kernel: update Kconfig templates to 5.7-rc5
Because of how "make olddefconfig" works, we were missing netfilter
options and couldn't configure INPUT/FORWARD/OUTPUT chains needed for
kcephfs suite (unshare_ns_mount.sh, mount.py).
Update our Kconfig templates to 5.7-rc5. This has been generated
from the actual config (/boot/config-*) of one of the latest kernel
builds in shaman (as opposed to e.g. taking a distro config).
Here is the diff against the actual deb config:
14a18
> CONFIG_CC_HAS_ASM_INLINE=y
1199,
1201c1203,1205
< # CONFIG_NF_TABLES_INET is not set
< # CONFIG_NF_TABLES_NETDEV is not set
< # CONFIG_NFT_NUMGEN is not set
---
> CONFIG_NF_TABLES_INET=y
> CONFIG_NF_TABLES_NETDEV=y
> CONFIG_NFT_NUMGEN=m
1202a1207
> # CONFIG_NFT_FLOW_OFFLOAD is not set
1208a1214
> CONFIG_NFT_NAT=m
1213a1220
> CONFIG_NFT_REJECT_INET=m
1215a1223,1224
> CONFIG_NFT_FIB=m
> # CONFIG_NFT_FIB_INET is not set
1217,
1221c1226,1235
< # CONFIG_NFT_SOCKET is not set
< # CONFIG_NFT_OSF is not set
< # CONFIG_NFT_TPROXY is not set
< # CONFIG_NFT_SYNPROXY is not set
< # CONFIG_NF_FLOW_TABLE is not set
---
> CONFIG_NFT_SOCKET=m
> CONFIG_NFT_OSF=m
> CONFIG_NFT_TPROXY=m
> CONFIG_NFT_SYNPROXY=m
> CONFIG_NF_DUP_NETDEV=m
> CONFIG_NFT_DUP_NETDEV=m
> CONFIG_NFT_FWD_NETDEV=m
> # CONFIG_NFT_FIB_NETDEV is not set
> CONFIG_NF_FLOW_TABLE_INET=m
> CONFIG_NF_FLOW_TABLE=m
1386,
1387c1400,1405
< # CONFIG_NF_TABLES_IPV4 is not set
< # CONFIG_NF_TABLES_ARP is not set
---
> CONFIG_NF_TABLES_IPV4=y
> CONFIG_NFT_REJECT_IPV4=m
> CONFIG_NFT_DUP_IPV4=m
> CONFIG_NFT_FIB_IPV4=m
> CONFIG_NF_TABLES_ARP=y
> CONFIG_NF_FLOW_TABLE_IPV4=m
1423c1441,1445
< # CONFIG_NF_TABLES_IPV6 is not set
---
> CONFIG_NF_TABLES_IPV6=y
> CONFIG_NFT_REJECT_IPV6=m
> CONFIG_NFT_DUP_IPV6=m
> CONFIG_NFT_FIB_IPV6=m
> CONFIG_NF_FLOW_TABLE_IPV6=m
1459a1482
> CONFIG_NFT_BRIDGE_REJECT=m
1661a1685
> # CONFIG_NET_ACT_CT is not set
Here is the diff against the actual rpm config:
1167,
1169c1170,1172
< # CONFIG_NF_TABLES_INET is not set
< # CONFIG_NF_TABLES_NETDEV is not set
< # CONFIG_NFT_NUMGEN is not set
---
> CONFIG_NF_TABLES_INET=y
> CONFIG_NF_TABLES_NETDEV=y
> CONFIG_NFT_NUMGEN=m
1170a1174
> # CONFIG_NFT_FLOW_OFFLOAD is not set
1177,
1178c1181,1183
< # CONFIG_NFT_TUNNEL is not set
< # CONFIG_NFT_OBJREF is not set
---
> CONFIG_NFT_NAT=m
> CONFIG_NFT_TUNNEL=m
> CONFIG_NFT_OBJREF=m
1180c1185
< # CONFIG_NFT_QUOTA is not set
---
> CONFIG_NFT_QUOTA=m
1181a1187
> CONFIG_NFT_REJECT_INET=m
1183a1190,1191
> CONFIG_NFT_FIB=m
> # CONFIG_NFT_FIB_INET is not set
1185c1193
< # CONFIG_NFT_SOCKET is not set
---
> CONFIG_NFT_SOCKET=m
1189c1197,1202
< # CONFIG_NF_FLOW_TABLE is not set
---
> CONFIG_NF_DUP_NETDEV=m
> CONFIG_NFT_DUP_NETDEV=m
> CONFIG_NFT_FWD_NETDEV=m
> # CONFIG_NFT_FIB_NETDEV is not set
> CONFIG_NF_FLOW_TABLE_INET=m
> CONFIG_NF_FLOW_TABLE=m
1354,
1355c1367,1372
< # CONFIG_NF_TABLES_IPV4 is not set
< # CONFIG_NF_TABLES_ARP is not set
---
> CONFIG_NF_TABLES_IPV4=y
> CONFIG_NFT_REJECT_IPV4=m
> CONFIG_NFT_DUP_IPV4=m
> CONFIG_NFT_FIB_IPV4=m
> CONFIG_NF_TABLES_ARP=y
> # CONFIG_NF_FLOW_TABLE_IPV4 is not set
1391c1408,1412
< # CONFIG_NF_TABLES_IPV6 is not set
---
> CONFIG_NF_TABLES_IPV6=y
> CONFIG_NFT_REJECT_IPV6=m
> CONFIG_NFT_DUP_IPV6=m
> CONFIG_NFT_FIB_IPV6=m
> CONFIG_NF_FLOW_TABLE_IPV6=m
1420a1442
> CONFIG_NFT_BRIDGE_REJECT=m
1422c1444
< # CONFIG_NF_CONNTRACK_BRIDGE is not set
---
> CONFIG_NF_CONNTRACK_BRIDGE=m
1623a1646
> # CONFIG_NET_ACT_CT is not set
Fixes: https://tracker.ceph.com/issues/45531
Signed-off-by: Xiubo Li <xiubli@redhat.com>
Signed-off-by: Ilya Dryomov <idryomov@gmail.com>