From e0cc9843330f4811dad04ae05811c5729fb8adfb Mon Sep 17 00:00:00 2001
From: Zhenya Tikhonov <zhenya.tikhonov@codefresh.io>
Date: Wed, 3 Apr 2024 11:38:44 +0300
Subject: [PATCH] fix: change `iptables` backend to legacy (#58)

* fix: change `iptables` backend to legacy

* ci: bump version
---
 Dockerfile   | 6 ++++++
 service.yaml | 2 +-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index d85979d..d67a68b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -33,9 +33,15 @@ RUN echo -en "https://dl-cdn.alpinelinux.org/alpine/v$(cut -d'.' -f1,2 /etc/alpi
   && apk upgrade \
   && apk add bash jq fuse-overlayfs --no-cache \
   && apk add slirp4netns --no-cache \
+  # Needed only for `update-alternatives` below
+  && apk add dpkg --no-cache \
   && rm /usr/local/bin/vpnkit \
   && rm -rf /var/cache/apk/*
 
+# Backward compatibility with kernels that do not support `iptables-nft`. Check #CR-23033 for details.
+RUN update-alternatives --install $(which iptables) iptables $(which iptables-legacy) 10 \
+  && update-alternatives --install $(which ip6tables) ip6tables $(which ip6tables-legacy) 10
+
 ENV DOCKERD_ROOTLESS_ROOTLESSKIT_NET=slirp4netns
 
 COPY --from=node-exporter /bin/node_exporter /bin/
diff --git a/service.yaml b/service.yaml
index 1990772..431e876 100644
--- a/service.yaml
+++ b/service.yaml
@@ -1 +1 @@
-version: 1.28.4
+version: 1.28.5