Received: by 2002:a25:ab43:0:0:0:0:0 with SMTP id u61csp2539303ybi; Mon, 17 Jun 2019 06:35:07 -0700 (PDT) X-Google-Smtp-Source: APXvYqw94lC+vtumB3V1We4gfgSplWh0BvxIZT/nkcfGmli/+tKqzRFgbDBJWKsGh7T7HNDpWr72 X-Received: by 2002:a63:4c0f:: with SMTP id z15mr48451210pga.245.1560778507572; Mon, 17 Jun 2019 06:35:07 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1560778507; cv=none; d=google.com; s=arc-20160816; b=Gw9/onnrnHwJWV/mL1kfsHzTjvtUtMzROktEmOq7gydW2PGasLFWlselkX6H3w9NZf UvB/f341orAzemzeD7fOUGVF4/tdVFhUekoUCuc2PV/qV7gzH0/Y3w/UFo7mmW/0gida 7GSYwEIPZkDDvJZ6a4X0ShAgKXmbnoWTdqbc11uM1/giCo26R2YJQz4Amr+2ufOYj3sE JlAfW3orvsgIiaEQWb5RP01dSPAGZkmGKHVy6QhgUmzNrRs5Vf2L6CHKCZ35AJcuKO0L 7JsoU5j3ZgBPeeslDAygBOVw1Ob7aS6ljsC8Rj9ImreCzORN/yXWxyfOxyHlUt3v17UO H6aQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:user-agent:in-reply-to :content-disposition:mime-version:references:message-id:subject:cc :to:from:date; bh=xFnWxTj9D1OW0DEwTIWaQtsjf0+thm0lfJoDBcpU/4Q=; b=O/w48Ge/5ip6hj2uLvW4uvABLQcP7VpA8eatc31h9B8teEcQ5oedGLRf4fkT5GGL5j M6rUTvAYkBAzQebed6uyVHyN490bNG9R55XnYG1lqVi8+noIEz8OYo1y06V3p34WXLYX krYejRhZ0VkLdw3fXSzjYMkxaFZzo/pyXLM4XwEfw5cZpiHcekzb9fwmUM/J26JUQxFj Zz0TpR3VUBjEmtoP84VDIu9fIvfiMaqr/aOW2IB3v63DLVU4sgwi4cF0xx8CVZIqMyRR ZuQed+CDJ9LggOQHZ3+gJff8L9r47orSPhO+t9wfc8nd4q7ZZnaY/9hCr1L2szPHFChH Rkiw== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id b73si9979205pjc.53.2019.06.17.06.34.50; Mon, 17 Jun 2019 06:35:07 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727987AbfFQNeq (ORCPT + 99 others); Mon, 17 Jun 2019 09:34:46 -0400 Received: from mail.us.es ([193.147.175.20]:47036 "EHLO mail.us.es" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726405AbfFQNep (ORCPT ); Mon, 17 Jun 2019 09:34:45 -0400 Received: from antivirus1-rhel7.int (unknown [192.168.2.11]) by mail.us.es (Postfix) with ESMTP id 49414B6C90 for ; Mon, 17 Jun 2019 15:34:43 +0200 (CEST) Received: from antivirus1-rhel7.int (localhost [127.0.0.1]) by antivirus1-rhel7.int (Postfix) with ESMTP id 37DD7DA716 for ; Mon, 17 Jun 2019 15:34:43 +0200 (CEST) Received: by antivirus1-rhel7.int (Postfix, from userid 99) id 25D3FDA714; Mon, 17 Jun 2019 15:34:43 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on antivirus1-rhel7.int X-Spam-Level: X-Spam-Status: No, score=-108.2 required=7.5 tests=ALL_TRUSTED,BAYES_50, SMTPAUTH_US2,USER_IN_WHITELIST autolearn=disabled version=3.4.1 Received: from antivirus1-rhel7.int (localhost [127.0.0.1]) by antivirus1-rhel7.int (Postfix) with ESMTP id 03CAADA701; Mon, 17 Jun 2019 15:34:41 +0200 (CEST) Received: from 192.168.1.97 (192.168.1.97) by antivirus1-rhel7.int (F-Secure/fsigk_smtp/550/antivirus1-rhel7.int); Mon, 17 Jun 2019 15:34:41 +0200 (CEST) X-Virus-Status: clean(F-Secure/fsigk_smtp/550/antivirus1-rhel7.int) Received: from us.es (sys.soleta.eu [212.170.55.40]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: 1984lsi) by entrada.int (Postfix) with ESMTPSA id 8F7574265A2F; Mon, 17 Jun 2019 15:34:40 +0200 (CEST) Date: Mon, 17 Jun 2019 15:34:40 +0200 X-SMTPAUTHUS: auth mail.us.es From: Pablo Neira Ayuso To: Christian Brauner Cc: davem@davemloft.net, netdev@vger.kernel.org, netfilter-devel@vger.kernel.org, coreteam@netfilter.org, bridge@lists.linux-foundation.org, tyhicks@canonical.com, kadlec@blackhole.kfki.hu, fw@strlen.de, roopa@cumulusnetworks.com, nikolay@cumulusnetworks.com, linux-kernel@vger.kernel.org, richardrose@google.com, vapier@chromium.org, bhthompson@google.com, smbarber@chromium.org, joelhockey@chromium.org, ueberall@themenzentrisch.de Subject: Re: [PATCH net-next v2 0/2] br_netfilter: enable in non-initial netns Message-ID: <20190617133440.mhnhtcwwraf53bl4@salvia> References: <20190610212606.29743-1-christian@brauner.io> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20190610212606.29743-1-christian@brauner.io> User-Agent: NeoMutt/20170113 (1.7.2) X-Virus-Scanned: ClamAV using ClamSMTP Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, Jun 10, 2019 at 11:26:04PM +0200, Christian Brauner wrote: [...] > Over time I have seen multiple reports by users who want to run applications > (Kubernetes e.g. via [1]) that require the br_netfilter module in > non-initial network namespaces. There are *a lot* of issues for this. A > shortlist including ChromeOS and other big users is found below under > [2]! Even non-devs already tried to get more traction on this by > commenting on the patchset (cf. [3]). > > Currently, the /proc/sys/net/bridge folder is only created in the > initial network namespace. This patch series ensures that the > /proc/sys/net/bridge folder is available in each network namespace if > the module is loaded and disappears from all network namespaces when the > module is unloaded. Series applied, thanks Christian.