Skip to content

kernel-6.12: convert netfilter modules from built-in to loadable #271

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ginglis13 merged 1 commit into from
Sep 8, 2025
Merged

kernel-6.12: convert netfilter modules from built-in to loadable #271

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions packages/kernel-6.12/config-bottlerocket
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -271,3 +271,14 @@ CONFIG_INFINIBAND_USER_MAD=m

# Enable CephFS SELinux labels
CONFIG_CEPH_FS_SECURITY_LABEL=y

# Include some IP/IPv6 Netfilter drivers as modules

@arnaldo2792 arnaldo2792 Sep 8, 2025

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: There is an extra space here

Suggested change
# Include some IP/IPv6 Netfilter drivers as modules
# Include some IP/IPv6 Netfilter drivers as modules

CONFIG_IP_NF_IPTABLES_LEGACY=m
CONFIG_IP_NF_FILTER=m
CONFIG_IP_NF_MANGLE=m
CONFIG_IP_NF_RAW=m
CONFIG_IP_NF_SECURITY=m
CONFIG_IP6_NF_IPTABLES_LEGACY=m
CONFIG_IP6_NF_FILTER=m
CONFIG_IP6_NF_MANGLE=m
CONFIG_IP6_NF_RAW=m
18 changes: 9 additions & 9 deletions packages/kernel-6.12/config-full-bottlerocket-aarch64
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1576,7 +1576,7 @@ CONFIG_IP_VS_PE_SIP=m
# IP: Netfilter Configuration
#
CONFIG_NF_DEFRAG_IPV4=m
CONFIG_IP_NF_IPTABLES_LEGACY=y
CONFIG_IP_NF_IPTABLES_LEGACY=m
CONFIG_NF_SOCKET_IPV4=m
CONFIG_NF_TPROXY_IPV4=m
CONFIG_NF_TABLES_IPV4=y
Expand All @@ -1596,18 +1596,18 @@ CONFIG_IP_NF_MATCH_AH=m
CONFIG_IP_NF_MATCH_ECN=m
CONFIG_IP_NF_MATCH_RPFILTER=m
CONFIG_IP_NF_MATCH_TTL=m
CONFIG_IP_NF_FILTER=y
CONFIG_IP_NF_FILTER=m
CONFIG_IP_NF_TARGET_REJECT=m
CONFIG_IP_NF_TARGET_SYNPROXY=m
CONFIG_IP_NF_NAT=m
CONFIG_IP_NF_TARGET_MASQUERADE=m
CONFIG_IP_NF_TARGET_NETMAP=m
CONFIG_IP_NF_TARGET_REDIRECT=m
CONFIG_IP_NF_MANGLE=y
CONFIG_IP_NF_MANGLE=m
CONFIG_IP_NF_TARGET_ECN=m
CONFIG_IP_NF_TARGET_TTL=m
CONFIG_IP_NF_RAW=y
CONFIG_IP_NF_SECURITY=y
CONFIG_IP_NF_RAW=m
CONFIG_IP_NF_SECURITY=m
CONFIG_IP_NF_ARPTABLES=m
CONFIG_NFT_COMPAT_ARP=m
CONFIG_IP_NF_ARPFILTER=m
Expand All @@ -1617,7 +1617,7 @@ CONFIG_IP_NF_ARP_MANGLE=m
#
# IPv6: Netfilter Configuration
#
CONFIG_IP6_NF_IPTABLES_LEGACY=y
CONFIG_IP6_NF_IPTABLES_LEGACY=m
CONFIG_NF_SOCKET_IPV6=m
CONFIG_NF_TPROXY_IPV6=m
CONFIG_NF_TABLES_IPV6=y
Expand All @@ -1639,11 +1639,11 @@ CONFIG_IP6_NF_MATCH_RPFILTER=m
CONFIG_IP6_NF_MATCH_RT=m
CONFIG_IP6_NF_MATCH_SRH=m
CONFIG_IP6_NF_TARGET_HL=m
CONFIG_IP6_NF_FILTER=y
CONFIG_IP6_NF_FILTER=m
CONFIG_IP6_NF_TARGET_REJECT=m
CONFIG_IP6_NF_TARGET_SYNPROXY=m
CONFIG_IP6_NF_MANGLE=y
CONFIG_IP6_NF_RAW=y
CONFIG_IP6_NF_MANGLE=m
CONFIG_IP6_NF_RAW=m
CONFIG_IP6_NF_SECURITY=m
CONFIG_IP6_NF_NAT=m
CONFIG_IP6_NF_TARGET_MASQUERADE=m
Expand Down
18 changes: 9 additions & 9 deletions packages/kernel-6.12/config-full-bottlerocket-x86_64
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1598,7 +1598,7 @@ CONFIG_IP_VS_PE_SIP=m
# IP: Netfilter Configuration
#
CONFIG_NF_DEFRAG_IPV4=m
CONFIG_IP_NF_IPTABLES_LEGACY=y
CONFIG_IP_NF_IPTABLES_LEGACY=m
CONFIG_NF_SOCKET_IPV4=m
CONFIG_NF_TPROXY_IPV4=m
CONFIG_NF_TABLES_IPV4=y
Expand All @@ -1618,18 +1618,18 @@ CONFIG_IP_NF_MATCH_AH=m
CONFIG_IP_NF_MATCH_ECN=m
CONFIG_IP_NF_MATCH_RPFILTER=m
CONFIG_IP_NF_MATCH_TTL=m
CONFIG_IP_NF_FILTER=y
CONFIG_IP_NF_FILTER=m
CONFIG_IP_NF_TARGET_REJECT=m
CONFIG_IP_NF_TARGET_SYNPROXY=m
CONFIG_IP_NF_NAT=m
CONFIG_IP_NF_TARGET_MASQUERADE=m
CONFIG_IP_NF_TARGET_NETMAP=m
CONFIG_IP_NF_TARGET_REDIRECT=m
CONFIG_IP_NF_MANGLE=y
CONFIG_IP_NF_MANGLE=m
CONFIG_IP_NF_TARGET_ECN=m
CONFIG_IP_NF_TARGET_TTL=m
CONFIG_IP_NF_RAW=y
CONFIG_IP_NF_SECURITY=y
CONFIG_IP_NF_RAW=m
CONFIG_IP_NF_SECURITY=m
CONFIG_IP_NF_ARPTABLES=m
CONFIG_NFT_COMPAT_ARP=m
CONFIG_IP_NF_ARPFILTER=m
