]> git.itanic.dy.fi Git - linux-stable/commitdiff
selftests: net: add missing config for nftables-backed iptables
authorJakub Kicinski <kuba@kernel.org>
Fri, 26 Jan 2024 20:13:08 +0000 (12:13 -0800)
committerJakub Kicinski <kuba@kernel.org>
Tue, 30 Jan 2024 02:32:30 +0000 (18:32 -0800)
Modern OSes use iptables implementation with nf_tables as a backend,
e.g.:

$ iptables -V
iptables v1.8.8 (nf_tables)

Pablo points out that we need CONFIG_NFT_COMPAT to make that work,
otherwise we see a lot of:

  Warning: Extension DNAT revision 0 not supported, missing kernel module?

with DNAT being just an example here, other modules we need
include udp, TTL, length etc.

Link: https://lore.kernel.org/r/20240126201308.2903602-1-kuba@kernel.org
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
tools/testing/selftests/net/config

index 56da5d52674cf90e44eab0b0929f4de719b5aae8..d4b38177ed04a28827d3523090492b8af28f88ae 100644 (file)
@@ -60,6 +60,7 @@ CONFIG_NET_SCH_HTB=m
 CONFIG_NET_SCH_FQ=m
 CONFIG_NET_SCH_ETF=m
 CONFIG_NET_SCH_NETEM=y
+CONFIG_NFT_COMPAT=m
 CONFIG_NF_FLOW_TABLE=m
 CONFIG_PSAMPLE=m
 CONFIG_TCP_MD5SIG=y