netavark icon indicating copy to clipboard operation
netavark copied to clipboard

Aardvark doesn't get started in rootless mode on a system with system-wide but not per-user systemd

Open Orochimarufan opened this issue 6 months ago • 1 comments

Netavark assumes it can systemd-run --user aardvark after only checking for system-wide systemd (/var/run/systemd). This may not always be the case (e.g. disabled pam_systemd for some reason).

I realize that these are weird circumstances and they also cause issues wrt control groups, but podman appears to work perfectly fine otherwise.

I have a local patch that skips systemd-run and everything works as expected. I'm not sure what the official solution to this should be, but currently it silently breaks all dns resolution in the container. At least there should be a diagnostic (there probably should be whenever aardvark fails to get started for any reason). Perhaps there's a solution to be found in checking for the user instance after (and only if) the opportunistic systemd-run attempt has failed, so as to not slow down the (overwhelmingly) common case. Unfortunately, the check seems to be a lot less trivial than checking whether or not a constant path exists.

Orochimarufan avatar Aug 04 '24 17:08 Orochimarufan