hainich: Blacklist ip_tables and ip6_tables

Prevent **something** (docker) from loading the iptables kernel modules and breaking nftables
2021-03-20 16:56:56 +01:00 · 2021-03-20 16:56:56 +01:00 · 071f135ef4
parent 233ffdd769
commit 071f135ef4
1 changed files with 3 additions and 0 deletions
--- a/hosts/hainich/configuration.nix
+++ b/hosts/hainich/configuration.nix
@ -25,6 +25,9 @@
  boot.loader.grub.device = "/dev/sda";
  boot.supportedFilesystems = [ "zfs" ];

+  # stop presumably docker form loading ip_tables and breaking nftables
+  boot.blacklistedKernelModules = [ "ip_tables" "ip6_tables" ]; 
+
  # networking
  networking.hostName = "hainich";
  networking.hostId = "8a58cb2f";