Bug#787480: build with iptables support

[Michael Biebl]

Hi Joey

Am 02.06.2015 um 02:27 schrieb Joey Hess:
> Package: systemd
> Version: 220-3
> Severity: normal
> File: systemd-networkd
> 
> I'm trying to use systemd-networkd with systemd-nspawn --private-network --port
> now that a systemd supporting this feature has convenently landed in unstable
> early. ;)
> 
> Jun 01 20:14:03 clam systemd-networkd[4629]: ve-t3: Could not enable IP masquerading: Operation not supported
> 
> Seems that networkd needs to be linked to libiptc.so for that to work.

We were reluctant to link against libiptc, since that would mean a
dependency on iptables, which is about 4M of additional disk space which
even minimal systems would have to install.

Given the recent upstream discussions [1] to switch to nftables, we will
probably wait a bit, until things have settled, before turning this
feature on. Hope that makes sense.

Cheers,
Michael

[1]
http://lists.freedesktop.org/archives/systemd-devel/2015-June/032661.html

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20150602/877e8dfc/attachment-0002.sig>