* Re: [meta-virtualization] [PATCH] k3s: Add additional required kernel modules [not found] <16B40ADAB1425D6F.25986@lists.yoctoproject.org> @ 2021-11-03 13:04 ` Richard Neill 2021-11-03 14:06 ` Bruce Ashfield 0 siblings, 1 reply; 3+ messages in thread From: Richard Neill @ 2021-11-03 13:04 UTC (permalink / raw) To: meta-virtualization; +Cc: nd [-- Attachment #1: Type: text/plain, Size: 2553 bytes --] Hi, If possible, could this patch also be added to the honister branch? Thanks, Richard ________________________________ From: meta-virtualization@lists.yoctoproject.org <meta-virtualization@lists.yoctoproject.org> on behalf of Richard Neill via lists.yoctoproject.org <richard.neill=arm.com@lists.yoctoproject.org> Sent: Wednesday, November 3, 2021 1:01 PM To: meta-virtualization@lists.yoctoproject.org <meta-virtualization@lists.yoctoproject.org> Cc: nd <nd@arm.com> Subject: [meta-virtualization] [PATCH] k3s: Add additional required kernel modules Adds the following kernel modules for k3s: * xt-physdev * xt-nflog * xt-limit * nfnetlink-log Without them, the k3s network-policy-controller reports failures in the log related to iptables-restore. Signed-off-by: Richard Neill <richard.neill@arm.com> --- recipes-containers/k3s/k3s_git.bb | 4 ++++ recipes-kernel/linux/linux-yocto/kubernetes.cfg | 8 ++++++-- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/recipes-containers/k3s/k3s_git.bb b/recipes-containers/k3s/k3s_git.bb index e341ad7..4e1cf64 100644 --- a/recipes-containers/k3s/k3s_git.bb +++ b/recipes-containers/k3s/k3s_git.bb @@ -96,6 +96,10 @@ RRECOMMENDS:${PN} = "\ kernel-module-vxlan \ kernel-module-xt-masquerade \ kernel-module-xt-statistic \ + kernel-module-xt-physdev \ + kernel-module-xt-nflog \ + kernel-module-xt-limit \ + kernel-module-nfnetlink-log \ " RCONFLICTS:${PN} = "kubectl" diff --git a/recipes-kernel/linux/linux-yocto/kubernetes.cfg b/recipes-kernel/linux/linux-yocto/kubernetes.cfg index 2d4e1f5..84fa8c5 100644 --- a/recipes-kernel/linux/linux-yocto/kubernetes.cfg +++ b/recipes-kernel/linux/linux-yocto/kubernetes.cfg @@ -13,9 +13,14 @@ CONFIG_IP_VS_NFCT=y CONFIG_IP_VS_PROTO_TCP=y CONFIG_IP_VS_PROTO_UDP=y CONFIG_IP_VS_RR=m +CONFIG_NETFILTER_NETLINK_LOG=m +CONFIG_NETFILTER_XT_CONNMARK=m CONFIG_NETFILTER_XT_MATCH_COMMENT=m +CONFIG_NETFILTER_XT_MATCH_LIMIT=m CONFIG_NETFILTER_XT_MATCH_MARK=m -CONFIG_NETFILTER_XT_CONNMARK=m +CONFIG_NETFILTER_XT_MATCH_PHYSDEV=m +CONFIG_NETFILTER_XT_TARGET_NFLOG=m +CONFIG_NETFILTER_XT_TARGET_REDIRECT=m CONFIG_NAMESPACES=y CONFIG_NET_NS=y CONFIG_PID_NS=y @@ -32,4 +37,3 @@ CONFIG_MEMCG=y CONFIG_INET=y CONFIG_EXT4_FS=y CONFIG_PROC_FS=y -CONFIG_NETFILTER_XT_TARGET_REDIRECT=m -- 2.25.1 [-- Attachment #2: Type: text/html, Size: 5091 bytes --] ^ permalink raw reply related [flat|nested] 3+ messages in thread
