Re: blacklistd and bpfjit

[Gerard Lally <gerard.lally%gmail.com@localhost>]

On Mon, 27 Mar 2017, at 17:22, atomicules wrote:
> >npfctl: error loading the bpfjit module; performance will be degraded:
> >Operation not permitted
> >npfctl: To disable this warning `set bpf.jit off' in /etc/npf.conf
> 
> I think that's a XEN issue. I've been playing about with npf and 
> building kernels and I cannot get bpfjit to work on XEN even though 
> I've supposedly enabled it during the kernel build.
> 
> And not to derail you too much, but I can't really get npf to work 
> properly on XEN at all. Been meaning to email you about that. Sure it 
> "works", but it doesn't seem to respect the rules like my desktop npf 
> does (it basically blocks EVERYTHING). I'm 99% sure it's a XEN problem 
> and not me.

(For some reason this reply was buried - already read - in Gmail's All
Mail folder. Not sure now if I've received other replies to my post.)

I don't have Xen installed on the new server yet, although that's my
next step. I did have problems with npf and Xen some time ago; as far as
I remember that had to do with the dom0 kernel not loading modules. You
seem to have covered that by compiling a new kernel. Sorry; can't help
you much more on that just now.