curl not working in a container, but curl -4 is

[Lippiece]

Hi. In a Nextcloud AIO container created by quadlet curl doesn't work, and it seems to break the container functionality.

15032bafaaed:/var/www/docker-aio# curl -vvv gooogle.com
* Host gooogle.com:80 was resolved.
* IPv6: 2a00:1450:4010:c0e::68, 2a00:1450:4010:c0e::63, 2a00:1450:4010:c0e::67, 2a00:1450:4010:c0e::93
* IPv4: (none)
*   Trying [2a00:1450:4010:c0e::68]:80...
* Immediate connect fail for 2a00:1450:4010:c0e::68: Address not available
*   Trying [2a00:1450:4010:c0e::63]:80...
* Immediate connect fail for 2a00:1450:4010:c0e::63: Address not available
*   Trying [2a00:1450:4010:c0e::67]:80...
* Immediate connect fail for 2a00:1450:4010:c0e::67: Address not available
*   Trying [2a00:1450:4010:c0e::93]:80...
* Immediate connect fail for 2a00:1450:4010:c0e::93: Address not available
* Failed to connect to gooogle.com port 80 after 2002 ms: Couldn't connect to server
* Closing connection
curl: (7) Failed to connect to gooogle.com port 80 after 2002 ms: Couldn't connect to server

Can someone hint me where to look for solution? I suspect this is related to ipv6 configuration. In my network, I don't have ipv6.

I'm using this quadlet:

  [Unit]
  Description=Nextcloud AIO Master Container
  Documentation=https://github.com/nextcloud/all-in-one/blob/main/docker-rootless.md
  After=local-fs.target
  Requires=podman.socket
  
  [Container]
  ContainerName=nextcloud-aio-mastercontainer
  Image=docker.io/nextcloud/all-in-one:latest
  Network=bridge
  SecurityLabelDisable=true
  AutoUpdate=registry
  
  PublishPort=11001:8080
  PublishPort=4001:8000
  
  Volume=nextcloud_aio_mastercontainer:/mnt/docker-aio-config
  Volume=/run/user/1000/podman/podman.sock:/var/run/docker.sock
  
  Environment=APACHE_PORT=11000
  Environment=APACHE_IP_BINDING=0.0.0.0
  Environment=WATCHTOWER_DOCKER_SOCKET_PATH=/run/user/1000/podman/podman.sock
  Environment=SKIP_DOMAIN_VALIDATION=true
  
  [Install]
  WantedBy=multi-user.target default.target

And this is podman info:

Details

host:
  arch: arm64
  buildahVersion: 1.36.0
  cgroupControllers:
  - cpu
  - pids
  cgroupManager: systemd
  cgroupVersion: v2
  conmon:
    package: /usr/bin/conmon is owned by conmon 1:2.1.12-1
    path: /usr/bin/conmon
    version: 'conmon version 2.1.12, commit: e8896631295ccb0bfdda4284f1751be19b483264'
  cpuUtilization:
    idlePercent: 99.96
    systemPercent: 0.02
    userPercent: 0.02
  cpus: 4
  databaseBackend: sqlite
  distribution:
    distribution: archarm
    version: unknown
  eventLogger: journald
  freeLocks: 2042
  hostname: cumulonimbus
  idMappings:
    gidmap:
    - container_id: 0
      host_id: 1000
      size: 1
    - container_id: 1
      host_id: 2000
      size: 1
    - container_id: 2
      host_id: 100000
      size: 65536
    uidmap:
    - container_id: 0
      host_id: 1000
      size: 1
    - container_id: 1
      host_id: 100000
      size: 65536
  kernel: 6.6.33-1-rpi-16k
  linkmode: dynamic
  logDriver: journald
  memFree: 6337708032
  memTotal: 8441970688
  networkBackend: netavark
  networkBackendInfo:
    backend: netavark
    dns:
      package: /usr/lib/podman/aardvark-dns is owned by aardvark-dns 1.11.0-1
      path: /usr/lib/podman/aardvark-dns
      version: aardvark-dns 1.11.0
    package: /usr/lib/podman/netavark is owned by netavark 1.11.0-2
    path: /usr/lib/podman/netavark
    version: netavark 1.11.0
  ociRuntime:
    name: crun
    package: /usr/bin/crun is owned by crun 1.15-1
    path: /usr/bin/crun
    version: |-
      crun version 1.15
      commit: e6eacaf4034e84185fd8780ac9262bbf57082278
      rundir: /run/user/1000/crun
      spec: 1.0.0
      +SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +CRIU +YAJL
  os: linux
  pasta:
    executable: /usr/bin/pasta
    package: /usr/bin/pasta is owned by passt 2024_06_07.8a83b53-1
    version: |
      pasta 2024_06_07.8a83b53
      Copyright Red Hat
      GNU General Public License, version 2 or later
        <https://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
      This is free software: you are free to change and redistribute it.
      There is NO WARRANTY, to the extent permitted by law.
  remoteSocket:
    exists: true
    path: /run/user/1000/podman/podman.sock
  rootlessNetworkCmd: pasta
  security:
    apparmorEnabled: false
    capabilities: CAP_CHOWN,CAP_DAC_OVERRIDE,CAP_FOWNER,CAP_FSETID,CAP_KILL,CAP_NET_BIND_SERVICE,CAP_SETFCAP,CAP_SETGID,CAP_SETPCAP,CAP_SETUID,CAP_SYS_CHROOT
    rootless: true
    seccompEnabled: true
    seccompProfilePath: /etc/containers/seccomp.json
    selinuxEnabled: false
  serviceIsRemote: false
  slirp4netns:
    executable: ""
    package: ""
    version: ""
  swapFree: 0
  swapTotal: 0
  uptime: 20h 22m 17.00s (Approximately 0.83 days)
  variant: v8
plugins:
  authorization: null
  log:
  - k8s-file
  - none
  - passthrough
  - journald
  network:
  - bridge
  - macvlan
  - ipvlan
  volume:
  - local
registries:
  search:
  - docker.io
store:
  configFile: /home/lippiece/.config/containers/storage.conf
  containerStore:
    number: 3
    paused: 0
    running: 3
    stopped: 0
  graphDriverName: overlay
  graphOptions: {}
  graphRoot: /home/lippiece/.local/share/containers/storage
  graphRootAllocated: 511899426816
  graphRootUsed: 11690831872
  graphStatus:
    Backing Filesystem: btrfs
    Native Overlay Diff: "true"
    Supports d_type: "true"
    Supports shifting: "false"
    Supports volatile: "true"
    Using metacopy: "false"
  imageCopyTmpDir: /var/tmp
  imageStore:
    number: 5
  runRoot: /run/user/1000/containers
  transientStore: false
  volumePath: /home/lippiece/.local/share/containers/storage/volumes
version:
  APIVersion: 5.1.1
  Built: 1717546137
  BuiltTime: Wed Jun  5 00:08:57 2024
  GitCommit: bda6eb03dcbcf12a5b7ae004c1240e38dd056d24-dirty
  GoVersion: go1.22.3
  Os: linux
  OsArch: linux/arm64
  Version: 5.1.1

[Lippiece]

Resolved by adding

[Container]
...
DNS=8.8.8.8