podman: select the nftables firewall driver

Set firewall_driver = "nftables" in containers.conf so podman programs
networks through nft.

Signed-off-by: Daniel Golle <redacted>

diff --git a/utils/podman/Makefile b/utils/podman/Makefile
index f0bf4c64f6e1eca5b4e8715dd033c19292e94afb..fdb23ef2e40aa0c7f11e37176bbcdef3c5e77188 100644 (file)
--- a/utils/podman/Makefile
+++ b/utils/podman/Makefile
@@ -2,7 +2,7 @@ include $(TOPDIR)/rules.mk
 
 PKG_NAME:=podman
 PKG_VERSION:=5.8.4
-PKG_RELEASE:=1
+PKG_RELEASE:=2
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
 PKG_SOURCE_URL:=https://github.com/podman-container-tools/podman/archive/v$(PKG_VERSION)

diff --git a/utils/podman/files/containers.conf b/utils/podman/files/containers.conf
index b956f0db0fd849cb2eb64dc1634aa075274bf153..3c32b4365760d8425b687801bff7de74c27d168f 100644 (file)
--- a/utils/podman/files/containers.conf
+++ b/utils/podman/files/containers.conf
@@ -74,7 +74,7 @@ network_backend = "netavark"
 #  "/usr/local/lib/netavark",
 #  "/usr/lib/netavark",
 #]
-#firewall_driver = "none"
+firewall_driver = "nftables"
 network_config_dir = "/etc/containers/networks/"
 default_network = "podman"
 #default_subnet = "10.88.0.0/16"