evilsocket / evilsocket/opensnitch

[Bug Report] eBPF module fails to load on debian trixie

Open
#1,481 0 comments 1 reaction 0 assignees View on GitHub
bug
Dominant language
Python
Stars
14.1k
Forks
665
PR merge metrics
No merged PRs in 30d

Description

### Describe the bug:
eBPF module fails to load on debian 13 trixie.
unable to load eBPF module (opensnitch-dns.o). Your kernel version (6.12.57+deb13-amd64) might not be compatible.
unable to load eBPF module (opensnitch.o). Your kernel version (6.12.57+deb13-amd64) might not be compatible.
unable to load eBPF module (opensnitch-procs.o). Your kernel version (6.12.57+deb13-amd64) might not be compatible.

Include the following information:
- OpenSnitch version: 1.6.9-3
- OS:Debian
- OS version: 13 trixie
- Window Manager: KDE
- Kernel version: Linux pc1 6.12.57+deb13-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.57-1 (2025-11-05) x86_64 GNU/Linux

### To Reproduce:
Start opensnitch

### Post error logs:

unable to load eBPF module (opensnitch-dns.o). Your kernel version (6.12.57+deb13-amd64) might not be compatible.
unable to load eBPF module (opensnitch.o). Your kernel version (6.12.57+deb13-amd64) might not be compatible.
unable to load eBPF module (opensnitch-procs.o). Your kernel version (6.12.57+deb13-amd64) might not be compatible.

$ dpkg -l|grep opensnitch
ii opensnitch 1.6.9-3 amd64 GNU/Linux interactive application firewall
ii opensnitch-ebpf-modules 1.6.9-3 amd64 GNU/Linux interactive application firewall eBPF modules
ii python3-opensnitch-ui 1.6.9-3 all GNU/Linux interactive application firewall GUI

$ opensnitchd -check-requirements

Checking system requirements for kernel version 6.12.57+deb13-amd64
------------------------------------------------------------------------------

Checking => CONFIG_KPROBES=y
Checking => CONFIG_KPROBES_ON_FTRACE=y
Checking => CONFIG_HAVE_KPROBES=y
Checking => CONFIG_HAVE_KPROBES_ON_FTRACE=y
Checking => CONFIG_KPROBE_EVENTS=y

* kprobes ✔

Checking => CONFIG_UPROBES=y
Checking => CONFIG_UPROBE_EVENTS=y

* uprobes ✔

Checking => CONFIG_FTRACE=y

* ftrace ✔

Checking => CONFIG_HAVE_SYSCALL_TRACEPOINTS=y
Checking => CONFIG_FTRACE_SYSCALLS=y

* syscalls ✔

Checking => CONFIG_NETFILTER_NETLINK_QUEUE=[my]
Checking => CONFIG_NFT_QUEUE=[my]
Checking => CONFIG_NETFILTER_XT_TARGET_NFQUEUE=[my]

* nfqueue ✔

Checking => CONFIG_NETFILTER_NETLINK=[my]
Checking => CONFIG_NETFILTER_NETLINK_QUEUE=[my]
Checking => CONFIG_NETFILTER_NETLINK_ACCT=[my]

* netlink ✔

Checking => CONFIG_INET_DIAG=[my]
Checking => CONFIG_INET_TCP_DIAG=[my]
Checking => CONFIG_INET_UDP_DIAG=[my]
Checking => CONFIG_INET_DIAG_DESTROY=[my]

* net diagnostics ✔

$ sudo bpftool prog load /usr/lib/opensnitchd/ebpf/opensnitch-dns.o /sys/fs/bpf/opensnitch_dns
libbpf: elf: skipping unrecognized data section(9) maps/addrinfo_args_hash
libbpf: elf: skipping unrecognized data section(10) maps/events
libbpf: elf: skipping unrecognized data section(27) .eh_frame
libbpf: elf: skipping relo section(28) .rel.eh_frame for section(27) .eh_frame
libbpf: prog 'uretprobe__gethostbyname': bad map relo against 'events' in section 'maps/events'
Error: failed to open object file

$ sudo bpftool prog load /usr/lib/opensnitchd/ebpf/opensnitch-procs.o /sys/fs/bpf/opensnitch_dns
libbpf: elf: skipping unrecognized data section(13) maps/heapstore
libbpf: elf: skipping unrecognized data section(14) maps/proc-events
libbpf: elf: skipping unrecognized data section(15) maps/execMap
libbpf: elf: skipping unrecognized data section(32) .eh_frame
libbpf: elf: skipping relo section(33) .rel.eh_frame for section(32) .eh_frame
libbpf: prog 'tracepoint__sched_sched_process_exit': bad map relo against 'execMap' in section 'maps/execMap'

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.