[Pkg-libvirt-maintainers] Bug#994127: Bug#994127: libvirt-daemon: Error creating virtual network - iptables (nf_tables) table `nat' is incompatible, use 'nft'

[Guido Günther]

Hi,
On Sun, Sep 12, 2021 at 01:40:58PM +0200, Benedikt Tuchen wrote:
> Package: libvirt-daemon
> Version: 7.0.0-3
> Severity: graves
> 
> Dear Maintainer,
> 
> while trying to create a new virtual network on a fresh Debian 11 install I get
> the following error:
> 
> ----
> Traceback (most recent call last):
>   File "/usr/share/virt-manager/virtManager/asyncjob.py", line 65, in cb_wrapper
>     callback(asyncjob, *args, **kwargs)
>   File "/usr/share/virt-manager/virtManager/createnet.py", line 428, in _async_net_create
>     netobj.create()
>   File "/usr/lib/python3/dist-packages/libvirt.py", line 3436, in create
>     raise libvirtError('virNetworkCreate() failed')
> libvirt.libvirtError: internal error: Failed to apply firewall rules
> /usr/sbin/iptables -w --table nat --list-rules: iptables v1.8.7
> (nf_tables): table `nat' is incompatible, use 'nft' tool.

Do you have nftables installed?
 -- Guido

> ----
> 
> I've installed the following packages:
> qemu-kvm qemu-system-x86 qemu-utils libvirt-daemon-system virt-manager virt-viewer
> 
> /usr/sbin/iptables is set in automode to /usr/sbin/iptables-nft via update-alternatives.
> 
> I've tried to create virtual network with virt-manager.
> 
> When trying to set the rule on commandline it fails with the same error.
> 
> If you need more information feel free to ask.
> 
> Regards,
> Benedikt
> 
> -- System Information:
> Debian Release: 11.0
>   APT prefers stable-security
>   APT policy: (500, 'stable-security'), (500, 'stable')
> Architecture: amd64 (x86_64)
> 
> Kernel: Linux 5.10.0-8-amd64 (SMP w/8 CPU threads)
> Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
> Shell: /bin/sh linked to /usr/bin/dash
> Init: systemd (via /run/systemd/system)
> LSM: AppArmor: enabled
> 
> Versions of packages libvirt-daemon depends on:
> ii  libblkid1                   2.36.1-8
> ii  libc6                       2.31-13
> ii  libdevmapper1.02.1          2:1.02.175-2.1
> ii  libgcc-s1                   10.2.1-6
> ii  libglib2.0-0                2.66.8-1
> ii  libnetcf1                   1:0.2.8-1.1
> ii  libparted2                  3.4-1
> ii  libpcap0.8                  1.10.0-2
> ii  libpciaccess0               0.16-1
> ii  libselinux1                 3.1-3
> ii  libudev1                    247.3-6
> ii  libvirt-daemon-driver-qemu  7.0.0-3
> ii  libvirt0                    7.0.0-3
> ii  libxml2                     2.9.10+dfsg-6.7
> 
> Versions of packages libvirt-daemon recommends:
> ii  libvirt-daemon-driver-lxc   7.0.0-3
> ii  libvirt-daemon-driver-vbox  7.0.0-3
> ii  libvirt-daemon-driver-xen   7.0.0-3
> ii  libxml2-utils               2.9.10+dfsg-6.7
> ii  netcat-openbsd              1.217-3
> ii  qemu-system-x86 [qemu-kvm]  1:5.2+dfsg-11
> 
> Versions of packages libvirt-daemon suggests:
> pn  libvirt-daemon-driver-storage-gluster       <none>
> pn  libvirt-daemon-driver-storage-iscsi-direct  <none>
> pn  libvirt-daemon-driver-storage-rbd           <none>
> pn  libvirt-daemon-driver-storage-zfs           <none>
> ii  libvirt-daemon-system                       7.0.0-3
> pn  numad                                       <none>
> 
> -- no debconf information



> _______________________________________________
> Pkg-libvirt-maintainers mailing list
> Pkg-libvirt-maintainers at alioth-lists.debian.net
> https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-libvirt-maintainers