12:04 p.m.
I think perhaps nobody's replied because we don't have enough
environment details. Such as what OS and version, and what version of
podman is this. It looks like you're using CNI networking, so I'm
guessing this is an older version of podman.
In any case, I am not an expert in these things. But I do find it odd
that you would need/want to use the main 'podman' bridge as a rootless
user in this way. Normally rootless networking works quite well with
slirp4netns. So perhaps figuring out why it's not, is a good starting
place?
Otherwise, more details about the environment and what you're trying to
accomplish would help us answer your questions better.
Chris Evich (he/him), RHCA III
Senior Quality Assurance Engineer
Nearly all opportunities, can only be achieved in the future.
On 8/23/22 09:19, Mikhaël MYARA wrote:
Dear all,
I started with Docker a few weeks ago and understood security issues
coming from the root daemon. I saw that podman was close to Doker (and
it is true, my Dockerfiles worked without modification) and solved this
security issue.
With podman, things work well as long as I use my images / containers
in root mode, using sudo. However nothing works in user mode.
I guess that for security reasons, it would be better, by far, to run
containers in user mode. And I cannot understand how it works.
In root mode, typing "ip a" exhibits an eth0 network card, with an
ip. And when I use this ip with the considered port fron the outside of
the container (i.e. from the main OS), it works
In rootless mode, the same command gives a tap0 interface instead,
with another ip on another sob network I guess.
now if I force the usage of the podman network (in rootless mode),
with --network podman, now I get a eth0 network interface, on the same
sub network as in root mode. It seems to correspond to the cni-podman0
network on the host OS.
However, when I do :
telnet 10.88.0.02 8080
from the podman container, it works, whereas from the host OS, it does
not work, whereas the interface responds to ping from the host.
Can someone help ?
Regards,
Mike
_______________________________________________
Podman mailing list -- podman(a)lists.podman.io
To unsubscribe send an email to podman-leave(a)lists.podman.io