Skip to content

DNAT unsupported revision #47

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
ADumaine opened this issue Feb 28, 2020 · 4 comments
Closed

DNAT unsupported revision #47

ADumaine opened this issue Feb 28, 2020 · 4 comments

Comments

@ADumaine
Copy link

This is a new install of ubuntu 18.04 with the kernal updated to 5.3 and docker 19.03.06

The revision error appears to be due to the host system running iptables 1.6.1 and ipv6nat using 1.8.3.
as mentioned in moby/moby#40428

0 0 DNAT tcp !bridge-tn30 * ::/0 2001:570:1a18:202::30 tcp dpt:19030 DNAT [unsupported revision]

If this is the cause, how should it be fixed? Can the version in ipv6nat be downgraded? or do I need to upgrade ubuntu to 19.10?
Thanks!

@robbertkl
Copy link
Owner

Could you run docker exec ipv6nat ls -l /sbin/iptables for me and paste the output? Change "ipv6nat" to the name of your ipv6nat container.

@ADumaine
Copy link
Author

Sorry, I went ahead and updated the OS to 20.04 which uses iptables 1.8.4 and the error is gone.

With 20.04 the command you requested results in the following:
lrwxrwxrwx 1 root root 20 Feb 28 19:05 /sbin/iptables -> xtables-legacy-multi

I think it would be helpful to others if any other solutions were listed here.

@bephinix
Copy link
Contributor

bephinix commented Aug 2, 2020

@robbertkl I think we can close this. 👍

@robbertkl
Copy link
Owner

Agreed

dduportal added a commit to dduportal/jenkins-infra that referenced this issue Dec 5, 2022
dduportal added a commit to dduportal/jenkins-infra that referenced this issue Dec 5, 2022
dduportal added a commit to dduportal/jenkins-infra that referenced this issue Dec 6, 2022
dduportal added a commit to jenkins-infra/jenkins-infra that referenced this issue Dec 6, 2022
* chore(tests) use different hieradata configurations for unit tests and vagrant

Signed-off-by: Damien Duportal <[email protected]>

* chore(updatecli) track puppetlabs-firewall module and bump it to 4.0.0

Signed-off-by: Damien Duportal <[email protected]>

* chore(vagrant) add a 2nd NIC, which requires ubuntu 20.04 and iptables package to avoid iptables errors - robbertkl/docker-ipv6nat#47

Signed-off-by: Damien Duportal <[email protected]>

* fix(openvpn) correct bootstrap from scratch by fixing recursive directories issue

Signed-off-by: Damien Duportal <[email protected]>

* fix(openvpn) correct boostrap by ensuring that required CLI are installe (route CLI)

Signed-off-by: Damien Duportal <[email protected]>

* chore(openvpn) refactorize role to allow defining CIDRs, peering and VPN networks through hieradata

Signed-off-by: Damien Duportal <[email protected]>

* Apply suggestions from code review

Co-authored-by: Hervé Le Meur <[email protected]>

Signed-off-by: Damien Duportal <[email protected]>
Co-authored-by: Hervé Le Meur <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants