peter/infix
1
0
Fork 0
mirror of https://github.com/kernelkit/infix.git synced 2026-07-22 01:13:00 +02:00
Code Issues Packages Projects Releases Wiki Activity

confd: explicitly declare cni backends

Browse Source 
- the port-mapping plugin supports iptables or nftables
 - the firewall plugin support only iptables or firewalld

Enforce use of iptables wrapper for nftables, for now, in both plugins.
This all needs to be refactored to run podman with "unmanaged" networks
in the future.

Related to issue #1125

Signed-off-by: Joachim Wiberg <troglobit@gmail.com>
This commit is contained in:
Joachim Wiberg
2025-09-01 14:03:51 +02:00
parent 66a5e5304b
commit 8b39d3fdc7
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/confd/src/cni.c
+4 -1
View File
@@ -250,12 +250,15 @@ static int cni_bridge(struct lyd_node *net, const char *ifname)
" },\n" /* /bridge */
" {\n"
" \"type\": \"portmap\",\n"
" \"backend\": \"iptables\",\n"
" \"snat\": true,\n"
" \"capabilities\": {\n"
" \"portMappings\": true\n"
" }\n"
" },\n" /* /portmap */
" {\n"
" \"type\": \"firewall\"\n"
" \"type\": \"firewall\",\n"
" \"backend\": \"iptables\"\n"
" },\n" /* /firewall */
" {\n"
" \"type\": \"tuning\"\n"