From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-lj1-f169.google.com (mail-lj1-f169.google.com [209.85.208.169]) by mx.groups.io with SMTP id smtpd.web09.8079.1635948429187396522 for ; Wed, 03 Nov 2021 07:07:09 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20210112 header.b=gSgmkSnr; spf=pass (domain: gmail.com, ip: 209.85.208.169, mailfrom: bruce.ashfield@gmail.com) Received: by mail-lj1-f169.google.com with SMTP id e2so3983108ljg.13 for ; Wed, 03 Nov 2021 07:07:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=S5yE6i+mlUBqLMZbf5++Y21dAnkmJuS4kkAiNkH1Azc=; b=gSgmkSnrPdj93rxyhW+v/s3ykV3sj/YxoJyjklwwrJHtRLmtme19Kc4ROQLA1StqKn /4wG36WYNkXXlZDzkwTcNpT9HKQOH808Oc6EMfVSkSopnJrzXql2EdJD1tnLo7qC0S/y DCaKLuUrhL6tInnfaThKh92ZXNfT8FtTmGqjrbJpga8lU03b+6w+Lw7xhjq6UOa9DGR/ A5yh2qiXRTV9cngty0deEsJEVHWI28Tovl4/PzkW2EC5N3c51tbB31h0yxbXjw+VdqOa TmqzKw16NXyKx2Mykv3E+s6ASP/ep3vIN3KNuC4NFnOesEHXdE3A1IKHCQBoWdINqfWP sTVw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=S5yE6i+mlUBqLMZbf5++Y21dAnkmJuS4kkAiNkH1Azc=; b=O7edsckj0oQncyL2GTw2a82D5ndKkhlcRzhpNnp2aVBsVoxNKpO0Hg4sTXHYczlw9r 1Gi1mavEeWSNulf0mT1q8Rp3iMRAFLKcODTCllCbR3CB80wgHS60kNYMIXjxRmqcbE1U Qh69vv4nyGobhHU8hmzfMdZafVdxz2E+CqlXiii9QVkzODSxovaCgABVFl/POBgE4J1l 95kz4nOJAsf7JqLaV78uVrApd2uS6EfSlo4Use/EWo7RgLbsj+GLGsWz/XObjbTcRwMZ 1brMhCXypx/HR6QlqdpK3rPhMGHthr/BTXlOBYKPQLAyXZWLtzk7V6fbvoydgDq90+Ox xduw== X-Gm-Message-State: AOAM532hxXkwgkQIhQgTbd46bWFWkH5EUPzYAJkVE0qG3IotvnPjntY7 xGfys0Hew9n9OcpcSODIbS8LBB4J9RkBDbo3VMs7YqMaB/c= X-Google-Smtp-Source: ABdhPJzFX2cU0eOMJzOLoa7RNNmWtViZF+BwpDDNMsYbOqdBGwGOC6hBM0LIdFi+JlvwKbLSjKxIQOHGXmFjcKtQK60= X-Received: by 2002:a05:651c:b29:: with SMTP id b41mr3725513ljr.38.1635948425783; Wed, 03 Nov 2021 07:07:05 -0700 (PDT) MIME-Version: 1.0 References: <16B40ADAB1425D6F.25986@lists.yoctoproject.org> In-Reply-To: From: "Bruce Ashfield" Date: Wed, 3 Nov 2021 10:06:54 -0400 Message-ID: Subject: Re: [meta-virtualization] [PATCH] k3s: Add additional required kernel modules To: Richard Neill Cc: "meta-virtualization@lists.yoctoproject.org" , nd Content-Type: multipart/alternative; boundary="000000000000ca2cdc05cfe2ecab" --000000000000ca2cdc05cfe2ecab Content-Type: text/plain; charset="UTF-8" On Wed, Nov 3, 2021 at 9:05 AM Richard Neill wrote: > Hi, > > If possible, could this patch also be added to the honister branch? > It's just configuration tweak, so I can do that. I have some other k3s changes in flight (version bumps, packaging and unifying of configuration into the main config repository), but I've added these and