Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #91706 > unrolled thread

Bug#1130974: linux-image-rt-amd64: -rt kernel builds are missing xt_MASQUERADE module

Back to article view | Back to linux.debian.kernel

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Bug#1130974: linux-image-rt-amd64: -rt kernel builds are missing xt_MASQUERADE module Ben Hutchings <ben@decadent.org.uk> - 2026-03-16 18:40 +0100
    Processed: Re: Bug#1130974: linux-image-rt-amd64: -rt kernel  builds are missing xt_MASQUERADE module "Debian Bug Tracking System" <owner@bugs.debian.org> - 2026-03-16 18:40 +0100
    Bug#1130974: linux-image-rt-amd64: -rt kernel builds are missing xt_MASQUERADE module Ben Hutchings <ben@decadent.org.uk> - 2026-03-16 22:40 +0100

#91706 — Bug#1130974: linux-image-rt-amd64: -rt kernel builds are missing xt_MASQUERADE module

[Multipart message — attachments visible in raw view] — view raw

Control: tag -1 upstream wontfix

On Mon, 2026-03-16 at 17:20 +0100, Mariusz Gronczewski wrote:
> Package: linux-image-rt-amd64
> Version: 6.19.6-2
> Severity: important
> X-Debbugs-Cc: debian-amd64@lists.debian.org
> User: debian-amd64@lists.debian.org
> Usertags: amd64
> 
> -rt packages seem to be missing this module
> 
> /lib/modules/6.18.15+deb14-amd64/kernel/net/netfilter/nft_masq.ko.xz
> /lib/modules/6.18.15+deb14-amd64/kernel/net/netfilter/xt_MASQUERADE.ko.xz
> /lib/modules/6.18.15+deb14-rt-amd64/kernel/net/netfilter/nft_masq.ko.xz
> /lib/modules/6.19.6+deb14+1-amd64/kernel/net/netfilter/nft_masq.ko.xz
> /lib/modules/6.19.6+deb14+1-amd64/kernel/net/netfilter/xt_MASQUERADE.ko.xz
> /lib/modules/6.19.6+deb14+1-rt-amd64/kernel/net/netfilter/nft_masq.ko.xz
> 
> while it's present in non-rt builds
> 
> That causes libvirt's default network (which uses this module and iptables for
> NATing) to not start
[...]

This is intentionally disabled upstream because xtables isn't compatible
with PREEMPT_RT.

Ben.

-- 
Ben Hutchings
Anthony's Law of Force: Don't force it, get a larger hammer.

[toc] | [next] | [standalone]

#91707 — Processed: Re: Bug#1130974: linux-image-rt-amd64: -rt kernel builds are missing xt_MASQUERADE module

Processing control commands:

> tag -1 upstream wontfix
Bug #1130974 [linux-image-rt-amd64] linux-image-rt-amd64: -rt kernel builds are missing xt_MASQUERADE module
Added tag(s) wontfix and upstream.

-- 
1130974: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1130974
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [next] | [standalone]

#91712

[Multipart message — attachments visible in raw view] — view raw

Control: reassign -1 src:libvirt
Control: retitle -1 libvirt: Should use nftables for IP masquerading to work with PREEMPT_RT
Control: severity -1 minor

On Mon, 2026-03-16 at 22:04 +0100, Mariusz Gronczewski wrote:
> On Mon, 16 Mar 2026 at 18:37, Ben Hutchings <ben@decadent.org.uk> wrote:
> > 
> > Control: tag -1 upstream wontfix
> > 
> > On Mon, 2026-03-16 at 17:20 +0100, Mariusz Gronczewski wrote:
> > > Package: linux-image-rt-amd64
> > > Version: 6.19.6-2
> > > Severity: important
> > > X-Debbugs-Cc: debian-amd64@lists.debian.org
> > > User: debian-amd64@lists.debian.org
> > > Usertags: amd64
> > > 
> > > -rt packages seem to be missing this module
> > > 
> > > /lib/modules/6.18.15+deb14-amd64/kernel/net/netfilter/nft_masq.ko.xz
> > > /lib/modules/6.18.15+deb14-amd64/kernel/net/netfilter/xt_MASQUERADE.ko.xz
> > > /lib/modules/6.18.15+deb14-rt-amd64/kernel/net/netfilter/nft_masq.ko.xz
> > > /lib/modules/6.19.6+deb14+1-amd64/kernel/net/netfilter/nft_masq.ko.xz
> > > /lib/modules/6.19.6+deb14+1-amd64/kernel/net/netfilter/xt_MASQUERADE.ko.xz
> > > /lib/modules/6.19.6+deb14+1-rt-amd64/kernel/net/netfilter/nft_masq.ko.xz
> > > 
> > > while it's present in non-rt builds
> > > 
> > > That causes libvirt's default network (which uses this module and iptables for
> > > NATing) to not start
> > [...]
> > 
> > This is intentionally disabled upstream because xtables isn't compatible
> > with PREEMPT_RT.
> 
> Oh, I didn't know, I used it since 6.12 and just noticed that in newer
> ones it's unavailable and it breaks default libvirt network
> 
> Should I report it to libvirt package ? With current setup of both,
> switching to RT without changing libvirt config will just make default
> network stop working

I'm reassigning this to libvirt.  No need to open another report.

Ben.

-- 
Ben Hutchings
Anthony's Law of Force: Don't force it, get a larger hammer.

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.kernel

csiph-web