concourse / concourse-docker

Offical concourse/concourse Docker image.
Apache License 2.0
241 stars 153 forks source link

exit status 2: iptables v1.8.7 (nf_tables): Couldn't load match `conntrack' #86

Open jhderojasUVa opened 1 year ago

jhderojasUVa commented 1 year ago

There's an error on WSL2 of concourse/concourse:latest image that can be related on: https://dev.to/lemosluan/comment/1nmi7

The image (web, concourse/concourse) is not running giving this error on the log:

{"timestamp":"2023-01-03T08:38:44.584522300Z","level":"error","source":"quickstart","message":"quickstart.worker-runner.logging-runner-exited","data":{"error":"Exit trace for group:\ngarden exited with error: Exit trace for group:\ncontainerd-garden-backend exited with error: setup host network failed: appending accept rule for RELATED \u0026 ESTABLISHED connections failed: running [/usr/sbin/iptables -t filter -A CONCOURSE-OPERATOR -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT --wait]: exit status 2: iptables v1.8.7 (nf_tables): Couldn't load match `conntrack':No such file or directory\n\nTry `iptables -h' or 'iptables --help' for more information.\n\ncontainerd exited with nil\n\nhealthcheck exited with nil\ndebug exited with nil\nvolume-sweeper exited with nil\ncontainer-sweeper exited with nil\nbaggageclaim exited with nil\nbeacon exited with nil\n","session":"2"}}

At https://github.com/microsoft/WSL/issues/7948#issuecomment-1207210311 says that can be solved by, on the Dockerfile setting:

sudo update-alternatives --set iptables /usr/sbin/iptables-legacy

So using iptables-legacy

Previous versions (6.X) works correctly.