kolla-ansible/adds-net-raw-capability-to-ironic-dnsmasq-40f5894c5180b12d.yaml at a5ea108dc3f00b155cd22df02f5a4004654624d0 - kolla-ansible - OpenDev: Free Software Needs Free Tools

openstack/kolla-ansible

Will Szumski f61fafabe4 Add NET_RAW to dnsmasq container

When using dnsmasq as a DHCP server, unless you use the noping option
(and that is not recommended), the NET_RAW capabilty is required so
that dnsmasq can send ICMP packets. These are used to check an address
is not currently in use[1].  Docker enables this capability by
default. Podman runs containers with a minimal set of capabilities[3].

[1] https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2019q1/012840.html
[2] https://docs.docker.com/engine/containers/run/#runtime-privilege-and-linux-capabilities
[3] f39f2a3f8c/docs/containers.conf.5.md (L84-L101)

Closes-Bug: #2055282
Change-Id: Ib3a1313df680d91c7f008063937ca7d37e82f690

2024-09-13 16:46:31 +00:00

7 lines

229 B

YAML

Raw Blame History

 ---
 fixes:
   - |
     Fixes an issue with ironic dnsmasq failing to start in deployments
     using podman because it requires the NET_RAW capability. See `LP#2055282
     <https://bugs.launchpad.net/kolla-ansible/+bug/2055282>`__.