Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 926685 - net-firewall/firewalld complains about NFT_OBJREF not set but it does not exists in kernel config
Summary: net-firewall/firewalld complains about NFT_OBJREF not set but it does not exi...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Virtualization Team
URL:
Whiteboard:
Keywords: PullRequest
Depends on:
Blocks:
 
Reported: 2024-03-10 10:17 UTC by Julien Delquié
Modified: 2024-03-21 02:41 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Julien Delquié 2024-03-10 10:17:41 UTC
This package has been complaining about this problem for some time now.
Sorry for not being able to take the time sooner to address the issue.

Maybe it's not risky to delete this check or find the corresponding one if it exists under another name?

Reproducible: Always

Steps to Reproduce:
1. Build net-firewall/firewalld
2. It will warn about NFT_OBJREF not set

Actual Results:  
It warn about NFT_OBJREF like this:

 * Messages for package net-firewall/firewalld-2.1.1-r1:

 *   CONFIG_NFT_OBJREF:  is not set when it should be.
 * Please check to make sure these options are set correctly.
 * Failure to do so may cause unexpected problems.
 * Install additional packages for optional runtime features:
 *   gnome-extra/nm-applet for changing zones with NetworkManager

 * GNU info directory index is up-to-date.


Expected Results:  
No warning about it.
Or warn about the new name of what is really missing?
Comment 1 Arnaud Desgranges 2024-03-13 10:51:43 UTC
I can confirm this, i narrow it down a bit:
the CONFIG_NFT_OBJREF option was removed in kernel version >6.1, so anything ">sys-kernel/gentoo-*:6.1" won't have that option.

for reference
https://cateee.net/lkddb/web-lkddb/NFT_OBJREF.html
and
https://www.kernelconfig.io/search?q=CONFIG_NFT_OBJREF+&kernelversion=6.7.9&arch=x86
!=
https://www.kernelconfig.io/CONFIG_NFT_OBJREF?q=CONFIG_NFT_OBJREF&kernelversion=6.1.81&arch=x86
Comment 2 Ailish Holmes 2024-03-15 15:09:21 UTC
More specifically, NFT_OBJREF was removed in commit d037abc with the comment:

-------
nft_objref is needed to reference named objects, it makes
no sense to disable it.
-------

This change was made for kernel v6.2-rc1 . That release and all successors have the change.
Comment 3 Larry the Git Cow gentoo-dev 2024-03-21 02:41:18 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1149e8e7f329caa0e62f88566d005ccbf11ecec5

commit 1149e8e7f329caa0e62f88566d005ccbf11ecec5
Author:     Cristian Othón Martínez Vera <cfuga@cfuga.mx>
AuthorDate: 2024-03-15 22:08:59 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2024-03-21 02:25:53 +0000

    net-firewall/firewalld: CONFIG_NFT_OBJREF removed for kernels > 6.1
    
    Closes: https://bugs.gentoo.org/926685
    Signed-off-by: Cristian Othón Martínez Vera <cfuga@cfuga.mx>
    Closes: https://github.com/gentoo/gentoo/pull/35774
    Signed-off-by: Sam James <sam@gentoo.org>

 net-firewall/firewalld/firewalld-2.0.1.ebuild    | 8 ++++++--
 net-firewall/firewalld/firewalld-2.0.2.ebuild    | 6 +++++-
 net-firewall/firewalld/firewalld-2.1.0.ebuild    | 6 +++++-
 net-firewall/firewalld/firewalld-2.1.1-r1.ebuild | 6 +++++-
 net-firewall/firewalld/firewalld-2.1.1.ebuild    | 6 +++++-
 5 files changed, 26 insertions(+), 6 deletions(-)