[Résolu][VPN] installation d'OpenVPN sur un serveur

karken · Le 05/08/2016, à 23:20

Bonsoir,

J'ai un serveur sur lequel je souhaite installer OpenVPN, sont seul but est de rediriger le traffic vers internet (sans accès au réseau local du serveur).
Pour cela j'ai suivi ce tuto
https://guide.ubuntu-fr.org/server/open … figuration
Je l'ai suivi jusqu'au moment où je dois vérifier la présence d'une interface "tun0" que je n'ai pas.

#0>> cat server.conf | grep '^[^#]'   
;local a.b.c.d
port 1194
;proto tcp
proto udp
;dev tap
dev tun
;dev-node MyTap
ca ca.crt
cert MyVPN.crt
key MyVPN.key  # This file should be kept secret
dh dh2048.pem
;topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
;server-bridge
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
;learn-address ./script
;push "redirect-gateway def1 bypass-dhcp"
;push "dhcp-option DNS 208.67.222.222"
;push "dhcp-option DNS 208.67.220.220"
;client-to-client
;duplicate-cn
keepalive 10 120
;tls-auth ta.key 0 # This file is secret
;cipher BF-CBC        # Blowfish (default)
;cipher AES-128-CBC   # AES
;cipher DES-EDE3-CBC  # Triple-DES
comp-lzo
;max-clients 100
;user nobody
;group nogroup
persist-key
persist-tun
status openvpn-status.log
;log         openvpn.log
;log-append  openvpn.log
verb 3
;mute 20
#0>>

Et je ne vois pas trop où chercher

merci d'avance

--
karken

Dernière modification par karken (Le 12/08/2016, à 02:43)

Compte anonymisé · Le 06/08/2016, à 09:49

Bonjour,

et répond sur le serveur ? :
lsmod | grep tun
modinfo tun

Dernière modification par Compte anonymisé (Le 06/08/2016, à 09:50)

karken · Le 06/08/2016, à 15:02

Bonjour Localhost,

#0>> lsmod | grep tun
libkmod: ERROR ../libkmod/libkmod-module.c:1655 kmod_module_new_from_loaded: could not open /proc/modules: No such file or directory
Error: could not get list of modules: No such file or directory
#1>> modinfo tun
libkmod: ERROR ../libkmod/libkmod.c:586 kmod_search_moddep: could not open moddep file '/lib/modules/3.14.32-xxxx-grs-ipv6-64/modules.dep.bin'
modinfo: ERROR: Module alias tun not found.
#1>> uname -a
Linux server-kimsufi 3.14.32-xxxx-grs-ipv6-64 #7 SMP Wed Jan 27 18:05:09 CET 2016 x86_64 x86_64 x86_64 GNU/Linux
#0>>

d'après ce que j'ai pu trouver, cela viendrait du kernel personnalisé d'OVH, je ne suis plus sur de ne pas avoir choisi cette option lors de l'installation.
Donc dans le doute je suis en train de réinstallation le système en prenant le noyau de la distrib.

EDIT: effectivement je devais avoir le noyau OVH, et j'en profite pour pousser un coup de gueule contre eux (kimsufi) car, mis à part une erreur de ma part, il n'est pas possible d'avoir son ancien /home en ayant évidemment préciser le point de montage enfin bref..

#0>> lsmod | grep tun
#1>> modinfo tun
modinfo: ERROR: Module tun not found.
#1>> uname -a
Linux Mon_IP 4.4.0-31-generic #50-Ubuntu SMP Wed Jul 13 00:07:12 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
#0>>

Dernière modification par karken (Le 06/08/2016, à 17:16)

Compte anonymisé · Le 06/08/2016, à 17:01

Je ne connais pas Linux server-kimsufi, mais avant de louer un vps, il faut bien s'assurer que le système hôte ait bien activé son module tun sinon c'est grillé pour installer un serveur vpn...

son seul but est de rediriger le traffic vers internet (sans accès au réseau local du serveur).

Dans ce cas c'est possible aussi en utilisant ssh avec son option proxy dynamique (D), il faudra indiquer aux clients web d'utiliser le port d'écoute de ssh dans les paramètres réseau SOCKS, ainsi tu pourras toujours utiliser la connexion internet de Kimsufi.

karken · Le 06/08/2016, à 18:21

Localhost a écrit :

Je ne connais pas Linux server-kimsufi, mais avant de louer un vps, il faut bien s'assurer que le système hôte ait bien activé son module tun sinon c'est grillé pour installer un serveur vpn...

C'est un serveur dédié donc je ne devrais pas avoir de limitations.

Localhost a écrit :

Dans ce cas c'est possible aussi en utilisant ssh avec son option proxy dynamique (D), il faudra indiquer aux clients web d'utiliser le port d'écoute de ssh dans les paramètres réseau SOCKS

J'ai regardé du côté de ssh et d'après ce que j'ai lu, il faut dire à chaque programme où l'on veux que le traffic passe, c-a-d dans un tunnel ssh.

Or je ce que je souhaite c'est de pouvoir choisir sur mon système client (unix & windows & android) :
- soit de faire passer *tout* mon traffic internet via mon serveur (de la MAJ des paquets en passant par l'acces à un webMail jusqu'au simple ping)
- soit d'utiliser ma connexion notmalement.

La méthode du tunnel ssh pourrait fonctionner mais je devrais configurer chaque programme néccesitant un accès réseau.
Cette méthode ne me plait pas car :
-je peux oublier de configurer un nouveau programme fraîchement installé.
-le programme peux être buggé,.. et ne pas prendre en compte la redirection.
-et surtout ce n'est pas générique !

Dernière modification par karken (Le 06/08/2016, à 18:42)

Compte anonymisé · Le 06/08/2016, à 20:00

lsmod | grep tun
libkmod: ERROR ../libkmod/libkmod-module.c:1655 kmod_module_new_from_loaded: could not open /proc/modules: No such file or directory
Error: could not get list of modules: No such file or directory
#1>> modinfo tun
libkmod: ERROR ../libkmod/libkmod.c:586 kmod_search_moddep: could not open moddep file '/lib/modules/3.14.32-xxxx-grs-ipv6-64/modules.dep.bin'
modinfo: ERROR: Module alias tun not found.
modinfo tun
modinfo: ERROR: Module tun not found.

ceci me laisse supposer que l'installation est dans un environnement virtuel (peut être OpenVZ) alors il faut charger le module tun dans le système hôte avant de lancer ton système...renseigne toi à Kimsufi.

karken · Le 07/08/2016, à 05:49

Localhost a écrit :

ceci me laisse supposer que l'installation est dans un environnement virtuel (peut être OpenVZ)

Je ne vois pas trop comment je pourrais ne pas être sur sur le système hôte vu que je suis sur un serveur dédié.

