Welcome, Guest
You have to register before you can post on our site.

Username
  

Password
  





Search Forums



(Advanced Search)

Forum Statistics
» Members: 29,771
» Latest member: Kivell
» Forum threads: 16,285
» Forum posts: 117,303

Full Statistics

Latest Threads
Window Maker Live for Pin...
Forum: Linux on Pinebook Pro
Last Post: vajak
12-24-2025, 06:00 AM
» Replies: 2
» Views: 375
Rrkisp issue with CSI cam...
Forum: Linux on Quartz64
Last Post: lystar
12-24-2025, 02:34 AM
» Replies: 1
» Views: 3,741
bookworm vs trixie discus...
Forum: Mobian on PinePhone
Last Post: Kevin Kofler
12-24-2025, 12:11 AM
» Replies: 80
» Views: 45,588
Fedora + Phosh for PinePh...
Forum: PinePhone Software
Last Post: shanehill@mail.com
12-23-2025, 09:12 PM
» Replies: 75
» Views: 200,880
Trixie - bring up the On ...
Forum: Mobian on PinePhone
Last Post: grump_fiddle_reinstall
12-23-2025, 04:34 AM
» Replies: 0
» Views: 70
On-Screen Keyboard Arrow ...
Forum: Mobian on PinePhone
Last Post: grump_fiddle_reinstall
12-23-2025, 04:25 AM
» Replies: 11
» Views: 6,056
Armbian has been released...
Forum: News
Last Post: ArmbianForSBCs
12-23-2025, 01:36 AM
» Replies: 21
» Views: 32,266
Alarm clock doesn’t work
Forum: Mobian on PinePhone
Last Post: biketool
12-23-2025, 12:12 AM
» Replies: 14
» Views: 24,432
Diagnosing and fixing fai...
Forum: PinePhone Pro Software
Last Post: biketool
12-22-2025, 11:59 PM
» Replies: 7
» Views: 614
No phone call audio, logs...
Forum: PinePhone Pro Hardware
Last Post: biketool
12-22-2025, 05:09 PM
» Replies: 12
» Views: 860

 
  ufw on 5.14.8-2-MANJARO-ARM
Posted by: brkozak - 10-02-2021, 10:17 AM - Forum: PinePhone Software - No Replies

My new Pinephone just came in the mail today. Everything's going great and I'm loving the phone but I just ran into a snag trying to do some basic security hardening.


ufw enable returns the following

Quote:ERROR: problem running ufw-init
iptables-restore v1.8.7 (legacy): Couldn't load match `limit':No such file or directory

Error occurred at line: 63
Try `iptables-restore -h' or 'iptables-restore --help' for more information.
iptables-restore v1.8.7 (legacy): Couldn't load match `limit':No such file or directory

Error occurred at line: 24
Try `iptables-restore -h' or 'iptables-restore --help' for more information.
ip6tables-restore v1.8.7 (legacy): Couldn't load match `hl':No such file or directory

Error occurred at line: 50
Try `ip6tables-restore -h' or 'ip6tables-restore --help' for more information.
ip6tables-restore v1.8.7 (legacy): Couldn't load match `limit':No such file or directory

Error occurred at line: 21
Try `ip6tables-restore -h' or 'ip6tables-restore --help' for more information.

Problem running '/etc/ufw/before.rules'
Problem running '/etc/ufw/user.rules'
Problem running '/etc/ufw/before6.rules'
Problem running '/etc/ufw/user6.rules'



I've done a little bit of debugging and found some interesting things by stracing iptables. The following strace snippets show where iptables is failing

strace iptables -C INPUT -m limit

Quote:socket(AF_INET, SOCK_RAW, IPPROTO_RAW)  = 3
fcntl(3, F_SETFD, FD_CLOEXEC)          = 0
newfstatat(AT_FDCWD, "/proc/net/ip_tables_names", {st_mode=S_IFREG|0440, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
statfs("/proc/net/ip_tables_names", {f_type=PROC_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0
getsockopt(3, SOL_IP, IPT_SO_GET_REVISION_MATCH, 0xffffd599c688, [30]) = -1 ENOENT (No such file or directory)
close(3)                                = 0
write(2, "iptables v1.8.7 (legacy): ", 26iptables v1.8.7 (legacy): ) = 26
write(2, "Couldn't load match `limit':No s"..., 54Couldn't load match `limit':No such file or directory

strace ip6tables -C INPUT -m limit

Quote:socket(AF_INET6, SOCK_RAW, IPPROTO_RAW) = 3

fcntl(3, F_SETFD, FD_CLOEXEC)          = 0
newfstatat(AT_FDCWD, "/proc/net/ip6_tables_names", {st_mode=S_IFREG|0440, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
statfs("/proc/net/ip6_tables_names", {f_type=PROC_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0
getsockopt(3, SOL_IPV6, IP6T_SO_GET_REVISION_MATCH, 0xffffe47f8038, [30]) = -1 ENOENT (No such file or directory)
close(3)                                = 0
write(2, "ip6tables v1.8.7 (legacy): ", 27ip6tables v1.8.7 (legacy): ) = 27
write(2, "Couldn't load match `limit':No s"..., 54Couldn't load match `limit':No such file or directory


