Uninstall nftables package
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel,
n'hésitez pas à nous contacter.
Description
nftables is a subsystem of the Linux kernel providing filtering and classification of network
packets/datagrams/frames and is the successor to iptables.
The nftables package can be removed with the following command:
$ apt-get remove nftables
Rationale
Running both firewalld and nftables may lead to conflict.
Shell script
The following script can be run on the host to remediate the issue.
#!/bin/bash
# CAUTION: This remediation script will remove nftables
# from the system, and may remove any packages
# that depend on nftables. Execute this
# remediation AFTER testing on a non-production
# system!
DEBIAN_FRONTEND=noninteractive apt-get remove -y "nftables"
Ansible playbook
The following playbook can be run with Ansible to remediate the issue.
- name: Ensure nftables is removed
package:
name: nftables
state: absent
tags:
- disable_strategy
- low_complexity
- low_disruption
- medium_severity
- no_reboot_needed
- package_nftables_removed
