Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Apologies for the possibly dumb question, I couldn't find this in the Podman docs. How does it do networking without bridges? Does it still use veth devices?


That's a valid question. I also did not look up until you asked. Check this out[1]

> One of the guiding factors on networking for containers with Podman is going to be whether or not the container is run by a root user or not. This is because unprivileged users cannot create networking interfaces on the host. Therefore, with rootfull containers, the default networking mode is to use netavark. For rootless, the default network mode is slirp4netns. Because of the limited privileges, slirp4netns lacks some of the features of networking; for example, slirp4netns cannot give containers a routable IP address.

[1]: https://github.com/containers/podman/blob/main/docs/tutorial...


Thanks! It seems that netavark uses macvlan to avoid creating bridge devices. Although it can also use bridges, and Docker added macvlan support too: https://github.com/moby/libnetwork/blob/master/docs/macvlan.... That page also gives a lot of background on the different methods and their pros/cons.

I guess at this point the difference is only the defaults of each system.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: