From: Phil Sutter <psutter(a)redhat.com>
redhat: configs: Disable xtables and ipset
Bugzilla:
https://bugzilla.redhat.com/show_bug.cgi?id=1945179
Upstream Status: RHEL-only
These drivers have been deprecated with RHEL9, so with RHEL10 it is time
to remove them:
- CONFIG_BRIDGE_NF_EBTABLES
- CONFIG_IP6_NF_IPTABLES
- CONFIG_IP_NF_ARPTABLES
- CONFIG_IP_NF_IPTABLES
- CONFIG_IP_SET
- CONFIG_NFT_COMPAT
Enable previous selected symbols to reduce impact to deprecated symbols:
- CONFIG_NF_CONNTRACK_LABELS
Drop symbols not used anymore:
- CONFIG_NETFILTER_XTABLES
- CONFIG_BRIDGE_NETFILTER
diff --git a/redhat/configs/ark/generic/CONFIG_BRIDGE_NETFILTER
b/redhat/configs/ark/generic/CONFIG_BRIDGE_NETFILTER
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_BRIDGE_NETFILTER
@@ -0,0 +1 @@
+# CONFIG_BRIDGE_NETFILTER is not set
diff --git a/redhat/configs/ark/generic/CONFIG_BRIDGE_NF_EBTABLES
b/redhat/configs/ark/generic/CONFIG_BRIDGE_NF_EBTABLES
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_BRIDGE_NF_EBTABLES
@@ -0,0 +1,2 @@
+# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact Red Hat
Support for further assistance.
+# CONFIG_BRIDGE_NF_EBTABLES is not set
diff --git a/redhat/configs/ark/generic/CONFIG_IP6_NF_IPTABLES
b/redhat/configs/ark/generic/CONFIG_IP6_NF_IPTABLES
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_IP6_NF_IPTABLES
@@ -0,0 +1,2 @@
+# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact Red Hat
Support for further assistance.
+# CONFIG_IP6_NF_IPTABLES is not set
diff --git a/redhat/configs/ark/generic/CONFIG_IP_NF_ARPTABLES
b/redhat/configs/ark/generic/CONFIG_IP_NF_ARPTABLES
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_IP_NF_ARPTABLES
@@ -0,0 +1,2 @@
+# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact Red Hat
Support for further assistance.
+# CONFIG_IP_NF_ARPTABLES is not set
diff --git a/redhat/configs/ark/generic/CONFIG_IP_NF_IPTABLES
b/redhat/configs/ark/generic/CONFIG_IP_NF_IPTABLES
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_IP_NF_IPTABLES
@@ -0,0 +1,2 @@
+# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact Red Hat
Support for further assistance.
+# CONFIG_IP_NF_IPTABLES is not set
diff --git a/redhat/configs/ark/generic/CONFIG_IP_SET
b/redhat/configs/ark/generic/CONFIG_IP_SET
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_IP_SET
@@ -0,0 +1,2 @@
+# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact Red Hat
Support for further assistance.
+# CONFIG_IP_SET is not set
diff --git a/redhat/configs/ark/generic/CONFIG_NETFILTER_XTABLES
b/redhat/configs/ark/generic/CONFIG_NETFILTER_XTABLES
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_NETFILTER_XTABLES
@@ -0,0 +1 @@
+# CONFIG_NETFILTER_XTABLES is not set
diff --git a/redhat/configs/ark/generic/CONFIG_NFT_COMPAT
b/redhat/configs/ark/generic/CONFIG_NFT_COMPAT
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_NFT_COMPAT
@@ -0,0 +1,2 @@
+# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact Red Hat
Support for further assistance.
+# CONFIG_NFT_COMPAT is not set
diff --git a/redhat/configs/ark/generic/CONFIG_NF_CONNTRACK_LABELS
b/redhat/configs/ark/generic/CONFIG_NF_CONNTRACK_LABELS
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_NF_CONNTRACK_LABELS
@@ -0,0 +1 @@
+CONFIG_NF_CONNTRACK_LABELS=y
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1226