diff options
| author | Richard Purdie <richard.purdie@linuxfoundation.org> | 2025-11-07 13:31:53 +0000 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2025-11-07 13:31:53 +0000 |
| commit | 8c22ff0d8b70d9b12f0487ef696a7e915b9e3173 (patch) | |
| tree | efdc32587159d0050a69009bdf2330a531727d95 /meta/recipes-extended/iptables | |
| parent | d412d2747595c1cc4a5e3ca975e3adc31b2f7891 (diff) | |
| download | poky-8c22ff0d8b70d9b12f0487ef696a7e915b9e3173.tar.gz | |
The poky repository master branch is no longer being updated.
You can either:
a) switch to individual clones of bitbake, openembedded-core, meta-yocto and yocto-docs
b) use the new bitbake-setup
You can find information about either approach in our documentation:
https://docs.yoctoproject.org/
Note that "poky" the distro setting is still available in meta-yocto as
before and we continue to use and maintain that.
Long live Poky!
Some further information on the background of this change can be found
in: https://lists.openembedded.org/g/openembedded-architecture/message/2179
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-extended/iptables')
5 files changed, 0 insertions, 150 deletions
diff --git a/meta/recipes-extended/iptables/iptables/ip6tables.rules b/meta/recipes-extended/iptables/iptables/ip6tables.rules deleted file mode 100644 index e69de29bb2..0000000000 --- a/meta/recipes-extended/iptables/iptables/ip6tables.rules +++ /dev/null | |||
diff --git a/meta/recipes-extended/iptables/iptables/ip6tables.service b/meta/recipes-extended/iptables/iptables/ip6tables.service deleted file mode 100644 index 6c059fca49..0000000000 --- a/meta/recipes-extended/iptables/iptables/ip6tables.service +++ /dev/null | |||
| @@ -1,13 +0,0 @@ | |||
| 1 | [Unit] | ||
| 2 | Description=IPv6 Packet Filtering Framework | ||
| 3 | Before=network-pre.target | ||
| 4 | Wants=network-pre.target | ||
| 5 | |||
| 6 | [Service] | ||
| 7 | Type=oneshot | ||
| 8 | ExecStart=@SBINDIR@/ip6tables-restore -w -- @RULESDIR@/ip6tables.rules | ||
| 9 | ExecReload=@SBINDIR@/ip6tables-restore -w -- @RULESDIR@/ip6tables.rules | ||
| 10 | RemainAfterExit=yes | ||
| 11 | |||
| 12 | [Install] | ||
| 13 | WantedBy=multi-user.target | ||
diff --git a/meta/recipes-extended/iptables/iptables/iptables.rules b/meta/recipes-extended/iptables/iptables/iptables.rules deleted file mode 100644 index e69de29bb2..0000000000 --- a/meta/recipes-extended/iptables/iptables/iptables.rules +++ /dev/null | |||
diff --git a/meta/recipes-extended/iptables/iptables/iptables.service b/meta/recipes-extended/iptables/iptables/iptables.service deleted file mode 100644 index 0eb3c343de..0000000000 --- a/meta/recipes-extended/iptables/iptables/iptables.service +++ /dev/null | |||
| @@ -1,13 +0,0 @@ | |||
| 1 | [Unit] | ||
| 2 | Description=IPv4 Packet Filtering Framework | ||
| 3 | Before=network-pre.target | ||
| 4 | Wants=network-pre.target | ||
| 5 | |||
| 6 | [Service] | ||
| 7 | Type=oneshot | ||
| 8 | ExecStart=@SBINDIR@/iptables-restore -w -- @RULESDIR@/iptables.rules | ||
| 9 | ExecReload=@SBINDIR@/iptables-restore -w -- @RULESDIR@/iptables.rules | ||
| 10 | RemainAfterExit=yes | ||
| 11 | |||
