Skip to content

Replace iptables-legacy by iptables-nft#4526

Merged
travier merged 1 commit into
coreos:mainfrom
travier:main-iptables-nft
Apr 9, 2026
Merged

Replace iptables-legacy by iptables-nft#4526
travier merged 1 commit into
coreos:mainfrom
travier:main-iptables-nft

Conversation

@travier

@travier travier commented Apr 8, 2026

Copy link
Copy Markdown
Member

Matches what we are using in FCOS and the general default in Fedora.

Matches what we are using in FCOS and the general default in Fedora.

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request replaces the iptables package with iptables-nft across the configuration files and initialization scripts. The changes include updates to rpms.in.yaml, src/vmdeps.txt, and src/supermin-init-prelude.sh. A review comment suggests refactoring the update-alternatives commands in the shell script into a loop to reduce code duplication and improve maintainability.

Comment thread src/supermin-init-prelude.sh

# /usr/sbin/ip{,6}tables is installed as a symlink to /etc/alternatives/ip{,6}tables but
# the /etc/alternatives symlink to /usr/sbin/ip{,6}tables-legacy is missing. This recreates
# the missing link. Hehe.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

😆

@dustymabe

Copy link
Copy Markdown
Member

This LGTM, but I wonder.. is this even needed at all? I guess when we run podman it tries to do things with iptables ?

@travier

travier commented Apr 9, 2026

Copy link
Copy Markdown
Member Author

I don't really know if it's needed but it might a dependency for podman and thus it would be difficult to remove. I went for the smallest fix.

@travier
travier merged commit 6b3ccc9 into coreos:main Apr 9, 2026
5 checks passed
@travier
travier deleted the main-iptables-nft branch April 9, 2026 14:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants