Error response from daemon: Cannot start container.......iptables failed: iptables --wait -t nat -A

本文针对Docker启动时报错“driver failed programming external connectivity”的问题,提供了详细的解决步骤,包括重启Docker服务、清理iptables规则、关闭及删除docker0接口,最终通过重启Docker服务恢复正常运行。

摘要生成于 C知道 ,由 DeepSeek-R1 满血版支持, 前往体验 >

转自https://www.cnblogs.com/amoyzhu/p/9329368.html

# docker启动报错
 
docker: Error response from daemon: driver failed programming external connectivity 
on endpoint happy_perlman (49dc6ee6eba3119650791b3b163da2d4c8976ec00cc45721e5cc6d6673a4a0d6): 
 (iptables failed: iptables --wait -t nat -A DOCKER -p tcp -d 0/0 --dport 3306 -j DNAT 
--to-destination 172.17.0.3:3306 ! -i docker0: iptables: No chain/target/match by that name.
 (exit status 1)).
首先可以重启docker试下  systemctl restart docker  如果不行可以,在试下下面的解决办法

# 解决办法:重建docker0网络恢复
 
#按照进程名杀死docker进程
[root@localhost mysqlconf]# pkill docker
#清空防火墙规则-清空nat表的所有链
[root@localhost mysqlconf]# iptables -t nat -F
#查看定义规则的详细信息
[root@localhost mysqlconf]# iptables -L -n -v  
#关闭docker0接口
[root@localhost mysqlconf]# ifconfig docker0 down
#删除docker0接口
[root@localhost mysqlconf]# brctl delbr docker0
#重启docker
[root@localhost mysqlconf]# systemctl restart docker
#查看是否启用
[root@localhost mysqlconf]# docker ps -a

 

(base) casbot@casbot:~$ # 检查 Docker 状态 sudo systemctl status docker # 检查 NAT 链是否创建成功 sudo iptables-legacy -t nat -L DOCKER ● docker.service - Docker Application Container Engine Loaded: loaded (/lib/systemd/system/docker.service; enabled; vendor preset: enabled) Active: active (running) since Tue 2025-07-22 17:17:04 CST; 15s ago TriggeredBy: ● docker.socket Docs: https://docs.docker.com Main PID: 1433920 (dockerd) Tasks: 13 Memory: 21.3M CPU: 615ms CGroup: /system.slice/docker.service └─1433920 /usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock Jul 22 17:17:03 casbot dockerd[1433920]: time="2025-07-22T17:17:03.698463694+08:00" level=info msg="[graphdriver] using prior storage driver: overlay2" Jul 22 17:17:03 casbot dockerd[1433920]: time="2025-07-22T17:17:03.699593709+08:00" level=info msg="Loading containers: start." Jul 22 17:17:04 casbot dockerd[1433920]: time="2025-07-22T17:17:04.163257745+08:00" level=warning msg="ip6tables is enabled, but cannot set up ip6tables chains" error="failed to create FILTER chain DOCKER: iptables failed: ip6tables --wait -t filter -N DOCKER: ip6tables> Jul 22 17:17:04 casbot dockerd[1433920]: time="2025-07-22T17:17:04.194675832+08:00" level=warning msg="configuring DOCKER-USER" error="failed to create DOCKER-USER ipv6 chain: iptables failed: ip6tables --wait -t filter -N DOCKER-USER: ip6tables v1.8.7 (legacy): can't i> Jul 22 17:17:04 casbot dockerd[1433920]: time="2025-07-22T17:17:04.336720544+08:00" level=info msg="Loading containers: done." Jul 22 17:17:04 casbot dockerd[1433920]: time="2025-07-22T17:17:04.408140724+08:00" level=info msg="Docker daemon" commit=e77ff99 containerd-snapshotter=false storage-driver=overlay2 version=28.3.2 Jul 22 17:17:04 casbot dockerd[1433920]: time="2025-07-22T17:17:04.408535631+08:00" level=info msg="Initializing buildkit" Jul 22 17:17:04 casbot dockerd[1433920]: time="2025-07-22T17:17:04.470912609+08:00" level=info msg="Completed buildkit initialization" Jul 22 17:17:04 casbot dockerd[1433920]: time="2025-07-22T17:17:04.484861236+08:00" level=info msg="Daemon has completed initialization" Jul 22 17:17:04 casbot dockerd[1433920]: time="2025-07-22T17:17:04.484998900+08:00" level=info msg="API listen on /run/docker.sock" Chain DOCKER (2 references) target prot opt source destination RETURN all -- anywhere anywhere (base) casbot@casbot:~$ noetic 请输入指令控制noetic: 重启(r) 进入(e) 启动(s) 关闭(c) 删除(d) 测试(t): t Error response from daemon: No such container: noetic
07-23
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值