Arch Linux

warteeminus321

Member

Registered: 2022-09-03

Posts: 27

no iptables on nspawn installation

Following Archwiki's nspawn page I installed a pacstrapped nspawn container.
When I run

[root@container ~]# iptables -nvL

from inside the container it tells me:

iptables v1.8.8 (legacy): can't initialize iptables table `filter`: Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.

I run iptables on the host machine, though. How do I run a firewall within an nspawn container?

---

Hitchhacker's Guide to the Galaxy: “Nothing travels faster than the speed of light with the possible exception of bad news, which obeys its own special laws.”
If you didn't know you are backdoored, you are backdoored.

warteeminus321

Member

Registered: 2022-09-03

Posts: 27

Re: no iptables on nspawn installation

I suspect the problem has to do with the network configuration.
I.e. I have iptables run ok when I run it in a container that has private-network option on. But with default network options iptables doesn't run, probably because the container then uses host's network, which is outside of the container's scope.

---

Hitchhacker's Guide to the Galaxy: “Nothing travels faster than the speed of light with the possible exception of bad news, which obeys its own special laws.”
If you didn't know you are backdoored, you are backdoored.