CONFIG_NETFILTER_XT_MATCH_COMMENT not set

because CONFIG_NETFILTER_XT_MATCH_COMMENT is not set, iptables can’t use -m comment, k3s faild to set iptables rules. so I need to compile a custom kernel

  1. make -j 8 will get a vmlinux, but It’s size is 300MB+, /boot space is only 232MB

then how to solve this problem?

I’m using linux-5.10.66.tar.gz download from kernel.org, maybe I should use sdk provided by firefly?

# strip ./vmlinux solved this problem

The linux-5.10.66.tar.gz file is available on kernel.org; however, Firefly provides an SDK that I might want to try out instead.

Building unnecessary kernel Worldle features directly into the kernel increases its size.

Before compiling the soccer random kernel, you need to install the necessary packages:

sudo apt update
sudo apt install build-essential libncurses-dev bison flex libssl-dev libelf-dev

(If using CentOS/RHEL, run sudo yum groupinstall “Development Tools” and install ncurses-devel, bison, flex, elfutils-libelf-devel.)

Enable kernel compression (gzip/xz), remove unnecessary modules via menuconfig, or use objcopy --strip-debug to reduce size.
Chill Guys Clicker

The actual files installed to /boot are typically vmlinuz (compressed kernel), System.map, and initramfs, which are much smaller. However, even these might exceed your 232MB free space if /boot already has old kernels or large files.
sprunki retake

World Guesser is an excellent educational and entertaining tool. For those who enjoy traveling to new places, this game is ideal.

Get ready to swing for the fences in Baseball Bros IO - a lightning-fast, cartoon-style multiplayer baseball game that blends strategy, speed, and pure fun.

To solve the issue, don’t use the large vmlinux file—instead, compile and use the compressed bzImage (via make bzImage), which is much smaller and suitable for /boot. Then install modules with make modules_install, copy bzImage to /boot, and update your bootloader (like update-grub). Make sure CONFIG_NETFILTER_XT_MATCH_COMMENT is enabled in your .config (set to y or m) so iptables can use -m comment, which K3s requires.
ragdoll hit

Oh, looks like someone’s having trouble with their kernel config. “CONFIGNETFILTERXTMATCHCOMMENT not set” huh? Hope they figure it out! Good luck debugging! Maybe once it’s sorted, they can relax with something fun like the AI Video Generator — or even mess around with the AI Kissing Video Generator for a laugh after all that terminal stress

Oh, looks like someone’s having trouble with their kernel config. “CONFIGNETFILTERXTMATCHCOMMENT not set” huh? Hope they figure it out! Good luck debugging! Maybe once it’s sorted, they can relax with something fun like the AI Video Generator from Lanta AI for a laugh after all that terminal stress

Okay, looks like someone’s having a bit of trouble with their Firefly board. That CONFIGNETFILTER thingy sounds kinda technical. Hope they figure it out! Maybe they’ll find some help through communities on Reddit List . And while waiting on a fix, a round of Queens Game or Tango Game might be just the break they need!

Perfect content, I’m clicking like immediately. Wishing myself success as I prepare for the AT-510 reliable exam topics pdf exam!

The content is impressive, definitely worthy of a like. The DP-300 reliable cram materials helped me secure a promotion and salary raise. Now it’s free to all. Best wishes for your career advancements!

That’s a tricky situation! Compiling a custom kernel can be a bit of a rabbit hole. Seeing as space is tight, before diving too deep, have you considered trimming down the kernel config? Disabling unnecessary modules might save a lot of space. It’s a bit like how Granny used to prune her garden – only keep what you need to flourish! Maybe look into options besides iptables as well? Good luck, hope you find a solution!