Hi community, I have successfully deployed Rancher single node in the docker container. In the UI for now there is only one cluster: local (Provider: K3S). However, if I check its workloads in the namespace “cattle-system” there is a lot of failed pods “helm-operation-xxxxx”. As I understood, it is trying to pull an image “rancher/shell:v0.1.6”, but my VM doesn’t have direct access to the internet. I’m using Artifactory, but not quite sure how to integrate it with Rancher. Some of the logs from the Rancher container:

E0220 13:04:57.268766     26 remote_image.go:113] PullImage "rancher/shell:v0.1.6" from image service failed: rpc error: code = Unknown desc = failed to pull and unpack image "<http://docker.io/rancher/shell:v0.1.6|docker.io/rancher/shell:v0.1.6>": failed to resolve reference "<http://docker.io/rancher/shell:v0.1.6|docker.io/rancher/shell:v0.1.6>": failed to do request: Head <https://registry-1.docker.io/v2/rancher/shell/manifests/v0.1.6>: dial tcp: lookup <http://registry-1.docker.io|registry-1.docker.io>: no such host
E0220 13:04:57.268808     26 kuberuntime_image.go:50] Pull image "rancher/shell:v0.1.6" failed: rpc error: code = Unknown desc = failed to pull and unpack image "<http://docker.io/rancher/shell:v0.1.6|docker.io/rancher/shell:v0.1.6>": failed to resolve reference "<http://docker.io/rancher/shell:v0.1.6|docker.io/rancher/shell:v0.1.6>": failed to do request: Head <https://registry-1.docker.io/v2/rancher/shell/manifests/v0.1.6>: dial tcp: lookup <http://registry-1.docker.io|registry-1.docker.io>: no such host
E0220 13:04:57.268865     26 kuberuntime_manager.go:801] container start failed: ErrImagePull: rpc error: code = Unknown desc = failed to pull and unpack image "<http://docker.io/rancher/shell:v0.1.6|docker.io/rancher/shell:v0.1.6>": failed to resolve reference "<http://docker.io/rancher/shell:v0.1.6|docker.io/rancher/shell:v0.1.6>": failed to do request: Head <https://registry-1.docker.io/v2/rancher/shell/manifests/v0.1.6>: dial tcp: lookup <http://registry-1.docker.io|registry-1.docker.io>: no such host
E0220 13:04:57.269670     26 pod_workers.go:191] Error syncing pod f7002f13-3f4a-477d-b38e-b31a86854c8f ("helm-operation-d6b4f_cattle-system(f7002f13-3f4a-477d-b38e-b31a86854c8f)"), skipping: [failed to "StartContainer" for "helm" with ErrImagePull: "rpc error: code = Unknown desc = failed to pull and unpack image \"<http://docker.io/rancher/shell:v0.1.6\|docker.io/rancher/shell:v0.1.6\>": failed to resolve reference \"<http://docker.io/rancher/shell:v0.1.6\|docker.io/rancher/shell:v0.1.6\>": failed to do request: Head <https://registry-1.docker.io/v2/rancher/shell/manifests/v0.1.6>: dial tcp: lookup <http://registry-1.docker.io|registry-1.docker.io>: no such host", failed to "StartContainer" for "proxy" with ImagePullBackOff: "Back-off pulling image \"rancher/shell:v0.1.6\""]
E0220 13:05:00.264620     26 pod_workers.go:191] Error syncing pod 7f461430-9fa9-40a0-9292-b232999d4c68 ("helm-operation-csqtv_cattle-system(7f461430-9fa9-40a0-9292-b232999d4c68)"), skipping: [failed to "StartContainer" for "helm" with ImagePullBackOff: "Back-off pulling image \"rancher/shell:v0.1.6\"", failed to "StartContainer" for "proxy" with ImagePullBackOff: "Back-off pulling image \"rancher/shell:v0.1.6\""]
