Waydroid not working

Melal · October 23, 2025, 2:06pm

I am not able to start a waydroid session with “waydroid session start”.
I followed the Nix wiki for waydroid and got problem when a i try to start a session with error “[17:02:34] RuntimeError: Command failed: % /nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/data/scripts/waydroid-net.sh start”.

There is errors on “waydroid log” :

waydroid-net isn't running
(003882) [17:02:19] % systemctl is-enabled -q nfcd
(023782) [17:02:26] % lxc-info -P /var/lib/waydroid/lxc -n waydroid -sH
STOPPED
(023782) [17:02:26] % modprobe -q ashmem_linux
(023782) [17:02:26] % chmod 666 -R /dev/binder
(023782) [17:02:26] % chmod 666 -R /dev/vndbinder
(023782) [17:02:26] % chmod 666 -R /dev/hwbinder
(023782) [17:02:34] % /nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/data/scripts/waydroid-net.sh start
vnic is waydroid0
modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.1-zen1
iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
Failed to setup waydroid-net.
modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.1-zen1
iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.1-zen1
iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.1-zen1
iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.1-zen1
iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.1-zen1
iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.1-zen1
iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.1-zen1
iptables v1.8.11 (legacy): can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.1-zen1
iptables v1.8.11 (legacy): can't initialize iptables table `mangle': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
(023782) [17:02:34] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
(023782) [17:02:34] NOTE: The failed command's output is above the ^^^ line in the log file: /var/lib/waydroid/waydroid.log
(023818) [17:02:34] org.freedesktop.DBus.Python.RuntimeError: Traceback (most recent call last):
  File "/nix/store/fbx0x4icf27za3n1xmg9xspqs9kxg161-python3.12-dbus-python-1.4.0/lib/python3.12/site-packages/dbus/service.py", line 712, in _message_cb
    retval = candidate_method(self, *args, **keywords)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/tools/actions/container_manager.py", line 31, in Start
    do_start(self.args, session)
  File "/nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/tools/actions/container_manager.py", line 138, in do_start
    tools.helpers.run.user(args, command)
  File "/nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/tools/helpers/run.py", line 58, in user
    return tools.helpers.run_core.core(args, msg, cmd, working_dir, output,
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/tools/helpers/run_core.py", line 343, in core
    check_return_code(args, code, log_message)
  File "/nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/tools/helpers/run_core.py", line 219, in check_return_code
    raise RuntimeError("Command failed: " + log_message)
RuntimeError: Command failed: % /nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/data/scripts/waydroid-net.sh start

(023818) [17:02:34] RuntimeError: Command failed: % /nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/data/scripts/waydroid-net.sh start
(023939) [17:03:21] % tail -n 60 -F /var/lib/waydroid/waydroid.log
(023939) [17:03:21] *** output passed to waydroid stdout, not to this log ***

I am running on zen kernel and nixpkgs 25.05 .
Cpu: amd 5 5600
Gpu: amd rx6700
This is my personal flake :
Nixos

rnhmjoj · October 23, 2025, 3:29pm

It seems waydroid wants to set up a IPv4 NAT (even for IPv6, but that’s even more broken) with iptables but fails, probably because you have nftables enabled.

If you can, set networking.nftables.enable = false and try again.

It’s a known issue, by the way:

github.com/waydroid/waydroid

Waydroid networking breaks with nftables & docker service started beforehand

opened 02:29PM - 03 Sep 22 UTC

JamiKettunen

**Describe the bug** With `docker` service running starting `waydroid-net.sh` a…fterwards causes Waydroid to have non-working networking with `nftables` (`LXC_USE_NFT="true"`). **Screenshots** ![image](https://user-images.githubusercontent.com/47358222/188273997-ed19ac27-ca9d-4499-8c18-b77e1eb30149.png) **General information (please complete the following information):** - Waydroid tools Version [1.3.0] - Waydroid Images Version [17.1-20220723-VANILLA] **Desktop (please complete the following information):** - OS: [Void Linux x64, also seen on Fedora x64] - GPU: [any, tested with software rendering under VM] - Kernel version: [5.18.19_1] - Host mesa version: [22.1.7_1] - Desktop: [XFCE 4.16.0_1 + Weston 9.0.0_1] (doubt most of that matters considering it seems to be some problematic `nftables` conflict between `docker` and `waydroid`) **Additional context** Setting `LXC_USE_NFT="false"` "automagically" fixes the problem and networking works again, so it's only a problem when `nftables` is used for network setup. **Logs (please upload as file)** - Prop file, located on `/var/lib/waydroid/waydroid_base.prop` [waydroid_base.prop.txt](https://github.com/waydroid/waydroid/files/9482780/waydroid_base.prop.txt) - Output of `waydroid log` [waydroid.log](https://github.com/waydroid/waydroid/files/9482781/waydroid.log) - *Full* (not partially) Output of `waydroid logcat` from the beginning of starting waydroid services [waydroid-logcat.log](https://github.com/waydroid/waydroid/files/9482782/waydroid-logcat.log)

