port bindings are not yet supported by rootless containers
Hello, I am interesting to run a container with port redirects. I was trying run nginx container with ports redirect likes 80:1024 80:1200 80:81... But It's does give me the same error always. port bindings are not yet supported by rootless containers My OS is CentOS 8, but I've tried with Fedora 31 beta and It's same happens. Can you help me? Thanks.
Álvaro Castillo <sincorchetes@gmail.com> writes:
Hello,
I am interesting to run a container with port redirects. I was trying run nginx container with ports redirect likes 80:1024 80:1200 80:81...
But It's does give me the same error always. port bindings are not yet supported by rootless containers
An unprivileged user cannot use port < 1024. We document the differences between rootless and root containers here: https://github.com/containers/libpod/blob/master/rootless.md To solve the issue you have reported, you can either try to use a port bigger than 1023; or as root, tweak the value in /proc/sys/net/ipv4/ip_unprivileged_port_start. Giuseppe
Giuseppe Scrivano wrote on 29.10.2019 13:54 (GMT +01:00):
An unprivileged user cannot use port < 1024.
We document the differences between rootless and root containers here: https://github.com/containers/libpod/blob/master/rootless.md
To solve the issue you have reported, you can either try to use a port bigger than 1023; or as root, tweak the value in /proc/sys/net/ipv4/ip_unprivileged_port_start.
Giuseppe
I can replicate this on CentOS 8. I guess in this specific case it has to do with the version of podman available for CentOS. See: $ podman run -d -p 8080:8080 nginx:latest port bindings are not yet supported by rootless containers In the case of Fedora it actually has to do with the privileged ports, I guess. -- Giuseppe Sforza
On 2019-10-29 21:40, Giuseppe Sforza wrote:
Giuseppe Scrivano wrote on 29.10.2019 13:54 (GMT +01:00):
An unprivileged user cannot use port < 1024.
We document the differences between rootless and root containers here: https://github.com/containers/libpod/blob/master/rootless.md
To solve the issue you have reported, you can either try to use a port bigger than 1023; or as root, tweak the value in /proc/sys/net/ipv4/ip_unprivileged_port_start.
Giuseppe
I can replicate this on CentOS 8. I guess in this specific case it has to do with the version of podman available for CentOS.
See: $ podman run -d -p 8080:8080 nginx:latest port bindings are not yet supported by rootless containers
In the case of Fedora it actually has to do with the privileged ports, I guess.
-- Giuseppe Sforza
This will be resolved once RHEL/CentOS 8.1 are available. Podman 1.0, as shipped in Cent/RHEL 8.0, is very old, and rootless support was still in beta at that point. The 1.4.2 version shipping in 8.1 is a lot more recent, and rootless is fully supported, including port bindings. Thanks, Matt Heon
_______________________________________________ Podman mailing list -- podman@lists.podman.io To unsubscribe send an email to podman-leave@lists.podman.io
Matt Heon wrote on 30.10.2019 14:52 (GMT +01:00):
This will be resolved once RHEL/CentOS 8.1 are available. Podman 1.0, as shipped in Cent/RHEL 8.0, is very old, and rootless support was still in beta at that point. The 1.4.2 version shipping in 8.1 is a lot more recent, and rootless is fully supported, including port bindings.
Thanks, Matt Heon
Any ETA on the release of said versions? -- Giuseppe Sforza
On 10/30/19 10:37 AM, Giuseppe Sforza wrote:
Matt Heon wrote on 30.10.2019 14:52 (GMT +01:00):
This will be resolved once RHEL/CentOS 8.1 are available. Podman 1.0, as shipped in Cent/RHEL 8.0, is very old, and rootless support was still in beta at that point. The 1.4.2 version shipping in 8.1 is a lot more recent, and rootless is fully supported, including port bindings.
Thanks, Matt Heon Any ETA on the release of said versions?
RHEL8.1 is supposed to be released in November.
participants (5)
-
Daniel Walsh -
Giuseppe Scrivano -
Giuseppe Sforza -
Matt Heon -
Álvaro Castillo