debian has iptables-legacy and iptables-nft now

Signed-off-by: Nathan Herald <me@nathanherald.com>
moby · Oct 31, 2018 · 7da66ee · 7da66ee
1 parent d7b6174
commit 7da66ee
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/iptables/iptables.go b/iptables/iptables.go
@@ -87,11 +87,16 @@ func initFirewalld() {
 }
 
 func detectIptables() {
-	path, err := exec.LookPath("iptables")
+	path, err := exec.LookPath("iptables-legacy") // debian has iptables-legacy and iptables-nft now
 	if err != nil {
-		return
+		path, err = exec.LookPath("iptables")
+		if err != nil {
+			return
+		}
 	}
+
 	iptablesPath = path
+
 	supportsXlock = exec.Command(iptablesPath, "--wait", "-L", "-n").Run() == nil
 	mj, mn, mc, err := GetVersion()
 	if err != nil {