-
Notifications
You must be signed in to change notification settings - Fork 2.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
podman-remote defaults to client host's default network mode (slirp4netns when not running as root) #14368
Comments
I believe we fixed this in 4.1 - can you try 4.1.0? |
I'm assuming the bug is in |
I don't think this is fixed. The problem is that the network option is passed on the client side into the spegcen format. |
When podman-remote is used we should not resolve the default network mode on the client. Defaults should be set on the server. In this case this is important because we have different defaults for root/rootless. So when the client is rootless and the server is root we must pick the root default. Note that this already worked when --network was set since we did not parsed the flag in this case. To reproduce you need --network=default. Also removed a unused function. [NO NEW TESTS NEEDED] I tested it manually but I am not sure how I can hook a test like this up in CI. The client would need to run as rootless and the server as root or the other way around. Fixes containers#14368 Signed-off-by: Paul Holzinger <[email protected]>
When podman-remote is used we should not resolve the default network mode on the client. Defaults should be set on the server. In this case this is important because we have different defaults for root/rootless. So when the client is rootless and the server is root we must pick the root default. Note that this already worked when --network was set since we did not parsed the flag in this case. To reproduce you need --network=default. Also removed a unused function. [NO NEW TESTS NEEDED] I tested it manually but I am not sure how I can hook a test like this up in CI. The client would need to run as rootless and the server as root or the other way around. Fixes containers#14368 Signed-off-by: Paul Holzinger <[email protected]>
Is this a BUG REPORT or FEATURE REQUEST? (leave only one on its own line)
/kind bug
Description
podman-remote
seems to be defaulting theHostConfig.NetworkMode
value for containers based on whether the client side is root, rather than the remote.Steps to reproduce the issue:
CONTAINER_HOST='root@my-host/run/podman/podman.sock'
podman-remote run -it alpine
podman-remote inspect <ctr> | jq .[0].HostConfig.NetworkMode
Describe the results you received:
Describe the results you expected:
The same behaviour as running podman inside the remote host, i.e. use 'bridge' network mode by default:
Output of
podman version
:Output of
podman info --debug
:Package info (e.g. output of
rpm -q podman
orapt list podman
):On the remote host (
podman-remote
is a static binary that's been downloaded):Have you tested with the latest version of Podman and have you checked the Podman Troubleshooting Guide? (https://github.com/containers/podman/blob/main/troubleshooting.md)
No (sorry)
The text was updated successfully, but these errors were encountered: