Hello,
I finally found some time to address Paul's suggestions about
pasta's integration for Podman for user-mode networking, namely:
- binding ports to specific addresses is now supported
- no port forwarding is enabled by default
- if the user doesn't explicitly share ports from the container
namespace over the loopback interface, the init namespace is not
reachable over it
The updated patch is at:
https://passt.top/passt/tree/contrib/podman/0001-libpod-Add-pasta-network...
and the updated Podman demo at:
https://passt.top/passt/about/#pasta_2
which actually shows a bigger throughput improvement over slirp4netns
for non-loopback connections now, after I fixed an issue in the demo
script.
About packaging: I filed an RFP for Debian at:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010498
and added passt to Fedora's maintainers wishlist -- I'm now looking for
packagers more actively.
Let me know if you have questions or comments. Thanks!
--
Stefano