[CRIU] [PATCH] net: suggest enabling NETFILTER_XT_MARK if iptables-restore failed

Dmitry Safonov dsafonov at virtuozzo.com
Thu May 4 12:14:50 PDT 2017


On x86_64 defconfig it's =m, so if you boot kernel without initramfs
in qemu, you will see this.

Fixes: #292
Signed-off-by: Dmitry Safonov <dsafonov at virtuozzo.com>
---
 criu/net.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/criu/net.c b/criu/net.c
index b4230007cd9e..1a4356a55f04 100644
--- a/criu/net.c
+++ b/criu/net.c
@@ -2275,6 +2275,9 @@ int network_lock_internal()
 	if (kdat.ipv6)
 		ret |= iptables_restore(true, conf, sizeof(conf) - 1);
 
+	if (ret)
+		pr_err("Locking network failed: iptables-restore returned %d. This may be connected to disabled CONFIG_NETFILTER_XT_MARK kernel build config option.\n", ret);
+
 	if (restore_ns(nsret, &net_ns_desc))
 		ret = -1;
 
-- 
2.12.2



More information about the CRIU mailing list