diff --git a/meta-dstack/recipes-core/images/dstack-rootfs-base.inc b/meta-dstack/recipes-core/images/dstack-rootfs-base.inc
index 496fc6c..af463f4 100644
--- a/meta-dstack/recipes-core/images/dstack-rootfs-base.inc
+++ b/meta-dstack/recipes-core/images/dstack-rootfs-base.inc
@@ -10,6 +10,7 @@ IMAGE_INSTALL = "\
     systemd \
     netbase \
     iptables \
+    nftables \
     docker-moby \
     docker-compose \
     tdx-guest-ko \