Add table in the container with latest nftables: root@pumped-pony:/# echo $container podman
root@pumped-pony:/# cat /etc/os-release PRETTY_NAME="Ubuntu Resolute Raccoon (development branch)" NAME="Ubuntu" VERSION_ID="26.04" VERSION="26.04 (Resolute Raccoon)" VERSION_CODENAME=resolute ID=ubuntu ID_LIKE=debian HOME_URL="https://www.ubuntu.com/"; SUPPORT_URL="https://help.ubuntu.com/"; BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"; PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"; UBUNTU_CODENAME=resolute LOGO=ubuntu-logo root@pumped-pony:/# nft add table test root@pumped-pony:/# nft 'add set test dummy { type ipv4_addr; }' root@pumped-pony:/# nft list ruleset table ip test { set dummy { type ipv4_addr } } Exit the container root@pumped-pony:/# exit exit root@pumped-pony:~# cat /etc/os-release PRETTY_NAME="Ubuntu 24.04.4 LTS" NAME="Ubuntu" VERSION_ID="24.04" VERSION="24.04.4 LTS (Noble Numbat)" VERSION_CODENAME=noble ID=ubuntu ID_LIKE=debian HOME_URL="https://www.ubuntu.com/"; SUPPORT_URL="https://help.ubuntu.com/"; BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"; PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"; UBUNTU_CODENAME=noble LOGO=ubuntu-logo root@pumped-pony:~# nft list ruleset Segmentation fault And observe the segmentation fault root@pumped-pony:~# apt install nftables=1.0.9-1ubuntu0.1 libnftables1=1.0.9-1ubuntu0.1 Reading package lists... Done Building dependency tree... Done Reading state information... Done Suggested packages: firewalld The following packages will be upgraded: libnftables1 nftables 2 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. Need to get 428 kB of archives. After this operation, 0 B of additional disk space will be used. Get:1 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 nftables amd64 1.0.9-1ubuntu0.1 [69.8 kB] Get:2 http://archive.ubuntu.com/ubuntu noble-proposed/main amd64 libnftables1 amd64 1.0.9-1ubuntu0.1 [359 kB] Fetched 428 kB in 1s (414 kB/s) (Reading database ... 19878 files and directories currently installed.) Preparing to unpack .../nftables_1.0.9-1ubuntu0.1_amd64.deb ... Unpacking nftables (1.0.9-1ubuntu0.1) over (1.0.9-1build1) ... Preparing to unpack .../libnftables1_1.0.9-1ubuntu0.1_amd64.deb ... Unpacking libnftables1:amd64 (1.0.9-1ubuntu0.1) over (1.0.9-1build1) ... Setting up libnftables1:amd64 (1.0.9-1ubuntu0.1) ... Setting up nftables (1.0.9-1ubuntu0.1) ... Processing triggers for libc-bin (2.39-0ubuntu8.7) ... Upgrade to nftables from noble-proposed, and observe that one can list rulesets once again root@pumped-pony:~# nft list ruleset table ip test { set dummy { type ipv4_addr } } ** Tags removed: verification-needed-noble ** Tags added: verification-done-noble -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2142552 Title: netlink: fix crash when ops doesn't support udata To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nftables/+bug/2142552/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
