2023-01-27 13:37:20 -08:00
|
|
|
# Copyright (c) Tailscale Inc & AUTHORS
|
|
|
|
|
# SPDX-License-Identifier: BSD-3-Clause
|
2021-11-21 20:52:19 -08:00
|
|
|
|
2025-09-17 20:22:24 +01:00
|
|
|
FROM alpine:3.22
|
2025-03-26 01:48:01 +00:00
|
|
|
RUN apk add --no-cache ca-certificates iptables iptables-legacy iproute2 ip6tables iputils
|
2025-09-17 20:22:24 +01:00
|
|
|
# Alpine 3.19 replaced legacy iptables with nftables based implementation. We
|
2025-03-26 01:48:01 +00:00
|
|
|
# can't be certain that all hosts that run Tailscale containers currently
|
|
|
|
|
# suppport nftables, so link back to legacy for backwards compatibility reasons.
|
|
|
|
|
# TODO(irbekrm): add some way how to determine if we still run on nodes that
|
|
|
|
|
# don't support nftables, so that we can eventually remove these symlinks.
|
2025-09-17 20:22:24 +01:00
|
|
|
RUN ln -s /sbin/iptables-legacy /sbin/iptables
|
|
|
|
|
RUN ln -s /sbin/ip6tables-legacy /sbin/ip6tables
|