* Re: [meta-virtualization] [PATCH] k3s: Add additional required kernel modules 2021-11-03 13:04 ` [meta-virtualization] [PATCH] k3s: Add additional required kernel modules Richard Neill @ 2021-11-03 14:06 ` Bruce Ashfield 0 siblings, 0 replies; 3+ messages in thread From: Bruce Ashfield @ 2021-11-03 14:06 UTC (permalink / raw) To: Richard Neill; +Cc: meta-virtualization, nd [-- Attachment #1: Type: text/plain, Size: 3219 bytes --] On Wed, Nov 3, 2021 at 9:05 AM Richard Neill <richard.neill@arm.com> wrote: > Hi, > > If possible, could this patch also be added to the honister branch? > It's just configuration tweak, so I can do that. I have some other k3s changes in flight (version bumps, packaging and unifying of configuration into the main config repository), but I've added these and expect to push them in a few days. Bruce > > Thanks, > Richard > ------------------------------ > *From:* meta-virtualization@lists.yoctoproject.org < > meta-virtualization@lists.yoctoproject.org> on behalf of Richard Neill > via lists.yoctoproject.org <richard.neill=arm.com@lists.yoctoproject.org> > *Sent:* Wednesday, November 3, 2021 1:01 PM > *To:* meta-virtualization@lists.yoctoproject.org < > meta-virtualization@lists.yoctoproject.org> > *Cc:* nd <nd@arm.com> > *Subject:* [meta-virtualization] [PATCH] k3s: Add additional required > kernel modules > > Adds the following kernel modules for k3s: > > * xt-physdev > * xt-nflog > * xt-limit > * nfnetlink-log > > Without them, the k3s network-policy-controller reports failures in the log > related to iptables-restore. > > Signed-off-by: Richard Neill <richard.neill@arm.com> > --- > recipes-containers/k3s/k3s_git.bb | 4 ++++ > recipes-kernel/linux/linux-yocto/kubernetes.cfg | 8 ++++++-- > 2 files changed, 10 insertions(+), 2 deletions(-) > > diff --git a/recipes-containers/k3s/k3s_git.bb b/recipes-containers/k3s/ > k3s_git.bb > index e341ad7..4e1cf64 100644 > --- a/recipes-containers/k3s/k3s_git.bb > +++ b/recipes-containers/k3s/k3s_git.bb > @@ -96,6 +96,10 @@ RRECOMMENDS:${PN} = "\ > kernel-module-vxlan \ > kernel-module-xt-masquerade \ > kernel-module-xt-statistic \ > + kernel-module-xt-physdev \ > + kernel-module-xt-nflog \ > + kernel-module-xt-limit \ > + kernel-module-nfnetlink-log \ > " > > RCONFLICTS:${PN} = "kubectl" > diff --git a/recipes-kernel/linux/linux-yocto/kubernetes.cfg > b/recipes-kernel/linux/linux-yocto/kubernetes.cfg > index 2d4e1f5..84fa8c5 100644 > --- a/recipes-kernel/linux/linux-yocto/kubernetes.cfg > +++ b/recipes-kernel/linux/linux-yocto/kubernetes.cfg > @@ -13,9 +13,14 @@ CONFIG_IP_VS_NFCT=y > CONFIG_IP_VS_PROTO_TCP=y > CONFIG_IP_VS_PROTO_UDP=y > CONFIG_IP_VS_RR=m > +CONFIG_NETFILTER_NETLINK_LOG=m > +CONFIG_NETFILTER_XT_CONNMARK=m > CONFIG_NETFILTER_XT_MATCH_COMMENT=m > +CONFIG_NETFILTER_XT_MATCH_LIMIT=m > CONFIG_NETFILTER_XT_MATCH_MARK=m > -CONFIG_NETFILTER_XT_CONNMARK=m > +CONFIG_NETFILTER_XT_MATCH_PHYSDEV=m > +CONFIG_NETFILTER_XT_TARGET_NFLOG=m > +CONFIG_NETFILTER_XT_TARGET_REDIRECT=m > CONFIG_NAMESPACES=y > CONFIG_NET_NS=y > CONFIG_PID_NS=y > @@ -32,4 +37,3 @@ CONFIG_MEMCG=y > CONFIG_INET=y > CONFIG_EXT4_FS=y > CONFIG_PROC_FS=y > -CONFIG_NETFILTER_XT_TARGET_REDIRECT=m > -- > 2.25.1 > > > > > -- - Thou shalt not follow the NULL pointer, for chaos and madness await thee at its end - "Use the force Harry" - Gandalf, Star Trek II [-- Attachment #2: Type: text/html, Size: 6298 bytes --] ^ permalink raw reply [flat|nested] 3+ messages in thread
* [meta-virtualization] [PATCH] k3s: Add additional required kernel modules @ 2021-11-03 13:01 Richard Neill 0 siblings, 0 replies; 3+ messages in thread From: Richard Neill @ 2021-11-03 13:01 UTC (permalink / raw) To: meta-virtualization; +Cc: nd Adds the following kernel modules for k3s: * xt-physdev * xt-nflog * xt-limit * nfnetlink-log Without them, the k3s network-policy-controller reports failures in the log related to iptables-restore. Signed-off-by: Richard Neill <richard.neill@arm.com> --- recipes-containers/k3s/k3s_git.bb | 4 ++++ recipes-kernel/linux/linux-yocto/kubernetes.cfg | 8 ++++++-- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/recipes-containers/k3s/k3s_git.bb b/recipes-containers/k3s/k3s_git.bb index e341ad7..4e1cf64 100644 --- a/recipes-containers/k3s/k3s_git.bb +++ b/recipes-containers/k3s/k3s_git.bb @@ -96,6 +96,10 @@ RRECOMMENDS:${PN} = "\ kernel-module-vxlan \ kernel-module-xt-masquerade \ kernel-module-xt-statistic \ + kernel-module-xt-physdev \ + kernel-module-xt-nflog \ + kernel-module-xt-limit \ + kernel-module-nfnetlink-log \ " RCONFLICTS:${PN} = "kubectl" diff --git a/recipes-kernel/linux/linux-yocto/kubernetes.cfg b/recipes-kernel/linux/linux-yocto/kubernetes.cfg index 2d4e1f5..84fa8c5 100644 --- a/recipes-kernel/linux/linux-yocto/kubernetes.cfg +++ b/recipes-kernel/linux/linux-yocto/kubernetes.cfg @@ -13,9 +13,14 @@ CONFIG_IP_VS_NFCT=y CONFIG_IP_VS_PROTO_TCP=y CONFIG_IP_VS_PROTO_UDP=y CONFIG_IP_VS_RR=m +CONFIG_NETFILTER_NETLINK_LOG=m +CONFIG_NETFILTER_XT_CONNMARK=m CONFIG_NETFILTER_XT_MATCH_COMMENT=m +CONFIG_NETFILTER_XT_MATCH_LIMIT=m CONFIG_NETFILTER_XT_MATCH_MARK=m -CONFIG_NETFILTER_XT_CONNMARK=m +CONFIG_NETFILTER_XT_MATCH_PHYSDEV=m +CONFIG_NETFILTER_XT_TARGET_NFLOG=m +CONFIG_NETFILTER_XT_TARGET_REDIRECT=m CONFIG_NAMESPACES=y CONFIG_NET_NS=y CONFIG_PID_NS=y @@ -32,4 +37,3 @@ CONFIG_MEMCG=y CONFIG_INET=y CONFIG_EXT4_FS=y CONFIG_PROC_FS=y -CONFIG_NETFILTER_XT_TARGET_REDIRECT=m -- 2.25.1 ^ permalink raw reply related [flat|nested] 3+ messages in thread
end of thread, other threads:[~2021-11-03 14:07 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
[not found] <16B40ADAB1425D6F.25986@lists.yoctoproject.org>
2021-11-03 13:04 ` [meta-virtualization] [PATCH] k3s: Add additional required kernel modules Richard Neill
2021-11-03 14:06 ` Bruce Ashfield
2021-11-03 13:01 Richard Neill
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox; as well as URLs for NNTP newsgroup(s).