Hi there, I have just do a fresh install of armbian (Armbian_20.02.5_Odroidn2_buster_legacy_4.9.216) on odroid n2 and installed omv 5 via armbian softy tool.

Docker was installed via omv gui - omv extras - docker / portainer. When I now try to setup a separate network in docker / bridged mode I get the following error:

docker network create --driver=bridge --subnet=192.168.151.0/24 --gateway=192.168.151.1 home

Error response from daemon: Failed to program FILTER chain: iptables failed: iptables --wait -I FORWARD -o br-7a5194cdef64 -j DOCKER: iptables v1.8.2 (nf_tables): RULE_INSERT failed (Invalid argument): rule in chain FORWARD

(exit status 4)

Searching google doesn't find a possible solution. Anyone here that have a hint for this?

Maybe you find some hints in your syslog.

The corresponding entry in syslog in long:

 

dockerd[3322]: time="2020-05-04T19:34:03.278587409+02:00" level=error msg="Handler for POST /v1.40/networks/create returned error: Failed to program FILTER chain: iptables failed: iptables --wait -I FORWARD -o br-c723c76c6721 -j DOCKER: iptables v1.8.2 (nf_tables):  RULE_INSERT failed (Invalid argument): rule
in chain FORWARD\n (exit status 4)"

Did you foun solution?

 

I have the same problem while building transmission container with Stacks

Yes I found one after a hint from another person. This is what I did in changing default iptables usage:

 

After changing iptables usage it worked:

 

Switching to the legacy version:

 

# update-alternatives --set iptables /usr/sbin/iptables-legacy

# update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy

# update-alternatives --set arptables /usr/sbin/arptables-legacy

# update-alternatives --set ebtables /usr/sbin/ebtables-legacy

 

Quote

I installed default installation of armbian image with 4.9er kernel and installing omv 5.0 with armbian softy tool. Then I installed docker via omv webpage. On default the new iptables nft is used which breaks using "docker network create ..." because it seems iptable nft is still not supported using docker.