Skip to content

Commit 2a473a7

Browse files
committed
Add CONFIG_NETFILTER_XT_MATCH_COMMENT to check
It seems that newer podman versions need the kernel comment flag too. By podman run, iptables using -m comment in the iptables-command to add the corresponding network rules. Signed-off-by: Christian Happ <[email protected]>
1 parent cbd852b commit 2a473a7

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

script/check-config.sh

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -236,7 +236,7 @@ flags=(
236236
KEYS
237237
VETH BRIDGE BRIDGE_NETFILTER
238238
IP_NF_FILTER IP_NF_TARGET_MASQUERADE
239-
NETFILTER_XT_MATCH_{ADDRTYPE,CONNTRACK,IPVS}
239+
NETFILTER_XT_MATCH_{ADDRTYPE,COMMENT,CONNTRACK,IPVS}
240240
IP_NF_NAT NF_NAT
241241

242242
# required for bind-mounting /dev/mqueue into containers

0 commit comments

Comments
 (0)