View Issue Details

IDProjectCategoryView StatusLast Update
0001135channel: kernel/el7kernel-mlpublic2021-09-22 09:12
Reporterdongjh Assigned Toburakkucat  
PrioritynormalSeverityfeatureReproducibilityalways
Status resolvedResolutionfixed 
Summary0001135: Missing br_netfilter module ?
DescriptionFor K8S installation, i need the br_netfilter module, after installing the kernel-ml.x86_64(Version 5.14.5-1) on CentOS 7.9, i failed to load the br_netfilter module.What is the problem ?

[root@docker lib]# uname -a
Linux docker 5.14.5-1.el7.elrepo.x86_64 #1 SMP Thu Sep 16 09:03:54 EDT 2021 x86_64 x86_64 x86_64 GNU/Linux
[root@docker lib]#
[root@docker ~]# lsmod|grep br_netfilter
[root@docker ~]#
[root@docker ~]# modprobe br_netfilter
[root@docker ~]#
[root@docker ~]# lsmod|grep br_netfilter
[root@docker ~]#
[root@docker ~]# modprobe -r br_netfilter
modprobe: FATAL: Module br_netfilter is builtin.
[root@docker ~]#
[root@docker lib]# cat /proc/modules|grep br_netfilter
[root@docker lib]#
[root@docker 5.14.5-1.el7.elrepo.x86_64]# cat modules.builtin|grep filter
kernel/net/netfilter/x_tables.ko
kernel/net/netfilter/xt_tcpudp.ko
kernel/net/bridge/br_netfilter.ko

Does it mean the br_netfilter has been built into the kernel and can not be loaded dynamically ?
TagsNo tags attached.

Activities

dongjh

2021-09-18 21:18

reporter   ~0007838

[root@docker 5.14.5-1.el7.elrepo.x86_64]# modinfo br_netfilter
modinfo: ERROR: Module br_netfilter not found.

If it has been builtin, how can i query the module information ?

pperry

2021-09-19 06:58

administrator   ~0007840

Last edited: 2021-09-19 06:59

Hi,

Yes, br_netfilter has been built into the kernel rather than as a module. You can not query modules that have been built in with modinfo (or other tools provided by kmod) as these tools only work with dynamically loadable modules, not the core kernel.

What is it that you are unable to achieve with br_netfilter built into the kernel? The functionality should be identical to that of a dynamically loaded module - the only thing you can not do is unload the code from the running kernel.

We can look at building br_netfilter as a module rather than built in, which would be more in keeping with configuration the el7 distro kernel.

burakkucat

2021-09-19 11:48

administrator   ~0007845

I have now queued an adjustment of the kernel-{lt|ml} configuration, from CONFIG_BRIDGE_NETFILTER=y to CONFIG_BRIDGE_NETFILTER=m, which will occur with the next builds of the kernel-{lt|ml} package sets.

burakkucat

2021-09-22 09:12

administrator   ~0007871

The recently released kernel-lt [1] and kernel-ml [2] package sets, for el7, now have the configuration option CONFIG_BRIDGE_NETFILTER=m set.

Now closing as "resolved/fixed".

[1] https://lists.elrepo.org/pipermail/elrepo/2021-September/005855.html
[2] https://lists.elrepo.org/pipermail/elrepo/2021-September/005857.html

Issue History

Date Modified Username Field Change
2021-09-18 21:12 dongjh New Issue
2021-09-18 21:12 dongjh Status new => assigned
2021-09-18 21:12 dongjh Assigned To => burakkucat
2021-09-18 21:18 dongjh Note Added: 0007838
2021-09-19 06:58 pperry Note Added: 0007840
2021-09-19 06:59 pperry Note Edited: 0007840
2021-09-19 11:48 burakkucat Note Added: 0007845
2021-09-22 09:12 burakkucat Status assigned => resolved
2021-09-22 09:12 burakkucat Resolution open => fixed
2021-09-22 09:12 burakkucat Note Added: 0007871