On Thu, Oct 21, 2021 at 3:23 AM Phil Sutter psutter@redhat.com wrote:
Hi!
On Wed, Oct 20, 2021 at 01:40:35PM -0700, Adam Williamson wrote:
On Wed, 2021-10-20 at 18:39 +0200, Brian (bex) Exelbierd wrote:
[...]
AIUI, we made the change to use iptables-nft as the default with F32.
We
also decided that existing iptables-legacy users shouldn't be moved to iptables-nft during an upgrade.
However, I think that new installations are still defaulting to iptables-legacy. The group "Common NetworkManager Submodules" pulls in `iptables` which seems to pull in iptables-legacy by default.
This feels like an oversight and should be fixed. Is this correct?
I just had a bright moment! It told me to check fedora-comps: Indeed the above issue was reported[1] and fixed[2] for F35.
Thank you for catching the update is already in the works.
Does this also remove iptables-compat? I gather from its description it should have been removed by now.
I also can't help but wonder what the impact of this change will be on OSTree users. Will they be force upgraded from iptables to nftables through the removal?
regards,
bex
I agree we should probably change that, but I'm not sure it's so straightforward...I just ran an F35 install (Workstation package set installed from Server netinst, as it happens) and it got iptables-nft, not iptables-legacy. I'll have a look at a live instance later.
I take this as an unintended verification of said fix. :)
Thanks, Phil
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1957346 [2] https://pagure.io/fedora-comps/c/9d4f353233619f36f03f6c78331cc4246e12a7c3?br... _______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure