Re: [PATCH] selftests: nft_queue: conntrack expiration requeue

[Florian Westphal <fw@strlen.de>]

Antonio Ojea <aojea@google.com> wrote:
> > Does it start to work for new flows when you add a rule like
> > 'ct label foo'?
> 
> It does work, but it still shows the error
> 
> conntrack -U -d 10.244.2.2 --label-add test
> tcp      6 86382 ESTABLISHED src=10.244.1.8 dst=10.244.2.2 sport=39133
> dport=8080 src=10.244.2.2 dst=10.244.1.8 sport=8080 dport=39133
> [ASSURED] mark=0 use=2 labels=test,net
> conntrack v1.4.8 (conntrack-tools): Operation failed: No space left on device

Looks like one needs to set a label somewhere, no need for it to match.

chain never { ct label set foo }

makes this work for me.
We could change this so that *checking* a label also turns on the
extension infra.

Back then i did not want to allocate the extra space for
the extensions and i did not want to add to a new sysctl either.

So I went with 'no rules that adds one, no need for ct label
extension space allocation'.