

Last step - otbr_install fails with the same look. [491/491] Linking CXX executable src/agent/otbr-agent FAILED: src/agent/otbr-agent : && /usr/bin/c++ -rdynamic src/agent/CMakeFiles/otbr-agent.dir/application.cpp.o src/agent/CMakeFiles/otbr-agent.dir/main.cpp.o -o src/agent/otbr-agent src/border_agent/libotbr-border-agent.a src/backbone_router/libotbr-backbone-router.a src/dbus/server/libotbr-dbus-server.a src/mdns/libotbr-mdns.a src/rest/libotbr-rest.a third_party/openthread/repo/src/posix/platform/libopenthread-posix.a third_party/openthread/repo/src/cli/libopenthread-cli-ftd.a third_party/openthread/repo/src/core/libopenthread-ftd.a third_party/openthread/repo/src/lib/spinel/libopenthread-spinel-rcp.a third_party/openthread/repo/src/lib/spinel/libopenthread-radio-spinel.a third_party/openthread/repo/src/lib/hdlc/libopenthread-hdlc.a src/sdp_proxy/libotbr-sdp-proxy.a src/ncp/libotbr-ncp.a src/common/libotbr-common.a src/utils/libotbr-utils.a -lsystemd src/trel_dnssd/libotbr-trel-dnssd.a src/dbus/common/libotbr-dbus-common.a -L/usr/lib/aarch64-linux-gnu -ldbus-1 src/proto/libotbr-proto.a /usr/lib/aarch64-linux-gnu/libprotobuf-lite.so third_party/http-parser/libhttp_parser.a third_party/cJSON/repo/libcjson.a -lm src/mdns/libotbr-mdns.a src/utils/libotbr-utils.a -ldns_sd src/common/libotbr-common.a third_party/openthread/repo/src/posix/platform/libopenthread-posix.a third_party/openthread/repo/src/cli/libopenthread-cli-ftd.a third_party/openthread/repo/src/lib/spinel/libopenthread-spinel-rcp.a third_party/openthread/repo/src/lib/spinel/libopenthread-radio-spinel.a third_party/openthread/repo/src/lib/hdlc/libopenthread-hdlc.a third_party/openthread/repo/src/lib/platform/libopenthread-platform.a third_party/openthread/repo/src/lib/url/libopenthread-url.a -lutil -lrt -lanl third_party/openthread/repo/src/core/libopenthread-ftd.a third_party/openthread/repo/third_party/tcplp/libtcplp-ftd.a third_party/openthread/repo/src/core/libopenthread-ftd.a third_party/openthread/repo/third_party/tcplp/libtcplp-ftd.a third_party/openthread/repo/third_party/mbedtls/repo/library/libmbedtls.a third_party/openthread/repo/third_party/mbedtls/repo/library/libmbedx509.a third_party/openthread/repo/third_party/mbedtls/repo/library/libmbedcrypto.a && : /usr/bin/ld: src/mdns/libotbr-mdns.a(mdns_mdnssd.cpp.o): in function otbr::Mdns::PublisherMDnsSd::ServiceInstanceResolution::GetAddrInfo(unsigned int)': mdns_mdnssd.cpp:(.text+0x3c34): undefined reference toDNSServiceGetAddrInfo' /usr/bin/ld: src/mdns/libotbr-mdns.a(mdns_mdnssd.cpp.o): in function otbr::Mdns::PublisherMDnsSd::HostSubscription::Resolve()': mdns_mdnssd.cpp:(.text+0x412c): undefined reference toDNSServiceGetAddrInfo' collect2: error: ld returned 1 exit status ninja: build stopped: subcommand failed.

