There is a new pull request by jirutka against master on the void-packages repository https://github.com/jirutka/void-packages iproute2-split-tc https://github.com/void-linux/void-packages/pull/31961 iproute2: move usr/bin/tc to -tc-ipt subpackage /usr/bin/tc is used to configure Traffic Control, it should be part of existing iproute2-tc-ipt subpackage. The primary motivation to move /usr/bin/tc into subpackage is to remove dependency on iptables package in iproute2, and transitively from base-system. Users who use nftables instead of legacy iptables would not have to blacklist iptables package anymore. **IMPORTANT**: base-system doesn’t directly depend on iptables, but it depends on iproute2, so iptables is installed by default. It’s described in the [Firewalls documentation](https://docs.voidlinux.org/config/network/firewalls.html): > By default, the iptables package is installed on the base system. It provides iptables(8)/ip6tables(8). The related services use the /etc/iptables/iptables.rules and /etc/iptables/ip6tables.rules ruleset files, which must be created by the system administrator. I think that pulling iptables with the base-system by default is wrong. nftables is clearly superior and should be preferred on new installations. I don’t mean that it should be forced, just that iptables should not be the default. Since base-system is supposed to contain really just a base system (there’s not even a cron or syslog included), I think that it should not directly depend on iptables nor nftables. However, many users probably rely on iptables being installed as transitive dependency of base-system, so effectively removing it from the dependency graph would cause troubles. What can we do? a) Inform users about the change, e.g. in post-upgrade message? a.1) Can we automatically mark iptables as explicit dependency via hook when upgrading iproute2? b) Add dependency on iptables to the base-system package (lowest effort). c) Maybe create a virtual _firewall_ and make base-system depend on it? However, I don’t know yet how this works in xbps. d) …? /cc @q66 A patch file from https://github.com/void-linux/void-packages/pull/31961.patch is attached