需要在内核里开启 ip tables 相关选项

谢谢~
参照说明，能编译生成 resource.img 和 kernel.img。
看到官方的烧录说明，是用内置eMMC存储才能烧录这两个分区？

有办法编译成.deb文件么？ 试过执行 `./build.sh kerneldeb` ，但输出如下：

```bash
firefly@firefly:~/proj$ ./build.sh kerneldeb
processing option: kerneldeb
============Start building kernel deb============
TARGET_ARCH          =arm64
TARGET_KERNEL_CONFIG =firefly_roc-rk3399-pc_defconfig
TARGET_KERNEL_DTS    =rk3399-roc-pc
TARGET_KERNEL_CONFIG_FRAGMENT =
==========================================
/home/firefly/proj
#
# configuration written to .config
#
scripts/kconfig/conf  --silentoldconfig Kconfig
  CHK     include/config/kernel.release
make KBUILD_SRC=
  CHK     include/config/kernel.release
  CHK     include/generated/uapi/linux/version.h
  CHK     include/generated/utsrelease.h
  CHK     scripts/mod/devicetable-offsets.h
  CHK     include/generated/timeconst.h
  CHK     include/generated/bounds.h
  CHK     include/generated/asm-offsets.h
  CALL    scripts/checksyscalls.sh
make[3]: 'include/generated/vdso-offsets.h' is up to date.
  CHK     include/generated/compile.h
  DTC     arch/arm64/boot/dts/rockchip/rk3399-roc-pc-exp.dtb
Error: arch/arm64/boot/dts/rockchip/rk3399-roc-pc-exp.dts:53.1-12 Label or path usb_charge not found
FATAL ERROR: Syntax error parsing input tree
scripts/Makefile.lib:320: recipe for target 'arch/arm64/boot/dts/rockchip/rk3399-roc-pc-exp.dtb' failed
make[4]: *** [arch/arm64/boot/dts/rockchip/rk3399-roc-pc-exp.dtb] Error 1
scripts/Makefile.build:484: recipe for target 'arch/arm64/boot/dts/rockchip' failed
make[3]: *** [arch/arm64/boot/dts/rockchip] Error 2
arch/arm64/Makefile:127: recipe for target 'dtbs' failed
make[2]: *** [dtbs] Error 2
make[2]: *** Waiting for unfinished jobs....
scripts/package/Makefile:96: recipe for target 'bindeb-pkg' failed
make[1]: *** [bindeb-pkg] Error 2
Makefile:1324: recipe for target 'bindeb-pkg' failed
make: *** [bindeb-pkg] Error 2
ERROR: Running build_kerneldeb failed!
ERROR: exit code 2 from line 758:
    make ARCH=$RK_ARCH bindeb-pkg RK_KERNEL_DTS=$RK_KERNEL_DTS -j$RK_JOBS
```

这边用的SD卡启动方式，没用到eMMC存储。

编译完整固件然后烧录到sd卡