DNS issues with bridge networks

[coolwanglu]

Setup

podman 5.4.2 on Debian 13

Run as root.

podman create network1
podman create network2
podman create --driver macvlan ... network3

Test Cases

podman run --network network1 --network network2 alpine cat /etc/resolv.conf
shows two resolvers, OK

podman run --network network1 --dns 1.1.1.1 alpine cat /etc/resolv.conf
shows only resolvers from network1, not OK

podman run --network network3 alpine cat /etc/resolv.conf
shows resolvers from host, OK

podman run --network network1 --network network3 alpine cat /etc/resolv.conf
shows only resolvers from network1, not OK

podman run --network network3 --dns 1.1.1.1 alpine cat /etc/resolv.conf
shows only 1.1.1.1, OK

podman network update network1 --dns-add 1.1.1.1

# verifies 1.1.1.1 is added
podman network inspect network1

podman run --network network1 alpine cat /etc/resolv.conf
# does not show 1.1.1.1, not OK

podman network update network1 --dns-drop 1.1.1.1

Background

I want to put a few containers into an internal bridge network, such that they can find each other by names.
Meanwhile, one container needs internet access, so I put it into another macvlan network.
IP addresses works, but the container only sees the DNS server from the bridge network, so it cannot access Internet

[baude]

@coolwanglu in general, we really prefer that when you report issues upstream, you test with a much more recent version to ensure this is not something we have not already fixed. Please consider that.

[coolwanglu]

@baude good point. I tested on podman 5.6.1 on a recent CoreOS,

The first issue is still reproducible, but it can be explained by #17499

The second issue cannot be reproduced.

So I'm closing it.

[armenchikdev-hue]

Настраивать

podman 5.4.2 в Debian 13

Запускать как root.

podman create network1
podman create network2
podman create --driver macvlan ... network3

Тестовые случаи

podman run --network network1 --network network2 alpine cat /etc/resolv.conf показывает два резольвера, ОК

podman run --network network1 --dns 1.1.1.1 alpine cat /etc/resolv.conf показывает только резолверы из network1, не ОК

podman run --network network3 alpine cat /etc/resolv.conf показывает резолверы с хоста, ОК

podman run --network network1 --network network3 alpine cat /etc/resolv.conf показывает только резолверы из network1, не ОК

podman run --network network3 --dns 1.1.1.1 alpine cat /etc/resolv.conf показывает только 1.1.1.1, ОК

podman network update network1 --dns-add 1.1.1.1

# verifies 1.1.1.1 is added
podman network inspect network1

podman run --network network1 alpine cat /etc/resolv.conf
# does not show 1.1.1.1, not OK

podman network update network1 --dns-drop 1.1.1.1

Фон

Я хочу объединить несколько контейнеров во внутреннюю сеть типа «мост», чтобы они могли находить друг друга по именам. При этом одному контейнеру нужен доступ в интернет, поэтому я помещаю его в другую сеть MacVLAN. IP-адреса работают, но контейнер видит только DNS-сервер из сети типа «мост», поэтому не может получить доступ в интернет.