#0>> dmesg
[    0.000000] Initializing cgroup subsys cpuset
[    0.000000] Initializing cgroup subsys cpu
[    0.000000] Initializing cgroup subsys cpuacct
[    0.000000] Linux version 4.4.0-31-generic (buildd@lgw01-16) (gcc version 5.3.1 20160413 (Ubuntu 5.3.1-14ubuntu2.1) ) #50-Ubuntu SMP Wed Jul 13 00:07:12 UTC 2016 (Ubuntu 4.4.0-31.50-generic 4.4.13)
[    0.000000] Command line: BOOT_IMAGE=/boot/vmlinuz-4.4.0-31-generic root=/dev/sda1 ro net.ifnames=0
[    0.000000] KERNEL supported cpus:
[    0.000000]   Intel GenuineIntel
[    0.000000]   AMD AuthenticAMD
[    0.000000]   Centaur CentaurHauls
[    0.000000] Disabled fast string operations
[    0.000000] x86/fpu: Legacy x87 FPU detected.
[    0.000000] x86/fpu: Using 'lazy' FPU context switches.
[    0.000000] e820: BIOS-provided physical RAM map:
[    0.000000] BIOS-e820: [mem 0x0000000000000000-0x000000000008efff] usable
[    0.000000] BIOS-e820: [mem 0x000000000008f000-0x000000000008ffff] reserved
[    0.000000] BIOS-e820: [mem 0x0000000000090000-0x000000000009e7ff] usable
[    0.000000] BIOS-e820: [mem 0x000000000009e800-0x000000000009ffff] reserved
[    0.000000] BIOS-e820: [mem 0x00000000000e0000-0x00000000000fffff] reserved
[    0.000000] BIOS-e820: [mem 0x0000000000100000-0x000000007ee94fff] usable
[    0.000000] BIOS-e820: [mem 0x000000007ee95000-0x000000007eebefff] reserved
[    0.000000] BIOS-e820: [mem 0x000000007eebf000-0x000000007eee8fff] usable
[    0.000000] BIOS-e820: [mem 0x000000007eee9000-0x000000007efbefff] ACPI NVS
[    0.000000] BIOS-e820: [mem 0x000000007efbf000-0x000000007efeefff] usable
[    0.000000] BIOS-e820: [mem 0x000000007efef000-0x000000007effefff] ACPI data
[    0.000000] BIOS-e820: [mem 0x000000007efff000-0x000000007effffff] usable
[    0.000000] BIOS-e820: [mem 0x000000007f000000-0x000000007fffffff] reserved
[    0.000000] BIOS-e820: [mem 0x00000000e0000000-0x00000000e3ffffff] reserved
[    0.000000] BIOS-e820: [mem 0x00000000ffe00000-0x00000000ffffffff] reserved
[    0.000000] NX (Execute Disable) protection: active
[    0.000000] SMBIOS 2.7 present.
[    0.000000] DMI:                  /DN2800MT, BIOS MTCDT10N.86A.0158.2012.0808.1446 08/08/2012
[    0.000000] e820: update [mem 0x00000000-0x00000fff] usable ==> reserved
[    0.000000] e820: remove [mem 0x000a0000-0x000fffff] usable
[    0.000000] e820: last_pfn = 0x7f000 max_arch_pfn = 0x400000000
[    0.000000] MTRR default type: uncachable
[    0.000000] MTRR fixed ranges enabled:
[    0.000000]   00000-9FFFF write-back
[    0.000000]   A0000-BFFFF uncachable
[    0.000000]   C0000-DFFFF write-protect
[    0.000000]   E0000-FFFFF uncachable
[    0.000000] MTRR variable ranges enabled:
[    0.000000]   0 base 000000000 mask F80000000 write-back
[    0.000000]   1 base 07F000000 mask FFF000000 uncachable
[    0.000000]   2 base 0FFE00000 mask FFFE00000 write-protect
[    0.000000]   3 disabled
[    0.000000]   4 disabled
[    0.000000]   5 disabled
[    0.000000]   6 disabled
[    0.000000] x86/PAT: Configuration [0-7]: WB  WC  UC- UC  WB  WC  UC- WT  
[    0.000000] found SMP MP-table at [mem 0x000fbe40-0x000fbe4f] mapped at [ffff8800000fbe40]
[    0.000000] Scanning 1 areas for low memory corruption
[    0.000000] Base memory trampoline at [ffff880000098000] 98000 size 24576
[    0.000000] BRK [0x02200000, 0x02200fff] PGTABLE
[    0.000000] BRK [0x02201000, 0x02201fff] PGTABLE
[    0.000000] BRK [0x02202000, 0x02202fff] PGTABLE
[    0.000000] BRK [0x02203000, 0x02203fff] PGTABLE
[    0.000000] BRK [0x02204000, 0x02204fff] PGTABLE
[    0.000000] RAMDISK: [mem 0x33e94000-0x35f41fff]
[    0.000000] ACPI: Early table checksum verification disabled
[    0.000000] ACPI: RSDP 0x00000000000F2390 000024 (v02 INTEL )
[    0.000000] ACPI: XSDT 0x000000007EFFE120 000064 (v01 INTEL  DN2800MT 0000009E      01000013)
[    0.000000] ACPI: FACP 0x000000007EFF6000 0000F4 (v03 INTEL  DN2800MT 0000009E MSFT 0100000D)
[    0.000000] ACPI BIOS Warning (bug): 32/64X length mismatch in FADT/Pm1aEventBlock: 32/16 (20150930/tbfadt-623)
[    0.000000] ACPI BIOS Warning (bug): 32/64X length mismatch in FADT/PmTimerBlock: 32/24 (20150930/tbfadt-623)
[    0.000000] ACPI BIOS Warning (bug): Invalid length for FADT/Pm1aEventBlock: 16, using default 32 (20150930/tbfadt-704)
[    0.000000] ACPI BIOS Warning (bug): Invalid length for FADT/PmTimerBlock: 24, using default 32 (20150930/tbfadt-704)
[    0.000000] ACPI: DSDT 0x000000007EFF8000 005CA6 (v02 INTEL  DN2800MT 0000009E MSFT 0100000D)
[    0.000000] ACPI: FACS 0x000000007EF85000 000040
[    0.000000] ACPI: FACS 0x000000007EF85000 000040
[    0.000000] ACPI: SSDT 0x000000007EFF7000 00043E (v01 INTEL  DN2800MT 0000009E MSFT 0100000D)
[    0.000000] ACPI: APIC 0x000000007EFF5000 000084 (v02 INTEL  DN2800MT 0000009E MSFT 0100000D)
[    0.000000] ACPI: MCFG 0x000000007EFF4000 00003C (v01 INTEL  DN2800MT 0000009E MSFT 0100000D)
[    0.000000] ACPI: HPET 0x000000007EFF3000 000038 (v01 INTEL  DN2800MT 0000009E MSFT 0100000D)
[    0.000000] ACPI: SSDT 0x000000007EFF1000 000655 (v01 PmRef  CpuPm    00003000 INTL 20061109)
[    0.000000] ACPI: SSDT 0x000000007EFF0000 000259 (v01 PmRef  Cpu0Tst  00003000 INTL 20061109)
[    0.000000] ACPI: SSDT 0x000000007EFEF000 00020F (v01 PmRef  ApTst    00003000 INTL 20061109)
[    0.000000] ACPI: Local APIC address 0xfee00000
[    0.000000] No NUMA configuration found
[    0.000000] Faking a node at [mem 0x0000000000000000-0x000000007effffff]
[    0.000000] NODE_DATA(0) allocated [mem 0x7efea000-0x7efeefff]
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000000001000-0x0000000000ffffff]
[    0.000000]   DMA32    [mem 0x0000000001000000-0x000000007effffff]
[    0.000000]   Normal   empty
[    0.000000]   Device   empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000000001000-0x000000000008efff]
[    0.000000]   node   0: [mem 0x0000000000090000-0x000000000009dfff]
[    0.000000]   node   0: [mem 0x0000000000100000-0x000000007ee94fff]
[    0.000000]   node   0: [mem 0x000000007eebf000-0x000000007eee8fff]
[    0.000000]   node   0: [mem 0x000000007efbf000-0x000000007efeefff]
[    0.000000]   node   0: [mem 0x000000007efff000-0x000000007effffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x000000007effffff]
[    0.000000] On node 0 totalpages: 519820
[    0.000000]   DMA zone: 64 pages used for memmap
[    0.000000]   DMA zone: 21 pages reserved
[    0.000000]   DMA zone: 3996 pages, LIFO batch:0
[    0.000000]   DMA32 zone: 8064 pages used for memmap
[    0.000000]   DMA32 zone: 515824 pages, LIFO batch:31
[    0.000000] ACPI: PM-Timer IO Port: 0x408
[    0.000000] ACPI: Local APIC address 0xfee00000
[    0.000000] ACPI: LAPIC_NMI (acpi_id[0x01] high level lint[0x1])
[    0.000000] ACPI: LAPIC_NMI (acpi_id[0x02] high level lint[0x1])
[    0.000000] ACPI: LAPIC_NMI (acpi_id[0x03] high level lint[0x1])
[    0.000000] ACPI: LAPIC_NMI (acpi_id[0x04] high level lint[0x1])
[    0.000000] IOAPIC[0]: apic_id 8, version 32, address 0xfec00000, GSI 0-23
[    0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl)
[    0.000000] ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level)
[    0.000000] ACPI: IRQ0 used by override.
[    0.000000] ACPI: IRQ9 used by override.
[    0.000000] Using ACPI (MADT) for SMP configuration information
[    0.000000] ACPI: HPET id: 0x8086a201 base: 0xfed00000
[    0.000000] smpboot: Allowing 4 CPUs, 0 hotplug CPUs
[    0.000000] PM: Registered nosave memory: [mem 0x00000000-0x00000fff]
[    0.000000] PM: Registered nosave memory: [mem 0x0008f000-0x0008ffff]
[    0.000000] PM: Registered nosave memory: [mem 0x0009e000-0x0009efff]
[    0.000000] PM: Registered nosave memory: [mem 0x0009f000-0x0009ffff]
[    0.000000] PM: Registered nosave memory: [mem 0x000a0000-0x000dffff]
[    0.000000] PM: Registered nosave memory: [mem 0x000e0000-0x000fffff]
[    0.000000] PM: Registered nosave memory: [mem 0x7ee95000-0x7eebefff]
[    0.000000] PM: Registered nosave memory: [mem 0x7eee9000-0x7efbefff]
[    0.000000] PM: Registered nosave memory: [mem 0x7efef000-0x7effefff]
[    0.000000] e820: [mem 0x80000000-0xdfffffff] available for PCI devices
[    0.000000] Booting paravirtualized kernel on bare hardware
[    0.000000] clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645519600211568 ns
[    0.000000] setup_percpu: NR_CPUS:256 nr_cpumask_bits:256 nr_cpu_ids:4 nr_node_ids:1
[    0.000000] PERCPU: Embedded 33 pages/cpu @ffff88007ec00000 s98008 r8192 d28968 u524288
[    0.000000] pcpu-alloc: s98008 r8192 d28968 u524288 alloc=1*2097152
[    0.000000] pcpu-alloc: [0] 0 1 2 3 
[    0.000000] Built 1 zonelists in Node order, mobility grouping on.  Total pages: 511671
[    0.000000] Policy zone: DMA32
[    0.000000] Kernel command line: BOOT_IMAGE=/boot/vmlinuz-4.4.0-31-generic root=/dev/sda1 ro net.ifnames=0
[    0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes)
[    0.000000] Calgary: detecting Calgary via BIOS EBDA area
[    0.000000] Calgary: Unable to locate Rio Grande table in EBDA - bailing!
[    0.000000] Memory: 1993708K/2079280K available (8393K kernel code, 1282K rwdata, 3940K rodata, 1480K init, 1292K bss, 85572K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] Hierarchical RCU implementation.
[    0.000000]  Build-time adjustment of leaf fanout to 64.
[    0.000000]  RCU restricting CPUs from NR_CPUS=256 to nr_cpu_ids=4.
[    0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=64, nr_cpu_ids=4
[    0.000000] NR_IRQS:16640 nr_irqs:456 16
[    0.000000] Console: colour dummy device 80x25
[    0.000000] console [tty0] enabled
[    0.000000] clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 133484882848 ns
[    0.000000] hpet clockevent registered
[    0.000000] tsc: Fast TSC calibration using PIT