| 12 | [Install] | ||
| 13 | WantedBy=multi-user.target | ||
diff --git a/meta/recipes-extended/iptables/iptables_1.8.11.bb b/meta/recipes-extended/iptables/iptables_1.8.11.bb deleted file mode 100644 index 686dc5afe5..0000000000 --- a/meta/recipes-extended/iptables/iptables_1.8.11.bb +++ /dev/null | |||
| @@ -1,124 +0,0 @@ | |||
| 1 | SUMMARY = "Tools for managing kernel packet filtering capabilities" | ||
| 2 | DESCRIPTION = "iptables is the userspace command line program used to configure and control network packet \ | ||
| 3 | filtering code in Linux." | ||
| 4 | HOMEPAGE = "http://www.netfilter.org/" | ||
| 5 | BUGTRACKER = "http://bugzilla.netfilter.org/" | ||
| 6 | LICENSE = "GPL-2.0-or-later" | ||
| 7 | LIC_FILES_CHKSUM = "file://COPYING;md5=b234ee4d69f5fce4486a80fdaf4a4263 \ | ||
| 8 | file://iptables/iptables.c;beginline=13;endline=25;md5=c5cffd09974558cf27d0f763df2a12dc \ | ||
| 9 | " | ||
| 10 | |||
| 11 | SRC_URI = "http://netfilter.org/projects/iptables/files/iptables-${PV}.tar.xz \ | ||
| 12 | file://iptables.service \ | ||
| 13 | file://iptables.rules \ | ||
| 14 | file://ip6tables.service \ | ||
| 15 | file://ip6tables.rules \ | ||
| 16 | " | ||
| 17 | SRC_URI[sha256sum] = "d87303d55ef8c92bcad4dd3f978b26d272013642b029425775f5bad1009fe7b2" | ||
| 18 | |||
| 19 | SYSTEMD_SERVICE:${PN} = "\ | ||
| 20 | iptables.service \ | ||
| 21 | ${@bb.utils.contains('PACKAGECONFIG', 'ipv6', 'ip6tables.service', '', d)} \ | ||
| 22 | " | ||
| 23 | |||
| 24 | inherit autotools pkgconfig systemd | ||
| 25 | |||
| 26 | EXTRA_OECONF = "--with-kernel=${STAGING_INCDIR}" | ||
| 27 | |||
| 28 | CFLAGS:append:libc-musl = " -D__UAPI_DEF_ETHHDR=0" | ||
| 29 | |||
| 30 | PACKAGECONFIG ?= "${@bb.utils.filter('DISTRO_FEATURES', 'ipv6', d)}" | ||
| 31 | PACKAGECONFIG[ipv6] = "--enable-ipv6,--disable-ipv6," | ||
| 32 | |||
| 33 | # libnfnetlink recipe is in meta-networking layer | ||
| 34 | PACKAGECONFIG[libnfnetlink] = "--enable-libnfnetlink --enable-connlabel,--disable-libnfnetlink --disable-connlabel,libnfnetlink libnetfilter-conntrack" | ||
| 35 | |||
| 36 | # libnftnl recipe is in meta-networking layer(previously known as libnftables) | ||
| 37 | PACKAGECONFIG[libnftnl] = "--enable-nftables,--disable-nftables,libnftnl" | ||
| 38 | |||
| 39 | do_configure:prepend() { | ||
| 40 | # Remove some libtool m4 files | ||
| 41 | # Keep ax_check_linker_flags.m4 which belongs to autoconf-archive. | ||
| 42 | rm -f libtool.m4 lt~obsolete.m4 ltoptions.m4 ltsugar.m4 ltversion.m4 | ||
| 43 | |||
| 44 | # Copy a header to fix out of tree builds | ||
| 45 | cp -f ${S}/libiptc/linux_list.h ${S}/include/libiptc/ | ||
| 46 | } | ||
| 47 | |||
| 48 | IPTABLES_RULES_DIR ?= "${sysconfdir}/${BPN}" | ||
| 49 | |||
| 50 | do_install:append() { | ||
| 51 | install -d ${D}${IPTABLES_RULES_DIR} | ||
| 52 | install -m 0644 ${UNPACKDIR}/iptables.rules ${D}${IPTABLES_RULES_DIR} | ||
| 53 | |||
| 54 | install -d ${D}${systemd_system_unitdir} | ||
| 55 | install -m 0644 ${UNPACKDIR}/iptables.service ${D}${systemd_system_unitdir} | ||
| 56 | |||
| 57 | sed -i \ | ||
| 58 | -e 's,@SBINDIR@,${sbindir},g' \ | ||
