Add conditional nat rule deletion for nftables

avocado-framework / avocado-vt

Avocado VT Plugin

https://avocado-vt.readthedocs.org/

Other

83 stars 241 forks source link

Add conditional nat rule deletion for nftables #3946

Closed quanwenli closed 1 month ago

quanwenli commented 2 months ago

check if iptables or nftables is used
if using nftables, use nft command to add the rules
clean the nftables

Signed-off-by: Wenli Quan wquan@redhat.com

id: 2592

quanwenli commented 2 months ago

@YongxueHong could. you help review it ? thanks a lot.

YongxueHong commented 1 month ago

Hi @PaulYuuu , @fbq815 , @zhenyzha Could you please review this pull request to see if it affects your platform? Thank you in advance.

zhenyzha commented 1 month ago

Hi @PaulYuuu , @fbq815 , @zhenyzha Could you please review this pull request to see if it affects your platform? Thank you in advance.

Yes, it works on ARM

# find /usr/lib/modules/ -name iptable_filter.ko.xz
.../kernel/net/ipv4/netfilter/iptable_filter.ko.xz
.../kernel/net/ipv4/netfilter/iptable_filter.ko.xz

quanwenli commented 1 month ago

It has workaround with installed latest kernel-modules-extra. and vt maintenance will automate this according to the meeting. So close it. Thanks all