Fix / 修复
- The v0.5.6 Docker image shipped nftables 1.1.5. Since 1.1.2, nftables writes set metadata that older releases cannot parse, so an nft older than 1.1.1 on the host (for example 1.0.6 on Debian 12 and fnOS) crashed on
nft list rulesetonce Gately created itsinet gatelytable. The image now pins nftables 1.1.1; after upgrading, Gately rebuilds the table on start and the host's nft works again. fnOS / OpenWrt packages and binary installs use the system's nft and are not affected. / v0.5.6 的 Docker 镜像内置 nftables 1.1.5。nftables 从 1.1.2 起会在集合上写入旧版不认识的元数据,Gately 创建inet gately表后,宿主机上 1.1.1 之前的 nft(如 Debian 12、飞牛 fnOS 的 1.0.6)执行nft list ruleset会崩溃。镜像现已固定为 nftables 1.1.1,升级后 Gately 启动时重建该表,宿主机 nft 恢复正常。飞牛 / OpenWrt 安装包与二进制部署使用系统自带的 nft,不受影响。
Upgrading / 升级
- Docker: pull the new image and recreate the container. Other installs can stay on v0.5.6. / Docker 拉取新镜像后重建容器;其余部署方式可继续使用 v0.5.6。
See v0.5.6 for the Intrusion Prevention release notes. / 入侵防护的完整说明见 v0.5.6。
Release notes: https://gately.cn/en/news/v0.5.6.1 · 更新说明:https://gately.cn/news/v0.5.6.1