| 59 | -e 's,@RULESDIR@,${IPTABLES_RULES_DIR},g' \ | ||
| 60 | ${D}${systemd_system_unitdir}/iptables.service | ||
| 61 | |||
| 62 | if ${@bb.utils.contains('PACKAGECONFIG', 'ipv6', 'true', 'false', d)} ; then | ||
| 63 | install -m 0644 ${UNPACKDIR}/ip6tables.rules ${D}${IPTABLES_RULES_DIR} | ||
| 64 | install -m 0644 ${UNPACKDIR}/ip6tables.service ${D}${systemd_system_unitdir} | ||
| 65 | |||
| 66 | sed -i \ | ||
| 67 | -e 's,@SBINDIR@,${sbindir},g' \ | ||
| 68 | -e 's,@RULESDIR@,${IPTABLES_RULES_DIR},g' \ | ||
| 69 | ${D}${systemd_system_unitdir}/ip6tables.service | ||
| 70 | fi | ||
| 71 | |||
| 72 | # if libnftnl is included, make the iptables symlink point to the nft-based binary by default | ||
| 73 | if ${@bb.utils.contains('PACKAGECONFIG', 'libnftnl', 'true', 'false', d)} ; then | ||
| 74 | ln -sf ${sbindir}/xtables-nft-multi ${D}${sbindir}/iptables | ||
| 75 | ln -sf ${sbindir}/xtables-nft-multi ${D}${sbindir}/iptables-save | ||
| 76 | ln -sf ${sbindir}/xtables-nft-multi ${D}${sbindir}/iptables-restore | ||
| 77 | # ethertypes is provided by the netbase package | ||
| 78 | rm -f ${D}${sysconfdir}/ethertypes | ||
| 79 | fi | ||
| 80 | } | ||
| 81 | |||
| 82 | PACKAGES =+ "${PN}-modules ${PN}-apply" | ||
| 83 | PACKAGES_DYNAMIC += "^${PN}-module-.*" | ||
| 84 | |||
| 85 | python populate_packages:prepend() { | ||
| 86 | modules = do_split_packages(d, '${libdir}/xtables', r'lib(.*)\.so$', '${PN}-module-%s', '${PN} module %s', extra_depends='') | ||
| 87 | if modules: | ||
| 88 | metapkg = d.getVar('PN') + '-modules' | ||
| 89 | d.appendVar('RDEPENDS:' + metapkg, ' ' + ' '.join(modules)) | ||
| 90 | } | ||
| 91 | |||
| 92 | RDEPENDS:${PN} = "${PN}-module-xt-standard" | ||
| 93 | RRECOMMENDS:${PN} = " \ | ||
| 94 | ${PN}-modules \ | ||
| 95 | kernel-module-x-tables \ | ||
| 96 | kernel-module-ip-tables \ | ||
| 97 | kernel-module-iptable-filter \ | ||
| 98 | kernel-module-iptable-nat \ | ||
| 99 | kernel-module-nf-defrag-ipv4 \ | ||
| 100 | kernel-module-nf-conntrack \ | ||
| 101 | kernel-module-nf-conntrack-ipv4 \ | ||
| 102 | kernel-module-nf-nat \ | ||
| 103 | kernel-module-ipt-masquerade \ | ||
| 104 | ${@bb.utils.contains('PACKAGECONFIG', 'ipv6', '\ | ||
| 105 | kernel-module-ip6table-filter \ | ||
| 106 | kernel-module-ip6-tables \ | ||
| 107 | ', '', d)} \ | ||
| 108 | " | ||
| 109 | |||
| 110 | FILES:${PN} += "${datadir}/xtables" | ||
| 111 | |||
| 112 | FILES:${PN}-apply = "${sbindir}/ip*-apply" | ||
| 113 | RDEPENDS:${PN}-apply = "${PN} bash" | ||
| 114 | |||
| 115 | # Include the symlinks as well in respective packages | ||
| 116 | FILES:${PN}-module-xt-conntrack += "${libdir}/xtables/libxt_state.so" | ||
| 117 | FILES:${PN}-module-xt-ct += "${libdir}/xtables/libxt_NOTRACK.so ${libdir}/xtables/libxt_REDIRECT.so" | ||
| 118 | FILES:${PN}-module-xt-nat += "${libdir}/xtables/libxt_SNAT.so ${libdir}/xtables/libxt_DNAT.so ${libdir}/xtables/libxt_MASQUERADE.so" | ||
| 119 | |||
| 120 | ALLOW_EMPTY:${PN}-modules = "1" | ||
| 121 | |||
| 122 | INSANE_SKIP:${PN}-module-xt-conntrack = "dev-so" | ||
| 123 | INSANE_SKIP:${PN}-module-xt-ct = "dev-so" | ||
| 124 | INSANE_SKIP:${PN}-module-xt-nat = "dev-so" | ||