[    0.000000] tsc: Detected 1866.862 MHz processor
[    0.000055] Calibrating delay loop (skipped), value calculated using timer frequency.. 3733.72 BogoMIPS (lpj=7467448)
[    0.000083] pid_max: default: 32768 minimum: 301
[    0.000106] ACPI: Core revision 20150930
[    0.017065] ACPI: 5 ACPI AML tables successfully acquired and loaded
[    0.017147] Security Framework initialized
[    0.017163] Yama: becoming mindful.
[    0.017212] AppArmor: AppArmor initialized
[    0.017640] Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes)
[    0.019355] Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes)
[    0.020165] Mount-cache hash table entries: 4096 (order: 3, 32768 bytes)
[    0.020195] Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes)
[    0.020753] Initializing cgroup subsys io
[    0.020779] Initializing cgroup subsys memory
[    0.020808] Initializing cgroup subsys devices
[    0.020826] Initializing cgroup subsys freezer
[    0.020843] Initializing cgroup subsys net_cls
[    0.020859] Initializing cgroup subsys perf_event
[    0.020877] Initializing cgroup subsys net_prio
[    0.020893] Initializing cgroup subsys hugetlb
[    0.020914] Initializing cgroup subsys pids
[    0.020966] Disabled fast string operations
[    0.020985] CPU: Physical Processor ID: 0
[    0.020998] CPU: Processor Core ID: 0
[    0.021011] mce: CPU supports 5 MCE banks
[    0.021033] CPU0: Thermal monitoring enabled (TM2)
[    0.021050] process: using mwait in idle threads
[    0.021068] Last level iTLB entries: 4KB 32, 2MB 0, 4MB 0
[    0.021082] Last level dTLB entries: 4KB 64, 2MB 0, 4MB 8, 1GB 0
[    0.021556] Freeing SMP alternatives memory: 28K (ffffffff820b4000 - ffffffff820bb000)
[    0.024868] ftrace: allocating 31994 entries in 125 pages
[    0.049684] smpboot: Max logical packages: 2
[    0.049705] smpboot: APIC(0) Converting physical 0 to logical package 0
[    0.050224] ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1
[    0.197740] smpboot: CPU0: Intel(R) Atom(TM) CPU N2800   @ 1.86GHz (family: 0x6, model: 0x36, stepping: 0x1)
[    0.197798] Performance Events: PEBS fmt0+, 8-deep LBR, Atom events, Intel PMU driver.
[    0.197838] ... version:                3
[    0.197849] ... bit width:              40
[    0.197860] ... generic registers:      2
[    0.197872] ... value mask:             000000ffffffffff
[    0.197884] ... max period:             000000007fffffff
[    0.197895] ... fixed-purpose events:   3
[    0.197906] ... event mask:             0000000700000003
[    0.199779] x86: Booting SMP configuration:
[    0.199797] .... node  #0, CPUs:      #1
[    0.199918] Disabled fast string operations
[    0.202177] NMI watchdog: enabled on all CPUs, permanently consumes one hw-PMU counter.
[    0.202533]  #2
[    0.202617] Disabled fast string operations
[    0.204959]  #3
[    0.205059] Disabled fast string operations
[    0.207165] x86: Booted up 1 node, 4 CPUs
[    0.207192] smpboot: Total of 4 processors activated (14934.89 BogoMIPS)
[    0.208265] devtmpfs: initialized
[    0.217052] evm: security.selinux
[    0.217067] evm: security.SMACK64
[    0.217078] evm: security.SMACK64EXEC
[    0.217089] evm: security.SMACK64TRANSMUTE
[    0.217100] evm: security.SMACK64MMAP
[    0.217111] evm: security.ima
[    0.217121] evm: security.capability
[    0.217316] PM: Registering ACPI NVS region [mem 0x7eee9000-0x7efbefff] (876544 bytes)
[    0.217574] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
[    0.217842] pinctrl core: initialized pinctrl subsystem
[    0.218144] RTC time: 15:05:59, date: 08/06/16
[    0.218461] NET: Registered protocol family 16
[    0.229754] cpuidle: using governor ladder
[    0.241749] cpuidle: using governor menu
[    0.241768] PCCT header not found.
[    0.241930] ACPI FADT declares the system doesn't support PCIe ASPM, so disable it
[    0.241953] ACPI: bus type PCI registered
[    0.241966] acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5
[    0.242180] PCI: MMCONFIG for domain 0000 [bus 00-3f] at [mem 0xe0000000-0xe3ffffff] (base 0xe0000000)
[    0.242207] PCI: MMCONFIG at [mem 0xe0000000-0xe3ffffff] reserved in E820
[    0.242231] PCI: Using configuration type 1 for base access
[    0.258851] ACPI: Added _OSI(Module Device)
[    0.258870] ACPI: Added _OSI(Processor Device)
[    0.258883] ACPI: Added _OSI(3.0 _SCP Extensions)
[    0.258896] ACPI: Added _OSI(Processor Aggregator Device)
[    0.263817] ACPI: Executed 1 blocks of module-level executable AML code
[    0.267426] [Firmware Bug]: ACPI: BIOS _OSI(Linux) query ignored
[    0.268419] ACPI: Dynamic OEM Table Load:
[    0.268444] ACPI: SSDT 0xFFFF88007BF0D000 0002A7 (v01 PmRef  Cpu0Ist  00003000 INTL 20061109)
[    0.269753] ACPI: Dynamic OEM Table Load:
[    0.269775] ACPI: SSDT 0xFFFF88007BED5E00 0001CF (v01 PmRef  ApIst    00003000 INTL 20061109)
[    0.271986] ACPI: Interpreter enabled
[    0.272012] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S1_] (20150930/hwxface-580)
[    0.272041] ACPI Exception: AE_NOT_FOUND, While evaluating Sleep State [\_S2_] (20150930/hwxface-580)
[    0.272096] ACPI: (supports S0 S3 S4 S5)
[    0.272109] ACPI: Using IOAPIC for interrupt routing
[    0.272205] PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug
[    0.288682] ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff])
[    0.288712] acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI]
[    0.288834] \_SB_.PCI0:_OSC invalid UUID
[    0.288837] _OSC request data:1 1f 0 
[    0.288847] acpi PNP0A08:00: _OSC failed (AE_ERROR); disabling ASPM
[    0.288884] acpi PNP0A08:00: [Firmware Info]: MMCONFIG for domain 0000 [bus 00-3f] only partially covers this bridge
[    0.289559] PCI host bridge to bus 0000:00
[    0.289577] pci_bus 0000:00: root bus resource [io  0x0000-0x0cf7 window]
[    0.289593] pci_bus 0000:00: root bus resource [io  0x0d00-0xffff window]
[    0.289608] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window]
[    0.289630] pci_bus 0000:00: root bus resource [mem 0x000c0000-0x000dffff window]
[    0.289652] pci_bus 0000:00: root bus resource [mem 0x000e0000-0x000effff window]
[    0.289674] pci_bus 0000:00: root bus resource [mem 0x000f0000-0x000fffff window]
[    0.289695] pci_bus 0000:00: root bus resource [mem 0x7f800000-0x7fffffff window]
[    0.289717] pci_bus 0000:00: root bus resource [mem 0x80000000-0xfebfffff window]
[    0.289760] pci_bus 0000:00: root bus resource [mem 0xfed40000-0xfed44fff window]
[    0.289783] pci_bus 0000:00: root bus resource [bus 00-ff]
[    0.289809] pci 0000:00:00.0: [8086:0bf2] type 00 class 0x060000
[    0.290051] pci 0000:00:02.0: [8086:0be2] type 00 class 0x030000
[    0.290075] pci 0000:00:02.0: reg 0x10: [mem 0x80500000-0x805fffff]
[    0.290085] pci 0000:00:02.0: reg 0x14: [io  0x30d0-0x30d7]
[    0.290335] pci 0000:00:1c.0: [8086:27d0] type 01 class 0x060400
[    0.290445] pci 0000:00:1c.0: PME# supported from D0 D3hot D3cold
[    0.290562] pci 0000:00:1c.0: System wakeup disabled by ACPI
[    0.290689] pci 0000:00:1d.0: [8086:27c8] type 00 class 0x0c0300
[    0.290750] pci 0000:00:1d.0: reg 0x20: [io  0x30a0-0x30bf]
[    0.290922] pci 0000:00:1d.0: System wakeup disabled by ACPI
[    0.291042] pci 0000:00:1d.1: [8086:27c9] type 00 class 0x0c0300
[    0.291115] pci 0000:00:1d.1: reg 0x20: [io  0x3080-0x309f]
[    0.291283] pci 0000:00:1d.1: System wakeup disabled by ACPI
[    0.291400] pci 0000:00:1d.2: [8086:27ca] type 00 class 0x0c0300
[    0.291473] pci 0000:00:1d.2: reg 0x20: [io  0x3060-0x307f]
[    0.291639] pci 0000:00:1d.2: System wakeup disabled by ACPI
[    0.291756] pci 0000:00:1d.3: [8086:27cb] type 00 class 0x0c0300
[    0.291829] pci 0000:00:1d.3: reg 0x20: [io  0x3040-0x305f]
[    0.291995] pci 0000:00:1d.3: System wakeup disabled by ACPI
[    0.292125] pci 0000:00:1d.7: [8086:27cc] type 00 class 0x0c0320
[    0.292164] pci 0000:00:1d.7: reg 0x10: [mem 0x80600400-0x806007ff]
[    0.292268] pci 0000:00:1d.7: PME# supported from D0 D3hot D3cold
[    0.292399] pci 0000:00:1d.7: System wakeup disabled by ACPI
[    0.292519] pci 0000:00:1e.0: [8086:2448] type 01 class 0x060401
[    0.292756] pci 0000:00:1f.0: [8086:27bc] type 00 class 0x060100
[    0.292872] pci 0000:00:1f.0: [Firmware Bug]: TigerPoint LPC.BM_STS cleared
[    0.293083] pci 0000:00:1f.2: [8086:27c1] type 00 class 0x010601
[    0.293117] pci 0000:00:1f.2: reg 0x10: [io  0x30c8-0x30cf]
[    0.293131] pci 0000:00:1f.2: reg 0x14: [io  0x30dc-0x30df]
[    0.293145] pci 0000:00:1f.2: reg 0x18: [io  0x30c0-0x30c7]
[    0.293158] pci 0000:00:1f.2: reg 0x1c: [io  0x30d8-0x30db]
[    0.293171] pci 0000:00:1f.2: reg 0x20: [io  0x3020-0x302f]
[    0.293185] pci 0000:00:1f.2: reg 0x24: [mem 0x80600000-0x806003ff]
[    0.293232] pci 0000:00:1f.2: PME# supported from D3hot
[    0.293426] pci 0000:00:1f.3: [8086:27da] type 00 class 0x0c0500
[    0.293496] pci 0000:00:1f.3: reg 0x20: [io  0x3000-0x301f]
[    0.293870] pci 0000:01:00.0: [8086:10d3] type 00 class 0x020000
[    0.293945] pci 0000:01:00.0: reg 0x10: [mem 0x80400000-0x8041ffff]
[    0.293968] pci 0000:01:00.0: reg 0x14: [mem 0x80000000-0x803fffff]
[    0.293991] pci 0000:01:00.0: reg 0x18: [io  0x2000-0x201f]
[    0.294017] pci 0000:01:00.0: reg 0x1c: [mem 0x80420000-0x80423fff]
[    0.294167] pci 0000:01:00.0: PME# supported from D0 D3hot D3cold
[    0.294246] pci 0000:01:00.0: System wakeup disabled by ACPI
[    0.301772] pci 0000:00:1c.0: PCI bridge to [bus 01]
[    0.301792] pci 0000:00:1c.0:   bridge window [io  0x2000-0x2fff]
[    0.301800] pci 0000:00:1c.0:   bridge window [mem 0x80000000-0x804fffff]
[    0.301967] pci 0000:00:1e.0: PCI bridge to [bus 02] (subtractive decode)
[    0.301997] pci 0000:00:1e.0:   bridge window [io  0x0000-0x0cf7 window] (subtractive decode)
