Page 1 of 1

Podman (Docker replacement)

Posted: 06 Dec 2020, 09:33
by stevet224
Hello,

Centos and Redhat have now moved away from Docker to Podman but i am unable to get CSF to work with podman. Docker used interface docker0 but podman uses a new interface for each container. e.g. veth11088f88

Any suggestions would be welcome.

I have tested the below config but with no luck.
Image

Code: Select all

# podman network inspect podman
[
  {
    "cniVersion": "0.4.0",
    "name": "podman",
    "plugins": [
      {
        "bridge": "cni-podman0",
        "hairpinMode": true,
        "ipMasq": true,
        "ipam": {
          "ranges": [
            [
              {
                "gateway": "10.88.0.1",
                "subnet": "10.88.0.0/16"
              }
            ]
          ],
          "routes": [
            {
              "dst": "0.0.0.0/0"
            }
          ],
          "type": "host-local"
        },
        "isGateway": true,
        "type": "bridge"
      },
      {
        "capabilities": {
          "portMappings": true
        },
        "type": "portmap"
      },
      {
        "type": "firewall"
      },
      {
        "type": "tuning"
      }
    ]
  }
]
 
Thank you.

Re: Podman (Docker replacement)

Posted: 07 Dec 2020, 04:19
by stevet224
I have been able to get it partly working using the below command but csf restart destroys the iptables podman creates.

sudo iptables -I CNI-FORWARD -p tcp ! -i cni-podman0 -o cni-podman0 --jump LOCALINPUT

Re: Podman (Docker replacement)

Posted: 20 Dec 2020, 13:04
by panomitrius
stevet224 wrote: 07 Dec 2020, 04:19 I have been able to get it partly working using the below command but csf restart destroys the iptables podman creates.

sudo iptables -I CNI-FORWARD -p tcp ! -i cni-podman0 -o cni-podman0 --jump LOCALINPUT
This happens to me to, with a post script to run for configuring iptables for docker, after restarts those settings get lost and docker containers looses network connection.