diff --git a/kubevirt.changes b/kubevirt.changes
index 9cc02f0..5135949 100644
--- a/kubevirt.changes
+++ b/kubevirt.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Wed Jan 19 13:30:51 UTC 2022 - Vasily Ulyanov <vasily.ulyanov@suse.com>
+
+- Pack nft rules and nsswitch.conf for virt-handler
+
 -------------------------------------------------------------------
 Wed Jan 12 06:29:18 UTC 2022 - Vasily Ulyanov <vasily.ulyanov@suse.com>
 
diff --git a/kubevirt.spec b/kubevirt.spec
index 273a854..bbd29ab 100644
--- a/kubevirt.spec
+++ b/kubevirt.spec
@@ -214,6 +214,12 @@ install -p -m 0755 cmd/virt-launcher/node-labeller/node-labeller.sh %{buildroot}
 # virt-launcher SELinux policy needs to land in virt-handler container
 install -p -m 0644 cmd/virt-handler/virt_launcher.cil %{buildroot}/
 
+# Install network stuff
+mkdir -p %{buildroot}%{_sysconfdir}/nftables
+install -p -m 0644 cmd/virt-handler/nsswitch.conf %{buildroot}%{_sysconfdir}/
+install -p -m 0644 cmd/virt-handler/ipv4-nat.nft %{buildroot}%{_sysconfdir}/nftables/
+install -p -m 0644 cmd/virt-handler/ipv6-nat.nft %{buildroot}%{_sysconfdir}/nftables/
+
 # Install release manifests
 mkdir -p %{buildroot}%{_datadir}/kube-virt/manifests/release
 install -m 0644 _out/manifests/release/kubevirt-operator.yaml %{buildroot}%{_datadir}/kube-virt/manifests/release/
@@ -260,9 +266,12 @@ install -m 0644 %{S:3} %{buildroot}%{_prefix}/lib/obs/service
 %files virt-handler
 %license LICENSE
 %doc README.md
+%dir %{_sysconfdir}/nftables
 %{_bindir}/virt-handler
 %{_bindir}/virt-chroot
 /virt_launcher.cil
+%{_sysconfdir}/nsswitch.conf
+%{_sysconfdir}/nftables
 
 %files virt-launcher
 %license LICENSE