🚀 Sync 2026-03-20 14:18:42

dockerd/files/etc/config/dockerd

@@ -10,7 +10,7 @@ config globals 'globals'
 	option data_root '/opt/docker/'
 #	option log_driver 'local'
 	option log_level 'warn'
-	option iptables '1'
+	option iptables '0'
 #	list hosts 'unix:///var/run/docker.sock'
 #	option bip '172.18.0.1/24'
 #	option fixed_cidr '172.17.0.0/16'
@@ -20,6 +20,7 @@ config globals 'globals'
 #	list dns '172.17.0.1'
 #	list registry_mirrors 'https://<my-docker-mirror-host>'
 #	list registry_mirrors 'https://hub.docker.com'
+#	option max_concurrent_downloads '2'
 
 # If your organization uses a proxy server to connect to the internet, you may need to configure the proxy.
 # See https://docs.docker.com/engine/daemon/proxy/ for more details

dockerd/files/etc/hotplug.d/net/br-netfilter

@@ -0,0 +1,12 @@
+#!/bin/sh
+
+if [ "$ACTION" = add -a "x$DEVTYPE" = xbridge ]; then
+    if [ "$DEVICENAME" = "docker0" ] || echo "$DEVICENAME" | grep -qE '^br-[0-9a-f]{12}$'; then
+        if [ "$(uci -q get dockerd.globals.iptables)" = "1" ]; then
+            echo "1" >/sys$DEVPATH/bridge/nf_call_iptables
+        fi
+        if [ "$(uci -q get dockerd.globals.ip6tables)" = "1" ]; then
+            echo "1" >/sys$DEVPATH/bridge/nf_call_ip6tables
+        fi
+    fi
+fi

dockerd/files/etc/sysctl.d/sysctl-br-netfilter-ip.conf

@@ -1,7 +0,0 @@
-# Do not edit, changes to this file will be lost on upgrades
-# /etc/sysctl.conf can be used to customize sysctl settings
-
-# enable bridge firewalling for docker
-# net.bridge.bridge-nf-call-ip6tables=1
-# net.bridge.bridge-nf-call-iptables=1
-

dockerd/files/etc/uci-defaults/16_docker-netifd-migrate2

@@ -0,0 +1,13 @@
+#!/bin/sh
+
+uci -q set dockerd.globals.iptables=0
+
+uci -q delete firewall.docker.network
+
+DOCKER0_DEVICE=`uci show network | grep -E "^network\\.@device\\[\\d+\\]\\.name='docker0'" | head -n1 | head -c -16`
+
+if [ -n "$DOCKER0_DEVICE" ]; then
+    uci delete "$DOCKER0_DEVICE"
+fi
+uci -q delete network.docker
+uci commit

dockerd/files/etc/uci-defaults/17_docker-fw4

@@ -0,0 +1,5 @@
+#!/bin/sh
+
+/etc/init.d/dockerd uciadd
+
+exit 0