E0220 13:05:01.263203     26 pod_workers.go:191] Error syncing pod b36eedc8-bfaa-40fe-a347-7afe191c4806 ("helm-operation-zpkh5_cattle-system(b36eedc8-bfaa-40fe-a347-7afe191c4806)"), skipping: [failed to "StartContainer" for "helm" with ImagePullBackOff: "Back-off pulling image \"rancher/shell:v0.1.6\"", failed to "StartContainer" for "proxy" with ImagePullBackOff: "Back-off pulling image \"rancher/shell:v0.1.6\""]
W0220 13:05:01.348877     26 iptables.go:550] Could not set up iptables canary mangle/KUBE-PROXY-CANARY: error creating chain "KUBE-PROXY-CANARY": exit status 3: iptables v1.8.3 (legacy): can't initialize iptables table `mangle': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
E0220 13:05:02.263542     26 pod_workers.go:191] Error syncing pod cfa1b9ea-6f54-4486-b72c-516d85758097 ("helm-operation-qlplj_cattle-system(cfa1b9ea-6f54-4486-b72c-516d85758097)"), skipping: [failed to "StartContainer" for "helm" with ImagePullBackOff: "Back-off pulling image \"rancher/shell:v0.1.6\"", failed to "StartContainer" for "proxy" with ImagePullBackOff: "Back-off pulling image \"rancher/shell:v0.1.6\""]
E0220 13:05:05.262470     26 pod_workers.go:191] Error syncing pod 5c049d76-8ee5-42d6-b64d-da0715a58253 ("helm-operation-s9w8x_cattle-system(5c049d76-8ee5-42d6-b64d-da0715a58253)"), skipping: [failed to "StartContainer" for "helm" with ImagePullBackOff: "Back-off pulling image \"rancher/shell:v0.1.6\"", failed to "StartContainer" for "proxy" with ImagePullBackOff: "Back-off pulling image \"rancher/shell:v0.1.6\""]
E0220 13:05:07.264113     26 pod_workers.go:191] Error syncing pod ea230264-a67c-4829-a04f-e1cca0a26858 ("helm-operation-qdcft_cattle-system(ea230264-a67c-4829-a04f-e1cca0a26858)"), skipping: [failed to "StartContainer" for "helm" with ImagePullBackOff: "Back-off pulling image \"rancher/shell:v0.1.6\"", failed to "StartContainer" for "proxy" with ImagePullBackOff: "Back-off pulling image \"rancher/shell:v0.1.6\""]
E0220 13:05:07.264202     26 pod_workers.go:191] Error syncing pod e3db70fb-dc2e-4b8e-b70c-58c77fce33c3 ("helm-operation-6dx7j_cattle-system(e3db70fb-dc2e-4b8e-b70c-58c77fce33c3)"), skipping: [failed to "StartContainer" for "helm" with ImagePullBackOff: "Back-off pulling image \"rancher/shell:v0.1.6\"", failed to "StartContainer" for "proxy" with ImagePullBackOff: "Back-off pulling image \"rancher/shell:v0.1.6\""]
E0220 13:05:09.262982     26 pod_workers.go:191] Error syncing pod f7002f13-3f4a-477d-b38e-b31a86854c8f ("helm-operation-d6b4f_cattle-system(f7002f13-3f4a-477d-b38e-b31a86854c8f)"), skipping: [failed to "StartContainer" for "helm" with ImagePullBackOff: "Back-off pulling image \"rancher/shell:v0.1.6\"", failed to "StartContainer" for "proxy" with ImagePullBackOff: "Back-off pulling image \"rancher/shell:v0.1.6\""]
E0220 13:05:12.941958     26 proxier.go:833] Failed to ensure that filter chain KUBE-EXTERNAL-SERVICES exists: error creating chain "KUBE-EXTERNAL-SERVICES": exit status 3: iptables v1.8.3 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
I0220 13:05:12.941981     26 proxier.go:825] Sync failed; retrying in 30s

If it uses by default https://registry-1.docker.io/v2/rancher/shell/manifests/v0.1.6 how can I change it and add a link to the remote repository in my Artifactory? Why it’s reporting that something is wrong with iptables? Thanks in advance,