Melal · October 23, 2025, 6:39pm

Thanks for your reply .
Unfortunately setting networking.nftables.enable = false didn’t seem to solve it .
waydroid log output is :

  File "/nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/tools/helpers/run_core.py", line 343, in core
    check_return_code(args, code, log_message)
  File "/nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/tools/helpers/run_core.py", line 219, in check_return_code
    raise RuntimeError("Command failed: " + log_message)
RuntimeError: Command failed: % /nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/data/scripts/waydroid-net.sh start

(004677) [21:30:33] RuntimeError: Command failed: % /nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/data/scripts/waydroid-net.sh start
(000966) [21:32:12] % /nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/data/scripts/waydroid-net.sh start
vnic is waydroid0
modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.1-zen1
iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
Failed to setup waydroid-net.
modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.1-zen1
iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.1-zen1
iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.1-zen1
iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.1-zen1
iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.1-zen1
iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.1-zen1
iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.1-zen1
iptables v1.8.11 (legacy): can't initialize iptables table `nat': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.1-zen1
iptables v1.8.11 (legacy): can't initialize iptables table `mangle': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.
(000966) [21:32:12] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
(000966) [21:32:12] NOTE: The failed command's output is above the ^^^ line in the log file: /var/lib/waydroid/waydroid.log
(022004) [21:32:12] org.freedesktop.DBus.Python.RuntimeError: Traceback (most recent call last):
  File "/nix/store/fbx0x4icf27za3n1xmg9xspqs9kxg161-python3.12-dbus-python-1.4.0/lib/python3.12/site-packages/dbus/service.py", line 712, in _message_cb
    retval = candidate_method(self, *args, **keywords)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/tools/actions/container_manager.py", line 31, in Start
    do_start(self.args, session)
  File "/nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/tools/actions/container_manager.py", line 138, in do_start
    tools.helpers.run.user(args, command)
  File "/nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/tools/helpers/run.py", line 58, in user
    return tools.helpers.run_core.core(args, msg, cmd, working_dir, output,
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/tools/helpers/run_core.py", line 343, in core
    check_return_code(args, code, log_message)
  File "/nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/tools/helpers/run_core.py", line 219, in check_return_code
    raise RuntimeError("Command failed: " + log_message)
RuntimeError: Command failed: % /nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/data/scripts/waydroid-net.sh start

(022004) [21:32:12] RuntimeError: Command failed: % /nix/store/f7cw7adljs96kghr0gyqpcxqrhblp13p-waydroid-1.5.4/lib/waydroid/data/scripts/waydroid-net.sh start
(022556) [21:35:39] % tail -n 60 -F /var/lib/waydroid/waydroid.log
(022556) [21:35:39] *** output passed to waydroid stdout, not to this log ***

And for the option LXC_USE_NFT="false" that was discussed in the github issue can you please tell me how to set it to false ?

rnhmjoj · October 23, 2025, 7:11pm

Unfortunately setting networking.nftables.enable = false didn’t seem to solve it .

Uh, if you’re not using nftables it must be another issue. I’m not sure, maybe it has to do with your kernel. Have you tried with the mainline one?

waffle8946 · October 24, 2025, 12:08am

Also, can you run the following?

nixos-option networking.nftables.enable
nixos-option boot.kernelPackages.kernel.version

waffle8946 · October 24, 2025, 12:58am

Actually, I think this issue is unrelated. I’ve used nftables only and I can definitely start waydroid. The reported issue is something to do with docker.

rnhmjoj · October 24, 2025, 6:35am

Well, there’s actually another issue about nftables without any Docker mentions:

github.com/waydroid/waydroid

[BUG] modprobe: FATAL: Module ip_tables not found

opened 11:33PM - 17 Oct 25 UTC

SoftEng-Islam

### Describe the bug ### 🐛 Waydroid network fails on nftables-only systems (no …`ip_tables` kernel module available) #### **Description** On **NixOS 25.11 (Linux 6.17.0-zen1)**, the `waydroid-net.sh` script fails to initialize networking because the system uses **nftables** without the legacy `ip_tables` kernel module. As a result, `waydroid show-full-ui` cannot start due to repeated `iptables` errors. --- #### **Logs** ```bash ❯ waydroid show-full-ui [02:19:14] Starting waydroid session [02:19:14] RuntimeError: Command failed: % /nix/store/l2iijph318yqplx1vb88b63md7r90d7b-waydroid-1.5.4/lib/waydroid/data/scripts/waydroid-net.sh start ``` ### Running the script manually: ```bash ❯ sudo /nix/store/l2iijph318yqplx1vb88b63md7r90d7b-waydroid-1.5.4/lib/waydroid/data/scripts/waydroid-net.sh start vnic is waydroid0 modprobe: FATAL: Module ip_tables not found in directory /run/booted-system/kernel-modules/lib/modules/6.17.0-zen1 iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. Failed to setup waydroid-net. (repeated several times for `filter`, `nat`, `mangle` tables) ``` ### System Information ```bash ❯ hostnamectl Chassis: desktop 🖥️ Operating System: NixOS 25.11 (Xantusia) Kernel: Linux 6.17.0-zen1 Architecture: x86-64 Hardware Vendor: HP Hardware Model: HP EliteDesk 705 G2 SFF ``` ### Expected Behavior Waydroid’s network setup should work on systems that only provide nftables, without depending on the legacy ip_tables kernel module. Modern distributions (including NixOS, Fedora, and Arch with recent kernels) ship nftables-only configurations by default. ### Waydroid version 1.5.4 ### Device Linux Desktop ### Operating System NixOS 25.11 (Xantusia), AMD 64 ### Kernel version Linux 6.17.0-zen1 ### Desktop Environment Hyprland ### GPU AMD PRO A8-8650B R7 10 Compute Cores 4C+6G ### Logs ❯ /var/lib/waydroid/waydroid.cfg /var/lib/waydroid/waydroid.prop /var/lib/waydroid/waydroid_base.prop /var/lib/waydroid/waydroid.log `sudo waydroid shell -- logcat -d | tee logcat.txt` `sudo dmesg | tee dmesg.txt` zsh: permission denied: /var/lib/waydroid/waydroid.cfg zsh: no such file or directory: /var/lib/waydroid/waydroid.prop zsh: permission denied: /var/lib/waydroid/waydroid_base.prop zsh: permission denied: /var/lib/waydroid/waydroid.log [sudo] password for softeng: [02:32:55] WayDroid container is STOPPED [: ']' expected

The reporter is also using NixOS and zen, so maybe it really is about zen not being built with the legacy iptables module.

waffle8946 · October 24, 2025, 3:13pm

Okay I have a better idea now. Based on After disabling NFT, ip_tables module is being demanded · Issue #178 · waydroid/waydroid · GitHub, nftables support was disabled by default in upstream, because some distros didn’t package waydroid properly. Re-enabling it resolves the issue:

github.com/NixOS/nixpkgs

waydroid-nftables: init

master ← eclairevoyant:waydroid-nft

opened 02:49PM - 24 Oct 25 UTC

eclairevoyant

+10 -1

## Things done - **waydroid: add nftables support** - **waydroid-nftables: init…** - Built on platform: - [x] x86_64-linux - [ ] aarch64-linux - [ ] x86_64-darwin - [ ] aarch64-darwin - Tested, as applicable: - [ ] [NixOS tests] in [nixos/tests]. - [ ] [Package tests] at `passthru.tests`. - [ ] Tests in [lib/tests] or [pkgs/test] for functions and "core" functionality. - [ ] Ran `nixpkgs-review` on this PR. See [nixpkgs-review usage]. - [x] Tested basic functionality of all binary files, usually in `./result/bin/`. - Nixpkgs Release Notes - [ ] Package update: when the change is major or breaking. - NixOS Release Notes - [ ] Module addition: when adding a new NixOS module. - [ ] Module update: when the change is significant. - [x] Fits [CONTRIBUTING.md], [pkgs/README.md], [maintainers/README.md] and other READMEs. [NixOS tests]: https://nixos.org/manual/nixos/unstable/index.html#sec-nixos-tests [Package tests]: https://github.com/NixOS/nixpkgs/blob/master/pkgs/README.md#package-tests [nixpkgs-review usage]: https://github.com/Mic92/nixpkgs-review#usage [CONTRIBUTING.md]: https://github.com/NixOS/nixpkgs/blob/master/CONTRIBUTING.md [lib/tests]: https://github.com/NixOS/nixpkgs/blob/master/lib/tests [maintainers/README.md]: https://github.com/NixOS/nixpkgs/blob/master/maintainers/README.md [nixos/tests]: https://github.com/NixOS/nixpkgs/blob/master/nixos/tests [pkgs/README.md]: https://github.com/NixOS/nixpkgs/blob/master/pkgs/README.md [pkgs/test]: https://github.com/NixOS/nixpkgs/blob/master/pkgs/test --- Add a :+1: [reaction] to [pull requests you find important]. [reaction]: https://github.blog/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/ [pull requests you find important]: https://github.com/NixOS/nixpkgs/pulls?q=is%3Aopen+sort%3Areactions-%2B1-desc