From f4fd15643db8a92103d299f3ddeb4a8d16806a39 Mon Sep 17 00:00:00 2001 From: Hermes Date: Wed, 13 May 2026 12:47:29 -0400 Subject: [PATCH] =?UTF-8?q?fix:=20remove=20apk=20add=20iptables-nft=20?= =?UTF-8?q?=E2=80=94=20built-in=20on=20Alpine=203.18+?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit In Alpine 3.18+, the 'iptables' package IS the nftables variant. iptables-nft is not a separate package anymore — just need to flip update-alternatives from iptables-legacy to iptables-nft. --- vpn/Dockerfile | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/vpn/Dockerfile b/vpn/Dockerfile index ea6f370..08143b7 100644 --- a/vpn/Dockerfile +++ b/vpn/Dockerfile @@ -3,8 +3,7 @@ FROM ghcr.io/wg-easy/wg-easy:latest # The upstream image defaults to iptables-legacy via update-alternatives. -# Switch to iptables-nft so it works on kernels where only nftables -# netfilter modules are available (iptable_nat module missing). -RUN apk add --no-cache iptables-nft && \ - update-alternatives --set iptables /usr/sbin/iptables-nft && \ +# Switch iptables to the nftables backend (already provided by the 'iptables' +# package on Alpine 3.18+). No apk add needed — iptables-nft is built-in. +RUN update-alternatives --set iptables /usr/sbin/iptables-nft && \ update-alternatives --set ip6tables /usr/sbin/ip6tables-nft