Skip to contentSkip to conversation

selftests: net: add missing config for nftables-backed iptables

PATCH Applied Jakub Kicinski 2 participants 2 messages Jan 26, 2024 – Jan 30, 2024

Subsystems (3)
lore
Share & tools
lore

Jakub Kicinski

author maintainer
#0 lore raw

PATCH 1/1 selftests: net: add missing config for nftables-backed iptables

Modern OSes use iptables implementation with nf_tables as a backend, e.g.:

$ iptables -V
iptables v1.8.8 (nf_tables)

Pablo points out that we need CONFIG_NFT_COMPAT to make that work, otherwise we see a lot of:

Warning: Extension DNAT revision 0 not supported, missing kernel module?

with DNAT being just an example here, other modules we need include udp, TTL, length etc.

---
Location for new entry chosen based on sort --version-sort.

---
 tools/testing/selftests/net/config | 1 +
 1 file changed, 1 insertion(+)
tools/testing/selftests/net/config +1 -0
index 413ab9abcf1b..ba56f231e109 100644
@@ -59,6 +59,7 @@ CONFIG_NET_SCH_HTB=m
 CONFIG_NET_SCH_FQ=m
 CONFIG_NET_SCH_ETF=m
 CONFIG_NET_SCH_NETEM=y
+CONFIG_NFT_COMPAT=m
 CONFIG_NF_FLOW_TABLE=m
 CONFIG_PSAMPLE=m
 CONFIG_TCP_MD5SIG=y
Signature · 1 line
2.43.0
#1 lore raw
This patch was applied to netdev/net.git (main) by Jakub Kicinski <[email protected]>:

Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski <[email protected]>:

Quoted 10 lines · On Fri, 26 Jan 2024 12:13:08 -0800 you wrote:

Modern OSes use iptables implementation with nf_tables as a backend, e.g.:

$ iptables -V
iptables v1.8.8 (nf_tables)

Pablo points out that we need CONFIG_NFT_COMPAT to make that work, otherwise we see a lot of:

[...]

Here is the summary with links:
- [net] selftests: net: add missing config for nftables-backed iptables

    https://git.kernel.org/netdev/net/c/59c93583491a

You are awesome, thank you!

Signature · 2 lines
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html