Browse code

Dockerfile: switch to iptables-legacy to match the host

CI runs on Ubuntu 16.04 machines, which use iptables (legacy), but
Debian buster uses nftables. Because of this, DNS resolution does not
work if the daemon configures iptables.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

Sebastiaan van Stijn authored on 2019/07/23 00:22:13
Showing 1 changed files
... ...
@@ -284,6 +284,11 @@ RUN --mount=type=cache,sharing=locked,id=moby-dev-aptlib,target=/var/lib/apt \
284 284
             zip
285 285
 
286 286
 
287
+# Switch to use iptables instead of nftables (to match the host machine)
288
+RUN update-alternatives --set iptables  /usr/sbin/iptables-legacy  || true \
289
+ && update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy || true \
290
+ && update-alternatives --set arptables /usr/sbin/arptables-legacy || true
291
+
287 292
 RUN pip3 install yamllint==1.16.0
288 293
 
289 294
 COPY --from=dockercli     /build/ /usr/local/cli