Discover Centmin Mod today
Register Now

Install AlmaLinux 9.7 and nft_compat errors upon boot?

Discussion in 'Install & Upgrades or Pre-Install Questions' started by ElChorizo, Mar 10, 2026.

  1. ElChorizo

    ElChorizo Member

    79
    10
    8
    Apr 29, 2021
    Ratings:
    +18
    Local Time:
    8:07 PM
    1.19.10
    10.3.28
    Running the latest CentminMod 140.00beta01 and AlmaLinux 9.7 and I'm seeing these error messages upon reboot. With some basic searching it looks like it might be a CSF error or something related to iptables? Is this a known issue?

    Code:
    [    8.887133] XFS (vda3): Ending recovery (logdev: internal)
    [    9.750903] Warning: Deprecated Driver is detected: nft_compat will not be maintained in a future major release and may be disabled
    [    9.750911] Warning: Deprecated Driver is detected: nft_compat will not be maintained in a future major release and may be disabled
    [    9.752734] Warning: Deprecated Driver is detected: nft_compat_module_init will not be maintained in a future major release and may be disabled
    [   11.041288] min_free_kbytes is not updated to 19688 because user defined value 65536 is preferred
    [   11.534711] Warning: Deprecated Driver is detected: ip_tables will not be maintained in a future major release and may be disabled
    [   11.535984] Warning: Deprecated Driver is detected: ip_tables_init will not be maintained in a future major release and may be disabled
    [   12.104056] Warning: Deprecated Driver is detected: ip_set will not be maintained in a future major release and may be disabled
    [   12.105658] Warning: Deprecated Driver is detected: ip_set_init will not be maintained in a future major release and may be disabled
    [  145.670302] min_free_kbytes is not updated to 19688 because user defined value 65536 is preferred


     
  2. eva2000

    eva2000 Administrator Staff Member

    58,893
    12,490
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +19,122
    Local Time:
    11:07 AM
    Nginx 1.31.x
    MariaDB 10.x/11.4+/12.3+
    The warnings are informational notices from the kernel, not errors, and they do not affect firewall operation in any way and are for future major OS versions i.e. EL11 etc.

    EL10 works. On EL9 and EL10, the system ships iptables-nft instead of the traditional iptables-legacy. When CSF writes rules using the familiar iptables interface, the nft_compat kernel module (shown above with a reference count of 160, meaning 160 CSF rules are currently translated) automatically converts every rule into nftables format behind the scenes. The firewall is fully enforcing - you just have a translation layer in the middle.
     
  3. ElChorizo

    ElChorizo Member

    79
    10
    8
    Apr 29, 2021
    Ratings:
    +18
    Local Time:
    8:07 PM
    1.19.10
    10.3.28
    Sounds good. As long as it's a known issue, I'm good. I don't check the boot messages very often but the VPS provider was having issues and the VM was hanging around there so I was staring at it.