Aug 15, 2026
Why a KVM Guest on NAT Loses Internet When Docker Is Installed
Docker sets the kernel FORWARD chain policy to DROP and leaves DOCKER-USER empty, silently killing traffic from libvirt's default NAT network even when firewalld and libvirt are both configured correctly.