From 18df45819d4d857b6536a77e86ce6fcde057f03e Mon Sep 17 00:00:00 2001 From: Hermes Agent Date: Tue, 28 Apr 2026 15:34:38 +0000 Subject: [PATCH 1/5] Add restricted AI worker access with deployment capabilities - New module: modules/nixos/security/ai-worker-restricted.nix - Bind mount for infra repo access (RW) - Whitelisted sudo commands: nh, nixos-rebuild, nixpkgs-fmt, nix - Audit logging for infra changes - Documentation in README-ai-worker.md - Updated users/ai-worker.nix: - Enable services.aiWorkerAccess - Lock password (SSH key only) - Security documentation comments - Updated flake.nix: - Include new security module SECURITY: AI must ask for user confirmation before running nh os switch --- flake.nix | 1 + modules/nixos/security/README-ai-worker.md | 92 +++++++++++++++++++ .../nixos/security/ai-worker-restricted.nix | 57 ++++++++++++ users/ai-worker.nix | 11 +++ 4 files changed, 161 insertions(+) create mode 100644 modules/nixos/security/README-ai-worker.md create mode 100644 modules/nixos/security/ai-worker-restricted.nix diff --git a/flake.nix b/flake.nix index a06b03e..8f8b51a 100644 --- a/flake.nix +++ b/flake.nix @@ -61,6 +61,7 @@ ./modules/nixos/services/open_code_server.nix ./modules/nixos/services/ollama_init_custom_models.nix ./modules/nixos/services/openclaw_node.nix + ./modules/nixos/security/ai-worker-restricted.nix ./users/gortium.nix ./users/ai-worker.nix ]; diff --git a/modules/nixos/security/README-ai-worker.md b/modules/nixos/security/README-ai-worker.md new file mode 100644 index 0000000..8600e08 --- /dev/null +++ b/modules/nixos/security/README-ai-worker.md @@ -0,0 +1,92 @@ +# AI Worker Restricted Access + +This module provides restricted access for the AI worker (hermes-agent) to manage the infra repository. + +## Security Model + +The `ai-worker` user has: + +### Filesystem Access +- **Bind mount**: `/home/ai-worker/infra` → `/home/gortium/infra` (read-write) +- **Cannot access**: Any other files outside the bind mount and standard system paths + +### Sudo Access (Whitelist Only) +The following commands are allowed via sudo without password: +- `/run/current-system/sw/bin/nh` - NixOS home manager +- `/run/current-system/sw/bin/nixos-rebuild` - System rebuild +- `/run/current-system/sw/bin/nixpkgs-fmt` - Nix formatter +- `/run/current-system/sw/bin/nix` - Nix package manager + +### Docker Access +- Member of `docker` group - can manage containers +- Cannot modify host system directly + +### Audit Logging +- All changes to `/home/gortium/infra` are logged via Linux audit subsystem +- Audit rule: `-w /home/gortium/infra -p wa -k infra_changes` + +## Workflow: Ask First, Always + +**CRITICAL**: Before running any deployment command (`nh os switch` or `nixos-rebuild`), the AI MUST: + +1. **Show the planned changes** to the user +2. **Explain the impact** of the changes +3. **Wait for explicit confirmation** before executing + +### Example Workflow + +```bash +# AI prepares changes +cd /home/ai-worker/infra +# ... edits files ... +nixpkgs-fmt . + +# AI shows diff to user +git diff + +# AI asks: "Ready to deploy? This will restart the ai_stack service." +# User responds: "Yes, proceed" + +# Only then does AI run: +sudo nh os switch --flake .