mirror/runc
1
0
Fork 0
mirror of https://github.com/opencontainers/runc.git synced 2026-07-10 21:53:57 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add CONFIG_NETFILTER_XT_MATCH_COMMENT to check

Browse Source 
It seems that newer podman versions need the kernel comment flag too.

By podman run, iptables using -m comment in the iptables-command to add the corresponding network rules.

Signed-off-by: Christian Happ <Christian.Happ@jumo.net>
This commit is contained in:
Christian Happ
2023-11-27 10:51:02 +01:00
parent cbd852b330
commit 2a473a7630
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
script/check-config.sh
+1 -1
View File
@@ -236,7 +236,7 @@ flags=(
KEYS
VETH BRIDGE BRIDGE_NETFILTER
IP_NF_FILTER IP_NF_TARGET_MASQUERADE
NETFILTER_XT_MATCH_{ADDRTYPE,CONNTRACK,IPVS}
NETFILTER_XT_MATCH_{ADDRTYPE,COMMENT,CONNTRACK,IPVS}
IP_NF_NAT NF_NAT
# required for bind-mounting /dev/mqueue into containers