[    0.302004] pci 0000:00:1e.0:   bridge window [io  0x0d00-0xffff window] (subtractive decode)
[    0.302010] pci 0000:00:1e.0:   bridge window [mem 0x000a0000-0x000bffff window] (subtractive decode)
[    0.302016] pci 0000:00:1e.0:   bridge window [mem 0x000c0000-0x000dffff window] (subtractive decode)
[    0.302021] pci 0000:00:1e.0:   bridge window [mem 0x000e0000-0x000effff window] (subtractive decode)
[    0.302027] pci 0000:00:1e.0:   bridge window [mem 0x000f0000-0x000fffff window] (subtractive decode)
[    0.302032] pci 0000:00:1e.0:   bridge window [mem 0x7f800000-0x7fffffff window] (subtractive decode)
[    0.302038] pci 0000:00:1e.0:   bridge window [mem 0x80000000-0xfebfffff window] (subtractive decode)
[    0.302044] pci 0000:00:1e.0:   bridge window [mem 0xfed40000-0xfed44fff window] (subtractive decode)
[    0.303230] ACPI: PCI Interrupt Link [LNKA] (IRQs 1 3 4 5 6 7 10 12 14 15) *11
[    0.303411] ACPI: PCI Interrupt Link [LNKB] (IRQs 1 3 4 5 6 7 11 12 14 15) *0, disabled.
[    0.303587] ACPI: PCI Interrupt Link [LNKC] (IRQs 1 3 4 5 6 7 10 12 14 15) *11
[    0.303762] ACPI: PCI Interrupt Link [LNKD] (IRQs 1 3 4 5 6 7 11 12 14 15) *10
[    0.303936] ACPI: PCI Interrupt Link [LNKE] (IRQs 1 3 4 5 6 7 10 12 14 15) *0, disabled.
[    0.304110] ACPI: PCI Interrupt Link [LNKF] (IRQs 1 3 4 5 6 7 11 12 14 15) *0, disabled.
[    0.304284] ACPI: PCI Interrupt Link [LNKG] (IRQs 1 3 4 5 6 7 10 12 14 15) *0, disabled.
[    0.304460] ACPI: PCI Interrupt Link [LNKH] (IRQs 1 3 4 5 6 7 11 12 14 15) *9
[    0.304845] ACPI: Enabled 7 GPEs in block 00 to 1F
[    0.305175] vgaarb: setting as boot device: PCI:0000:00:02.0
[    0.305192] vgaarb: device added: PCI:0000:00:02.0,decodes=io+mem,owns=io+mem,locks=none
[    0.305217] vgaarb: loaded
[    0.305229] vgaarb: bridge control possible 0000:00:02.0
[    0.305983] SCSI subsystem initialized
[    0.306151] libata version 3.00 loaded.
[    0.306222] ACPI: bus type USB registered
[    0.306285] usbcore: registered new interface driver usbfs
[    0.306328] usbcore: registered new interface driver hub
[    0.306401] usbcore: registered new device driver usb
[    0.306841] PCI: Using ACPI for IRQ routing
[    0.308814] PCI: pci_cache_line_size set to 64 bytes
[    0.308878] e820: reserve RAM buffer [mem 0x0008f000-0x0008ffff]
[    0.308882] e820: reserve RAM buffer [mem 0x0009e800-0x0009ffff]
[    0.308886] e820: reserve RAM buffer [mem 0x7ee95000-0x7fffffff]
[    0.308891] e820: reserve RAM buffer [mem 0x7eee9000-0x7fffffff]
[    0.308894] e820: reserve RAM buffer [mem 0x7efef000-0x7fffffff]
[    0.308898] e820: reserve RAM buffer [mem 0x7f000000-0x7fffffff]
[    0.309201] NetLabel: Initializing
[    0.309215] NetLabel:  domain hash size = 128
[    0.309227] NetLabel:  protocols = UNLABELED CIPSOv4
[    0.309268] NetLabel:  unlabeled traffic allowed by default
[    0.309483] hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0
[    0.309504] hpet0: 3 comparators, 64-bit 14.318180 MHz counter
[    0.311585] clocksource: Switched to clocksource hpet
[    0.331330] AppArmor: AppArmor Filesystem Enabled
[    0.331524] pnp: PnP ACPI init
[    0.331948] system 00:00: [mem 0xfed00000-0xfed003ff] has been reserved
[    0.331974] system 00:00: Plug and Play ACPI device, IDs PNP0103 PNP0c01 (active)
[    0.332104] system 00:01: [io  0x0680-0x069f] has been reserved
[    0.332121] system 00:01: [io  0x1000-0x100f] has been reserved
[    0.332137] system 00:01: [io  0xffff] has been reserved
[    0.332156] system 00:01: [io  0xffff] has been reserved
[    0.332172] system 00:01: [io  0x0400-0x047f] could not be reserved
[    0.332188] system 00:01: [io  0x0500-0x057f] has been reserved
[    0.332203] system 00:01: [io  0x0600-0x061f] has been reserved
[    0.332221] system 00:01: Plug and Play ACPI device, IDs PNP0c02 (active)
[    0.332364] system 00:02: [io  0x06a0-0x06af] has been reserved
[    0.332381] system 00:02: [io  0x06b0-0x06ff] has been reserved
[    0.332399] system 00:02: Plug and Play ACPI device, IDs PNP0c02 (active)
[    0.332480] pnp 00:03: Plug and Play ACPI device, IDs PNP0b00 (active)
[    0.332991] pnp 00:04: Plug and Play ACPI device, IDs PNP0400 (active)
[    0.333520] pnp 00:05: Plug and Play ACPI device, IDs PNP0501 (active)
[    0.333949] pnp 00:06: Plug and Play ACPI device, IDs PNP0501 (active)
[    0.334326] system 00:07: [mem 0xfed1c000-0xfed1ffff] has been reserved
[    0.334345] system 00:07: [mem 0x00000000-0x00003fff] could not be reserved
[    0.334361] system 00:07: [mem 0x00000000-0x00000fff] could not be reserved
[    0.334377] system 00:07: [mem 0x00000000-0x00000fff] could not be reserved
[    0.334392] system 00:07: [mem 0xfed45000-0xfed8ffff] has been reserved
[    0.334411] system 00:07: Plug and Play ACPI device, IDs PNP0c02 (active)
[    0.334727] pnp: PnP ACPI: found 8 devices
[    0.345167] clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns
[    0.345231] pci 0000:00:1c.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000
[    0.345256] pci 0000:00:1c.0: res[15]=[mem 0x00100000-0x000fffff 64bit pref] res_to_dev_res add_size 200000 min_align 100000
[    0.345263] pci 0000:00:1c.0: res[15]=[mem 0x00100000-0x002fffff 64bit pref] res_to_dev_res add_size 200000 min_align 100000
[    0.345284] pci 0000:00:1c.0: BAR 15: assigned [mem 0x80700000-0x808fffff 64bit pref]
[    0.345309] pci 0000:00:1c.0: PCI bridge to [bus 01]
[    0.345324] pci 0000:00:1c.0:   bridge window [io  0x2000-0x2fff]
[    0.345343] pci 0000:00:1c.0:   bridge window [mem 0x80000000-0x804fffff]
[    0.345361] pci 0000:00:1c.0:   bridge window [mem 0x80700000-0x808fffff 64bit pref]
[    0.345389] pci 0000:00:1e.0: PCI bridge to [bus 02]
[    0.345417] pci_bus 0000:00: resource 4 [io  0x0000-0x0cf7 window]
[    0.345422] pci_bus 0000:00: resource 5 [io  0x0d00-0xffff window]
[    0.345428] pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window]
[    0.345433] pci_bus 0000:00: resource 7 [mem 0x000c0000-0x000dffff window]
[    0.345438] pci_bus 0000:00: resource 8 [mem 0x000e0000-0x000effff window]
[    0.345443] pci_bus 0000:00: resource 9 [mem 0x000f0000-0x000fffff window]
[    0.345449] pci_bus 0000:00: resource 10 [mem 0x7f800000-0x7fffffff window]
[    0.345454] pci_bus 0000:00: resource 11 [mem 0x80000000-0xfebfffff window]
[    0.345459] pci_bus 0000:00: resource 12 [mem 0xfed40000-0xfed44fff window]
[    0.345465] pci_bus 0000:01: resource 0 [io  0x2000-0x2fff]
[    0.345470] pci_bus 0000:01: resource 1 [mem 0x80000000-0x804fffff]
[    0.345475] pci_bus 0000:01: resource 2 [mem 0x80700000-0x808fffff 64bit pref]
[    0.345481] pci_bus 0000:02: resource 4 [io  0x0000-0x0cf7 window]
[    0.345486] pci_bus 0000:02: resource 5 [io  0x0d00-0xffff window]
[    0.345492] pci_bus 0000:02: resource 6 [mem 0x000a0000-0x000bffff window]
[    0.345497] pci_bus 0000:02: resource 7 [mem 0x000c0000-0x000dffff window]
[    0.345502] pci_bus 0000:02: resource 8 [mem 0x000e0000-0x000effff window]
[    0.345507] pci_bus 0000:02: resource 9 [mem 0x000f0000-0x000fffff window]
[    0.345513] pci_bus 0000:02: resource 10 [mem 0x7f800000-0x7fffffff window]
[    0.345518] pci_bus 0000:02: resource 11 [mem 0x80000000-0xfebfffff window]
[    0.345523] pci_bus 0000:02: resource 12 [mem 0xfed40000-0xfed44fff window]
[    0.345610] NET: Registered protocol family 2
[    0.346046] TCP established hash table entries: 16384 (order: 5, 131072 bytes)
[    0.346190] TCP bind hash table entries: 16384 (order: 6, 262144 bytes)
[    0.346329] TCP: Hash tables configured (established 16384 bind 16384)
[    0.346455] UDP hash table entries: 1024 (order: 3, 32768 bytes)
[    0.346505] UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes)
[    0.346691] NET: Registered protocol family 1
[    0.346747] pci 0000:00:02.0: Video device with shadowed ROM
[    0.363733] PCI: CLS 64 bytes, default 64
[    0.363877] Trying to unpack rootfs image as initramfs...
[    1.607724] Freeing initrd memory: 33464K (ffff880033e94000 - ffff880035f42000)
[    1.608146] Scanning for low memory corruption every 60 seconds
[    1.609076] futex hash table entries: 1024 (order: 4, 65536 bytes)
[    1.609160] audit: initializing netlink subsys (disabled)
[    1.609222] audit: type=2000 audit(1470495960.500:1): initialized
[    1.610061] Initialise system trusted keyring
[    1.610433] HugeTLB registered 2 MB page size, pre-allocated 0 pages
[    1.615263] zbud: loaded
[    1.615837] VFS: Disk quotas dquot_6.6.0
[    1.615957] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
[    1.616797] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    1.617590] fuse init (API version 7.23)
[    1.618023] Key type big_key registered
[    1.618089] Allocating IMA MOK and blacklist keyrings.
[    1.619073] Key type asymmetric registered
[    1.619095] Asymmetric key parser 'x509' registered
[    1.619230] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249)
[    1.619341] io scheduler noop registered
[    1.619357] io scheduler deadline registered (default)
[    1.619464] io scheduler cfq registered
[    1.620106] pci_hotplug: PCI Hot Plug PCI Core version: 0.5
[    1.620138] pciehp: PCI Express Hot Plug Controller Driver version: 0.4
[    1.620241] vesafb: mode is 640x480x32, linelength=2560, pages=0
[    1.620255] vesafb: scrolling: redraw
[    1.620268] vesafb: Truecolor: size=8:8:8:8, shift=24:16:8:0
[    1.620305] vesafb: framebuffer at 0x7f800000, mapped to 0xffffc90000400000, using 1216k, total 1216k
[    1.630238] Console: switching to colour frame buffer device 80x30
[    1.640151] fb0: VESA VGA frame buffer device
[    1.640410] intel_idle: MWAIT substates: 0x3020220
[    1.640415] intel_idle: v0.4.1 model 0x36
