firewalld/docker-zone.xml

<?xml version="1.0" encoding="utf-8"?>
<zone target="ACCEPT">
  <short>docker</short>
  <description>All network connections are accepted.</description>
  <interface name="docker0"/>
</zone>
Accepting request 847325 from home:mrostecki:branches:security:netfilter - Remove the patch which enforces usage of iptables instead of nftables: * 0001-firewall-backend-Switch-default-backend-to-iptables.patch - Add firewalld zone for the docker0 interface. This is the workaround for lack of nftables support in docker. Without that additional zone, containers have no Internet connectivity. (rhbz#1817022) - Update to 0.9.1: * Bugfixes: * docs(firewall-cmd): clarify lockdown whitelist command paths * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active * fix(policy): zone interface/source changes should affect all using zone OBS-URL: https://build.opensuse.org/request/show/847325 OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=107 2020-11-09 17:48:32 +00:00			`<?xml version="1.0" encoding="utf-8"?>`
			`<zone target="ACCEPT">`
			`<short>docker</short>`
			`<description>All network connections are accepted.</description>`
			`<interface name="docker0"/>`
			`</zone>`