]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
iptables: use nft backend with libnftnl PACKAGECONFIG
authorTrevor Gamblin <trevor.gamblin@windriver.com>
Thu, 17 Mar 2022 19:22:27 +0000 (15:22 -0400)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 18 Mar 2022 23:32:01 +0000 (23:32 +0000)
commitbc41682ab2a259b7bc6a56fa3ba42907f4c8bf25
tree1a3ea8c6871a81eaefe5ca0c4676e9ba9422f80f
parented2c7c806f1a48c388282f5cbdc93f034ba2c93d
iptables: use nft backend with libnftnl PACKAGECONFIG

Currently, when the libnftnl (part of meta-networking) PACKAGECONFIG is
enabled for iptables, both legacy and nft-based binaries are built and
installed in the image. However, the "iptables" symlink in this case
still points to xtables-legacy-multi, rather than xtables-nft-multi.
This patch adds a conditional check to replace the symlink to point to
the latter if iptables is built with libnftnl support, which is
consistent with other major distros (e.g. Fedora). The "iptables-legacy"
symlink remains present and unmodified.

Signed-off-by: tgamblin <trevor.gamblin@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-extended/iptables/iptables_1.8.7.bb