[LXC] Hook the firewall chain onto the bridge port so it actually filters - #792

Closed

Darren Hoehna (dhoehna) wants to merge 4 commits into

mainfrom

user/dahoehna/lxc-net-forward-hook

Commits on Aug 9, 2026

[LXC] Fail closed when firewall rules cannot be scoped to the container
Darren Hoehna (dhoehna)
committed
81d4b7e
[LXC] Spec the fail-closed contract for unscopeable firewall rules
Darren Hoehna (dhoehna)
committed
80fdb73
[LXC] Hook the firewall chain onto the bridge port so it actually filters

Darren Hoehna (dhoehna)
and
Copilot
committed
f51dc1b
[LXC] Spec the FORWARD hook contract and assert enforcement end to end

Darren Hoehna (dhoehna)
and
Copilot
committed
b9946e3