From 207052a82ca59d186526fd6f88b5e098bd19cbbb Mon Sep 17 00:00:00 2001 From: Bruce Ashfield Date: Mon, 5 Jan 2026 12:16:51 -0500 Subject: kernel/config/6.18: bump yocto-cfg-fragments for netfilter fixes bumping to pickup the following change: commit af4e4301c12e98dc03b8827a44eb29786c1a61a6 (HEAD -> yocto-6.18, origin/yocto-6.18) Author: Bruce Ashfield Date: Mon Jan 5 09:41:06 2026 -0500 config/netfilter: migrate from legacy NF to NETFILTER_XT_TARGET_MASQUERADE - 9fce66583f06c212 ("netfilter: Exclude LEGACY TABLES on PREEMPT_RT.") adds NETFILTER_XTABLES_LEGACY and switches the iptables legacy options (IP_NF_IPTABLES_LEGACY, IP_NF_NAT, IP6_NF_NAT, IP_NF_TARGET_MASQUERADE, etc.) from select to depends on it in net/ipv4/netfilter/Kconfig and net/ipv6/netfilter/Kconfig. If NETFILTER_XTABLES_LEGACY is left unset, IP_NF_TARGET_MASQUERADE becomes unreachable and no longer auto-selects NETFILTER_XT_TARGET_MASQUERADE, so the xt_MASQUERADE module vanishes. - 25a8b88f000c33a1 ("netfilter: add back NETFILTER_XTABLES dependencies") restores depends on NETFILTER_XTABLES for those legacy symbols but keeps the new NETFILTER_XTABLES_LEGACY gate in the same Kconfig files. Effect: after these patches in the 6.18 cycle, keeping kernel-module-xt-masquerade without enabling the legacy iptables stack requires setting CONFIG_NETFILTER_XT_TARGET_MASQUERADE directly (as in your fix) or turning on NETFILTER_XTABLES_LEGACY in the config. Solution: for now, we just enable NETFILTER_XT_TARGET_MASQUERADE to fix a specific error, and will start the migration of all the legacy options to their new options. If breakage becomes widespread, we'll enable NETFILTER_XTABLES_LEGACY. This avoids a build error in xen-image-minimal due to missing kernel module packages. Signed-off-by: Bruce Ashfield --- recipes-kernel/linux/yocto-cfg-fragments-6.18.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'recipes-kernel') diff --git a/recipes-kernel/linux/yocto-cfg-fragments-6.18.bb b/recipes-kernel/linux/yocto-cfg-fragments-6.18.bb index 5d41186e..2b051891 100644 --- a/recipes-kernel/linux/yocto-cfg-fragments-6.18.bb +++ b/recipes-kernel/linux/yocto-cfg-fragments-6.18.bb @@ -15,7 +15,7 @@ INHIBIT_DEFAULT_DEPS = "1" LINUX_VERSION ?= "6.18" PV = "v${LINUX_VERSION}+git${SRCREV}" -SRCREV = "f4a44299f4519c9ee5c06c12ceaa2a214290490e" +SRCREV = "af4e4301c12e98dc03b8827a44eb29786c1a61a6" SRC_URI = "\ git://git.yoctoproject.org/yocto-kernel-cache;branch=yocto-${LINUX_VERSION} \ " -- cgit v1.2.3-54-g00ecf