diff options
Diffstat (limited to 'meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/files')
| -rw-r--r-- | meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/files/netfilter-legacy-podman.cfg | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/files/netfilter-legacy-podman.cfg b/meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/files/netfilter-legacy-podman.cfg new file mode 100644 index 0000000..7e06214 --- /dev/null +++ b/meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/files/netfilter-legacy-podman.cfg @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: MIT +# +# Kernel 6.18+ split legacy iptables setsockopt support out of +# CONFIG_IP_NF_IPTABLES into CONFIG_IP_NF_IPTABLES_LEGACY, gated by +# CONFIG_NETFILTER_XTABLES_LEGACY. Podman/netavark's iptables backend +# needs this chain enabled or `iptables -t nat` fails with +# "Table does not exist" even when CONFIG_NF_NAT is set. +# +# Supplements features/netfilter/netfilter.cfg from yocto-kernel-cache, +# which predates this split. + +CONFIG_NETFILTER_XTABLES_LEGACY=y +CONFIG_IP_NF_IPTABLES_LEGACY=m +CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m +CONFIG_BRIDGE_NETFILTER=m |