From edfc302dbd43e8ca834224a778f8ab2e7fc168f0 Mon Sep 17 00:00:00 2001 From: Bruce Ashfield Date: Fri, 5 Jun 2026 13:10:27 +0000 Subject: incus: switch from iptables to nftables MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Incus detects nftables at runtime and prefers it for firewall management. Without the nft binary, incusd logs "nft missing" and falls back to a degraded mode that can leave the service stuck in activating state. The broader ecosystem has moved to nftables — netavark already dropped iptables support entirely. Signed-off-by: Bruce Ashfield --- recipes-containers/incus/incus_git.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/recipes-containers/incus/incus_git.bb b/recipes-containers/incus/incus_git.bb index 4e18cb88..a3465f5e 100644 --- a/recipes-containers/incus/incus_git.bb +++ b/recipes-containers/incus/incus_git.bb @@ -75,7 +75,7 @@ RDEPENDS:${PN} = " \ attr \ acl \ dnsmasq \ - iptables \ + nftables \ rsync \ squashfs-tools \ tar \ -- cgit v1.2.3-54-g00ecf