Hi, Thank to all of you.

I made a test environment with the following.

• Machine A: 192.168.Y.1
• Machine B: 192.168.Y.2
• Machine C: 192.168.Y.3

The goal is to send a ping A to B, B forward to C

So ping -4c 1 192.168.y.2 from A, should ping B fw C

I’ve set the following rule in /etc/nftables.conf

table ip Tip {
        chain prerouting {
                type nat hook prerouting priority dstnat; policy accept;
                iif "eth0" ip protocol icmp dnat to 192.168.y.3
        }
        chain postrouting {
                type nat hook postrouting priority 100; policy accept;
                ip saddr 192.168.y.3 masquerade
        }
}

but is not working :'(

I see B receive the package

preroute: IN=eth0 OUT= MAC=▒▒ SRC=192.168.y.1 DST=192.168.y.2 LEN=84 TOS=0x00 PREC=0x00 TTL=64 ID=21398 DF PROTO=ICMP TYPE=8 CODE=0 ID=17950 SEQ=1

but it seem C receive nothing…

Any ideas ?

As I want the system to be quite ( not sending data ) I was suspected the output hook to be the one. what are you suggesting ?

Thanks @[email protected]

I suppose the file linux/arch/Kconfig is the base the menuconfig to know which option is available ? right ?

Thanks.

Thanks, how can we verify this ?

I believe my initramfs do not support luks encryption, but the link of @[email protected] might work… 🤞

Thanks @[email protected] ! indeed https://github.com/gitbls/sdm/blob/master/Docs/Disk-Encryption.md#the-sdm-cryptconfig-script seem what I need. I’ll try

ohh ! great ! I’ll see if I manage to install it on Devuan Thanks.

🤩 Woo I didn’t know nix. It seem a better way to handle package !!!
But so if I have already apt that handle packages, is it compatible to use both on the same system !?

Nix stores all packages in isolation from each other; as a result there are no /bin, /sbin, /lib or /usr directories and all packages are kept in /nix/store instead.

Thank you very much @[email protected]

I have tried

apt-get -o Dir::Cache::archives="/to/path" install --download-only apt-offline

But it downloaded only the .deb of apt-offline and not all the dependence tree. Most probably because this machine have them already.

now, remain to force to download also all the dependency tree even if already installed…

indeed .appimage are an amazing thing as they do not require any special runtime or installation process !
I guess I will have to do my own .appimage of software that do not provide them

AppImage !

• Open format? Yes
• Free format? Yes
• Fully Contained Single Executable Support . Like an exe file for Windows systems Yes (the only one)
• App Size** The lowest** !

https://en.wikipedia.org/wiki/AppImage

Matrix
https://www.fosslinux.com/42410/snap-vs-flatpak-vs-appimage-know-the-differences-which-is-better.htm
https://phoenixnap.com/kb/flatpak-vs-snap-vs-appimage \

Thank you very much @taaz

So you say 2 but with unix socket so it the same as my proposal number 3 ? no ?

I’ll check capabilities

indeed I need it to be scriptable.