Chapter 8. Managing a container network

• Rootless networking - the network is setup automatically, the container does not have an IP address.
• Rootful networking - the container has an IP address.

Prerequisites

• The container-tools meta-package is installed.

Procedure

• List all networks as a root user:

  # podman network ls
  NETWORK ID    NAME        VERSION     PLUGINS
  2f259bab93aa  podman      0.4.0       bridge,portmap,firewall,tuning

  Copy to Clipboard Toggle word wrap
  • By default, Podman provides a bridged network.
  • List of networks for a rootless user is the same as for a rootful user.

Prerequisites

• The container-tools meta-package is installed.

Procedure

• Inspect the default podman network:

  $ podman network inspect podman
  [
      {
          "cniVersion": "0.4.0",
          "name": "podman",
          "plugins": [
              {
                  "bridge": "cni-podman0",
                  "hairpinMode": true,
                  "ipMasq": true,
                  "ipam": {
                      "ranges": [
                          [
                              {
                                  "gateway": "10.88.0.1",
                                  "subnet": "10.88.0.0/16"
                              }
                          ]
                      ],
                      "routes": [
                          {
                              "dst": "0.0.0.0/0"
                          }
                      ],
                      "type": "host-local"
                  },
                  "isGateway": true,
                  "type": "bridge"
              },
              {
                  "capabilities": {
                      "portMappings": true
                  },
                  "type": "portmap"
              },
              {
                  "type": "firewall"
              },
              {
                  "type": "tuning"
              }
          ]
      }
  ]

  Copy to Clipboard Toggle word wrap

  You can see the IP range, enabled plugins, type of network, and other network settings.

Prerequisites

• The container-tools meta-package is installed.

Procedure

• Create the external network named mynet:

  # podman network create mynet
  /etc/cni/net.d/mynet.conflist

  Copy to Clipboard Toggle word wrap

Verification

• List all networks:

  # podman network ls
  NETWORK ID    NAME        VERSION     PLUGINS
  2f259bab93aa  podman      0.4.0       bridge,portmap,firewall,tuning
  11c844f95e28  mynet       0.4.0       bridge,portmap,firewall,tuning,dnsname

  Copy to Clipboard Toggle word wrap

  You can see the created mynet network and default podman network.

Prerequisites

• The container-tools meta-package is installed.
• A network has been created by using the podman network create command.
• A container has been created.

Procedure

• Connect a container named mycontainer to a network named mynet:

  # podman network connect mynet mycontainer

  Copy to Clipboard Toggle word wrap

Verification

• Verify that the mycontainer is connected to the mynet network:

  # podman inspect --format='{{.NetworkSettings.Networks}}' mycontainer
  map[podman:0xc00042ab40 mynet:0xc00042ac60]

  Copy to Clipboard Toggle word wrap

  You can see that mycontainer is connected to mynet and podman networks.

Prerequisites

• The container-tools meta-package is installed.
• A network has been created by using the podman network create command.
• A container is connected to a network.

Procedure

• Disconnect the container named mycontainer from the network named mynet:

  # podman network disconnect mynet mycontainer

  Copy to Clipboard Toggle word wrap

Verification

• Verify that the mycontainer is disconnected from the mynet network:

  # podman inspect --format='{{.NetworkSettings.Networks}}' mycontainer
  map[podman:0xc000537440]

  Copy to Clipboard Toggle word wrap

  You can see that mycontainer is disconnected from the mynet network, mycontainer is only connected to the default podman network.

Prerequisites

• The container-tools meta-package is installed.

Verification

• Check if mynet network was removed:

  # podman network ls
  NETWORK ID    NAME        VERSION     PLUGINS
  2f259bab93aa  podman      0.4.0       bridge,portmap,firewall,tuning

  Copy to Clipboard Toggle word wrap

Prerequisites

• The container-tools meta-package is installed.

Procedure

• Remove all unused networks:

  # podman network prune
  WARNING! This will remove all networks not used by at least one container.
  Are you sure you want to continue? [y/N] y

  Copy to Clipboard Toggle word wrap

Verification

• Verify that all networks were removed:

  # podman network ls
  NETWORK ID    NAME        VERSION     PLUGINS
  2f259bab93aa  podman      0.4.0       bridge,portmap,firewall,tuning

  Copy to Clipboard Toggle word wrap