Differences

This shows you the differences between two versions of the page.

--- software:docker [2020/07/03 21:26] – Michele Porelli
+++ software:docker [2023/04/30 15:15] (current) – Michele Porelli
@@ Line 8: / Line 8: @@
 <code>
 [Service]
-ExecStartPre=if [ /usr/sbin/iptables -C FORWARD -i br0 -j ACCEPT ]; then true; else /usr/sbin/iptables -I FORWARD -i br0 -j ACCEPT; fi
+ExecStartPre=-/usr/sbin/iptables -I FORWARD -i br0 -j ACCEPT
+ExecStopPost=/usr/sbin/iptables -D FORWARD -i br0 -j ACCEPT
 </code>
+(the "-" at the beginning tolerates failures. In this way, both if the rule doesn't exist or it's duplicate, a new one gets created and then delete during stopping)
 <code>
 $ sudo systemctl daemon-reload
@@ Line 17: / Line 19: @@
 More details and credit [[https://bbs.archlinux.org/viewtopic.php?id=233727|here]] and [[https://serverfault.com/questions/963759/docker-breaks-libvirt-bridge-network|here]]
+==== Errors ====
+  * Cannot remove container using ZFS volume:
+    * error: <code>Error response from daemon: container 13229c2ec314a390bc2edf641c9d189ac1dcf69f6b56bb7e681f032cbc9bc329: driver "zfs" failed to remove root filesystem: exit status 1: "/sbin/zfs fs destroy -r zpool-docker/9a1252e3f5f687077620636855ae9de7aeabd41d4d9dd3e3bcb4892f90901a59" => cannot open 'zpool-docker/9a1252e3f5f687077620636855ae9de7aeabd41d4d9dd3e3bcb4892f90901a59': dataset does not exist</code>
+    * [[https://github.com/moby/moby/issues/40132#issuecomment-826139573|solution]]