From 2a473a76309735c0d140760d4344cbbf9c5e2edd Mon Sep 17 00:00:00 2001
From: Christian Happ <Christian.Happ@jumo.net>
Date: Mon, 27 Nov 2023 10:51:02 +0100
Subject: [PATCH] Add CONFIG_NETFILTER_XT_MATCH_COMMENT to check

It seems that newer podman versions need the kernel comment flag too.

By podman run, iptables using -m comment in the iptables-command to add the corresponding network rules.

Signed-off-by: Christian Happ <Christian.Happ@jumo.net>
---
 script/check-config.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/script/check-config.sh b/script/check-config.sh
index d54055023..c71ee72f2 100755
--- a/script/check-config.sh
+++ b/script/check-config.sh
@@ -236,7 +236,7 @@ flags=(
 	KEYS
 	VETH BRIDGE BRIDGE_NETFILTER
 	IP_NF_FILTER IP_NF_TARGET_MASQUERADE
-	NETFILTER_XT_MATCH_{ADDRTYPE,CONNTRACK,IPVS}
+	NETFILTER_XT_MATCH_{ADDRTYPE,COMMENT,CONNTRACK,IPVS}
 	IP_NF_NAT NF_NAT
 
 	# required for bind-mounting /dev/mqueue into containers