Re: Fedora 32 System-Wide Change proposal: iptables-nft-default

2021-11-04 Thread Phil Sutter
Hi Bex, On Thu, Oct 21, 2021 at 12:58:11PM +0200, Brian (bex) Exelbierd wrote: > On Thu, Oct 21, 2021 at 3:23 AM Phil Sutter wrote: > > On Wed, Oct 20, 2021 at 01:40:35PM -0700, Adam Williamson wrote: > > > On Wed, 2021-10-20 at 18:39 +0200, Brian (bex) Exelbierd wrote: >

Re: Fedora 32 System-Wide Change proposal: iptables-nft-default

2021-10-20 Thread Phil Sutter
Hi! On Wed, Oct 20, 2021 at 01:40:35PM -0700, Adam Williamson wrote: > On Wed, 2021-10-20 at 18:39 +0200, Brian (bex) Exelbierd wrote: [...] > > AIUI, we made the change to use iptables-nft as the default with F32. We > > also decided that existing iptables-legacy users shouldn't be moved to > >

Re: Fedora 32 System-Wide Change proposal: iptables-nft-default

2020-01-16 Thread Phil Sutter
Hi Neal, On Thu, Jan 09, 2020 at 06:44:22AM -0500, Neal Gompa wrote: > On Thu, Jan 9, 2020 at 5:15 AM Phil Sutter wrote: [...] > > Yes, firewalld depends on 'iptables'. My big question is how to make > > that dependency prefer iptables-nft (assuming it 'Provides:

Re: Fedora 32 System-Wide Change proposal: iptables-nft-default

2020-01-09 Thread Phil Sutter
Hi Kevin, On Tue, Jan 07, 2020 at 10:16:05AM -0800, Kevin Fenzi wrote: > On Mon, Jan 06, 2020 at 06:02:12PM +0100, Phil Sutter wrote: > > I just noticed we didn't finish discussing the package rename proposal > > in related releng issue[1]: > > > > On Wed, Oct 3

Re: Fedora 32 System-Wide Change proposal: iptables-nft-default

2020-01-06 Thread Phil Sutter
Hi Kevin, I just noticed we didn't finish discussing the package rename proposal in related releng issue[1]: On Wed, Oct 30, 2019 at 05:02:08PM -0400, Ben Cotton wrote: [...] > To change the status quo, two measures are planned: > > === Raise priority of nft-variants in alternatives === > > Cur

Re: psutter pushed to iproute (master). "iproute-5.3.0-2 (..more)"

2019-10-08 Thread Phil Sutter
Hi, On Tue, Oct 08, 2019 at 01:23:01PM +0100, Tomasz Kłoczko wrote: > On Tue, 8 Oct 2019 at 12:58, wrote: > > > Notification time stamped 2019-10-08 11:54:56 UTC > > > > From 26d638db91fa316f706ea947ab076bce216ec8cc Mon Sep 17 00:00:00 2001 > > From: Phil Sutter

Re: iproute package update policy

2017-03-14 Thread Phil Sutter
Hi, On Mon, Mar 14, 2016 at 12:47:25PM +0100, Phil Sutter wrote: > So far my idea of maintaining Fedora's iproute package was to do full > version updates only in Rawhide and backport patches selectively to > stable versions on behalf of bug reports. > > But since stable ver

Re: How to configure a network bridge from script ?

2016-05-13 Thread Phil Sutter
On Fri, May 13, 2016 at 09:36:32AM +0300, Alexander Todorov wrote: > май 13 02:33:53 amd-dinar-02.lab.bos.redhat.com network[2189]: Could not load > file '/etc/sysconfig/network-scripts/ifcfg-lo' > май 13 02:33:53 amd-dinar-02.lab.bos.redhat.com network[2189]: [ OK ] > май 13 02:33:53 amd-dinar-

Re: How to configure a network bridge from script ?

