Hello!
The prerequisite check of shorewall reports several kernel moduls are not loaded:
The currently loaded modules are:
Questions:
How can I load these modules?
Do I need to recompile the kernel?
If yes, is there any best practice for recompiling kernel?
THX
The prerequisite check of shorewall reports several kernel moduls are not loaded:
Code:
root@pc4-svp:/var/lib/vz/dump# shorewall check
Checking using Shorewall 5.0.4...
Processing /etc/shorewall/params ...
Processing /etc/shorewall/shorewall.conf...
Loading Modules...
modprobe: ERROR: could not insert 'nf_conntrack_ftp': Exec format error
modprobe: ERROR: could not insert 'nf_conntrack_h323': Exec format error
modprobe: ERROR: could not insert 'nf_conntrack_irc': Exec format error
modprobe: ERROR: could not insert 'nf_conntrack_netbios_ns': Exec format error
modprobe: ERROR: could not insert 'nf_conntrack_netlink': Exec format error
modprobe: ERROR: could not insert 'nf_conntrack_pptp': Exec format error
modprobe: ERROR: could not insert 'nf_conntrack_proto_gre': Exec format error
modprobe: ERROR: could not insert 'nf_conntrack_proto_sctp': Exec format error
modprobe: ERROR: could not insert 'nf_conntrack_proto_udplite': Exec format error
modprobe: ERROR: could not insert 'nf_conntrack_sip': Exec format error
modprobe: ERROR: could not insert 'nf_conntrack_tftp': Exec format error
modprobe: ERROR: could not insert 'nf_conntrack_sane': Exec format error
modprobe: ERROR: could not insert 'nf_nat_amanda': Exec format error
modprobe: ERROR: could not insert 'nf_nat_ftp': Exec format error
modprobe: ERROR: could not insert 'nf_nat_h323': Exec format error
modprobe: ERROR: could not insert 'nf_nat_irc': Exec format error
modprobe: ERROR: could not insert 'nf_nat_pptp': Exec format error
modprobe: ERROR: could not insert 'nf_nat_proto_gre': Exec format error
modprobe: ERROR: could not insert 'nf_nat_sip': Exec format error
modprobe: ERROR: could not insert 'nf_nat_snmp_basic': Exec format error
modprobe: ERROR: could not insert 'nf_nat_tftp': Exec format error
modprobe: ERROR: could not insert 'nf_log_ipv4': Exec format error
modprobe: ERROR: could not insert 'xt_LOG': Exec format error
modprobe: ERROR: could not insert 'xt_NFLOG': Exec format error
ERROR: Your kernel/iptables do not include state match support. No version of Shorewall will run on this systemThe currently loaded modules are:
Code:
root@pc4-svp:/var/lib/vz/dump# lsmod
Module Size Used by
veth 16384 0
ip_set 45056 0
ip6table_filter 16384 0
ip6_tables 28672 1 ip6table_filter
iptable_filter 16384 1
softdog 16384 1
nfsd 319488 2
auth_rpcgss 61440 1 nfsd
nfs_acl 16384 1 nfsd
nfs 258048 0
lockd 94208 2 nfs,nfsd
grace 16384 2 nfsd,lockd
fscache 65536 1 nfs
sunrpc 331776 6 nfs,nfsd,auth_rpcgss,lockd,nfs_acl
ib_iser 53248 0
rdma_cm 45056 1 ib_iser
iw_cm 45056 1 rdma_cm
ib_cm 45056 1 rdma_cm
ib_sa 32768 2 rdma_cm,ib_cm
ib_mad 49152 2 ib_cm,ib_sa
ib_core 102400 6 rdma_cm,ib_cm,ib_sa,iw_cm,ib_mad,ib_iser
ib_addr 20480 2 rdma_cm,ib_core
iscsi_tcp 20480 0
libiscsi_tcp 24576 1 iscsi_tcp
libiscsi 53248 3 libiscsi_tcp,iscsi_tcp,ib_iser
scsi_transport_iscsi 98304 4 iscsi_tcp,ib_iser,libiscsi
ipt_MASQUERADE 16384 2
nf_nat_masquerade_ipv4 16384 1 ipt_MASQUERADE
iptable_nat 16384 1
nf_conntrack_ipv4 20480 1
nf_defrag_ipv4 16384 1 nf_conntrack_ipv4
nf_nat_ipv4 16384 1 iptable_nat
nf_nat 24576 2 nf_nat_ipv4,nf_nat_masquerade_ipv4
nf_conntrack 106496 4 nf_nat,nf_nat_ipv4,nf_nat_masquerade_ipv4,nf_conntrack_ipv4
ip_tables 28672 2 iptable_filter,iptable_nat
x_tables 36864 5 ip6table_filter,ip_tables,ipt_MASQUERADE,iptable_filter,ip6_tables
nfnetlink_log 20480 1
intel_rapl 20480 0
x86_pkg_temp_thermal 16384 0
intel_powerclamp 16384 0
coretemp 16384 0
kvm_intel 167936 4
kvm 516096 1 kvm_intel
