11.2. Running the DHCP plugin for Netavark using systemd

Procedure

1. Enable the DHCP proxy by using the systemd socket:

   systemctl enable --now netavark-dhcp-proxy.socket
   Created symlink /etc/systemd/system/sockets.target.wants/netavark-dhcp-proxy.socket  /usr/lib/systemd/system/netavark-dhcp-proxy.socket.

2. Optional: Display the socket unit file:

   # cat /usr/lib/systemd/system/netavark-dhcp-proxy.socket
   [Unit]
   Description=Netavark DHCP proxy socket
   
   [Socket]
   ListenStream=%t/podman/nv-proxy.sock
   SocketMode=0660
   
   [Install]
   WantedBy=sockets.target

3. Create a macvlan network and specify your host interface with it. Typically, it is your external interface:

   # podman network create -d macvlan --interface-name <LAN_INTERFACE> mv1
   mv1

4. Run the container by using newly created network:

   # podman run --rm --network mv1 -d --name test alpine top
   894ae3b6b1081aca2a5d90a9855568eaa533c08a174874be59569d4656f9bc45

Verification

1. Confirm the container has an IP on your local subnet:

   # podman exec test ip addr
   1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1000
       link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
       inet 127.0.0.1/8 scope host lo
          valid_lft forever preferred_lft forever
       inet6 ::1/128 scope host
          valid_lft forever preferred_lft forever
   2: eth0@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP qlen 1000
       link/ether 5a:30:72:bf:13:76 brd ff:ff:ff:ff:ff:ff
       inet 192.168.188.36/24 brd 192.168.188.255 scope global eth0
          valid_lft forever preferred_lft forever
       inet6 fe80::5830:72ff:febf:1376/64 scope link
          valid_lft forever preferred_lft forever

2. Inspect the container to verify it uses correct IP addresses:

   # podman container inspect test --format {{.NetworkSettings.Networks.mv1.IPAddress}}
   192.168.188.36