Welcome, Guest |
You have to register before you can post on our site.
|
Latest Threads |
Giving away a Pinebook Pr...
Forum: Pinebook Hardware and Accessories
Last Post: tuxifan
8 hours ago
» Replies: 0
» Views: 22
|
Armbian images available
Forum: Linux on RockPro64
Last Post: Shraunfnq
Yesterday, 10:16 AM
» Replies: 61
» Views: 114,430
|
Bare metal on Pinephone P...
Forum: PinePhone Pro Software
Last Post: alain
08-19-2025, 07:58 AM
» Replies: 0
» Views: 109
|
Seeking Contributors: Apa...
Forum: PinePhone Pro Software
Last Post: geometrylitegame12
08-19-2025, 01:38 AM
» Replies: 4
» Views: 4,014
|
Pinephone Pro wont boot t...
Forum: General Discussion of PinePhone Pro
Last Post: KC9UDX
08-18-2025, 06:15 PM
» Replies: 5
» Views: 308
|
PinePhone Pro discontinue...
Forum: General Discussion of PinePhone Pro
Last Post: Kevin Kofler
08-18-2025, 04:30 PM
» Replies: 8
» Views: 585
|
fixing the ppkb mainboard...
Forum: PinePhone Pro Accessories
Last Post: Jite
08-18-2025, 02:57 PM
» Replies: 2
» Views: 157
|
Are there plannes to crea...
Forum: PinePhone Pro Hardware
Last Post: biketool
08-18-2025, 04:12 AM
» Replies: 5
» Views: 1,028
|
Pinephone pro stuck while...
Forum: PinePhone Pro Hardware
Last Post: Supervisor
08-16-2025, 06:40 PM
» Replies: 2
» Views: 209
|
Compatible U.S. carriers ...
Forum: General Discussion on PinePhone
Last Post: Zebulon Walton
08-15-2025, 07:34 PM
» Replies: 2
» Views: 256
|
|
|
ufw on 5.14.8-2-MANJARO-ARM |
Posted by: brkozak - 10-02-2021, 10:17 AM - Forum: PinePhone Software
- No Replies
|
 |
My new Pinephone just came in the mail today. Everything's going great and I'm loving the phone but I just ran into a snag trying to do some basic security hardening.
ufw enable returns the following
Quote:ERROR: problem running ufw-init
iptables-restore v1.8.7 (legacy): Couldn't load match `limit':No such file or directory
Error occurred at line: 63
Try `iptables-restore -h' or 'iptables-restore --help' for more information.
iptables-restore v1.8.7 (legacy): Couldn't load match `limit':No such file or directory
Error occurred at line: 24
Try `iptables-restore -h' or 'iptables-restore --help' for more information.
ip6tables-restore v1.8.7 (legacy): Couldn't load match `hl':No such file or directory
Error occurred at line: 50
Try `ip6tables-restore -h' or 'ip6tables-restore --help' for more information.
ip6tables-restore v1.8.7 (legacy): Couldn't load match `limit':No such file or directory
Error occurred at line: 21
Try `ip6tables-restore -h' or 'ip6tables-restore --help' for more information.
