* Determining the location of the kernel source code * Found kernel source directory: * /usr/src/linux * Found kernel object directory: * /lib/modules/2.6.20-gentoo/build * Found sources for kernel version: * 2.6.20-gentoo * Checking for suitable kernel configuration options... * CONFIG_IP_NF_CONNTRACK_NETLINK: is not set when it should be. * Please check to make sure these options are set correctly. * Failure to do so may cause unexpected problems. * Once you have satisfied these options, please try merging * this package again. CONFIG_IP_NF_CONNTRACK_NETLINK is the configuration option for the 'obsolete' Layer 3 dependent connection tracking for IPv4. Should the ebuild not also allow the configuration options for the newer Layer 3 independent conntrack support? CONFIG_NF_CONNTRACK_ENABLED=y CONFIG_NF_CONNTRACK_SUPPORT=y # CONFIG_IP_NF_CONNTRACK_SUPPORT is not set CONFIG_NF_CONNTRACK=y CONFIG_NF_CONNTRACK_IPV4=y CONFIG_NF_CONNTRACK_PROC_COMPAT=y CONFIG_NF_CONNTRACK_IPV6=y emerge --info Portage 2.1.2-r9 (default-linux/x86/2006.1/desktop, gcc-4.1.1, glibc-2.5-r0, 2.6.20-gentoo i686) ================================================================= System uname: 2.6.20-gentoo i686 Intel(R) Pentium(R) 4 CPU 1.60GHz Gentoo Base System version 1.12.9 Timestamp of tree: Thu, 08 Feb 2007 08:50:01 +0000 dev-java/java-config: 1.3.7, 2.0.31-r3 dev-lang/python: 2.4.4 dev-python/pycrypto: 2.0.1-r5 sys-apps/sandbox: 1.2.18.1 sys-devel/autoconf: 2.13, 2.61 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10 sys-devel/binutils: 2.17 sys-devel/gcc-config: 1.3.14 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.20 ACCEPT_KEYWORDS="x86 ~x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=pentium4 -O2 -pipe -fno-omit-frame-pointer" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config /var/bind" CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/java-config/vms/ /etc/revdep-rebuild /etc/terminfo /etc/texmf/web2c" CXXFLAGS="-march=pentium4 -O2 -pipe -fno-omit-frame-pointer" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig distlocks metadata-transfer parallel-fetch sandbox sfperms splitdebug strict" GENTOO_MIRRORS="http://gentoo.blueyonder.co.uk http://www.mirrorservice.org/sites/www.ibiblio.org/gentoo/ http://ftp.du.se/pub/os/gentoo http://linux.rz.ruhr-uni-bochum.de/download/gentoo-mirror/ http://pandemonium.tiscali.de/pub/gentoo/ http://gentoo.mirror.solnet.ch" LANG="en_GB.UTF-8" LC_ALL="en_GB.UTF-8" LINGUAS="en_GB en" MAKEOPTS="" PKGDIR="/usr/portage/packages" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/portage/local" SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage" USE="X acl alsa apache2 arts avi bash-completion berkdb bitmap-fonts bzip2 cairo caps cdr cli cracklib crypt cups curl dbus dlloader doc dri dvd dvdr eds emacs emboss encode esd examples expat fam firefox fortran gdbm gif gmp gnome gnutls gpm graphviz gstreamer gtk hal iconv idn imlib ipv6 isdnlog java javascript jpeg kde kdehiddenvisibility ldap libg++ mad midi mikmod mmx mono mp3 mpeg ncurses nls nptl nptlonly nsplugin offensive ogg opengl oss pam pcre pdflib perl png postgres ppds pppd python qt3 qt4 quicktime readline reflection samba sdl seamonkey session spell spl sse2 ssl tcl tcltk tcpd threads tiff tk truetype truetype-fonts type1-fonts udev unicode usb vim-syntax vorbis win32codecs x86 xface xml xorg xv zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="evdev keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en_GB en" USERLAND="GNU" VIDEO_CARDS="vesa fbdev r128" Unset: CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LDFLAGS, PORTAGE_RSYNC_EXTRA_OPTS
I replaced CONFIG_CHECK="IP_NF_CONNTRACK_NETLINK" with CONFIG_CHECK="NF_CT_NETLINK" in the ebuild and worked. CONFIG_NF_CONNTRACK_ENABLED=m CONFIG_NF_CONNTRACK_SUPPORT=y # CONFIG_IP_NF_CONNTRACK_SUPPORT is not set CONFIG_NF_CONNTRACK=m CONFIG_NF_CT_NETLINK=m Portage 2.1.2-r9 (default-linux/x86/2006.1/desktop, gcc-4.1.1, glibc-2.5-r0, 2.6.20-gentoo i686) ================================================================= System uname: 2.6.20-gentoo i686 AMD Athlon(tm) XP 3000+ Gentoo Base System version 1.12.9 Timestamp of tree: Thu, 08 Feb 2007 10:20:01 +0000 ccache version 2.4 [enabled] dev-java/java-config: 1.3.7, 2.0.31-r3 dev-lang/python: 2.4.4 dev-python/pycrypto: 2.0.1-r5 dev-util/ccache: 2.4-r6 sys-apps/sandbox: 1.2.18.1 sys-devel/autoconf: 2.13, 2.61 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10 sys-devel/binutils: 2.17 sys-devel/gcc-config: 1.3.14 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.20 ACCEPT_KEYWORDS="x86 ~x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=athlon-xp -O2 -pipe -fomit-frame-pointer" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config" CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/java-config/vms/ /etc/revdep-rebuild /etc/splash /etc/terminfo" CXXFLAGS="-march=athlon-xp -O2 -pipe -fomit-frame-pointer -fvisibility-inlines-hidden" DISTDIR="/zzz/portage/distfiles" FEATURES="autoconfig ccache distlocks metadata-transfer sandbox sfperms strict" GENTOO_MIRRORS="http://ftp1.lug.ro/gentoo" LANG="en_US.UTF-8" LC_ALL="en_US.UTF-8" LDFLAGS="-Wl,-O1" LINGUAS="en ro" MAKEOPTS="-j2" PKGDIR="/zzz/portage/packages" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/zzz/tmp" PORTDIR="/zzz/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.gentoo.ro/gentoo-portage" USE="X alsa apache2 arts bitmap-fonts branding cairo cdr cli cracklib crypt dbus dlloader dri dvd dvdr encode fam firefox gdbm gif glitz gpm gstreamer hal iconv ipv6 isdnlog jpeg kde kdehiddenvisibility libg++ mad midi mikmod mp3 mpeg ncurses nls nptl nptlonly nvidia ogg opengl pam pcre perl png ppds pppd python qt3 qt4 readline reflection sdl session spl ssl tcpd truetype truetype-fonts type1-fonts udev unicode vorbis win32codecs x86 xml xorg xv zlib" ALSA_CARDS="intel8x0 usb-audio" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en ro" USERLAND="GNU" VIDEO_CARDS="nv nvidia vesa" Unset: CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, PORTAGE_RSYNC_EXTRA_OPTS
Fix in cvs Thanks
2 6 19 still has IP_NF_CONNTRACK_NETLINK hope you don't mind me changing it. diff -u -b -B -r1.2 libnetfilter_conntrack-0.0.50.ebuild --- libnetfilter_conntrack-0.0.50.ebuild 10 Feb 2007 17:44:48 -0000 1.2 +++ libnetfilter_conntrack-0.0.50.ebuild 15 Apr 2007 10:05:04 -0000 @@ -20,7 +20,7 @@ pkg_setup() { kernel_is lt 2 6 14 && die "requires at least 2.6.14 kernel version" - if kernel_is le 2 6 18; then + if kernel_is le 2 6 19; then CONFIG_CHECK="IP_NF_CONNTRACK_NETLINK" else CONFIG_CHECK="NF_CT_NETLINK"
(In reply to comment #3) > 2 6 19 still has IP_NF_CONNTRACK_NETLINK That is true, and so does 2.6.20 but I think that it misses the point. With newish kernels, the netlink system has 2 mutually exclusive connection tracking systems - the 'original' layer-3 dependent and the 'new' layer-3 independent. When building the kernel, only one of these can be chosen. As libnetfilter-contrack works with both of these conntrack systems, therefore rather than testing for one of them depending on the kernel version, the ebuild should ensure that either IP_NF_CONNTRACK_NETLINK or NF_CT_NETLINK is defined.
Better fix in cvs Please don't commit fix, that are not better than the previous
