Cory Snider 50416cf892 libnetwork/d/bridge: remove leftover DOCKER chain ...

When the daemon started with the nftables backend after a release older
than 28.0.0 had run with iptables, NewCleaner deleted the jumps from
filter-FORWARD to DOCKER-FORWARD and DOCKER-ISOLATION-STAGE-1, then
removed Docker's chains. Those releases also jumped from FORWARD to the
filter table's DOCKER chain for each bridge ("-o docker0 -j DOCKER").
iptables refuses to delete a chain that a rule still jumps to, and
removeIPChains ignores the error. The cleaner's DelNetwork deleted the
per-bridge jump later, when the bridge driver restored the network, but
nothing tried to remove the chain again. The empty DOCKER chain
remained.

When the bridge driver has restored its networks and endpoints, call
the cleaner's new Done method, which removes the chains again.

Signed-off-by: Cory Snider <csnider@mirantis.com>

2026-11-04 12:25:59 -05:00

..

bitmap

modernize: Use range int

2025-12-15 18:56:34 +01:00

cluster

Create github.com/moby/moby/api module

2025-07-21 09:30:05 -07:00

cmd

daemon/libnetwork: fix G703, G705 (gosec)

2026-09-18 22:59:37 +02:00

cnmallocator

daemon/libnetwork/*: use t.Context

2026-09-18 18:28:46 +02:00

config

libnetwork: keep the netns directory in the controller config

2026-10-09 14:31:01 -04:00

datastore

libnetwork: take the store from the caller

2026-10-02 16:31:27 -04:00

diagnostic

fix sprintfQuotedString (gocritic)

2026-10-19 23:30:44 +02:00

discoverapi

Merge pull request #51477 from thaJeztah/discovery_enum

2025-11-11 15:01:25 +01:00

docs

docs(libnetwork): fix CNM diagram link

2026-10-15 16:25:03 +06:00

driverapi

libnetwork/driverapi: remove Driver.Type()

2026-10-06 14:33:44 -04:00

drivers

libnetwork/d/bridge: remove leftover DOCKER chain

2026-11-04 12:25:59 -05:00

drvregistry

libnetwork/driverapi: remove Driver.Type()

2026-10-06 14:33:44 -04:00

etchosts

libnetwork/etchosts: keep file open when updating hosts

2026-10-01 14:11:29 +02:00

internal

libnetwork: move kvstore out of internal

2026-10-02 16:31:27 -04:00

ipamapi

api,daemon: report IPAM status for network

2025-09-10 11:06:05 -04:00

ipams

daemon/libnetwork/ipams: use t.Context

2026-09-18 18:28:45 +02:00

ipamutils

remove obsolete //go:build tags

2025-08-01 00:49:22 +02:00

ipbits

d/libnetwork: move uint128 to its own package

2025-09-10 11:00:35 -04:00

iptables

d/libn/iptables: use firewalld when started later

2026-10-23 18:46:18 -04:00

kvstore

libnetwork/kvstore/boltdb: prevent integer overflow in allocation

2026-10-08 01:16:45 +02:00

netlabel

libnetwork: provide endpoint name for IPAM drivers

2025-08-28 00:20:34 -07:00

netutils

modernize: Use range int

2025-12-15 18:56:34 +01:00

networkdb

Merge pull request #53715 from corhere/networkdb-rejoin-per-bootstrap

2026-10-29 20:32:12 +01:00

nlwrap

rootless: support detach-netns mode

2026-04-10 02:02:51 +09:00

ns

rootless: support detach-netns mode

2026-04-10 02:02:51 +09:00

options

go fix (GOOS=linux and windows)

