Add LD_LIBRARY_PATH

Author: rifelpet

nodeup/pkg/model/kube_proxy.go

@@ -229,10 +229,18 @@ func (b *KubeProxyBuilder) buildPod() (*v1.Pod, error) {
 		vol.HostPath.Type = &hostPathType
 	}
 
-	// Mount host nft binary and its shared library dependencies for kube-proxy nftables mode
+	// Mount host nft binary and its shared library dependencies for kube-proxy nftables mode.
+	// The nft binary on the host is dynamically linked against host libraries
+	// (e.g. libreadline, libnftnl, libmnl) that are not in the container image.
+	// LD_LIBRARY_PATH is needed because the container's dynamic linker doesn't
+	// search /usr/lib64 by default.
 	if c.ProxyMode == "nftables" {
 		kubemanifest.AddHostPathMapping(pod, container, "usrsbin", "/usr/sbin", kubemanifest.WithMountPath("/usr/sbin"))
 		kubemanifest.AddHostPathMapping(pod, container, "usrlib64", "/usr/lib64", kubemanifest.WithMountPath("/usr/lib64"))
+		container.Env = append(container.Env, v1.EnvVar{
+			Name:  "LD_LIBRARY_PATH",
+			Value: "/usr/lib64",
+		})
 	}
 
 	pod.Spec.Containers = append(pod.Spec.Containers, *container)