From b57509bbf6f9db589cca718b704146fae3acad66 Mon Sep 17 00:00:00 2001 From: 0xC45 <56617252+0xC45@users.noreply.github.com> Date: Sat, 18 Jan 2020 10:45:35 -0700 Subject: [PATCH] Install legacy iptables binaries for Ubuntu/Debian (#18625) On the latest Debian 10, the `arptables-legacy` and `ebtables-legacy` binaries are not installed by default. Although the (non-legacy) versions are installed by default, it appears the respective packages that provide the legacy binaries must be installed in order to switch to the legacy alternatives. If you attempt to switch to the legacy alternatives without installing the `arptables` and `ebtables` packages, you will see an error: ``` update-alternatives: error: alternative /usr/sbin/arptables-legacy for arptables not registered; not setting ``` I have confirmed that the packages are present on Debian 10 and Ubuntu 19.10 and they provide the legacy alternatives. See: * https://packages.ubuntu.com/eoan/amd64/iptables/filelist * https://packages.ubuntu.com/eoan/amd64/arptables/filelist * https://packages.ubuntu.com/eoan/amd64/ebtables/filelist * https://packages.debian.org/buster/amd64/iptables/filelist * https://packages.debian.org/buster/amd64/arptables/filelist * https://packages.debian.org/buster/amd64/ebtables/filelist --- .../production-environment/tools/kubeadm/install-kubeadm.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md b/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md index 26acd03cf3..ffa8229b6e 100644 --- a/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md +++ b/content/en/docs/setup/production-environment/tools/kubeadm/install-kubeadm.md @@ -66,6 +66,10 @@ switching to legacy mode, and is therefore incompatible with current kubeadm pac {{< tabs name="iptables_legacy" >}} {{% tab name="Debian or Ubuntu" %}} ```bash +# ensure legacy binaries are installed +sudo apt-get install -y iptables arptables ebtables + +# switch to legacy versions sudo update-alternatives --set iptables /usr/sbin/iptables-legacy sudo update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy sudo update-alternatives --set arptables /usr/sbin/arptables-legacy