➕ Dockerfile.arm to support arm 32bit #988

jeankhawand · 2023-06-10T15:52:07Z

had to build it on my AllWinner H2 SoC which is running arm 32bit
it is working with no issues
it took some time to build dependencies – would be nice to have it accessible from docker registry cause it will require some effort when new version of cloudflared is out to rebuild....

jeankhawand · 2023-06-10T16:19:04Z

2023-06-10T15:47:41Z INF Starting tunnel tunnelID=REDACTED 
2023-06-10T15:47:41Z INF Version 31d3670d
2023-06-10T15:47:41Z INF GOOS: linux, GOVersion: go1.19.10, GoArch: arm
2023-06-10T15:47:41Z INF Settings: map[no-autoupdate:true token:*****]
2023-06-10T15:47:41Z INF Generated Connector ID: REDACTED 
2023-06-10T15:47:41Z INF Initial protocol quic
2023-06-10T15:47:42Z INF ICMP proxy will use 172.18.0.2 as source for IPv4
2023-06-10T15:47:42Z INF ICMP proxy will use :: as source for IPv6
2023-06-10T15:47:42Z INF Starting metrics server on 127.0.0.1:35601/metrics
2023-06-10T15:47:42Z INF Registered tunnel connection connIndex=0 connection=REDACTED event=0 ip=198.41.192.7 location=CDG protocol=quic

sudarshan-reddy · 2023-08-21T15:58:04Z

Thanks for this work @jeankhawand . I'm going to have to test this against our internal CI (since that's what builds the docker images) and get back to you.

jeankhawand · 2023-08-21T22:25:42Z

closes #987

ahlixinjie · 2023-09-12T07:16:40Z

waiting for this to be merged, so my mikrotik device can use it😢

TylerMitton · 2023-09-26T03:16:01Z

@sudarshan-reddy , do you expect this will be merged? thankful to you and @jeankhawand for your work on this.

maijs · 2023-10-17T06:03:08Z

You can build an arm image on a Mac Silicon and transfer the image to an arm-based Mikrotik router with the following stpeps:

Run docker buildx ls and check if your computer can build linux/arm/v7 platform images.
Checkout the branch of the PR: git clone -b feature/support-armhf https://github.com/jeankhawand/cloudflared.git
Change the directory: cd cloudflared
Build an image: docker buildx build --platform linux/arm/v7 . -t MYNAME/cloudflared (change MYNAME to your username)
Make sure the that image has been built: docker image ls
Save the image on the disk: docker image save -o docker_cloudflared_arm IMAGE_ID
Copy the image file to the Mikrotik device.

maijs · 2023-10-17T06:06:55Z

I tested the PR and can confirm that it works. Looking forward to see it merged.

maijs · 2023-10-17T13:02:42Z

@jeankhawand Could you please make two changes to the PR?

Rebase the feature branch against the current cloudflare:master branch.
Update the golang version in the Dockerfile.arm file to FROM golang:1.20.6 as builder to match the current Dockerfile.* in upstream repo?

…hen updating the configuration

… UDP session This code was leaking streams because it wasn't closing the quic stream after unregistering from the edge.

New gauge metrics are exposed in the prometheus endpoint to capture the current and total TCP and UDP sessions that cloudflared has proxied.

I deliberately kept this as an unregistertimeout because that was the intent. In the future we could change this to a UDPConnConfig if we want to pass multiple values here. The idea of this PR is simply to add a configurable unregister UDP timeout.

… access login

Allows for debugging the payloads that are sent in client mode to the ssh server. Required to be run with --log-directory to capture logging output. Additionally has maximum limit that is provided with the flag that will only capture the first N number of reads plus writes through the WebSocket stream. These reads/writes are not directly captured at the packet boundary so some reconstruction from the log messages will be required. Added User-Agent for all out-going cloudflared access tcp requests in client mode. Added check to not run terminal logging in cloudflared access tcp client mode to not obstruct the stdin and stdout.

Removes the final usage of raven-go and removes the dependency.

…ignal propagation

In the streambased origin proxy flow (example ssh over access), there is a chance when we do not flush on http.ResponseWriter writes. This PR guarantees that the response writer passed to proxy stream has a flusher embedded after writes. This means we write much more often back to the ResponseWriter and are not waiting. Note, this is only something we do when proxyHTTP-ing to a StreamBasedOriginProxy because we do not want to have situations where we are not sending information that is needed by the other side (eyeball).

