RP no route to exteral network from container - nf_tables

[mjudeikis]

Newest kernel and VM image do not allow external network connectivity from within container:

[root@rp-000000 ~]# podman run -it --rm docker.io/fedora:27 bash                                                                                                                                                                                              
Trying to pull docker.io/fedora:27...                                                                                                                                                                                                                         
Getting image source signatures                                                                                                                                                                                                                               
Copying blob b93b55b43f66 done                                                                                                                                                                                                                                
Copying config f896985854 done                                                                                                                                                                                                                                
Writing manifest to image destination                                                                                                                                                                                                                         
Storing signatures                                                                                                                                                                                                                                            
[root@770ba4d8ec14 /]# curl http://169.254.169.254                                                                                                                                                                                                            
curl: (7) Failed to connect to 169.254.169.254 port 80: No route to host 

Where if we disable firewalld, it works. I think it is related to move to nf_tables
containers/podman#3462

Legacy iptables alias do not exist anymore for the fallback

sudo iptables --version
iptables v1.8.2 (nf_tables)

Linux rp-000000 4.18.0-147.5.1.el8_1.x86_64 #1 SMP Tue Jan 14 15:50:19 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

Red Hat Enterprise Linux release 8.1 (Ootpa)

[jim-minter]

Suggested workaround at https://bugzilla.redhat.com/show_bug.cgi?id=1805212#c7