MIRRORS/meta-virtualization
1
0
Fork 0
mirror of git://git.yoctoproject.org/meta-virtualization.git synced 2026-01-27 10:41:26 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

kernel/config/6.18: bump yocto-cfg-fragments for netfilter fixes

Browse Source 
bumping to pickup the following change:

  commit af4e4301c12e98dc03b8827a44eb29786c1a61a6 (HEAD -> yocto-6.18, origin/yocto-6.18)
  Author: Bruce Ashfield <bruce.ashfield@gmail.com>
  Date:   Mon Jan 5 09:41:06 2026 -0500

      config/netfilter: migrate from legacy NF to NETFILTER_XT_TARGET_MASQUERADE

        - 9fce66583f06c212 ("netfilter: Exclude LEGACY TABLES on PREEMPT_RT.")
           adds NETFILTER_XTABLES_LEGACY and switches the iptables legacy options
           (IP_NF_IPTABLES_LEGACY, IP_NF_NAT, IP6_NF_NAT, IP_NF_TARGET_MASQUERADE,
           etc.) from select to depends on it in net/ipv4/netfilter/Kconfig and
           net/ipv6/netfilter/Kconfig.

      If NETFILTER_XTABLES_LEGACY is left unset, IP_NF_TARGET_MASQUERADE
      becomes unreachable and no longer auto-selects NETFILTER_XT_TARGET_MASQUERADE,
      so the xt_MASQUERADE module vanishes.

        - 25a8b88f000c33a1 ("netfilter: add back NETFILTER_XTABLES dependencies")
          restores depends on NETFILTER_XTABLES for those legacy symbols but keeps
          the new NETFILTER_XTABLES_LEGACY gate in the same Kconfig files.

      Effect: after these patches in the 6.18 cycle, keeping kernel-module-xt-masquerade
      without enabling the legacy iptables stack requires setting
      CONFIG_NETFILTER_XT_TARGET_MASQUERADE directly (as in your fix) or turning on
      NETFILTER_XTABLES_LEGACY in the config.

      Solution: for now, we just enable NETFILTER_XT_TARGET_MASQUERADE to fix a
                specific error, and will start the migration of all the legacy
                options to their new options. If breakage becomes widespread,
                we'll enable NETFILTER_XTABLES_LEGACY.

This avoids a build error in xen-image-minimal due to missing kernel
module packages.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
This commit is contained in:
Bruce Ashfield 2026-01-05 12:16:51 -05:00
parent 85b63d3141
commit 207052a82c
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
recipes-kernel/linux/yocto-cfg-fragments-6.18.bb
View File

@ -15,7 +15,7 @@ INHIBIT_DEFAULT_DEPS = "1"
LINUX_VERSION ?= "6.18"
PV = "v${LINUX_VERSION}+git${SRCREV}"
SRCREV = "f4a44299f4519c9ee5c06c12ceaa2a214290490e"
SRCREV = "af4e4301c12e98dc03b8827a44eb29786c1a61a6"
SRC_URI = "\
git://git.yoctoproject.org/yocto-kernel-cache;branch=yocto-${LINUX_VERSION} \
"