release-notes: add networking.nftables.tables news (dc3f8728) · Commits · nix / nixpkgs

nixos/doc/manual/release-notes/rl-2311.section.md

+6 −0

Original line number	Diff line number	Diff line
		@@ -223,6 +223,12 @@ The module update takes care of the new config syntax and the data itself (user

		- Suricata was upgraded from 6.0 to 7.0 and no longer considers HTTP/2 support as experimental, see [upstream release notes](https://forum.suricata.io/t/suricata-7-0-0-released/3715) for more details.

		- `networking.nftables` now has the option `networking.nftables.table.<table>` to create tables
		and have them be updated atomically, instead of flushing the ruleset.

		- `networking.nftables` is no longer flushing all rulesets on every reload.
		Use `networking.nftables.flushRuleset = true;` to get back the old behaviour.

		## Nixpkgs internals {#sec-release-23.11-nixpkgs-internals}

		- The use of `sourceRoot = "source";`, `sourceRoot = "source/subdir";`, and similar lines in package derivations using the default `unpackPhase` is deprecated as it requires `unpackPhase` to always produce a directory named "source". Use `sourceRoot = src.name`, `sourceRoot = "${src.name}/subdir";`, or `setSourceRoot = "sourceRoot=$(echo */subdir)";` or similar instead.