Running docker using linux kernel 4.3.0 got iptables nat error

Question

I upgrade my debian kernel to 4.3.0

root @ qa-control-nce-yuztest1: /usr/src/kernels/linux-4.3# uname -a
Linux qa-control-nce-yuztest1 4.3.0 # 1 SMP Thu Dec 10 00:47:22 CST 2015 x86_64 GNU / Linux

Docker daemon ha bug detected

root@qa-control-nce-yuztest1 :/usr/src/kernels/linux-4.3# docker -d Warning: '-d' is deprecated, it will be removed soon. See usage. WARN[0000] please use 'docker daemon' instead. WARN[0000] Udev sync is not supported. This will lead to unexpected behavior, data loss and errors. For more information, see https://docs.docker.com/reference/commandline/daemon/#daemon-storage-driver-option INFO[0000] API listen on /var/run/docker.sock WARN[0000] Usage of loopback devices is strongly discouraged for production use. Please use `--storage-opt dm.thinpooldev` or use `man docker` to refer to dm.thinpooldev section. INFO[0000] [graphdriver] using prior storage driver "devicemapper" FATA[0000] Error starting daemon: Error initializing network controller: error obtaining controller instance: Failed to create NAT chain: iptables failed: iptables -t nat -N DOCKER: iptables v1.4.14: can't initialize iptables table `nat': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. (exit status 3) 

It seems iptables nat table does not exist, but I do not know how to deal with this.

You need your help, thanks in advance!

Answer 1

You need a kernel with iptables nat configuration. I suspect that you yourself have updated the kernel, does this mean that you are not using the one provided by the distribution? In this case, you may have configured it from scratch and not enabled iptables nat.

When running config ('make menuconfig'), find "_nat" and find the iptables nat configuration with it and enable it.