Paul Holzinger

> Do the rootlessport processes appear immediately after starting the wireguard container? Or are they only created once traffic starts? Rootlessport is used when using the bridge mode (i.e. custom...

> I'm not really familiar with quadlet and custom network configuration though, @Luap99 any chance you could interpret @pwige's configuration into specific commands I'd need to run to create something...

Has anyone reported this to apple?

I move this to a discussion as this is not a podman bug and we just ship the default fedora kernel so we have no way of patching the kernel.

What does cannot reach the internet mean? Your error shows a problem resolving a dns name, do you actually have no network connectivity or is just dns failing? Does dns/networking...

Ok thanks for checking, this means that aardvark-dns is not responding on udp I would guess. telnet uses tcp not udp. You could try to use `dig +tcp ...` to...

Do you have any aardvark-dns errors logged in journald? The strace part shows a tcp request if I read this right. The async epoll API that we are using makes...

> 169.254.0.1 This is the special dns forward address we use for pasta so this address is expected to work there. If it doesn't it sounds like pasta bug, if...

> Multiple default IPv4 routes, picked first Multiple default IPv6 routes, picked first How do the routes look like in the container (`pasta --config-net ip route`)?, if the routes are...

> Please, find attached the trace [dns.pcap.txt](https://github.com/user-attachments/files/17047132/dns.pcap.txt) (remove the .txt suffix. Seems GH does not support .pcap): ``` 4 0.007273 192.168.178.129 → 169.254.0.1 DNS 93 Standard query 0xaab5 A google.com...