Hey there, after upgrading to Ubuntu 22.04, updating Docker to the newest version I am unable to reach some containers from the outside world. 2/3 are working as before the upgrade, but 1/3 cannot reached anymore. I use Nginx Proxy Manager. I already checked the netplan.config. I already deleted …

[image] mike175de: I guess it has something to do with the internal docker firewall rules. How can I check those? iptables-save could export the rules and you can search for docker rules in it, but I don’t know how anything could happen to those rules. I would also check the docker network an…

Thanks for your reply. I figured out that ex the interface br-9c62dd44c333 for one of the containers that is not accessible is created, but not the necessary iptable-rules. Deleting the container and the attached interface and recreating both doesn’t rewrite the docker rules for the recreated cont…

I wouldn’t even attept to create Docker’s iptables rules manually. If the rules for the container are not created it must have a reason. I use Ubuntu 22.04 for a long time now and never had this issue which is good and also bad, because I don’t know what could have happened to your environment. I as…

Thanks again. As suspected the firewall rules aren’t set when a container is created and the firewall blocks access: Aug 14 14:29:58 virdoc systemd[1]: var-lib-docker-verlay2-590d8e8f881452a19f46b6c7ccf89150a4e6e970f23a6199ff8c1b3807c3892e\x2dinit-merged.mount: Deactivated successfully. Aug 14 14:…

So UFW is still there. [image] mike175de: [UFW BLOCK] IN=br-bf3b9d3af07a OUT= MAC=02:42:1d:68:4d:94:02:42:ac:12:00:02:08:00 SRC=172.18.0.2 DST=178.254.33.192 [image] mike175de: Aug 14 14:29:58 virdoc networkd-dispatcher[780]: WARNING:Unknown index 432 seen, reloading interface list I’…

[image] rimelek: how did you install Docker CE? Is it from the official APT repository provided by Docker Inc? I use the official APT repo by Docker. Sorry for that. I disabled UFW again, rebooted and recreated a container, but UFW is still in the logs: Aug 14 19:24:43 virdoc systemd[1]: ru…

[image] mike175de: So it seems for me that the log entry is not UFW specific than more Firewall related at all? I tried to find anything that mentions “UFW BLOCK” not caused by ufw but I found the opposite on multiple sites, for example: [image] How to Configure Ubuntu Firewall wit…

My attempts and used commands: Disabling UFW: ufw disable & reboot / recreating Uninstalling UFW: apt remove ufw & checking processes for UFW (no one found) & reboot / recreating docker info: Client: Docker Engine - Community Version: 24.0.5 Context: default Debug Mode: false Plugins: …

Everything looks good. Because I don’t have any more ideas what has happened on the host nd why you still see ufw in the logs when ufw is uninstalled, maybe we can identify the differences between the working and non-working containers’ network. Are the netwrks all created by Docker Compose? Do you…

All my containers are created via docker-compose and haven’t special custom parameters. No some of the containers use also other IP-Addresses/Ranegs, but that doesn’t matter cause I have containers in the 172.xx and also in the other IP-Ranges that aren’t accessible. I already checked that and als…

Some containers unreachable after Upgrade to Ubuntu 22.04

General

rimelek (Ákos Takács) August 16, 2023, 5:15pm 12

Then unfortunately I am out of ideas.

Topic		Replies	Views
Running multiple docker containers with UFW and "--iptables=false" General docker	21	49357	October 16, 2019
Most Dockers not accessible after upgrade to Ubuntu 22.04 General docker	0	949	June 20, 2022
Complete failure of Docker General	11	3250	February 18, 2023
Docker containers with images based on Debian can't access the internet but containers based on Alpine work just fine General	10	14006	May 22, 2023
Dockers not reachable after upgraded from 20.04 to 22.04.1 General	2	1596	August 10, 2022

Some containers unreachable after Upgrade to Ubuntu 22.04

Related topics