diff options
| author |  sommerfeld <sommerfeld@sommerfeld.dev> | 2026-05-13 13:43:41 +0100 |
|---|---|---|
| committer | sommerfeld <sommerfeld@sommerfeld.dev> | 2026-05-13 13:43:41 +0100 |
| commit | a831d12291f40832bc3da4a927cbc31cae8e06eb (patch) | |
| tree | e2002506f3b90ae68cd046b40c75f346ad087aa5 /etc/lostfiles.ignore.tmpl | |
| parent | 6efbd1cd57f72f80808c7992ea03642f65c7aa2a (diff) | |
| download | dotfiles-a831d12291f40832bc3da4a927cbc31cae8e06eb.tar.gz dotfiles-a831d12291f40832bc3da4a927cbc31cae8e06eb.tar.bz2 dotfiles-a831d12291f40832bc3da4a927cbc31cae8e06eb.zip | |
fix(nftables): use iifname/oifname for virbr0 so rules load before libvirtd
nftables.service starts at boot before libvirtd creates the virbr0 NAT
bridge. 'iif'/'oif' resolve to a kernel ifindex at rule-load time and
fail with 'Interface does not exist' when virbr0 isn't up yet.
'iifname'/'oifname' do a string match per packet and tolerate a missing
interface, so the ruleset loads cleanly at boot and starts matching
once libvirtd brings virbr0 up.
Diffstat (limited to 'etc/lostfiles.ignore.tmpl')
0 files changed, 0 insertions, 0 deletions