Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.kernel > #91928 > unrolled thread
| Started by | Sebastian Kuzminsky <seb@highlab.com> |
|---|---|
| First post | 2026-04-06 05:10 +0200 |
| Last post | 2026-04-08 14:20 +0200 |
| Articles | 3 — 3 participants |
Back to article view | Back to linux.debian.kernel
Bug#1132816: linux-image-rt-amd64: missing ip_tables.ko in linux-image-rt-amd64 Sebastian Kuzminsky <seb@highlab.com> - 2026-04-06 05:10 +0200
Processed: Re: Bug#1132816: linux-image-rt-amd64: missing ip_tables.ko in linux-image-rt-amd64 "Debian Bug Tracking System" <owner@bugs.debian.org> - 2026-04-08 14:20 +0200
Bug#1132816: linux-image-rt-amd64: missing ip_tables.ko in linux-image-rt-amd64 Ben Hutchings <ben@decadent.org.uk> - 2026-04-08 14:20 +0200
| From | Sebastian Kuzminsky <seb@highlab.com> |
|---|---|
| Date | 2026-04-06 05:10 +0200 |
| Subject | Bug#1132816: linux-image-rt-amd64: missing ip_tables.ko in linux-image-rt-amd64 |
| Message-ID | <MGIvE-d1qA-3@gated-at.bofh.it> |
Package: linux-image-rt-amd64
Version: 6.19.10-1
Severity: normal
X-Debbugs-Cc: debian-amd64@lists.debian.org, seb@highlab.com
User: debian-amd64@lists.debian.org
Usertags: amd64
I recently upgraded from Trixie to Forky, and libvirt and docker broke.
I've tracked the problem down to a bug (i think?) in the
linux-image-rt-amd64 kernel package that I use. In Trixie, the -rt
kernel includes ip_tables.ko, but in Forky it does not, and everything
that relies on iptables-legacy breaks. This includes docker and libvirt.
On Trixie:
linux-image-6.12.74+deb13+1-rt-amd64
root@5c1210865e65:/# find /lib/modules/6.12.74+deb13+1-rt-amd64/ -iname 'ip_tables*'
/lib/modules/6.12.74+deb13+1-rt-amd64/kernel/net/ipv4/netfilter/ip_tables.ko.xz
root@5c1210865e65:/#
On Forky:
linux-modules-6.19.10+deb14-rt-amd64
root@245245243fc6:/# find /lib/modules/6.19.10+deb14-rt-amd64/ -iname 'ip_tables*'
root@245245243fc6:/#
On Forky i have to switch to the non-rt kernel, and docker and libvirt
start working again.
-- System Information:
Debian Release: forky/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 6.19.10+deb14-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages linux-image-rt-amd64 depends on:
ii linux-base-rt-amd64 6.19.10-1
ii linux-image-6.19.10+deb14-rt-amd64 6.19.10-1
linux-image-rt-amd64 recommends no packages.
linux-image-rt-amd64 suggests no packages.
-- no debconf information
[toc] | [next] | [standalone]
| From | "Debian Bug Tracking System" <owner@bugs.debian.org> |
|---|---|
| Date | 2026-04-08 14:20 +0200 |
| Subject | Processed: Re: Bug#1132816: linux-image-rt-amd64: missing ip_tables.ko in linux-image-rt-amd64 |
| Message-ID | <MHA30-dB82-7@gated-at.bofh.it> |
| In reply to | #91928 |
Processing control commands: > tag -1 upstream wontfix Bug #1132816 [src:linux] linux-image-rt-amd64: missing ip_tables.ko in linux-image-rt-amd64 Added tag(s) wontfix and upstream. -- 1132816: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1132816 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
[toc] | [prev] | [next] | [standalone]
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Date | 2026-04-08 14:20 +0200 |
| Message-ID | <MHA2Z-dB82-3@gated-at.bofh.it> |
| In reply to | #91928 |
[Multipart message — attachments visible in raw view] — view raw
Control: tag -1 upstream wontfix
On Sun, 2026-04-05 at 21:03 -0600, Sebastian Kuzminsky wrote:
> Package: linux-image-rt-amd64
> Version: 6.19.10-1
> Severity: normal
> X-Debbugs-Cc: debian-amd64@lists.debian.org, seb@highlab.com
> User: debian-amd64@lists.debian.org
> Usertags: amd64
>
> I recently upgraded from Trixie to Forky, and libvirt and docker broke.
>
> I've tracked the problem down to a bug (i think?) in the
> linux-image-rt-amd64 kernel package that I use. In Trixie, the -rt
> kernel includes ip_tables.ko, but in Forky it does not, and everything
> that relies on iptables-legacy breaks. This includes docker and libvirt.
[...]
xtables (including iptables) did not work correctly on RT, so this
combination has been intentionally disabled upstream. See
<https://git.kernel.org/linus/9fce66583f06c212e95e4b76dd61d8432ffa56b6>.
The xtables APIs are generally deprecated now, so docker and libvirt
should use nftables by default. Bug #1130974 tracks this for libvirt.
For docker I think this was supposed to be addressed with bug #921600,
but there is still the related bug #903635 open.
Ben.
--
Ben Hutchings
Everything should be made as simple as possible, but not simpler.
- Albert Einstein
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.kernel
csiph-web