diff --git a/changelog/changes/2025-05-21-nftables.md b/changelog/changes/2025-05-21-nftables.md new file mode 100644 index 0000000000..841cf11930 --- /dev/null +++ b/changelog/changes/2025-05-21-nftables.md @@ -0,0 +1 @@ +- Added `nftables-load.service` and `nftables-store.service` services to load/store rules from/in `/var/lib/nftables/rules-save` ([Flatcar#900](https://github.com/flatcar/Flatcar/issues/900)) diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-firewall/nftables b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-firewall/nftables deleted file mode 100644 index f8e35864ca..0000000000 --- a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-firewall/nftables +++ /dev/null @@ -1,5 +0,0 @@ -nftables_install_mask=" /usr/libexec/nftables /var/lib/nftables /usr/lib/systemd/system/nftables-load.service /usr/lib/systemd/system/nftables-store.service " - -INSTALL_MASK+=${nftables_install_mask} -PKG_INSTALL_MASK+=${nftables_install_mask} -unset nftables_install_mask diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use index 3bc3c99d6d..4ffcf1389e 100644 --- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use +++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use @@ -108,6 +108,7 @@ sys-libs/ldb -lmdb -python # Enable nftables backend for the iptables instead of legacy backend net-firewall/iptables nftables +net-firewall/nftables json # Install `perl` with a minimal set of dependencies dev-lang/perl minimal