Dear all, We have an EPEL-only package, iptables-epel, that provides the legacy packages dropped by the main iptables package in RHEL/CentOS 9 and above.
It has recently come to light that this package is not necessary in most cases: if you're using a stock CentOS/RHEL kernel, it's built with CONFIG_NFT_COMPAT, meaning iptables-nft + iptables-nft-services (iptables-services in Fedora) work just fine even with old-style iptables rules - https://www.kernelconfig.io/config_nft_compat It's also hard to maintain - for very little benefit (the one case we have in mind is systems where - for some reason - the kernel is not compiled with nftables enabled). As such, this definitely should be retired from EPEL 10 - better do it before RHEL 10 is officially launched. We plan to retire it from EPEL 9 as well - but since there are external users already, this probably does not have to be done immediately - and I'll ask the EPEL Steering Committee if we can mark this package deprecated for a while before then removing after a few months. Best regards, -- _o) Michel Lind _( ) identities: https://keyoxide.org/5dce2e7e9c3b1cffd335c1d78b229d2f7ccc04f2 README: https://fedoraproject.org/wiki/User:Salimma#README
signature.asc
Description: This is a digitally signed message part
-- _______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
