netavark: add nftables as runtime dependency

Netavark dropped iptables support and now uses nft directly for all
firewall rules (masquerade, DNAT, connection tracking). Without
nftables installed, netavark fails at runtime with "unable to execute
nft: No such file or directory", preventing any podman container from
starting with network access.

Add nftables to netavark's RDEPENDS since it is an unconditional
runtime requirement, and to packagegroup-netavark for independent
packagegroup usage.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

1 files changed, 3 insertions, 0 deletions

diff --git a/recipes-containers/netavark/netavark_2.0.0-dev+git.bb b/recipes-containers/netavark/netavark_2.0.0-dev+git.bb
index 2df8c750..5967a3de 100644
--- a/recipes-containers/netavark/netavark_2.0.0-dev+git.bb
+++ b/recipes-containers/netavark/netavark_2.0.0-dev+git.bb
@@ -41,6 +41,9 @@ REQUIRED_DISTRO_FEATURES ?= "seccomp"
 
 DEPENDS += "protobuf-c-native protobuf-c"
 
+# netavark dropped iptables support and uses nft directly for firewall rules
+RDEPENDS:${PN} += "nftables"
+
 # bind-utils is used to install dig
 # procps-ps is necessary because the ps from busybox is
 # not having the same behavior