How does one use the static IPv6 (--ip6) option in combination with netavark/aardvark-dns?

[Folaht]

I'm pretty sure /etc/cni/net.d/xx-podman.conflist has now become useless.
But where's the standard aardvark/netavark configuration file?

$ sudo podman network ls
NETWORK ID    NAME        DRIVER
2f259bab93aa  podman      bridge

My command:

sudo podman run --name root_node --network podman --restart unless-stopped \
--publish [<ipv6t>]:12000-12015:12000-12015/udp \
--env CON_IP=[<subnet>::2] \
--env CON_PORT=12000 \
--env PUB_IP=[<ipv6>] \
--env PUB_PORT=12000 \
--env VERBOSE=-vv \
--ip6 <subnet>::2 \
--mount type=bind,source=/home/folaht/.local/share/safe/rf_cli/,destination=/root/.safe/cli/ \
-d ghcr.io/safenetwork-community/rf-rootnode-ipv6:latest

[Luap99]

The default network is in memory only be default. However you can create a file on disk which will be used instead if it exists.

use podman network inspect podman | jq .[] > $path where path is /etc/containers/networks/podman.json for root and ~/.local/share/containers/storage/networks/podman.json for rootless. This is the netavark default at least. It can be changed in containers.conf.
Now you can edit this file.

[lebe-dev]

How to enable dns resolution by default? I can't find property dns_enabled (or look like this) in containers.conf.

[lebe-dev]

I have docker-compose file:

version: "3"

services:
  loki:
    container_name: loki
    restart: always
    image: grafana/loki:2.6.1
    ports:
      - "3100:3100"
    command: -config.file=/etc/loki/local-config.yaml

  promtail:
    container_name: promtail
    restart: always
    image: grafana/promtail:2.6.1
    volumes:
      - /var/log:/var/log
    command: -config.file=/etc/promtail/config.yml

  grafana:
    restart: always
    container_name: grafana
    image: grafana/grafana:latest
    ports:
      - "3200:3000"

Started:

$ sudo docker-compose up -d
[+] Running 4/4
 ⠿ Network loki-stack_default  Created                                                                                                                                                                                                                                                                        
 ⠿ Container grafana           Started                                                                                                                                                                                                                                                                        
 ⠿ Container loki              Started                                                                                                                                                                                                                                                                         
 ⠿ Container promtail          Started

Also created /etc/containers/networks/loki-stack_default.conf:

{
        "name": "loki-stack_default",
        "id": "95897ba3a2db7ae4ecb8ccd01b9178ac50b9b483b367e036b9bf7c96780c8880",
        "driver": "bridge",
        "network_interface": "podman3",
        "created": "2022-08-17T17:08:11.205721093+03:00",
        "subnets": [
            {
                "subnet": "10.89.2.0/24",
                "gateway": "10.89.2.1"
            }
        ],
        "ipv6_enabled": false,
        "internal": false,
        "dns_enabled": true,
        "labels": {
            "com.docker.compose.network": "default",
            "com.docker.compose.project": "loki-stack",
            "com.docker.compose.version": "2.9.0"
        },
        "ipam_options": {
            "driver": "host-local"
        }
    }

For debug connectivity i'm useing nicolaka/netshoot:

$ sudo podman run -it --rm --net container:grafana nicolaka/netshoot

curl -i http://loki/
curl: (6) Could not resolve host: loki

Resolution doesn't work.

Podman debug output:

host:
  arch: amd64
  buildahVersion: 1.26.1
  cgroupControllers:
  - cpuset
  - cpu
  - io
  - memory
  - hugetlb
  - pids
  - rdma
  - misc
  cgroupManager: systemd
  cgroupVersion: v2
  conmon:
    package: /usr/bin/conmon is owned by conmon 1:2.1.3-1
    path: /usr/bin/conmon
    version: 'conmon version 2.1.3, commit: ab52a597278b20173440140cd810dc9fa8785c93'
  cpuUtilization:
    idlePercent: 99.61
    systemPercent: 0.16
    userPercent: 0.22
  cpus: 8
  distribution:
    distribution: arch
    version: unknown
  eventLogger: journald
  hostname: homelab
  idMappings:
    gidmap: null
    uidmap: null
  kernel: 5.19.1-arch2-1
  linkmode: dynamic
  logDriver: journald
  memFree: 28881338368
  memTotal: 32542593024
  networkBackend: netavark
  ociRuntime:
    name: crun
    package: /usr/bin/crun is owned by crun 1.5-1
    path: /usr/bin/crun
    version: |-
      crun version 1.5
      commit: 54ebb8ca8bf7e6ddae2eb919f5b82d1d96863dea
      spec: 1.0.0
      +SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +CRIU +YAJL
  os: linux
  remoteSocket:
    exists: true
    path: /run/podman/podman.sock
  security:
    apparmorEnabled: false
    capabilities: CAP_CHOWN,CAP_DAC_OVERRIDE,CAP_FOWNER,CAP_FSETID,CAP_KILL,CAP_NET_BIND_SERVICE,CAP_SETFCAP,CAP_SETGID,CAP_SETPCAP,CAP_SETUID,CAP_SYS_CHROOT
    rootless: false
    seccompEnabled: true
    seccompProfilePath: /etc/containers/seccomp.json
    selinuxEnabled: false
  serviceIsRemote: false
  slirp4netns:
    executable: /usr/bin/slirp4netns
    package: /usr/bin/slirp4netns is owned by slirp4netns 1.2.0-1
    version: |-
      slirp4netns version 1.2.0
      commit: 656041d45cfca7a4176f6b7eed9e4fe6c11e8383
      libslirp: 4.7.0
      SLIRP_CONFIG_VERSION_MAX: 4
      libseccomp: 2.5.4
  swapFree: 0
  swapTotal: 0
  uptime: 1h 29m 57.03s (Approximately 0.04 days)
plugins:
  log:
  - k8s-file
  - none
  - passthrough
  - journald
  network:
  - bridge
  - macvlan
  volume:
  - local
registries:
  docker.io:
    Blocked: false
    Insecure: false
    Location: docker.io
    MirrorByDigestOnly: false
    Mirrors: null
    Prefix: docker.io
    PullFromMirror: ""
  search:
  - docker.io
store:
  configFile: /etc/containers/storage.conf
  containerStore:
    number: 4
    paused: 0
    running: 3
    stopped: 1
  graphDriverName: overlay
  graphOptions:
    overlay.mountopt: nodev,metacopy=on
  graphRoot: /var/lib/containers/storage
  graphRootAllocated: 471415693312
  graphRootUsed: 31402176512
  graphStatus:
    Backing Filesystem: extfs
    Native Overlay Diff: "false"
    Supports d_type: "true"
    Using metacopy: "true"
  imageCopyTmpDir: /var/tmp
  imageStore:
    number: 5
  runRoot: /run/containers/storage
  volumePath: /var/lib/containers/storage/volumes
version:
  APIVersion: 4.1.1
  Built: 1659559968
  BuiltTime: Wed Aug  3 23:52:48 2022
  GitCommit: f73d8f8875c2be7cd2049094c29aff90b1150241-dirty
  GoVersion: go1.19
  Os: linux
  OsArch: linux/amd64
  Version: 4.1.1

[mheon]

Compose should not use the default network, it creates a fresh network (which should have DNS enabled) when required.

[lebe-dev]

@mheon Thanks for explanation. I have created separated config file for non-default network, but dns resolution doesn't work. Any suggestions?

[mheon]

You created a CNI config file, but are using the Netavark backend. Please either use podman network create to make the network, or just include it in the Compose file.