From: Davide Caratti <dcaratti(a)redhat.com>
redhat/configs: enable nf_tables SYNPROXY extension on ark
as part of the ongoing iptables deprecation, enable SYNPROXY extension
on nftables. While at it, explicitly disable CONFIG_IP{,6}_NF_TARGET_SYNPROXY:
they were 'm' but 'make dist-configs' clears them since they depend on
CONFIG_NF_IP{,6}TABLES that's unset in ark. The overall result is:
support for SYNPROXY is still there, and the kernel keeps building with
CONFIG_NETFILTER_SYNPROXY (that's selected by the above items) set to 'm'.
Signed-off-by: Davide Caratti <dcaratti(a)redhat.com>
diff --git a/redhat/configs/ark/generic/CONFIG_IP6_NF_TARGET_SYNPROXY
b/redhat/configs/ark/generic/CONFIG_IP6_NF_TARGET_SYNPROXY
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_IP6_NF_TARGET_SYNPROXY
@@ -0,0 +1 @@
+# CONFIG_IP6_NF_TARGET_SYNPROXY is not set
diff --git a/redhat/configs/ark/generic/CONFIG_IP_NF_TARGET_SYNPROXY
b/redhat/configs/ark/generic/CONFIG_IP_NF_TARGET_SYNPROXY
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/ark/generic/CONFIG_IP_NF_TARGET_SYNPROXY
@@ -0,0 +1 @@
+# CONFIG_IP_NF_TARGET_SYNPROXY is not set
diff --git a/redhat/configs/ark/generic/CONFIG_NFT_SYNPROXY
b/redhat/configs/ark/generic/CONFIG_NFT_SYNPROXY
deleted file mode 100644
index blahblah..blahblah 0
--- a/redhat/configs/ark/generic/CONFIG_NFT_SYNPROXY
+++ /dev/null
@@ -1 +0,0 @@
-# CONFIG_NFT_SYNPROXY is not set
diff --git a/redhat/configs/fedora/generic/CONFIG_NFT_SYNPROXY
b/redhat/configs/common/generic/CONFIG_NFT_SYNPROXY
rename from redhat/configs/fedora/generic/CONFIG_NFT_SYNPROXY
rename to redhat/configs/common/generic/CONFIG_NFT_SYNPROXY
index blahblah..blahblah 100644
--- a/redhat/configs/fedora/generic/CONFIG_NFT_SYNPROXY
+++ b/redhat/configs/common/generic/CONFIG_NFT_SYNPROXY
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1720