hacc/haccfiles
8
0
Fork 1
Code Issues 1 Pull requests Projects Releases Wiki Activity

hainich: block x_tables module

Browse source 
this also blocks the x_tables module to prent it from loading
ip_tables
This commit is contained in:
schweby 2021-03-26 10:40:10 +01:00
parent 8a17da7761
commit 78e607a28d
No known key found for this signature in database
GPG key ID: 3A489DBB732B9614
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
hosts/hainich/configuration.nix
View file

@ -27,8 +27,9 @@
boot.loader.grub.device = "/dev/sda"; boot.loader.grub.device = "/dev/sda";
boot.supportedFilesystems = [ "zfs" ]; boot.supportedFilesystems = [ "zfs" ];
# stop presumably docker form loading ip_tables and breaking nftables # stop *something* from loading ip_tables and breaking nftables
boot.blacklistedKernelModules = [ "ip_tables" "ip6_tables" ]; boot.blacklistedKernelModules = [ "ip_tables" "ip6_tables" "x_tables"];
# networking # networking
networking.hostName = "hainich"; networking.hostName = "hainich";