linux-postmarketos-qcom-msm8939: enable support for nftables (MR 2366)

[ci:skip-build] too many changed kernels in series for CI to build

main/linux-postmarketos-qcom-msm8939/APKBUILD

@@ -4,13 +4,16 @@
 _flavor="postmarketos-qcom-msm8939"
 pkgname=linux-$_flavor
 pkgver=5.9_rc7_git20210713
-pkgrel=0
+pkgrel=1
 pkgdesc="Mainline kernel fork for Qualcomm MSM8939 devices"
 arch="aarch64"
 _carch="arm64"
 url="https://gitlab.com/msm8939-mainline/linux"
 license="GPL-2.0-only"
-options="!strip !check !tracedeps pmb:cross-native"
+options="!strip !check !tracedeps
+	pmb:cross-native
+	pmb:kconfigcheck-nftables
+	"
 makedepends="bash bc bison devicepkg-dev installkernel flex openssl-dev perl"
 provides="linux-huawei-kiwi=$pkgver-r$pkgrel" # for backwards compatibility
 replaces="linux-huawei-kiwi"
@@ -50,5 +53,5 @@ package() {
 }
 sha512sums="
 a50083ea1ef33b2326a4b241a82f923f7529155969523052dd3c3f330a7ff194f1ef081cb698fc1d866efca2d73ca027dbbc68edf265b88daebabde901a31613  linux-postmarketos-qcom-msm8939-5.9-rc7-v1.tar.gz
-d9e04dadbaff1bc99b2366ade49a84cca1e6c7dac726b2b6ddfeeca9e67539ef67563f430507982df7e92b41617f3714f604ed3f77d58f5f1efef395722f3611  config-postmarketos-qcom-msm8939.aarch64
+e397231c446d40cfc9e7054cf471203e8776ff0104f3d938c73bb854f9366c926cf4b6315939ee915b7a75dc82b95bcd81012c460e26e861cc5141f521116b66  config-postmarketos-qcom-msm8939.aarch64
 "

main/linux-postmarketos-qcom-msm8939/config-postmarketos-qcom-msm8939.aarch64

@@ -668,9 +668,6 @@ CONFIG_ARCH_HAS_GCOV_PROFILE_ALL=y
 # end of GCOV-based kernel profiling
 
 CONFIG_HAVE_GCC_PLUGINS=y
-CONFIG_GCC_PLUGINS=y
-# CONFIG_GCC_PLUGIN_LATENT_ENTROPY is not set
-# CONFIG_GCC_PLUGIN_RANDSTRUCT is not set
 # end of General architecture-dependent options
 
 CONFIG_RT_MUTEXES=y
@@ -876,6 +873,7 @@ CONFIG_NETFILTER_ADVANCED=y
 # Core Netfilter Configuration
 #
 CONFIG_NETFILTER_INGRESS=y
+CONFIG_NETFILTER_NETLINK=m
 # CONFIG_NETFILTER_NETLINK_ACCT is not set
 # CONFIG_NETFILTER_NETLINK_QUEUE is not set
 # CONFIG_NETFILTER_NETLINK_LOG is not set
@@ -906,7 +904,30 @@ CONFIG_NF_CT_PROTO_UDPLITE=y
 # CONFIG_NF_CT_NETLINK is not set
 CONFIG_NF_NAT=m
 CONFIG_NF_NAT_MASQUERADE=y
-# CONFIG_NF_TABLES is not set
+CONFIG_NF_TABLES=m
+CONFIG_NF_TABLES_INET=y
+# CONFIG_NF_TABLES_NETDEV is not set
+# CONFIG_NFT_NUMGEN is not set
+CONFIG_NFT_CT=m
+CONFIG_NFT_COUNTER=m
+# CONFIG_NFT_CONNLIMIT is not set
+CONFIG_NFT_LOG=m
+CONFIG_NFT_LIMIT=m
+CONFIG_NFT_MASQ=m
+# CONFIG_NFT_REDIR is not set
+CONFIG_NFT_NAT=m
+# CONFIG_NFT_TUNNEL is not set
+# CONFIG_NFT_OBJREF is not set
+CONFIG_NFT_QUOTA=m
+CONFIG_NFT_REJECT=m
+CONFIG_NFT_REJECT_INET=m
+# CONFIG_NFT_COMPAT is not set
+# CONFIG_NFT_HASH is not set
+# CONFIG_NFT_SOCKET is not set
+# CONFIG_NFT_OSF is not set
+# CONFIG_NFT_TPROXY is not set
+# CONFIG_NFT_SYNPROXY is not set
+# CONFIG_NF_FLOW_TABLE is not set
 CONFIG_NETFILTER_XTABLES=m
 
 #
@@ -998,6 +1019,11 @@ CONFIG_NETFILTER_XT_MATCH_CONNTRACK=m
 CONFIG_NF_DEFRAG_IPV4=m
 # CONFIG_NF_SOCKET_IPV4 is not set
 # CONFIG_NF_TPROXY_IPV4 is not set
+CONFIG_NF_TABLES_IPV4=y
+CONFIG_NFT_REJECT_IPV4=m
+# CONFIG_NFT_DUP_IPV4 is not set
+# CONFIG_NFT_FIB_IPV4 is not set
+# CONFIG_NF_TABLES_ARP is not set
 # CONFIG_NF_DUP_IPV4 is not set
 # CONFIG_NF_LOG_ARP is not set
 CONFIG_NF_LOG_IPV4=m
@@ -1028,6 +1054,10 @@ CONFIG_IP_NF_MANGLE=m
 #
 # CONFIG_NF_SOCKET_IPV6 is not set
 # CONFIG_NF_TPROXY_IPV6 is not set
+CONFIG_NF_TABLES_IPV6=y
+CONFIG_NFT_REJECT_IPV6=m
+# CONFIG_NFT_DUP_IPV6 is not set
+# CONFIG_NFT_FIB_IPV6 is not set
 # CONFIG_NF_DUP_IPV6 is not set
 CONFIG_NF_REJECT_IPV6=m
 CONFIG_NF_LOG_IPV6=m
@@ -1055,6 +1085,7 @@ CONFIG_IP6_NF_TARGET_MASQUERADE=m
 # end of IPv6: Netfilter Configuration
 
 CONFIG_NF_DEFRAG_IPV6=m
+# CONFIG_NF_TABLES_BRIDGE is not set
 # CONFIG_NF_CONNTRACK_BRIDGE is not set
 # CONFIG_BRIDGE_NF_EBTABLES is not set
 # CONFIG_BPFILTER is not set
@@ -5033,10 +5064,6 @@ CONFIG_LSM="lockdown,yama,loadpin,safesetid,integrity,bpf"
 # Memory initialization
 #
 CONFIG_INIT_STACK_NONE=y
-# CONFIG_GCC_PLUGIN_STRUCTLEAK_USER is not set
-# CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF is not set
-# CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF_ALL is not set
-# CONFIG_GCC_PLUGIN_STACKLEAK is not set
 # CONFIG_INIT_ON_ALLOC_DEFAULT_ON is not set
 # CONFIG_INIT_ON_FREE_DEFAULT_ON is not set
 # end of Memory initialization