2026-03-25 23:23:41 +01:00

osl

libnetwork: keep the netns directory in the controller config

2026-10-09 14:31:01 -04:00

portallocator

daemon/libnetwork/portallocator: skip kernel-reserved ports

2026-06-12 12:09:28 +02:00

portmapper

rootless: support detach-netns mode

2026-04-10 02:02:51 +09:00

portmapperapi

libnet/pmapi: remove firewaller arg from Map/UnmapPorts

2025-08-28 11:47:29 +02:00

portmappers

daemon/libnetwork/*: use t.Context

2026-09-18 18:28:46 +02:00

resolvconf

daemon/libnetwork/resolvconf: remove unused code

2025-08-01 14:48:05 +02:00

scope

…

support

daemon/libnetwork/support: refresh Dockerfile and script

2026-06-16 11:38:15 +02:00

testdata/TestUserChain

daemon/libnetwork: TestUserChain: rename golden files

2025-08-16 15:18:22 +02:00

types

libnetwork: DNAT gwbridge packets to ingress ports

2026-10-29 14:52:48 -04:00

.dockerignore

…

.gitignore

…

agent_test.go

d/libn/networkdb: ask for the bootstrap peers when rejoining

2026-09-17 19:39:05 -04:00

agent.go

d/libn/networkdb: ask for the bootstrap peers when rejoining

2026-09-17 19:39:05 -04:00

agent.pb.go

…

agent.proto

…

controller_linux.go

libnetwork: expose proxy information in FirewallInfo

2026-04-25 16:22:09 +09:00

controller_others.go

Create github.com/moby/moby/api module

2025-07-21 09:30:05 -07:00

controller_unix.go

libnetwork: keep the netns directory in the controller config

2026-10-09 14:31:01 -04:00

controller_unsupported.go

libnetwork: keep the netns directory in the controller config

2026-10-09 14:31:01 -04:00

controller.go

libnetwork: keep the netns directory in the controller config

2026-10-09 14:31:01 -04:00

default_gateway_freebsd.go

Create github.com/moby/moby/v2 module

2025-07-31 10:13:29 -07:00

default_gateway_linux.go

Create github.com/moby/moby/v2 module

2025-07-31 10:13:29 -07:00

default_gateway_windows.go

Create github.com/moby/moby/v2 module

2025-07-31 10:13:29 -07:00

default_gateway.go

libnetwork: no IPv6 for ingress sandbox on docker_gwbridge

2026-10-14 18:21:03 +02:00

drivers_linux.go

libnetwork: keep the netns directory in the controller config

2026-10-09 14:31:01 -04:00

drivers_unsupported.go

libnet/d/bridge: Register: pass a Configuration struct

2025-09-03 12:10:10 +02:00

drivers_windows.go

libnet/d/bridge: Register: pass a Configuration struct

2025-09-03 12:10:10 +02:00

endpoint_cnt.go

Create github.com/moby/moby/v2 module

2025-07-31 10:13:29 -07:00

endpoint_info_unix.go

chore: enable use-any rule from revive

2025-08-08 17:07:07 +02:00

endpoint_info_windows.go

chore: enable use-any rule from revive

2025-08-08 17:07:07 +02:00

endpoint_info.go

libnetwork: EndpointInterface: cleanup marshal/unmarshal

2025-10-21 10:37:05 +02:00

endpoint_store_test.go

libnetwork: remove the external key listener

2026-10-07 19:06:00 -04:00

endpoint_store.go

remove obsolete //go:build tags

2025-08-01 00:49:22 +02:00

endpoint_test.go

…

endpoint_unix_test.go

libnetwork: write resolver files only when asked

2026-10-02 16:31:27 -04:00

endpoint.go

daemon/libnetwork: remove dnsnames migration code

2026-09-01 19:04:16 +02:00

error.go

…

errors_test.go

Create github.com/moby/moby/v2 module

2025-07-31 10:13:29 -07:00

firewall_linux_test.go

libnetwork: remove the external key listener

2026-10-07 19:06:00 -04:00

firewall_linux.go

libnetwork: publish Swarm ingress ports via bridge port-publishing

2026-08-07 18:00:05 -04:00

firewall_others.go

overlay: Reload Ingress iptables rules in swarm mode

2025-07-23 15:52:10 -04:00

libnetwork_internal_test.go

libnetwork: keep the netns directory in the controller config

2026-10-09 14:31:01 -04:00

libnetwork_linux_test.go

libnetwork: keep the netns directory in the controller config

2026-10-09 14:31:01 -04:00

libnetwork_unix_test.go

…

libnetwork_windows_test.go

…

network_store_test.go

libnetwork: remove the external key listener

2026-10-07 19:06:00 -04:00

network_store.go

remove obsolete //go:build tags

2025-08-01 00:49:22 +02:00

network_unix.go

Split OS-specific code out of Sandbox.populateNetworkResources

2025-09-15 10:39:08 +01:00

network_windows_test.go

daemon/libnetwork: use t.Context() in tests

2025-09-25 22:53:41 +02:00

network_windows.go

go fix (GOOS=linux and windows)

2026-03-25 23:23:41 +01:00

network.go

libnetwork: don't run a resolver in LB sandboxes

2026-10-02 11:23:32 -04:00

resolver_test.go

libn: wait for DNS server in TestDNSProxyServFail

2026-09-30 17:30:45 -04:00

resolver_unix_test.go

libnetwork: keep the netns directory in the controller config

2026-10-09 14:31:01 -04:00

resolver_unix.go

Use libnftables in dynamically linked binary

2025-09-24 18:27:17 +01:00

resolver_windows.go

…

resolver.go

daemon/libnetwork: resolver: ignore gosec G404

2026-09-18 22:59:37 +02:00

sandbox_dns_unix_test.go

Merge pull request #54045 from akasakariko/fix/test-dns-options-isolation

2026-10-28 11:38:21 +01:00

sandbox_dns_unix.go

libnetwork: write resolver files only when asked

2026-10-02 16:31:27 -04:00

sandbox_dns_windows.go

libnetwork: write resolver files only when asked

2026-10-02 16:31:27 -04:00

sandbox_linux.go

libnetwork: send neighbor advertisements on restore

2026-02-14 07:51:29 -08:00

sandbox_options.go

libnetwork: write resolver files only when asked

2026-10-02 16:31:27 -04:00

sandbox_store.go

libnetwork: write resolver files only when asked

2026-10-02 16:31:27 -04:00

sandbox_unix_test.go

libnetwork: keep the netns directory in the controller config

2026-10-09 14:31:01 -04:00

sandbox_windows.go

libnetwork: send neighbor advertisements on restore

2026-02-14 07:51:29 -08:00

sandbox.go

libnetwork: keep the netns directory in the controller config

2026-10-09 14:31:01 -04:00

service_common_unix_test.go

libnetwork: remove the external key listener

2026-10-07 19:06:00 -04:00

service_common.go

libnetwork: ref-count service aliases for VIP DNS records

2026-05-12 14:37:09 +02:00

service_linux_test.go

libnetwork: DNAT gwbridge packets to ingress ports

2026-10-29 14:52:48 -04:00

service_linux.go

libnetwork: DNAT gwbridge packets to ingress ports

2026-10-29 14:52:48 -04:00

service_unsupported.go

…

service_windows.go

…

service.go

daemon/libnetwork: portConfigs: fix QF1012 (staticcheck)

2026-09-18 22:59:37 +02:00

store_linux_test.go

libnetwork: remove the external key listener

2026-10-07 19:06:00 -04:00

store_test.go

libnetwork: remove the external key listener

2026-10-07 19:06:00 -04:00

store.go

daemon/libnetwork: Drop legacy network scope fallback

2026-08-05 14:41:03 +02:00