From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by passt.top (Postfix) with ESMTP id 74B255A0262 for ; Mon, 27 Mar 2023 11:47:37 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1679910456; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=BEHJV+156IFg/3jtagOGpx856FvLAQkDTD17uLbZxj8=; b=GXNXjRZqC4pGGM3oGLOIhcagjORLEEG3HQPvFmOGvIWk73RCEmx7go54priSiu3X+6y24s BVe93Uyzqy8fxDr5Pzj2wDCkkYHA1FSfjTH+2NwdT9CRctFPsiuWuc2eKMKvBamfQqYG/5 /Z4i0G4eRdu9Zio/UuqjKpn9SjJeuuY= Received: from mimecast-mx02.redhat.com (mimecast-mx02.redhat.com [66.187.233.88]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-519-Z9RBJevTPQmnlfyoMCylHQ-1; Mon, 27 Mar 2023 05:47:32 -0400 X-MC-Unique: Z9RBJevTPQmnlfyoMCylHQ-1 Received: from smtp.corp.redhat.com (int-mx04.intmail.prod.int.rdu2.redhat.com [10.11.54.4]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id 6879C88B7A0; Mon, 27 Mar 2023 09:47:32 +0000 (UTC) Received: from maya.cloud.tilaa.com (unknown [10.33.32.23]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 42CB02027040; Mon, 27 Mar 2023 09:47:31 +0000 (UTC) Date: Mon, 27 Mar 2023 11:47:29 +0200 From: Stefano Brivio To: "Gianluca Stivan" Subject: Re: Failed to open tun socket in namespace Message-ID: <20230327114729.4f7a5c7d@elisabeth> In-Reply-To: <8a314e36-9459-4078-9e6c-db9b8c19464a@app.fastmail.com> References: <8a314e36-9459-4078-9e6c-db9b8c19464a@app.fastmail.com> Organization: Red Hat MIME-Version: 1.0 X-Scanned-By: MIMEDefang 3.1 on 10.11.54.4 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Message-ID-Hash: 55TCQEULI5WX52TENZZCRFU3YLWH6OVD X-Message-ID-Hash: 55TCQEULI5WX52TENZZCRFU3YLWH6OVD X-MailFrom: sbrivio@redhat.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: passt-user@passt.top X-Mailman-Version: 3.3.8 Precedence: list List-Id: "For users: support, questions and answers" Archived-At: Archived-At: List-Archive: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Hi Gianluca, On Sun, 26 Mar 2023 13:42:19 +0100 "Gianluca Stivan" wrote: > Hi, > Thank you so much for this project! And thanks for testing it! > I'm running a rootless container using pasta. Everything works great > but after a while (anything from minutes to hours) I see the error > "Failed to open tun socket in namespace" in my systemd logs, and my > container loses access to the internet. That happens when pasta detects an issue with the tap file descriptor (error or closure reported by the kernel, or failed read), so it closes it and tries to open it again. There are two issues actually: 1. the problem with the tap device causing this and 2. the fact that pasta fails to close and reopen the file descriptor. > Do you happen to have any > idea how I would go about debugging this? Thanks a lot in advance :) > > PS: I'm running pasta from podman with arguments > --map-gw,--dns,,-i,wlan0,--outbound-if4,wireguard0,--outbound-if6,wireguard0,--config-net Let's try to debug issue 1. first: can you pass -d (--debug) and -l (--log-file) here, then check the lines at the end, when pasta terminates? You might want to play with --log-size too if there's a lot of activity. -- Stefano