Re: [iptables PATCH] configure: disable connlabel for static builds

[Gustavo Zacarias <gustavo@zacarias.com.ar>]

On 01/13/2015 09:32 PM, Jan Engelhardt wrote:

>> That's the precise build failure which is triggered when
>> libnetfilter_conntrack is around.
> 
> The -ldl which appears in the command line, it suggests that it stems
> from libxtables.la. (Unless there is one in your libnetfilter_conntrack.la.)

It's coming from libnetfilter_conntrack.la from src/Makefile.am (hardcoded).
Not only that, you've also got -ldl in Libs.private in xtables.pc.in in
an unconditional way (iptables) but that's not the culprit at this point.
I'll send a revised patch against libnetfilter_conntrack unless there's
a good reason for getting it hardcoded there (other than static building
since killing it makes iptables build fine).
Florian: regarding iptables master it won't build static with nft
support enabled, i'll look into it, but at least it's an option that can
be easily disabled for the build, so no quick patches required.
Regards.