diff --git a/comac-cu/templates/statefulset-accelleran.yaml b/comac-cu/templates/statefulset-accelleran.yaml
index f0a88f0..71f22dd 100644
--- a/comac-cu/templates/statefulset-accelleran.yaml
+++ b/comac-cu/templates/statefulset-accelleran.yaml
@@ -31,17 +31,23 @@
       labels:
         app: {{ .Values.cu.name }}
     spec:
+      terminationGracePeriodSeconds: 1
       initContainers:
-      - name: init-iptables
+      - name: cu-init
         image: {{ .Values.cu.accelleran.images.init }}
+        securityContext:
+          privileged: true
+          runAsUser: 0
         command: [ "sh", "-c"]
         args:
-        - iptables -I OUTPUT -p icmp --icmp-type destination-unreachable -j DROP;
-        securityContext:
-          capabilities:
-            add:
-              - NET_ADMIN
-      terminationGracePeriodSeconds: 1
+        - >
+          iptables -I OUTPUT -p icmp --icmp-type destination-unreachable -j DROP;
+          if chroot /mnt/host-rootfs modinfo nf_conntrack_proto_sctp > /dev/null 2>&1; then \
+              chroot /mnt/host-rootfs modprobe nf_conntrack_proto_sctp; \
+          fi; \
+        volumeMounts:
+        - name: host-rootfs
+          mountPath: /mnt/host-rootfs
       containers:
       - name: nats
         image: {{ .Values.cu.accelleran.images.nats }}
@@ -127,3 +133,6 @@
             items:
               - key: bootstrap.txt
                 path: bootstrap.txt
+        - name: host-rootfs
+          hostPath:
+            path: /