From 00195f63ff7d97858b99e199ace7747532b08f05 Mon Sep 17 00:00:00 2001
From: Christian Schlichtherle <christian@schlichtherle.de>
Date: Thu, 17 Nov 2022 23:24:57 +0100
Subject: [PATCH] Switch to legacy iptables.

---
 roles/debian-up/tasks/main.yaml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/roles/debian-up/tasks/main.yaml b/roles/debian-up/tasks/main.yaml
index 7d2effe..05b8ed6 100644
--- a/roles/debian-up/tasks/main.yaml
+++ b/roles/debian-up/tasks/main.yaml
@@ -37,3 +37,15 @@
         dest: /etc/default/locale
         src: locale.j2
   notify: require reboot
+# See https://docs.k3s.io/advanced#additional-preparation-for-debian-buster-based-distributions :
+- name: flush iptables
+  iptables:
+    flush: yes
+- name: use iptables-legacy
+  alternatives:
+    name: iptables
+    path: /usr/sbin/iptables-legacy
+- name: use ip6tables-legacy
+  alternatives:
+    name: ip6tables
+    path: /usr/sbin/ip6tables-legacy