Enable nftables NAT and raw table support for Docker-in-VM

Author: sjmiller609

arch/arm64/configs/ch_defconfig

@@ -1123,14 +1123,23 @@ CONFIG_NET_PTP_CLASSIFY=y
 CONFIG_NETFILTER=y
 CONFIG_NF_CONNTRACK=y
 CONFIG_NF_NAT=y
+CONFIG_NF_TABLES=y
+CONFIG_NF_TABLES_IPV4=y
+CONFIG_NFT_COMPAT=y
+CONFIG_NFT_CT=y
+CONFIG_NFT_MASQ=y
+CONFIG_NFT_NAT=y
 CONFIG_NETFILTER_XTABLES=y
 CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y
 CONFIG_NETFILTER_XT_MATCH_COMMENT=y
 CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=y
 CONFIG_IP_NF_FILTER=y
 CONFIG_IP_NF_IPTABLES=y
+CONFIG_IP_NF_MANGLE=y
 CONFIG_IP_NF_NAT=y
+CONFIG_IP_NF_RAW=y
 CONFIG_IP_NF_TARGET_MASQUERADE=y
+CONFIG_BRIDGE_NETFILTER=y
 # CONFIG_IP_DCCP is not set
 # CONFIG_IP_SCTP is not set
 # CONFIG_RDS is not set

arch/riscv/configs/ch_defconfig

@@ -929,14 +929,23 @@ CONFIG_NET_PTP_CLASSIFY=y
 CONFIG_NETFILTER=y
 CONFIG_NF_CONNTRACK=y
 CONFIG_NF_NAT=y
+CONFIG_NF_TABLES=y
+CONFIG_NF_TABLES_IPV4=y
+CONFIG_NFT_COMPAT=y
+CONFIG_NFT_CT=y
+CONFIG_NFT_MASQ=y
+CONFIG_NFT_NAT=y
 CONFIG_NETFILTER_XTABLES=y
 CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y
 CONFIG_NETFILTER_XT_MATCH_COMMENT=y
 CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=y
 CONFIG_IP_NF_FILTER=y
 CONFIG_IP_NF_IPTABLES=y
+CONFIG_IP_NF_MANGLE=y
 CONFIG_IP_NF_NAT=y
+CONFIG_IP_NF_RAW=y
 CONFIG_IP_NF_TARGET_MASQUERADE=y
+CONFIG_BRIDGE_NETFILTER=y
 # CONFIG_IP_DCCP is not set
 # CONFIG_IP_SCTP is not set
 # CONFIG_RDS is not set

arch/x86/configs/ch_defconfig

@@ -1136,14 +1136,23 @@ CONFIG_NET_PTP_CLASSIFY=y
 CONFIG_NETFILTER=y
 CONFIG_NF_CONNTRACK=y
 CONFIG_NF_NAT=y
+CONFIG_NF_TABLES=y
+CONFIG_NF_TABLES_IPV4=y
+CONFIG_NFT_COMPAT=y
+CONFIG_NFT_CT=y
+CONFIG_NFT_MASQ=y
+CONFIG_NFT_NAT=y
 CONFIG_NETFILTER_XTABLES=y
 CONFIG_NETFILTER_XT_MATCH_CONNTRACK=y
 CONFIG_NETFILTER_XT_MATCH_COMMENT=y
 CONFIG_NETFILTER_XT_MATCH_ADDRTYPE=y
 CONFIG_IP_NF_FILTER=y
 CONFIG_IP_NF_IPTABLES=y
+CONFIG_IP_NF_MANGLE=y
 CONFIG_IP_NF_NAT=y
+CONFIG_IP_NF_RAW=y
 CONFIG_IP_NF_TARGET_MASQUERADE=y
+CONFIG_BRIDGE_NETFILTER=y
 # CONFIG_IP_DCCP is not set
 # CONFIG_IP_SCTP is not set
 # CONFIG_RDS is not set