Merge pull request #2946 from flatcar/tormath1/nftables

tormath1 · web-flow · commit b3e8dfcd13fe · 2025-05-22T14:34:53.000+02:00
net-firewall/nftables: provide nftables systemd units
diff --git a/changelog/changes/2025-05-21-nftables.md b/changelog/changes/2025-05-21-nftables.md
@@ -0,0 +1 @@
+- Added `nftables-load.service` and `nftables-store.service` services to load/store rules from/in `/var/lib/nftables/rules-save` ([Flatcar#900](https://github.com/flatcar/Flatcar/issues/900))
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-firewall/nftables b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/net-firewall/nftables
diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
@@ -108,6 +108,7 @@ sys-libs/ldb -lmdb -python
 
 # Enable nftables backend for the iptables instead of legacy backend
 net-firewall/iptables nftables
+net-firewall/nftables json
 
 # Install `perl` with a minimal set of dependencies
 dev-lang/perl minimal

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	+- Added `nftables-load.service` and `nftables-store.service` services to load/store rules from/in `/var/lib/nftables/rules-save` ([Flatcar#900](https://github.com/flatcar/Flatcar/issues/900))