[SR-Users] RTPENGINE question

Sat Sep 12 07:29:38 CEST 2020

I have testes build on 5.7 kernel on CentOS 8 (custom rpm package)

You will find commit here
https://github.com/sipwise/rtpengine/issues/975

Sergey

On Fri, Sep 11, 2020 at 10:53 PM Daniel-Constantin Mierla <miconda at gmail.com>
wrote:

> Related to tainted kernel, I faced the same issue when I deployed
> rtpengine on a Suse Enterprise many months ago, so I do not really remember
> the exact steps, but there is a way to disable the check of signed kernel
> modules (iirc, these are only the ones coming from the kernel source tree,
> so if you need to load any external kernel module, you have to disable this
> option).
>
> Quick check on the net, it may have to do with module.sig_enforce option
> for kernel loading.
>
> Cheers,
> Daniel
> On 11.09.20 21:31, Andrew Chen wrote:
>
> Sorry let me clarify this line here:
>
> "...at the time, I was running an older version 8.0.x so I recompiled all
> the ngcp packages under this kernel and completed the installation without
> issues.."
>
> 8.0.x is the older ngcp version. I recompiled version 9.0.1.0 under that
> new kernel version 5.3.0-1035-aws #37-Ubuntu
>
>
> On Fri, Sep 11, 2020 at 3:29 PM Andrew Chen <achen at fuze.com> wrote:
>
>> Thanks Alex.
>>
>> So it turns out my rtpengine stopped working after our latest kernel
>> upgrade to:
>>
>> Linux sjomainrtpe30 5.3.0-1035-aws #37-Ubuntu SMP Sun Sep 6 01:17:09 UTC
>> 2020 x86_64 x86_64 x86_64 GNU/Linux
>>
>> at the time, I was running an older version 8.0.x so I recompiled all the
>> ngcp packages under this kernel and completed the installation without
>> issues.
>>
>> As soon as we started making test calls, I received 0 audio from those
>> test endpoints.  Looking at the rtpengine logs, I see several messages
>> that's quite concerning:
>>
>> Sep 11 18:43:41 sjomainrtpe30 kernel: [   13.434623] xt_RTPENGINE:
>> loading out-of-tree module taints kernel.
>> Sep 11 18:43:41 sjomainrtpe30 kernel: [   13.434670] xt_RTPENGINE: module
>> verification failed: signature and/or required key missing - tainting kernel
>> Sep 11 18:43:41 sjomainrtpe30 kernel: [   13.434938] Registering
>> xt_RTPENGINE module - version 9.0.1.0+0~mr9.0.1.0
>>
>> and
>>
>> Sep 11 18:49:50 sjomainrtpe30 rtpengine[1030]: WARNING: [2-7859 at 2600:1f1c:4ff:3e01:f64d:2f67:c0fa:c931
>> port 50000]: No support for kernel packet forwarding available (decryption
>> cipher or HMAC not supported by kernel module)
>>
>> which I assume is due to the first error I pasted.
>>
>> So I tried
>>
>> - rebooting the system which maybe the module wasn't loaded properly.
>> - I reran modprobe to make sure the module is installed
>> - I ran some dkms command to see if any error pop up due to the kernel
>> version I'm running and I see no errors:
>>
>> dkms status
>> falco, 0.20.0+d77080a, 5.3.0-1032-aws, x86_64: installed
>> falco, 0.20.0+d77080a, 5.3.0-1035-aws, x86_64: installed
>> ngcp-rtpengine, 9.0.1.0+0~mr9.0.1.0, 5.3.0-1032-aws, x86_64: installed
>> ngcp-rtpengine, 9.0.1.0+0~mr9.0.1.0, 5.3.0-1035-aws, x86_64: installed
>>
>> So I'm running out of options.
>>
>> Any advice?
>>
>>
>> On Fri, Sep 11, 2020 at 3:17 PM Alex Balashov <abalashov at evaristesys.com>
>> wrote:
>>
>>> There is an RTPEngine mailing list, I believe, but RTPEngine questions
>>> are often posed here given its close association with Kamailio. What's
>>> going on?
>>>
>>> On 9/11/20 2:57 PM, Andrew Chen wrote:
>>> > Hey guys,
>>> >
>>> > Is this the right place to ask about rtpengine (ngcp) related issues
>>> > with kernel packet forwarding?
>>> >
>>> > Thanks.
>>> >
>>> > --
>>> > Andy Chen
>>> > Sr. Telephony Lead Engineer
>>> > achen@ <mailto:achen at thinkingphones.com>fuze.com <http://fuze.com>
>>> >
>>> >
>>> >
>>> > *Confidentiality Notice: The information contained in this e-mail and
>>> any
>>> > attachments may be confidential. If you are not an intended recipient,
>>> you
>>> > are hereby notified that any dissemination, distribution or copying of
>>> this
>>> > e-mail is strictly prohibited. If you have received this e-mail in
>>> error,
>>> > please notify the sender and permanently delete the e-mail and any
>>> > attachments immediately. You should not retain, copy or use this
>>> e-mail or
>>> > any attachment for any purpose, nor disclose all or any part of the
>>> > contents to any other person. Thank you.*
>>> >
>>> > _______________________________________________
>>> > Kamailio (SER) - Users Mailing List
>>> > sr-users at lists.kamailio.org
>>> > https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>> >
>>>
>>> --
>>> Alex Balashov | Principal | Evariste Systems LLC
>>>
>>> Tel: +1-706-510-6800 / +1-800-250-5920 (toll-free)
>>> Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
>>>
>>> _______________________________________________
>>> Kamailio (SER) - Users Mailing List
>>> sr-users at lists.kamailio.org
>>> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>>>
>>
>>
>> --
>> Andy Chen
>> Sr. Telephony Lead Engineer
>> 415 516 5535 (M)
>> achen@ <achen at thinkingphones.com>fuze.com
>>
>>
>
> --
> Andy Chen
> Sr. Telephony Lead Engineer
> 415 516 5535 (M)
> achen@ <achen at thinkingphones.com>fuze.com
>
>
> *Confidentiality Notice: The information contained in this e-mail and any
> attachments may be confidential. If you are not an intended recipient, you
> are hereby notified that any dissemination, distribution or copying of this
> e-mail is strictly prohibited. If you have received this e-mail in error,
> please notify the sender and permanently delete the e-mail and any
> attachments immediately. You should not retain, copy or use this e-mail or
> any attachment for any purpose, nor disclose all or any part of the
> contents to any other person. Thank you.*
>
> _______________________________________________
> Kamailio (SER) - Users Mailing Listsr-users at lists.kamailio.orghttps://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>
> --
> Daniel-Constantin Mierla -- www.asipto.comwww.twitter.com/miconda -- www.linkedin.com/in/miconda
> Funding: https://www.paypal.me/dcmierla
>
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users at lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.kamailio.org/pipermail/sr-users/attachments/20200912/f9dda00f/attachment.htm>