Enable legacy iptables modules

This commit is contained in:
byjoey
2026-06-12 11:20:21 +08:00
parent 5c4c18889e
commit e5e8876546
+47 -1
View File
@@ -148,6 +148,19 @@ jobs:
scripts/config --disable DEFAULT_PFIFO_FAST scripts/config --disable DEFAULT_PFIFO_FAST
scripts/config --enable DEFAULT_FQ scripts/config --enable DEFAULT_FQ
scripts/config --set-str DEFAULT_NET_SCH fq scripts/config --set-str DEFAULT_NET_SCH fq
scripts/config --module NETFILTER_XTABLES
scripts/config --enable NETFILTER_XTABLES_LEGACY
scripts/config --module IP_NF_IPTABLES_LEGACY
scripts/config --module IP_NF_FILTER
scripts/config --module IP_NF_NAT
scripts/config --module IP_NF_TARGET_MASQUERADE
scripts/config --module IP_NF_MANGLE
scripts/config --module IP_NF_RAW
scripts/config --module IP6_NF_IPTABLES_LEGACY
scripts/config --module IP6_NF_FILTER
scripts/config --module IP6_NF_NAT
scripts/config --module IP6_NF_MANGLE
scripts/config --module IP6_NF_RAW
# Avoid generating kernel debug info and linux-image-*-dbg packages. # Avoid generating kernel debug info and linux-image-*-dbg packages.
scripts/config --disable DEBUG_INFO scripts/config --disable DEBUG_INFO
scripts/config --enable DEBUG_INFO_NONE scripts/config --enable DEBUG_INFO_NONE
@@ -186,6 +199,19 @@ jobs:
scripts/config --disable DEFAULT_PFIFO_FAST scripts/config --disable DEFAULT_PFIFO_FAST
scripts/config --enable DEFAULT_FQ scripts/config --enable DEFAULT_FQ
scripts/config --set-str DEFAULT_NET_SCH fq scripts/config --set-str DEFAULT_NET_SCH fq
scripts/config --module NETFILTER_XTABLES
scripts/config --enable NETFILTER_XTABLES_LEGACY
scripts/config --module IP_NF_IPTABLES_LEGACY
scripts/config --module IP_NF_FILTER
scripts/config --module IP_NF_NAT
scripts/config --module IP_NF_TARGET_MASQUERADE
scripts/config --module IP_NF_MANGLE
scripts/config --module IP_NF_RAW
scripts/config --module IP6_NF_IPTABLES_LEGACY
scripts/config --module IP6_NF_FILTER
scripts/config --module IP6_NF_NAT
scripts/config --module IP6_NF_MANGLE
scripts/config --module IP6_NF_RAW
scripts/config --disable DEBUG_INFO scripts/config --disable DEBUG_INFO
scripts/config --enable DEBUG_INFO_NONE scripts/config --enable DEBUG_INFO_NONE
scripts/config --disable DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT scripts/config --disable DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT
@@ -248,7 +274,27 @@ jobs:
echo "ERROR: CONFIG_DEFAULT_NET_SCH is not fq." echo "ERROR: CONFIG_DEFAULT_NET_SCH is not fq."
exit 1 exit 1
fi fi
grep -E 'CONFIG_(DEBUG_INFO_NONE|TCP_CONG_BBR|DEFAULT_BBR|DEFAULT_TCP_CONG|NET_SCH_DEFAULT|NET_SCH_FQ|DEFAULT_FQ|DEFAULT_NET_SCH)=' .config if ! grep -q '^CONFIG_NETFILTER_XTABLES_LEGACY=y' .config; then
echo "ERROR: CONFIG_NETFILTER_XTABLES_LEGACY is not enabled."
exit 1
fi
if ! grep -q '^CONFIG_IP_NF_IPTABLES_LEGACY=m' .config; then
echo "ERROR: CONFIG_IP_NF_IPTABLES_LEGACY is not module-enabled."
exit 1
fi
if ! grep -q '^CONFIG_IP_NF_NAT=m' .config; then
echo "ERROR: CONFIG_IP_NF_NAT is not module-enabled."
exit 1
fi
if ! grep -q '^CONFIG_IP_NF_FILTER=m' .config; then
echo "ERROR: CONFIG_IP_NF_FILTER is not module-enabled."
exit 1
fi
if ! grep -q '^CONFIG_IP_NF_TARGET_MASQUERADE=m' .config; then
echo "ERROR: CONFIG_IP_NF_TARGET_MASQUERADE is not module-enabled."
exit 1
fi
grep -E 'CONFIG_(DEBUG_INFO_NONE|TCP_CONG_BBR|DEFAULT_BBR|DEFAULT_TCP_CONG|NET_SCH_DEFAULT|NET_SCH_FQ|DEFAULT_FQ|DEFAULT_NET_SCH|NETFILTER_XTABLES_LEGACY|IP_NF_IPTABLES_LEGACY|IP_NF_NAT|IP_NF_FILTER|IP_NF_TARGET_MASQUERADE|IP6_NF_IPTABLES_LEGACY|IP6_NF_NAT|IP6_NF_FILTER)=' .config
- name: 构建内核 Debian 包 - name: 构建内核 Debian 包
if: env.BUILD_NEEDED == 'true' if: env.BUILD_NEEDED == 'true'