base: use iptables_legacy (istio#38598)

Long live iptables Fixes istio#38583
WillardHu · Apr 26, 2022 · 00c13f8 · 00c13f8
1 parent 2012600
commit 00c13f8
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/docker/Dockerfile.base b/docker/Dockerfile.base
@@ -25,7 +25,9 @@ RUN apt-get update && \
   && update-ca-certificates \
   && apt-get upgrade -y \
   && apt-get clean \
-  && rm -rf  /var/log/*log /var/lib/apt/lists/* /var/log/apt/* /var/lib/dpkg/*-old /var/cache/debconf/*-old
+  && rm -rf  /var/log/*log /var/lib/apt/lists/* /var/log/apt/* /var/lib/dpkg/*-old /var/cache/debconf/*-old \
+  && update-alternatives --set iptables /usr/sbin/iptables-legacy \
+  && update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy
 
 # Sudoers used to allow tcpdump and other debug utilities.
 RUN useradd -m --uid 1337 istio-proxy && \