#lazyworkhorse +``` + +## SSH Access + +Connect as: +```bash +ssh ai-worker@lazyworkhorse +``` + +The working directory will be `/home/ai-worker`, with infra repo accessible at `/home/ai-worker/infra`. + +## Verification + +Check ai-worker permissions: +```bash +# On the host, as root or gortium: +sudo -u ai-worker sudo -l +``` + +Expected output should show only the whitelisted commands. + +## Troubleshooting + +If ai-worker cannot access infra: +```bash +# Check bind mount +mount | grep ai-worker/infra + +# Check permissions +ls -la /home/gortium/infra +ls -la /home/ai-worker/infra +``` + +If sudo commands fail: +```bash +# Check sudo rules +sudo cat /etc/sudoers.d/* | grep ai-worker + +# Check audit logs +sudo ausearch -k infra_changes +``` diff --git a/modules/nixos/security/ai-worker-restricted.nix b/modules/nixos/security/ai-worker-restricted.nix new file mode 100644 index 0000000..a02ec69 --- /dev/null +++ b/modules/nixos/security/ai-worker-restricted.nix @@ -0,0 +1,57 @@ +{ config, pkgs, lib, ... }: + +with lib; + +{ + options.services.aiWorkerAccess = mkOption { + type = types.bool; + default = false; + description = "Enable restricted AI worker access to infra repo with deployment capabilities"; + }; + + config = mkIf config.services.aiWorkerAccess { + # Bind mount for infra repo access (read-write for editing) + fileSystems."/home/ai-worker/infra" = { + device = "/home/gortium/infra"; + fsType = "none"; + options = [ "bind" ]; + }; + + # Restricted sudo access - only specific commands allowed + security.sudo.extraRules = [ + { + users = [ "ai-worker" ]; + commands = [ + { + command = "/run/current-system/sw/bin/nh"; + options = [ "NOPASSWD" ]; + } + { + command = "/run/current-system/sw/bin/nixos-rebuild"; + options = [ "NOPASSWD" ]; + } + { + command = "/run/current-system/sw/bin/nixpkgs-fmt"; + options = [ "NOPASSWD" ]; + } + { + command = "/run/current-system/sw/bin/nix"; + options = [ "NOPASSWD" ]; + } + ]; + } + ]; + + # Ensure ai-worker has necessary tools available + environment.systemPackages = with pkgs; [ + nh + nixpkgs-fmt + ]; + + # Audit logging for ai-worker actions on infra directory + security.audit.enable = mkDefault true; + security.audit.rules = [ + "-w /home/gortium/infra -p wa -k infra_changes" + ]; + }; +} diff --git a/users/ai-worker.nix b/users/ai-worker.nix index a8f027c..d7df7c0 100644 --- a/users/ai-worker.nix +++ b/users/ai-worker.nix @@ -9,6 +9,17 @@ openssh.authorizedKeys.keys = [ keys.users.ai-worker.main ]; + # No password login - SSH key only + hashedPassword = "!"; }; users.groups.ai-worker = {}; + + # Enable restricted AI worker access with deployment capabilities + # SECURITY: ai-worker can only: + # - Access /home/ai-worker/infra (bind-mounted to /home/gortium/infra) + # - Run: nh, nixos-rebuild, nixpkgs-fmt, nix (via sudo, no password) + # - Manage docker containers (via docker group) + # - All changes to infra/ are logged via audit subsystem + # WORKFLOW: AI must ask for user confirmation before running nh os switch + services.aiWorkerAccess = true; } -- 2.49.1 From f0e21d95e4b9734be0101b0dd68f8a0d906f1603 Mon Sep 17 00:00:00 2001 From: Hermes Agent Date: Wed, 29 Apr 2026 19:55:19 +0000 Subject: [PATCH 2/5] fix: ai-worker docker-only access for ollama benchmarking Remove infra repo bind mount and sudo access from ai-worker user. Now ai-worker can only: - SSH into host from Hermes container - Run docker commands via docker group membership - Execute ollama benchmarks via docker exec Results saved to /opt/data/ai-optimizer/ in Hermes container. --- modules/nixos/security/README-ai-worker.md | 103 ++++++++++-------- .../nixos/security/ai-worker-restricted.nix | 48 +------- users/ai-worker.nix | 12 +- 3 files changed, 68 insertions(+), 95 deletions(-) diff --git a/modules/nixos/security/README-ai-worker.md b/modules/nixos/security/README-ai-worker.md index 8600e08..6128573 100644 --- a/modules/nixos/security/README-ai-worker.md +++ b/modules/nixos/security/README-ai-worker.md @@ -1,54 +1,62 @@ # AI Worker Restricted Access -This module provides restricted access for the AI worker (hermes-agent) to manage the infra repository. +This module provides SSH access for the AI worker (hermes-agent) to run ollama benchmarks on the host. ## Security Model The `ai-worker` user has: ### Filesystem Access -- **Bind mount**: `/home/ai-worker/infra` → `/home/gortium/infra` (read-write) -- **Cannot access**: Any other files outside the bind mount and standard system paths +- **Home directory**: `/home/ai-worker` (standard user home) +- **No bind mounts**: Cannot access `/home/gortium/infra` or other host files +- **Cannot access**: Any files outside standard system paths -### Sudo Access (Whitelist Only) -The following commands are allowed via sudo without password: -- `/run/current-system/sw/bin/nh` - NixOS home manager -- `/run/current-system/sw/bin/nixos-rebuild` - System rebuild -- `/run/current-system/sw/bin/nixpkgs-fmt` - Nix formatter -- `/run/current-system/sw/bin/nix` - Nix package manager +### Sudo Access +- **NONE**: ai-worker has no sudo privileges +- Cannot run `nh`, `nixos-rebuild`, `nixpkgs-fmt`, or `nix` with elevated permissions ### Docker Access -- Member of `docker` group - can manage containers -- Cannot modify host system directly +- Member of `docker` group - can run `docker` and `docker exec` commands +- Primary use: `docker exec ollama ollama ...` for benchmarking +- Can run `docker exec --privileged ollama rocm-smi ...` for VRAM monitoring -### Audit Logging -- All changes to `/home/gortium/infra` are logged via Linux audit subsystem -- Audit rule: `-w /home/gortium/infra -p wa -k infra_changes` +## Workflow: SSH + Docker Benchmarking -## Workflow: Ask First, Always - -**CRITICAL**: Before running any deployment command (`nh os switch` or `nixos-rebuild`), the AI MUST: - -1. **Show the planned changes** to the user -2. **Explain the impact** of the changes -3. **Wait for explicit confirmation** before executing +The AI worker connects from the Hermes container to the host via SSH, runs ollama benchmarks, then returns to save results. ### Example Workflow ```bash -# AI prepares changes -cd /home/ai-worker/infra -# ... edits files ... -nixpkgs-fmt . +# From Hermes container, SSH to host +ssh -i /path/to/ssh/key ai-worker@host.docker.internal -# AI shows diff to user -git diff +# On host, run ollama benchmarks via docker +docker exec ollama ollama pull devstral-small-2:24b -# AI asks: "Ready to deploy? This will restart the ai_stack service." -# User responds: "Yes, proceed" +# Create test modelfile +docker exec ollama bash -c 'cat < /root/.ollama/test.modelfile +FROM devstral-small-2:24b +PARAMETER num_ctx 65536 +PARAMETER num_gpu 99 +PARAMETER flash_attn true +EOF' -# Only then does AI run: -sudo nh os switch --flake .#lazyworkhorse +# Create and test model +docker exec ollama ollama create test-model -f /root/.ollama/test.modelfile +docker exec ollama ollama run test-model "Write a Python async function" + +# Check VRAM usage +docker exec --privileged ollama rocm-smi --showmeminfo vram + +# Cleanup +docker exec ollama ollama rm test-model + +# Exit SSH, return to Hermes container +exit + +# Save results in Hermes container +# /opt/data/ai-optimizer/state.json +# /opt/data/ai-optimizer/results.csv ``` ## SSH Access @@ -58,7 +66,7 @@ Connect as: ssh ai-worker@lazyworkhorse ``` -The working directory will be `/home/ai-worker`, with infra repo accessible at `/home/ai-worker/infra`. +The working directory will be `/home/ai-worker`. No infra repo access. ## Verification @@ -66,27 +74,32 @@ Check ai-worker permissions: ```bash # On the host, as root or gortium: sudo -u