Trying to use cgroup module in iptables rule cause "No chain/target/match by that name" message.
Linux raspberrypi 4.19.42-v7+ #1219 SMP Tue May 14 21:20:58 BST 2019 armv7l GNU/Linux
running on Raspberry Pi 3B+. What I'm trying to do is to set the iptables rule like this:
iptables -t mangle -A OUTPUT -m cgroup --cgroup 0x00110011 -j MARK --set-mark 10
And it give me the error: iptables: No chain/target/match by that name.
What I've already tied:
- iptables -m cgroup -h - gives me the help about available cgroup options.
- when I'm trying to type -m anystring it gives me message iptables v1.6.0: Couldn't load match anystring so cgroup must be there
- modprobe cls-cgroup - gives no error message
- /sys/fs/cgroup/net_cls - exist and I can assign PIDs to the tasks in it
While trying to add all other rules to mangle output, even with other modules, they are accepted. No matter what I will try, all is good as long as I try -m cgroup.
What am I doing wrong?