Matt Heon

icon indicating an email [email protected]

icon company Red Hat

Results 59 comments of Matt Heon

Internal networks cannot make external DNS requests

Hm. I think we might need a patched Netavark in the VMs to make this work.

Need bidirectional communication channel between netavark and aardvark

Are you thinking something like a unix socket, where we could pass requests from NV to AV and receive a response when the change was fully implemented?

Need bidirectional communication channel between netavark and aardvark

I would prefer not to drag a full REST API in, so I wonder if we can't do something a little lighter (protobuf, maybe? Does that have good rust bindings?)...

[release-1.32] Adresses CVE-2024-1753 and CVE-2024-24786, bump to V1.32.3

LGTM

[release-1.34] Bump protobuf to v1.33, Buildah to v1.34.3

LGTM

[release-1.33] Fix CVE-2024-1753, bump to v1.33.7

LGTM

podman leaves out cni ip leases if interrupted while building image

@Luap99 PTAL

Consider add some docs and images about the overall architecture

It's an optional dependency on most distros (we recommend that Podman packages require one of CNI or Netavark, with Netavark recommended). Containers.conf can force the network backend to Netavark but...

Consider add some docs and images about the overall architecture

Yes, this is only available in Podman 4.0 and up. Netavark in general is only supported from Podman 4.0 and up, so earlier versions don't need the field; they're always...