Skip to content

Commit 0ebdf68

Browse files
committed
Add note about iptables modprobe
1 parent 2442e59 commit 0ebdf68

File tree

1 file changed

+2
-1
lines changed
  • root/etc/s6-overlay/s6-rc.d/init-wireguard-module

1 file changed

+2
-1
lines changed

root/etc/s6-overlay/s6-rc.d/init-wireguard-module/run

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,9 +10,10 @@ if ip link add dev test type wireguard; then
1010
ip link del dev test
1111
if capsh --current | grep "Current:" | grep -q "cap_sys_module"; then
1212
echo "**** As the wireguard module is already active you can remove the SYS_MODULE capability from your container run/compose. ****"
13+
echo "**** If your host does not automatically load the iptables module, you may still need the SYS_MODULE capability. ****"
1314
fi
1415
else
1516
echo "**** The wireguard module is not active. If you believe that your kernel should have wireguard support already, make sure that it is activated via modprobe! ****"
16-
echo "**** If you have an old kernel without wireguard support built-in, you can try using the "legacy" tag for this image to compile the modules from scratch. ****"
17+
echo "**** If you have an old kernel without wireguard support built-in, you can try using the 'legacy' tag for this image to compile the modules from scratch. ****"
1718
sleep infinity
1819
fi

0 commit comments

Comments
 (0)