Chapter 9. Managing a container network

• Rootless networking - the network is setup automatically, the container does not have an IP address.
• Rootful networking - the container has an IP address.

Prerequisites

• The container-tools module is installed.

Procedure

• List all networks as a root user:

  # podman network ls
  NETWORK ID    NAME        VERSION     PLUGINS
  2f259bab93aa  podman      0.4.0       bridge,portmap,firewall,tuning

  • By default, Podman provides a bridged network.
  • List of networks for a rootless user is the same as for a rootful user.

Prerequisites

• The container-tools module is installed.

Procedure

• Inspect the default podman network:

  $ podman network inspect podman
  [
      {
          "cniVersion": "0.4.0",
          "name": "podman",
          "plugins": [
              {
                  "bridge": "cni-podman0",
                  "hairpinMode": true,
                  "ipMasq": true,
                  "ipam": {
                      "ranges": [
                          [
                              {
                                  "gateway": "10.88.0.1",
                                  "subnet": "10.88.0.0/16"
                              }
                          ]
                      ],
                      "routes": [
                          {
                              "dst": "0.0.0.0/0"
                          }
                      ],
                      "type": "host-local"
                  },
                  "isGateway": true,
                  "type": "bridge"
              },
              {
                  "capabilities": {
                      "portMappings": true
                  },
                  "type": "portmap"
              },
              {
                  "type": "firewall"
              },
              {
                  "type": "tuning"
              }
          ]
      }
  ]

  You can see the IP range, enabled plugins, type of network, and other network settings.

Prerequisites

• The container-tools module is installed.

Procedure

• Create the external network named mynet:

  # podman network create mynet
  /etc/cni/net.d/mynet.conflist

Verification

• List all networks:

  # podman network ls
  NETWORK ID    NAME        VERSION     PLUGINS
  2f259bab93aa  podman      0.4.0       bridge,portmap,firewall,tuning
  11c844f95e28  mynet       0.4.0       bridge,portmap,firewall,tuning,dnsname

  You can see the created mynet network and default podman network.

Prerequisites

• The container-tools module is installed.
• A network has been created using the podman network create command.
• A container has been created.

Procedure

• Connect a container named mycontainer to a network named mynet:

  # podman network connect mynet mycontainer

Verification

• Verify that the mycontainer is connected to the mynet network:

  # podman inspect --format='{{.NetworkSettings.Networks}}' mycontainer
  map[podman:0xc00042ab40 mynet:0xc00042ac60]

  You can see that mycontainer is connected to mynet and podman networks.

Prerequisites

• The container-tools module is installed.
• A network has been created using the podman network create command.
• A container is connected to a network.

Procedure

• Disconnect the container named mycontainer from the network named mynet:

  # podman network disconnect mynet mycontainer

Verification

• Verify that the mycontainer is disconnected from the mynet network:

  # podman inspect --format='{{.NetworkSettings.Networks}}' mycontainer
  map[podman:0xc000537440]

  You can see that mycontainer is disconnected from the mynet network, mycontainer is only connected to the default podman network.

Prerequisites

• The container-tools module is installed.

Verification

• Check if mynet network was removed:

  # podman network ls
  NETWORK ID    NAME        VERSION     PLUGINS
  2f259bab93aa  podman      0.4.0       bridge,portmap,firewall,tuning

Prerequisites

• The container-tools module is installed.

Procedure

• Remove all unused networks:

  # podman network prune
  WARNING! This will remove all networks not used by at least one container.
  Are you sure you want to continue? [y/N] y

Verification

• Verify that all networks were removed:

  # podman network ls
  NETWORK ID    NAME        VERSION     PLUGINS
  2f259bab93aa  podman      0.4.0       bridge,portmap,firewall,tuning