From eab5a4cfb7b3bbb63cd2a1d9a5a69e9bc32d4cef Mon Sep 17 00:00:00 2001 From: Paul Holzinger Date: Wed, 23 Feb 2022 15:34:41 +0100 Subject: Load ip_tables modules at boot Rootless users cannot load the ip_tables module, in fedora 36 this module is no longer loaded by default so we have to add it manually. This is needed because rootless network setup tries to use iptables and if iptables-legacy is used instead of iptables-nft it will fail. To provide a better user experience we will load the module at boot. Note that this is not needed for RHEL because iptables-legacy is not supported on RHEL 8 and newer. [NO NEW TESTS NEEDED] Fixes #12661 Signed-off-by: Paul Holzinger --- contrib/modules-load.d/podman-iptables.conf | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 contrib/modules-load.d/podman-iptables.conf (limited to 'contrib') diff --git a/contrib/modules-load.d/podman-iptables.conf b/contrib/modules-load.d/podman-iptables.conf new file mode 100644 index 000000000..001ef8af8 --- /dev/null +++ b/contrib/modules-load.d/podman-iptables.conf @@ -0,0 +1,5 @@ +# On fedora 36 ip_tables is no longer auto loaded and rootless user have no permsissions to load it. +# When we have actual nftables support in the future we might want to revisit this. +# If you use iptables-nft this is not needed. +ip_tables +ip6_tables -- cgit v1.2.3-54-g00ecf