From: Phil Sutter <[email protected]>

redhat: configs: Disable xtables and ipset

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1945179
Upstream Status: RHEL-only

These drivers have been deprecated with RHEL9, so with RHEL10 it is time
to remove them:

- CONFIG_BRIDGE_NF_EBTABLES
- CONFIG_IP6_NF_IPTABLES
- CONFIG_IP_NF_ARPTABLES
- CONFIG_IP_NF_IPTABLES
- CONFIG_IP_SET
- CONFIG_NFT_COMPAT

Enable previous selected symbols to reduce impact to deprecated symbols:

- CONFIG_NF_CONNTRACK_LABELS

Drop symbols not used anymore:

- CONFIG_NETFILTER_XTABLES
- CONFIG_BRIDGE_NETFILTER

diff --git a/redhat/configs/ark/generic/CONFIG_BRIDGE_NETFILTER 
b/redhat/configs/ark/generic/CONFIG_BRIDGE_NETFILTER
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_BRIDGE_NETFILTER
@@ -0,0 +1 @@
+# CONFIG_BRIDGE_NETFILTER is not set
diff --git a/redhat/configs/ark/generic/CONFIG_BRIDGE_NF_EBTABLES 
b/redhat/configs/ark/generic/CONFIG_BRIDGE_NF_EBTABLES
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_BRIDGE_NF_EBTABLES
@@ -0,0 +1,2 @@
+# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact 
Red Hat Support for further assistance.
+# CONFIG_BRIDGE_NF_EBTABLES is not set
diff --git a/redhat/configs/ark/generic/CONFIG_IP6_NF_IPTABLES 
b/redhat/configs/ark/generic/CONFIG_IP6_NF_IPTABLES
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_IP6_NF_IPTABLES
@@ -0,0 +1,2 @@
+# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact 
Red Hat Support for further assistance.
+# CONFIG_IP6_NF_IPTABLES is not set
diff --git a/redhat/configs/ark/generic/CONFIG_IP_NF_ARPTABLES 
b/redhat/configs/ark/generic/CONFIG_IP_NF_ARPTABLES
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_IP_NF_ARPTABLES
@@ -0,0 +1,2 @@
+# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact 
Red Hat Support for further assistance.
+# CONFIG_IP_NF_ARPTABLES is not set
diff --git a/redhat/configs/ark/generic/CONFIG_IP_NF_IPTABLES 
b/redhat/configs/ark/generic/CONFIG_IP_NF_IPTABLES
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_IP_NF_IPTABLES
@@ -0,0 +1,2 @@
+# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact 
Red Hat Support for further assistance.
+# CONFIG_IP_NF_IPTABLES is not set
diff --git a/redhat/configs/ark/generic/CONFIG_IP_SET 
b/redhat/configs/ark/generic/CONFIG_IP_SET
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_IP_SET
@@ -0,0 +1,2 @@
+# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact 
Red Hat Support for further assistance.
+# CONFIG_IP_SET is not set
diff --git a/redhat/configs/ark/generic/CONFIG_NETFILTER_XTABLES 
b/redhat/configs/ark/generic/CONFIG_NETFILTER_XTABLES
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_NETFILTER_XTABLES
@@ -0,0 +1 @@
+# CONFIG_NETFILTER_XTABLES is not set
diff --git a/redhat/configs/ark/generic/CONFIG_NFT_COMPAT 
b/redhat/configs/ark/generic/CONFIG_NFT_COMPAT
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_NFT_COMPAT
@@ -0,0 +1,2 @@
+# This CONFIG has been disabled in RHEL by RHEL Engineering. Please contact 
Red Hat Support for further assistance.
+# CONFIG_NFT_COMPAT is not set
diff --git a/redhat/configs/ark/generic/CONFIG_NF_CONNTRACK_LABELS 
b/redhat/configs/ark/generic/CONFIG_NF_CONNTRACK_LABELS
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_NF_CONNTRACK_LABELS
@@ -0,0 +1 @@
+CONFIG_NF_CONNTRACK_LABELS=y

--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1226
_______________________________________________
kernel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to