**** BEGIN LOGGING AT Sun Dec 14 02:59:58 2014 Dec 14 06:52:49 build #745 of xburst is complete: Failure [failed compile_8] Build details are at http://buildbot.openwrt.org:8010/builders/xburst/builds/745 Dec 14 07:36:43 build #231 of omap is complete: Failure [failed compile_4] Build details are at http://buildbot.openwrt.org:8010/builders/omap/builds/231 Dec 14 07:59:56 build #7 of ramips.mt7620 is complete: Failure [failed compile_4] Build details are at http://buildbot.openwrt.org:8010/builders/ramips.mt7620/builds/7 Dec 14 08:13:09 build #7 of ipq806x is complete: Failure [failed compile_4] Build details are at http://buildbot.openwrt.org:8010/builders/ipq806x/builds/7 Dec 14 08:17:19 build #7 of ramips.mt7621 is complete: Failure [failed compile_4] Build details are at http://buildbot.openwrt.org:8010/builders/ramips.mt7621/builds/7 Dec 14 08:20:02 build #7 of ramips.mt7628 is complete: Failure [failed compile_4] Build details are at http://buildbot.openwrt.org:8010/builders/ramips.mt7628/builds/7 Dec 14 08:25:09 build #807 of ramips is complete: Failure [failed compile_8] Build details are at http://buildbot.openwrt.org:8010/builders/ramips/builds/807 Dec 14 08:26:28 build #156 of brcm63xx.smp is complete: Failure [failed compile_8] Build details are at http://buildbot.openwrt.org:8010/builders/brcm63xx.smp/builds/156 Dec 14 08:59:06 blogic r43701 trunk/target/linux/ramips/dts/ WLI-TX4-AG300N.dts V11STFE.dts MT7620a_MT7610e.dts Y1.dtsi * ralink: drop old pinmux nodes from dts files Dec 14 08:59:32 blogic r43702 trunk/target/ (5 files) * gemini: merge register ethernet patches into one Dec 14 08:59:41 blogic r43703 trunk/target/ (13 files in 6 dirs) * gemini: update usb driver and merge registers into one patch Dec 14 08:59:47 blogic r43704 trunk/target/linux/kirkwood/patches-3.18/160-ea4500.patch * kirkwood: enable EA4500 switch on 3.18 Dec 14 12:26:12 cyrus r43705 packages/utils/joe * joe: moved to github Dec 14 14:07:07 build #658 of ep93xx is complete: Failure [failed compile_8] Build details are at http://buildbot.openwrt.org:8010/builders/ep93xx/builds/658 Dec 14 14:24:51 Mazilo, ping Dec 14 16:05:10 cyrus r43706 trunk/package/libs/libnftnl/Makefile * libnftnl: bump to latest git Dec 14 16:05:35 cyrus r43707 trunk/package/network/utils/ nftables/patches/104-fix-CFLAGS-handling.patch nftables/patches/103-enforce-disabling-debugging.patch nftables/patches/102-build-allow-building-with-mini-gmp-instead-of-gmp.patch nftables/Makefile * nftables: bump to latest git, fix mini-gmp patches Dec 14 18:29:22 build #161 of ramips.rt3883 is complete: Failure [failed compile_4] Build details are at http://buildbot.openwrt.org:8010/builders/ramips.rt3883/builds/161 Dec 14 18:36:23 anyone working on nftables here? Dec 14 18:36:46 sort of sometimes Dec 14 18:40:30 just saw you email on ml with Tomes Dec 14 18:40:50 yep Dec 14 18:40:51 are you the only one hacking on this? Dec 14 18:41:22 (and I guess only the lib+kernel side from reading your mail) Dec 14 18:41:49 afaik yes Dec 14 18:42:05 no-one on (l)uci... Dec 14 18:42:31 well nftables is not really that usable at the moment Dec 14 18:42:33 at least with 3.14 Dec 14 18:42:40 from my point of view Dec 14 18:42:47 no - 3.18 has masq though Dec 14 18:42:53 yeah Dec 14 18:42:56 well then Dec 14 18:43:11 porting takes effort Dec 14 18:43:18 and time Dec 14 18:43:43 nftables on openwrt or in general? Dec 14 18:44:00 "usable" Dec 14 18:44:32 well with 3.18 situation might improve who knows Dec 14 18:44:45 but porting over the whole /etc/config/firewall magic takes a lot of time Dec 14 18:44:46 and testing Dec 14 18:45:17 plus there isn't even a library to interact with it right now Dec 14 18:46:08 sure - probably needs complete redesign using low-level libmnl Dec 14 18:47:31 and abandoning of compatibility with iptables at some point Dec 14 18:48:05 + the use of nft specific datastructures Dec 14 18:48:59 but if no-one has started, I might take the first stab at it Dec 14 18:50:33 and I guess coordination is pretty simple if you are the only one working on lib+kernel Dec 14 18:51:52 the problem is something else Dec 14 18:52:12 there is libnftnl but its pretty low-level Dec 14 18:52:38 the whole "rule to BPF"-parsing happens in the nftables binary Dec 14 18:52:44 and there is no lib for it Dec 14 18:52:57 and you don't want to juggle with BPF in the firewall daemon really Dec 14 18:53:14 so its either waiting for a high-level library from the netfilter-guys Dec 14 18:53:59 or exporting through the rule-file-format and applying rules that way which is not very clean Dec 14 19:00:39 build #748 of avr32 is complete: Failure [failed compile_5] Build details are at http://buildbot.openwrt.org:8010/builders/avr32/builds/748 Dec 14 19:04:40 libnftnl looks like the right place to start Dec 14 19:04:55 thanks for that pointer Dec 14 19:08:48 build #808 of ramips is complete: Failure [failed compile_4] Build details are at http://buildbot.openwrt.org:8010/builders/ramips/builds/808 Dec 14 19:20:04 build #801 of ppc40x is complete: Failure [failed compile_4] Build details are at http://buildbot.openwrt.org:8010/builders/ppc40x/builds/801 Dec 14 19:22:18 could someone tell me what pivot is? Dec 14 19:22:24 i see many reference to in on the wiki Dec 14 19:22:31 but not the explanation what it is Dec 14 21:09:40 zajec: isnt this a general linux term covered in articles likes http://lwn.net/Articles/210046/ and it might be a "misuse" of extroot ? Dec 14 21:23:44 plntyk: thanks Dec 14 21:27:58 updated openwrt/upstream, https://home.comcast.net/~sdwalker/uscan/index.html Dec 14 22:30:24 nbd: fyi, the nf_conntrack_rtcache patch seems to break my strongswan setup Dec 14 22:37:29 I can access the openwrt device over vpn, but everything behind it seems to timeout after the first packet or so **** ENDING LOGGING AT Mon Dec 15 02:59:59 2014