RC_ Posted December 11 Posted December 11 When attempting to install microk8s, I noticed that the `ip_tables` module is missing from the provided image (Ubuntu 24.04 (Noble) Minimal / IOT image) on this page: https://www.armbian.com/radxa-dragon-q6a/ Easy way to replicate: ``` sudo modprobe ip_tables modprobe: FATAL: Module ip_tables not found in directory /lib/modules/6.18.0-rc6-edge-qcs6490 ``` Is there another image that has this module are part of the kernel or do I need to build the kernel myself? This seems like a module that should be included for an image that is labeled as `IOT`. 0 Quote
Werner Posted December 11 Posted December 11 Never heard of that spelling "ip_tables". Anyway should be built in: https://github.com/armbian/build/blob/4e027a40d6d38d5e9072577a7e47b110914a843d/config/kernel/linux-qcs6490-edge.config#L421 0 Quote
RC_ Posted December 11 Author Posted December 11 I think the confusion here is that `ip_tables` is the module reference and `iptables` is the binary built in reference. Microk8s requires this to be a module and not built in. I am compiling a standard kernel as speak to see if setting the appropriate nettable to `m` from '*` will work. 0 Quote
laibsch Posted December 12 Posted December 12 On 12/11/2025 at 1:53 PM, RC_ said: Microk8s requires this to be a module and not built in. That's surprising. All I knew so far was that modules need to be present, either built-in or as dynamically loaded modules. Do you have a reference for this anomaly? 0 Quote
Solution RC_ Posted 3 hours ago Author Solution Posted 3 hours ago Quote That's surprising. All I knew so far was that modules need to be present, either built-in or as dynamically loaded modules. Do you have a reference for this anomaly? I couldn't find this documented specifically, but I confirmed this was the case via testing. Google also provided an AI summary which also stated that this was the case. I enabled `iptables-legacy` in the Armbian kernel builder which then resolved the errors I was getting. I also eventually realized through further research that `nftables` were also supported and available as a module out of the box. I wound up changing my Microk8s config to use `nftables`, which also worked out and is where I left my config today. Hopefully this is helpful for someone else in the future. Somewhat relevant articles: https://github.com/canonical/microk8s/issues/2180 https://github.com/canonical/microk8s/issues/4387 https://hub.libre.computer/t/missing-iptables-kernel-configs-for-microk8s-calico/3717 0 Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.