[docker compat] Don't overwrite the NetworkMode from "default" to "br…

…idge" if containers.conf specifies a non-default configuration.

Fixes containers#16915 (only the part about docker client).

Signed-off-by: Romain Geissler <romain.geissler@amadeus.com>

pkg/api/handlers/compat/containers_create.go

@@ -24,6 +24,7 @@ import (
 	"github.com/containers/podman/v4/pkg/rootless"
 	"github.com/containers/podman/v4/pkg/specgen"
 	"github.com/containers/podman/v4/pkg/specgenutil"
+	"github.com/containers/podman/v4/pkg/util"
 	"github.com/containers/storage"
 	"github.com/docker/docker/api/types/mount"
 	"github.com/gorilla/schema"
@@ -262,9 +263,12 @@ func cliOpts(cc handlers.CreateContainerConfig, rtc *config.Config) (*entities.C
 	}
 
 	// special case for NetworkMode, the podman default is slirp4netns for
-	// rootless but for better docker compat we want bridge.
+	// rootless but for better docker compat we want bridge. Do this only we
+	// the default config in containers.conf wasn't overriden to use another
+	// value than the default one: private.
 	netmode := string(cc.HostConfig.NetworkMode)
-	if netmode == "" || netmode == "default" {
+	configDefaultNetNS := util.DefaultContainerConfig().Containers.NetNS
+	if (netmode == "" || netmode == "default") && (configDefaultNetNS == "" || configDefaultNetNS == string(specgen.Default) || configDefaultNetNS == string(specgen.Private)) {
 		netmode = "bridge"
 	}
 

test/apiv2/20-containers.at

@@ -417,6 +417,24 @@ t GET containers/$cid/json 200 \
 
 t DELETE containers/$cid?v=true 204
 
+# test create with default netns="host"
+stop_service
+CONTAINERS_CONF=$TESTS_DIR/containers.no_hosts.conf start_service
+
+# check that the default docker netns "default" is rewritten to "host"
+# when the containers.conf explicitly uses "host"
+t POST containers/create Image=$IMAGE HostConfig='{"NetworkMode":"default"}' 201 \
+  .Id~[0-9a-f]\\{64\\}
+cid=$(jq -r '.Id' <<<"$output")
+t GET containers/$cid/json 200 \
+  .HostConfig.NetworkMode="host"
+
+t DELETE containers/$cid?v=true 204
+
+# Restart with the default containers.conf for next tests.
+stop_service
+start_service
+
 # Test Compat Create with healthcheck, check default values
 t POST containers/create Image=$IMAGE Cmd='["top"]' Healthcheck='{"Test":["true"]}' 201 \
   .Id~[0-9a-f]\\{64\\}

test/apiv2/containers.host-netns.conf

@@ -0,0 +1,2 @@
+[containers]
+netns="host"