Re: [PATCH net-next,v2 0/7] Netfilter updates for net-next

[Florian Westphal <fw@strlen.de>]

Jakub Kicinski <kuba@kernel.org> wrote:
> On Thu, 24 Apr 2025 23:14:48 +0200 Pablo Neira Ayuso wrote:
> > v2: including fixes from Florian to address selftest issues
> >     and a fix for set element count and type.
> 
> Thanks, appreciated! All our networking tests now pass, but there
> seems to still be some breakage on the BPF side, so
> tools/testing/selftests/bpf/config needs touching up.
> 
> I suppose while addressing the RT problem you're trying to move
> straggles off from the legacy stuff to nft? Which I'm entirely
> sympathetic to. But I'm worried that not everybody will be, and 
> there's plenty of defconfigs which include iptables:
> 
> $ git grep CONFIG_IP_NF_IPTABLES= | wc -l
> 54

Pablo, lets toss the relevant patch and try again later.

I have no idea how to make this work the way we want it to
without converting all "selects" to "depends on" clauses as in the patch.

diff --git a/net/ipv4/netfilter/Kconfig b/net/ipv4/netfilter/Kconfig
--- a/net/ipv4/netfilter/Kconfig
+++ b/net/ipv4/netfilter/Kconfig
@@ -14,6 +14,7 @@ config NF_DEFRAG_IPV4
 config IP_NF_IPTABLES_LEGACY
 	tristate "Legacy IP tables support"
 	default	n
+	depends on !PREEMPT_RT
 	select NETFILTER_XTABLES
 	help


... will not work, you just get a "Unmet direct dependencies" warning.