[Devel] [PATCH RH7] ve/kmod: fix misprint in fib modules autoload allow rules

Pavel Tikhomirov ptikhomirov at virtuozzo.com
Sat Feb 20 12:10:19 MSK 2021


When testing criu to suspend resume "fib" rules I found out that we have
wrong names for fib module aliases, and thus can't load them on restore
if they are not yet loaded.

Perf shows when restoring centos 8 CT with docker:
probe:module_payload_iptable_allowed: module_string="nft-expr-2-fib"

https://jira.sw.ru/browse/PSBM-125002

Fixes: 84beb0e73874a ("ve/kmod: make fib modules autoloadable from CT")
Signed-off-by: Pavel Tikhomirov <ptikhomirov at virtuozzo.com>
---
 kernel/kmod.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kernel/kmod.c b/kernel/kmod.c
index aded87693bfd6..a357d0b89817c 100644
--- a/kernel/kmod.c
+++ b/kernel/kmod.c
@@ -372,8 +372,8 @@ static struct {
 	{ "nf-logger-7-1",      VE_IP_IPTABLES			},
 	{ "nf-logger-10-1",     VE_IP_IPTABLES6			},
 
-	{ "nf-expr-1-fib",	VE_IP_IPTABLES			},
-	{ "nf-expr-2-fib",	VE_IP_IPTABLES			},
+	{ "nft-expr-1-fib",	VE_IP_IPTABLES			},
+	{ "nft-expr-2-fib",	VE_IP_IPTABLES			},
 	{ "nft-expr-10-fib",	VE_IP_IPTABLES6			},
 	{ "nft_fib",		VE_IP_IPTABLES			},
 };
-- 
2.26.2



More information about the Devel mailing list