]> git.ipfire.org Git - thirdparty/systemd.git/commit
network: make IPMasquerade= imply global IP forwarding settings again
authorYu Watanabe <watanabe.yu+github@gmail.com>
Fri, 16 Aug 2024 15:00:32 +0000 (00:00 +0900)
committerYu Watanabe <watanabe.yu+github@gmail.com>
Fri, 16 Aug 2024 15:13:06 +0000 (00:13 +0900)
commit0b695febb22ea5701eab4aee801e8a861ffdbaa6
tree4623adfe0eed3f8697a873c39661e8f561a31ff4
parent8ceca83141ffea2e383d1205957bdc47f5492875
network: make IPMasquerade= imply global IP forwarding settings again

After 3976c430927e1bfefa0413f80ebac84ab9a64350 (#31423), IPMasquerade=
implies only per-interface IP forwarding. That means, nspawn users need
to manually enable IPv4/IPv6Forwarding= in networkd.conf when
--network-veth or friend is used. Even the change was announced in NEWS,
the change itself breaks backward compatibility and extremely reduces
usability.

Let's make the setting imply the global setting again.

Fixes #34010.
man/networkd.conf.xml
man/systemd.network.xml
src/network/networkd-sysctl.c