From 1ab0c2cac9e87dea1f4ac1be5d4a7184e735584f Mon Sep 17 00:00:00 2001
From: "Gottfried, Kyle" <6462596+Spitfire1900@users.noreply.github.com>
Date: Wed, 16 Sep 2026 19:31:02 -0400
Subject: [PATCH] =?UTF-8?q?Support=20ubi=2010,=20closes=20=C2=96#1348?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Gottfried, Kyle <6462596+Spitfire1900@users.noreply.github.com>
---
 rpm/SPECS/docker-ce.spec | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/rpm/SPECS/docker-ce.spec b/rpm/SPECS/docker-ce.spec
index c875bff7fa..170e340ab9 100644
--- a/rpm/SPECS/docker-ce.spec
+++ b/rpm/SPECS/docker-ce.spec
@@ -18,7 +18,17 @@ Requires: docker-ce-cli
 Recommends: docker-ce-rootless-extras
 Requires: container-selinux
 Requires: systemd
+
+%if 0%{?rhel} >= 10
+# Docker Engine 29+ supports a native nftables firewall backend.
+# EL10 UBI repositories do not provide iptables or iptables-nft.
+# Keep iptables as a weak dependency so distributions that provide it
+# retain the existing default behavior without making it mandatory.
+Recommends: (iptables-nft or iptables)
+%else
 Requires: (iptables-nft or iptables)
+%endif
+
 Requires: nftables
 %if %{undefined rhel} || 0%{?rhel} < 9
 # Libcgroup is no longer available in RHEL/CentOS >= 9 distros.