Does this help: cat /var/log/syslog | grep otbr

2024-05-14T09:12:38.522082+02:00 RPi1 systemd[1]: Stopping otbr-firewall.service - LSB: OTBR firewall... 2024-05-14T09:12:47.357034+02:00 RPi1 otbr-firewall[558]: + case "$1" in 2024-05-14T09:12:47.357284+02:00 RPi1 otbr-firewall[558]: + firewall_start 2024-05-14T09:12:47.357430+02:00 RPi1 otbr-firewall[558]: + firewall_stop 2024-05-14T09:12:47.357566+02:00 RPi1 otbr-firewall[558]: + ip6tables -C FORWARD -o wpan0 -j OTBR_FORWARD_INGRESS 2024-05-14T09:12:47.359710+02:00 RPi1 otbr-firewall[628]: ip6tables v1.8.9 (nf_tables): Chain 'OTBR_FORWARD_INGRESS' does not exist 2024-05-14T09:12:47.359926+02:00 RPi1 otbr-firewall[628]: Try ip6tables -h' or 'ip6tables --help' for more information. 2024-05-14T09:12:47.361295+02:00 RPi1 otbr-firewall[558]: + ip6tables -L OTBR_FORWARD_INGRESS 2024-05-14T09:12:47.363175+02:00 RPi1 otbr-firewall[679]: ip6tables v1.8.9 (nf_tables): chainOTBR_FORWARD_INGRESS' in table filter' is incompatible, use 'nft' tool. 2024-05-14T09:12:47.364485+02:00 RPi1 otbr-firewall[558]: + ipset_destroy_if_exist otbr-ingress-deny-src 2024-05-14T09:12:47.364671+02:00 RPi1 otbr-firewall[558]: + ipset list otbr-ingress-deny-src 2024-05-14T09:12:47.382691+02:00 RPi1 systemd[1]: Starting otbr-firewall.service - LSB: OTBR firewall... 2024-05-14T09:12:47.458446+02:00 RPi1 otbr-firewall[680]: ipset v7.17: The set with the given name does not exist 2024-05-14T09:12:47.458803+02:00 RPi1 otbr-firewall[558]: + ipset_destroy_if_exist otbr-ingress-deny-src-swap 2024-05-14T09:12:47.458984+02:00 RPi1 otbr-firewall[558]: + ipset list otbr-ingress-deny-src-swap 2024-05-14T09:12:47.467492+02:00 RPi1 otbr-firewall[692]: ipset v7.17: The set with the given name does not exist 2024-05-14T09:12:47.468113+02:00 RPi1 otbr-firewall[558]: + ipset_destroy_if_exist otbr-ingress-allow-dst 2024-05-14T09:12:47.468470+02:00 RPi1 otbr-firewall[558]: + ipset list otbr-ingress-allow-dst 2024-05-14T09:12:47.474967+02:00 RPi1 otbr-firewall[694]: ipset v7.17: The set with the given name does not exist 2024-05-14T09:12:47.475484+02:00 RPi1 otbr-firewall[558]: + ipset_destroy_if_exist otbr-ingress-allow-dst-swap 2024-05-14T09:12:47.475777+02:00 RPi1 otbr-firewall[558]: + ipset list otbr-ingress-allow-dst-swap 2024-05-14T09:12:47.481437+02:00 RPi1 otbr-firewall[695]: ipset v7.17: The set with the given name does not exist 2024-05-14T09:12:47.482141+02:00 RPi1 otbr-firewall[558]: + ipset create -exist otbr-ingress-deny-src hash:net family inet6 2024-05-14T09:12:47.518697+02:00 RPi1 otbr-firewall[558]: + ipset create -exist otbr-ingress-deny-src-swap hash:net family inet6 2024-05-14T09:12:47.525766+02:00 RPi1 otbr-firewall[558]: + ipset create -exist otbr-ingress-allow-dst hash:net family inet6 2024-05-14T09:12:47.533488+02:00 RPi1 otbr-firewall[558]: + ipset create -exist otbr-ingress-allow-dst-swap hash:net family inet6 2024-05-14T09:12:47.540535+02:00 RPi1 otbr-firewall[558]: + ip6tables -N OTBR_FORWARD_INGRESS 2024-05-14T09:12:47.552023+02:00 RPi1 otbr-firewall[558]: + ip6tables -I FORWARD 1 -o wpan0 -j OTBR_FORWARD_INGRESS 2024-05-14T09:12:47.563025+02:00 RPi1 otbr-firewall[558]: + ip6tables -A OTBR_FORWARD_INGRESS -m pkttype --pkt-type unicast -i wpan0 -j DROP 2024-05-14T09:12:47.675183+02:00 RPi1 otbr-firewall[558]: + ip6tables -A OTBR_FORWARD_INGRESS -m set --match-set otbr-ingress-deny-src src -j DROP 2024-05-14T09:12:47.722396+02:00 RPi1 otbr-firewall[558]: + ip6tables -A OTBR_FORWARD_INGRESS -m set --match-set otbr-ingress-allow-dst dst -j ACCEPT 2024-05-14T09:12:47.733719+02:00 RPi1 otbr-firewall[558]: + ip6tables -A OTBR_FORWARD_INGRESS -m pkttype --pkt-type unicast -j DROP 2024-05-14T09:12:47.743749+02:00 RPi1 otbr-firewall[558]: + ip6tables -A OTBR_FORWARD_INGRESS -j ACCEPT 2024-05-14T09:12:49.309536+02:00 RPi1 systemd[1]: Started otbr-firewall.service - LSB: OTBR firewall. 2024-05-14T09:37:19.544830+02:00 RPi1 systemd[1]: Stopping otbr-firewall.service - LSB: OTBR firewall... 2024-05-14T09:37:19.575275+02:00 RPi1 otbr-firewall[4270]: + case "$1" in 2024-05-14T09:37:19.575557+02:00 RPi1 otbr-firewall[4270]: + firewall_stop 2024-05-14T09:37:19.575659+02:00 RPi1 otbr-firewall[4270]: + ip6tables -C FORWARD -o wpan0 -j OTBR_FORWARD_INGRESS 2024-05-14T09:37:19.577742+02:00 RPi1 otbr-firewall[4270]: + ip6tables -D FORWARD -o wpan0 -j OTBR_FORWARD_INGRESS 2024-05-14T09:37:19.611849+02:00 RPi1 otbr-firewall[4270]: + ip6tables -C FORWARD -o wpan0 -j OTBR_FORWARD_INGRESS 2024-05-14T09:37:19.614481+02:00 RPi1 otbr-firewall[4278]: ip6tables: Bad rule (does a matching rule exist in that chain?). 2024-05-14T09:37:19.614686+02:00 RPi1 otbr-firewall[4270]: + ip6tables -L OTBR_FORWARD_INGRESS 2024-05-14T09:37:19.618169+02:00 RPi1 otbr-firewall[4279]: Chain OTBR_FORWARD_INGRESS (0 references) 2024-05-14T09:37:19.618328+02:00 RPi1 otbr-firewall[4279]: target prot opt source destination 2024-05-14T09:37:19.618397+02:00 RPi1 otbr-firewall[4279]: DROP all -- anywhere anywhere PKTTYPE = unicast 2024-05-14T09:37:19.618445+02:00 RPi1 otbr-firewall[4279]: DROP all -- anywhere anywhere match-set otbr-ingress-deny-src src 2024-05-14T09:37:19.618497+02:00 RPi1 otbr-firewall[4279]: ACCEPT all -- anywhere anywhere match-set otbr-ingress-allow-dst dst 2024-05-14T09:37:19.618554+02:00 RPi1 otbr-firewall[4279]: DROP all -- anywhere anywhere PKTTYPE = unicast 2024-05-14T09:37:19.618594+02:00 RPi1 otbr-firewall[4279]: ACCEPT all -- anywhere anywhere 2024-05-14T09:37:19.618689+02:00 RPi1 otbr-firewall[4270]: + ip6tables -w -F OTBR_FORWARD_INGRESS 