wahaha

I was trying to enable config for bpf in tinker_def_config. # Bpf config CONFIG_BPF=y CONFIG_BPF_SYSCALL=y CONFIG_BPF_JIT=y CONFIG_NET_CLS_BPF=y CONFIG_NET_CLS_ACT=y CONFIG_NET_SCH_INGRESS=y CONFIG_CRYPTO_SHA1=y But came up with these errors: In file included from ./include/linux/bpf_verifier.h:11:0, from kernel/bpf/verifier.c:17: kernel/bpf/verifier.c: In function 'fixup_bpf_calls': kernel/bpf/verifier.c:6131:36: error: 'BPF_JMP32' undeclared (first use in this function); did you mean 'BPF_JMP_A'? BPF_RAW_INSN((is64 ? BPF_JMP : BPF_JMP32) | ^ ./include/linux/filter.h:317:12: note: in definition of macro 'BPF_RAW_INSN' .code = CODE, \ ^~~~ kernel/bpf/verifier.c:6131:36: note: each undeclared identifier is reported only once for each function it appears in BPF_RAW_INSN((is64 ? BPF_JMP : BPF_JMP32) | ^ ./include/linux/filter.h:317:12: note: in definition of macro 'BPF_RAW_INSN' .code = CODE, \ ^~~~ kernel/bpf/verifier.c:6140:34: warning: pointer/integer type mismatch in conditional expression error, forbidden warning:verifier.c:6140 BPF_RAW_INSN((is64 ? BPF_JMP : BPF_JMP32) | ^ ./include/linux/filter.h:317:12: note: in definition of macro 'BPF_RAW_INSN' .code = CODE, \ ^~~~ kernel/bpf/verifier.c:6140:47: error: invalid operands to binary | (have 'struct bpf_insn *' and 'int') BPF_RAW_INSN((is64 ? BPF_JMP : BPF_JMP32) | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ^ ./include/linux/filter.h:317:12: note: in definition of macro 'BPF_RAW_INSN' .code = CODE, \ ^~~~ kernel/bpf/verifier.c:6141:19: error: invalid operands to binary | (have 'struct bpf_insn *' and 'int') BPF_RAW_INSN((is64 ? BPF_JMP : BPF_JMP32) | ~ BPF_JEQ | BPF_K, insn->src_reg, ^ ./include/linux/filter.h:317:12: note: in definition of macro 'BPF_RAW_INSN' .code = CODE, \ ^~~~ kernel/bpf/verifier.c:6140:18: warning: initialization makes integer from pointer without a cast [-Wint-conversion] error, forbidden warning:verifier.c:6140 BPF_RAW_INSN((is64 ? BPF_JMP : BPF_JMP32) | ^ ./include/linux/filter.h:317:12: note: in definition of macro 'BPF_RAW_INSN' .code = CODE, \ ^~~~ kernel/bpf/verifier.c:6140:18: note: (near initialization for '(anonymous).code') BPF_RAW_INSN((is64 ? BPF_JMP : BPF_JMP32) | ^ ./include/linux/filter.h:317:12: note: in definition of macro 'BPF_RAW_INSN' .code = CODE, \ ^~~~ CC kernel/locking/mutex.o CC fs/configfs/file.o make[2]: *** [scripts/Makefile.build:334: kernel/bpf/verifier.o] Error 1 make[2]: *** Waiting for unfinished jobs.... CC kernel/bpf/helpers.o CC mm/fadvise.o CC fs/configfs/dir.o Please help.

Hi, these errors came about on OS boot with kernel 4.19. [33.895277] reg-fix-voltage vcc1v8-s3: Looking up vin-supply from device tree [33.895570] vcc1v8_s3: supplied by vcc_1v8 [68.028413] vcc_lcd: disabling [68.028413] cdn-dp fec00000.dp: [drm:cdn_dp=pd_event_work] *ERROR* Timed out trying to load firmware [163.648708] rock-chip-pm-domain ff310000.power-management:power-controller: Looking up pd_vopb-supply from device tree [163.649708] rock-chip-pm-domain ff310000.power-management:power-controller: Looking up pd_vopb-supply property in node /power-management@ff310000/power-controller failed [164.651200] rockchip-vop ff900000.vop: [drm:vop_crtc_atomic_enable] Update mode to 3440x1440p60, type: 11 [164.851200] dwhdmi-rockhip ff940000.hdmi: Rate 319750000 missing; compute N dynamically could you please provide an update to the dts?

nevermind. i solved this portion. posted the guide here for anyone who is interested: https://github.com/wahahawasabi/TinkerBoard2s

Hi @Joe, Is this still the case with the latest 4.19 kernel?

@tooz, please could you help with this?

Great stuffs!! could we please also get some guide on compiling our own kernels? to change some config like enabling apparmor. or nfs

Hi, could you please help to provide a boot image to load into version Tinker Board 2 Debian 10 V2.1.6? Thank you

Hi tooz, i tired to get apparmor with the above method for the latest release of Tinker Board 2 Debian 10 V2.1.6,. but the board does not boot up after that.. any idea why?

could you guys release 1 for kernel 5.15.x please? or share how we can compile our own kernels?

