[pkg-go] Bug#989803: podman 3.0.1 rootless network issues: Connection reset by peer

[Alexander Reichle-Schmehl]

Hi!

Found a minimal example at 
https://stackoverflow.com/questions/67049585/how-to-publish-ports-in-user-defined-network-in-rootless-podman

To reproduce:

$ podman network create samplenet
$ podman network ls
NAME       VERSION  PLUGINS
samplenet  0.4.0    bridge,portmap,firewall,tuning,dnsname
$ podman run -dt --name test --network=samplenet --rm --publish 8080:80 
nginx
$ podman port -l
80/tcp -> 0.0.0.0:8080
$ curl localhost:8080
curl: (56) Recv failure: Connection reset by peer


Best regards,
   Alexander


Am 2021-06-13 18:01, schrieb Alexander Reichle-Schmehl:
> Package: podman
> Version: 3.0.1+dfsg1-2+b2
> Severity: important
> Tags: patch upstream
> X-Debbugs-Cc: alexander at alphamar.org
> 
> Running podman containers rootless seems I was unable to access any
> network services in a container.
> The apps work inside the container, but not from the host system.
> 
> Searching around I found
> https://github.com/containers/podman/issues/9532 which seems to be the
> isse I run into.
> The bug log also mentiones a missing patch in 3.0.1.
> 
> 
> -- System Information:
> Debian Release: 11.0
>   APT prefers testing-security
>   APT policy: (500, 'testing-security'), (500, 'testing')
> Architecture: amd64 (x86_64)
> 
> Kernel: Linux 5.10.0-7-amd64 (SMP w/4 CPU threads)
> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
> LANGUAGE=en_US:en
> Shell: /bin/sh linked to /usr/bin/dash
> Init: systemd (via /run/systemd/system)
> LSM: AppArmor: enabled
> 
> Versions of packages podman depends on:
> ii  conmon                           2.0.25+ds1-1
> ii  containernetworking-plugins      0.9.0-1+b5
> ii  crun                             0.17+dfsg-1
> ii  golang-github-containers-common  0.33.4+ds1-1
> ii  init-system-helpers              1.60
> ii  iptables                         1.8.7-1
> ii  libc6                            2.31-12
> ii  libdevmapper1.02.1               2:1.02.175-2.1
> ii  libgpgme11                       1.14.0-1+b2
> ii  libseccomp2                      2.5.1-1
> 
> Versions of packages podman recommends:
> ii  buildah                                           1.19.6+dfsg1-1+b4
> ii  catatonit                                         0.1.5-2
> ii  fuse-overlayfs                                    1.4.0-1
> ii  golang-github-containernetworking-plugin-dnsname  1.1.1+ds1-4+b6
> ii  slirp4netns                                       1.0.1-2
> ii  uidmap                                            1:4.8.1-1
> 
> Versions of packages podman suggests:
> pn  containers-storage  <none>
> pn  docker-compose      <none>
> 
> -- no debconf information