Docker commpose failed to create network rss_public_access: Error response from daemon: Failed to Setup IP tables: Unable to enable SKIP DNAT rule

Docker commpose 启动容器时提示如下

failed to create network rss_public_access: Error response from daemon: Failed to Setup IP tables: Unable to enable SKIP DNAT rule:  (iptables failed: iptables --wait -t nat -I DOCKER -i br-84856a838228 -j RETURN: iptables: No chain/target/match by that name.

解决方法:

modprobe nf_conntrack

设置为开机启动

cat > /etc/sysconfig/modules/ipvs.modules <<EOF
#!/bin/bash
modprobe -- ip_vs
modprobe -- ip_vs_rr
modprobe -- ip_vs_wrr
modprobe -- ip_vs_sh
modprobe -- nf_conntrack
EOF
chmod 755 /etc/sysconfig/modules/ipvs.modules && bash /etc/sysconfig/modules/ipvs.modules && lsmod | grep -e ip_vs -e nf_conntrack

该模块是nf_conntrack. sysctl是nf_conntrack_helper
https://github.com/firewalld/firewalld/issues/440