I built core-image-full-cmdline with poky 6.0.1 as distro and qemux86-64 as machine. After booting and logging in as root, running the simple command "iptables -A INPUT -i lo -j ACCEPT" fails with error "modprobe: FATAL: Module ip_tables not found in directory /lib/modules/6.18.24-yocto-standard". One solution/workaround i found is to enable CONFIG_NETFILTER_XTABLES_LEGACY.
Randy to find a person to work on this. Paul is available for consult as needed.
@Henrik, does it work with the default kernel config if you add `PACKAGECONFIG += "libnftnl"` for iptables? That will require the meta-networking layer. If that works, we may want to bring libnftnl into OE-core and enable that by default going forward.
Moving this to needinfo.
Adding meta-networking and libnftnl to iptables PACKAGECONFIG does indeed work. I did notice a quirk though, that it only works as long as the "ptest" distro feature is enabled. If i add `DISTRO_FEATURES_OPTED_OUT += "ptest"` to local.conf both iptables and nft stop working. Further adding `KERNEL_EXTRA_FEATURES:append = " features/nf_tables/nf_tables.scc"` to local.conf made it work again.
This may be design intent in how the nftables cfg work was done. I'll have someone investigate.