With the new flag --management-diagnostics (an opt-in flag) cloudflared's will be able to report additional diagnostic information over the management.argotunnel.com request path. Additions include the /metrics prometheus endpoint; which is already bound to a local port via --metrics. /debug/pprof/(goroutine|heap) are also provided to allow for remotely retrieving heap information from a running cloudflared connector.

Will no longer provide full hostname with path from provided `--hostname` flag for cloudflared access to the Host header field. This addresses certain issues caught from a security fix in go 1.19.11 and 1.20.6 in the net/http URL parsing.

Pins all docker and cfsetup builds to a specific go patch version. Also ran go fix on repo.

This is simply because we no longer use the legacy R2 secret that needed this encoding.

…s enabled

… prefer post quantum cryptography

…ute IDs This commits makes sure that cloudflared starts using the new API endpoints for managing routes. Additionally, the delete route operation still allows deleting by CIDR and VNet but it is being marked as deprecated in favor of specifying the route ID. The goal of this change is to make it simpler for the user to delete routes without specifying Vnet.

## Summary Previously the force flag in the tunnel delete command was only explicitly deleting the connections of a tunnel. Therefore, we are changing it to use the cascade query parameter supported by the API. That parameter will delegate to the server the deletion of the tunnel dependencies implicitly instead of the client doing it explicitly. This means that not only the connections will get deleted, but also the tunnel routes, ensuring that no dependencies are left without a non-deleted tunnel.

…installed ## Summary To determine which services were installed, cloudflared, was using the command `systemctl status` this command gives an error if the service is installed but isn't running, which makes the `uninstall services` command report wrongly the services not installed. Therefore, this commit adapts it to use the `systemctl list-units` command combined with a grep to find which services are installed and need to be removed.

This changes guarantees that the coommand to report rule matches when testing local config reports the rule number using the 0-based indexing. This is to be consistent with the 0-based indexing on the log lines when proxying requests.

farnos85 · 2023-11-08T21:00:25Z

You can build an arm image on a Mac Silicon and transfer the image to an arm-based Mikrotik router with the following stpeps:

Run docker buildx ls and check if your computer can build linux/arm/v7 platform images.

Checkout the branch of the PR: git clone -b feature/support-armhf https://github.com/jeankhawand/cloudflared.git

Change the directory: cd cloudflared

Build an image: docker buildx build --platform linux/arm/v7 . -t MYNAME/cloudflared (change MYNAME to your username)

Make sure the that image has been built: docker image ls

Save the image on the disk: docker image save -o docker_cloudflared_arm IMAGE_ID

Copy the image file to the Mikrotik device.

I tried this procedure on my mikrotik router with arm architecture, but I had this error "execve: Exec format error"

maijs · 2023-11-08T22:12:43Z

@farnos85 On which Mikrotik router are you trying to create a container?

farnos85 · 2023-11-08T22:31:54Z

@farnos85 On which Mikrotik router are you trying to create a container?

https://mikrotik.com/product/hap_ac3

cldparisi · 2023-11-13T21:35:40Z

follow it

maijs · 2023-11-14T12:11:37Z

@farnos85 On which Mikrotik router are you trying to create a container?

https://mikrotik.com/product/hap_ac3

@farnos85 The result of the steps I described was tested on a HAP AC2, which also has an arm 32bit processor. Need more testing from other people I suppose.

farnos85 · 2023-11-15T00:32:54Z

@farnos85 On which Mikrotik router are you trying to create a container?

https://mikrotik.com/product/hap_ac3

@farnos85 The result of the steps I described was tested on a HAP AC2, which also has an arm 32bit processor. Need more testing from other people I suppose.

UPDATE:
image built on Raspberry PI 4 with Linux raspberrypi 6.1.21-v8+ --> execve: Exec format error
image built on GCP VM with Ubuntu 20.04.6 LTS (GNU/Linux 5.15.0-1042-gcp x86_64) --> works correctly

joliveirinha · 2023-12-14T16:28:00Z

We are not looking to support this platform at this time.
We may re-evaluate this in the future, and in that case, this would need to be done with proper context of our internal pipelines.

We appreciate your contribution and interest. thanks

➕ Dockerfile to support arm 32bit

31d3670

jeankhawand mentioned this pull request Jun 10, 2023

💡 [Docker Image] support armv7 (armhf) #987

Open

➕ arm to .docker-images

72737a2

sudarshan-reddy self-requested a review August 21, 2023 15:58

sudarshan-reddy self-assigned this Aug 21, 2023

jcsf and others added 17 commits October 22, 2023 15:09

TUN-7463: Add default ingress rule if no ingress rules are provided w…

f4ce7c6

…hen updating the configuration

TUN-7471: Fixes cloudflared not closing the quic stream on unregister…

1128660

… UDP session This code was leaking streams because it wasn't closing the quic stream after unregistering from the edge.

