Kernel 5.5

AmigaOne X5000 platform specific issues related to Linux only.
User avatar
xeno74
Posts: 9319
Joined: Fri Mar 23, 2012 7:58 am

Re: Kernel 5.5

Post by xeno74 »

Hi All,

The final kernel 5.5 is available for our AmigaOnes. Many thanks to all for helping me with testing, reporting, and fixing problems during the kernel 5.5 test time.

New:
Download: linux-image-5.5-X1000_X5000.tar.gz

Image

Cheers,
Christian
http://www.amigalinux.org
http://www.supertuxkart-amiga.de

Running Linux on AmigaONEs can require some tinkering.
User avatar
Skateman
Posts: 858
Joined: Thu Aug 10, 2017 8:36 pm
Location: The Netherlands

Re: Kernel 5.5

Post by Skateman »

Final Kernel 5.5 running fine on the AmigaOne X5000

Image

Big picture http://www.skateman.nl/wp-content/uploa ... 210354.png

Thanks for all the hard work Christian!
AmigaOne X5000 -> 2GHz / 16GB RAM / Radeon RX 570 / Radeon X1950 / M-Audio 5.1 -> AmigaOS / Linux
Amiga 1200 -> Recapped / 68ec020 ACA 1221ec / CF HDD / RetroNET connected to the world
Vampire 4SA - RPi4 Running AmiKitXE Full
User avatar
xeno74
Posts: 9319
Joined: Fri Mar 23, 2012 7:58 am

Re: Kernel 5.5

Post by xeno74 »

Skateman wrote: Mon Jan 27, 2020 11:15 pm Final Kernel 5.5 running fine on the AmigaOne X5000

Thanks for all the hard work Christian!
Thanks a lot for testing the final kernel 5.5! :-)
http://www.amigalinux.org
http://www.supertuxkart-amiga.de

Running Linux on AmigaONEs can require some tinkering.
User avatar
xeno74
Posts: 9319
Joined: Fri Mar 23, 2012 7:58 am

Re: Kernel 5.5

Post by xeno74 »

Hi All,

I released the stable kernel 5.5.3 today.

New:
  • X5000 and X1000: "conntrack" connection tracking match support (CONFIG_NETFILTER_XT_MATCH_CONNTRACK) and Connection state matching (CONFIG_NETFILTER_XT_MATCH_STATE). Allows you to match packets based on their relationship to a tracked connection (ie. previous packets). These are great solutions for a desktop firewall. Examples:

    Code: Select all

    iptables -F
    iptables -t filter -A INPUT -j DROP
    iptables -t filter -I INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
    or

    Code: Select all

    iptables -F
    iptables -t filter -A INPUT -j DROP
    iptables -t filter -I INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
    Basically, all network connections are blocked from the outside except our system has established the connections.
  • X5000: Add OF_DMA_DEFAULT_COHERENT & select it on powerpc (We don't need the coherent_cache-v4 patch anymore)
  • Linux Git log
  • Phoronix articles, reviews and news stories covering Linux 5.5
Download: linux-image-5.5.3-X1000_X5000.tar.gz

Kernel 5.5.3 with iptables and Pure-FTPd:

Image

Kernel 5.5.3 with iptables and Pure-FTPd in the NAT mode:

Image

Cheers,
Christian
http://www.amigalinux.org
http://www.supertuxkart-amiga.de

Running Linux on AmigaONEs can require some tinkering.
User avatar
xeno74
Posts: 9319
Joined: Fri Mar 23, 2012 7:58 am

Re: Kernel 5.5

Post by xeno74 »

Hi All,

The stable kernel 5.5.4 is available.

New:
  • X5000 and X1000: CONFIG_NETFILTER_XT_MATCH_LIMIT (Limit matching allows you to control the rate at which a rule can be matched: mainly useful in combination with the LOG target and to avoid some Denial of Service attacks).

    For example:

    Code: Select all

    iptables -A INPUT -m tcp -p tcp --dport 22 -m state 
    --state ESTABLISHED,RELATED -j ACCEPT 
    
    iptables -A INPUT -m tcp -p tcp --dport 22 -m state 
    --state NEW -m limit --limit 3/hour --limit-burst 3 -j ACCEPT 
    
    iptables -A INPUT -m tcp -p tcp --dport 22 -j DROP
    
  • Linux Git log
  • Phoronix articles, reviews and news stories covering Linux 5.5
Download: linux-image-5.5.4-X1000_X5000.tar.gz

Image

Cheers,
Christian
http://www.amigalinux.org
http://www.supertuxkart-amiga.de

Running Linux on AmigaONEs can require some tinkering.
User avatar
xeno74
Posts: 9319
Joined: Fri Mar 23, 2012 7:58 am

Re: Kernel 5.5

Post by xeno74 »

Hi All,

I released the stable kernel 5.5.5 today.

New:
  • X5000 and X1000: NETFILTER_XT_MATCH_MULTIPORT (Multiport matching allows you to match TCP or UDP packets based on a series of source or destination ports: normally a rule can only match a single range of ports.)

    For example for fail2ban (IPS, Intrusion Prevention System):

    Code: Select all

    -A INPUT -p tcp -m multiport --dports 22 -j fail2ban-ssh 
    -A fail2ban-ssh -s 87.193.135.42/32 -j DROP 
    -A fail2ban-ssh -s 79.193.45.193/32 -j DROP 
    -A fail2ban-ssh -j RETURN
    
  • Linux Git log
  • Phoronix articles, reviews and news stories covering Linux 5.5
Download: linux-image-5.5.5-X1000_X5000.tar.gz

Image

Cheers,
Christian
http://www.amigalinux.org
http://www.supertuxkart-amiga.de

Running Linux on AmigaONEs can require some tinkering.
User avatar
xeno74
Posts: 9319
Joined: Fri Mar 23, 2012 7:58 am

Re: Kernel 5.5

Post by xeno74 »

Hi All,

I released the stable kernel 5.5.11 for the X5000 and X1000 today.

New:
Download: linux-image-5.5.11-X1000_X5000.tar.gz

Image

Please test it.

Thanks,
Christian
http://www.amigalinux.org
http://www.supertuxkart-amiga.de

Running Linux on AmigaONEs can require some tinkering.
Roland
Posts: 824
Joined: Tue May 02, 2017 7:23 am

Re: Kernel 5.5

Post by Roland »

xeno74 wrote: Sun Mar 22, 2020 3:04 pm I released the stable kernel 5.5.11 for the X5000 and X1000 today.
Seems to work ok... But DPAA still connects only with the 'replug' method.
- Roland -
User avatar
xeno74
Posts: 9319
Joined: Fri Mar 23, 2012 7:58 am

Re: Kernel 5.5

Post by xeno74 »

Roland wrote: Sun Mar 22, 2020 9:19 pm Seems to work ok... But DPAA still connects only with the 'replug' method.
Hi Roland,

Many thanks for testing! :-)

Cheers,
Christian
http://www.amigalinux.org
http://www.supertuxkart-amiga.de

Running Linux on AmigaONEs can require some tinkering.
Post Reply