Packaging the daemon on Ubuntu LTS 20.04

[sonsu]

Hi! I am having trouble packaging the .deb pack of daemon on Ubuntu LTS 20.04

I was wondering if there are some considerations or tricks that need to be done, in order to make it work. I have successfully packaged the ui on the same build machine and the source compiles without any major issues as well by simply initiating "make", however, when I run

debuild --no-lintian -b -uc -us

it seems to indicate that the build process is not retrieving the go dependencies needed:

GOGCCFLAGS="-fPIC -m64 -pthread -fmessage-length=0 -fdebug-prefix-map=/tmp/go-build767277233=/tmp/go-build -gno-record-gcc-switches"
	cd _build && go install -trimpath -v -p 8 github.com/evilsocket/opensnitch/daemon github.com/evilsocket/opensnitch/daemon/conman github.com/evilsocket/opensnitch/daemon/core github.com/evilsocket/opensnitch/daemon/dns ...
src/github.com/evilsocket/opensnitch/daemon/procmon/ebpf/debug.go:12:2: cannot find package "github.com/iovisor/gobpf/elf" in any of:
	/usr/lib/go-1.13/src/github.com/iovisor/gobpf/elf (from $GOROOT)
	/home/x/opensnitch/_build/src/github.com/iovisor/gobpf/elf (from $GOPATH)
src/github.com/google/nftables/binaryutil/binaryutil.go:21:2: cannot find package "github.com/koneu/natend" in any of:
	/usr/lib/go-1.13/src/github.com/koneu/natend (from $GOROOT)
	/home/x/opensnitch/_build/src/github.com/koneu/natend (from $GOPATH)
...
make: *** [debian/rules:15: binary] Error 25
dpkg-buildpackage: error: debian/rules binary subprocess returned exit status 2
debuild: fatal error at line 1182:
dpkg-buildpackage -us -uc -ui -b failed

Any ideas?

note: I managed to end up in the same location when using dpkg-buildpackage -us -uc -b and pbuilder, somehow I seem to be missing the method of telling dh to go and retrieve all the dependencies

[gustavo-iniguez-goya]

Hi @sonsu ,

Enter into the daemon/ dir, type go mod vendor and try to build it again.

[gustavo-iniguez-goya]

Yeah, I compiled it once, then I created the packages. Try to compile the module and it should generate the .deb package.

Before adding eBPF I used to create the packages with gbp buildpackage --git-pbuilder --git-ignore-new --git-no-pristine-tar --git-upstream-tree=master --git-dist=sid, letting dh_golang to resolve the dependencies. But the golang iovisor packages are not packaged for Debian yet.

[gustavo-iniguez-goya]

If you happen to trust it, you can get the compiled .o module from the .deb packages.

[sonsu]

Thanx for all your help! I have managed to package it. My steps were as follows for clean ubuntu 20.04 LTS desktop (minimal install)

#!/bin/bash
 
apt install build-essential devscripts -y
apt install python3-setuptools pyqt5-dev-tools python3-all debhelper python3-pip -y
apt install libnetfilter-queue-dev libpcap-dev protobuf-compiler python3-pip pyqt5-dev-tools qttools5-dev-tools qt5-default -y
python3 -m pip install --user grpcio-tools
 
#daemon
apt install -y dh-systemd dh-golang golang-any golang-github-vishvananda-netlink-dev golang-github-evilsocket-ftrace-dev golang-github-google-gopacket-dev golang-github-fsnotify-fsnotify-dev golang-golang-x-net-dev golang-google-grpc-dev golang-goprotobuf-dev git libmnl-dev
 
# ebpf_prog module deps
apt install -y clang llvm libelf-dev libzip-dev flex bison libssl-dev libpcap0.8-dev

 
export GOPATH=~/go #you may want to change this if your Go directory is different
export PATH=$PATH:$GOPATH/bin
go get github.com/golang/protobuf/protoc-gen-go
 
git clone https://github.com/evilsocket/opensnitch.git
cd opensnitch
make
cd daemon
go mod vendor
cd ..
#follow the readme from https://github.com/evilsocket/opensnitch/tree/master/ebpf_prog
wget https://github.com/torvalds/linux/archive/v5.8.tar.gz
tar -xf v5.8.tar.gz
patch linux-5.8/tools/lib/bpf/bpf_helpers.h < ebpf_prog/file.patch
cp ebpf_prog/opensnitch.c ebpf_prog/Makefile linux-5.8/samples/bpf
cd linux-5.8 && yes "" | make oldconfig && make prepare && make headers_install # (1 min)
cd samples/bpf && make
objdump -h opensnitch.o #you should see many section, number 1 should be called kprobe/tcp_v4_connect
llvm-strip -g opensnitch.o #remove debug info
cp opensnitch.o ../../../ebpf_prog/
cd ../../../
rm -rf linux-5.8/
debuild --no-lintian -b -uc -us

I am not sure that everything works as expected yet, but the .deb installed on another machine.

Thanx again, and I'll leave this short notepad-bash-script here for others to find, should they come across same problem.

[gustavo-iniguez-goya]

great @sonsu ! just check if the /etc/opensnitchd/rules dirs have been created, and if the files /etc/opensnitchd/default-config.json and system-fw.json exist.

[sonsu]

Yeap, all those locations exist. Thanx alot for your help!