I’m having trouble setting up a macvlan. I created my config under /etc/cni/net.d and can successfully start my continater with the macvlan network. However, when I exec into the container, it has no network access to anything except itself. I apologize, I'm new to podman. I need to be able to ssh into other hosts(jenkins nodes) to run tests. I am unable to use the host network due to other requirements. Any help would be appreciated. here is my macvlan config: { "cniVersion": "0.4.0", "name": "testmac1", "plugins": [ { "type": "macvlan", "master": "eno1np0", "ipam": { "type": "host-local", "routes": [ { "dst": "0.0.0.0/0" } ], "ranges": [ [ { "subnet": "10.89.0.0/24", "gateway": "10.89.0.1" } ] ] } }, { "type": "portmap", "capabilities": { "portMappings": true } } ] } ~

I’m having trouble setting up a macvlan.  I created my config under /etc/cni/net.d and can successfully start my continater with the macvlan network. However, when I exec into the container, it has no network access to anything except itself.  I apologize, I'm new to podman.  I need to be able to ssh into other hosts(jenkins nodes) to run tests.  I am unable to use the host network due to other requirements. Any help would be appreciated.  here is my macvlan config: {    "cniVersion": "0.4.0",    "name": "testmac1",    "plugins": [       {          "type": "macvlan",          "master": "eno1np0",          "ipam": {             "type": "host-local",             "routes": [                {                   "dst": "0.0.0.0/0"                }             ],             "ranges": [                 [                     {                         "subnet": "10.89.0.0/24",                         "gateway": "10.89.0.1"                     }                 ]             ]          }       },       {           "type": "portmap",           "capabilities": {             "portMappings": true           }       }    ] } ~ _______________________________________________ Podman mailing list -- podman(a)lists.podman.io To unsubscribe send an email to podman-leave(a)lists.podman.io

On 2021-02-25 16:03 -0500, Rusty Sapper wrote: >I’m having trouble setting up a macvlan. I created my config under >/etc/cni/net.d and can successfully start my continater with the macvlan >network. > >However, when I exec into the container, it has no network access to >anything except itself. I apologize, I'm new to podman. I need to be able >to ssh into other hosts(jenkins nodes) to run tests. I am unable to use >the host network due to other requirements. > >Any help would be appreciated. here is my macvlan config: >{ > "cniVersion": "0.4.0", > "name": "testmac1", > "plugins": [ > { > "type": "macvlan", > "master": "eno1np0", > "ipam": { > "type": "host-local", > "routes": [ > { > "dst": "0.0.0.0/0" > } > ], > "ranges": [ > [ > { > "subnet": "10.89.0.0/24", > "gateway": "10.89.0.1" > } > ] > ] > } > }, > { > "type": "portmap", > "capabilities": { > "portMappings": true > } > } > ] >} >~ Hello, although I admit I do not know what am I doing, I got externally accessible containers via macvlan working. I do not have a "portmap" plugin, but mine config have this: { "type": "tuning", "capabilities": { "mac": true } } Whole config that works for me (as an ansible template) looks like this: { "cniVersion": "0.4.0", "name": "macvlanprivate", "plugins": [ { "type": "macvlan", "master": "ens4", "ipam": { "type": "host-local", "ranges": [ [ { "subnet": "{{ (private_ip + '/' + private_netmask) | ipaddr('0') }}", "gateway": "{{ private_gw }}", "rangeStart": "{{ (private_ip + '/' + containers_netmask) | ipaddr('1') | ipaddr('address') }}", "rangeEnd": "{{ (private_ip + '/' + containers_netmask) | ipaddr('-4') | ipaddr('address') }}" } ] ], "routes": [ { "dst": "0.0.0.0/0" } ] } }, { "type": "tuning", "capabilities": { "mac": true } } ] } Also can you ping your 10.89.0.1 from your container host? Are you running your host with: podman run --net testmac1 ... Is following showing your network config? podman network ls Can you see IP in: podman inspect --format "{{.NetworkSettings.Networks.testmac1.IPAddress}}" "<container>" What does `ip a` and `ip r` say in the container? Just trying obvious as nobody answered yet :) Feel free to ignore me. Regards, Jan -- Jan Hutar Performance Engineering jhutar(a)redhat.com Red Hat, Inc.