// +build !windows package syssetup import ( "io/ioutil" "os" "os/exec" "github.com/sirupsen/logrus" ) func loadKernelModule(moduleName string) { if _, err := os.Stat("/sys/module/" + moduleName); err == nil { logrus.Info("Module " + moduleName + " was already loaded") return } if err := exec.Command("modprobe", moduleName).Run(); err != nil { logrus.Warn("Failed to start " + moduleName + " module") } } func enableSystemControl(file string) { if err := ioutil.WriteFile(file, []byte("1"), 0640); err != nil { logrus.Warnf("Failed to write value 1 at "+file+": %v", err) } } func Configure() { loadKernelModule("overlay") loadKernelModule("nf_conntrack") loadKernelModule("br_netfilter") loadKernelModule("iptable_nat") // Kernel is inconsistent about how devconf is configured for // new network namespaces between ipv4 and ipv6. Make sure to // enable forwarding on all and default for both ipv4 and ipv8. enableSystemControl("/proc/sys/net/ipv4/conf/all/forwarding") enableSystemControl("/proc/sys/net/ipv4/conf/default/forwarding") enableSystemControl("/proc/sys/net/ipv6/conf/all/forwarding") enableSystemControl("/proc/sys/net/ipv6/conf/default/forwarding") enableSystemControl("/proc/sys/net/bridge/bridge-nf-call-iptables") enableSystemControl("/proc/sys/net/bridge/bridge-nf-call-ip6tables") }