strace ip6tables -C INPUT -m hl

Quote:socket(AF_INET6, SOCK_RAW, IPPROTO_RAW) = 3
fcntl(3, F_SETFD, FD_CLOEXEC)          = 0
newfstatat(AT_FDCWD, "/proc/net/ip6_tables_names", {st_mode=S_IFREG|0440, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
statfs("/proc/net/ip6_tables_names", {f_type=PROC_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0
getsockopt(3, SOL_IPV6, IP6T_SO_GET_REVISION_MATCH, 0xffffd790aae8, [30]) = -1 ENOENT (No such file or directory)
close(3)                                = 0
write(2, "ip6tables v1.8.7 (legacy): ", 27ip6tables v1.8.7 (legacy): ) = 27
write(2, "Couldn't load match `hl':No such"..., 51Couldn't load match `hl':No such file or directory


As you can see, the problem appears to be caused by a call to getsockopt with SOL_IPV6 and either IP6T_SO_GET_REVISION_MATCH or IPT_SO_GET_REVISION_MATCH. I haven't quite compiled enough kernels in my day to know for sure, but I suspect that 5.14.8-2-MANJARO-ARM may be missing  some flags which are required for these getsockopt calls to succeed. Can anybody confirm?


  ADB and USB A to A cable tips
Posted by: dieselnutjob - 10-02-2021, 08:01 AM - Forum: Android on Quartz64 - No Replies

I struggled for a few hours to get ADB commands on my laptop talking to the Android OS on the Quartz64.

Here are some tips that I think will help:-
I used an A to A USB cable from Amazon.  It's just a straight through 4 way to 4 way A to A cable.
As you look at the USB ports on the Quartz64 it has to be the top right one (with black plastic tongue), above the USB 3 port (with blue plastic tongue).
I can only get it to work if the cable is connected from the Quartz64 to the laptop before booting up the board.  I'm not yet 100% sure but I think that it has to be a cold boot, not a reboot.

Usefully if you do adb shell and get a Linux prompt on the Quartz64 from there you can run sudo and have root access.


  Installing Manjaro on EMMC
Posted by: homerunisgood - 10-02-2021, 03:24 AM - Forum: Quartz64 Tutorials - No Replies

Hi,

I've been trying unsuccessfully to flash to eMMC the images from https://github.com/manjaro-arm/quartz64-...s/releases

In absence of any instruction, I thought that a simple dd would have been enough, but it does not look so.

Flashing the image the the SD card works well though! Is there something different to flash the image, or something more to do afterward?

The symptoms are that during the boot sequence, it just stops always at the same place, just after kernel start:


Code:
Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x412fd050]
[    0.000000] Linux verGCC) 10.2.0, GNU ld (GNU Binutils) 2.35) #1 SMP PREEMPT Fri Sep 17 12:52:46 UTC 2021
[    0.000ne64 RK3566 Quartz64-A Board
[    0.000000] earlycon: uart8250 000] printk: bootconsole [uart8250] enabled
[    3.048209] rockchip-usb2phy fe8a0000.usb2-phy: failed to cre[    3.067859] arm-scmi firmware:scmi: Failed. SCMI protocol 2e
[    3.496594] arm-scmi firmware:scmi: Failed. SCMI protocol 19 not active.
[    3.499908] arm-scmi firmware:scmi: Failed. SCMI protocol 17 [    3.561017] rockchip-dw-pcie 3c0000000.pcie: invalid resour)
Starting version 249.4-1-arch

and then never goes farther...


  RKDevTool
Posted by: dieselnutjob - 10-01-2021, 03:02 PM - Forum: Android on Quartz64 - Replies (3)

I have been playing with RKDevTool v2.71 on the Quartz64 running Android and it appears to work.
I haven't yet tried to write an image to eMMC with it.  Doing this requires knowledge that I don't yet have.

I found that versions 4.x of Rockchip Driverassistant wouldn't work, but 5.1.1 does. Well either that or I made a mistake somewhere.

To run RKDevTool one needs to plug in a Windows laptop with an A to A USB cable, shut down the Quartz64, press the "recovery" button and whilst continuing to press it power on the Quartz64.

This will put the Quartz64 into "loader" mode.

In RKDevTool in Advanced Functions you can reset the Quartz64 (boot Android again) or go into Maskrom mode.

The ExportImage feature only works if Start + Count doesn't exceed 65536 and with Start=0 and Count=65536 it appears to dump out the first 32MB of the eMMC module.

I haven't played with the batch tool yet.

I don't suppose that these tools are that important with a Quartz64 unless you want to seal it up in a box making removal of the eMMC module difficult, but my objective is to learn more generally about the RK3566 at the moment.

