[packages/iptables] - rel 3; allow building disto package for variants: with and without vserver patches

[Arkadiusz Miśkiewicz]

On Tuesday 25 of October 2016, Elan Ruusamäe wrote:
> On 25.10.2016 08:34, Arkadiusz Miśkiewicz wrote:
> > > >vserver patch changing size of owner-related structure making that
> > > >functionality incompatible with non-vserver kernels
> 
> isn't it better (simplier?) to patch non-vserver kernel with dummy
> structure (pad it) so that the struct size matches? i mean how many out
> there are that use non-dist kernel anyway, but it will make simpler to
> handle dependencies on orchestrated systems. now i have to decide based
> on kernel version which iptables version to install.

Best would be some runtime detection on iptables side but not sure if that's 
even possible.

For our usage padding seems to be a smart solution (indeed breaking vanilla 
kernels though).

> is this incompatibility tracked anywhere? bugtracker? mailinglist? is it
> planned to be solved?

AFAIK answer is "no" for all these questions.