From 07febc39a4c82d6e5f41aa28c85fef153b98f402 Mon Sep 17 00:00:00 2001 From: Christian Breunig Date: Sat, 17 Oct 2026 21:42:38 +0200 Subject: conntrack: T9474: rebuild conntrack tables when rule file and table drift apart The conntrack ruleset only deleted the existing tables when its rule file in /run was present. A table removed while the file stayed made the delete, and with it every following commit, fail. The tables are now declared right before they are deleted, so each commit rebuilds them regardless of what is currently loaded. --- src/conf_mode/system_conntrack.py | 3 --- 1 file changed, 3 deletions(-) (limited to 'src') diff --git a/src/conf_mode/system_conntrack.py b/src/conf_mode/system_conntrack.py index 559aebcc8..7e659d1f6 100755 --- a/src/conf_mode/system_conntrack.py +++ b/src/conf_mode/system_conntrack.py @@ -180,9 +180,6 @@ def verify(conntrack): return None def generate(conntrack): - if not os.path.exists(nftables_ct_file): - conntrack['first_install'] = True - if 'log' not in conntrack: # Remove old conntrack-logger config and return if os.path.exists(vyos_conntrack_logger_config): -- cgit v1.2.3