diff --git a/image/build-image.sh b/image/build-image.sh
index a8f4618..28bf127 100755
--- a/image/build-image.sh
+++ b/image/build-image.sh
@@ -31,7 +31,7 @@ alpine-make-vm-image \
 	--fs-skel-dir    "$OVERLAY_DIR" \
 	--fs-skel-chown  root:root \
 	--script-chroot \
-	--packages       "curl docker openssh alloy" \
+	--packages       "nftables curl docker openssh alloy" \
 	"$IMAGE_FILE" \
 	"$CONFIGURE_SH" | tee $TMP
 
diff --git a/image/configure.sh b/image/configure.sh
index 3be0b3f..73d2d59 100755
--- a/image/configure.sh
+++ b/image/configure.sh
@@ -28,6 +28,7 @@ sed -Ei \
 
 step 'Enable base services'
 rc-update add net.lo boot
+rc-update add nftables boot
 rc-update add net.eth0 default
 rc-update add acpid default
 rc-update add docker default