[pkg-go] Bug#1107134: podman: DNS resolution fails during startup

[Jan-Nick Kemming]

Package: podman
Version: 5.4.2+ds1-1+b3
Severity: normal

Dear Maintainer,

I'm trying out Podman Quadlets on trixie and ran into an issue. I've reproduced a minimal setup using a clean install inside a VM:

* Installed Debian trixie without a Desktop environment
* Installed Podman
* Switched to root and created two files (see content below):
   * `/etc/containers/systemd/nginx.container`
   * `/etc/containers/systemd/nginx.image`
* Rebooted
* Problem: The generated `nginx-image` service fails to start, apparently because the DNS server refused connection (see error message below)

Some notable observations:

* The same thing happens every time the machine boots.
* I couldn't reproduce the problem when I installed the Gnome desktop environment
* If I manually start the service after booting, it works.
* Adding a slight delay via `ExecStartPre=/bin/sleep 3` fixes the problem as well.
* The same thing happens for `.build` Quadlets.

While the sleep fix works fine for the moment, it'd be very nice to have a proper fix for this. Please let me know if I can assist further, I'd be glad to debug some more if that helps.

Kind regards
Jan-Nick Kemming


Error message during boot:
```
nginx-image[669]: Error: initializing sourcedocker://nginx:1-alpine: pinging container registry registry-1.docker.io: Get"https://registry-1.docker.io/v2/": dial tcp: lookup registry-1.docker.io on [::1]:53: read udp [::1]:60599->[::1]:53: read: connection refused
podman[669]: 2025-06-01 23:17:36.884885462 +0200 CEST m=+0.242767005 image pull-error  docker.io/library/nginx:1-alpine initializing sourcedocker://nginx:1-alpine: pinging container registry registry-1.docker.io: Get"https://registry-1.docker.io/v2/": dial tcp: lookup registry-1.docker.io on [::1]:53: read udp [::1]:60599->[::1]:53: read: connection refused
```

Content of `/etc/containers/systemd/nginx.container`:
```
[Install]
WantedBy=default.target

[Container]
Image=nginx.image
```

Content of `/etc/containers/systemd/nginx.image`:
```
[Image]
Image=docker.io/library/nginx:1-alpine
```

-- System Information:
Debian Release: 13.0
   APT prefers testing
   APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.27-amd64 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages podman depends on:
ii  conmon                           2.1.12-4
ii  crun                             1.21-1
ii  golang-github-containers-common  0.62.2+ds1-2
ii  init-system-helpers              1.68
ii  libc6                            2.41-8
ii  libgpgme11t64                    1.24.2-3
ii  libseccomp2                      2.6.0-2
ii  libsqlite3-0                     3.46.1-4
ii  libsubid5                        1:4.17.4-2
ii  netavark                         1.14.0-2

Versions of packages podman recommends:
ii  buildah             1.39.3+ds1-1+b4
ii  ca-certificates     20250419
ii  catatonit           0.2.1-1
ii  containers-storage  1.57.2+ds1-1+b1
ii  criu                4.1-1
ii  dbus-user-session   1.16.2-2
ii  libcriu2            4.1-1
ii  passt               0.0~git20250503.587980c-2
ii  slirp4netns         1.2.1-1.1
ii  uidmap              1:4.17.4-2

Versions of packages podman suggests:
ii  containernetworking-plugins  1.1.1+ds1-3+b16
pn  docker-compose               <none>
ii  iptables                     1.8.11-2

-- no debconf information
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20250601/77192c17/attachment-0001.htm>