[    1.640418] intel_idle: lapic_timer_reliable_states 0xffffffff
[    1.640974] input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0
[    1.641376] ACPI: Power Button [PWRB]
[    1.641662] input: Sleep Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0E:00/input/input1
[    1.654457] ACPI: Sleep Button [SLPB]
[    1.660918] input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2
[    1.673900] ACPI: Power Button [PWRF]
[    1.684374] GHES: HEST is not enabled!
[    1.691046] Serial: 8250/16550 driver, 32 ports, IRQ sharing enabled
[    1.718196] 00:05: ttyS1 at I/O 0x2f8 (irq = 3, base_baud = 115200) is a 16550A
[    1.752092] 00:06: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A
[    1.770435] Linux agpgart interface v0.103
[    1.786514] brd: module loaded
[    1.797390] loop: module loaded
[    1.804549] libphy: Fixed MDIO Bus: probed
[    1.811146] tun: Universal TUN/TAP device driver, 1.6
[    1.817825] tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
[    1.824729] PPP generic driver version 2.4.2
[    1.831608] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    1.838391] ehci-pci: EHCI PCI platform driver
[    1.845316] ehci-pci 0000:00:1d.7: EHCI Host Controller
[    1.852073] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1
[    1.865246] ehci-pci 0000:00:1d.7: debug port 1
[    1.875699] ehci-pci 0000:00:1d.7: cache line size of 64 is not supported
[    1.875731] ehci-pci 0000:00:1d.7: irq 23, io mem 0x80600400
[    1.891508] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00
[    1.897951] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002
[    1.904261] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    1.916636] usb usb1: Product: EHCI Host Controller
[    1.922774] usb usb1: Manufacturer: Linux 4.4.0-31-generic ehci_hcd
[    1.929022] usb usb1: SerialNumber: 0000:00:1d.7
[    1.935485] hub 1-0:1.0: USB hub found
[    1.941415] hub 1-0:1.0: 8 ports detected
[    1.948291] ehci-platform: EHCI generic platform driver
[    1.954323] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    1.960336] ohci-pci: OHCI PCI platform driver
[    1.966214] ohci-platform: OHCI generic platform driver
[    1.972017] uhci_hcd: USB Universal Host Controller Interface driver
[    1.977974] uhci_hcd 0000:00:1d.0: UHCI Host Controller
[    1.983668] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 2
[    1.995031] uhci_hcd 0000:00:1d.0: detected 2 ports
[    2.000961] uhci_hcd 0000:00:1d.0: irq 23, io base 0x000030a0
[    2.007031] usb usb2: New USB device found, idVendor=1d6b, idProduct=0001
[    2.013093] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    2.024894] usb usb2: Product: UHCI Host Controller
[    2.030818] usb usb2: Manufacturer: Linux 4.4.0-31-generic uhci_hcd
[    2.036781] usb usb2: SerialNumber: 0000:00:1d.0
[    2.043049] hub 2-0:1.0: USB hub found
[    2.048949] hub 2-0:1.0: 2 ports detected
[    2.055121] uhci_hcd 0000:00:1d.1: UHCI Host Controller
[    2.060886] uhci_hcd 0000:00:1d.1: new USB bus registered, assigned bus number 3
[    2.072493] uhci_hcd 0000:00:1d.1: detected 2 ports
[    2.078423] uhci_hcd 0000:00:1d.1: irq 19, io base 0x00003080
[    2.084413] usb usb3: New USB device found, idVendor=1d6b, idProduct=0001
[    2.090298] usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    2.101811] usb usb3: Product: UHCI Host Controller
[    2.107677] usb usb3: Manufacturer: Linux 4.4.0-31-generic uhci_hcd
[    2.113641] usb usb3: SerialNumber: 0000:00:1d.1
[    2.119994] hub 3-0:1.0: USB hub found
[    2.125946] hub 3-0:1.0: 2 ports detected
[    2.132254] uhci_hcd 0000:00:1d.2: UHCI Host Controller
[    2.138129] uhci_hcd 0000:00:1d.2: new USB bus registered, assigned bus number 4
[    2.149771] uhci_hcd 0000:00:1d.2: detected 2 ports
[    2.155729] uhci_hcd 0000:00:1d.2: irq 18, io base 0x00003060
[    2.161777] usb usb4: New USB device found, idVendor=1d6b, idProduct=0001
[    2.167684] usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    2.179286] usb usb4: Product: UHCI Host Controller
[    2.185157] usb usb4: Manufacturer: Linux 4.4.0-31-generic uhci_hcd
[    2.191108] usb usb4: SerialNumber: 0000:00:1d.2
[    2.197266] hub 4-0:1.0: USB hub found
[    2.203012] hub 4-0:1.0: 2 ports detected
[    2.209143] uhci_hcd 0000:00:1d.3: UHCI Host Controller
[    2.214853] uhci_hcd 0000:00:1d.3: new USB bus registered, assigned bus number 5
[    2.226306] uhci_hcd 0000:00:1d.3: detected 2 ports
[    2.232257] uhci_hcd 0000:00:1d.3: irq 16, io base 0x00003040
[    2.238302] usb usb5: New USB device found, idVendor=1d6b, idProduct=0001
[    2.244240] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1
[    2.255879] usb usb5: Product: UHCI Host Controller
[    2.259477] usb 1-8: new high-speed USB device number 2 using ehci-pci
[    2.267817] usb usb5: Manufacturer: Linux 4.4.0-31-generic uhci_hcd
[    2.273788] usb usb5: SerialNumber: 0000:00:1d.3
[    2.280047] hub 5-0:1.0: USB hub found
[    2.285891] hub 5-0:1.0: 2 ports detected
[    2.292083] i8042: PNP: No PS/2 controller found. Probing ports directly.
[    2.300724] serio: i8042 KBD port at 0x60,0x64 irq 1
[    2.306766] serio: i8042 AUX port at 0x60,0x64 irq 12
[    2.313123] mousedev: PS/2 mouse device common for all mice
[    2.319619] rtc_cmos 00:03: RTC can wake from S4
[    2.325683] rtc_cmos 00:03: rtc core: registered rtc_cmos as rtc0
[    2.331596] rtc_cmos 00:03: alarms up to one month, y3k, 242 bytes nvram, hpet irqs
[    2.343285] i2c /dev entries driver
[    2.349254] device-mapper: uevent: version 1.0.3
[    2.355235] device-mapper: ioctl: 4.34.0-ioctl (2015-10-28) initialised: dm-devel@redhat.com
[    2.366815] ledtrig-cpu: registered to indicate activity on CPUs
[    2.373885] NET: Registered protocol family 10
[    2.380474] NET: Registered protocol family 17
[    2.386449] Key type dns_resolver registered
[    2.392939] microcode: CPU0 sig=0x30661, pf=0x8, revision=0x10d
[    2.399001] microcode: CPU1 sig=0x30661, pf=0x8, revision=0x10d
[    2.399231] usb 1-8: New USB device found, idVendor=058f, idProduct=6254
[    2.399235] usb 1-8: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[    2.399698] hub 1-8:1.0: USB hub found
[    2.399850] hub 1-8:1.0: 4 ports detected
[    2.428246] microcode: CPU2 sig=0x30661, pf=0x8, revision=0x10d
[    2.433924] microcode: CPU3 sig=0x30661, pf=0x8, revision=0x10d
[    2.439610] microcode: Microcode Update Driver: v2.01 <tigran@aivazian.fsnet.co.uk>, Peter Oruba
[    2.451101] registered taskstats version 1
[    2.456657] Loading compiled-in X.509 certificates
[    2.467114] Loaded X.509 cert 'Build time autogenerated kernel key: cfb4d0870811f0d88a3f3259915bd8e83759f99c'
[    2.478660] zswap: loaded using pool lzo/zbud
[    2.489352] Key type trusted registered
[    2.504711] Key type encrypted registered
[    2.510431] AppArmor: AppArmor sha1 policy hashing enabled
[    2.516199] ima: No TPM chip found, activating TPM-bypass!
[    2.522041] evm: HMAC attrs: 0x1
[    2.528227]   Magic number: 12:565:82
[    2.534015] rtc_cmos 00:03: setting system clock to 2016-08-06 15:06:02 UTC (1470495962)
[    2.547881] BIOS EDD facility v0.16 2004-Jun-25, 0 devices found
[    2.553832] EDD information not available.
[    2.559789] PM: Hibernation image not present or could not be loaded.
[    2.564281] Freeing unused kernel memory: 1480K (ffffffff81f42000 - ffffffff820b4000)
[    2.575891] Write protecting the kernel read-only data: 14336k
[    2.584115] Freeing unused kernel memory: 1836K (ffff880001835000 - ffff880001a00000)
[    2.597802] Freeing unused kernel memory: 156K (ffff880001dd9000 - ffff880001e00000)
[    2.607527] tsc: Refined TSC clocksource calibration: 1866.732 MHz
[    2.607533] clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x35d0d1b66a8, max_idle_ns: 881590563120 ns
[    2.677302] random: systemd-udevd urandom read with 5 bits of entropy available
[    2.802944] FUJITSU Extended Socket Network Device Driver - version 1.0 - Copyright (c) 2015 FUJITSU LIMITED
[    2.950064] pps_core: LinuxPPS API ver. 1 registered
[    2.959715] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    2.989115] [drm] Initialized drm 1.1.0 20060810
[    2.998360] PTP clock support registered
[    3.013327] ahci 0000:00:1f.2: version 3.0
[    3.013663] ahci 0000:00:1f.2: SSS flag set, parallel bus scan disabled
[    3.022156] ahci 0000:00:1f.2: AHCI 0001.0100 32 slots 4 ports 3 Gbps 0x3 impl SATA mode
[    3.041034] ahci 0000:00:1f.2: flags: 64bit ncq stag pm led clo pio slum part 
[    3.060113] e1000e: Intel(R) PRO/1000 Network Driver - 3.2.6-k
[    3.068775] e1000e: Copyright(c) 1999 - 2015 Intel Corporation.
[    3.089267] e1000e 0000:01:00.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode
[    3.091998] scsi host0: ahci
[    3.116676] scsi host1: ahci
[    3.136619] scsi host2: ahci
[    3.149542] scsi host3: ahci
[    3.165743] ata1: SATA max UDMA/133 abar m1024@0x80600000 port 0x80600100 irq 25
[    3.181946] ata2: SATA max UDMA/133 abar m1024@0x80600000 port 0x80600180 irq 25
[    3.198898] ata3: DUMMY
[    3.207079] ata4: DUMMY
[    3.235995] gma500 0000:00:02.0: GPU: power management timed out.
[    3.245365] e1000e 0000:01:00.0 eth0: registered PHC clock
[    3.245411] pmd_set_huge: Cannot satisfy [mem 0x7f800000-0x7fa00000] with a huge-page mapping due to MTRR override.
[    3.271376] e1000e 0000:01:00.0 eth0: (PCI Express:2.5GT/s:Width x1) 00:22:4d:87:b2:2b
[    3.272382] ACPI: Video Device [GFX0] (multi-head: yes  rom: no  post: no)
[    3.273312] acpi device:30: registered as cooling_device4
[    3.273488] input: Video Bus as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/LNXVIDEO:00/input/input6
[    3.273724] [drm] Supports vblank timestamp caching Rev 2 (21.10.2013).
