Hermes
7e2b133946
update-alternatives fails because iptables-nft isn't registered as an alternative key (only iptables-legacy was registered by the official Dockerfile). Direct symlink override works.
10 lines
483 B
Docker
10 lines
483 B
Docker
# Custom wg-easy with iptables-nft (nftables-backed iptables)
|
|
# Fixes crash-loop when host kernel lacks legacy iptable_nat module.
|
|
FROM ghcr.io/wg-easy/wg-easy:latest
|
|
|
|
# The upstream image registers only iptables-legacy with update-alternatives.
|
|
# iptables-nft binary exists but isn't registered as an alternative.
|
|
# Override the alternatives-managed symlinks directly.
|
|
RUN ln -sf /usr/sbin/iptables-nft /usr/sbin/iptables && \
|
|
ln -sf /usr/sbin/ip6tables-nft /usr/sbin/ip6tables
|