4741 2013-06-17 20:06:00 +0000 Netfilter NAT not configured properly/different for Kernel 3.8.4 2013-07-31 19:52:35 +0000 1 1 7 Build System, Metadata & Runtime OE-Core kernel unspecified x86 x86 RESOLVED FIXED Medium normal 1.5 M3 1 sschreiber nitin.a.kamble bruce.ashfield dvhart tom.zanussi --- --- --- oldest_to_newest 33946 0 sschreiber 2013-06-17 20:06:00 +0000 meta/recipes-kernel/linux/linux-yocto_3.8.bb invokes KERNEL_EXTRA_FEATURE netfilter.scc: compared to kernel < 3.8 iptables with nat is not working. I assume that CONFIG_NF_NAT_IP4 , CONFIG_NF_TARGET_MASQUERADE/NETMAP and REDIRECT should be set as Module in netfilter.cfg 34013 1 dvhart 2013-06-20 14:44:58 +0000 Sebastian, can you provide an example of how it is failing? Do you have a testcase? I suspect you are correct and the meta-data needs to be reviewed. Would you care to test your suggestion below and submit a patch to the linux-yocto meta branch? 34057 2 sschreiber 2013-06-22 15:44:01 +0000 Hi, as a testcase you can u can build core-image-minimal for qemux86 with linux-yocto 3.8 and feature 'netfilter'. In the running system 'modprobe ip_tables' is ok. Using iptable with nat for e.g. forwarding fails with following return message: >iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE 'iptables: Table does not exist (do you need to insmod?)' This doesn't happen with Kernel 3.4 or 3.2. I'll provide a patch here later, as soon as i tested it. 34058 3 1288 sschreiber 2013-06-23 12:02:08 +0000 Created attachment 1288 netfilter kernel configuration fix for nat table attached is a patch for meta feature that solves the problem. not sure if a patch for ip configuration is also needed. 34934 4 nitin.a.kamble 2013-07-25 23:27:23 +0000 I could reproduce the issue locally. Will try the suggested fix now. 35016 5 nitin.a.kamble 2013-07-26 21:16:38 +0000 The issue gets fixed with this extra addition to local.conf KERNEL_FEATURES_sugarbay += "features/netfilter/netfilter" Also the /proc/config.gz shows as expected. So this is not a kernel config issue, but a feature enabling matter. By default the netfilter kernel feature is not enabled for sugarbay. So the right fix would be to enable the netfilter kernel feature. Is it required to enable the netfilter feature in general for the sugarbay BSP, and other BSPs too? It is enabled for qemu BSPs. Nitin 35017 6 dvhart 2013-07-26 21:28:25 +0000 The question we have to ask is why did this work for 3.4 and stop working for 3.8? Did we intentionally drop netfilter support from the standard ktype? This strikes me as a regression if it is indeed true that netfilter was enabled by default previously. If so, the netfilter feature should probably be added to standard.scc. Can you confirm that support was indeed dropped from 3.4 to 3.8? 35018 7 nitin.a.kamble 2013-07-27 01:09:35 +0000 The problem is KERNEL_FEATURES additions in the meta-intel layer are overriding the previous value from oecore layer. # $KERNEL_FEATURES [10 operations] # _append /home/nitin/build-test-bsps/poky.git/meta/recipes-kernel/linux/linux-yocto_3.8.bb:28 # " ${KERNEL_EXTRA_FEATURES}" # _append[qemux86] /home/nitin/build-test-bsps/poky.git/meta/recipes-kernel/linux/linux-yocto_3.8.bb:29 # " cfg/sound.scc cfg/paravirt_kvm.scc" # _append[qemux86-64] /home/nitin/build-test-bsps/poky.git/meta/recipes-kernel/linux/linux-yocto_3.8.bb:30 # " cfg/sound.scc" # _append /home/nitin/build-test-bsps/poky.git/meta/recipes-kernel/linux/linux-yocto_3.8.bb:31 # " ${@bb.utils.contains("TUNE_FEATURES", "mx32", " cfg/x32.scc", "" ,d)}" # set data_smart.py:414 [finalize] # " ${KERNEL_EXTRA_FEATURES}" # set data_smart.py:414 [finalize] # " ${KERNEL_EXTRA_FEATURES} ${@bb.utils.contains("TUNE_FEATURES", "mx32", " cfg/x32.scc", "" ,d)}" # finalize ast.py:333 [finalize] # "was: ${KERNEL_EXTRA_FEATURES} ${@bb.utils.contains("TUNE_FEATURES", "mx32", " cfg/x32.scc", "" ,d)}" # override[sugarbay]:_append /home/nitin/build-test-bsps/poky.git/../meta-intel.git/meta-sugarbay/recipes-kernel/linux/linux-yocto_3.8.bbappend:7 # " features/usb/usb-uvcvideo features/media/v4l2" # override[sugarbay]:set data_smart.py:414 [finalize] # " features/usb/usb-uvcvideo features/media/v4l2" # finalize override[sugarbay]: # " features/usb/usb-uvcvideo features/media/v4l2" # computed: # " features/usb/usb-uvcvideo features/media/v4l2" KERNEL_FEATURES="features/usb/usb-uvcvideo features/media/v4l2" 35019 8 nitin.a.kamble 2013-07-27 01:49:50 +0000 It was an unintentional disabling of kernel features for bunch of BSPs. I have fixes for all these affected BSPs now. I will send the change for review shortly. 