[    3.273726] [drm] No driver support for vblank timestamp query.
[    3.330552] e1000e 0000:01:00.0 eth0: Intel(R) PRO/1000 Network Connection
[    3.338392] e1000e 0000:01:00.0 eth0: MAC: 3, PHY: 8, PBA No: FFFFFF-0FF
[    3.416573] gma500 0000:00:02.0: trying to get vblank count for disabled pipe 1
[    3.434640] gma500 0000:00:02.0: trying to get vblank count for disabled pipe 1                                                      
[    3.535480] ata1: SATA link up 3.0 Gbps (SStatus 123 SControl 300)
[    3.546254] ata1.00: ATA-8: Hitachi HDS721050DLE630, MS1OA650, max UDMA/133
[    3.555720] ata1.00: 976773168 sectors, multi 16: LBA48 NCQ (depth 31/32), AA
[    3.567940] ata1.00: configured for UDMA/133
[    3.577878] scsi 0:0:0:0: Direct-Access     ATA      Hitachi HDS72105 A650 PQ: 0 ANSI: 5
[    3.594944] sd 0:0:0:0: [sda] 976773168 512-byte logical blocks: (500 GB/466 GiB)
[    3.610298] sd 0:0:0:0: [sda] 4096-byte physical blocks
[    3.617684] clocksource: Switched to clocksource tsc
[    3.618025] sd 0:0:0:0: [sda] Write Protect is off
[    3.618033] sd 0:0:0:0: [sda] Mode Sense: 00 3a 00 00
[    3.618098] sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
[    3.618157] sd 0:0:0:0: Attached scsi generic sg0 type 0
[    3.645287] checking generic (7f800000 130000) vs hw (7f800000 7bf000)
[    3.645289] fb: switching to psbdrmfb from VESA VGA
[    3.650203]  sda: sda1 sda2 sda3
[    3.651112] sd 0:0:0:0: [sda] Attached SCSI disk
[    3.683521] Console: switching to colour dummy device 80x25
[    3.683905] fbcon: psbdrmfb (fb0) is primary device
[    3.935368] ata2: SATA link down (SStatus 0 SControl 300)
[    4.054778] Console: switching to colour frame buffer device 240x67
[    4.088938] gma500 0000:00:02.0: fb0: psbdrmfb frame buffer device
[    4.099506] [drm] Initialized gma500 1.0.0 20140314 for 0000:00:02.0 on minor 0
[    4.472916] md: linear personality registered for level -1
[    4.483542] md: multipath personality registered for level -4
[    4.493907] md: raid0 personality registered for level 0
[    4.505848] md: raid1 personality registered for level 1
[    4.591436] raid6: sse2x1   gen()   287 MB/s
[    4.659319] raid6: sse2x1   xor()   833 MB/s
[    4.727369] raid6: sse2x2   gen()   705 MB/s
[    4.795303] raid6: sse2x2   xor()  1414 MB/s
[    4.863315] raid6: sse2x4   gen()  1208 MB/s
[    4.931274] raid6: sse2x4   xor()  1638 MB/s
[    4.931391] raid6: using algorithm sse2x4 gen() 1208 MB/s
[    4.931525] raid6: .... xor() 1638 MB/s, rmw enabled
[    4.931649] raid6: using ssse3x2 recovery algorithm
[    4.937610] xor: measuring software checksum speed
[    4.975270]    prefetch64-sse:  5424.000 MB/sec
[    5.015266]    generic_sse:  4958.000 MB/sec
[    5.015384] xor: using function: prefetch64-sse (5424.000 MB/sec)
[    5.021179] async_tx: api initialized (async)
[    5.054739] md: raid6 personality registered for level 6
[    5.054910] md: raid5 personality registered for level 5
[    5.055061] md: raid4 personality registered for level 4
[    5.076781] md: raid10 personality registered for level 10
[    5.149617] Btrfs loaded
[    5.621619] EXT4-fs (sda1): mounted filesystem with ordered data mode. Opts: (null)
[    6.219709] random: nonblocking pool is initialized
[    6.248267] systemd[1]: systemd 229 running in system mode. (+PAM +AUDIT +SELINUX +IMA +APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ -LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD -IDN)
[    6.256658] systemd[1]: Detected architecture x86-64.
[    6.303559] systemd[1]: Set hostname to <ns3281200.ip-5-39-95.eu>.
[    7.417987] systemd[1]: Created slice User and Session Slice.
[    7.433756] systemd[1]: Listening on fsck to fsckd communication Socket.
[    7.449468] systemd[1]: Listening on udev Kernel Socket.
[    7.465141] systemd[1]: Started Forward Password Requests to Wall Directory Watch.
[    7.480949] systemd[1]: Listening on Journal Socket (/dev/log).
[    7.496677] systemd[1]: Reached target User and Group Name Lookups.
[    7.512565] systemd[1]: Reached target Encrypted Volumes.
[    7.528602] systemd[1]: Listening on Journal Audit Socket.
[    7.544814] systemd[1]: Created slice System Slice.
[    7.560854] systemd[1]: Reached target Slices.
[    7.577115] systemd[1]: Created slice system-openvpn.slice.
[    7.593246] systemd[1]: Listening on LVM2 metadata daemon socket.
[    7.609307] systemd[1]: Listening on LVM2 poll daemon socket.
[    7.625230] systemd[1]: Listening on udev Control Socket.
[    7.641372] systemd[1]: Listening on Device-mapper event daemon FIFOs.
[    7.658114] systemd[1]: Created slice system-systemd\x2dfsck.slice.
[    7.675453] systemd[1]: Set up automount Arbitrary Executable File Formats File System Automount Point.
[    7.693256] systemd[1]: Listening on Journal Socket.
[    7.731411] systemd[1]: Started Read required files in advance.
[    7.752008] systemd[1]: Mounting Huge Pages File System...
[    7.772707] systemd[1]: Mounting Debug File System...
[    7.794035] systemd[1]: Starting Set console keymap...
[    7.883506] systemd[1]: Starting Uncomplicated firewall...
[    7.904377] systemd[1]: Mounting POSIX Message Queue File System...
[    7.925872] systemd[1]: Listening on Syslog Socket.
[    7.955515] systemd[1]: Starting Journal Service...
[    7.976576] systemd[1]: Starting Create list of required static device nodes for the current kernel...
[    8.007925] systemd[1]: Starting Load Kernel Modules...
[    8.028458] systemd[1]: Reached target Remote File Systems (Pre).
[    8.047581] systemd[1]: Reached target Remote File Systems.
[    8.067382] systemd[1]: Listening on /dev/initctl Compatibility Named Pipe.
[    8.088290] systemd[1]: Starting Monitoring of LVM2 mirrors, snapshots etc. using dmeventd or progress polling...
[    8.112815] systemd[1]: Mounted Debug File System.
[    8.132112] systemd[1]: Mounted POSIX Message Queue File System.
[    8.151305] systemd[1]: Mounted Huge Pages File System.
[    8.171414] systemd[1]: Started Uncomplicated firewall.
[    8.191444] systemd[1]: Started Create list of required static device nodes for the current kernel.
[    8.211710] systemd[1]: Started Load Kernel Modules.
[    8.391538] systemd[1]: Started LVM2 metadata daemon.
[    8.413734] systemd[1]: Mounting FUSE Control File System...
[    8.435917] systemd[1]: Starting Apply Kernel Variables...
[    8.457592] systemd[1]: Starting Create Static Device Nodes in /dev...
[    8.482441] systemd[1]: Mounted FUSE Control File System.
[    8.502271] systemd[1]: Started Journal Service.
[    8.998868] EXT4-fs (sda1): re-mounted. Opts: errors=remount-ro
[    9.096215] systemd-journald[805]: Received request to flush runtime journal from PID 1
[    9.727777] shpchp: Standard Hot Plug PCI Controller Driver version: 0.4
[    9.731200] ACPI Warning: SystemIO range 0x0000000000000428-0x000000000000042F conflicts with OpRegion 0x0000000000000400-0x000000000000047F (\PMIO) (20150930/utaddress-254)
[    9.731213] ACPI Warning: SystemIO range 0x0000000000000428-0x000000000000042F conflicts with OpRegion 0x0000000000000400-0x000000000000042F (\SWC1) (20150930/utaddress-254)
[    9.731217] ACPI: If an ACPI driver is available for this device, you should use it instead of the native driver
[    9.731231] ACPI Warning: SystemIO range 0x0000000000000530-0x000000000000053F conflicts with OpRegion 0x0000000000000500-0x000000000000053B (\GPIO) (20150930/utaddress-254)
[    9.731234] ACPI: If an ACPI driver is available for this device, you should use it instead of the native driver
[    9.731244] ACPI Warning: SystemIO range 0x0000000000000500-0x000000000000052F conflicts with OpRegion 0x0000000000000500-0x000000000000053B (\GPIO) (20150930/utaddress-254)
[    9.731246] ACPI: If an ACPI driver is available for this device, you should use it instead of the native driver
[    9.731248] lpc_ich: Resource conflict(s) found affecting gpio_ich
[    9.848974] parport_pc 00:04: reported by Plug and Play ACPI
[    9.849145] parport0: PC-style at 0x378, irq 7 [PCSPP,TRISTATE]
[   10.674357] ppdev: user-space parallel port driver
[   10.959817] Adding 1047548k swap on /dev/sda3.  Priority:-1 extents:1 across:1047548k FS
[   11.277554] EXT4-fs (sda2): mounted filesystem with ordered data mode. Opts: (null)
[   12.305751] audit: type=1400 audit(1470495972.267:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/named" pid=1842 comm="apparmor_parser"
[   12.307912] audit: type=1400 audit(1470495972.271:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/tcpdump" pid=1844 comm="apparmor_parser"
[   12.315211] audit: type=1400 audit(1470495972.279:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/sbin/dhclient" pid=1841 comm="apparmor_parser"
[   12.315236] audit: type=1400 audit(1470495972.279:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=1841 comm="apparmor_parser"
[   12.315253] audit: type=1400 audit(1470495972.279:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/NetworkManager/nm-dhcp-helper" pid=1841 comm="apparmor_parser"
[   12.315269] audit: type=1400 audit(1470495972.279:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/connman/scripts/dhclient-script" pid=1841 comm="apparmor_parser"
[   12.579632] IPv6: ADDRCONF(NETDEV_UP): eth0: link is not ready
[   14.223651] e1000e: eth0 NIC Link is Up 100 Mbps Full Duplex, Flow Control: None
[   14.223777] e1000e 0000:01:00.0 eth0: 10/100 speed: disabling TSO
[   14.224001] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[12661.179508] perf interrupt took too long (2506 > 2500), lowering kernel.perf_event_max_sample_rate to 50000
[38220.676593] perf interrupt took too long (5020 > 5000), lowering kernel.perf_event_max_sample_rate to 25000
#0>>

