Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

podman-pod-create --network slirp4netns is unsupported for root containers #6097

Closed
zem opened this issue May 5, 2020 · 7 comments · Fixed by #7783
Closed

podman-pod-create --network slirp4netns is unsupported for root containers #6097

zem opened this issue May 5, 2020 · 7 comments · Fixed by #7783
Assignees
Labels
Good First Issue This issue would be a good issue for a first time contributor to undertake. In Progress This issue is actively being worked by the assignee, please do not work on this at this time. kind/feature Categorizes issue or PR as related to a new feature. locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments.

Comments

@zem
Copy link

zem commented May 5, 2020

I am not sure why that switch is simply missing, it is supported when you create an unpriviledged pod so why not be able to do slirp4netns as root?

Reasons:

  • I cant access a port from another container that is published on the host, I probably just dont get it yet how to resolve the IP address other pods elegantly out of the box.
  • Published ports on bridged networking do not bind on ipv6 slirp4netns does and translates.
@mheon
Copy link
Member

mheon commented May 5, 2020

We originally only implemented a small subset of --network for pods (because of the way creating the infra container is handled, parsing needs to be very different for both, and rewriting the complicated parsing for --network was put off to later). This definitely sounds doable, though, it would just need some additions to the existing parsing logic.

@mheon mheon added the kind/feature Categorizes issue or PR as related to a new feature. label Jun 2, 2020
@github-actions
Copy link

github-actions bot commented Jul 4, 2020

A friendly reminder that this issue had no activity for 30 days.

@rhatdan
Copy link
Member

rhatdan commented Sep 10, 2020

@mheon Any update on this issue?

@mheon
Copy link
Member

mheon commented Sep 10, 2020

No. Should be fairly simple to implement, but I've never found time.

@rhatdan rhatdan added the Good First Issue This issue would be a good issue for a first time contributor to undertake. label Sep 11, 2020
@rhatdan
Copy link
Member

rhatdan commented Sep 11, 2020

@ashley-cui PTAL

@ashley-cui ashley-cui added In Progress This issue is actively being worked by the assignee, please do not work on this at this time. and removed stale-issue labels Sep 21, 2020
@ashley-cui
Copy link
Member

Any container that joins the a slirp pod would also has slirp as the network mode, correct?

@mheon
Copy link
Member

mheon commented Sep 21, 2020

The containers except the infra container should not be different - the containers, except the infra, will still join the infra container's network namespace.

@github-actions github-actions bot added the locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments. label Sep 22, 2023
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Sep 22, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Good First Issue This issue would be a good issue for a first time contributor to undertake. In Progress This issue is actively being worked by the assignee, please do not work on this at this time. kind/feature Categorizes issue or PR as related to a new feature. locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

4 participants