Error While Building Multiarch Image of Route Agent

[tunahanertekin]

Hi,

I was trying to build arm64 image (build for amd64 is fine) for the route agent using the command make multiarch-images PLATFORMS=linux/arm64 but build is failing in this line, with the error below:

=> ERROR [stage-2 5/5] RUN /usr/sbin/iptables-wrapper-installer.sh --no-sanity-check                                                                                      0.3s
------
 > importing cache manifest from fedora:${FEDORA_VERSION}:
------
------
 > [stage-2 5/5] RUN /usr/sbin/iptables-wrapper-installer.sh --no-sanity-check:
#0 0.240 ERROR: iptables is not present in either /usr/sbin or /sbin
------
Dockerfile.submariner-route-agent:39
--------------------
  37 |     COPY --from=builder ${SOURCE}/package/iptables-wrapper-installer.sh /usr/sbin/
  38 |     # The sanity checks can fail when building foreign arch images; we know we meet the requirements
  39 | >>> RUN /usr/sbin/iptables-wrapper-installer.sh --no-sanity-check
  40 |     
  41 |     ENTRYPOINT submariner-route-agent.sh
--------------------
error: failed to solve: process "/dev/.buildkit_qemu_emulator /bin/sh -c /usr/sbin/iptables-wrapper-installer.sh --no-sanity-check" did not complete successfully: exit code: 1
make: *** [/opt/shipyard/Makefile.images:29: package/submariner-route-agent.tar] Error 1
[07:51:16.512] [submariner]$ make --debug=b multiarch-images
make: *** [Makefile.dapper:45: multiarch-images] Error 2

Dou you have any suggestions about how I could fix this? Thanks in advance.

UPDATE:

I manually solved the issue by adding two lines to Dockerfile.submariner-route-agent: (Lines under the CHANGE comments)

ARG BASE_BRANCH
ARG FEDORA_VERSION=36
ARG SOURCE=/go/src/github.com/submariner-io/submariner

FROM --platform=${BUILDPLATFORM} quay.io/submariner/shipyard-dapper-base:${BASE_BRANCH} AS builder
ARG FEDORA_VERSION
ARG SOURCE
ARG TARGETPLATFORM

COPY . ${SOURCE}

RUN make -C ${SOURCE} LOCAL_BUILD=1 bin/${TARGETPLATFORM}/submariner-route-agent

FROM --platform=${BUILDPLATFORM} fedora:${FEDORA_VERSION} AS base
ARG FEDORA_VERSION
ARG SOURCE
ARG TARGETPLATFORM

COPY package/dnf_install /

RUN /dnf_install -a ${TARGETPLATFORM} -v ${FEDORA_VERSION} -r /output/route-agent \
    glibc bash glibc-minimal-langpack coreutils-single \
    iproute iptables-legacy iptables-nft ipset openvswitch procps-ng grep

# CHANGE 1: Installing the iptables-services
RUN dnf install iptables-services -y

FROM --platform=${TARGETPLATFORM} scratch
ARG SOURCE
ARG TARGETPLATFORM

WORKDIR /var/submariner

COPY --from=base /output/route-agent /
# CHANGE 2: Copying iptables to scratch
COPY --from=base /sbin/iptables /sbin/

COPY --from=builder ${SOURCE}/package/submariner-route-agent.sh ${SOURCE}/bin/${TARGETPLATFORM}/submariner-route-agent /usr/local/bin/

# Wrapper scripts to choose the appropriate iptables
# https://github.com/kubernetes-sigs/iptables-wrappers
COPY --from=builder ${SOURCE}/package/iptables-wrapper-installer.sh /usr/sbin/
# The sanity checks can fail when building foreign arch images; we know we meet the requirements
RUN /usr/sbin/iptables-wrapper-installer.sh --no-sanity-check

ENTRYPOINT submariner-route-agent.sh

Still seems that the Dockerfile needs an update for linux/arm64.