Skip to content

Docker startup error for Traefik? ​

Detailed error message below:

May 16 06:06:57 lzc-pod-juyIZt dockerd[1391]: time="2025-05-16T06:06:57.617540160Z" level=error msg="failed to start container" container=675c06f1d672ee0c36441d4e0fcd69d48e38355a40a4e85b7a42d0019467ffc4 error="failed to set up container networking: driver failed programming external connectivity on endpoint monitoring-grafana (02c852b6417b0a591b3b22838f3fd71452fd32bf386bf1c186cb0ba5f256b398): Unable to enable DIRECT ACCESS FILTERING - DROP rule:  (iptables failed: iptables --wait -t raw -A PREROUTING -p tcp -d 172.20.0.6 --dport 3000 ! -i br-8321df9162d9 -j DROP: iptables v1.8.7 (legacy): can't initialize iptables table `raw': Table does not exist (do you need to insmod?)\nPerhaps iptables or your kernel needs to be upgraded.\n (exit status 3))"

Resolve: https://forums.developer.nvidia.com/t/problems-with-docker-version-28-0-1-on-jetson-orin-nx/325541/26

Inside /etc/systemd/system/docker.service.d/, add an override.conf file containing the following content:

override.conf
[Service]
Environment="DOCKER_INSECURE_NO_IPTABLES_RAW=1"

After adding, execute the following command to restart the relevant services

sudo systemctl daemon-reload
sudo systemctl restart docker
sudo systemctl restart lzc-ai-agent

After Docker restart, you can use docker info to access.

> docker info | grep DOCKER_INSECURE_NO_IPTABLES_RAW
WARNING: DOCKER_INSECURE_NO_IPTABLES_RAW is set