-
Notifications
You must be signed in to change notification settings - Fork 96
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Full CNI DHCP plugin support #2925
Comments
A full fix for this is complex, requiring invasive changes to the runtime. As an initial workaround, will add the ability for admins to specify existing network namespaces which a user may join, and a flag for a user to request namespace join rather than creation. |
An alternative workaround may be to pass We have the ability to disable PID namespace creation in |
For CE 4.2 we're going for the workaround in #3189 - so a netns with CNI DHCP can be setup separately, and then joined. |
Version of Singularity
main / 4.1
Describe the bug
If a CNI plugin is run using dhcp IPAM, two portions of the dhcp plugin are in play:
The dhcp client plugin will communicate with the daemon, and pass the path to a bound network namespace associated with the container. The daemon requires access to this network namespace.
When setting up CNI networks we currently:
There are two problems here:
The bind is not actually applied at CNI setup time, leading to an error such as:
The session directory is not accessible to the dhcp daemon on the host, so it cannot access the container's network namespace.
To support the dhcp plugin we must:
The text was updated successfully, but these errors were encountered: