fix: use ln -sf instead of update-alternatives --set

update-alternatives --set fails because the base image only registers iptables-legacy as an alternative. The iptables-nft binary (/usr/sbin/iptables-nft) exists but isn't in the alternatives database. Direct ln -sf bypasses this.
Merge pull request 'fix: remove apk add iptables-nft — built-in on Alpine 3.18+' (#27 ) from fix/vpn-iptables-nft-v2 into master
2026-05-13 12:58:43 -04:00 · 2026-05-13 16:49:23 +00:00
1 changed files with 1 additions and 1 deletions
--- a/vpn/Dockerfile
+++ b/vpn/Dockerfile
@@ -3,7 +3,7 @@
 FROM ghcr.io/wg-easy/wg-easy:latest

 # The upstream image registers only iptables-legacy with update-alternatives.
-# iptables-nft binary exists but isn't registered as an alternative.
+# iptables-nft binary exists but isn't registered as an alternative key.
 # Override the alternatives-managed symlinks directly.
 RUN ln -sf /usr/sbin/iptables-nft /usr/sbin/iptables && \
    ln -sf /usr/sbin/ip6tables-nft /usr/sbin/ip6tables
Author	SHA1	Message	Date
Hermes	8dff094768	fix: use ln -sf instead of update-alternatives --set update-alternatives --set fails because the base image only registers iptables-legacy as an alternative. The iptables-nft binary (/usr/sbin/iptables-nft) exists but isn't in the alternatives database. Direct ln -sf bypasses this.	2026-05-13 12:58:43 -04:00
Thierry Pouplier	ec08f5eb5d	Merge pull request 'fix: remove apk add iptables-nft — built-in on Alpine 3.18+' (#27 ) from fix/vpn-iptables-nft-v2 into master Reviewed-on: #27	2026-05-13 16:49:23 +00:00