IRC chat logs for #ltsp on irc.libera.chat (webchat)
Channel log from 22 February 2024 (all times are UTC)
| 00:13 | wyre is back | |
| 00:40 | vagrantc has left IRC (vagrantc!~vagrant@2600:3c01:e000:21:7:77:0:50, Quit: leaving) | |
| 01:35 | wyre is now away: Auto away at Thu Feb 22 01:34:51 2024 UTC | |
| 02:32 | vagrantc has joined IRC (vagrantc!~vagrant@2600:3c01:e000:21:7:77:0:20) | |
| 03:52 | sugarbee1 is back | |
| 03:55 | sugarbee1 is now away: [tmux detached] | |
| 04:26 | sugarbee1 is back | |
| 04:27 | sugarbee1 is now known as sugarbeet | |
| 04:28 | vagrantc has left IRC (vagrantc!~vagrant@2600:3c01:e000:21:7:77:0:20, Quit: leaving) | |
| 04:28 | sugarbeet is now away: [tmux detached] | |
| 05:46 | wyre is back | |
| 06:14 | wyre is now away: Auto away at Thu Feb 22 06:13:18 2024 UTC | |
| 06:29 | ricotz has joined IRC (ricotz!~ricotz@ubuntu/member/ricotz) | |
| 08:24 | alkisg has left IRC (alkisg!~Thunderbi@2a02:587:7458:8e00:56e0:4cff:fe68:d, Quit: alkisg) | |
| 08:24 | alkisg has joined IRC (alkisg!~Thunderbi@2a02:587:7458:8e00:56e0:4cff:fe68:d) | |
| 08:33 | highvoltage is back | |
| 09:39 | kilomite has joined IRC (kilomite!~kilomite@117.223.185.194) | |
| 09:42 | <kilomite> Hello, ive been trying to setup an LTSP server with 2 NICs. one connected to a switch with a single client and one to the router that connects to the internet. i followed the guide and added 192.168.67.1 ip for the NIC connected to the switch and clients boots fine. but the client does not have internet. I have enabled NAT=1 in ltsp.conf file and
| |
| 09:42 | regenerated the initrd, but that isn't working. The client shows the its default gateway as 192.168.67.1 and it can ping the server but not to the internet. Any idea why?
| |
| 09:44 | the server OS is a fresh installation of debian MATE
| |
| 10:05 | <quinox> does `sysctl net.ipv4.ip_forward` say 1?
| |
| 10:06 | there's also the matter of iptables, it has a FORWARD chain that should accept the traffic
| |
| 10:06 | (both on the server)
| |
| 10:08 | <kilomite> ....ip_forward is 1.
| |
| 10:08 | how do i check the firewall config?
| |
| 10:13 | <quinox> iptables -n -L FORWARD
| |
| 10:13 | <kilomite> iptables -L as root returns no command found
| |
| 10:14 | there is no iptables in this installation for some reason.. is that normal?
| |
| 10:14 | <quinox> are you running it as root?
| |
| 10:14 | <kilomite> yep
| |
| 10:15 | tried both sudo and as root
| |
| 10:15 | its not in /sbin
| |
| 10:15 | <quinox> I have no idea if it's normal that it doesn't exist, you can apt install it
| |
| 10:18 | in https://github.com/ltsp/ltsp/issues/41 there was someone without iptables as well, installing it helped to make NAT work
| |
| 10:19 | I see that LTSP uses iptables inside the function that enables NAT
| |
| 10:19 | https://github.com/ltsp/ltsp/blob/main/ltsp/common/service/55-service.sh#L79
| |
| 10:20 | <kilomite> turns out, debian dropped support for iptables and uses nft instead..
| |
| 10:20 | this might be trivial as installing iptables and making it use nftables backend
| |
| 10:20 | let me try that
| |
| 10:21 | <quinox> note that LTSP doesn't run the iptables command if ip forwarding is already enabled, so you should try running that command by hand to insert the rule for FORWARD
| |
| 10:21 | on next reboot it should do it by itself
| |
| 10:21 | <kilomite> i will try rebooting..
| |
| 10:22 | <quinox> you're installing / installed iptables-nft I suppose?
| |
| 10:22 | sounds like a good fix
| |
| 10:23 | <alkisg> kilomite: if iptables is missing from a new debian installation, do file an issue in the ltsp bug tracker. Then we'd either list it as a recommended package, or use nft if it exists
| |
| 10:32 | I ran `iptables -s 192.168.67.0/24 -t nat -A POSTROUTING -j MASQUERADE` and then `nft list ruleset | tr '\n' ';'`
| |
| 10:32 | This is the result, which is guess is the nft equivalent of what LTSP does with iptables:
| |
| 10:32 | table ip nat {; chain POSTROUTING {; type nat hook postrouting priority srcnat; policy accept;; ip saddr 192.168.67.0/24 counter packets 2 bytes 1540 masquerade ; };};
| |
| 10:32 | <kilomite> installing iptables and rebooting solved it.. thanks quinox
| |
| 10:32 | <quinox> excellent
| |
| 10:32 | <kilomite> will file an issue on github
| |
| 10:32 | <alkisg> Thanks
| |
| 10:56 | kilomite has left IRC (kilomite!~kilomite@117.223.185.194, Quit: Client closed) | |
| 14:16 | wyre is back | |
| 16:09 | wyre is now away: Auto away at Thu Feb 22 16:08:34 2024 UTC | |
| 17:35 | vagrantc has joined IRC (vagrantc!~vagrant@2600:3c01:e000:21:7:77:0:20) | |
| 19:28 | wyre is back | |
| 21:27 | eu^174-17-165-12 has joined IRC (eu^174-17-165-12!~eu^174-17@174-17-165-128.phnx.qwest.net) | |
| 23:02 | ricotz has left IRC (ricotz!~ricotz@ubuntu/member/ricotz, Quit: Leaving) | |
| 23:35 | eu^174-17-165-12 has left IRC (eu^174-17-165-12!~eu^174-17@174-17-165-128.phnx.qwest.net, Quit: Client closed) | |
| 23:37 | eu^174-17-165-12 has joined IRC (eu^174-17-165-12!~eu^174-17@174-17-165-128.phnx.qwest.net) | |
| 23:41 | wyre is now away: Auto away at Thu Feb 22 23:40:28 2024 UTC | |