FreeBSD containers with podman and buildah

2022-05-14 Thread Doug Rabson
Recently I've been working on porting the buildah and podman container tools to FreeBSD. Podman is a drop-in replacement for docker and buildah focuses on the narrower problem of building container images. At this point, there is enough functionality to show that these tools are viable on FreeBSD s

Container Networking for jails

2022-06-30 Thread Doug Rabson
I wanted to get a quick sanity check for my current approach to container networking with buildah and podman. These systems use CNI ( https://www.cni.dev) to set up the network. This uses a sequence of 'plugins' which are executables that perform successive steps in the process - a very common setu

Re: Container Networking for jails

2022-07-04 Thread Doug Rabson
, but should be documented. > And ideally an option should be provided to use an alternative root if the > user deems the risk unacceptable. > > > > > On 30 June 2022 09:04:24 CEST, Doug Rabson wrote: >> >> I wanted to get a quick sanity check for my current appro

Re: Allowing network interface changes in jails

2025-07-09 Thread Doug Rabson
On Wed, 9 Jul 2025 at 13:12, Alexander Leidinger wrote: > Am 2025-07-09 12:20, schrieb Doug Rabson: > > I would like to be able to create and modify network interfaces inside > jails. Use cases for this include supporting nesting Podman jails and CNI > plugins which delegat

Re: Allowing network interface changes in jails

2025-07-09 Thread Doug Rabson
On Wed, 9 Jul 2025 at 13:12, Alexander Leidinger wrote: > Am 2025-07-09 12:20, schrieb Doug Rabson: > > I would like to be able to create and modify network interfaces inside > jails. Use cases for this include supporting nesting Podman jails and CNI > plugins which delegat

Re: Allowing network interface changes in jails

2025-07-11 Thread Doug Rabson
On Thu, 10 Jul 2025 at 15:32, Bjoern A. Zeeb wrote: > On Wed, 9 Jul 2025, Doug Rabson wrote: > > Hi Doug, > > > On Wed, 9 Jul 2025 at 13:12, Alexander Leidinger < > alexan...@leidinger.net> > > wrote: > > > >> Am 2025-07-09 12:20, schrieb Doug Rab

Re: Allowing network interface changes in jails

2025-07-14 Thread Doug Rabson
On Mon, 14 Jul 2025 at 13:18, Bjoern A. Zeeb wrote: > On Mon, 14 Jul 2025, Doug Rabson wrote: > > > I tried setting allow.socket_af for a jail which inherits the host vnet > and > > this still has problems creating interfaces: > > > > $ jid=$(sudo jail -i

Re: Allowing network interface changes in jails

2025-07-14 Thread Doug Rabson
On Sat, 12 Jul 2025 at 03:39, James Gritton wrote: > On 2025-07-11 02:15, Bjoern A. Zeeb wrote: > > On Fri, 11 Jul 2025, Doug Rabson wrote: > > > >> I do have if_bridge loaded on the base system. With your examples, I > >> can > >> verify that creating

Re: Allowing network interface changes in jails

2025-07-15 Thread Doug Rabson
On Tue, 15 Jul 2025 at 16:26, James Gritton wrote: > On 2025-07-15 06:53, Bjoern A. Zeeb wrote: > > On Tue, 15 Jul 2025, Doug Rabson wrote: > > > >> On Mon, 14 Jul 2025 at 16:54, James Gritton wrote: > >> > >>> On 2025-07-14 03:53, Doug Rabson wrote

Re: Allowing network interface changes in jails

2025-07-15 Thread Doug Rabson
On Tue, 15 Jul 2025 at 16:40, Bjoern A. Zeeb wrote: > On Tue, 15 Jul 2025, Doug Rabson wrote: > > > On Tue, 15 Jul 2025 at 16:26, James Gritton wrote: > > > >> On 2025-07-15 06:53, Bjoern A. Zeeb wrote: > >>> On Tue, 15 Jul 2025, Doug Rabson wrote: &g

Re: Allowing network interface changes in jails

2025-07-15 Thread Doug Rabson
On Mon, 14 Jul 2025 at 16:54, James Gritton wrote: > On 2025-07-14 03:53, Doug Rabson wrote: > > I tried setting allow.socket_af for a jail which inherits the host vnet > and this still has problems creating interfaces: > > $ jid=$(sudo jail -i -c host.hostname=foo vnet=inher