Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

iptables not installed on Debian 11 if apt configured with Install-Recommends=0 #7963

Closed
rtsp opened this issue Sep 10, 2021 · 0 comments · Fixed by #7964
Closed

iptables not installed on Debian 11 if apt configured with Install-Recommends=0 #7963

rtsp opened this issue Sep 10, 2021 · 0 comments · Fixed by #7964
Labels
kind/bug Categorizes issue or PR as related to a bug.

Comments

@rtsp
Copy link
Member

rtsp commented Sep 10, 2021

Environment:

  • OS: Debian 11 (bullseye)
  • Hardware configuration: QEMU-KVM installed with netinst media (without iptables preinstalled)
  • Kubespray version (commit): 60853fa

Previously on Debian 10 and earlier, ipset "required" iptables so it's automatically install after running this task.

- name: Install packages requirements
package:
name: "{{ required_pkgs | default([]) | union(common_required_pkgs|default([])) }}"
state: present

On Debian 11, ipset just "recommend" iptables so on the system that apt is configured with APT::Install-Recommends "0"; iptables will not install automatically.

I found that several parts of kubespray is using iptables with the assumption that it's already installed (e.g. Calico, reset.yml) so those part will fail if iptables is missing.

@rtsp rtsp added the kind/bug Categorizes issue or PR as related to a bug. label Sep 10, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Categorizes issue or PR as related to a bug.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant