CONFIG_NET_CLS_CGROUP unset without warning in kernel 6.13.0
Hello everyone 👋 I was depending on the net_cls subsystem in cgroup v1 but the config was changed between stable kernel 6.12.9 and 6.13.0 to not include it! 🥲 pavin@suse-pc:~> cat /usr/lib/modules/6.12.9-1-default/config | grep CONFIG_NET_CLS_CGROUP CONFIG_NET_CLS_CGROUP=m pavin@suse-pc:~> cat /usr/lib/modules/6.13.0-1-default/config | grep CONFIG_NET_CLS_CGROUP # CONFIG_NET_CLS_CGROUP is not set Please, can this be added back with the next stable version? 🤔 Thanks, Pavin Joseph.
26.01.2025 11:13, Pavin Joseph wrote:
It not only removes cgroup v1 support - it also removes any way to match cgroup v2:
I would expect that *first* xt_match is split into v1 and v2 and *then* v1 support is disabled. commit 29cfd15c048c831e29a70be0be141aefd6a219c8 Author: Michal Koutný <mkoutny@suse.com> Date: Mon Jan 13 18:08:33 2025 +0100 config: Disable CONFIG_CGROUP_NET_CLASSID
This broke a number of user scenarios including Mullvad VPN and even KDE Wallet. I had to revert to using 6.12* to make things work. I am not a Kernel developer, I am just reporting this so you know that user scenarios are broken.
Am 30.01.25 um 05:05 schrieb Anton Babadjanov:
This broke a number of user scenarios including Mullvad VPN and even KDE Wallet. I had to revert to using 6.12* to make things work.
I am not a Kernel developer, I am just reporting this so you know that user scenarios are broken.
JFYI: With kernel-default-6.13.0-3.1.gb338842.x86_64 from Kernel:stable it is set again: Mo Jan 27 2025 mkoutny@suse.com - Revert "config: Disable CONFIG_CGROUP_NET_CLASSID" This reverts commit 29cfd15c048c831e29a70be0be141aefd6a219c8. It turns out there are users of cgroup matching [1], so restore original configs, until only purely v1 part can be disabled. [1] https://lists.opensuse.org/archives/list/kernel@lists.opensuse.org/thread/S2... - commit 56f1e79 Regards, Frank
30.01.2025 21:21, Frank Krüger wrote:
Unfortunately disabling it will break real life applications like VPN: https://forums.opensuse.org/t/anyone-else-having-problems-using-mullvad-vpn-... I am afraid it cannot go away until upstream does kill it and any user will switch to an alternative solution.
participants (4)
-
Andrei Borzenkov -
Anton Babadjanov -
Frank Krüger -
Pavin Joseph