2024-05-14T09:37:19.621137+02:00 RPi1 otbr-firewall[4270]: + ip6tables -w -X OTBR_FORWARD_INGRESS 2024-05-14T09:37:19.675916+02:00 RPi1 otbr-firewall[4270]: + ipset_destroy_if_exist otbr-ingress-deny-src 2024-05-14T09:37:19.676057+02:00 RPi1 otbr-firewall[4270]: + ipset list otbr-ingress-deny-src 2024-05-14T09:37:19.678265+02:00 RPi1 otbr-firewall[4282]: Name: otbr-ingress-deny-src 2024-05-14T09:37:19.678420+02:00 RPi1 otbr-firewall[4282]: Type: hash:net 2024-05-14T09:37:19.678470+02:00 RPi1 otbr-firewall[4282]: Revision: 7 2024-05-14T09:37:19.678518+02:00 RPi1 otbr-firewall[4282]: Header: family inet6 hashsize 1024 maxelem 65536 bucketsize 12 initval 0x92755564 2024-05-14T09:37:19.678570+02:00 RPi1 otbr-firewall[4282]: Size in memory: 1240 2024-05-14T09:37:19.678619+02:00 RPi1 otbr-firewall[4282]: References: 0 2024-05-14T09:37:19.678667+02:00 RPi1 otbr-firewall[4282]: Number of entries: 0 2024-05-14T09:37:19.678712+02:00 RPi1 otbr-firewall[4282]: Members: 2024-05-14T09:37:19.678809+02:00 RPi1 otbr-firewall[4270]: + ipset destroy otbr-ingress-deny-src 2024-05-14T09:37:19.680729+02:00 RPi1 otbr-firewall[4270]: + ipset_destroy_if_exist otbr-ingress-deny-src-swap 2024-05-14T09:37:19.680856+02:00 RPi1 otbr-firewall[4270]: + ipset list otbr-ingress-deny-src-swap 2024-05-14T09:37:19.683121+02:00 RPi1 otbr-firewall[4284]: Name: otbr-ingress-deny-src-swap 2024-05-14T09:37:19.683274+02:00 RPi1 otbr-firewall[4284]: Type: hash:net 2024-05-14T09:37:19.683362+02:00 RPi1 otbr-firewall[4284]: Revision: 7 2024-05-14T09:37:19.683410+02:00 RPi1 otbr-firewall[4284]: Header: family inet6 hashsize 1024 maxelem 65536 bucketsize 12 initval 0xce40192a 2024-05-14T09:37:19.683494+02:00 RPi1 otbr-firewall[4284]: Size in memory: 1240 2024-05-14T09:37:19.683542+02:00 RPi1 otbr-firewall[4284]: References: 0 2024-05-14T09:37:19.683616+02:00 RPi1 otbr-firewall[4284]: Number of entries: 0 2024-05-14T09:37:19.683661+02:00 RPi1 otbr-firewall[4284]: Members: 2024-05-14T09:37:19.683769+02:00 RPi1 otbr-firewall[4270]: + ipset destroy otbr-ingress-deny-src-swap 2024-05-14T09:37:19.685603+02:00 RPi1 otbr-firewall[4270]: + ipset_destroy_if_exist otbr-ingress-allow-dst 2024-05-14T09:37:19.685730+02:00 RPi1 otbr-firewall[4270]: + ipset list otbr-ingress-allow-dst 2024-05-14T09:37:19.688019+02:00 RPi1 otbr-firewall[4286]: Name: otbr-ingress-allow-dst 2024-05-14T09:37:19.688188+02:00 RPi1 otbr-firewall[4286]: Type: hash:net 2024-05-14T09:37:19.688241+02:00 RPi1 otbr-firewall[4286]: Revision: 7 2024-05-14T09:37:19.688289+02:00 RPi1 otbr-firewall[4286]: Header: family inet6 hashsize 1024 maxelem 65536 bucketsize 12 initval 0x3bf52d3d 2024-05-14T09:37:19.688351+02:00 RPi1 otbr-firewall[4286]: Size in memory: 1240 2024-05-14T09:37:19.688391+02:00 RPi1 otbr-firewall[4286]: References: 