Hello, after 2 years of working with tinkerboard 2S, i am still unable to build a custom kernel and make adjustments to my use case. Please, could you share detailed documentations / guide on how we can create a custom kernel with uboot , and how we can install it into the tinkerboard? i'm a fan of asus product, and i use tinkerboard for IOT work. but there are very very limited resources on how to put our own customization in. please help..

@tooz, hello, was wondering if you could please help me with this? 🙂

Hello, was wondering if you could please share the steps and a how to guide on how to compile kernel 5.15 for the tinkerboard 2s please? Thanks!

To add more information, I am using tinker board 2s, on debian OS.

Hi, I noticed that in the kernel config, # CONFIG_NFSD is not set Could you please provide a patch so that it can be enabled? trying to use sudo apt-get install nsf-kernel-server Also, would it be possible to provide a tutorial on how to create kernel patches to enable some of these configs? Thanks! Jake

I changed the settings to carry on reading from cgroups v1 instead. I do this by setting this in /boot/cmdline.txt: systemd.unified_cgroup_hierarchy=0

hi, i am using cgroup v2 for containerization. however, cgroup v2 is not able to get cpu and cpuset. not sure if this is related to a kernel issue? cgroup v1 is able to detect it, but i have to use cgroup v2 instead. would be great if you could help

hello, I am trying to launch a kubernetes cluster on the tinker board 2s. however, i am met with these errors during the preflight check list. [init] Using Kubernetes version: v1.22.4 [preflight] Running pre-flight checks [preflight] The system verification failed. Printing the output from the verification: KERNEL_VERSION: 4.4.194 CONFIG_NAMESPACES: enabled CONFIG_NET_NS: enabled CONFIG_PID_NS: enabled CONFIG_IPC_NS: enabled CONFIG_UTS_NS: enabled CONFIG_CGROUPS: enabled CONFIG_CGROUP_CPUACCT: enabled CONFIG_CGROUP_DEVICE: enabled CONFIG_CGROUP_FREEZER: enabled CONFIG_CGROUP_PIDS: enabled CONFIG_CGROUP_SCHED: enabled CONFIG_CPUSETS: enabled CONFIG_MEMCG: enabled CONFIG_INET: enabled CONFIG_EXT4_FS: enabled CONFIG_PROC_FS: enabled CONFIG_NETFILTER_XT_TARGET_REDIRECT: enabled CONFIG_NETFILTER_XT_MATCH_COMMENT: enabled CONFIG_FAIR_GROUP_SCHED: enabled CONFIG_OVERLAY_FS: enabled CONFIG_AUFS_FS: not set - Required for aufs. CONFIG_BLK_DEV_DM: enabled CONFIG_CFS_BANDWIDTH: enabled CONFIG_CGROUP_HUGETLB: not set - Required for hugetlb cgroup. CONFIG_SECCOMP: enabled CONFIG_SECCOMP_FILTER: enabled DOCKER_VERSION: 20.10.11 DOCKER_GRAPH_DRIVER: overlay2 OS: Linux CGROUPS_CPU: missing CGROUPS_CPUSET: missing CGROUPS_DEVICES: enabled CGROUPS_FREEZER: enabled CGROUPS_MEMORY: enabled CGROUPS_PIDS: enabled CGROUPS_HUGETLB: missing [WARNING SystemVerification]: missing optional cgroups: hugetlb error execution phase preflight: [preflight] Some fatal errors occurred: [ERROR SystemVerification]: missing required cgroups: cpu cpuset It seems to be missing these items: CONFIG_AUFS_FS: not set - Required for aufs. CONFIG_CGROUP_HUGETLB: not set - Required for hugetlb cgroup. CGROUPS_CPU: missing CGROUPS_CPUSET: missing CGROUPS_HUGETLB: missing from my google search, it seems to be related to kernel. Could you please help?

