📝 Made notes on current work in gentoo
This commit is contained in:
parent
775d7947fa
commit
2b82fbd024
1 changed files with 57 additions and 0 deletions
57
gentoo/current.md
Normal file
57
gentoo/current.md
Normal file
|
|
@ -0,0 +1,57 @@
|
||||||
|
# Current Tasks
|
||||||
|
|
||||||
|
## Brief Intro
|
||||||
|
|
||||||
|
This document ins solely here as a sort of note to my future self regarding
|
||||||
|
various Gentoo related things I'm working on.
|
||||||
|
|
||||||
|
## Kernel 6.18
|
||||||
|
|
||||||
|
I've downloaded Kernel 6.18 and it's giving us a few issues. First and foremost
|
||||||
|
the gentoo kernel devs have turned off iptables in the kernel by default,
|
||||||
|
forcing us to choose between the `xtables-legacy-multi` or `xtables-nft-multi`
|
||||||
|
via `eselect`:
|
||||||
|
|
||||||
|
```sh
|
||||||
|
eselect tables list
|
||||||
|
```
|
||||||
|
|
||||||
|
On the old kernel (6.12), we want to stay on 1, as it allows `ufw`/`iptables` to
|
||||||
|
just work out of the box. On the new kernel (6.18), we want to switch this
|
||||||
|
profile as it allows docker to run (sort of, see below), but `ufw` outright will
|
||||||
|
not work as it relies on iptables.
|
||||||
|
|
||||||
|
What this means in essence is we have to convert over to `nftables`, which I've
|
||||||
|
successfully tested is, while certainly more involved than `ufw`, is not that
|
||||||
|
difficult.
|
||||||
|
|
||||||
|
[Gentoo Wiki's nftables entry](https://wiki.gentoo.org/wiki/Nftables)
|
||||||
|
|
||||||
|
You may also want to review the
|
||||||
|
[Gentoo Wiki's iptables entry](https://wiki.gentoo.org/wiki/Iptables).
|
||||||
|
|
||||||
|
Now, the issue still remains that `docker` also breaks because it heavily
|
||||||
|
depends on `iptables`, and `nftables` support is
|
||||||
|
[experimental as of version 29](https://docs.docker.com/engine/network/firewall-nftables),
|
||||||
|
a version that Gentoo currently does not have in its
|
||||||
|
[repos](https://packages.gentoo.org/packages/app-containers/docker).
|
||||||
|
|
||||||
|
I have found evidence that there is a compatibility layer between `iptables` and
|
||||||
|
`nftables` which some have gotten to work on Debian called `iptables-compat`. I
|
||||||
|
have enabled a USE flag on `nftables` called `xtables` which supposedly tries to
|
||||||
|
address this compatibility. I have not yet tested this on kernel 6.18, but will
|
||||||
|
do so when we have time.
|
||||||
|
|
||||||
|
## Zen Kernel 6.18
|
||||||
|
|
||||||
|
This all came about while learning about Gentoo Kernel compilation for the first
|
||||||
|
time, and while I have gotten a version of 6.12 working, 6.12.59 specifically.
|
||||||
|
While stable, I am more used to the bleeding edge of Artix Linux and would like
|
||||||
|
to have the Zen Kernel patches applied. The Zen Kernel via the Gentoo repos is
|
||||||
|
only within the last few versions and that is why I started playing around with
|
||||||
|
this.
|
||||||
|
|
||||||
|
In short, get the regular 6.18 kernel working, save the .config, redownload the
|
||||||
|
zen kernel, apply this config and run `make olddefconfig` and you should not
|
||||||
|
have these incompatibility issues. See `updating.md` for details on how to
|
||||||
|
upgrade to the zen kernel once you have the regular kernel compiled and working.
|
||||||
Loading…
Add table
Add a link
Reference in a new issue