Podman 5.0.1 can no longer connect to services running on container host on the default route IP address #22502
Comments
|
see the pasta section here https://blog.podman.io/2024/03/podman-5-0-breaking-changes-in-detail/ Although I thought I fixed the host.containers.internal problem but I guess it was only fixed for |
Luap99
added
network
|
I close this a dup of #19213 as it has much more info on what needs to be done to fix it properly but it will need pasta fixes if there are no other ips on the host |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Issue Description
I have a service that runs in a different set of containers on my workstation and I can no longer connect to it's ports that are bound to the main network interface when using a pod or container that is connected to shared podman network.
This all broke when I upgraded to Fedora 40 which has podman 5.0.1. Everything worked as expected with Fedora 39 with podman
podman-4.9.4-1.fc39You can see the port is closed when trying to scan it with nmap:
When you nmap the default route IP you only see open ports from the containers and pods that are attached to the podman network.
If you hit an IP address on a different interface you can access the port just fine:
Steps to reproduce the issue
Steps to reproduce the issue
Describe the results you received
I am unable to connect to services running on the default route IP address on the container host from containers.
Describe the results you expected
The same behavior as in
podman-4.9.4-1.fc39.podman info output
Podman in a container
No
Privileged Or Rootless
Rootless
Upstream Latest Release
Yes
Additional environment details
Here is the podman network I am using:
[ { "name": "traefik", "id": "211d3797abd8f70f3cef4ab592fbb0244de80588acc2690b630996f81e73bbb7", "driver": "bridge", "network_interface": "podman1", "created": "2024-04-24T15:36:12.794689453-05:00", "subnets": [ { "subnet": "10.89.0.0/24", "gateway": "10.89.0.1" } ], "ipv6_enabled": false, "internal": false, "dns_enabled": true, "ipam_options": { "driver": "host-local" }, "containers": { "0d8fe3092c2ae6f33b7776aee5b1e1bcfe68308212023f80152f526f6e0a4a66": { "name": "traefik-pod", "interfaces": { "eth0": { "subnets": [ { "ipnet": "10.89.0.40/24", "gateway": "10.89.0.1" } ], "mac_address": "b6:1f:6f:f5:6b:13" } } }, "21a936c4438f1c81716ef41d0f96da8d904d9200f29b238dde9913e03e1855fd": { "name": "lame-pod", "interfaces": { "eth0": { "subnets": [ { "ipnet": "10.89.0.36/24", "gateway": "10.89.0.1" } ], "mac_address": "62:dc:28:a0:5d:3b" } } }, "257c36f5213bc70a87038f917d71a7449ecf01daa7cf904ca977f5cd43be027d": { "name": "coredns-pod", "interfaces": { "eth0": { "subnets": [ { "ipnet": "10.89.0.31/24", "gateway": "10.89.0.1" } ], "mac_address": "d6:f2:f5:65:e2:b5" } } }, "4caba4b6f8f78bc61a18058338cac98d460149cb8fe9402af34fd32ebc076be2": { "name": "stepca-pod", "interfaces": { "eth0": { "subnets": [ { "ipnet": "10.89.0.37/24", "gateway": "10.89.0.1" } ], "mac_address": "52:a4:f6:61:1a:be" } } }, "7cf21f3253434d698d8254c800c6adfbaf3f3c27e5735460e111f14b4cb209cd": { "name": "hass-nodered", "interfaces": { "eth0": { "subnets": [ { "ipnet": "10.89.0.53/24", "gateway": "10.89.0.1" } ], "mac_address": "32:2c:05:66:19:0b" } } }, "fefa23308be9d9048a26ee900e77e1d3b3be90d5b246a1c1f1b7d1e76982940c": { "name": "paperless-pod", "interfaces": { "eth0": { "subnets": [ { "ipnet": "10.89.0.35/24", "gateway": "10.89.0.1" } ], "mac_address": "a2:a0:ea:49:11:53" } } } } } ]Additional information
No response
The text was updated successfully, but these errors were encountered: