By default docker tries to use the legacy iptables and will fail to start if the system is using nftable. (The "iptables" compatibility package from nftables does not mitigate this problem) --Log output-- failed to start daemon: Error initializing network controller: error obtaining controller instance: failed to create NAT chain DOCKER: COMMAND_FAILED: INVALID_IPV: 'ipv4' is not a valid backend or is unavailable ---- The ebuild needs an nftables flag, that when set adds the "--iptables=false" option to the daemon command in the systemd/openrc service units. With this option set the daemon will start correctly in an nftables environment. Reproducible: Always
