Open pieterv-icloud-com opened 1 month ago
you are missing one kernel module that is required ip6tables
Unable to enable NAT rule: (iptables failed: ip6tables --wait -t nat -I POSTROUTING -s fc00:f853:ccd:e793::/64 ! -o br-5d5f5e9ee3aa -j MASQUERADE: ip6tables v1.8.10 (legacy): can't initialize ip6tables table `nat': Table does not exist (do you need to insmod?) Perhaps ip6tables or your kernel needs to be upgraded.
Operating System: Ubuntu 24.04 LTS (containerized)
Could you maybe tell me how I would do this?
I;m not familiar with this environment, but based on https://github.com/tailscale/tailscale/issues/3002 it seems it depends on the project to enable them, so you may need to ask for this feature to enable this kernel module https://github.com/features/codespaces
Thx, opened a support ticket with GitHub
Note that docker v27 is enabling IPv6 by default #3677 so it's probably best for github to enable these modules even if the hosts are themselves ipv4 only.
I created a debian bookworm vm in gcp, used vscode tunnel to connect to it, rebuild the devcontainer and tried to create kind cluster.
Got the same error:
ERROR: failed to create cluster: failed to ensure docker network: command "docker network create -d=bridge -o com.docker.network.bridge.enable_ip_masquerade=true -o com.docker.network.driver.mtu=1500 --ipv6 --subnet fc00:f853:ccd:e793::/64 kind" failed with error: exit status 1
Command Output: Error response from daemon: Failed to Setup IP tables: Unable to enable NAT rule: (iptables failed: ip6tables --wait -t nat -I POSTROUTING -s fc00:f853:ccd:e793::/64 ! -o br-ebe302d9acd5 -j MASQUERADE: ip6tables v1.8.9 (legacy): can't initialize ip6tables table `nat': Table does not exist (do you need to insmod?)
Perhaps ip6tables or your kernel needs to be upgraded.
(exit status 3))
I then disabled the ip6tables in the docker daemon.json file:
{
"ip6tables": false
}
Did not work, also tried --ip6tables=false
but docker told me it's an unknown parameter.
Make sure you have Docker engine v27. But even if you could disable it for docker, that doesn't really get you far. You will still need the ipv6 kernel module for running kubernetes.
Only to fix it was with
sudo modprobe ip6_tables
When the vm starts
@pieterv-icloud-com Could you please post here link to Github ticket?
Trying to create a kind cluster in codespaces
What happened:
Running
kind create cluster --config ./scripts/kind-config.yaml --retain
Gives the following error:
Running
kind export logs
produces not logs:What you expected to happen:
Expecting a kind cluster as when running this locally,
How to reproduce it (as minimally and precisely as possible):
We have the following features in
devcontainer.json
:Dockerfile:
Kind configuration:
Anything else we need to know?:
Environment:
kind version
):kind v0.23.0 go1.21.10 linux/amd64
docker info
,podman info
ornerdctl info
):Server: Containers: 0 Running: 0 Paused: 0 Stopped: 0 Images: 1 Server Version: 27.0.3-1 Storage Driver: overlay2 Backing Filesystem: extfs Supports d_type: true Using metacopy: false Native Overlay Diff: false userxattr: false Logging Driver: json-file Cgroup Driver: cgroupfs Cgroup Version: 2 Plugins: Volume: local Network: bridge host ipvlan macvlan null overlay Log: awslogs fluentd gcplogs gelf journald json-file local splunk syslog Swarm: inactive Runtimes: io.containerd.runc.v2 runc Default Runtime: runc Init Binary: docker-init containerd version: e9e2c7707933f32aa891dda794a1df36a6ec7aee runc version: 58aa9203c123022138b22cf96540c284876a7910 init version: de40ad0 Security Options: apparmor seccomp Profile: builtin cgroupns Kernel Version: 6.5.0-1022-azure Operating System: Ubuntu 24.04 LTS (containerized) OSType: linux Architecture: x86_64 CPUs: 4 Total Memory: 15.61GiB Name: codespaces-555c1e ID: f5158680-804d-474a-bbad-72d47b438f67 Docker Root Dir: /var/lib/docker Debug Mode: false Username: codespacesdev Experimental: false Insecure Registries: 127.0.0.0/8 Live Restore Enabled: false