Tom Parrott
Tom Parrott
Thanks @mihalicyn very insightful stuff.
Consider also this comment https://github.com/canonical/lxd/issues/12526#issuecomment-2031776802
@mihalicyn is this something we would expect not to be possible from inside an unprivileged container?
OK thanks for confirmation.
@simondeziel how do I get the test scripts to stop destroying the env when i run it manually? I need to the env left in the same state as it...
Here's something funny, running `sudo tcpdump -nn -i lxdbr0` (which switches the bridge into promiscuous mode) makes it work, and exiting tcpdump breaks it again :)
`lxc network set lxdbr0 ipv4.nat=false` fixes it.
Considering whether we should alter the SNAT rule such that it only applied to traffic leaving the bridge via a non-bridge interface, e.g. ``` nft add rule inet lxd pstrt.lxdbr0...
I dont know why other people's forks keep closing this.
> We should investigate whether this is causing 2 concurrent mappings of the same ceph volume on two members, which could cause data corruption. As well as investigate when/how the...