hacc/haccfiles
8
0
Fork 1
Code Issues 1 Pull requests Projects Releases Wiki Activity

hainich: Blacklist ip_tables and ip6_tables

Browse source 
Prevent **something** (docker) from loading the iptables kernel modules
and breaking nftables
This commit is contained in:
schweby 2021-03-20 16:56:56 +01:00
parent 233ffdd769
commit 071f135ef4
No known key found for this signature in database
GPG key ID: 3A489DBB732B9614
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
hosts/hainich/configuration.nix
View file

@ -25,6 +25,9 @@
boot.loader.grub.device = "/dev/sda";
boot.supportedFilesystems = [ "zfs" ];
# stop presumably docker form loading ip_tables and breaking nftables
boot.blacklistedKernelModules = [ "ip_tables" "ip6_tables" ];
# networking
networking.hostName = "hainich";
networking.hostId = "8a58cb2f";