From 611e96b3065602234e379a4070cb60987604a2c3 Mon Sep 17 00:00:00 2001 From: Hermes Date: Wed, 13 May 2026 12:48:51 -0400 Subject: [PATCH] =?UTF-8?q?fix:=20remove=20apk=20add=20iptables-nft=20?= =?UTF-8?q?=E2=80=94=20built-in=20on=20Alpine=203.18+?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit In Alpine 3.18+, the 'iptables' package IS the nftables variant. iptables-nft is not a separate package. The binary is already in the base image — only need to flip update-alternatives. --- vpn/Dockerfile | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/vpn/Dockerfile b/vpn/Dockerfile index ea6f370..08143b7 100644 --- a/vpn/Dockerfile +++ b/vpn/Dockerfile @@ -3,8 +3,7 @@ FROM ghcr.io/wg-easy/wg-easy:latest # The upstream image defaults to iptables-legacy via update-alternatives. -# Switch to iptables-nft so it works on kernels where only nftables -# netfilter modules are available (iptable_nat module missing). -RUN apk add --no-cache iptables-nft && \ - update-alternatives --set iptables /usr/sbin/iptables-nft && \ +# Switch iptables to the nftables backend (already provided by the 'iptables' +# package on Alpine 3.18+). No apk add needed — iptables-nft is built-in. +RUN update-alternatives --set iptables /usr/sbin/iptables-nft && \ update-alternatives --set ip6tables /usr/sbin/ip6tables-nft -- 2.49.1