diff options
| author | Maciej Krüger <mkg20001@gmail.com> | 2022-12-26 01:09:11 +0100 |
|---|---|---|
| committer | Maciej Krüger <mkg20001@gmail.com> | 2023-08-28 00:40:14 +0200 |
| commit | dc3f8728b949550d10ffe6a165cd2a1d5b9f7a97 (patch) | |
| tree | 4ad7826e9e53662b01928af9cacdf791557f6345 /nixos | |
| parent | cd3af25932425e1b1acfaad9c9ee85694fe70ae6 (diff) | |
| download | nixlib-dc3f8728b949550d10ffe6a165cd2a1d5b9f7a97.tar nixlib-dc3f8728b949550d10ffe6a165cd2a1d5b9f7a97.tar.gz nixlib-dc3f8728b949550d10ffe6a165cd2a1d5b9f7a97.tar.bz2 nixlib-dc3f8728b949550d10ffe6a165cd2a1d5b9f7a97.tar.lz nixlib-dc3f8728b949550d10ffe6a165cd2a1d5b9f7a97.tar.xz nixlib-dc3f8728b949550d10ffe6a165cd2a1d5b9f7a97.tar.zst nixlib-dc3f8728b949550d10ffe6a165cd2a1d5b9f7a97.zip | |
release-notes: add networking.nftables.tables news
Diffstat (limited to 'nixos')
| -rw-r--r-- | nixos/doc/manual/release-notes/rl-2311.section.md | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/nixos/doc/manual/release-notes/rl-2311.section.md b/nixos/doc/manual/release-notes/rl-2311.section.md index 49b2433c8820..d4fa6e941e57 100644 --- a/nixos/doc/manual/release-notes/rl-2311.section.md +++ b/nixos/doc/manual/release-notes/rl-2311.section.md @@ -223,6 +223,12 @@ The module update takes care of the new config syntax and the data itself (user - Suricata was upgraded from 6.0 to 7.0 and no longer considers HTTP/2 support as experimental, see [upstream release notes](https://forum.suricata.io/t/suricata-7-0-0-released/3715) for more details. +- `networking.nftables` now has the option `networking.nftables.table.<table>` to create tables + and have them be updated atomically, instead of flushing the ruleset. + +- `networking.nftables` is no longer flushing all rulesets on every reload. + Use `networking.nftables.flushRuleset = true;` to get back the old behaviour. + ## Nixpkgs internals {#sec-release-23.11-nixpkgs-internals} - The use of `sourceRoot = "source";`, `sourceRoot = "source/subdir";`, and similar lines in package derivations using the default `unpackPhase` is deprecated as it requires `unpackPhase` to always produce a directory named "source". Use `sourceRoot = src.name`, `sourceRoot = "${src.name}/subdir";`, or `setSourceRoot = "sourceRoot=$(echo */subdir)";` or similar instead. |