update-alternatives：错误：arptables 的替代 /usr/sbin/arptables-legacy 未注册；不设置

我在 Buster 主机上有 Debian 10 (Buster) KVM 来宾计算机。尝试切换到旧版iptables在以下虚拟机上Debian 维基 https://wiki.debian.org/iptables

update-alternatives --set iptables /usr/sbin/iptables-nft
update-alternatives --set ip6tables /usr/sbin/ip6tables-nft
update-alternatives --set arptables /usr/sbin/arptables-nft
update-alternatives --set ebtables /usr/sbin/ebtables-nft

当其他三个成功时，arptables更新失败并显示消息

update-alternatives: error: alternative /usr/sbin/arptables-legacy for arptables not registered; not setting

有解决方法吗？

如果您好奇，来宾计算机是使用 kubeadm 启动的 Kubernetes (v1.18) 集群的节点。网络插件是Calico https://docs.projectcalico.org。一切都按默认运行nftables设置除了MetalLB https://metallb.universe.tf控制器错误

 1 reflector.go:125] pkg/mod/k8s.io/[email protected] /cdn-cgi/l/email-protection/tools/cache/reflector.go:98: Failed to list *v1.ConfigMap: Get https://10.96.0.1:443/api/v1/namespaces/metallb-system/configmaps?fieldSelector=metadata.name%3Dconfig&limit=500&resourceVersion=0: dial tcp 10.96.0.1:443: i/o timeout

When I ping 10.96.0.1从来宾虚拟机中，我得到

PING 10.96.0.1 (10.96.0.1) 56(84) bytes of data.
From 94.157.208.1 icmp_seq=1 Packet filtered
From 94.157.208.1 icmp_seq=2 Packet filtered
...

--- 10.96.0.1 ping statistics ---
7 packets transmitted, 0 received, +7 errors, 100% packet loss, time 15ms

首先，您需要安装旧版软件包：

sudo apt-get install -y iptables arptables ebtables

然后更新替代方案：

sudo update-alternatives --set iptables /usr/sbin/iptables-legacy
sudo update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy
sudo update-alternatives --set arptables /usr/sbin/arptables-legacy
sudo update-alternatives --set ebtables /usr/sbin/ebtables-legacy