From f607a74808b16002f1d3d5605a425b7d7cd69d47 Mon Sep 17 00:00:00 2001 From: Louis-Arnaud Catoire Date: Fri, 17 Apr 2026 21:17:43 +0200 Subject: [PATCH 1/3] engine/install: document iptables alternative on Fedora Add a troubleshooting note for when the Docker service fails to start with 'failed to find iptables' in the logs, explaining how to set the iptables alternative to iptables-nft. Closes #23186 --- content/manuals/engine/install/fedora.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/content/manuals/engine/install/fedora.md b/content/manuals/engine/install/fedora.md index 1d6123e248b..229c318f7fc 100644 --- a/content/manuals/engine/install/fedora.md +++ b/content/manuals/engine/install/fedora.md @@ -150,6 +150,17 @@ $ sudo dnf config-manager addrepo --from-repofile {{% param "download-url-base" boot your system. If you don't want Docker to start automatically, use `sudo systemctl start docker` instead. + > [!NOTE] + > + > If the Docker service fails to start with `failed to find iptables` + > in the logs, set the `iptables` alternative to `iptables-nft` and + > start Docker again: + > + > ```console + > $ sudo alternatives --set iptables /usr/sbin/iptables-nft + > $ sudo systemctl enable --now docker + > ``` + 3. Verify that the installation is successful by running the `hello-world` image: ```console From b992f18d654c6a7d3b1a340631f49ccb493113b6 Mon Sep 17 00:00:00 2001 From: Louis-Arnaud Catoire Date: Fri, 17 Apr 2026 21:23:43 +0200 Subject: [PATCH 2/3] review: use canonical path and reference journalctl --- content/manuals/engine/install/fedora.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/content/manuals/engine/install/fedora.md b/content/manuals/engine/install/fedora.md index 229c318f7fc..c7d5e2b45d3 100644 --- a/content/manuals/engine/install/fedora.md +++ b/content/manuals/engine/install/fedora.md @@ -152,13 +152,13 @@ $ sudo dnf config-manager addrepo --from-repofile {{% param "download-url-base" > [!NOTE] > - > If the Docker service fails to start with `failed to find iptables` - > in the logs, set the `iptables` alternative to `iptables-nft` and - > start Docker again: + > If the Docker service fails to start and `journalctl -u docker` + > shows `failed to find iptables`, point the `iptables` command to + > `iptables-nft` using `alternatives` and restart the service: > > ```console - > $ sudo alternatives --set iptables /usr/sbin/iptables-nft - > $ sudo systemctl enable --now docker + > $ sudo alternatives --set iptables /usr/bin/iptables-nft + > $ sudo systemctl restart docker > ``` 3. Verify that the installation is successful by running the `hello-world` image: From 48cf1dc618c4b3ad239e64a459491bce7b426ad0 Mon Sep 17 00:00:00 2001 From: Louis-Arnaud Catoire Date: Fri, 17 Apr 2026 21:28:51 +0200 Subject: [PATCH 3/3] review: add the note to the package install method too --- content/manuals/engine/install/fedora.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/content/manuals/engine/install/fedora.md b/content/manuals/engine/install/fedora.md index c7d5e2b45d3..205143baa67 100644 --- a/content/manuals/engine/install/fedora.md +++ b/content/manuals/engine/install/fedora.md @@ -210,6 +210,17 @@ download a new file each time you want to upgrade Docker Engine. boot your system. If you don't want Docker to start automatically, use `sudo systemctl start docker` instead. + > [!NOTE] + > + > If the Docker service fails to start and `journalctl -u docker` + > shows `failed to find iptables`, point the `iptables` command to + > `iptables-nft` using `alternatives` and restart the service: + > + > ```console + > $ sudo alternatives --set iptables /usr/bin/iptables-nft + > $ sudo systemctl restart docker + > ``` + 4. Verify that the installation is successful by running the `hello-world` image: ```console