centos-stream-9: sudo dnf upgrade fails (due to iptables-legacy and iptables-libs conflicts)

[AkihiroSuda]

https://github.com/lima-vm/lima/blob/v1.0.2/templates/centos-stream-9.yaml

$ limactl shell centos-stream-9 sudo dnf upgrade
Last metadata expiration check: 0:04:38 ago on Thu 05 Dec 2024 11:44:12 AM JST.
Error: 
 Problem: package iptables-legacy-1.8.10-4.1.el9.x86_64 from @System requires (iptables-libs(x86-64) = 1.8.10-4.el9 or iptables-libs(x86-64) = 1.8.10-4.el9_4), but none of the providers can be installed
  - cannot install both iptables-libs-1.8.10-5.el9.x86_64 from baseos and iptables-libs-1.8.10-4.el9.x86_64 from @System
  - cannot install both iptables-libs-1.8.10-5.el9.x86_64 from baseos and iptables-libs-1.8.10-4.el9.x86_64 from baseos
  - cannot install the best update candidate for package iptables-libs-1.8.10-4.el9.x86_64
  - problem with installed package iptables-legacy-1.8.10-4.1.el9.x86_64
(try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

[afbjorklund]

This is a problem with the "iptables-legacy" package, from the EPEL repository (not BaseOS)

iptables-legacy.x86_64              1.8.10-4.1.el9              @epel           
iptables-legacy-libs.x86_64         1.8.10-4.1.el9              @epel           
iptables-libs.x86_64                1.8.10-4.el9                @baseos   

It was installed by mistake, by combining the package installation of "fuse-sshfs" and "iptables"

+ dnf_install_flags='-y --setopt=install_weak_deps=False --enablerepo epel'
+ dnf install -y --setopt=install_weak_deps=False --enablerepo epel fuse-sshfs iptables fuse3
Extra Packages for Enterprise Linux 9 - x86_64  9.2 MB/s |  23 MB     00:02    
Extra Packages for Enterprise Linux 9 openh264  2.0 kB/s | 2.5 kB     00:01    
Dependencies resolved.
================================================================================
 Package                   Arch        Version             Repository      Size
================================================================================
Installing:
 fuse-sshfs                x86_64      3.7.3-1.el9         epel            61 k
 fuse3                     x86_64      3.10.2-9.el9        appstream       54 k
 iptables-legacy           x86_64      1.8.10-4.1.el9      epel            49 k
Installing dependencies:
 fuse-common               x86_64      3.10.2-9.el9        baseos         8.3 k
 fuse3-libs                x86_64      3.10.2-9.el9        appstream       91 k
 iptables-legacy-libs      x86_64      1.8.10-4.1.el9      epel            37 k
Downgrading:
 iptables-libs             x86_64      1.8.10-4.el9        baseos         459 k

Transaction Summary
================================================================================
Install    6 Packages
Downgrade  1 Package

Total download size: 760 k