# sudo apt-get update && apt-get whichever

# hadolint ignore=DL3005,DL3008
RUN apt-get update && \
  apt-get install --no-install-recommends -y \
  ca-certificates \
  curl \
  iptables \
  iproute2 \
  iputils-ping \
  knot-dnsutils \
  netcat-openbsd \
  tcpdump \
  conntrack \
  bsdmainutils \
  net-tools \
  lsof \
  sudo \
  && update-ca-certificates \
  && apt-get upgrade -y \

# sudo apt-get update && apt-get whichever

# hadolint ignore=DL3005,DL3008
RUN apt-get update && \
    apt-get install --no-install-recommends -y \
    ca-certificates \
    curl \
    iptables \
    iproute2 \
    iputils-ping \
    knot-dnsutils \
    netcat-openbsd \
    tcpdump \
    conntrack \
    bsdmainutils \
    net-tools \
    lsof \
    sudo \
    && apt-get upgrade -y \
    && apt-get clean \

		--after-install tools/packaging/postinst.sh \
		--config-files /var/lib/istio/envoy/envoy_bootstrap_tmpl.json \
		--config-files /var/lib/istio/envoy/sidecar.env \
		--description "Istio Sidecar" \
		--depends iproute2 \
		--depends iptables \
		--depends sudo \
		--depends hostname \
		$(DEB_COMPRESSION) \
		$(SIDECAR_FILES)

.PHONY: \
	deb \
	deb/fpm \
	rpm/fpm \

    kube::log::info "You can use 'hack/install-etcd.sh' to install a copy in third_party/."
    exit 1
  }

  # validate etcd port is free
  local port_check_command
  if command -v ss &> /dev/null && ss -Version | grep 'iproute2' &> /dev/null; then
    port_check_command="ss"
  elif command -v netstat &>/dev/null; then
    port_check_command="netstat"
  else

    return 1
  fi
}

function kube::build::has_docker() {
  which docker &> /dev/null
}

function kube::build::has_ip() {
  which ip &> /dev/null && ip -Version | grep 'iproute2' &> /dev/null
}

# Detect if a specific image exists
#
# $1 - image repo name
# $2 - image tag
function kube::build::docker_image_exists() {
  [[ -n $1 && -n $2 ]] || {

ARG VM_IMAGE_NAME=rockylinux
ARG VM_IMAGE_VERSION=9
FROM ${VM_IMAGE_NAME}:${VM_IMAGE_VERSION}

# hadolint ignore=DL3005,DL3008,DL3033
RUN yum install -y \
    iptables \
    iproute \
    sudo \
    nmap-ncat \
    tcpdump \
    procps \
    conntrack \
    net-tools \
    ca-certificates \
    && update-ca-trust \
    && yum clean all \
    && rm -rf /var/cache/yum

// probe probes IPv4, IPv6 and IPv4-mapped IPv6 communication
// capabilities.
//
// Plan 9 uses IPv6 natively, see ip(3).
func (p *ipStackCapabilities) probe() {
	p.ipv4Enabled = probe(netdir+"/iproute", "4i")
	p.ipv6Enabled = probe(netdir+"/iproute", "6i")
	if p.ipv4Enabled && p.ipv6Enabled {
		p.ipv4MappedIPv6Enabled = true
	}
}

func probe(filename, query string) bool {
	var file *file
	var err error

          subset: v1
          port:
            number: 9002
      websocketUpgrade: true

---

apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: websocket-route2
  namespace: testns
spec:
  hosts:
    - websocket2.extsvc.com
  http:
    - match:
      - headers:
          testwebsocket:
            exact: enabled
      route:
      - destination:

							Name: "test.com",
							Route: &networking.EnvoyFilter_RouteConfigurationMatch_RouteMatch{
								Name: "route2.0",
							},
						},
					},
				},
			},
			Patch: &networking.EnvoyFilter_Patch{
				Operation: networking.EnvoyFilter_Patch_INSERT_AFTER,
				Value:     buildPatchStruct(`{"name": "route2.5"}`),
			},
		},
		{
			ApplyTo: networking.EnvoyFilter_HTTP_ROUTE,

- hyperkube: Use debian-hyperkube-base@v1.1.1 image
  
    Includes iproute2 to fix a regression in hyperkube images
    when using hyperkube as a kubelet ([#92625](https://github.com/kubernetes/kubernetes/pull/92625), [@justaugustus](https://github.com/justaugustus)) [SIG Cluster Lifecycle, Network and Release]