[Bug 1239596] New: Internal networks are not isolated in docker-stable

https://bugzilla.suse.com/show_bug.cgi?id=1239596 Bug ID: 1239596 Summary: Internal networks are not isolated in docker-stable Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Containers Assignee: containers-bugowner@suse.de Reporter: rbranco@suse.com QA Contact: qa-bugs@suse.de Target Milestone: --- Found By: --- Blocker: --- OS: openSUSE Tumbleweed 20250211 docker-stable version 24.0.9-ce To reproduce: # docker network create --ipv6 --subnet 2001:db8::/64 --internal test # docker run --rm --network test registry.opensuse.org/opensuse/toolbox ping -4 -c 1 Expected output: ping: connect: Network is unreachable Notes: - The above commands also fail in rootless mode. - The above commands do not fail with latest docker 27.5.1-ce - Only with docker-stable is `--subnet 2001:db8::/64` needed, otherwise it fails with: Error response from daemon: could not find an available, non-overlapping IPv6 address pool among the defaults to assign to the network -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1239596 https://bugzilla.suse.com/show_bug.cgi?id=1239596#c1 --- Comment #1 from Ricardo Branco <rbranco@suse.com> --- Found this in docker v25 changelog:
Containers connected only to internal networks will now have no default route set, making the connect syscall fail-fast. moby/moby#46603
https://docs.docker.com/engine/release-notes/25.0/ -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1239596 https://bugzilla.suse.com/show_bug.cgi?id=1239596#c2 --- Comment #2 from Ricardo Branco <rbranco@suse.com> --- To reproduce: # docker network create --ipv6 --subnet 2001:db8::/64 --internal test # docker run --rm --network test registry.opensuse.org/opensuse/toolbox ping -4 -c 1 8.8.8.8 Notes: - IPv6 is irrelevant here. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com