From cd63cc846e7ec4f2d255023d04ead33a2a7fe986 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Benjamin=20B=C3=B6hmke?= Date: Wed, 2 Dec 2020 22:19:44 +0100 Subject: [PATCH] mark ip6tables as experimental feature MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Benjamin Böhmke --- daemon/daemon_unix.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/daemon/daemon_unix.go b/daemon/daemon_unix.go index 0d96787c1d..d9de5593e7 100644 --- a/daemon/daemon_unix.go +++ b/daemon/daemon_unix.go @@ -746,6 +746,9 @@ func verifyDaemonSettings(conf *config.Config) error { if !conf.BridgeConfig.EnableIPTables && !conf.BridgeConfig.InterContainerCommunication { return fmt.Errorf("You specified --iptables=false with --icc=false. ICC=false uses iptables to function. Please set --icc or --iptables to true") } + if conf.BridgeConfig.EnableIP6Tables && !conf.Experimental { + return fmt.Errorf("ip6tables rules are only available if experimental features are enabled") + } if !conf.BridgeConfig.EnableIPTables && conf.BridgeConfig.EnableIPMasq { conf.BridgeConfig.EnableIPMasq = false }