Hard Dependency on iptables, Unable To Start on Fedora 38 Host
Describe the bug
Fedora 38, instead of using iptables, uses a solution called firewalld to manage network access rules. This causes Concourse to fail with no recovery plan with the following error message:
containerd-garden-backend exited with error: setup host network failed: create chain or flush if exists failed: running [/usr/sbin/iptables -t filter -N CONCOURSE-OPERATOR --wait]: exit status 3: iptables v1.8.7 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Searching suggests the problem might be related to running on bizarre processor architectures like recent Mac models...except this is in Linux, on tried-and-true x86_64, and there isn't an Apple product anywhere involved.
Reproduction steps
- Download the official docker-compose.yml file, as suggested in the quickstart guide.
- Change
CONCOURSE_CLIENT_SECRET,CONCOURSE_TSA_CLIENT_SECRETandCONCOURSE_EXTERNAL_URL. Unlikely to be related, but it is technically a change so I figure I should document it. -
docker compose up -d
Expected behavior
Concourse comes up
Additional context
I would very strongly prefer a solution that involves disabling the automatic firewall modification over one that simply "fixes" it to work with firewalld instead, as I'm not comfortable with anything other than myself modifying my firewall settings to begin with. I also intend to reverse proxy concourse behind nginx, on its own subdomain, and don't particularly need the container's port opened anyway.
Stale, closing.