SpongeB0B

Thanks @fratermus@lemmy.sdf.org But graph-easy is text to graph. and I'm looking to draw ! so draw to ~graph(ASCII) but it's a nice program too.

SpongeB0B @programming.dev 8mo ago

I'm not, I'm on MX Linux with SysVinit.

1

SpongeB0B @programming.dev 8mo ago

Thanks @Strit@lemmy.linuxuserspace.show , "Packaging" is not mandatory when creating a software, like it's was written It could run as .py trough python executable. but here it seem not

Otherwise I'm ok with .appimage format/packing.

SpongeB0B @programming.dev 1y ago

SOLVED

The following works !

I guess one of my others rules was blocking

nft

    
table ip Tip {
        chain prerouting {
                type nat hook prerouting priority -100; policy accept;
                ip daddr 192.168.y.2 log prefix "forwarded " dnat to 192.168.y.3
        }
        chain postrouting {
                type nat hook postrouting priority 100; policy accept;
                masquerade
        }
        chain INPUT {
                type filter hook input priority filter; policy accept;
        }
        chain FORWARD {
                type filter hook forward priority filter; policy accept;
        }
        chain OUTPUT {
                type filter hook output priority filter; policy accept;
        }
}

1

SpongeB0B @programming.dev 1y ago

Hi, Thank to all of you.

I made a test environment with the following.

Machine A: 192.168.Y.1
Machine B: 192.168.Y.2
Machine C: 192.168.Y.3

The goal is to send a ping A to B, B forward to C

So ping -4c 1 192.168.y.2 from A, should ping B fw C

I've set the following rule in /etc/nftables.conf

nft

    
table ip Tip {
        chain prerouting {
                type nat hook prerouting priority dstnat; policy accept;
                iif "eth0" ip protocol icmp dnat to 192.168.y.3
        }
        chain postrouting {
                type nat hook postrouting priority 100; policy accept;
                ip saddr 192.168.y.3 masquerade
        }
}

but is not working :'(

I see B receive the package

    
preroute: IN=eth0 OUT= MAC=▒▒ SRC=192.168.y.1 DST=192.168.y.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=21398 DF PROTO=ICMP TYPE=8 CODE=0 ID=17950 SEQ=1

but it seem C receive nothing..

Any ideas ?

1

SpongeB0B @programming.dev 1y ago

As I want the system to be quite ( not sending data ) I was suspected the output hook to be the one. what are you suggesting ?

SpongeB0B @programming.dev 1y ago

Obviously, but I'm anyway wondering why it doesn't blocking like it shouldI hope nftables do not let other pass like this...

SpongeB0B @programming.dev 1y ago

Thank you very much all, for your inputs !

I've did

 bash

    
root: file /boot/broadcom/initrd.gz
initrd.gz: Zstandard compressed data ....

root: unmkinitramfs /boot/broadcom/initrd.gz Extracted/
# data where extracted to Extracted/
# but I go few error like:
# cpio: cannot link usr/sbin/vconfig to usr/sbin/watchdog: Operation not permitted

`tree -Fan -L 2 Extracted`

 shell

    
Extracted//
|-- conf/
|   |-- arch.conf*
|   |-- conf.d/
|   `-- initramfs.conf*
|-- etc/
|   |-- fstab*
|   |-- ld.so.cache*
|   |-- ld.so.conf*
|   |-- ld.so.conf.d/
|   |-- modprobe.d/
|   `-- udev/
|-- init*
|-- run/
|-- scripts/
|   |-- functions*
|   |-- init-bottom/
|   |-- init-top/
|   |-- local*
|   |-- local-bottom/
|   |-- local-premount/
|   `-- nfs*
`-- usr/
    |-- bin/
    |-- lib/
    `-- sbin/

So it tend to confirm that even if the file is named initrd.gz it's actually an initramfs method.... ( damn this is so misleading )

So I guess I can follow preparing-linux from the guide and overwrite the initrd.gz ?

1

SpongeB0B @programming.dev 1y ago

Thanks @SteveTech@programming.dev

I suppose the file linux/arch/Kconfig is the base the menuconfig to know which option is available ? right ?

Thanks.

1

SpongeB0B @programming.dev 1y ago

Thanks, how can we verify this ?

SpongeB0B @programming.dev 1y ago

I'm using Devuan ( systemd free ! ) :)

2

SpongeB0B @programming.dev 1y ago

I believe my initramfs do not support luks encryption, but the link of @DrDystopia@lemy.lol might work.... 🤞

1

SpongeB0B @programming.dev 1y ago

Thanks @DrDystopia@lemy.lol ! indeed https://github.com/gitbls/sdm/blob/master/Docs/Disk-Encryption.md#the-sdm-cryptconfig-script seem what I need. I'll try

1

SpongeB0B @programming.dev 1y ago

ohh ! great ! I'll see if I manage to install it on Devuan Thanks.

3

SpongeB0B @programming.dev 1y ago

🤩 Woo I didn't know nix. It seem a better way to handle package !!! but so if I have already apt that handle my packages, is it compatible to use both on the same system !?

Nix stores all packages in isolation from each other; as a result there are no /bin, /sbin, /lib or /usr directories and all packages are kept in /nix/store instead.

SpongeB0B @programming.dev 1y ago

Yes, but it's not reliable. because even if you use a bare linux vm to download the packages and dependency, you never know if the online will have already a dependence that the offline system do not have.

no, the only way is to force the dw of the already downloaded package.