From cff5c0556dee30053b38ae8d23d35a01bc271f77 Mon Sep 17 00:00:00 2001 From: Zhenya Tikhonov Date: Wed, 3 Apr 2024 10:33:40 +0300 Subject: [PATCH] fix: change `iptables` backend to legacy (#57) * fix: change `iptables` backend to legacy * ci: bump version * docs: document chnges * fix: change `ip6tables` backend to legacy * docs: improve documentation * docs: improve documentation --- Dockerfile | 6 ++++++ service.yaml | 2 +- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index eb30a60..8837b0b 100644 --- a/Dockerfile +++ b/Dockerfile @@ -28,8 +28,14 @@ RUN echo 'http://dl-cdn.alpinelinux.org/alpine/v3.19/main' >> /etc/apk/repositor && apk upgrade \ # Add fuse-overlayfs for comaptibility with rootless. Volumes created with rootless might use fuse-overlay formatted volumes. If those volumes are later used by dind that runs with root it'll require fuse-overlay to be able to read the volume && apk add bash fuse-overlayfs jq --no-cache \ + # Needed only for `update-alternatives` below + && apk add dpkg --no-cache \ && rm -rf /var/cache/apk/* +# Backward compatibility with kernels that do not support `iptables-nft`. Check #CR-23033 for details. +RUN update-alternatives --install $(which iptables) iptables $(which iptables-legacy) 10 \ + && update-alternatives --install $(which ip6tables) ip6tables $(which ip6tables-legacy) 10 + COPY --from=node-exporter /bin/node_exporter /bin/ COPY --from=cleaner /usr/local/bin/dind-cleaner /bin/ COPY --from=bbolt /go/bin/bbolt /bin/ diff --git a/service.yaml b/service.yaml index 1990772..431e876 100644 --- a/service.yaml +++ b/service.yaml @@ -1 +1 @@ -version: 1.28.4 +version: 1.28.5