net: suggest enabling NETFILTER_XT_MARK if iptables-restore failed

Submitted by Dmitry Safonov on May 4, 2017, 7:14 p.m.

Details

Message ID 20170504191450.3844-1-dsafonov@virtuozzo.com
State Accepted
Series "net: suggest enabling NETFILTER_XT_MARK if iptables-restore failed"
Headers show

Commit Message

Dmitry Safonov May 4, 2017, 7:14 p.m.
On x86_64 defconfig it's =m, so if you boot kernel without initramfs
in qemu, you will see this.

Fixes: #292
Signed-off-by: Dmitry Safonov <dsafonov@virtuozzo.com>
---
 criu/net.c | 3 +++
 1 file changed, 3 insertions(+)

Patch hide | download patch | download mbox

diff --git a/criu/net.c b/criu/net.c
index b4230007cd9e..1a4356a55f04 100644
--- a/criu/net.c
+++ b/criu/net.c
@@ -2275,6 +2275,9 @@  int network_lock_internal()
 	if (kdat.ipv6)
 		ret |= iptables_restore(true, conf, sizeof(conf) - 1);
 
+	if (ret)
+		pr_err("Locking network failed: iptables-restore returned %d. This may be connected to disabled CONFIG_NETFILTER_XT_MARK kernel build config option.\n", ret);
+
 	if (restore_ns(nsret, &net_ns_desc))
 		ret = -1;