Hello, After successfully enabling apparmor, sudo apt-get install snapd also proved to be successful. However, when I carry on with sudo snap install core (or any other package), i get met with the below error: ● snap-core-11996.mount - Mount unit for core Loaded: loaded (/etc/systemd/system/snap-core-11996.mount; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since Wed 2021-12-01 17:30:36 UTC; 47s ago Where: /snap/core/11996 What: /var/lib/snapd/snaps/core_11996.snap Process: 2523 ExecMount=/bin/mount /var/lib/snapd/snaps/core_11996.snap /snap/core/11996 -t squashfs (code=exited, sta journalctl -xe results in: Dec 01 17:29:23 linaro-alip sudo[2408]: pam_unix(sudo:session): session opened for user root by linaro(uid=0) Dec 01 17:29:32 linaro-alip sudo[2408]: pam_unix(sudo:session): session closed for user root Dec 01 17:29:33 linaro-alip sudo[2411]: linaro : TTY=pts/0 ; PWD=/home/linaro ; USER=root ; COMMAND=/bin/systemctl sta Dec 01 17:29:33 linaro-alip sudo[2411]: pam_unix(sudo:session): session opened for user root by linaro(uid=0) Dec 01 17:29:40 linaro-alip sudo[2411]: pam_unix(sudo:session): session closed for user root Dec 01 17:30:10 linaro-alip sudo[2430]: linaro : TTY=pts/0 ; PWD=/home/linaro ; USER=root ; COMMAND=/usr/bin/snap inst Dec 01 17:30:10 linaro-alip sudo[2430]: pam_unix(sudo:session): session opened for user root by linaro(uid=0) Dec 01 17:30:10 linaro-alip /usr/lib/snapd/snapd[2343]: api.go:879: Installing snap "core" revision unset Dec 01 17:30:10 linaro-alip snapd[2343]: 2021/12/01 17:30:10.398219 api.go:879: Installing snap "core" revision unset Dec 01 17:30:12 linaro-alip /usr/lib/snapd/snapd[2343]: taskrunner.go:353: DEBUG: Running task 1 on Do: Download snap "c Dec 01 17:30:12 linaro-alip /usr/lib/snapd/snapd[2343]: daemon.go:176: DEBUG: uid=0;@ POST /v2/snaps/core 1.734063s 202 Dec 01 17:30:16 linaro-alip kernel: rockchip-vop ff900000.vop: [drm:vop_isr] *ERROR* POST_BUF_EMPTY irq err Dec 01 17:30:16 linaro-alip kernel: rockchip-vop ff900000.vop: [drm:vop_isr] *ERROR* POST_BUF_EMPTY irq err Dec 01 17:30:32 linaro-alip /usr/lib/snapd/snapd[2343]: taskrunner.go:353: DEBUG: Running task 2 on Do: Fetch and check Dec 01 17:30:36 linaro-alip /usr/lib/snapd/snapd[2343]: taskrunner.go:353: DEBUG: Running task 3 on Do: Mount snap "core Dec 01 17:30:36 linaro-alip kernel: squashfs: SQUASHFS error: Filesystem uses "xz" compression. This is not supported Dec 01 17:30:36 linaro-alip systemd[1]: Failed to mount Mount unit for core. -- Subject: Unit snap-core-11996.mount has failed -- Defined-By: systemd -- Support: https://www.debian.org/support -- -- Unit snap-core-11996.mount has failed. -- -- The result is failed. Dec 01 17:30:36 linaro-alip /usr/lib/snapd/snapd[2343]: task.go:303: DEBUG: 2021-12-01T17:30:36Z ERROR [start snap-core- See "systemctl status snap-core-11996.mount" and "journalctl -xe Dec 01 17:30:37 linaro-alip /usr/lib/snapd/snapd[2343]: taskrunner.go:353: DEBUG: Running task 1 on Undo: Download snap Dec 01 17:30:37 linaro-alip sudo[2430]: pam_unix(sudo:session): session closed for user root Dec 01 17:31:30 linaro-alip ntpd[869]: kernel reports TIME_ERROR: 0x41: Clock Unsynchronized lines 2102-2130/2130 (END) How should this be fixed? Thanks!

@tooz Thanks for this, it works with this boot image now. Not sure if you are able to explain a bit further as to what the changes took place in the boot image?

Hi @tooz, can i please clarify with you. I am trying to rebuild the stable kernel release from https://www.kernel.org/ which is currently (5.15.5). The steps that I take are as follows: 1. download linux-5.15.5.tar 2. untar (1) 3. cd linux-5.15.5 4. cp arch/arm64/configs/config .config 5. make menuconfig (optional if there are stuffs in .config that you want to amend) -> save it in .config file 6. make -j24 bindeb-pkg ----- currently it is still going through no6 ----- but after that is done, i should have an iso file that i can then do a sudo dpkg -i linux-image.deb followed by a reboot. Is this correct? I tried the 3 steps you listed, but i'm not sure at which stage should that be done instead?

Hi, i am referring to the instructions here: https://gist.github.com/TinkerTeam/6286550ce70d34f6b3d483cd803da786#gistcomment-3563189 on how to compile my own kernel for tinker board 2s. However, in the guide above, it listed that that it is targeting: # Fetch Tinkerboard kernel config curl -L https://raw.githubusercontent.com/TinkerBoard/debian_kernel/develop/arch/arm/configs/miniarm-rk3288_defconfig -o arch/arm/configs/miniarm-rk3288_defconfig But with tinker board 2s, it is a RK3399 64 bit chip. Where should I be looking at to obtain the correct defconfig? Thanks, Jake

I am looking to enable apparmor in my tinker board 2s, and according to the documentation, i should include these lines into the kernel boot. apparmor=1 security=apparmor lsm=lockdown,yama,apparmor Would like to check where do i need to go to update the kernel parameters? I have tried loading it in /boot/cmdline.txt and separately in /boot/config.txt, sudo reboot the tinker board, but systemctl status apparmor still shows apparmor failing to start with: Condition check resulted in Load AppArmor profiles being skipped. how should i go about with this please?