nixos/lxd: explicitly load xt_CHECKSUM module
This module is needed to create bridge networks such as the default lxdbr0 created by `lxd init`. Without this module, running `lxc network create lxdbr0` errors with: > Error: Failed to create network 'lxdbr0': Failed to run: iptables -w -t mangle -I POSTROUTING -o lxdbr0 -p udp --dport 68 -j CHECKSUM --checksum-fill -m comment --comment generated for LXD network lxdbr0: iptables v1.8.5 (legacy): unknown option "--checksum-fill"
This commit is contained in:
parent
243521f52f
commit
161a35b0b8
|
@ -170,7 +170,7 @@ in {
|
||||||
"kernel.keys.maxkeys" = 2000;
|
"kernel.keys.maxkeys" = 2000;
|
||||||
};
|
};
|
||||||
|
|
||||||
boot.kernelModules = [ "veth" "xt_comment" "xt_MASQUERADE" ]
|
boot.kernelModules = [ "veth" "xt_comment" "xt_CHECKSUM" "xt_MASQUERADE" ]
|
||||||
++ optionals (!config.networking.nftables.enable) [ "iptable_mangle" ];
|
++ optionals (!config.networking.nftables.enable) [ "iptable_mangle" ];
|
||||||
};
|
};
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue