Romain Naour
6e9ede1d79
Now that firewalld has been fixed for Python 3.13,
TestFirewalldSysVInit still fail at runtime due to missing nftables json
support [1].
cat /var/log/firewalld
2025-09-02 21:34:50 Traceback (most recent call last):
File "/usr/lib/python3.13/site-packages/firewall/core/fw.py", line 649, in start
File "/usr/lib/python3.13/site-packages/firewall/core/fw.py", line 613, in _start
File "/usr/lib/python3.13/site-packages/firewall/core/fw.py", line 510, in _start_apply_objects
File "/usr/lib/python3.13/site-packages/firewall/core/fw_transaction.py", line 133, in execute
firewall.errors.FirewallError: COMMAND_FAILED: 'python-nftables' failed: Error: syntax error, unexpected '{'
{"nftables": [{"metainfo": {"json_schema_version": 1}}, {"add": {"table": {"family": "inet", "name": "firewalld"}}}, {"delete": {"table": {"family": "inet", "name": "firewalld"}}}, {"add": {"table": {"family": "inet", "name": "firewalld"}}}]}
^
Fixes:
https://gitlab.com/buildroot.org/buildroot/-/jobs/11198422467 (TestFirewalldSystemd)
[1] https://github.com/firewalld/firewalld/commit/1582c5dd736a11177ec320eb4ecbeb09fcae313a
Signed-off-by: Romain Naour <romain.naour@smile.fr>
Signed-off-by: Julien Olivain <ju.o@free.fr>
42 lines
1.8 KiB
Plaintext
42 lines
1.8 KiB
Plaintext
config BR2_PACKAGE_FIREWALLD
|
|
bool "firewalld"
|
|
depends on BR2_USE_MMU # gobject-introspection, python3, python-gobject
|
|
depends on BR2_PACKAGE_GOBJECT_INTROSPECTION_ARCH_SUPPORTS
|
|
depends on BR2_USE_WCHAR # glib2, dbus-python, nftables, python3
|
|
depends on BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 # gobject-introspection
|
|
depends on BR2_TOOLCHAIN_HAS_THREADS # dbus-python, python3
|
|
depends on BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_12
|
|
depends on BR2_TOOLCHAIN_USES_GLIBC # gobject-introspection
|
|
depends on BR2_HOST_GCC_AT_LEAST_8 # gobject-introspection
|
|
depends on !BR2_STATIC_LIBS # python3
|
|
select BR2_PACKAGE_DBUS # dbus-python
|
|
select BR2_PACKAGE_DBUS_PYTHON
|
|
select BR2_PACKAGE_GOBJECT_INTROSPECTION
|
|
select BR2_PACKAGE_JANSSON # Uses the nftables json interface
|
|
select BR2_PACKAGE_NFTABLES
|
|
select BR2_PACKAGE_NFTABLES_JSON # runtime
|
|
select BR2_PACKAGE_PYTHON3
|
|
select BR2_PACKAGE_PYTHON_GOBJECT
|
|
help
|
|
Firewalld provides a dynamically managed firewall with
|
|
support for network or firewall zones to define the trust
|
|
level of network connections or interfaces. It has support
|
|
for IPv4, IPv6 firewall settings and for ethernet bridges and
|
|
a separation of runtime and permanent configuration options.
|
|
It also provides an interface for services or applications to
|
|
add ip*tables and ebtables rules directly.
|
|
|
|
Note: Firewalld uses nftables as the backend and requires
|
|
kernel version >= 5.3.
|
|
|
|
https://github.com/firewalld/firewalld
|
|
|
|
comment "firewalld needs a glibc toolchain w/ wchar, dynamic library, headers >= 3.12, gcc >= 4.9, host gcc >= 8"
|
|
depends on BR2_USE_MMU
|
|
depends on BR2_PACKAGE_GOBJECT_INTROSPECTION_ARCH_SUPPORTS
|
|
depends on !BR2_TOOLCHAIN_USES_GLIBC || \
|
|
!BR2_TOOLCHAIN_HEADERS_AT_LEAST_3_12 || \
|
|
!BR2_USE_WCHAR || BR2_STATIC_LIBS || \
|
|
!BR2_TOOLCHAIN_GCC_AT_LEAST_4_9 || \
|
|
!BR2_HOST_GCC_AT_LEAST_8 || BR2_STATIC_LIBS
|