Comment 6 for bug 1893958

LXD depends on the nft tool when iptables-legacy rules are not in use (as the iptables-nft tools do not provide all the functionality it depends on).

However the nft tool is bundled in the snap package so this should be fine.