Actions
action #176850
open[Containers] Add test for network isolation
Start date:
2025-02-10
Due date:
% Done:
0%
Estimated time:
Tags:
Description
We should add a test that checks if the network isolation works as expected [1].
We need to perform the following steps
- Create a new (bridge) network with the
--internal
function - Ensure containers in this network can access the host
- Ensure containers in this network cannot access the internet
- Ensure containers in this network cannot modify the IP routes (e.g.
ip route add default HOSTIP
)
Acceptance criteria¶
- AC1: A test runs that ensure the
--internal
function of a podman network works as defined above
Weblinks¶
[1] https://docs.podman.io/en/latest/markdown/podman-network-create.1.html#internal
Updated by rbranco 13 days ago
RFC:
We can check whether this is implemented in the upstream tests and submit it here:
https://github.com/containers/podman/blob/main/test/system/500-networking.bats
Updated by rbranco about 6 hours ago
Fix issue in JeOS & docker-stable:
https://github.com/os-autoinst/os-autoinst-distri-opensuse/pull/21454
Updated by rbranco about 1 hour ago
Bug on docker-stable: https://bugzilla.opensuse.org/show_bug.cgi?id=1239596
Actions