ai-worker sudo -l -``` +# Should show: no sudo access -Expected output should show only the whitelisted commands. +# Check docker group membership +groups ai-worker +# Should show: ai-worker docker +``` ## Troubleshooting -If ai-worker cannot access infra: +If ai-worker cannot run docker commands: ```bash -# Check bind mount -mount | grep ai-worker/infra +# Check docker group membership +groups ai-worker -# Check permissions -ls -la /home/gortium/infra -ls -la /home/ai-worker/infra +# Verify ollama container is running +docker ps | grep ollama + +# Test docker access +sudo -u ai-worker docker exec ollama ollama list ``` -If sudo commands fail: +If SSH connection fails: ```bash -# Check sudo rules -sudo cat /etc/sudoers.d/* | grep ai-worker +# Check SSH key is authorized +cat /home/ai-worker/.ssh/authorized_keys -# Check audit logs -sudo ausearch -k infra_changes +# Check SSH service +systemctl status sshd ``` diff --git a/modules/nixos/security/ai-worker-restricted.nix b/modules/nixos/security/ai-worker-restricted.nix index a02ec69..0e9d4f6 100644 --- a/modules/nixos/security/ai-worker-restricted.nix +++ b/modules/nixos/security/ai-worker-restricted.nix @@ -6,52 +6,12 @@ with lib; options.services.aiWorkerAccess = mkOption { type = types.bool; default = false; - description = "Enable restricted AI worker access to infra repo with deployment capabilities"; + description = "Enable AI worker SSH access with docker group membership for ollama benchmarking"; }; config = mkIf config.services.aiWorkerAccess { - # Bind mount for infra repo access (read-write for editing) - fileSystems."/home/ai-worker/infra" = { - device = "/home/gortium/infra"; - fsType = "none"; - options = [ "bind" ]; - }; - - # Restricted sudo access - only specific commands allowed - security.sudo.extraRules = [ - { - users = [ "ai-worker" ]; - commands = [ - { - command = "/run/current-system/sw/bin/nh"; - options = [ "NOPASSWD" ]; - } - { - command = "/run/current-system/sw/bin/nixos-rebuild"; - options = [ "NOPASSWD" ]; - } - { - command = "/run/current-system/sw/bin/nixpkgs-fmt"; - options = [ "NOPASSWD" ]; - } - { - command = "/run/current-system/sw/bin/nix"; - options = [ "NOPASSWD" ]; - } - ]; - } - ]; - - # Ensure ai-worker has necessary tools available - environment.systemPackages = with pkgs; [ - nh - nixpkgs-fmt - ]; - - # Audit logging for ai-worker actions on infra directory - security.audit.enable = mkDefault true; - security.audit.rules = [ - "-w /home/gortium/infra -p wa -k infra_changes" - ]; + # ai-worker is member of docker group - can run docker commands via SSH + # No bind mounts, no sudo access - docker-only for ollama benchmarking + users.groups.docker.members = [ "ai-worker" ]; }; } diff --git a/users/ai-worker.nix b/users/ai-worker.nix index d7df7c0..48b51de 100644 --- a/users/ai-worker.nix +++ b/users/ai-worker.nix @@ -14,12 +14,12 @@ }; users.groups.ai-worker = {}; - # Enable restricted AI worker access with deployment capabilities + # Enable restricted AI worker SSH access for ollama benchmarking # SECURITY: ai-worker can only: - # - Access /home/ai-worker/infra (bind-mounted to /home/gortium/infra) - # - Run: nh, nixos-rebuild, nixpkgs-fmt, nix (via sudo, no password) - # - Manage docker containers (via docker group) - # - All changes to infra/ are logged via audit subsystem - # WORKFLOW: AI must ask for user confirmation before running nh os switch + # - SSH into host from Hermes container + # - Run docker commands (docker exec ollama ...) via docker group + # - NO access to infra repo (no bind mount) + # - NO sudo access (no nh, nixos-rebuild, nixpkgs-fmt, nix) + # WORKFLOW: