fix: change iptables backend to legacy (#58)

* fix: change `iptables` backend to legacy * ci: bump version
codefresh-io · Apr 3, 2024 · e0cc984 · e0cc984
1 parent 0e29efc
commit e0cc984
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/Dockerfile b/Dockerfile
@@ -33,9 +33,15 @@ RUN echo -en "https://dl-cdn.alpinelinux.org/alpine/v$(cut -d'.' -f1,2 /etc/alpi
   && apk upgrade \
   && apk add bash jq fuse-overlayfs --no-cache \
   && apk add slirp4netns --no-cache \
+  # Needed only for `update-alternatives` below
+  && apk add dpkg --no-cache \
   && rm /usr/local/bin/vpnkit \
   && rm -rf /var/cache/apk/*
 
+# Backward compatibility with kernels that do not support `iptables-nft`. Check #CR-23033 for details.
+RUN update-alternatives --install $(which iptables) iptables $(which iptables-legacy) 10 \
+  && update-alternatives --install $(which ip6tables) ip6tables $(which ip6tables-legacy) 10
+
 ENV DOCKERD_ROOTLESS_ROOTLESSKIT_NET=slirp4netns
 
 COPY --from=node-exporter /bin/node_exporter /bin/

diff --git a/service.yaml b/service.yaml
@@ -1 +1 @@
-version: 1.28.4
+version: 1.28.5