Use "cni" as a default rootless_networking method at least in macOS

[theomega]

If I start an nginx container using

$ podman run --rm --name nginx -p 80 docker.io/library/nginx

and then grab the port:

$ podman port nginx
80/tcp -> 0.0.0.0:36985

how do I connect to this? So which IP am I supposed to use? I tried the IP 192.168.127.2 which the VM has associated (found out via ip a s inside podman machine ssh), but that does not work, the connection times out.

What am I missing?

[simnalamburt]

Actually it's podman's bug : containers#11396

You can add this to your ~/.config/containers/containers.conf

[containers]
rootless_networking = "cni"

References

• [podman machine] Port auto-forwarding does not work in rootless mode and macOS containers/podman#11396

[simnalamburt]

@theomega Let me patch podman-apple-silicon to make this change by default on macOS. I'll ping you again when I have a next release

[theomega]

For reference, after modifying the containers.conf, you need to make sure that there is a network of the name podman you can create one using podman network create podman.

Also, to access a container from your host machine (so from i.e. Safari), you use localhost as hostname and the port you grab from podman ports -a. Accessing the port on the VM IP (192.168.127.2) does not work from the host.

So thanks @simnalamburt that helps.

[simnalamburt]

containers#11552 has been merged

TODO:

• Release podman-apple-silicon again using latest main branch

[simnalamburt]

NOTE: upstream podman's Apple Silicon support is almost finished. Once containers#11449 is merged and released, you won't even need this forked version of podman anyway.

[simnalamburt]

@theomega Can you try brew install --HEAD podman? It should use cni as a default rootless network method and support qemu-hvf by default.

[theomega]

To test this, should I delete ~/.config/containers/? Or just remove the rootless_networking = "cni" line?

[simnalamburt]

You can do either, or you can even just leave those configs.

…

On Wed, Sep 15, 2021 at 8:39 PM Dominik Bruhn ***@***.***> wrote: To test this, should I delete ~/.config/containers/? Or just remove the rootless_networking = "cni" line? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#4 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ABB235NMLGPZMY6ZZ2XVDTDUCCAXZANCNFSM5D2BHBHQ> .