diff --git a/libnetwork/iptables/iptables.go b/libnetwork/iptables/iptables.go index 51a3e2bdc2..3fc70c9f6c 100644 --- a/libnetwork/iptables/iptables.go +++ b/libnetwork/iptables/iptables.go @@ -14,6 +14,7 @@ import ( "sync" "time" + "github.com/docker/docker/rootless" "github.com/sirupsen/logrus" ) @@ -105,6 +106,12 @@ func probe() { } func initFirewalld() { + // When running with RootlessKit, firewalld is running as the root outside our network namespace + // https://github.com/moby/moby/issues/43781 + if rootless.RunningWithRootlessKit() { + logrus.Info("skipping firewalld management for rootless mode") + return + } if err := FirewalldInit(); err != nil { logrus.Debugf("Fail to initialize firewalld: %v, using raw iptables instead", err) }