I hope that this is useful to someone as it took me hours to figure it out.


  partition on jumpdrive format
Posted by: 8cove - 10-01-2021, 02:45 PM - Forum: Manjaro on PinePhone - Replies (1)

Forgot my pine lockscreen pin, so I tried to install manjaro. Jumpdrive is working to get into the phone but I seem to be having an issue installing an image. The original postmarket os boot partition(127mb) continues to be the only bootable partition. Is it possible to expand the partition to one large one and let manjaro partition as needed. The other partitions never come as bootable so I keep getting the factory test screen every time.

Seen several youtube videos explaining this, newbie I admit I am....but this is frustrating.


  SPDIF TOSLink Adapter Hat for Quartz64
Posted by: CounterPillow - 10-01-2021, 01:49 PM - Forum: Quartz64 Hardware and Accessories - Replies (2)

The Quartz64 comes with an SPDIF output pin, so I've decided to make a little adapter board that converts this to TOSLink. With it, you can connect the Quartz64 up to your optical audio equipment. The board's design is open hardware, you can find the KiCAD files on GitHub: https://github.com/CounterPillow/quartz64-toslink-hat

[Image: toslink-hat-1-bigger.jpeg][Image: toslink-hat-2.jpeg]

The board plugs straight into the GPIO pins, and allows for stacking whatever else on top of it using the long pin legs. Only the front row of 3 pins is actually used, the back row is not connected and merely used for mechanical stability.

I've produced a small batch of these adapter boards, and am selling them for USD 9.99 (excl. shipping + customs) on Tindie. Check it out if you're interested, or make your own from the design files.

[Image: tindie-larges.png]


  New Pine Phone User In Canada
Posted by: Katsujinken - 10-01-2021, 12:51 PM - Forum: General Discussion on PinePhone - Replies (14)

Greetings Everyone!
I just receved my new Pine Phone last night and it seems to work with our Fido network. Fido is a dummy company of Rogers to give us the illusion of having more choices than we do. So it likely works on their network since it's really the same as the one I'm posting from now. If anyone here wants to update on the wikia of compatible carriers then please do.

Thus far I've been using the preinstalled Manjaro with mixed results. I often get error messages that the modem is busy or otherwise cannot connect to my mobile network. When making calls I have to go into the settings to manually switch from the loudspeaker to the earspeaker then manually switch it back again when I'm done. Attempting to save files like JPGs through Angelfish does nothing. Does anyone know of fixes for these?

I would consider tryjng another OS like Ubuntu Touch but it has its own compatibility issues at present so are there any other OSes that can reliably use the Pine Phone to make calls, text, lightly browse online and listen to MP3s? It doesn't have to be pretty so long as it works. I use Zorin on my desktop and a modified version of Rasbian on my Pi 4b in a tablet enosure so I have some basic experience with different types of Linux.

Thanks in advance and I will look forward to participating on this forum with all you freedom lovers, hackers and other enthusists!


  ANSI Pinebook Pro for sale
Posted by: Hemogoblin - 10-01-2021, 11:22 AM - Forum: General Discussion on Pinebook Pro - Replies (8)

Posting this in a new thread so it's easier to see, tried piggybacking on another thread but not sure anyone will see it

I've got a ANSI Pinebook Pro for sale, $200 shipped in the US.  It's hardly ever been used and as such, is in excellent condition.  I liked the device but I've not had nearly the freetime I had hoped to be able to learn Linux and ARM so would happily like to help this neat little machine find a worthy new owner.  I've attached a couple pics but can take more if needed, no bezel cracking or other issues present thus far and no dead pixels that I have seen.  Never been taken apart so only has the 64gb of storage that comes standard.  Will throw in a little laptop sleeve along with the original box and barrel plug charger.


[Image: 00G0G_euWbLWJONy2z_0ak07K_600x450.jpg]
[Image: 00Z0Z_eipuxxn3zsPz_0ak07K_600x450.jpg]


  sub forum for Android on Quartz64?
Posted by: dieselnutjob - 10-01-2021, 10:51 AM - Forum: General Discussion on Quartz64 - Replies (2)

Hi
Why is there no subforum somewhere under Quartz64 for discussing Android? like there is for Linux?
Please can we have one?

or is there someone place or site that people talk about it?

thanks, DNJ


  Mounting / unmounting drives from the Index app (Plasma)
Posted by: theResonant - 10-01-2021, 10:36 AM - Forum: Manjaro on PinePhone - Replies (3)

I opened an encrypted SD card using a USB card reader connected to the phone. It appeared in the Index app, which showed the "mount" button and then I could enter the passphrase. But now I don't know how to unmount & lock it. The Index app doesn't have the usual unmounting icon like Dolphin has. I had to unmount via the terminal.

Is there a direct way to unmount & lock a card via the Index app? Or in Settings, or somewhere else?