Localhost a écrit :

il faut charger le module tun

Côté serveur j'ai réussi facilement avec

modprobe tun

Côté client (où j'avais un bridge qui trainait mais que j'ai supprimé) je n'arrive pas à avoir l'interface "tun0"

$0>> ifconfig tun
tun: error fetching interface information: Device not found
$1>> modprobe tun
$0>> ifconfig tun
tun: error fetching interface information: Device not found
$1>>

j'ai trouvé un manière de charger le module tun via

insmod /*/tun.ko*

mais je n'ai aucun fichier de ce genre

$0>> sudo locate tun | grep --color tun[^a-zA-Z]
/usr/include/linux/if_tun.h
/usr/share/doc/openssh-client/README.tun.gz
/usr/share/doc/socat/socat-tun.html
/usr/share/nmap/nselib/stun.lua
/usr/share/nmap/scripts/stun-info.nse
/usr/share/nmap/scripts/stun-version.nse
/usr/src/linux-headers-4.4.0-21/include/linux/if_tun.h
/usr/src/linux-headers-4.4.0-21/include/uapi/linux/if_tun.h
/usr/src/linux-headers-4.4.0-21-generic/include/config/tun.h
/usr/src/linux-headers-4.4.0-28/include/linux/if_tun.h
/usr/src/linux-headers-4.4.0-28/include/uapi/linux/if_tun.h
/usr/src/linux-headers-4.4.0-28-generic/include/config/tun.h
/usr/src/linux-headers-4.4.0-31/include/linux/if_tun.h
/usr/src/linux-headers-4.4.0-31/include/uapi/linux/if_tun.h
/usr/src/linux-headers-4.4.0-31-generic/include/config/tun.h
$0>>

Compte anonymisé · Le 07/08/2016, à 08:43

désolé pour le quiproquo, j'était resté à ton post3 concernant openvpn sur le serveur, mon doute est alors levé, il s'agit bien d'un système hôte

EDIT: effectivement je devais avoir le noyau OVH

tu avais rajouté cette information capitale en éditant, il fallait le préciser dans le nouveau post, mais ce n'est pas grave car c'est plus clair maintenant, un ifconfig sur le serveur est donc ok ?

côté client, il faut comprendre que c'est le kernel aussi qui doit délivrer ce module (et normalement il l'est nativement...)

uname -a (du client)

tu peux faire une recherche et installer celui qui conviendra:

apt-get install apt-file
apt-file update
apt-file search tun.ko
edit: et éventuellement refaire un # depmod -a après réinstallation du kernel qui conviendra.

Dernière modification par Compte anonymisé (Le 07/08/2016, à 08:48)

karken · Le 07/08/2016, à 17:27

finalement après mes différents tentatives infructueuses sur le client pour activé le module tun,
lorque que je l'ai reboot, l'interface "tun0" est apparue comme par magie.
Mais je n'ai pas réussi à trouver qui le lancait au boot

