From 996612d6b73a316ee423e61cfb2911499bec05e0 Mon Sep 17 00:00:00 2001 From: Theodore Chang Date: Thu, 2 Apr 2026 21:44:13 +0200 Subject: [PATCH] Add nftables to Dockerfile for firewall rules (#1543) --- Dockerfile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index fcec5aa..fd3b42b 100644 --- a/Dockerfile +++ b/Dockerfile @@ -25,13 +25,14 @@ FROM alpine AS dist RUN if [ ! -e /etc/nsswitch.conf ]; then echo 'hosts: files dns' > /etc/nsswitch.conf; fi # bash is used for debugging, tzdata is used to add timezone information. +# iptables and nftables are used to change firewall rules. # Install ca-certificates to ensure no CA certificate errors. # # Do not try to add the "--no-cache" option when there are multiple "apk" # commands, this will cause the build process to become very slow. RUN set -ex \ && apk upgrade \ - && apk add bash tzdata ca-certificates iptables \ + && apk add bash tzdata ca-certificates iptables nftables \ && rm -rf /var/cache/apk/* COPY --from=builder /go/bin/hysteria /usr/local/bin/hysteria