35130 9 nitin.a.kamble 2013-07-29 18:30:02 +0000 a fix for this is sent to meta-intel mailing list. 35236 10 nitin.a.kamble 2013-07-31 19:52:35 +0000 Fixed in meta-intel: commit 6d074cae27420c9148aab66fda535f89cb6b7ca0 Author: Nitin A Kamble <nitin.a.kamble@intel.com> Date: Fri Jul 26 18:31:33 2013 -0700 fri2: correct the KERNEL_FEATURE variable name The var KERNEL_FEATURES_sugarbay_append overrides the previous value defined in the oecore layer, and the var KERNEL_FEATURES_append_sugarbay preserves the old value and extends it. This change avoids unintentional disabling of some KERNEL_FEATURES such as netfilter. Signed-off-by: Nitin A Kamble <nitin.a.kamble@intel.com> Signed-off-by: Tom Zanussi <tom.zanussi@linux.intel.com> commit 84fdca145a19d4715e2d743dd7b45c20e8ed9691 Author: Nitin A Kamble <nitin.a.kamble@intel.com> Date: Fri Jul 26 18:30:51 2013 -0700 emenlow: correct the KERNEL_FEATURE variable name The var KERNEL_FEATURES_sugarbay_append overrides the previous value defined in the oecore layer, and the var KERNEL_FEATURES_append_sugarbay preserves the old value and extends it. This change avoids unintentional disabling of some KERNEL_FEATURES such as netfilter. Signed-off-by: Nitin A Kamble <nitin.a.kamble@intel.com> Signed-off-by: Tom Zanussi <tom.zanussi@linux.intel.com> commit 75ac6a2a98fe76653dfb55da5c5afd592ec18acb Author: Nitin A Kamble <nitin.a.kamble@intel.com> Date: Fri Jul 26 18:30:04 2013 -0700 crownbay: correct the KERNEL_FEATURE variable name The var KERNEL_FEATURES_sugarbay_append overrides the previous value defined in the oecore layer, and the var KERNEL_FEATURES_append_sugarbay preserves the old value and extends it. This change avoids unintentional disabling of some KERNEL_FEATURES such as netfilter. Signed-off-by: Nitin A Kamble <nitin.a.kamble@intel.com> Signed-off-by: Tom Zanussi <tom.zanussi@linux.intel.com> commit 2173e8f778a381012028ee79d5dc3351606a9bdb Author: Nitin A Kamble <nitin.a.kamble@intel.com> Date: Thu Jun 27 13:33:51 2013 -0700 sugarbay: correct the KERNEL_FEATURE variable name The var KERNEL_FEATURES_sugarbay_append overrides the previous value defined in the oecore layer, and the var KERNEL_FEATURES_append_sugarbay preserves the old value and extends it. This change avoids unintentional disabling of some KERNEL_FEATURES such as netfilter. Fixes bug: [YOCTO #4741] Signed-off-by: Nitin A Kamble <nitin.a.kamble@intel.com> Signed-off-by: Tom Zanussi <tom.zanussi@linux.intel.com> 1288 2013-06-23 12:02:08 +0000 2013-06-23 12:02:08 +0000 netfilter kernel configuration fix for nat table netfilter.patch text/plain 894 sschreiber LS0tIGxpbnV4L21ldGEvY2ZnL2tlcm5lbC1jYWNoZS9mZWF0dXJlcy9uZXRmaWx0ZXIvbmV0Zmls dGVyLmNmZwkyMDEzLTA2LTIyIDE5OjU5OjA0LjY0MTQ5NTk4MCArMDIwMAorKysgbGludXgvbWV0 YS9jZmcva2VybmVsLWNhY2hlL2ZlYXR1cmVzL25ldGZpbHRlci9uZXRmaWx0ZXIuY2ZnCTIwMTMt MDYtMjIgMjE6Mjc6MTYuNzgxMzYwMzYyICswMjAwCkBAIC0zMSw5ICszMSwxMSBAQCBDT05GSUdf TkVURklMVEVSX1hUX1RBUkdFVF9DT05OTUFSSz1tCiBDT05GSUdfTkVURklMVEVSX1hUX1RBUkdF VF9EU0NQPW0KIENPTkZJR19ORVRGSUxURVJfWFRfVEFSR0VUX0hMPW0KIENPTkZJR19ORVRGSUxU RVJfWFRfVEFSR0VUX01BUks9bQorQ09ORklHX05FVEZJTFRFUl9YVF9UQVJHRVRfTkVUTUFQPW0K IENPTkZJR19ORVRGSUxURVJfWFRfVEFSR0VUX05GTE9HPW0KIENPTkZJR19ORVRGSUxURVJfWFRf VEFSR0VUX05GUVVFVUU9bQogQ09ORklHX05FVEZJTFRFUl9YVF9UQVJHRVRfTk9UUkFDSz1tCitD T05GSUdfTkVURklMVEVSX1hUX1RBUkdFVF9SRURJUkVDVD1tCiBDT05GSUdfTkVURklMVEVSX1hU X1RBUkdFVF9UUkFDRT1tCiBDT05GSUdfTkVURklMVEVSX1hUX1RBUkdFVF9UQ1BNU1M9bQogQ09O RklHX05FVEZJTFRFUl9YVF9NQVRDSF9DT01NRU5UPW0KQEAgLTc5LDYgKzgxLDcgQEAgQ09ORklH X0lQX05GX1RBUkdFVF9SRUpFQ1Q9bQogQ09ORklHX0lQX05GX1RBUkdFVF9VTE9HPW0KIENPTkZJ R19ORl9OQVQ9bQogQ09ORklHX05GX05BVF9ORUVERUQ9eQorQ09ORklHX05GX05BVF9JUFY0PW0K IENPTkZJR19JUF9ORl9UQVJHRVRfTUFTUVVFUkFERT1tCiBDT05GSUdfSVBfTkZfVEFSR0VUX05F VE1BUD1tCiBDT05GSUdfSVBfTkZfVEFSR0VUX1JFRElSRUNUPW0K