Files
kevinveenbirkenbachandClaude Opus 5.5 c4f340d7b4 fix(sys-svc-container): install iptables-nft with docker on RedHat
On Fedora 44, dnf satisfies docker-ce's `(iptables-nft or iptables)`
requirement with iptables-legacy. The legacy backend needs the ip_tables
module, which ubuntu-26.04 runners no longer have loaded, and the compose
container cannot load it because it mounts no /lib/modules. The MSS clamp
task then failed with `modprobe: FATAL: Module ip_tables not found` and
`can't initialize iptables table 'mangle'` (Nextcloud#10, Gitea#0,
Jellyfin#0 on fedora). CentOS 10 already resolves to iptables-nft from the
same plan and deploys green on the same image.

Naming iptables-nft in the docker transaction makes Fedora use the
nf_tables backend as well.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
2026-10-19 13:07:18 +02:00
..
…
…

Docker Server

Description

This role installs and maintains the Docker service, including Docker Compose, on Linux systems.
It is part of the Infinito.Nexus Project, maintained and developed by Kevin Veen-Birkenbach.

Overview

The role ensures that Docker and Docker Compose are present, integrates essential backup, repair, and health check roles, and supports cleanup or full reset modes for a fresh Docker environment.
When enabled via MODE_CLEANUP or MODE_RESET, it will automatically prune unused Docker resources.
MODE_RESET additionally restarts the Docker service after cleanup.

Cosmos

The diagram places Docker Server in the Infinito.Nexus cosmos: the components it deploys (capabilities), the central services it consumes (dependencies), and its outward reach (federation and bridged external networks).

flowchart LR
    subgraph role [sys-svc-container 💻]
        svc_svc_container["svc-container"]
        svc_busybox["busybox"]
        svc_node["node"]
    end

Solid 1:1 edges are fixed relationships; dashed 0..1 edges are conditional (enabled only in matching deployments); red 0..0 edges are turned off in this role. Node markers show the role's deploy modes (💻 host, 🐳 compose, 🐝 swarm); ❌ marks a service that is explicitly turned off, and ⚙️ an Ansible role dependency declared in meta/main.yml.

Features

  • Automated Installation
    Installs Docker and Docker Compose via the system package manager.

  • Integrated Dependencies
    Includes backup, repair, and health check sub-roles

  • Cleanup & Reset Modes

    • MODE_CLEANUP: Removes unused Docker containers, networks, images, and volumes.
    • MODE_RESET: Performs cleanup and restarts the Docker service.
  • Handler Integration
    Restart handler ensures the Docker daemon is reloaded when necessary.

License

This role is released under the Infinito.Nexus Community License (Non-Commercial) (CNCL).
See license details.

Credits

Implemented by Kevin Veen-Birkenbach. Part of the Infinito.Nexus Project and maintained by Kevin Veen-Birkenbach. Licensed under the Infinito.Nexus Community License (Non-Commercial).