0 2024-05-14T09:37:19.688430+02:00 RPi1 otbr-firewall[4286]: Number of entries: 0 2024-05-14T09:37:19.688466+02:00 RPi1 otbr-firewall[4286]: Members: 2024-05-14T09:37:19.688547+02:00 RPi1 otbr-firewall[4270]: + ipset destroy otbr-ingress-allow-dst 2024-05-14T09:37:19.690366+02:00 RPi1 otbr-firewall[4270]: + ipset_destroy_if_exist otbr-ingress-allow-dst-swap 2024-05-14T09:37:19.690493+02:00 RPi1 otbr-firewall[4270]: + ipset list otbr-ingress-allow-dst-swap 2024-05-14T09:37:19.692784+02:00 RPi1 otbr-firewall[4288]: Name: otbr-ingress-allow-dst-swap 2024-05-14T09:37:19.692955+02:00 RPi1 otbr-firewall[4288]: Type: hash:net 2024-05-14T09:37:19.693004+02:00 RPi1 otbr-firewall[4288]: Revision: 7 2024-05-14T09:37:19.693046+02:00 RPi1 otbr-firewall[4288]: Header: family inet6 hashsize 1024 maxelem 65536 bucketsize 12 initval 0x345d24b5 2024-05-14T09:37:19.693118+02:00 RPi1 otbr-firewall[4288]: Size in memory: 1240 2024-05-14T09:37:19.693171+02:00 RPi1 otbr-firewall[4288]: References: 0 2024-05-14T09:37:19.693216+02:00 RPi1 otbr-firewall[4288]: Number of entries: 0 2024-05-14T09:37:19.693254+02:00 RPi1 otbr-firewall[4288]: Members: 2024-05-14T09:37:19.693332+02:00 RPi1 otbr-firewall[4270]: + ipset destroy otbr-ingress-allow-dst-swap 2024-05-14T09:37:19.695965+02:00 RPi1 systemd[1]: otbr-firewall.service: Deactivated successfully. 2024-05-14T09:37:19.696420+02:00 RPi1 systemd[1]: Stopped otbr-firewall.service - LSB: OTBR firewall. 2024-05-14T09:37:29.760806+02:00 RPi1 systemd[1]: Starting otbr-firewall.service - LSB: OTBR firewall... 2024-05-14T09:37:29.791838+02:00 RPi1 otbr-firewall[4445]: + case "$1" in 2024-05-14T09:37:29.792072+02:00 RPi1 otbr-firewall[4445]: + firewall_start 2024-05-14T09:37:29.792122+02:00 RPi1 otbr-firewall[4445]: + firewall_stop 2024-05-14T09:37:29.792163+02:00 RPi1 otbr-firewall[4445]: + ip6tables -C FORWARD -o wpan0 -j OTBR_FORWARD_INGRESS 2024-05-14T09:37:29.793778+02:00 RPi1 otbr-firewall[4451]: ip6tables v1.8.9 (nf_tables): Chain 'OTBR_FORWARD_INGRESS' does not exist 2024-05-14T09:37:29.793934+02:00 RPi1 otbr-firewall[4451]: Tryip6tables -h' or 'ip6tables --help' for more information. 2024-05-14T09:37:29.794016+02:00 RPi1 otbr-firewall[4445]: + ip6tables -L OTBR_FORWARD_INGRESS 2024-05-14T09:37:29.796577+02:00 RPi1 otbr-firewall[4452]: ip6tables v1.8.9 (nf_tables): chain OTBR_FORWARD_INGRESS' in tablefilter' is incompatible, use 'nft' tool. 2024-05-14T09:37:29.796764+02:00 RPi1 otbr-firewall[4445]: + ipset_destroy_if_exist otbr-ingress-deny-src 2024-05-14T09:37:29.796817+02:00 RPi1 otbr-firewall[4445]: + ipset list otbr-ingress-deny-src 2024-05-14T09:37:29.799013+02:00 RPi1 otbr-firewall[4453]: ipset v7.17: The set with the given name does not exist 2024-05-14T09:37:29.799186+02:00 RPi1 otbr-firewall[4445]: + ipset_destroy_if_exist otbr-ingress-deny-src-swap 2024-05-14T09:37:29.799236+02:00 RPi1 otbr-firewall[4445]: + ipset list otbr-ingress-deny-src-swap 2024-05-14T09:37:29.801449+02:00 RPi1 otbr-firewall[4454]: ipset v7.17: The set with the given name does not exist 2024-05-14T09:37:29.801638+02:00 RPi1 otbr-firewall[4445]: + ipset_destroy_if_exist otbr-ingress-allow-dst 2024-05-14T09:37:29.801688+02:00 RPi1 otbr-firewall[4445]: + ipset list otbr-ingress-allow-dst 2024-05-14T09:37:29.803893+02:00 RPi1 otbr-firewall[4455]: ipset v7.17: The set with the given name does not exist 2024-05-14T09:37:29.804077+02:00 RPi1 otbr-firewall[4445]: + ipset_destroy_if_exist otbr-ingress-allow-dst-swap 2024-05-14T09:37:29.804127+02:00 RPi1 otbr-firewall[4445]: + ipset list otbr-ingress-allow-dst-swap 2024-05-14T09:37:29.806268+02:00 RPi1 otbr-firewall[4456]: ipset v7.17: The set with the given name does not exist 2024-05-14T09:37:29.806403+02:00 RPi1 otbr-firewall[4445]: + ipset create -exist otbr-ingress-deny-src hash:net family inet6 2024-05-14T09:37:29.808783+02:00 RPi1 otbr-firewall[4445]: + ipset create -exist otbr-ingress-deny-src-swap hash:net family inet6 2024-05-14T09:37:29.811116+02:00 RPi1 otbr-firewall[4445]: + ipset create -exist otbr-ingress-allow-dst hash:net family inet6 2024-05-14T09:37:29.813646+02:00 RPi1 otbr-firewall[4445]: + ipset create -exist otbr-ingress-allow-dst-swap hash:net family inet6 2024-05-14T09:37:29.815987+02:00 RPi1 otbr-firewall[4445]: + ip6tables -N OTBR_FORWARD_INGRESS 2024-05-14T09:37:29.818691+02:00 RPi1 otbr-firewall[4445]: + ip6tables -I FORWARD 1 -o wpan0 -j OTBR_FORWARD_INGRESS 2024-05-14T09:37:29.821490+02:00 RPi1 otbr-firewall[4445]: + ip6tables -A OTBR_FORWARD_INGRESS -m pkttype --pkt-type unicast -i wpan0 -j DROP 2024-05-14T09:37:29.824700+02:00 RPi1 otbr-firewall[4445]: + ip6tables -A OTBR_FORWARD_INGRESS -m set --match-set otbr-ingress-deny-src src -j DROP 2024-05-14T09:37:29.827935+02:00 RPi1 otbr-firewall[4445]: + ip6tables -A OTBR_FORWARD_INGRESS -m set --match-set otbr-ingress-allow-dst dst -j ACCEPT 2024-05-14T09:37:29.831166+02:00 RPi1 otbr-firewall[4445]: + ip6tables -A OTBR_FORWARD_INGRESS -m pkttype --pkt-type unicast -j DROP 2024-05-14T09:37:29.834485+02:00 RPi1 otbr-firewall[4445]: + ip6tables -A OTBR_FORWARD_INGRESS -j ACCEPT 2024-05-14T09:37:29.838418+02:00 RPi1 systemd[1]: Started otbr-firewall.service - LSB: OTBR firewall.

I am about to give up. Thanks for your help anyway.

superwhd commented 6 months ago

You may try using avahi instead of mDNSResponder if you'd like to give it a try. Avahi is installed via package manager so it may be less error prone.

OTBR_MDNS=avahi ./script/setup
DSimeone1989 commented 6 months ago

It did it! It ran through! Thank you very much!