| Line 43... |
Line 43... |
| 43 |
|
43 |
|
| 44 |
**** For ipt_netflow ****
|
44 |
**** For ipt_netflow ****
|
| 45 |
- Must be complied on a system which runs the target kernel. So install manually the targeted kernel and the same version of kernel-userspace-headers and reboot (ipt_NETFLOW will not load during this reboot)
|
45 |
- Must be complied on a system which runs the target kernel. So install manually the targeted kernel and the same version of kernel-userspace-headers and reboot (ipt_NETFLOW will not load during this reboot)
|
| 46 |
- install the RPMs "kernel-server-devel" (choose the targeted kernel), "lib64iptables-devel"
|
46 |
- install the RPMs "kernel-server-devel" (choose the targeted kernel), "lib64iptables-devel"
|
| 47 |
- download, uncompress and test the compilation of the last version of ipt-netflow (./configure --disable-dkms --disable-snmp-agent, make all install). The module is compiled in the same directory (ipt_NETFLOW.ko). The libs are copied in the /lib64/iptables (libip6t_NETFLOW.so & libipt_NETFLOW.so)
|
47 |
- download, uncompress and test the compilation of the last version of ipt-netflow (./configure --disable-dkms --disable-snmp-agent, make all install). The module is compiled in the same directory (ipt_NETFLOW.ko). The libs are copied in the /lib64/iptables (libip6t_NETFLOW.so & libipt_NETFLOW.so)
|
| 48 |
- test the module : go to the directory of sources and try to load it (insmod ./ipt_NETFLOW.ko), look at "journalctrl -f" to verify that the module is corectly loaded).
|
48 |
- test the module : go to the directory of sources and try to load it (insmod ./ipt_NETFLOW.ko), look at "journalctrl -f" to check that the module is correctly loaded).
|
| - |
|
49 |
exemple :
|
| - |
|
50 |
mai 15 01:13:55 alcasar.lan kernel: ipt_NETFLOW: loading out-of-tree module taints kernel.
|
| - |
|
51 |
mai 15 01:13:55 alcasar.lan kernel: ipt_NETFLOW version 2.6, srcversion 9B0006338FF61FE7DC5507D
|
| - |
|
52 |
mai 15 01:13:55 alcasar.lan kernel: ipt_NETFLOW: hashsize 498011 (3890K)
|
| - |
|
53 |
mai 15 01:13:55 alcasar.lan kernel: netflow: registering: /proc/net/stat/ipt_netflow
|
| - |
|
54 |
mai 15 01:13:55 alcasar.lan kernel: netflow: registered: /proc/net/stat/ipt_netflow
|
| - |
|
55 |
mai 15 01:13:55 alcasar.lan kernel: netflow: registering: /proc/net/stat/ipt_netflow_snmp
|
| - |
|
56 |
mai 15 01:13:55 alcasar.lan kernel: netflow: registered: /proc/net/stat/ipt_netflow_snmp
|
| - |
|
57 |
mai 15 01:13:55 alcasar.lan kernel: netflow: registering: /proc/net/stat/ipt_netflow_flows
|
| - |
|
58 |
mai 15 01:13:55 alcasar.lan kernel: netflow: registered: /proc/net/stat/ipt_netflow_flows
|
| - |
|
59 |
mai 15 01:13:55 alcasar.lan kernel: netflow: registered: sysctl net.netflow
|
| - |
|
60 |
mai 15 01:13:55 alcasar.lan kernel: ipt_NETFLOW: added destination 127.0.0.1:2055
|
| - |
|
61 |
mai 15 01:13:55 alcasar.lan kernel: ipt_NETFLOW protocol version 5 (NetFlow) enabled.
|
| - |
|
62 |
mai 15 01:13:55 alcasar.lan kernel: ipt_NETFLOW is loaded.
|
| - |
|
63 |
mai 15 01:14:06 alcasar.lan systemd[1]: systemd-hostnamed.service: Deactivated successfully.
|
| - |
|
64 |
|
| 49 |
- Run "alcasar-iptables.sh" to reload netfilter rules (no errors should appear). Run "alcasar-daemon.sh" to verify that all is ok.
|
65 |
- Run "alcasar-iptables.sh" to reload netfilter rules (no errors should appear). Run "alcasar-daemon.sh" to verify that all is ok.
|
| 50 |
- if all is ok, copy the tarball in rpmbuild/SOURCES.
|
66 |
- if all is ok, copy the tarball (ipt-netflow-x.y.tar.gz) in rpmbuild/SOURCES.
|
| 51 |
- Copy and adapt the .spec in rpmbuild/SPECS (change the versions of kernel, kernel source and rpm).
|
67 |
- Copy and adapt the .spec in rpmbuild/SPECS (change the versions of kernel, kernel source and Changelog).
|
| 52 |
- Run "rpmbuild -bb ****.spec"
|
68 |
- Run "rpmbuild -bb ****.spec"
|
| 53 |
- install the fresh rpm (urpmi) and load ALCASAR iptables rules (alcasar-iptables.sh). Great job ;-)
|
69 |
- install the fresh rpm (urpmi) and load ALCASAR iptables rules (alcasar-iptables.sh). Great job ;-)
|
| 54 |
|
70 |
|
| 55 |
**** For wkhtmltopdf ****
|
71 |
**** For wkhtmltopdf ****
|
| 56 |
- download the archive of the binaries of the last version (https://wkhtmltopdf.org/downloads.html) in ~/rpmbuild/SOURCES/wkhtmltox-%{version}_linux-generic-amd64.tar.xz.
|
72 |
- download the archive of the binaries of the last version (https://wkhtmltopdf.org/downloads.html) in ~/rpmbuild/SOURCES/wkhtmltox-%{version}_linux-generic-amd64.tar.xz.
|