Package: docker.io
Version: 20.10.5+dfsg1-1+deb11u2
Severity: important

Dear Maintainer,

Installing docker.io rendered my server inoperable. Solely as a result of
"apt-get install docker.io", it installed iptables rules which corrupted
the network configuration rendering the network unusable.

Stopping docker with "systemctl docker stop" did not restore the network
state to operability.

Uninstalling docker with "dpkg --purge docker.io" did not restore the
network state to operability.

Manually removing the iptables rules docker installed did not restore the
network state to operability.

It was a server running lots of vms, so it was a pain to reboot -- the
solution which finally restored the network function.

The problem was successfully worked around by adding a line to
/etc/default/docker:
DOCKER_OPTS=--iptables=false

Merely installing a software package SHOULD NOT render the network unusable.

Suggested correction:

Either add iptables=false as default, or do not immediately start docker
upon installation so that merely installing docker does not change the
network configuration on the machine.


-- System Information:
Debian Release: 11.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 
'stable-debug'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.261-deb11 (SMP w/40 CPU threads; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)

Versions of packages docker.io depends on:
ii  adduser              3.118
ii  containerd           1.4.13~ds1-1~deb11u3
ii  init-system-helpers  1.60
ii  iptables             1.8.7-1
ii  libc6                2.31-13+deb11u5
ii  libdevmapper1.02.1   2:1.02.175-2.1
ii  libsystemd0          247.3-7+deb11u1
ii  lsb-base             11.1.0
ii  runc                 1.0.0~rc93+ds1-5+deb11u2
ii  tini                 0.19.0-1

Versions of packages docker.io recommends:
ii  apparmor         2.13.6-10
ii  ca-certificates  20210119
ii  cgroupfs-mount   1.4
ii  git              1:2.30.2-1+deb11u2
ii  needrestart      3.5-4+deb11u2
ii  xz-utils         5.2.5-2.1~deb11u1

Versions of packages docker.io suggests:
pn  aufs-tools                 <none>
ii  btrfs-progs                5.10.1-2
ii  debootstrap                1.0.123+deb11u1
pn  docker-doc                 <none>
ii  e2fsprogs                  1.46.2-2
pn  rinse                      <none>
pn  rootlesskit                <none>
ii  xfsprogs                   5.10.0-4
pn  zfs-fuse | zfsutils-linux  <none>

-- Configuration Files:
/etc/default/docker changed:
DOCKER_OPTS=--iptables=false


-- no debconf information

Reply via email to