This is an ebuild forked from the last version, adding "iptables" USE flag. Docker can works without iptables and (for me), I only use nftables. This ebuild makes iptables dependancy optional. Note: you need to add "--iptables=false --ip-masq=false" to dockerd options to make it run of course (if iptables binary is not found) Reproducible: Always
Created attachment 441094 [details] docker-1.12.0_rc4-r2.ebuild add "iptables" USE flag
If Docker uses or detects iptables during the build process this patch is correct. If not, the patch should just be an addition to pkg_postinst something like: if ! has_version 'net-firewall/iptables'; then elog "You may want to install iptables for blah blah functionality" fi
Docker is not working without /sbin/iptables for me. I had to create a symlink for /sbin/iptables -> /sbin/xtables-legacy-multi by hand so that docker daemon would start.
I looked into this, and in the current versions of docker, iptables is a hard requirement, so I can't make it optional.