Currently if docker starts concurrently with firewall.service/systemd-networkd it breaks both due to iptables/netlink logs.