From 37569a73bd3f359a2c3280b5eb7cdf335d49c201 Mon Sep 17 00:00:00 2001
From: polyfloyd <floyd@polyfloyd.net>
Date: Wed, 11 Feb 2026 23:51:18 +0100
Subject: [PATCH] Add new kconfig flags for Docker

Part-of: <https://gitlab.postmarketos.org/postmarketOS/pmaports/-/merge_requests/8002>
---
 kconfigcheck.toml | 24 ++++++++++++++++++++----
 1 file changed, 20 insertions(+), 4 deletions(-)

diff --git a/kconfigcheck.toml b/kconfigcheck.toml
index c6f8b5fd3..55090434b 100644
--- a/kconfigcheck.toml
+++ b/kconfigcheck.toml
@@ -49,7 +49,7 @@ community = [
 ["category:default".">=0.0.0"."all"]
 ANDROID_PARANOID_NETWORK = "n"
 BLK_DEV_INITRD = "y"
-CGROUPS = "y"
+CGROUPS = "y" # also required for: containers
 CRYPTO_CBC = "y"
 CRYPTO_AES = "y"
 CRYPTO_XTS = "y"
@@ -73,7 +73,7 @@ BINFMT_ELF = "y"
 BINFMT_SCRIPT = "y"
 ["category:default".">=4.0.0"."all"]
 UEVENT_HELPER = "y"
-USER_NS = "y"
+USER_NS = "y" # also required for: containers
 ["category:default"."<4.7.0"."all"]
 DEVPTS_MULTIPLE_INSTANCES = "y"
 ["category:default"."<4.14.0"."all"]
@@ -245,19 +245,22 @@ VETH = "m"
 BRIDGE = "m"  # (also needed for waydroid)
 BRIDGE_NETFILTER = "m"
 IP_NF_FILTER = "m"
+IP_NF_MANGLE = "m" # Needed for docker
 IP_NF_TARGET_MASQUERADE = "m"
+IP6_NF_MANGLE = "m" # Needed for docker
 NETFILTER_XT_MATCH_ADDRTYPE = "m"
 NETFILTER_XT_MATCH_CONNTRACK = "m"
 NETFILTER_XT_MATCH_IPVS = "m"
 NETFILTER_XT_MARK = "m"
 NETFILTER_XT_TARGET_CHECKSUM = "m"  # Needed for lxc
+IP_NF_RAW = "m" # Needed for docker
 IP_NF_NAT = "m"
+IP6_NF_RAW = "m" # Needed for docker
 NF_NAT = "m"
 POSIX_MQUEUE = "y"
 MD = "y" # Required for BLK_DEV_DM
 BLK_DEV_DM = "y"  # Storage Drivers
 DUMMY = "m"  # Network Drivers
-# USER_NS = "y"  # This is already in pmOS kconfig check
 BLK_CGROUP = "y"  # Optional section
 BLK_DEV_THROTTLING = "y"  # Optional section
 CGROUP_PERF = "y"  # Optional section
@@ -290,21 +293,34 @@ NF_NAT_IPV4 = "y"  # Needed for lxc
 NF_NAT_IPV6 = "y"  # Needed for lxc
 ["category:containers".">=3.7"."all"]
 VXLAN = "m"  # Network Drivers
-IP6_NF_TARGET_MASQUERADE = "m"  # Needed for lxc
+IP6_NF_TARGET_MASQUERADE = "m"  # Needed for lxc and docker
 ["category:containers".">=3.9"."all"]
 BRIDGE_VLAN_FILTERING = "y"  # Network Drivers (also for waydroid)
 MACVLAN = "m"  # Network Drivers
 ["category:containers".">=3.13"."all"]
 NFT_COMPAT = "m"
+NFT_CT = "m"  # Docker (optional)
+NFT_NAT = "m"  # Docker (optional)
+NF_TABLES = "m"  # Docker (optional)
 ["category:containers".">=3.14"."all"]
 CGROUP_NET_PRIO = "y"  # Optional section
+["category:containers".">=3.17"."all"]
+IP6_NF_NAT = "m" # Needed for docker
 ["category:containers".">=3.18"."all"]
 OVERLAY_FS = "m"  # Storage Drivers
+NFT_MASQ = "m"  # Docker (optional)
 ["category:containers".">=3.19"."all"]
 IPVLAN = "m"  # Network Drivers
 SECCOMP = "y"  # Optional section
 ["category:containers".">=4.4"."all"]
 CGROUP_PIDS = "y"  # Optional section
+["category:containers".">=4.10"."all"]
+CGROUP_BPF = "y" # Needed for docker
+NFT_FIB_IPV4 = "m"  # Docker (optional)
+NFT_FIB_IPV6 = "m"  # Docker, optional
+NFT_FIB = "m"  # Docker (optional)
+["category:containers".">=6.9"."all"]
+IP6_NF_FILTER = "m" # Needed for docker
 
 # zram: RAM disk with on-the-fly compression
 ["category:zram".">=0.0.0"."all"]