Re: Fedora 32 System-Wide Change proposal: iptables-nft-default

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 





On Thu, Oct 21, 2021 at 3:23 AM Phil Sutter <psutter@xxxxxxxxxx> wrote:
Hi!

On Wed, Oct 20, 2021 at 01:40:35PM -0700, Adam Williamson wrote:
> On Wed, 2021-10-20 at 18:39 +0200, Brian (bex) Exelbierd wrote:
[...]
> > AIUI, we made the change to use iptables-nft as the default with F32.  We
> > also decided that existing iptables-legacy users shouldn't be moved to
> > iptables-nft during an upgrade.
> >
> > However, I think that new installations are still defaulting to
> > iptables-legacy.  The group "Common NetworkManager Submodules" pulls in
> > `iptables` which seems to pull in iptables-legacy by default.
> >
> > This feels like an oversight and should be fixed.  Is this correct?

I just had a bright moment! It told me to check fedora-comps: Indeed the
above issue was reported[1] and fixed[2] for F35.

Thank you for catching the update is already in the works.

Does this also remove iptables-compat?  I gather from its description it should have been removed by now.

I also can't help but wonder what the impact of this change will be on OSTree users.  Will they be force upgraded from iptables to nftables through the removal?

regards,

bex 

 

> I agree we should probably change that, but I'm not sure it's so
> straightforward...I just ran an F35 install (Workstation package set
> installed from Server netinst, as it happens) and it got iptables-nft,
> not iptables-legacy. I'll have a look at a live instance later.

I take this as an unintended verification of said fix. :)

Thanks, Phil

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1957346
[2] https://pagure.io/fedora-comps/c/9d4f353233619f36f03f6c78331cc4246e12a7c3?branch=main
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure


--
Did this email arrive after work for you?  Stop reading it and enjoy some work/life balance.

Brian "bex" Exelbierd (he/him/his)
Community Business Owner, RHEL Product Management
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Users]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]

  Powered by Linux