Release 2023.6.0

f124bdd

TUN-7468: Increase the limit of incoming streams

33d56be

TUN-7477: Add UDP/TCP session metrics

136f232

New gauge metrics are exposed in the prometheus endpoint to capture the current and total TCP and UDP sessions that cloudflared has proxied.

Release 2023.6.1

7550e0c

AUTH-5328 Pass cloudflared_token_check param when running cloudflared…

b0ce64a

… access login

TUN-6011: Remove docker networks from ICMP Proxy test

a929dcc

TUN-7549: Add metrics route to management service

6c0dd59

TUN-7551: Complete removal of raven-go to sentry-go

a1419a7

Removes the final usage of raven-go and removes the dependency.

TUN-7550: Add pprof endpoint to management service

1b9f55a

TUN-7545: Add support for full bidirectionally streaming with close s…

286addc

…ignal propagation

TUN-7564: Support cf-trace-id for cloudflared access

5e459fd

DevinCarr and others added 21 commits October 22, 2023 15:09

Release 2023.7.2

431cc05

TUN-7624: Fix flaky TestBackoffGracePeriod test in cloudflared

96966b6

TUN-7628: Correct Host parsing for Access

d8ff56c

Will no longer provide full hostname with path from provided `--hostname` flag for cloudflared access to the Host header field. This addresses certain issues caught from a security fix in go 1.19.11 and 1.20.6 in the net/http URL parsing.

Release 2023.7.3

9931188

TUN-7584: Bump go 1.20.6

3f501a6

Pins all docker and cfsetup builds to a specific go patch version. Also ran go fix on repo.

Release 2023.8.0

3636e99

TUN-7718: Update R2 Token to no longer encode secret

cd3bd18

This is simply because we no longer use the legacy R2 secret that needed this encoding.

Release 2023.8.1

f556d9c

TUN-7707: Use X25519Kyber768Draft00 curve when post-quantum feature i…

279e080

…s enabled

TUN-7700: Implement feature selector to determine if connections will…

76c8ff9

… prefer post quantum cryptography

Release 2023.8.2

f941b71

TUN-7756: Clarify that QUIC is mandatory to support ICMP proxying

dcfc831

TUN-7776: Remove warp-routing flag from cloudflared

68bec88

TUN-7787: cloudflared only list ip routes targeted for cfd_tunnel

535796f

TUN-7864: Document cloudflared versions support

03fb047

bump go to 1.20.6

9126cf8

Merge branch 'master' into feature/support-armhf

d9de248

joliveirinha closed this Dec 14, 2023

maijs mentioned this pull request Jan 26, 2024

💡Armv7 support #1074

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

➕ Dockerfile.arm to support arm 32bit #988

➕ Dockerfile.arm to support arm 32bit #988

jeankhawand commented Jun 10, 2023

jeankhawand commented Jun 10, 2023

sudarshan-reddy commented Aug 21, 2023

jeankhawand commented Aug 21, 2023

ahlixinjie commented Sep 12, 2023

TylerMitton commented Sep 26, 2023

maijs commented Oct 17, 2023 •

edited

Loading

maijs commented Oct 17, 2023

maijs commented Oct 17, 2023

farnos85 commented Nov 8, 2023

maijs commented Nov 8, 2023

farnos85 commented Nov 8, 2023

cldparisi commented Nov 13, 2023

maijs commented Nov 14, 2023

farnos85 commented Nov 15, 2023

joliveirinha commented Dec 14, 2023

➕ Dockerfile.arm to support arm 32bit #988

➕ Dockerfile.arm to support arm 32bit #988

Conversation

jeankhawand commented Jun 10, 2023

jeankhawand commented Jun 10, 2023

sudarshan-reddy commented Aug 21, 2023

jeankhawand commented Aug 21, 2023

ahlixinjie commented Sep 12, 2023

TylerMitton commented Sep 26, 2023

maijs commented Oct 17, 2023 • edited Loading

maijs commented Oct 17, 2023

maijs commented Oct 17, 2023

farnos85 commented Nov 8, 2023

maijs commented Nov 8, 2023

farnos85 commented Nov 8, 2023

cldparisi commented Nov 13, 2023

maijs commented Nov 14, 2023

farnos85 commented Nov 15, 2023

joliveirinha commented Dec 14, 2023

maijs commented Oct 17, 2023 •

edited

Loading