XPost: linux.debian.bugs.dist   
   From: ben@decadent.org.uk   
      
   On Thu, 2025-10-23 at 16:26 +0200, Dmytro Nezhevenko wrote:   
   > Package: src:linux   
   > Version: 6.17.2-1~exp1   
   > Severity: normal   
   > X-Debbugs-Cc: debian-amd64@lists.debian.org   
   > User: debian-amd64@lists.debian.org   
   > Usertags: amd64   
   >    
   > Dear Maintainer,   
   >    
   > It looks like kernel 6.17.2 from experimental has no support for    
   > CONFIG_NETFILTER_XT_TARGET_MASQUERADE   
   >    
   > This prevents libvirt from bringing up virtual bridge networking with   
   > it's default configuration (that uses iptables)   
   >    
   > Current sid kernel (6.16) is OK.   
   >    
   > PS. Sorry if it's intentional change for transition from iptables   
   [...]   
      
   There was an intentional change upstream: there is a new symbol   
   CONFIG_NETFILTER_XTABLES_LEGACY that iptables etc. depend on, and it is   
   off by default.  But we certainly shouldn't break libvirt, so I think we   
   need to turn that back on for now.   
      
   Ben.   
      
   --    
   Ben Hutchings   
   Never put off till tomorrow what you can avoid all together.   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQIzBAABCgAdFiEErCspvTSmr92z9o8157/I7JWGEQkFAmj6cjgACgkQ57/I7JWG   
   EQkvkQ/+Jo3h/Iqtu2ws2P2MtL1563ymm3j7f49MwKlqkvBMo7iyV09N6w6SMlYl   
   tfNilTfpNbUbVqdlo6IjlJyMmNk+Z8QVSWxT+YWTb/nVqNs21TmkADzIwU76V6Yn   
   EENPSF+8INzuFgNHx+hkNboIbYteKnB1oddjEpaDx87EFglCQ5Rh3btZzOmKjek8   
   IxHpAxeQDm4eSdFA4C7SE3qnMgLGan8FW7iopyoHm0rTdY6JdKyMd4RNKiwBTlxb   
   mMM19/9gNCyg+NXvm9a2tiU5StgFAQjekdTT1q1uq3KHAvEjYn++XDXscabuHnID   
   tTDvuqd+nTuTW+NsAaCQ83lGEPsTwnBjCV4Rli2IT8PAaBGllwDmkZl2H839FipL   
   uuvNBko1ZtM35TDGBGqX21lwMvzoI7SwITlHAzEs2NQo+9aF9UYiLBCW6zz4tisv   
   f3Jo8dhYla9LQZZZZgQ3ixkGkjaIRlXwUWUkEXHxCe931o6Md4Q5n+/6g0WHLwP0   
   mlbbvs4YLILN5zgO7gL6UDxE+UXmAXQcFqegKQL3cfZicQyYG1LEyvcqtreLyUHz   
   snjltPuTKu7gi2ijYu3u5cLJAIOlc6WFY40BYiZMibYItekJSigeGmMgec4lxZxA   
   0zkHgj4x34HMMLYIQUdbdbGqyyE/VFKnUeGKEc1PxJo3N4gHahE=   
   =QXhc   
   -----END PGP SIGNATURE-----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)