Problem running '/etc/ufw/before.rules'
Problem running '/etc/ufw/user.rules'
Problem running '/etc/ufw/before6.rules'
Problem running '/etc/ufw/user6.rules'
I've done a little bit of debugging and found some interesting things by stracing iptables. The following strace snippets show where iptables is failing
strace iptables -C INPUT -m limit
Quote:socket(AF_INET, SOCK_RAW, IPPROTO_RAW) = 3
fcntl(3, F_SETFD, FD_CLOEXEC) = 0
newfstatat(AT_FDCWD, "/proc/net/ip_tables_names", {st_mode=S_IFREG|0440, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
statfs("/proc/net/ip_tables_names", {f_type=PROC_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0
getsockopt(3, SOL_IP, IPT_SO_GET_REVISION_MATCH, 0xffffd599c688, [30]) = -1 ENOENT (No such file or directory)
close(3) = 0
write(2, "iptables v1.8.7 (legacy): ", 26iptables v1.8.7 (legacy): ) = 26
write(2, "Couldn't load match `limit':No s"..., 54Couldn't load match `limit':No such file or directory
strace ip6tables -C INPUT -m limit
Quote:socket(AF_INET6, SOCK_RAW, IPPROTO_RAW) = 3
fcntl(3, F_SETFD, FD_CLOEXEC) = 0
newfstatat(AT_FDCWD, "/proc/net/ip6_tables_names", {st_mode=S_IFREG|0440, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
statfs("/proc/net/ip6_tables_names", {f_type=PROC_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0
getsockopt(3, SOL_IPV6, IP6T_SO_GET_REVISION_MATCH, 0xffffe47f8038, [30]) = -1 ENOENT (No such file or directory)
close(3) = 0
write(2, "ip6tables v1.8.7 (legacy): ", 27ip6tables v1.8.7 (legacy): ) = 27
write(2, "Couldn't load match `limit':No s"..., 54Couldn't load match `limit':No such file or directory
strace ip6tables -C INPUT -m hl
Quote:socket(AF_INET6, SOCK_RAW, IPPROTO_RAW) = 3
fcntl(3, F_SETFD, FD_CLOEXEC) = 0
newfstatat(AT_FDCWD, "/proc/net/ip6_tables_names", {st_mode=S_IFREG|0440, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
statfs("/proc/net/ip6_tables_names", {f_type=PROC_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0
getsockopt(3, SOL_IPV6, IP6T_SO_GET_REVISION_MATCH, 0xffffd790aae8, [30]) = -1 ENOENT (No such file or directory)
close(3) = 0
write(2, "ip6tables v1.8.7 (legacy): ", 27ip6tables v1.8.7 (legacy): ) = 27
write(2, "Couldn't load match `hl':No such"..., 51Couldn't load match `hl':No such file or directory
As you can see, the problem appears to be caused by a call to getsockopt with SOL_IPV6 and either IP6T_SO_GET_REVISION_MATCH or IPT_SO_GET_REVISION_MATCH. I haven't quite compiled enough kernels in my day to know for sure, but I suspect that 5.14.8-2-MANJARO-ARM may be missing some flags which are required for these getsockopt calls to succeed. Can anybody confirm?
|
|
|
ADB and USB A to A cable tips |
Posted by: dieselnutjob - 10-02-2021, 08:01 AM - Forum: Android on Quartz64
- No Replies
|
 |
I struggled for a few hours to get ADB commands on my laptop talking to the Android OS on the Quartz64.
Here are some tips that I think will help:-
I used an A to A USB cable from Amazon. It's just a straight through 4 way to 4 way A to A cable.
As you look at the USB ports on the Quartz64 it has to be the top right one (with black plastic tongue), above the USB 3 port (with blue plastic tongue).
I can only get it to work if the cable is connected from the Quartz64 to the laptop before booting up the board. I'm not yet 100% sure but I think that it has to be a cold boot, not a reboot.
Usefully if you do adb shell and get a Linux prompt on the Quartz64 from there you can run sudo and have root access.
|
|
|
Installing Manjaro on EMMC |
Posted by: homerunisgood - 10-02-2021, 03:24 AM - Forum: Quartz64 Tutorials
- No Replies
|
 |
Hi,
I've been trying unsuccessfully to flash to eMMC the images from https://github.com/manjaro-arm/quartz64-...s/releases
In absence of any instruction, I thought that a simple dd would have been enough, but it does not look so.
Flashing the image the the SD card works well though! Is there something different to flash the image, or something more to do afterward?
The symptoms are that during the boot sequence, it just stops always at the same place, just after kernel start:
Code: Starting kernel ...