2016-05-12 Thread Phil Sutter
Hi, On Thu, May 12, 2016 at 02:47:19PM +0300, Alexander Todorov wrote: > # cat /etc/sysconfig/network-scripts/ifcfg-enp1s0f0 > Generated by dracut initrd The line above is supposed to be a comment. [...] > май 04 10:33:32 amd-dinar-02.lab.bos.redhat.com network[1412]: [ OK ] > май 04 10:33:32

Re: iproute package split

2016-04-07 Thread Phil Sutter
On Thu, Apr 07, 2016 at 05:35:00PM +, Zbigniew Jędrzejewski-Szmek wrote: > On Thu, Apr 07, 2016 at 04:35:49PM +0100, James Hogarth wrote: > > On 7 Apr 2016 16:07, "Phil Sutter" wrote: > > > > > > Hi, > > > > > > On Thu, Apr 07, 2016 at

Re: iproute package split

2016-04-07 Thread Phil Sutter
Hi, On Thu, Apr 07, 2016 at 12:55:40PM +, Zbigniew Jędrzejewski-Szmek wrote: > If you have: > > (main package) > Obsoletes: %{name} < the-new-version-release > > %package tc > Obsoletes: %{name} < the-new-version-release > > Both subpackages should get installed on upgrade. Oh, this is awe

Re: iproute package split

2016-04-07 Thread Phil Sutter
Hi, On Tue, Mar 22, 2016 at 06:01:14PM +0100, Phil Sutter wrote: > I am in the process of splitting the 'tc' utility off from iproute > package. The motivation for this comes from two things: After considering your feedback (thanks!) and just going for it (thereby messing up Rawh

iproute package split

2016-03-22 Thread Phil Sutter
Hi, I am in the process of splitting the 'tc' utility off from iproute package. The motivation for this comes from two things: 1) Due to it's xt/ipt action, tc depends on iptables. 2) iproute is part of the 'Core' group. These two in combination lead to iptables being pulled into Core as a depen

Re: iproute package update policy

2016-03-20 Thread Phil Sutter
On Wed, Mar 16, 2016 at 10:34:46AM -0600, Kevin Fenzi wrote: > On Mon, 14 Mar 2016 20:42:24 +0100 > Phil Sutter wrote: > ...snip... > > > So I will stick to my former plan of not rebasing iproute in stable > > releases (unless there's good reason) but become ope

Re: iproute package update policy

2016-03-14 Thread Phil Sutter
On Mon, Mar 14, 2016 at 01:07:11PM -0600, Kevin Fenzi wrote: > On Mon, 14 Mar 2016 16:27:42 +0100 > Phil Sutter wrote: > > > On Mon, Mar 14, 2016 at 03:11:50PM +, Petr Pisar wrote: > > > On 2016-03-14, Phil Sutter wrote: > > > > Thanks for the explan

Re: iproute package update policy

2016-03-14 Thread Phil Sutter
On Mon, Mar 14, 2016 at 03:11:50PM +, Petr Pisar wrote: > On 2016-03-14, Phil Sutter wrote: > > Thanks for the explanation, although I honestly don't see how that could > > come to unison with the kernel updates applied to stable versions. Any > > new ve

Re: iproute package update policy

2016-03-14 Thread Phil Sutter
On Mon, Mar 14, 2016 at 02:03:40PM +, Zbigniew Jędrzejewski-Szmek wrote: > On Mon, Mar 14, 2016 at 01:36:38PM +0100, Phil Sutter wrote: > > On Mon, Mar 14, 2016 at 12:21:33PM +, James Hogarth wrote: > > > On 14 March 2016 at 11:47, Phil Sutter wrote: > > > >

Re: iproute package update policy

2016-03-14 Thread Phil Sutter
On Mon, Mar 14, 2016 at 12:21:33PM +, James Hogarth wrote: > On 14 March 2016 at 11:47, Phil Sutter wrote: > > > Hi, > > > > So far my idea of maintaining Fedora's iproute package was to do full > > version updates only in Rawhide and backport patches se

iproute package update policy

2016-03-14 Thread Phil Sutter
Hi, So far my idea of maintaining Fedora's iproute package was to do full version updates only in Rawhide and backport patches selectively to stable versions on behalf of bug reports. But since stable versions indeed receive full kernel updates (not just backported patches), there is an understan

Self Introduction: Phil Sutter

2015-09-24 Thread Phil Sutter
Hi, I recently took over maintenance of the iproute package in Fedora. After having become maintainer of it for RHEL, this was the logical next step. Having a strong background in embedded build systems (I was a core developer of FreeWRT until it deceased and am still contributing to OpenADK), I