From: Phil Sutter <psutter@xxxxxxxxxx> Revert "redhat: configs: Disable xtables and ipset" This reverts commit ebafea5303ae22b582590917be79c10f073d76fe. It seems kernel-ark config is used for libvirt testing with upstream kernels. Libvirt still requires iptables, though. So revert this for now. Contrary to reverted commit ebafea5303ae2, it is not sufficient to remove the disabling config snippets as the respective enabling ones have been moved from 'common' space to 'fedora'. Move them back. Add the restored modules to kernel-modules-extra package instead of kernel-modules-core. Signed-off-by: Phil Sutter <psutter@xxxxxxxxxx> diff --git a/redhat/configs/ark/generic/CONFIG_BRIDGE_NETFILTER b/redhat/configs/ark/generic/CONFIG_BRIDGE_NETFILTER deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/ark/generic/CONFIG_BRIDGE_NETFILTER +++ /dev/null @@ -1 +0,0 @@ -# CONFIG_BRIDGE_NETFILTER is not set diff --git a/redhat/configs/ark/generic/CONFIG_BRIDGE_NF_EBTABLES b/redhat/configs/ark/generic/CONFIG_BRIDGE_NF_EBTABLES deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/ark/generic/CONFIG_BRIDGE_NF_EBTABLES +++ /dev/null @@ -1,2 +0,0 @@ -# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact Red Hat Support for further assistance. -# CONFIG_BRIDGE_NF_EBTABLES is not set diff --git a/redhat/configs/ark/generic/CONFIG_IP6_NF_IPTABLES b/redhat/configs/ark/generic/CONFIG_IP6_NF_IPTABLES deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/ark/generic/CONFIG_IP6_NF_IPTABLES +++ /dev/null @@ -1,2 +0,0 @@ -# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact Red Hat Support for further assistance. -# CONFIG_IP6_NF_IPTABLES is not set diff --git a/redhat/configs/ark/generic/CONFIG_IP_NF_ARPTABLES b/redhat/configs/ark/generic/CONFIG_IP_NF_ARPTABLES deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/ark/generic/CONFIG_IP_NF_ARPTABLES +++ /dev/null @@ -1,2 +0,0 @@ -# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact Red Hat Support for further assistance. -# CONFIG_IP_NF_ARPTABLES is not set diff --git a/redhat/configs/ark/generic/CONFIG_IP_NF_IPTABLES b/redhat/configs/ark/generic/CONFIG_IP_NF_IPTABLES deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/ark/generic/CONFIG_IP_NF_IPTABLES +++ /dev/null @@ -1,2 +0,0 @@ -# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact Red Hat Support for further assistance. -# CONFIG_IP_NF_IPTABLES is not set diff --git a/redhat/configs/ark/generic/CONFIG_IP_SET b/redhat/configs/ark/generic/CONFIG_IP_SET deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/ark/generic/CONFIG_IP_SET +++ /dev/null @@ -1,2 +0,0 @@ -# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact Red Hat Support for further assistance. -# CONFIG_IP_SET is not set diff --git a/redhat/configs/ark/generic/CONFIG_NETFILTER_XTABLES b/redhat/configs/ark/generic/CONFIG_NETFILTER_XTABLES deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/ark/generic/CONFIG_NETFILTER_XTABLES +++ /dev/null @@ -1 +0,0 @@ -# CONFIG_NETFILTER_XTABLES is not set diff --git a/redhat/configs/ark/generic/CONFIG_NFT_COMPAT b/redhat/configs/ark/generic/CONFIG_NFT_COMPAT deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/ark/generic/CONFIG_NFT_COMPAT +++ /dev/null @@ -1,2 +0,0 @@ -# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact Red Hat Support for further assistance. -# CONFIG_NFT_COMPAT is not set diff --git a/redhat/configs/ark/generic/CONFIG_NF_CONNTRACK_LABELS b/redhat/configs/ark/generic/CONFIG_NF_CONNTRACK_LABELS deleted file mode 100644 index blahblah..blahblah 0 --- a/redhat/configs/ark/generic/CONFIG_NF_CONNTRACK_LABELS +++ /dev/null @@ -1 +0,0 @@ -CONFIG_NF_CONNTRACK_LABELS=y diff --git a/redhat/configs/fedora/generic/CONFIG_BRIDGE_NETFILTER b/redhat/configs/common/generic/CONFIG_BRIDGE_NETFILTER rename from redhat/configs/fedora/generic/CONFIG_BRIDGE_NETFILTER rename to redhat/configs/common/generic/CONFIG_BRIDGE_NETFILTER index blahblah..blahblah 100644 --- a/redhat/configs/fedora/generic/CONFIG_BRIDGE_NETFILTER +++ b/redhat/configs/common/generic/CONFIG_BRIDGE_NETFILTER diff --git a/redhat/configs/fedora/generic/CONFIG_BRIDGE_NF_EBTABLES b/redhat/configs/common/generic/CONFIG_BRIDGE_NF_EBTABLES rename from redhat/configs/fedora/generic/CONFIG_BRIDGE_NF_EBTABLES rename to redhat/configs/common/generic/CONFIG_BRIDGE_NF_EBTABLES index blahblah..blahblah 100644 --- a/redhat/configs/fedora/generic/CONFIG_BRIDGE_NF_EBTABLES +++ b/redhat/configs/common/generic/CONFIG_BRIDGE_NF_EBTABLES diff --git a/redhat/configs/fedora/generic/CONFIG_IP6_NF_IPTABLES b/redhat/configs/common/generic/CONFIG_IP6_NF_IPTABLES rename from redhat/configs/fedora/generic/CONFIG_IP6_NF_IPTABLES rename to redhat/configs/common/generic/CONFIG_IP6_NF_IPTABLES index blahblah..blahblah 100644 --- a/redhat/configs/fedora/generic/CONFIG_IP6_NF_IPTABLES +++ b/redhat/configs/common/generic/CONFIG_IP6_NF_IPTABLES diff --git a/redhat/configs/fedora/generic/CONFIG_IP_NF_ARPTABLES b/redhat/configs/common/generic/CONFIG_IP_NF_ARPTABLES rename from redhat/configs/fedora/generic/CONFIG_IP_NF_ARPTABLES rename to redhat/configs/common/generic/CONFIG_IP_NF_ARPTABLES index blahblah..blahblah 100644 --- a/redhat/configs/fedora/generic/CONFIG_IP_NF_ARPTABLES +++ b/redhat/configs/common/generic/CONFIG_IP_NF_ARPTABLES diff --git a/redhat/configs/fedora/generic/CONFIG_IP_NF_IPTABLES b/redhat/configs/common/generic/CONFIG_IP_NF_IPTABLES rename from redhat/configs/fedora/generic/CONFIG_IP_NF_IPTABLES rename to redhat/configs/common/generic/CONFIG_IP_NF_IPTABLES index blahblah..blahblah 100644 --- a/redhat/configs/fedora/generic/CONFIG_IP_NF_IPTABLES +++ b/redhat/configs/common/generic/CONFIG_IP_NF_IPTABLES diff --git a/redhat/configs/fedora/generic/CONFIG_IP_SET b/redhat/configs/common/generic/CONFIG_IP_SET rename from redhat/configs/fedora/generic/CONFIG_IP_SET rename to redhat/configs/common/generic/CONFIG_IP_SET index blahblah..blahblah 100644 --- a/redhat/configs/fedora/generic/CONFIG_IP_SET +++ b/redhat/configs/common/generic/CONFIG_IP_SET diff --git a/redhat/configs/fedora/generic/CONFIG_NETFILTER_XTABLES b/redhat/configs/common/generic/CONFIG_NETFILTER_XTABLES rename from redhat/configs/fedora/generic/CONFIG_NETFILTER_XTABLES rename to redhat/configs/common/generic/CONFIG_NETFILTER_XTABLES index blahblah..blahblah 100644 --- a/redhat/configs/fedora/generic/CONFIG_NETFILTER_XTABLES +++ b/redhat/configs/common/generic/CONFIG_NETFILTER_XTABLES diff --git a/redhat/configs/fedora/generic/CONFIG_NFT_COMPAT b/redhat/configs/common/generic/CONFIG_NFT_COMPAT