Connecting to IMDSv2 from podman container on EC2 Mac

[gcooney]

Hi! I'm trying to run podman on a mac2.metal (M1 series) EC2 instance and running into issues connecting to the metadata server from containers.

Simplified steps that reproduce the issue:

1. Create the podman machine: podman machine init --cpus 2 -m 2048 --disk-size 10 --image-path stable --timezone local.
2. Start the machine podman machine start
3. Run a basic container: podman run -it ubuntu
4. install curl: apt update && apt install curl
5. Try to connect to metadata: curl -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metadata-token-ttl-seconds: 21600"

When I run the curl I get curl: (7) Failed to connect to 169.254.169.254 port 80 after 0 ms: Connection refused. I did try increasing the hop limit for the metadata service which didn't seem to change anything although I'd expect a different error if than the above if that was the issue.

It looks like the metadata server uril just isn't resolvable from inside the container. Is that expected? If so, any tips on network or other configuration I should look at? Anyone else succesfully connecting to the metadata service from containers on ec2 macs?