[Bug 2104282] Re: iptables NFLOG TRACE MARK incompatibility

Some issue with rke2 with package `linux-image-6.8.0-57-generic`.

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2104282

Title:
iptables NFLOG TRACE MARK incompatibility

Status in linux package in Ubuntu:
Confirmed
Status in linux source package in Noble:
Fix Committed

Bug description:
After upgrading to linux-image-6.8.0-56-generic my RKE2 based
kubernetes cluster on Ubuntu 24.04.2 LTS started having some problems.
The kubeproxy pods started crashlooping with an error that said

"Failed to execute iptables-restore"
err=<exit status 2: Warning: Extension MARK revision 0 not supported, missing kernel module? ip6tables-restore v1.8.9 (nf_tables): unknown option "--xor-mark"

Bringing the kernel back to linux-image-6.8.0-55-generic immediately solved the issue. Booting it back to linux-image-6.8.0-56-generic brought it back.
Had to test again to be certain as there was other changes to the cluster in the last few hours.

cat /proc/version_signature: Ubuntu 6.8.0-55.57-generic 6.8.12

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2104282/+subscriptions