Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable ipv6 for rootless users by default #744

Merged
merged 2 commits into from
Sep 17, 2021

Conversation

rhatdan
Copy link
Member

@rhatdan rhatdan commented Aug 25, 2021

Fixes containers/podman#10889

Inspired by @rugk

Signed-off-by: Daniel J Walsh [email protected]

@rhatdan
Copy link
Member Author

rhatdan commented Aug 25, 2021

@rugk @Luap99 @mheon @baude PTAL

@rhatdan
Copy link
Member Author

rhatdan commented Aug 25, 2021

@AkihiroSuda PTAL

Copy link

@rugk rugk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Much better/easier than I could have done it (without extensive instructions/help)! 🙂

Thanks!

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Aug 25, 2021

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: rhatdan, rugk

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@AkihiroSuda
Copy link

AkihiroSuda commented Aug 26, 2021

Looks good, but IPv6 is still experimental on slirp4netns, and maybe we should have some consensus on rootless-containers/slirp4netns#259 (IPv6: hardcoded address fd00::2 violates RFC 4193) before merging this

@AkihiroSuda
Copy link

Also curious, is there any CI that supports IPv6?

@Luap99
Copy link
Member

Luap99 commented Aug 26, 2021

@AkihiroSuda Could you look at containers/podman#11062? It looks the ready fd doesn't wait for ipv6 and ipv6 takes a long time before the link gets the addr. (about 2-3 seconds)

@rhatdan
Copy link
Member Author

rhatdan commented Aug 26, 2021

How do we get slirp4netns not to be experimental, without any users of it. This being disabled by default is not going to lead many people to use ipv6 in rootless mode, especially when only a couple of people in the world had any idea on how to turn it on.

@rhatdan
Copy link
Member Author

rhatdan commented Sep 17, 2021

@Luap99 @mheon now that we have branched for podman 4.0, can we get this in.

Copy link
Member

@Luap99 Luap99 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, one nit. I think it would be good to document all available options in the man page.

@@ -467,7 +467,7 @@ and pods are visible.

Path to the slirp4netns binary.

**network_cmd_options**=[]
**network_cmd_options**=["enable_ipv6=true",]
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@mheon
Copy link
Member

mheon commented Sep 17, 2021

/lgtm

@openshift-ci openshift-ci bot added the lgtm label Sep 17, 2021
@openshift-merge-robot openshift-merge-robot merged commit 8c42ef4 into containers:main Sep 17, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Why is IPv6 disabled for rootless/slirp4netns containers?
6 participants