chimeraos icon indicating copy to clipboard operation
chimeraos copied to clipboard

Use nftables instead of the deprecated iptables

Open NeroReflex opened this issue 1 year ago • 3 comments

As per title: use iptables-nft instead of the deprecated iptables.

See https://gitlab.archlinux.org/archlinux/packaging/packages/iptables/-/issues/1 for more details.

The deprecated iptables is not completely suitable for docker or podman as stated in that page.

The reason this is not in PACKAGES is the following error will appear:

error: unresolvable package conflicts detected
:: iptables-nft-1:1.8.10-1 and iptables-1:1.8.10-1 are in conflict. Remove iptables? [y/N] 
:: iptables-nft-1:1.8.10-1 and iptables-1:1.8.10-1 are in conflict
error: failed to prepare transaction (conflicting dependencies)

NeroReflex avatar Apr 11 '24 16:04 NeroReflex

LGTM

pastaq avatar Apr 13 '24 01:04 pastaq

@pastaq I spotted a problem: it forces the pacman database to be regenerated. That has to be moved to solve this, or the install must be moved early in the build process....

NeroReflex avatar Apr 14 '24 01:04 NeroReflex

The reason this is not in PACKAGES is the following error will appear:

error: unresolvable package conflicts detected
:: iptables-nft-1:1.8.10-1 and iptables-1:1.8.10-1 are in conflict. Remove iptables? [y/N] 
:: iptables-nft-1:1.8.10-1 and iptables-1:1.8.10-1 are in conflict
error: failed to prepare transaction (conflicting dependencies)

The base meta package has iptables as a dependency and it doesn't reflect iptables-nft as a suitable replacement for some reason.

pastaq avatar Apr 22 '24 02:04 pastaq

The reason this is not in PACKAGES is the following error will appear:

error: unresolvable package conflicts detected
:: iptables-nft-1:1.8.10-1 and iptables-1:1.8.10-1 are in conflict. Remove iptables? [y/N] 
:: iptables-nft-1:1.8.10-1 and iptables-1:1.8.10-1 are in conflict
error: failed to prepare transaction (conflicting dependencies)

The base meta package has iptables as a dependency and it doesn't reflect iptables-nft as a suitable replacement for some reason.

The reason seems to be either lack of care or lack of time. I have solved the aforementioned error with the second commit.

NeroReflex avatar Jun 17 '24 17:06 NeroReflex

So this will install without errors now as is?

ruineka avatar Jun 21 '24 14:06 ruineka

So this will install without errors now as is?

Yes and it has been working with no regressions on my ally for about a month now

NeroReflex avatar Jun 21 '24 14:06 NeroReflex