[ 0.000000] Booting Linux on physical CPU 0x0000000000 [0x412fd050]
[ 0.000000] Linux verGCC) 10.2.0, GNU ld (GNU Binutils) 2.35) #1 SMP PREEMPT Fri Sep 17 12:52:46 UTC 2021
[ 0.000ne64 RK3566 Quartz64-A Board
[ 0.000000] earlycon: uart8250 000] printk: bootconsole [uart8250] enabled
[ 3.048209] rockchip-usb2phy fe8a0000.usb2-phy: failed to cre[ 3.067859] arm-scmi firmware:scmi: Failed. SCMI protocol 2e
[ 3.496594] arm-scmi firmware:scmi: Failed. SCMI protocol 19 not active.
[ 3.499908] arm-scmi firmware:scmi: Failed. SCMI protocol 17 [ 3.561017] rockchip-dw-pcie 3c0000000.pcie: invalid resour)
Starting version 249.4-1-arch
and then never goes farther...
|
|
|
RKDevTool |
Posted by: dieselnutjob - 10-01-2021, 03:02 PM - Forum: Android on Quartz64
- Replies (3)
|
 |
I have been playing with RKDevTool v2.71 on the Quartz64 running Android and it appears to work.
I haven't yet tried to write an image to eMMC with it. Doing this requires knowledge that I don't yet have.
I found that versions 4.x of Rockchip Driverassistant wouldn't work, but 5.1.1 does. Well either that or I made a mistake somewhere.
To run RKDevTool one needs to plug in a Windows laptop with an A to A USB cable, shut down the Quartz64, press the "recovery" button and whilst continuing to press it power on the Quartz64.
This will put the Quartz64 into "loader" mode.
In RKDevTool in Advanced Functions you can reset the Quartz64 (boot Android again) or go into Maskrom mode.
The ExportImage feature only works if Start + Count doesn't exceed 65536 and with Start=0 and Count=65536 it appears to dump out the first 32MB of the eMMC module.
I haven't played with the batch tool yet.
I don't suppose that these tools are that important with a Quartz64 unless you want to seal it up in a box making removal of the eMMC module difficult, but my objective is to learn more generally about the RK3566 at the moment.
I hope that this is useful to someone as it took me hours to figure it out.
|
|
|
partition on jumpdrive format |
Posted by: 8cove - 10-01-2021, 02:45 PM - Forum: Manjaro on PinePhone
- Replies (1)
|
 |
Forgot my pine lockscreen pin, so I tried to install manjaro. Jumpdrive is working to get into the phone but I seem to be having an issue installing an image. The original postmarket os boot partition(127mb) continues to be the only bootable partition. Is it possible to expand the partition to one large one and let manjaro partition as needed. The other partitions never come as bootable so I keep getting the factory test screen every time.
Seen several youtube videos explaining this, newbie I admit I am....but this is frustrating.
|
|
|
New Pine Phone User In Canada |
Posted by: Katsujinken - 10-01-2021, 12:51 PM - Forum: General Discussion on PinePhone
- Replies (14)
|
 |
Greetings Everyone!
I just receved my new Pine Phone last night and it seems to work with our Fido network. Fido is a dummy company of Rogers to give us the illusion of having more choices than we do. So it likely works on their network since it's really the same as the one I'm posting from now. If anyone here wants to update on the wikia of compatible carriers then please do.
Thus far I've been using the preinstalled Manjaro with mixed results. I often get error messages that the modem is busy or otherwise cannot connect to my mobile network. When making calls I have to go into the settings to manually switch from the loudspeaker to the earspeaker then manually switch it back again when I'm done. Attempting to save files like JPGs through Angelfish does nothing. Does anyone know of fixes for these?
I would consider tryjng another OS like Ubuntu Touch but it has its own compatibility issues at present so are there any other OSes that can reliably use the Pine Phone to make calls, text, lightly browse online and listen to MP3s? It doesn't have to be pretty so long as it works. I use Zorin on my desktop and a modified version of Rasbian on my Pi 4b in a tablet enosure so I have some basic experience with different types of Linux.
Thanks in advance and I will look forward to participating on this forum with all you freedom lovers, hackers and other enthusists!
|
|
|
|