This repository was archived by the owner on Feb 24, 2020. It is now read-only.
This repository was archived by the owner on Feb 24, 2020. It is now read-only.
It's hard (impossible) to disable a default network #3605
Description
Environment
rkt Version: 1.25.0
appc Version: 0.8.10
Go Version: go1.8
Go OS/Arch: linux/amd64
Features: +TPM +SDJOURNAL
--
Linux 4.9.12-hardened x86_64
--
NAME=Gentoo
ID=gentoo
PRETTY_NAME="Gentoo/Linux"
ANSI_COLOR="1;32"
HOME_URL="https://www.gentoo.org/"
SUPPORT_URL="https://www.gentoo.org/support/"
BUG_REPORT_URL="https://bugs.gentoo.org/"
--
systemd 233
+PAM -AUDIT -SELINUX +IMA -APPARMOR +SMACK -SYSVINIT +UTMP -LIBCRYPTSETUP +GCRYPT -GNUTLS +ACL -XZ +LZ4 +SECCOMP +BLKID -ELFUTILS +KMOD -IDN default-hierarchy=hybrid
What did you do?
Tried to just use bridge + static ip. I tried to use --net=bridge:IP=<IP> and --net=none --net=bridge:IP=<IP>. As a WAR I issued ip link set eth1 down.
What did you expect to see?
Connection to host routed over the bridge interface,
What did you see instead?
Connections to host are routed through the veth interface (they are then rejected by nftables).