maggesandClaude Sonnet 5
5b47b4cc0a
- Package #9-11: catatonit (pod infra init), nftables (netavark firewall backend), docker-compose (external compose provider for `podman compose`) — all vendored prebuilt binaries, versions.env pinned, propagated through build-packages.sh/release.sh/podman.plg/verify+update-packages.sh. - Fix WebUI: every POST action was silently failing (empty response body) because Unraid's own CSRF protection was never satisfied — app.js now sends the page's csrf_token as X-CSRF-Token. - Fix WebUI: PodmanClient::pullImage() assumed a single JSON response, but /images/pull actually streams newline-delimited JSON — every successful pull was throwing "Expected a JSON object/array response". - Fix WebUI: compose.php's up/down status detection had the same single-JSON-vs-NDJSON bug for `podman compose ps`, plus stderr was corrupting the parse. - Add cache-busting (?v=<mtime>) to Podman.page's script/style tags so a redeployed JS/CSS fix isn't served stale from browser cache. - Add a reusable modal dialog (app.js openFormModal) replacing prompt()/alert() for New Volume/Network/Pull Image. - Add host-path (bind-mount) support when creating a named volume. - Add Create Container (image, name, network mode incl. custom networks, ports, volumes, env, restart policy, privileged, start-after-create), auto-pulling the image on first use since /containers/create doesn't. All fixes verified live against a real podman system service and, where reachable, via the actual WebUI over the real socket — not just unit-level. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
20 lines
975 B
Markdown
20 lines
975 B
Markdown
# packages/nftables/
|
|
|
|
Pinned version: see `NFTABLES_VERSION` in [versions.env](../../versions.env).
|
|
|
|
Not built from source, and no `slack-desc` here (unlike this project's
|
|
other packages) — `nftables.SlackBuild` fetches Slackware's own official
|
|
`nftables` package and re-hosts it as-is under this project's naming and
|
|
checksum convention. It's already a correctly-built Slackware package
|
|
(built by the Slackware team for exactly this OS/glibc/arch); the
|
|
slack-desc bundled inside it travels along unchanged.
|
|
|
|
netavark >= 2.0 dropped its iptables firewall driver entirely — nftables
|
|
(via the `nft` binary this package provides) is the only firewall backend
|
|
that works on Unraid (firewalld needs systemd/dbus, which Unraid has
|
|
neither of). Unraid OS itself ships no `nft` binary.
|
|
|
|
Found by live-testing this plugin end-to-end against a real Unraid
|
|
install, not from reading netavark's docs — see
|
|
[docs/ARCHITECTURE.md, section 8](../../docs/ARCHITECTURE.md#8-netzwerke).
|