Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cannot run v1.6.6-1 on Linux Aeon - not sure why #1211

Open
ghost opened this issue Oct 17, 2024 · 3 comments
Open

Cannot run v1.6.6-1 on Linux Aeon - not sure why #1211

ghost opened this issue Oct 17, 2024 · 3 comments

Comments

@ghost
Copy link

ghost commented Oct 17, 2024

Describe the bug
I cannot run v1.6.6-1 on Linux Aeon. Just installed Aeon, so I do not have experience with previous opensnitch versions.

  • OpenSnitch version: 1.6.6-1
  • OS: Aeon (atomic OpenSuSE)
  • Version: RC3
  • Window Manager: GNOME
  • Kernel version: Linux localhost.localdomain 6.11.2-1-default 1 SMP PREEMPT_DYNAMIC Fri Oct 4 17:37:58 UTC 2024 (38c846e) x86_64 x86_64 x86_64 GNU/Linux

To Reproduce

  1. Install daemon and ui
    e.g. [for ui] sudo transactional-update pkg install opensnitch-ui-1.6.6-1.noarch.rpm

Steps to reproduce the behavior:

  1. Go to Terminal
  2. Launch opensnitch (sudo opensnitchd)

Results:

[2024-10-17 14:16:46] IMP Starting opensnitch-daemon v1.6.6
[2024-10-17 14:16:46] INF Loading configuration file /etc/opensnitchd/default-config.json ...
[2024-10-17 14:16:46] INF Loading rules from /etc/opensnitchd/rules ...
ERROR: nfq_create_queue() queue not created

Note: running opensnitchd -check-requirements confirms that the kernel is compatible (everything is ticked green).

Post last 15 lines of the log file /var/log/opensnitchd.log

�[2m[2024-10-17 13:39:19]�[0m �[97m�[104m IMP �[0m Start writing logs to /var/log/opensnitchd.log
�[2m[2024-10-17 13:39:24]�[0m �[97m�[41m ERR �[0m GetInfo() path can't be read
�[2m[2024-10-17 13:39:26]�[0m �[97m�[41m ERR �[0m GetInfo() path can't be read
�[2m[2024-10-17 13:39:26]�[0m �[97m�[41m ERR �[0m GetInfo() path can't be read
�[2m[2024-10-17 13:39:27]�[0m �[97m�[41m ERR �[0m GetInfo() path can't be read
�[2m[2024-10-17 14:10:50]�[0m �[97m�[104m IMP �[0m Start writing logs to /var/log/opensnitchd.log
�[2m[2024-10-17 14:10:50]�[0m �[97m�[43m WAR �[0m error starting ebpf monitor method: &{eBPF error when enabling kprobes: cannot write "p:pudp_sendmsg udp_sendmsg\n" to kprobe_events: write /sys/kernel/debug/tracing/kprobe_events: file exists 1}
�[2m[2024-10-17 14:10:50]�[0m �[97m�[41m ERR �[0m Reconf() -> Init() error: &{1 eBPF error when enabling kprobes: cannot write "p:pudp_sendmsg udp_sendmsg\n" to kprobe_events: write /sys/kernel/debug/tracing/kprobe_events: file exists}
�[2m[2024-10-17 14:10:50]�[0m �[97m�[43m WAR �[0m Unable to set new process monitor (ebpf) method from disk: eBPF error when enabling kprobes: cannot write "p:pudp_sendmsg udp_sendmsg\n" to kprobe_events: write /sys/kernel/debug/tracing/kprobe_events: file exists
�[2m[2024-10-17 14:10:50]�[0m �[97m�[43m WAR �[0m Is opensnitchd already running?
�[2m[2024-10-17 14:10:50]�[0m �[97m�[41m�[1m !!! �[0m Error creating queue #0: Error binding to queue: operation not permitted
�[2m[2024-10-17 14:16:46]�[0m �[97m�[104m IMP �[0m Start writing logs to /var/log/opensnitchd.log
�[2m[2024-10-17 14:16:46]�[0m �[97m�[43m WAR �[0m error starting ebpf monitor method: &{eBPF error when enabling kprobes: cannot write "p:pudp_sendmsg udp_sendmsg\n" to kprobe_events: write /sys/kernel/debug/tracing/kprobe_events: file exists 1}
�[2m[2024-10-17 14:16:46]�[0m �[97m�[41m ERR �[0m Reconf() -> Init() error: &{1 eBPF error when enabling kprobes: cannot write "p:pudp_sendmsg udp_sendmsg\n" to kprobe_events: write /sys/kernel/debug/tracing/kprobe_events: file exists}
�[2m[2024-10-17 14:16:46]�[0m �[97m�[43m WAR �[0m Unable to set new process monitor (ebpf) method from disk: eBPF error when enabling kprobes: cannot write "p:pudp_sendmsg udp_sendmsg\n" to kprobe_events: write /sys/kernel/debug/tracing/kprobe_events: file exists
�[2m[2024-10-17 14:16:46]�[0m �[97m�[43m WAR �[0m Is opensnitchd already running?
�[2m[2024-10-17 14:16:46]�[0m �[97m�[41m�[1m !!! �[0m Error creating queue #0: Error binding to queue: operation not permitted

Additional context
If I try and launch the ui from the terminal (because it doesn't open from the icon), I also get an error:
$ opensnitch-ui
Result:

Traceback (most recent call last):
File "/usr/bin/opensnitch-ui", line 35, in
import grpc
ModuleNotFoundError: No module named 'grpc'

@gustavo-iniguez-goya
Copy link
Collaborator

hi @frigeky00 ,

Before launching the daemon manually, did you verify if it was already running? -> ps ax|grep opensnitchd

The error ERROR: nfq_create_queue() queue not created usually is caused when there's another daemon running.

ModuleNotFoundError: No module named 'grpc'

The ui package should have installed the package python3-grpcio as dependency.

Try reinstalling the UI package and see if suggest you to install additional packages.

If not, install python3-grpcio manually.

@ghost
Copy link
Author

ghost commented Nov 15, 2024

Thanks for the advice and sorry for the late reply. Unfortunately, installing python3-grpcio did not help, I still get the same error message.

Also, after running systemctl status opensnitch.service, I confirm that it is loaded and active.

@gustavo-iniguez-goya
Copy link
Collaborator

ok, the problem that the GUI (python3 really) does not find the grpcio python package.

If you execute python3 you should be able to import the package manually:

~$ python3
iPython 3.12.8 (main, Dec  4 2024, 12:15:27) [GCC 14.2.0] on linux
Type "help", "copyright", "credits" or "license" for more information.
>>> import grpc
>>> 

If you do this, it should fail in your system. Try resolving that problem, and then the GUI should work.

Maybe, try installing it with pip for your regular user: ~ $ pip3 install --user grpcio

Or find where was installed the package python3-grpcio. For example our GUI is installed in /usr/lib/python3/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant