diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-10-07-kernel-enable-bridge-conntrack.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-10-07-kernel-enable-bridge-conntrack.md new file mode 100644 index 0000000000..722108249b --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-10-07-kernel-enable-bridge-conntrack.md @@ -0,0 +1 @@ +- Added `CONFIG_NF_CONNTRACK_BRIDGE` (for nf_conntrack_bridge) and `CONFIG_NFT_BRIDGE_META` (for nft_meta_bridge) to the kernel config to allow using conntrack rules for bridges in nftables and to match on bridge interface names ([coreos-overlay#2207](https://github.com/flatcar/coreos-overlay/pull/2207)) diff --git a/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-modules/files/commonconfig-5.15 b/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-modules/files/commonconfig-5.15 index a732060e0a..8d56fa17dd 100644 --- a/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-modules/files/commonconfig-5.15 +++ b/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-modules/files/commonconfig-5.15 @@ -650,6 +650,7 @@ CONFIG_NFS_V3_ACL=y CONFIG_NFS_V4=m CONFIG_NFS_V4_1=y CONFIG_NFS_V4_2=y +CONFIG_NFT_BRIDGE_META=m CONFIG_NFT_BRIDGE_REJECT=m CONFIG_NFT_COMPAT=m CONFIG_NFT_COUNTER=m @@ -676,6 +677,7 @@ CONFIG_NFT_REDIR=m CONFIG_NFT_REJECT=m CONFIG_NF_CONNTRACK=m CONFIG_NF_CONNTRACK_AMANDA=m +CONFIG_NF_CONNTRACK_BRIDGE=m CONFIG_NF_CONNTRACK_EVENTS=y CONFIG_NF_CONNTRACK_FTP=m CONFIG_NF_CONNTRACK_H323=m