Cannot access the container running in VM of VirtualBox

[dunmorogher]

Hello!
I am new to Podman and I had Podman installed on the VM (Alma Linux 9.4) with VirtualBox 7.0.18. I configured two network interfaces - One is of NAT Network; another is Host-Only (which I am using for communicating between Host machine and VM)

After all setups, I created one container of httpd service with root user (please see it below...)

I am able to access it from the UI inside of VM with using both localhost:8080 or http://192.168.123.210:8080

However, I could not access it from the Host machine

I am sure the connection between Host machine and VM is working, as I can access the Cockpit in the VM from Host machine

I do not know where I probably made wrong...if you could help and suggest on my issue?

Thanks in advance!

[rhatdan]

Did you configure the host firewall to open those ports. This is something gvproxy is handling in podman machine.

[rhatdan]

They should be able to, unless they are fighting over iptables rules.

[dunmorogher]

Yeah, but I did not check it with iptable rules; just uninstalled Docker then the issue was gone...

[rhatdan]

Docker manipulates the iptables rules itself. Podman does not, because we feel this is security feature that an admin should be in charge of and not as easy to open up vulnerabilties.

[Luap99]

We also configure the firewall by default to allow port forwarding as root. As rootless we never do this because we cannot as we have no privileges to do so.

The problem with docker is that they actually setup a deny all rule, https://docs.docker.com/network/packet-filtering-firewalls/#docker-on-a-router which then might block other traffic. It has been a while since I looked at the docker rules but most likely that our rules just conflict in certain unexpected ways because of that.

[dunmorogher]

@rhatdan, @Luap99 - I see. Thank you for explaining!