$0>> sudo grep "tun[^a-zA-Z]" --color /etc/ -R 
/etc/xdg/kdebug.areas:90010   noatun-plugins (dub)
/etc/xdg/kdebug.areas:90020   noatun-plugins (lyrics)
/etc/resolvconf/interface-order:tun*
/etc/init.d/openvpn:    # tun using the "subnet" topology confuses the routing code that wrongly
/etc/init.d/openvpn:    if grep -q '^[[:space:]]*dev[[:space:]]*tun' $CONFIG_DIR/$NAME.conf && \
/etc/init.d/openvpn:            # to make sure the tun device is created with send_redirects disabled
/etc/rc0.d/K01openvpn:    # tun using the "subnet" topology confuses the routing code that wrongly
/etc/rc0.d/K01openvpn:    if grep -q '^[[:space:]]*dev[[:space:]]*tun' $CONFIG_DIR/$NAME.conf && \
/etc/rc0.d/K01openvpn:            # to make sure the tun device is created with send_redirects disabled
/etc/rc6.d/K01openvpn:    # tun using the "subnet" topology confuses the routing code that wrongly
/etc/rc6.d/K01openvpn:    if grep -q '^[[:space:]]*dev[[:space:]]*tun' $CONFIG_DIR/$NAME.conf && \
/etc/rc6.d/K01openvpn:            # to make sure the tun device is created with send_redirects disabled
Binary file /etc/alternatives/rcp matches
grep: /etc/alternatives/ghostscript-current/Resource/CIDFSubst/DroidSansFallback.ttf: No such file or directory
Binary file /etc/alternatives/rsh matches
Binary file /etc/alternatives/rlogin matches
/etc/kismet/kismet.conf:# Do we export packets over tun/tap virtual interfaces?
/etc/dictionaries-common/words:Gatun's
/etc/dictionaries-common/words:tun's
/etc/rc2.d/S04openvpn:    # tun using the "subnet" topology confuses the routing code that wrongly
/etc/rc2.d/S04openvpn:    if grep -q '^[[:space:]]*dev[[:space:]]*tun' $CONFIG_DIR/$NAME.conf && \
/etc/rc2.d/S04openvpn:            # to make sure the tun device is created with send_redirects disabled
/etc/rc4.d/S04openvpn:    # tun using the "subnet" topology confuses the routing code that wrongly
/etc/rc4.d/S04openvpn:    if grep -q '^[[:space:]]*dev[[:space:]]*tun' $CONFIG_DIR/$NAME.conf && \
/etc/rc4.d/S04openvpn:            # to make sure the tun device is created with send_redirects disabled
/etc/rc5.d/S04openvpn:    # tun using the "subnet" topology confuses the routing code that wrongly
/etc/rc5.d/S04openvpn:    if grep -q '^[[:space:]]*dev[[:space:]]*tun' $CONFIG_DIR/$NAME.conf && \
/etc/rc5.d/S04openvpn:            # to make sure the tun device is created with send_redirects disabled
/etc/rc1.d/K01openvpn:    # tun using the "subnet" topology confuses the routing code that wrongly
/etc/rc1.d/K01openvpn:    if grep -q '^[[:space:]]*dev[[:space:]]*tun' $CONFIG_DIR/$NAME.conf && \
/etc/rc1.d/K01openvpn:            # to make sure the tun device is created with send_redirects disabled
/etc/rc3.d/S04openvpn:    # tun using the "subnet" topology confuses the routing code that wrongly
/etc/rc3.d/S04openvpn:    if grep -q '^[[:space:]]*dev[[:space:]]*tun' $CONFIG_DIR/$NAME.conf && \
/etc/rc3.d/S04openvpn:            # to make sure the tun device is created with send_redirects disabled
$2>>

Donc là j'arrive à pinger mon serveur via le VPN

$0>> ping 10.8.0.1
PING 10.8.0.1 (10.8.0.1) 56(84) bytes of data.
64 bytes from 10.8.0.1: icmp_seq=1 ttl=64 time=38.9 ms
^C
--- 10.8.0.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 38.987/38.987/38.987/0.000 ms
$0>>

Je bloque à savoir quelles règles appliquer sur le client et le serveur pour rediriger tout le traffic sortant du client via le serveur

--- côté serveur

#0>> cat /etc/openvpn/server.conf | grep ^[^#]
;local a.b.c.d
port 1194
;proto tcp
proto udp
;dev tap
dev tun
;dev-node MyTap
ca ca.crt
cert MyVPN.crt
key MyVPN.key  # This file should be kept secret
dh dh2048.pem
;topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
;server-bridge
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
;learn-address ./script
;push "redirect-gateway def1 bypass-dhcp"
;push "dhcp-option DNS 208.67.222.222"
;push "dhcp-option DNS 208.67.220.220"
;client-to-client
;duplicate-cn
keepalive 10 120
;tls-auth ta.key 0 # This file is secret
;cipher BF-CBC        # Blowfish (default)
;cipher AES-128-CBC   # AES
;cipher DES-EDE3-CBC  # Triple-DES
comp-lzo
;max-clients 100
;user nobody
;group nogroup
persist-key
persist-tun
status openvpn-status.log
;log         openvpn.log
;log-append  openvpn.log
verb 3
;mute 20
#0>>

#0>> ifconfig 
eth0      Link encap:Ethernet  HWaddr 00:22:4d:XX:XX:XX  
          inet addr:x.x.x.x  Bcast:x.x.x.255  Mask:255.255.255.0
          inet6 addr: xxxxxxxxxx/64 Scope:Link
          inet6 addr: xxxxxxxxxx/128 Scope:Global
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1334106 errors:0 dropped:0 overruns:0 frame:0
          TX packets:52274 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:124333226 (124.3 MB)  TX bytes:5634994 (5.6 MB)
          Interrupt:16 Memory:80400000-80420000 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:221 errors:0 dropped:0 overruns:0 frame:0
          TX packets:221 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1 
          RX bytes:21604 (21.6 KB)  TX bytes:21604 (21.6 KB)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          inet addr:10.8.0.1  P-t-P:10.8.0.2  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:38 errors:0 dropped:0 overruns:0 frame:0
          TX packets:28 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:2808 (2.8 KB)  TX bytes:2376 (2.3 KB)

#0>>

--- côté client

$0>> cat /etc/openvpn/client.conf | grep ^[^#]
client
;dev tap
dev tun
;dev-node MyTap
;proto tcp
proto udp
remote IP_du_serveur 1194
;remote my-server-2 1194
;remote-random
resolv-retry infinite
nobind
;user nobody
;group nogroup
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
;mute-replay-warnings
ca ca.crt
cert msi-kubuntu.crt
key msi-kubuntu.key
remote-cert-tls server
;tls-auth ta.key 1
;cipher x
comp-lzo
verb 3
;mute 20
push "redirect-gateway def1 bypass-dhcp"
$0>>

$0>> ifconfig
enp4s0    Link encap:Ethernet  HWaddr d8:cb:8a:xx:xx:xx
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:19 

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:65548 errors:0 dropped:0 overruns:0 frame:0
          TX packets:65548 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1 
          RX bytes:6968324 (6.9 MB)  TX bytes:6968324 (6.9 MB)

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          inet addr:10.8.0.10  P-t-P:10.8.0.9  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:13 errors:0 dropped:0 overruns:0 frame:0
          TX packets:13 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:1092 (1.0 KB)  TX bytes:1092 (1.0 KB)

wlp5s0    Link encap:Ethernet  HWaddr ac:d1:b8:xx:xx:xx
          inet addr:192.168.0.10  Bcast:192.168.0.255  Mask:255.255.255.0
          inet6 addr: xxxxxxxxxxx/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:324732 errors:0 dropped:0 overruns:0 frame:0
          TX packets:196711 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:431817188 (431.8 MB)  TX bytes:21926765 (21.9 MB)

$0>>

https://guide.ubuntu-fr.org/server/openvpn.html#openvpn-advanced-config a écrit :

Si activée, cette directive permettra de configurer tous les clients pour que leur passerelle par défaut emprunte le VPN, entraînant tout le trafic IP comme la navigation web ou la résolution DNS à passer par le VPN (le serveur OpenVPN ou votre pare-feu central peut avoir besoin d'ajouter une règle NAT pour l'interface TUN/TAP afin que cela fonctionne correctement).
push "redirect-gateway def1 bypass-dhcp"

C'est exactement ce que je veux faire, j'ai rajouté cette ligne dans la conf de mon client sans succès.

Compte anonymisé · Le 08/08/2016, à 10:35

Cette ligne doit être appliquée côté serveur qui indiquera ainsi le bon routage à effectuer chez le client.
Si tu veux le faire absolument depuis le client, il faut alors utiliser route pour changer la passerelle par défaut, non plus celle de la connection internet standard mais celle du vpn indiquée en
P-t-P dans ifconfig.

karken · Le 12/08/2016, à 02:43

Après différents essais j'ai obtenu quelque chose d'intéressant :

$0>> traceroute 8.8.8.8
traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 60 byte packets
 1  10.8.0.1 (10.8.0.1)  41.249 ms  42.380 ms  44.580 ms
 2  * * *
 3  * * *
 4  * * *
 5  * * *
 6  * * *
 7  *^C
$130>>

J'arrive bien jusqu'a mon serveur, mais mes paquets n'allaient pas plus loin avec des règles de routage qui ont du sens :

#0>> route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         5.39.95.254     0.0.0.0         UG    0      0        0 eth0
5.39.95.0       0.0.0.0         255.255.255.0   U     0      0        0 eth0
10.8.0.0        10.8.0.2        255.255.255.0   UG    0      0        0 tun0
10.8.0.2        0.0.0.0         255.255.255.255 UH    0      0        0 tun0
#0>>

Donc le problème venait du pare-feu où j'ai du configurer ses règles grâce à ce tuto bien fait :
https://www.linode.com/docs/networking/ … vpn-server

J'ai réussi à pinger et à naviguer via mon serveur donc j'en déduis que l'intallation est fini.

Merci à toi Localhost d'avoir pris du temps pour répondre à mes questions

--
karken

Ubuntu-fr

Navigation

Liens de recherche

Annonce

#1 Le 05/08/2016, à 23:20

[Résolu][VPN] installation d'OpenVPN sur un serveur

#2 Le 06/08/2016, à 09:49

Re : [Résolu][VPN] installation d'OpenVPN sur un serveur

#3 Le 06/08/2016, à 15:02

Re : [Résolu][VPN] installation d'OpenVPN sur un serveur

#4 Le 06/08/2016, à 17:01

Re : [Résolu][VPN] installation d'OpenVPN sur un serveur

#5 Le 06/08/2016, à 18:21

Re : [Résolu][VPN] installation d'OpenVPN sur un serveur

#6 Le 06/08/2016, à 20:00

Re : [Résolu][VPN] installation d'OpenVPN sur un serveur

#7 Le 07/08/2016, à 05:49

Re : [Résolu][VPN] installation d'OpenVPN sur un serveur

#8 Le 07/08/2016, à 08:43

Re : [Résolu][VPN] installation d'OpenVPN sur un serveur

#9 Le 07/08/2016, à 17:27

Re : [Résolu][VPN] installation d'OpenVPN sur un serveur

#10 Le 08/08/2016, à 10:35

Re : [Résolu][VPN] installation d'OpenVPN sur un serveur

#11 Le 12/08/2016, à 02:43

Re : [Résolu][VPN] installation d'OpenVPN sur un serveur

Pied de page des forums