Bug#1076456: iptables-netflow-dkms: No more builds on Debian 11 Bullseye since kernel linux-image-5.10.0-31-amd64 (5.10.221-1) due to "unexport find_module" kernel backport from 5.12

[Andreas Beckmann]

Followup-For: Bug #1076456
Control: found -1 2.6-4


That is an incorrect constraint:

#if LINUX_VERSION_CODE >= KERNEL_VERSION(5,12,0) || LINUX_VERSION_CODE >= KERNEL_VERSION(5,10,220)

you probably want

#if (LINUX_VERSION_CODE >= KERNEL_VERSION(5,12,0)) || \
((LINUX_VERSION_CODE >= KERNEL_VERSION(5,10,220)) && (LINUX_VERSION_CODE < KERNEL_VERSION(5,11,0))


This bug also affects the version in bookworm, because on distupgrades
from bullseye to bookworm kernels+headers from both releases will be installed


Andreas

[Andreas Beckmann]

Followup-For: Bug #1076456

A patch for this issue as well as patches for supporting up to Linux
v6.13 are available in
https://salsa.debian.org/debian/iptables-netflow/-/merge_requests/4

I have only tested that the module builds again for all the kernels in
oldstable, stable, testing, sid, experimental. No usage of the module on
newer kernels has been tried.

I intend to NMU this in a few days with short delay to get the fixes
into sid, which is a prerequisite to cherry-picking some of them for the
next bookworm point release.


Andreas