Enable iptables filter and xt matches for Hypeman networking

sjmiller609 · sjmiller609 · commit c20033547e11 · 2026-03-09T15:24:02.000-04:00
Turn on the missing netfilter options in the ch defconfigs so Hypeman VMs can install their NAT and FORWARD rules without fallback workarounds.

Made-with: Cursor
diff --git a/arch/arm64/configs/ch_defconfig b/arch/arm64/configs/ch_defconfig
@@ -1123,6 +1123,10 @@ CONFIG_NET_PTP_CLASSIFY=y
 CONFIG_NETFILTER=y
 CONFIG_NF_CONNTRACK=y
 CONFIG_NF_NAT=y
+CONFIG_NETFILTER_XTABLES=y
+CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y
+CONFIG_NETFILTER_XT_MATCH_COMMENT=y
+CONFIG_IP_NF_FILTER=y
 CONFIG_IP_NF_IPTABLES=y
 CONFIG_IP_NF_NAT=y
 CONFIG_IP_NF_TARGET_MASQUERADE=y
diff --git a/arch/riscv/configs/ch_defconfig b/arch/riscv/configs/ch_defconfig
@@ -929,6 +929,10 @@ CONFIG_NET_PTP_CLASSIFY=y
 CONFIG_NETFILTER=y
 CONFIG_NF_CONNTRACK=y
 CONFIG_NF_NAT=y
+CONFIG_NETFILTER_XTABLES=y
+CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y
+CONFIG_NETFILTER_XT_MATCH_COMMENT=y
+CONFIG_IP_NF_FILTER=y
 CONFIG_IP_NF_IPTABLES=y
 CONFIG_IP_NF_NAT=y
 CONFIG_IP_NF_TARGET_MASQUERADE=y
diff --git a/arch/x86/configs/ch_defconfig b/arch/x86/configs/ch_defconfig
@@ -1136,6 +1136,10 @@ CONFIG_NET_PTP_CLASSIFY=y
 CONFIG_NETFILTER=y
 CONFIG_NF_CONNTRACK=y
 CONFIG_NF_NAT=y
+CONFIG_NETFILTER_XTABLES=y
+CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y
+CONFIG_NETFILTER_XT_MATCH_COMMENT=y
+CONFIG_IP_NF_FILTER=y
 CONFIG_IP_NF_IPTABLES=y
 CONFIG_IP_NF_NAT=y
 CONFIG_IP_NF_TARGET_MASQUERADE=y