Expand All @@ -1639,7 +1639,7 @@ CONFIG_IP_NF_ARP_MANGLE=m
#
# IPv6: Netfilter Configuration
#
CONFIG_IP6_NF_IPTABLES_LEGACY=y
CONFIG_IP6_NF_IPTABLES_LEGACY=m
CONFIG_NF_SOCKET_IPV6=m
CONFIG_NF_TPROXY_IPV6=m
CONFIG_NF_TABLES_IPV6=y
Expand All @@ -1661,11 +1661,11 @@ CONFIG_IP6_NF_MATCH_RPFILTER=m
CONFIG_IP6_NF_MATCH_RT=m
CONFIG_IP6_NF_MATCH_SRH=m
CONFIG_IP6_NF_TARGET_HL=m
CONFIG_IP6_NF_FILTER=y
CONFIG_IP6_NF_FILTER=m
CONFIG_IP6_NF_TARGET_REJECT=m
CONFIG_IP6_NF_TARGET_SYNPROXY=m
CONFIG_IP6_NF_MANGLE=y
CONFIG_IP6_NF_RAW=y
CONFIG_IP6_NF_MANGLE=m
CONFIG_IP6_NF_RAW=m
CONFIG_IP6_NF_SECURITY=m
CONFIG_IP6_NF_NAT=m
CONFIG_IP6_NF_TARGET_MASQUERADE=m
Expand Down
9 changes: 9 additions & 0 deletions packages/kernel-6.12/kernel-6.12.spec
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1072,12 +1072,17 @@ install -p -m 0644 %{S:301} %{buildroot}%{_cross_bootconfigdir}/05-vmware.conf
%{_cross_kmoddir}/kernel/net/ipv4/netfilter/arp_tables.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv4/netfilter/arpt_mangle.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv4/netfilter/arptable_filter.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv4/netfilter/ip_tables.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv4/netfilter/ipt_ah.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv4/netfilter/ipt_ECN.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv4/netfilter/ipt_REJECT.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv4/netfilter/ipt_rpfilter.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv4/netfilter/ipt_SYNPROXY.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv4/netfilter/iptable_filter.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv4/netfilter/iptable_mangle.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv4/netfilter/iptable_nat.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv4/netfilter/iptable_raw.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv4/netfilter/iptable_security.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv4/netfilter/nf_defrag_ipv4.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv4/netfilter/nf_dup_ipv4.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv4/netfilter/nf_nat_h323.%{_ko}
Expand Down Expand Up @@ -1119,6 +1124,7 @@ install -p -m 0644 %{S:301} %{buildroot}%{_cross_bootconfigdir}/05-vmware.conf
%{_cross_kmoddir}/kernel/net/ipv6/ip6_vti.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv6/ipcomp6.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv6/mip6.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv6/netfilter/ip6_tables.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv6/netfilter/ip6t_ah.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv6/netfilter/ip6t_eui64.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv6/netfilter/ip6t_frag.%{_ko}
Expand All @@ -1130,7 +1136,10 @@ install -p -m 0644 %{S:301} %{buildroot}%{_cross_bootconfigdir}/05-vmware.conf
%{_cross_kmoddir}/kernel/net/ipv6/netfilter/ip6t_rt.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv6/netfilter/ip6t_srh.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv6/netfilter/ip6t_SYNPROXY.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv6/netfilter/ip6table_filter.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv6/netfilter/ip6table_mangle.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv6/netfilter/ip6table_nat.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv6/netfilter/ip6table_raw.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv6/netfilter/ip6table_security.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv6/netfilter/nf_defrag_ipv6.%{_ko}
%{_cross_kmoddir}/kernel/net/ipv6/netfilter/nf_dup_ipv6.%{_ko}
Expand Down