Skip to content

rootless-extras: add passt as an alternative to slirp4netns#1276

Merged
vvoland merged 1 commit intodocker:masterfrom
robmry:rootless_passt
Oct 14, 2025
Merged

rootless-extras: add passt as an alternative to slirp4netns#1276
vvoland merged 1 commit intodocker:masterfrom
robmry:rootless_passt

Conversation

@robmry
Copy link
Contributor

@robmry robmry commented Oct 14, 2025

- What I did

In deb/rpm specs - recommend/require passt as an alternative to slirp4netns. (RHEL 10 deprecates slirp4netns.)

- Description for the changelog

- docker-ce-rootless-extras now depends on `passt` as an alternative to `slirp4netns`.

Copy link
Contributor

@vvoland vvoland left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

passt change LGTM, but some comment on the nftables

Comment on lines 22 to 23
Recommends: (iptables-nft or iptables)
Requires: nftables
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm shouldn't it be the reverse?

Suggested change
Recommends: (iptables-nft or iptables)
Requires: nftables
Requires: (iptables-nft or iptables)
Recommends: nftables

By default we still use iptables while nftables is experimental opt-in, right?

So the package requires the iptables interface, but may work with nftables (if explicitly configured)

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh, thank you - I've put iptables back to Requires.

(I was experimenting on RHEL 10, where the iptables packages aren't easily available - Recommends makes Docker installable without access to the restricted repos, which is fine if it's then run with nftables or iptables disabled, and Recommends is still stronger than Suggests. But, hadn't finished the thought, it wasn't meant for this PR - it's probably too likely to break install scripts that use --no-install-recommends.)

Signed-off-by: Rob Murray <rob.murray@docker.com>
@vvoland vvoland merged commit 3132d40 into docker:master Oct 14, 2025
41 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants