liminix

commit 16fb3f53439f5a1dfcad32b9c6007026d227fa23
parent 9c62e8333df8ca577b6210df79addaebef4e4a4a
Author: Peter Collingbourne <peter@pcc.me.uk>
Date:   Sat, 25 Apr 2026 11:20:48 -0700

Remove iptables modules

With Linux 6.12, some of the iptables modules are no longer directly
selectable, leading to a failure to build the module loader. We don't
need them anyway as we use nftables, so remove them.

Diffstat:
M
modules/firewall/default.nix
 | 
12
------------

1 file changed, 0 insertions(+), 12 deletions(-)
diff --git a/modules/firewall/default.nix b/modules/firewall/default.nix
@@ -21,9 +21,6 @@ let
       "nft_fib_ipv6"
       "nf_log_syslog"
 
-      "ip6_tables"
-      "ip_tables"
-      "iptable_nat"
       "nf_conntrack"
       "nf_defrag_ipv4"
       "nf_defrag_ipv6"
@@ -45,10 +42,6 @@ let
       "nft_reject_inet"
       "nft_reject_ipv4"
       "nft_reject_ipv6"
-      "x_tables"
-      "xt_MASQUERADE"
-      "xt_nat"
-      "xt_tcpudp"
     ];
   };
 in
@@ -110,11 +103,6 @@ in
 
       NETLINK_DIAG = "y";
 
-      IP6_NF_IPTABLES = "m";
-      IP_NF_IPTABLES = "m";
-      IP_NF_NAT = "m";
-      IP_NF_TARGET_MASQUERADE = "m";
-
       NFT_CT = "m";
       NFT_FIB_IPV4 = "m";
       NFT_FIB_IPV6 = "m";