Unverified Commit efd1d7ed authored by Artturi's avatar Artturi Committed by GitHub
Browse files

Merge pull request #97677 from ryneeverett/lockkernelmodules-docker-more

parents 9f987b89 12755ecd

nixos/modules/virtualisation/docker.nix

+1 −1
Original line number Diff line number Diff line
@@ -163,7 +163,7 @@ in 
  ###### implementation



  config = mkIf cfg.enable (mkMerge [{

      boot.kernelModules = [ "bridge" "veth" ];

      boot.kernelModules = [ "bridge" "veth" "br_netfilter" "xt_nat" ];

      boot.kernel.sysctl = {

        "net.ipv4.conf.all.forwarding" = mkOverride 98 true;

        "net.ipv4.conf.default.forwarding" = mkOverride 98 true;