Commit e26e6b9
fix(sysinfo): suppress iptables error in diagnostic report for containers (#1011)
getIptablesInfo() called iptables -S unconditionally, producing
modprobe/legacy table errors in Docker on nf_tables hosts (Alpine
6.12+) where the legacy iptables backend cannot initialize without
the host's ip_tables kernel module.
Skip the iptables call when canManageFirewall() is false and show
a context-specific message instead:
- Docker: "Firewall managed by host (Docker)"
- LXC without CAP_NET_ADMIN: "Firewall unavailable (container without CAP_NET_ADMIN)"1 parent 13f1f98 commit e26e6b9
1 file changed
Lines changed: 14 additions & 7 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
24 | 24 | | |
25 | 25 | | |
26 | 26 | | |
| 27 | + | |
27 | 28 | | |
28 | 29 | | |
29 | 30 | | |
| |||
284 | 285 | | |
285 | 286 | | |
286 | 287 | | |
287 | | - | |
288 | | - | |
289 | | - | |
290 | | - | |
291 | | - | |
292 | | - | |
293 | | - | |
| 288 | + | |
| 289 | + | |
| 290 | + | |
| 291 | + | |
| 292 | + | |
| 293 | + | |
| 294 | + | |
| 295 | + | |
| 296 | + | |
| 297 | + | |
| 298 | + | |
| 299 | + | |
| 300 | + | |
294 | 301 | | |
295 | 302 | | |
296 | 303 | | |
| |||
0 commit comments