From bd59a594aa6c93226f05a5ac438fbaebf15f44ea Mon Sep 17 00:00:00 2001 From: unitexe Date: Sun, 30 Aug 2026 22:36:34 -0500 Subject: Build core-image-unit for olinuxino-a20-emmc --- .../linux/files/netfilter-legacy-podman.cfg | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/files/netfilter-legacy-podman.cfg (limited to 'meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/files') diff --git a/meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/files/netfilter-legacy-podman.cfg b/meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/files/netfilter-legacy-podman.cfg new file mode 100644 index 0000000..7e06214 --- /dev/null +++ b/meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/files/netfilter-legacy-podman.cfg @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: MIT +# +# Kernel 6.18+ split legacy iptables setsockopt support out of +# CONFIG_IP_NF_IPTABLES into CONFIG_IP_NF_IPTABLES_LEGACY, gated by +# CONFIG_NETFILTER_XTABLES_LEGACY. Podman/netavark's iptables backend +# needs this chain enabled or `iptables -t nat` fails with +# "Table does not exist" even when CONFIG_NF_NAT is set. +# +# Supplements features/netfilter/netfilter.cfg from yocto-kernel-cache, +# which predates this split. + +CONFIG_NETFILTER_XTABLES_LEGACY=y +CONFIG_IP_NF_IPTABLES_LEGACY=m +CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m +CONFIG_BRIDGE_NETFILTER=m -- cgit v1.2.3