[Podman] Re: Macvlan

26 Feb 2021

      On 2021-02-25 16:03 -0500, Rusty Sapper wrote:
...
I’m having trouble setting up a macvlan.  I created my config under
/etc/cni/net.d and can successfully start my continater with the macvlan
network.
However, when I exec into the container, it has no network access to
anything except itself.  I apologize, I'm new to podman.  I need to be able
to ssh into other hosts(jenkins nodes) to run tests.  I am unable to use
the host network due to other requirements.
Any help would be appreciated.  here is my macvlan config:
{
  "cniVersion": "0.4.0",
  "name": "testmac1",
  "plugins": [
     {
        "type": "macvlan",
        "master": "eno1np0",
        "ipam": {
           "type": "host-local",
           "routes": [
              {
                 "dst": "0.0.0.0/0"
              }
           ],
           "ranges": [
               [
                   {
                       "subnet": "10.89.0.0/24",
                       "gateway": "10.89.0.1"
                   }
               ]
           ]
        }
     },
     {
         "type": "portmap",
         "capabilities": {
           "portMappings": true
         }
     }
  ]
}
~
Hello,
although I admit I do not know what am I doing, I got externally
accessible containers via macvlan working. I do not have a "portmap"
plugin, but mine config have this:

     {
       "type": "tuning",
       "capabilities": {
         "mac": true
       }
     }

Whole config that works for me (as an ansible template) looks like this:

     {
       "cniVersion": "0.4.0",
       "name": "macvlanprivate",
       "plugins": [
         {
           "type": "macvlan",
           "master": "ens4",
           "ipam": {
             "type": "host-local",
             "ranges": [
               [
                 {
                   "subnet": "{{ (private_ip + '/' + private_netmask) | ipaddr('0') }}",
                   "gateway": "{{ private_gw }}",
                   "rangeStart": "{{ (private_ip + '/' + containers_netmask) | ipaddr('1') | ipaddr('address') }}",
                   "rangeEnd": "{{ (private_ip + '/' + containers_netmask) | ipaddr('-4') | ipaddr('address') }}"
                 }
               ]
             ],
             "routes": [
               {
                 "dst": "0.0.0.0/0"
               }
             ]
           }
         },
         {
           "type": "tuning",
           "capabilities": {
             "mac": true
           }
         }
       ]
     }

Also can you ping your 10.89.0.1 from your container host? Are you
running your host with:

     podman run --net testmac1 ...

Is following showing your network config?

     podman network ls

Can you see IP in:

     podman inspect --format "{{.NetworkSettings.Networks.testmac1.IPAddress}}" "<container>"

What does `ip a` and `ip r` say in the container?

Just trying obvious as nobody answered yet :) Feel free to ignore me.

Regards,
Jan

-- 
Jan Hutar   Performance Engineering
jhutar@redhat.com     Red Hat, Inc.

[Podman] Re: Macvlan

Jan Hutař