Bug 589150

Summary:	app-containers/docker: add iptables USE flag
Product:	Gentoo Linux	Reporter:	Daniel Maxime <root>
Component:	Current packages	Assignee:	William Hubbs <williamh>
Status:	RESOLVED INVALID
Severity:	normal	CC:	gyakovlev, jstein, mrueg, mvolaski, poncho, tsmksubc, xarthisius, zlogene
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	docker-1.12.0_rc4-r2.ebuild

Description Daniel Maxime 2016-07-19 13:17:10 UTC

This is an ebuild forked from the last version, adding "iptables" USE flag. Docker can works without iptables and (for me), I only use nftables.

This ebuild makes iptables dependancy optional.
Note: you need to add "--iptables=false --ip-masq=false" to dockerd options to make it run of course (if iptables binary is not found)

Reproducible: Always

Comment 1 Daniel Maxime 2016-07-19 13:18:55 UTC

Created attachment 441094 [details]
docker-1.12.0_rc4-r2.ebuild

add "iptables" USE flag

Comment 2 William Hubbs gentoo-dev

2016-07-28 17:21:00 UTC

If Docker uses or detects iptables during the build process this
patch is correct.

If not, the patch should just be an addition to pkg_postinst something
like:

if ! has_version 'net-firewall/iptables'; then
	elog "You may want to install iptables for blah blah functionality"
fi

Comment 3 Guilherme Amadio gentoo-dev

2020-05-07 10:08:09 UTC

Docker is not working without /sbin/iptables for me. I had to create a symlink for /sbin/iptables -> /sbin/xtables-legacy-multi by hand so that docker daemon would start.

Comment 4 William Hubbs gentoo-dev

2022-04-15 22:01:27 UTC

I looked into this, and in the current versions of docker, iptables is a
hard requirement, so I can't make it optional.