SSH from Hermes container, run docker benchmarks, return and save results to /opt/data/ai-optimizer/ services.aiWorkerAccess = true; } -- 2.49.1 From ceb58bcf769d6417fcf8bc47a9773a40d891018c Mon Sep 17 00:00:00 2001 From: Hermes Agent Date: Sat, 9 May 2026 16:10:30 +0000 Subject: [PATCH 3/5] chore: update flake.lock and fix merge conflict --- flake.lock | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/flake.lock b/flake.lock index e78ed64..320321a 100644 --- a/flake.lock +++ b/flake.lock @@ -70,11 +70,11 @@ "pre-commit-hooks": "pre-commit-hooks" }, "locked": { - "lastModified": 1774721317, - "narHash": "sha256-KS0ElyhZKdUFcfaxfwid3yi2Id3EP9i+dGL16/wx1T8=", + "lastModified": 1777373577, + "narHash": "sha256-K0sXr8tRA9L1FGE8Khl42NR+DmZOY9gNYCP8ljX7TAo=", "ref": "main", - "rev": "d0190cff6f2314cc1c727ff113aea20e086f4bcc", - "revCount": 19103, + "rev": "faaa14a303dabc6309a52cc8e5eba86f9e29ccaf", + "revCount": 19152, "type": "git", "url": "https://git.lix.systems/lix-project/lix" }, @@ -178,11 +178,11 @@ }, "nixpkgs_2": { "locked": { - "lastModified": 1774386573, - "narHash": "sha256-4hAV26quOxdC6iyG7kYaZcM3VOskcPUrdCQd/nx8obc=", + "lastModified": 1777268161, + "narHash": "sha256-bxrdOn8SCOv8tN4JbTF/TXq7kjo9ag4M+C8yzzIRYbE=", "owner": "nixos", "repo": "nixpkgs", - "rev": "46db2e09e1d3f113a13c0d7b81e2f221c63b8ce9", + "rev": "1c3fe55ad329cbcb28471bb30f05c9827f724c76", "type": "github" }, "original": { -- 2.49.1 From 6b2e7a626fc221c9753a153837f38a5a103e0113 Mon Sep 17 00:00:00 2001 From: Hermes Date: Sun, 10 May 2026 10:09:06 -0400 Subject: [PATCH 4/5] feat: update compose submodule for ollama-gfx906 (v0.23.2) + add Dockerfile --- assets/compose | 2 +- assets/ollama/Dockerfile | 106 +++++++++++++++++++++++++++++++++++++++ 2 files changed, 107 insertions(+), 1 deletion(-) create mode 100644 assets/ollama/Dockerfile diff --git a/assets/compose b/assets/compose index 434b283..d97f1cb 160000 --- a/assets/compose +++ b/assets/compose @@ -1 +1 @@ -Subproject commit 434b2835ff03f3607e12f821e923e133b01dc6cd +Subproject commit d97f1cb1e5c762ce779f76ac26a61b5430f87f32 diff --git a/assets/ollama/Dockerfile b/assets/ollama/Dockerfile new file mode 100644 index 0000000..438e607 --- /dev/null +++ b/assets/ollama/Dockerfile @@ -0,0 +1,106 @@ +# ollama-gfx906/Dockerfile +# +# Custom ollama image with ROCm 6.1 + gfx906 (MI50) support. +# The official ollama/rocm image ships ROCm 7.2 which dropped gfx906. +# This uses v0.23.2's native CMake build system with AMDGPU_TARGETS including gfx906. +# +# Build: docker build -t ollama/ollama:rocm-gfx906 ai/ollama + +FROM rocm/dev-ubuntu-22.04:6.1.2-complete AS builder + +# Build dependencies (CMake, Ninja, Go) +ARG CMAKEVERSION=3.31.2 +ARG NINJAVERSION=1.12.1 +ARG GOLANG_VERSION=1.22.0 + +RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y \ + curl git ccache build-essential pkg-config unzip \ + && rm -rf /var/lib/apt/lists/* + +# Install CMake from official binaries +RUN curl -fsSL https://github.com/Kitware/CMake/releases/download/v${CMAKEVERSION}/cmake-${CMAKEVERSION}-linux-x86_64.tar.gz \ + | tar xz -C /usr/local --strip-components 1 + +# Install Ninja +RUN curl -fsSL -o /tmp/ninja.zip \ + https://github.com/ninja-build/ninja/releases/download/v${NINJAVERSION}/ninja-linux.zip \ + && unzip /tmp/ninja.zip -d /usr/local/bin && rm /tmp/ninja.zip + +# Install Go +RUN curl -fsSL https://go.dev/dl/go${GOLANG_VERSION}.linux-amd64.tar.gz \ + | tar xz -C /usr/local +ENV PATH=/usr/local/go/bin:$PATH + +ARG OLLAMA_VERSION=v0.23.2 +RUN git clone --depth 1 --branch ${OLLAMA_VERSION} https://github.com/ollama/ollama.git /build +WORKDIR /build + +# ROCm paths +ENV HIP_PATH=/opt/rocm +ENV ROCM_PATH=/opt/rocm +ENV CMAKE_GENERATOR=Ninja +ENV LDFLAGS=-s + +# Step 1: Build CPU backends with GCC (no ROCm preset) +# Pre-set CMAKE_HIP_COMPILER="" to prevent check_language(HIP) from +# finding a HIP compiler (it searches /opt/rocm even without PATH). +# Remove /opt/rocm from PATH to prevent find_program from finding hipcc. +RUN mkdir -p build-cpu && \ + PATH=/usr/local/go/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin \ + cmake -B build-cpu -DCMAKE_BUILD_TYPE=Release \ + -DCMAKE_HIP_COMPILER="" \ + -DCMAKE_INSTALL_PREFIX=/build/dist && \ + cmake --build build-cpu --target ggml-cpu -- -l $(nproc) && \ + cmake --install build-cpu --component CPU --strip && \ + echo "=== CPU install ===" && \ + (find /build/dist/lib/ollama -type f -o -type l 2>&1 | head -20 || echo "empty") + +# Step 2: Build HIP backend with ROCm preset + gfx906 target only +# The ROCm 6 preset enables HIP language detection (enable_language(HIP)) +# which ensures GPU kernels are properly compiled for gfx906. +# OLLAMA_RUNNER_DIR=rocm from the preset, so HIP goes to lib/ollama/rocm/ +# Need CMAKE_PREFIX_PATH so find_package(hip) finds hip-config.cmake +# at /opt/rocm/lib/cmake/hip/hip-config.cmake. +RUN mkdir -p build-hip && \ + cmake -B build-hip \ + --preset 'ROCm 6' \ + -DAMDGPU_TARGETS="gfx906:xnack-" \ + -DCMAKE_BUILD_TYPE=Release \ + -DCMAKE_PREFIX_PATH="/opt/rocm" && \ + cmake --build build-hip --target ggml-hip -- -l $(nproc) && \ + cmake --install build-hip --component HIP --strip && \ + echo "=== HIP install ===" && \ + find /build/dist/lib/ollama -type f -o -type l | head -20 + +# Step 3: Build Go binary (GCC for CGo linking) +ENV CGO_ENABLED=1 +RUN go build -trimpath -ldflags="-X=github.com/ollama/ollama/version.Version=${OLLAMA_VERSION}" -o /build/dist/ollama . + +# ---------- Runtime image ---------- +FROM ubuntu:24.04 + +RUN apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y \ + ca-certificates curl libstdc++6 libgomp1 libvulkan1 libopenblas0 \ + && rm -rf /var/lib/apt/lists/* + +# Copy ROCm 6.1 runtime libraries +# These are needed at runtime by ggml-hip via LD_LIBRARY_PATH +COPY --from=builder /opt/rocm/lib/ /opt/rocm/lib/ +COPY --from=builder /opt/rocm/share/ /opt/rocm/share/ + +# Copy ollama binary + all backends (CPU + HIP) +# CPU install: /build/dist/lib/ollama/libggml-*.so +# HIP install: /build/dist/lib/ollama/rocm/libggml-hip.so +COPY --from=builder /build/dist/ollama /usr/bin/ollama +COPY --from=builder /build/dist/lib/ollama/ /usr/lib/ollama/ + +RUN ldconfig + +ENV LD_LIBRARY_PATH=/opt/rocm/lib:/usr/lib/ollama/rocm:/usr/lib/ollama +ENV HSA_OVERRIDE_GFX_VERSION=9.0.6 +ENV HCC_AMDGPU_TARGET=gfx906 +ENV HSA_ENABLE_SDMA=0 + +EXPOSE 11434 +ENTRYPOINT ["/bin/ollama"] +CMD ["serve"] -- 2.49.1 From 07805b867d9d1c83b04e7ab2c97075f379f16eb1 Mon Sep 17 00:00:00 2001 From: Hermes Date: Tue, 12 May 2026 14:53:09 -0400 Subject: [PATCH 5/5] fix: update compose submodule for wg-easy iptables-nft fix Updates the compose submodule to point to fix/wg-easy-iptables-nft which adds a custom Dockerfile installing iptables-nft for nftables backend compatibility. Fixes the wg-easy container crash-loop: iptables v1.8.3 (legacy): can't initialize iptables table 'nat' Table does not exist (do you need to insmod?) --- assets/compose | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/assets/compose b/assets/compose index d97f1cb..5e242eb 160000 --- a/assets/compose +++ b/assets/compose @@ -1 +1 @@ -Subproject commit d97f1cb1e5c762ce779f76ac26a61b5430f87f32 +Subproject commit 5e242eb94638e5e10aa5491d5094ae381b3cd321 -- 2.49.1