Ubuntu 20 -> 22 upgrade, iptables issue

alanpaulkwan · October 30, 2022, 3:46am

There’s a github thread, but hoping to get more help here.

Docker daemon does not start on Ubuntu 22.04 LTS

opened 07:37PM - 17 Jun 22 UTC

area/Engine

File: [engine/install/ubuntu.md](https://docs.docker.com/engine/install/ubuntu/)… After carefully following the installation guide in the referenced document, it is not possible to start the docker daemon. The following error is thrown in the console: ``` failed to start daemon: Error initializing network controller: error obtaining controller instance: unable to add return rule in DOCKER-ISOLATION-STAGE-1 chain: (iptables failed: iptables --wait -A DOCKER-ISOLATION-STAGE-1 -j RETURN: iptables v1.8.7 (nf_tables): RULE_APPEND failed (No such file or directory): rule in chain DOCKER-ISOLATION-STAGE-1 (exit status 4)) ``` According to [this blog entry](https://crapts.org/2022/05/15/install-docker-in-wsl2-with-ubuntu-22-04-lts/), this is due to Ubuntu 22.04 LTS using `iptables-nft` instead of `iptables-legacy` by default, which breaks how the docker daemon works apparently. Maybe the documentation should be updated to reflect that this default behavior must be changed on Ubuntu 22.04 LTS.

Basically my issue is that upgrading from Ubuntu 20 to Ubuntu 22 (problem not present on a fresh install of Ubuntu 22, curiously) I find that

Docker doesn’t start (which moving to iptables-legacy fixes)
Docker can’t find ports, complaining the command --to-destination in iptables doesn’t exist anymore. Example output below

I imagine this is because iptables-legacy is still a relatively new version of iptables, whereas Docker might be issuing iptables commands that are deprecated? I have no idea. Just wondering if there’s something that can be done to fix it.

(venv) alan@starlabs:~$ docker run -d -p 5566:5566 -p 4444:4444 --env tors=25 mattes/rotating-proxy

a0b77caad708b3a10a5ed3a7f72b55f4108f5e5dc76ac21d2ca5b3c82e6c67f0

docker: Error response from daemon: driver failed programming external connectivity on endpoint jovial_stonebraker (0c198a8b5cf8bea778c2c9569711aea20dcbaff3d68713baa37d13a1acb96123): (iptables failed: iptables --wait -t nat -A DOCKER -p tcp -d 0/0 --dport 5566 -j DNAT --to-destination 172.17.0.2:5566 ! -i docker0: iptables v1.8.7 (legacy): unknown option “–to-destination”