The Wayback Machine - https://web.archive.org/web/20251014182104/https://github.com/moby/moby/pull/49114
Skip to content

Conversation

thaJeztah
Copy link
Member

The netfilter module is now loaded on-demand, and no longer during daemon startup, making these fields obsolete. These fields are now always false and will be removed in the next relase.

This patch deprecates:

  • the BridgeNfIptables field in api/types/system.Info
  • the BridgeNfIp6tables field in api/types/system.Info
  • the BridgeNFCallIPTablesDisabled field in pkg/sysinfo.SysInfo
  • the BridgeNFCallIP6TablesDisabled field in pkg/sysinfo.SysInfo

- What I did

- How I did it

- How to verify it

- Description for the changelog

- Go SDK: the `BridgeNfIptables` field in `api/types/system.Info` is deprecated and will be removed in the next release
- Go SDK: the `BridgeNfIp6tables` field in `api/types/system.Info`  is deprecated and will be removed in the next release
- Go SDK: the `BridgeNFCallIPTablesDisabled` field in `pkg/sysinfo.SysInfo` is deprecated and will be removed in the next release
- Go SDK: the `BridgeNFCallIP6TablesDisabled` field in `pkg/sysinfo.SysInfo`  is deprecated and will be removed in the next release

- API: Deprecated: The `BridgeNfIptables` and `BridgeNfIp6tables` fields in the 
  `GET /info` response are now always be `false` and will be omitted in API
  v1.49. The netfilter module is now loaded on-demand, and no longer during
  daemon startup, making these fields obsolete.

- A picture of a cute animal (not mandatory but encouraged)

The netfilter module is now loaded on-demand, and no longer during daemon
startup, making these fields obsolete. These fields are now always `false`
and will be removed in the next relase.

This patch deprecates:

- the `BridgeNfIptables` field in `api/types/system.Info`
- the `BridgeNfIp6tables` field in `api/types/system.Info`
- the `BridgeNFCallIPTablesDisabled` field in `pkg/sysinfo.SysInfo`
- the `BridgeNFCallIP6TablesDisabled` field in `pkg/sysinfo.SysInfo`

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Comment on lines -270 to -271
info.BridgeNFCallIPTablesDisabled = !readProcBool("/proc/sys/net/bridge/bridge-nf-call-iptables")
info.BridgeNFCallIP6TablesDisabled = !readProcBool("/proc/sys/net/bridge/bridge-nf-call-ip6tables")
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

FWIW; this stops setting these fields, regardless of API version. I didn't update docs for older API versions, but given how we used this information thought it was OK to just stop setting it (worst case scenario, we add these lines back, and reset it in old API versions, but I highly doubt anyone outside of the daemon itself uses this information.

@akerouanton akerouanton merged commit ca85ba2 into moby:master Dec 18, 2024
167 checks passed
@thaJeztah thaJeztah deleted the deprecate_BridgeNfIptables_fields branch December 18, 2024 08:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants