diff options
Diffstat (limited to 'meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel')
2 files changed, 22 insertions, 0 deletions
diff --git a/meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/files/netfilter-legacy-podman.cfg b/meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/files/netfilter-legacy-podman.cfg new file mode 100644 index 0000000..7e06214 --- /dev/null +++ b/meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/files/netfilter-legacy-podman.cfg @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: MIT +# +# Kernel 6.18+ split legacy iptables setsockopt support out of +# CONFIG_IP_NF_IPTABLES into CONFIG_IP_NF_IPTABLES_LEGACY, gated by +# CONFIG_NETFILTER_XTABLES_LEGACY. Podman/netavark's iptables backend +# needs this chain enabled or `iptables -t nat` fails with +# "Table does not exist" even when CONFIG_NF_NAT is set. +# +# Supplements features/netfilter/netfilter.cfg from yocto-kernel-cache, +# which predates this split. + +CONFIG_NETFILTER_XTABLES_LEGACY=y +CONFIG_IP_NF_IPTABLES_LEGACY=m +CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m +CONFIG_BRIDGE_NETFILTER=m diff --git a/meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/linux-mainline_%.bbappend b/meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/linux-mainline_%.bbappend new file mode 100644 index 0000000..57b2be0 --- /dev/null +++ b/meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/linux-mainline_%.bbappend @@ -0,0 +1,7 @@ +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +SRC_URI:append = " file://netfilter-legacy-podman.cfg" + +KERNEL_FEATURES:append = " features/namespaces/namespaces.cfg" +KERNEL_FEATURES:append = " features/cgroups/cgroups.cfg" +KERNEL_FEATURES:append = " features/netfilter/netfilter.cfg" |