expect to push them in a few days. Bruce > > Thanks, > Richard > ------------------------------ > *From:* meta-virtualization@lists.yoctoproject.org < > meta-virtualization@lists.yoctoproject.org> on behalf of Richard Neill > via lists.yoctoproject.org > *Sent:* Wednesday, November 3, 2021 1:01 PM > *To:* meta-virtualization@lists.yoctoproject.org < > meta-virtualization@lists.yoctoproject.org> > *Cc:* nd > *Subject:* [meta-virtualization] [PATCH] k3s: Add additional required > kernel modules > > Adds the following kernel modules for k3s: > > * xt-physdev > * xt-nflog > * xt-limit > * nfnetlink-log > > Without them, the k3s network-policy-controller reports failures in the log > related to iptables-restore. > > Signed-off-by: Richard Neill > --- > recipes-containers/k3s/k3s_git.bb | 4 ++++ > recipes-kernel/linux/linux-yocto/kubernetes.cfg | 8 ++++++-- > 2 files changed, 10 insertions(+), 2 deletions(-) > > diff --git a/recipes-containers/k3s/k3s_git.bb b/recipes-containers/k3s/ > k3s_git.bb > index e341ad7..4e1cf64 100644 > --- a/recipes-containers/k3s/k3s_git.bb > +++ b/recipes-containers/k3s/k3s_git.bb > @@ -96,6 +96,10 @@ RRECOMMENDS:${PN} = "\ > kernel-module-vxlan \ > kernel-module-xt-masquerade \ > kernel-module-xt-statistic \ > + kernel-module-xt-physdev \ > + kernel-module-xt-nflog \ > + kernel-module-xt-limit \ > + kernel-module-nfnetlink-log \ > " > > RCONFLICTS:${PN} = "kubectl" > diff --git a/recipes-kernel/linux/linux-yocto/kubernetes.cfg > b/recipes-kernel/linux/linux-yocto/kubernetes.cfg > index 2d4e1f5..84fa8c5 100644 > --- a/recipes-kernel/linux/linux-yocto/kubernetes.cfg > +++ b/recipes-kernel/linux/linux-yocto/kubernetes.cfg > @@ -13,9 +13,14 @@ CONFIG_IP_VS_NFCT=y > CONFIG_IP_VS_PROTO_TCP=y > CONFIG_IP_VS_PROTO_UDP=y > CONFIG_IP_VS_RR=m > +CONFIG_NETFILTER_NETLINK_LOG=m > +CONFIG_NETFILTER_XT_CONNMARK=m > CONFIG_NETFILTER_XT_MATCH_COMMENT=m > +CONFIG_NETFILTER_XT_MATCH_LIMIT=m > CONFIG_NETFILTER_XT_MATCH_MARK=m > -CONFIG_NETFILTER_XT_CONNMARK=m > +CONFIG_NETFILTER_XT_MATCH_PHYSDEV=m > +CONFIG_NETFILTER_XT_TARGET_NFLOG=m > +CONFIG_NETFILTER_XT_TARGET_REDIRECT=m > CONFIG_NAMESPACES=y > CONFIG_NET_NS=y > CONFIG_PID_NS=y > @@ -32,4 +37,3 @@ CONFIG_MEMCG=y > CONFIG_INET=y > CONFIG_EXT4_FS=y > CONFIG_PROC_FS=y > -CONFIG_NETFILTER_XT_TARGET_REDIRECT=m > -- > 2.25.1 > > > > > -- - Thou shalt not follow the NULL pointer, for chaos and madness await thee at its end - "Use the force Harry" - Gandalf, Star Trek II --000000000000ca2cdc05cfe2ecab Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


