Simulate air-gapped environment for pod? #25199
Replies: 1 comment 6 replies
-
|
If you do not need any networking besides between the containers in the pod you can create the pod with |
Beta Was this translation helpful? Give feedback.
-
|
|
Beta Was this translation helpful? Give feedback.
-
|
Whoops, so I've been, uhm, hallucinated! Sorry for that :-/ Is there perhaps any chance to make a container air-gapped (i.e. can't talk to the internet) while still being able to talk to it from the host and also while still having it talk to another container? |
Beta Was this translation helpful? Give feedback.
-
|
Something I've seen pasta(1) users doing (that's the default rootless network option) is to create a dummy interface that goes nowhere:
and bind outbound sockets to it:
You might need to pass a (dummy) default gateway explicitly, At that point, they have regular networking features and the host can communicate with them, they can communicate between each other through the host, but they can't connect to anything outside. It's common enough as to warrant its own network setting in pasta(1) the day we find the time for it... |
Beta Was this translation helpful? Give feedback.
-
|
Thanks @sbrivio-rh ! At any rate, good to know that eventually this will be possible for end-users like me :) |
Beta Was this translation helpful? Give feedback.
-
Oh, wait, I didn't understand you were doing this on Darwin/OS X (I guess?). That's for GNU/Linux, and pasta(1) is also just for GNU/Linux as well. https://asahilinux.org/ |
Beta Was this translation helpful? Give feedback.
-
Hi,
we would like to simulate an air-gapped environment for our Podman Pod, which consists of two containers. Does anybody per chance know how internet access for the Pod can be prohibited? The containers must still be allowed to talk to each other, though ...
Beta Was this translation helpful? Give feedback.
All reactions