On 16/05/2020 13:12, Peter Humphrey wrote:
> I can't find any of those. Any clues for the uninitiated?

I am running Docker fine on 5.6.12 and I am missing a lot:

- CONFIG_NF_NAT_IPV4: missing
- CONFIG_IP_NF_FILTER: missing
- CONFIG_IP_NF_TARGET_MASQUERADE: missing
- CONFIG_NETFILTER_XT_MATCH_ADDRTYPE: missing
- CONFIG_NETFILTER_XT_MATCH_CONNTRACK: missing
- CONFIG_NETFILTER_XT_MATCH_IPVS: missing
- CONFIG_IP_NF_NAT: missing
- CONFIG_NF_NAT_NEEDED: missing
- CONFIG_IOSCHED_CFQ: missing
- CONFIG_CFQ_GROUP_IOSCHED: missing
- CONFIG_IP_NF_TARGET_REDIRECT: missing
- CONFIG_EXT3_FS_XATTR: missing
      - CONFIG_INET_XFRM_MODE_TRANSPORT: missing
    - CONFIG_NF_NAT_FTP: missing
    - CONFIG_NF_CONNTRACK_FTP: missing
    - CONFIG_NF_NAT_TFTP: missing
    - CONFIG_NF_CONNTRACK_TFTP: missing
    - CONFIG_AUFS_FS: missing
    - CONFIG_BTRFS_FS: missing
    - CONFIG_BTRFS_FS_POSIX_ACL: missing
    - /dev/zfs: missing
    - zfs command: missing
    - zpool command: missing

In regards to NF options, I use nftables and I manage the firewall
manually for Docker (I set {"iptables": false} in
/etc/docker/daemon.json). Docker has been extremely slow at adopting
nftables.

You definitely do not need zfs installed to use Docker. This machine
doesn't have it.

As Victor stated, CFQ is deprecated and gone and BFQ will work fine. And
the script is basically for Red Hat (or corporate) users who still use
iptables, CFQ, ext3 apparently, and a much older kernel.

On my slightly stabler server (running 5.4.38), this is the output and
Docker still works fine. Again on that server I use nftables and manage
the firewall manually. The system has ext4 for its root and the rest of
it is ZFS.

- CONFIG_BRIDGE_NETFILTER: missing
- CONFIG_NF_NAT_IPV4: missing
- CONFIG_IP_NF_FILTER: missing
- CONFIG_IP_NF_TARGET_MASQUERADE: missing
- CONFIG_NETFILTER_XT_MATCH_ADDRTYPE: missing
- CONFIG_NETFILTER_XT_MATCH_CONNTRACK: missing
- CONFIG_NETFILTER_XT_MATCH_IPVS: missing
- CONFIG_IP_NF_NAT: missing
- CONFIG_NF_NAT_NEEDED: missing
- CONFIG_IOSCHED_CFQ: missing
- CONFIG_CFQ_GROUP_IOSCHED: missing
- CONFIG_IP_NF_TARGET_REDIRECT: missing
- CONFIG_EXT3_FS: missing
- CONFIG_EXT3_FS_XATTR: missing
- CONFIG_EXT3_FS_POSIX_ACL: missing
- CONFIG_EXT3_FS_SECURITY: missing
      - CONFIG_INET_XFRM_MODE_TRANSPORT: missing
    - CONFIG_NF_NAT_FTP: missing
    - CONFIG_NF_CONNTRACK_FTP: missing
    - CONFIG_NF_NAT_TFTP: missing
    - CONFIG_NF_CONNTRACK_TFTP: missing
    - CONFIG_AUFS_FS: missing
    - CONFIG_BTRFS_FS: missing
    - CONFIG_BTRFS_FS_POSIX_ACL: missing

Andrew

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to