On Wed, Nov 3, 2021 at 9:05 AM Richard Neill <richard.neill@arm.com> wrote:=
Hi,

If possible, could this patch also be added to the honister branch?

It's just=C2=A0 configuration tweak, so I can do that.=

I have some other k3s ch= anges in flight (version bumps, packaging and unifying of configuration int= o the main config repository), but I've added these and expect to push = them in a few days.

Bruce=

=C2=A0

Thanks,
Richard
From= : meta-virtualization@lists.yoctoproject.org <meta-vi= rtualization@lists.yoctoproject.org> on behalf of Richard Neill via = lists.yoctoproj= ect.org <richard.neill=3Darm.com@lists.yoctoproject.org>
Sent: Wednesday, November 3, 2021 1:01 PM
To: meta-virtualization@lists.yoctoproject.org <me= ta-virtualization@lists.yoctoproject.org>
Cc: nd <nd@arm.co= m>
Subject: [meta-virtualization] [PATCH] k3s: Add additional required = kernel modules
=C2=A0
Adds the following kernel modules for k3s:

* xt-physdev
* xt-nflog
* xt-limit
* nfnetlink-log

Without them, the k3s network-policy-controller reports failures in the log=
related to iptables-restore.

Signed-off-by: Richard Neill <richard.neill@arm.com>
---
=C2=A0recipes-containers/k3s/k3s_git.bb=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0 | 4 ++++
=C2=A0recipes-kernel/linux/linux-yocto/kubernetes.cfg | 8 ++++++--
=C2=A02 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/recipes-containers/k3s/k3s_git.bb b/recipes-containers/k3s/k3s_git.bb
index e341ad7..4e1cf64 100644
--- a/recipes-containers/k3s/k3s_git.bb
+++ b/recipes-containers/k3s/k3s_git.bb
@@ -96,6 +96,10 @@ RRECOMMENDS:${PN} =3D "\
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 kernel-module-vxlan \ =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 kernel-module-xt-masque= rade \
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 kernel-module-xt-statis= tic \
+=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 kernel-module-xt-physdev \=
+=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 kernel-module-xt-nflog \ +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 kernel-module-xt-limit \ +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 kernel-module-nfnetlink-lo= g \
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 "

=C2=A0RCONFLICTS:${PN} =3D "kubectl"
diff --git a/recipes-kernel/linux/linux-yocto/kubernetes.cfg b/recipes-kern= el/linux/linux-yocto/kubernetes.cfg
index 2d4e1f5..84fa8c5 100644
--- a/recipes-kernel/linux/linux-yocto/kubernetes.cfg
+++ b/recipes-kernel/linux/linux-yocto/kubernetes.cfg
@@ -13,9 +13,14 @@ CONFIG_IP_VS_NFCT=3Dy
=C2=A0CONFIG_IP_VS_PROTO_TCP=3Dy
=C2=A0CONFIG_IP_VS_PROTO_UDP=3Dy
=C2=A0CONFIG_IP_VS_RR=3Dm
+CONFIG_NETFILTER_NETLINK_LOG=3Dm
+CONFIG_NETFILTER_XT_CONNMARK=3Dm
=C2=A0CONFIG_NETFILTER_XT_MATCH_COMMENT=3Dm
+CONFIG_NETFILTER_XT_MATCH_LIMIT=3Dm
=C2=A0CONFIG_NETFILTER_XT_MATCH_MARK=3Dm
-CONFIG_NETFILTER_XT_CONNMARK=3Dm
+CONFIG_NETFILTER_XT_MATCH_PHYSDEV=3Dm
+CONFIG_NETFILTER_XT_TARGET_NFLOG=3Dm
+CONFIG_NETFILTER_XT_TARGET_REDIRECT=3Dm
=C2=A0CONFIG_NAMESPACES=3Dy
=C2=A0CONFIG_NET_NS=3Dy
=C2=A0CONFIG_PID_NS=3Dy
@@ -32,4 +37,3 @@ CONFIG_MEMCG=3Dy
=C2=A0CONFIG_INET=3Dy
=C2=A0CONFIG_EXT4_FS=3Dy
=C2=A0CONFIG_PROC_FS=3Dy
-CONFIG_NETFILTER_XT_TARGET_REDIRECT=3Dm
--
2.25.1






--
- Thou shalt not follow the NULL pointer, for ch= aos and madness await thee at its end
- "Use the force Harry" = - Gandalf, Star Trek II

--000000000000ca2cdc05cfe2ecab--