incus-osd/nftables: Use oifname to allow non-existent interfaces

stgraber · stgraber · commit bf4622136f39 · 2025-12-02T17:58:18.000-05:00
Signed-off-by: Stéphane Graber &lt;stgraber@stgraber.org&gt;
diff --git a/incus-osd/internal/nftables/nft.go b/incus-osd/internal/nftables/nft.go
@@ -48,7 +48,7 @@ func ApplyHwaddrFilters(ctx context.Context, networkCfg *api.SystemNetworkConfig
 
 		underlyingDevice := "_p" + strings.ToLower(strings.ReplaceAll(iface.Hwaddr, ":", ""))
 
-		_, err = subprocess.RunCommandContext(ctx, "nft", "add", "rule", "bridge", "incus-osd", "mac-filters", "oif", underlyingDevice, "ether", "saddr", "!=", iface.Hwaddr, "drop")
+		_, err = subprocess.RunCommandContext(ctx, "nft", "add", "rule", "bridge", "incus-osd", "mac-filters", "oifname", underlyingDevice, "ether", "saddr", "!=", iface.Hwaddr, "drop")
 		if err != nil {
 			return err
 		}

Original file line number	Diff line number	Diff line change
`@@ -48,7 +48,7 @@ func ApplyHwaddrFilters(ctx context.Context, networkCfg *api.SystemNetworkConfig`
`48`	`48`
`49`	`49`	`underlyingDevice := "_p" + strings.ToLower(strings.ReplaceAll(iface.Hwaddr, ":", ""))`
`50`	`50`
`51`		`- _, err = subprocess.RunCommandContext(ctx, "nft", "add", "rule", "bridge", "incus-osd", "mac-filters", "oif", underlyingDevice, "ether", "saddr", "!=", iface.Hwaddr, "drop")`
	`51`	`+ _, err = subprocess.RunCommandContext(ctx, "nft", "add", "rule", "bridge", "incus-osd", "mac-filters", "oifname", underlyingDevice, "ether", "saddr", "!=", iface.Hwaddr, "drop")`
`52`	`52`	`if err != nil {`
`53`	`53`	`return err`
`54`	`54`	`}`