scaffold: aports overlay, build script, CI workflow, README

Kernel aport forked from pmaports 7.1.2-r0, repointed at milos-linux
combined-stable with the tested FP6 config (+EFI_ZBOOT for packaging);
imsd + nftables aports from the pending pmaports submission. build.sh
carries TODO(validate) markers - not yet run end-to-end.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
Jorijn van der Graaf 2026-08-08 15:42:45 +02:00
commit de2e819a16
26 changed files with 9095 additions and 0 deletions

View file

@ -0,0 +1,15 @@
#!/usr/sbin/nft -f
table inet filter {
chain input {
# imsd's IPsec-protected SIP ports on the IMS PDN. Ordered before
# 01_wwan.nft's qmapmux drop: the ESP-decapsulated inbound flows
# arrive on qmapmux* and would be dropped there. The comment is
# load-bearing — imsd's ims-pdn-up.sh checks for it and skips its
# runtime rule insertion when this rule is present.
iifname "qmapmux*" tcp dport 45061-45062 accept comment "imsd-protected-ports"
iifname "qmapmux*" udp dport 45061-45062 accept comment "imsd-protected-ports"
}
}