[Buildroot] [PATCH] package/iptables: backport fix for interface comparisons in `-C` commands

Thomas Petazzoni thomas.petazzoni at bootlin.com
Sat Apr 19 14:10:10 UTC 2025


On Mon, 14 Apr 2025 14:06:52 +0200
Jan Čermák <sairon at sairon.cz> wrote:

> Since iptables v1.8.11, `iptables -C` commands return unexpected zero status
> even for cases when the rules don't exist. This breaks e.g. standard Docker
> operation, where checking for existing rules is used extensively when creating
> networks.
> 
> The patch fixing the behavior is available upstream - apply it to v1.8.11
> before a newer version is available.
> 
> Signed-off-by: Jan Čermák <sairon at sairon.cz>
> ---
>  ...-interface-comparisons-in-C-commands.patch | 175 ++++++++++++++++++
>  1 file changed, 175 insertions(+)
>  create mode 100644 package/iptables/0001-nft-fix-interface-comparisons-in-C-commands.patch

Applied to master, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com


More information about the buildroot mailing list