rename from redhat/configs/fedora/generic/CONFIG_NFT_COMPAT rename to redhat/configs/common/generic/CONFIG_NFT_COMPAT index blahblah..blahblah 100644 --- a/redhat/configs/fedora/generic/CONFIG_NFT_COMPAT +++ b/redhat/configs/common/generic/CONFIG_NFT_COMPAT diff --git a/redhat/rhel_files/mod-extra.list.rhel b/redhat/rhel_files/mod-extra.list.rhel index blahblah..blahblah 100644 --- a/redhat/rhel_files/mod-extra.list.rhel +++ b/redhat/rhel_files/mod-extra.list.rhel @@ -9,6 +9,9 @@ affs.ko ali-ircc.ko analog.ko appletalk.ko +arptable_filter.ko +arp_tables.ko +arpt_mangle.ko atm.ko avma1_cs.ko avm_cs.ko @@ -23,6 +26,7 @@ baycom_ser_hdx.ko befs.ko bpqether.ko br2684.ko +br_netfilter.ko capi.ko c_can.ko c_can_platform.ko @@ -42,6 +46,27 @@ ds1wm.ko ds2482.ko ds2490.ko dss1_divert.ko +ebt_802_3.ko +ebtable_broute.ko +ebtable_filter.ko +ebtable_nat.ko +ebtables.ko +ebt_among.ko +ebt_arp.ko +ebt_arpreply.ko +ebt_dnat.ko +ebt_ip6.ko +ebt_ip.ko +ebt_limit.ko +ebt_log.ko +ebt_mark.ko +ebt_mark_m.ko +ebt_nflog.ko +ebt_pkttype.ko +ebt_redirect.ko +ebt_snat.ko +ebt_stp.ko +ebt_vlan.ko elsa_cs.ko ems_pci.ko ems_usb.ko @@ -67,7 +92,50 @@ i2400m-usb.ko ieee802154.ko iforce.ko interact.ko +ip6table_filter.ko +ip6table_mangle.ko +ip6table_nat.ko +ip6table_raw.ko +ip6table_security.ko +ip6_tables.ko +ip6t_ah.ko +ip6t_eui64.ko +ip6t_frag.ko +ip6t_hbh.ko +ip6t_ipv6header.ko +ip6t_mh.ko +ip6t_NPT.ko +ip6t_REJECT.ko +ip6t_rpfilter.ko +ip6t_rt.ko ipddp.ko +ip_set_bitmap_ip.ko +ip_set_bitmap_ipmac.ko +ip_set_bitmap_port.ko +ip_set_hash_ip.ko +ip_set_hash_ipmac.ko +ip_set_hash_ipmark.ko +ip_set_hash_ipportip.ko +ip_set_hash_ipport.ko +ip_set_hash_ipportnet.ko +ip_set_hash_mac.ko +ip_set_hash_netiface.ko +ip_set_hash_net.ko +ip_set_hash_netnet.ko +ip_set_hash_netport.ko +ip_set_hash_netportnet.ko +ip_set.ko +ip_set_list_set.ko +iptable_filter.ko +iptable_mangle.ko +iptable_nat.ko +iptable_raw.ko +iptable_security.ko +ip_tables.ko +ipt_ah.ko +ipt_ECN.ko +ipt_REJECT.ko +ipt_rpfilter.ko ipx.ko isdn.ko joydump.ko @@ -97,6 +165,7 @@ ncpfs.ko netjet.ko netrom.ko nfc.ko +nft_compat.ko nilfs2.ko ocfs2_dlmfs.ko ocfs2_dlm.ko @@ -189,5 +258,70 @@ warrior.ko whci.ko wire.ko wwan_hwsim.ko +xt_addrtype.ko +xt_AUDIT.ko +xt_bpf.ko +xt_cgroup.ko +xt_CHECKSUM.ko +xt_CLASSIFY.ko +xt_cluster.ko +xt_comment.ko +xt_connbytes.ko +xt_connlabel.ko +xt_connlimit.ko +xt_connmark.ko +xt_CONNSECMARK.ko +xt_conntrack.ko +xt_cpu.ko +xt_CT.ko +xt_dccp.ko +xt_devgroup.ko +xt_dscp.ko +xt_DSCP.ko +xt_ecn.ko +xt_esp.ko +xt_hashlimit.ko +xt_helper.ko +xt_hl.ko +xt_HL.ko +xt_HMARK.ko +xt_IDLETIMER.ko +xt_iprange.ko +xt_ipvs.ko +xt_length.ko +xt_limit.ko +xt_LOG.ko +xt_mac.ko +xt_mark.ko +xt_MASQUERADE.ko +xt_multiport.ko +xt_nat.ko +xt_NETMAP.ko +xt_NFLOG.ko +xt_NFQUEUE.ko +xt_osf.ko +xt_owner.ko +xt_physdev.ko +xt_pkttype.ko +xt_policy.ko +xt_quota.ko +xt_rateest.ko +xt_RATEEST.ko +xt_realm.ko +xt_recent.ko +xt_REDIRECT.ko +xt_sctp.ko +xt_SECMARK.ko +xt_set.ko +xt_socket.ko +xt_state.ko +xt_statistic.ko +xt_string.ko +xt_tcpmss.ko +xt_TCPMSS.ko +xt_TCPOPTSTRIP.ko +xt_TEE.ko +xt_TPROXY.ko +xt_TRACE.ko yam.ko zhenhua.ko -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2267 _______________________________________________ kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