snd_hda_codec_hdmi 49152 1
crct10dif_pclmul 16384 0
snd_hda_codec_realtek 86016 1
crc32_pclmul 16384 0
snd_hda_codec_generic 73728 1 snd_hda_codec_realtek
i915 1138688 2
snd_hda_intel 36864 0
aesni_intel 167936 0
snd_hda_codec 135168 4 snd_hda_codec_realtek,snd_hda_codec_hdmi,snd_hda_codec_generic,snd_hda_intel
aes_x86_64 20480 1 aesni_intel
lrw 16384 1 aesni_intel
gf128mul 16384 1 lrw
drm_kms_helper 126976 1 i915
glue_helper 16384 1 aesni_intel
snd_hda_core 65536 5 snd_hda_codec_realtek,snd_hda_codec_hdmi,snd_hda_codec_generic,snd_hda_codec,snd_hda_intel
ablk_helper 16384 1 aesni_intel
mei_me 36864 0
snd_hwdep 16384 1 snd_hda_codec
snd_pcm 102400 4 snd_hda_codec_hdmi,snd_hda_codec,snd_hda_intel,snd_hda_core
snd_timer 32768 1 snd_pcm
drm 356352 3 i915,drm_kms_helper
root@pc4-svp:/var/lib/vz/dump# lsmod
Module Size Used by
veth 16384 0
ip_set 45056 0
ip6table_filter 16384 0
ip6_tables 28672 1 ip6table_filter
iptable_filter 16384 1
softdog 16384 1
nfsd 319488 2
auth_rpcgss 61440 1 nfsd
nfs_acl 16384 1 nfsd
nfs 258048 0
lockd 94208 2 nfs,nfsd
grace 16384 2 nfsd,lockd
fscache 65536 1 nfs
sunrpc 331776 6 nfs,nfsd,auth_rpcgss,lockd,nfs_acl
ib_iser 53248 0
rdma_cm 45056 1 ib_iser
iw_cm 45056 1 rdma_cm
ib_cm 45056 1 rdma_cm
ib_sa 32768 2 rdma_cm,ib_cm
ib_mad 49152 2 ib_cm,ib_sa
ib_core 102400 6 rdma_cm,ib_cm,ib_sa,iw_cm,ib_mad,ib_iser
ib_addr 20480 2 rdma_cm,ib_core
iscsi_tcp 20480 0
libiscsi_tcp 24576 1 iscsi_tcp
libiscsi 53248 3 libiscsi_tcp,iscsi_tcp,ib_iser
scsi_transport_iscsi 98304 4 iscsi_tcp,ib_iser,libiscsi
ipt_MASQUERADE 16384 2
nf_nat_masquerade_ipv4 16384 1 ipt_MASQUERADE
iptable_nat 16384 1
nf_conntrack_ipv4 20480 1
nf_defrag_ipv4 16384 1 nf_conntrack_ipv4
nf_nat_ipv4 16384 1 iptable_nat
nf_nat 24576 2 nf_nat_ipv4,nf_nat_masquerade_ipv4
nf_conntrack 106496 4 nf_nat,nf_nat_ipv4,nf_nat_masquerade_ipv4,nf_conntrack_ipv4
ip_tables 28672 2 iptable_filter,iptable_nat
x_tables 36864 5 ip6table_filter,ip_tables,ipt_MASQUERADE,iptable_filter,ip6_tables
nfnetlink_log 20480 1
intel_rapl 20480 0
x86_pkg_temp_thermal 16384 0
intel_powerclamp 16384 0
coretemp 16384 0
kvm_intel 167936 4
kvm 516096 1 kvm_intel
snd_hda_codec_hdmi 49152 1
crct10dif_pclmul 16384 0
snd_hda_codec_realtek 86016 1
crc32_pclmul 16384 0
snd_hda_codec_generic 73728 1 snd_hda_codec_realtek
i915 1138688 2
snd_hda_intel 36864 0
aesni_intel 167936 0
snd_hda_codec 135168 4 snd_hda_codec_realtek,snd_hda_codec_hdmi,snd_hda_codec_generic,snd_hda_intel
aes_x86_64 20480 1 aesni_intel
lrw 16384 1 aesni_intel
gf128mul 16384 1 lrw
drm_kms_helper 126976 1 i915
glue_helper 16384 1 aesni_intel
snd_hda_core 65536 5 snd_hda_codec_realtek,snd_hda_codec_hdmi,snd_hda_codec_generic,snd_hda_codec,snd_hda_intel
ablk_helper 16384 1 aesni_intel
mei_me 36864 0
snd_hwdep 16384 1 snd_hda_codec
snd_pcm 102400 4 snd_hda_codec_hdmi,snd_hda_codec,snd_hda_intel,snd_hda_core
snd_timer 32768 1 snd_pcm
drm 356352 3 i915,drm_kms_helper
cryptd 20480 2 aesni_intel,ablk_helper
i2c_algo_bit 16384 1 i915
psmouse 126976 0
snd 86016 8 snd_hda_codec_realtek,snd_hwdep,snd_timer,snd_hda_codec_hdmi,snd_pcm,snd_hda_codec_generic,snd_hda_codec,snd_hda_intel
mei 102400 1 mei_me
serio_raw 16384 0
pcspkr 16384 0
shpchp 36864 0
soundcore 16384 1 snd
lpc_ich 24576 0
i2c_i801 24576 0
video 36864 1 i915
tpm_infineon 20480 0
mac_hid 16384 0
8250_fintek 16384 0
vhost_net 20480 1
vhost 36864 1 vhost_net
macvtap 20480 1 vhost_net
macvlan 24576 1 macvtap
nfnetlink_queue 20480 0
nfnetlink 16384 4 nfnetlink_log,ip_set,nfnetlink_queue
autofs4 40960 2
ahci 36864 5
libahci 32768 1 ahci
pata_acpi 16384 0
e1000e 237568 0
ptp 20480 1 e1000e
pps_core 20480 1 ptpQuestions:
How can I load these modules?
Do I need to recompile the kernel?
If yes, is there any best practice for recompiling kernel?
THX
