movefasta/nixpkgs
0
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-07-13 21:50:33 +03:00
Code Activity

nixos/firewall: assert that the kernel supports conntrack helper auto-loading

Browse source
This commit is contained in:
K900 2023-03-04 10:50:13 +03:00
parent 2eeefe41f5
commit 18f85de76d
2 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
nixos/modules/services/networking/firewall.nix
View file

@ -269,6 +269,10 @@ in
assertion = cfg.filterForward -> config.networking.nftables.enable;
message = "filterForward only works with the nftables based firewall";
}
{
assertion = cfg.autoLoadConntrackHelpers -> lib.versionOlder config.boot.kernelPackages.kernel.version "6";
message = "conntrack helper autoloading has been removed from kernel 6.0 and newer";
}
];
networking.firewall.trustedInterfaces = [ "lo" ];