Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

set file capabilities on some iptables executables #31207

Draft
wants to merge 2 commits into
base: main
Choose a base branch
from
Draft

set file capabilities on some iptables executables #31207

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
af6dd6d
set file capabilities on some iptables executables
kranurag7 Oct 18, 2024
41b5b3b
have a totally different isolated subpackage
kranurag7 Oct 18, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 14 additions & 1 deletion iptables.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
package:
name: iptables
version: 1.8.10
epoch: 4
epoch: 5
description: Linux kernel firewall, NAT and packet mangling tools
copyright:
- license: GPL-2.0-or-later
Expand All @@ -17,6 +17,7 @@ environment:
- busybox
- ca-certificates-bundle
- flex
- libcap-utils
- libmnl-dev
- libnftnl-dev
- libtool
Expand Down Expand Up @@ -70,6 +71,18 @@ pipeline:
install -D -m644 ebtables.confd "${{targets.destdir}}"/etc/conf.d/ebtables

subpackages:
- name: iptables-privileged
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the patch is in draft mode because we can discuss more on the package name here. I was thinking if we can name it as iptables-linkerd-compat similar to our bitnami variant of package where we name a package as *-bitnami-compat

description: iptables with extra file capabilities on executables in /sbin only to be used with linkerd.
options:
no-provides: true
pipeline:
- runs: |
mkdir -p ${{targets.contextdir}}/sbin
cp ${{targets.destdir}}/sbin/xtables-legacy-multi ${{targets.contextdir}}/sbin/xtables-legacy-multi
cp ${{targets.destdir}}/sbin/xtables-nft-multi ${{targets.contextdir}}/sbin/xtables-nft-multi
setcap cap_net_raw,cap_net_admin+eip ${{targets.contextdir}}/sbin/xtables-legacy-multi
setcap cap_net_raw,cap_net_admin+eip ${{targets.contextdir}}/sbin/xtables-nft-multi
kranurag7 marked this conversation as resolved.
Show resolved Hide resolved

- name: iptables-doc
description: iptables documentation
pipeline:
Expand Down
Loading