From bd59a594aa6c93226f05a5ac438fbaebf15f44ea Mon Sep 17 00:00:00 2001 From: unitexe Date: Sun, 30 Aug 2026 22:36:34 -0500 Subject: Build core-image-unit for olinuxino-a20-emmc --- .../linux/files/netfilter-legacy-podman.cfg | 15 +++++++++++++++ .../recipes-kernel/linux/linux-mainline_%.bbappend | 7 +++++++ 2 files changed, 22 insertions(+) create mode 100644 meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/files/netfilter-legacy-podman.cfg create mode 100644 meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/linux-mainline_%.bbappend (limited to 'meta-sunxi-extra/dynamic-layers') diff --git a/meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/files/netfilter-legacy-podman.cfg b/meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/files/netfilter-legacy-podman.cfg new file mode 100644 index 0000000..7e06214 --- /dev/null +++ b/meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/files/netfilter-legacy-podman.cfg @@ -0,0 +1,15 @@ +# SPDX-License-Identifier: MIT +# +# Kernel 6.18+ split legacy iptables setsockopt support out of +# CONFIG_IP_NF_IPTABLES into CONFIG_IP_NF_IPTABLES_LEGACY, gated by +# CONFIG_NETFILTER_XTABLES_LEGACY. Podman/netavark's iptables backend +# needs this chain enabled or `iptables -t nat` fails with +# "Table does not exist" even when CONFIG_NF_NAT is set. +# +# Supplements features/netfilter/netfilter.cfg from yocto-kernel-cache, +# which predates this split. + +CONFIG_NETFILTER_XTABLES_LEGACY=y +CONFIG_IP_NF_IPTABLES_LEGACY=m +CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=m +CONFIG_BRIDGE_NETFILTER=m diff --git a/meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/linux-mainline_%.bbappend b/meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/linux-mainline_%.bbappend new file mode 100644 index 0000000..57b2be0 --- /dev/null +++ b/meta-sunxi-extra/dynamic-layers/virtualization-layer/recipes-kernel/linux/linux-mainline_%.bbappend @@ -0,0 +1,7 @@ +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +SRC_URI:append = " file://netfilter-legacy-podman.cfg" + +KERNEL_FEATURES:append = " features/namespaces/namespaces.cfg" +KERNEL_FEATURES:append = " features/cgroups/cgroups.cfg" +KERNEL_FEATURES:append = " features/netfilter/netfilter.cfg" -- cgit v1.2.3