Jakub Kicinski <kuba@xxxxxxxxxx> wrote: > On Thu, 24 Apr 2025 23:14:48 +0200 Pablo Neira Ayuso wrote: > > v2: including fixes from Florian to address selftest issues > > and a fix for set element count and type. > > Thanks, appreciated! All our networking tests now pass, but there > seems to still be some breakage on the BPF side, so > tools/testing/selftests/bpf/config needs touching up. > > I suppose while addressing the RT problem you're trying to move > straggles off from the legacy stuff to nft? Which I'm entirely > sympathetic to. But I'm worried that not everybody will be, and > there's plenty of defconfigs which include iptables: > > $ git grep CONFIG_IP_NF_IPTABLES= | wc -l > 54 Pablo, lets toss the relevant patch and try again later. I have no idea how to make this work the way we want it to without converting all "selects" to "depends on" clauses as in the patch. diff --git a/net/ipv4/netfilter/Kconfig b/net/ipv4/netfilter/Kconfig --- a/net/ipv4/netfilter/Kconfig +++ b/net/ipv4/netfilter/Kconfig @@ -14,6 +14,7 @@ config NF_DEFRAG_IPV4 config IP_NF_IPTABLES_LEGACY tristate "Legacy IP tables support" default n + depends on !PREEMPT_RT select NETFILTER_XTABLES help ... will not work, you just get a "Unmet direct dependencies" warning.
