summary refs log tree commit diff
diff options
context:
space:
mode:
authorryneeverett <ryneeverett@gmail.com>2021-02-14 01:12:43 -0500
committerMaciej Krüger <mkg20001@gmail.com>2021-04-29 11:40:00 +0200
commit161a35b0b8e4a5cb8d5fac3d5083ee9fb82cfbe2 (patch)
tree6c93e26921a4357870bbfa5131d520cb4dd1cafa
parent243521f52f9e24033e18650adb5e37ae2a1f3025 (diff)
downloadnixpkgs-161a35b0b8e4a5cb8d5fac3d5083ee9fb82cfbe2.tar
nixpkgs-161a35b0b8e4a5cb8d5fac3d5083ee9fb82cfbe2.tar.gz
nixpkgs-161a35b0b8e4a5cb8d5fac3d5083ee9fb82cfbe2.tar.bz2
nixpkgs-161a35b0b8e4a5cb8d5fac3d5083ee9fb82cfbe2.tar.lz
nixpkgs-161a35b0b8e4a5cb8d5fac3d5083ee9fb82cfbe2.tar.xz
nixpkgs-161a35b0b8e4a5cb8d5fac3d5083ee9fb82cfbe2.tar.zst
nixpkgs-161a35b0b8e4a5cb8d5fac3d5083ee9fb82cfbe2.zip
nixos/lxd: explicitly load xt_CHECKSUM module
This module is needed to create bridge networks such as the default
lxdbr0 created by `lxd init`. Without this module, running `lxc network
create lxdbr0` errors with:

> Error: Failed to create network 'lxdbr0': Failed to run: iptables -w -t mangle -I POSTROUTING -o lxdbr0 -p udp --dport 68 -j CHECKSUM --checksum-fill -m comment --comment generated for LXD network lxdbr0: iptables v1.8.5 (legacy): unknown option "--checksum-fill"
-rw-r--r--nixos/modules/virtualisation/lxd.nix2
1 files changed, 1 insertions, 1 deletions
diff --git a/nixos/modules/virtualisation/lxd.nix b/nixos/modules/virtualisation/lxd.nix
index 375fc1d256c..42a1f2f1a30 100644
--- a/nixos/modules/virtualisation/lxd.nix
+++ b/nixos/modules/virtualisation/lxd.nix
@@ -170,7 +170,7 @@ in {
       "kernel.keys.maxkeys" = 2000;
     };
 
-    boot.kernelModules = [ "veth" "xt_comment" "xt_MASQUERADE" ]
+    boot.kernelModules = [ "veth" "xt_comment" "xt_CHECKSUM" "xt_MASQUERADE" ]
       ++ optionals (!config.networking.nftables.enable) [ "iptable_mangle" ];
   };
 }