docker启动容器报错iptables: No chain/target/match by that name.

docker启动容器报错iptables: No chain/target/match by that name.

报错如下：

docker: Error response from daemon: driver failed programming external connectivity on endpoint nginx (61b689f83719caff336246254775606909ffc646f6bb46096ed2ee7f05bb1b13):  (iptables failed: iptables --wait -t nat -A DOCKER -p tcp -d 0/0 --dport 8888 -j DNAT --to-destination 172.17.0.2:80 ! -i docker0: iptables: No chain/target/match by that name.
 (exit status 1)).

解决方法：

重启docker

systemctl restart docker

出现这个报错是因为docker创建的iptables规则链被清空。

清空后

清空前

复现步骤：

#先重启防火墙
systemctl restart firewalld
#重启docker
systemctl restart docker
#关闭防火墙
systemctl sop firewalld
#清空iptables配置
iptables -F
#此时启动容器就会报错
[root@linuxweb ~]# docker run -d -p 8888:80 --name nginx nginx:latest
55502e27f5a342f0aa09b2877ae033b72164479f5237b96dca1c581c32d658f6
docker: Error response from daemon: driver failed programming external connectivity on endpoint nginx (d610527e2fcb6706e4cee4e4246cbd7fc571873a250fb3fea853bd2c2bca0540):  (iptables failed: iptables --wait -t nat -A DOCKER -p tcp -d 0/0 --dport 8888 -j DNAT --to-destination 172.17.0.2:80 ! -i docker0: iptables: No chain/target/match by that name.
 (exit status 1)).

只要启动docker之前没有关闭防火墙firewalld，然后启动docker之后才去关闭防火墙并清空iptables规则链就会出现这个报错。