https://github.com/docker/docker/issues/866?source=c
> Missing the 'nat' table is a symptom of missing kernel modules.

task: rebuild iptables kernel modules since I have a custom kernel

https://github.com/docker/docker/issues/866?source=c#issuecomment-43093182
> I was missing IP_NF_TARGET_MASQUERADE in my kernel config.