From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: passt.top; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: passt.top; dkim=pass (1024-bit key; unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=AFtxEmMZ; dkim-atps=neutral Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.133.124]) by passt.top (Postfix) with ESMTPS id 43C8B5A027E for ; Mon, 12 May 2025 16:06:23 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1747058782; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=/ODdg5U2dGrmyOu/9xvKXz4keEYAVn6KrqlagG0KJAY=; b=AFtxEmMZ6fxmE366bEv+bqtsxYIRRLbRZH9nq2XyIMM4uG0nw4h1jK6Ag0Atp5I10ssKTD 6umPisbIIhCpZvwAEWXXvFXJiFi7skmUmMgRqSYttKtFHrl1lVD6fKGa7Tvvi8P+SbifTG uGET6ulv68U7qweZ7sTZC2FlM6kQuNc= Received: from mail-lj1-f199.google.com (mail-lj1-f199.google.com [209.85.208.199]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-662-n1AS-gWwNa-xf0kGYYThSQ-1; Mon, 12 May 2025 10:06:20 -0400 X-MC-Unique: n1AS-gWwNa-xf0kGYYThSQ-1 X-Mimecast-MFC-AGG-ID: n1AS-gWwNa-xf0kGYYThSQ_1747058779 Received: by mail-lj1-f199.google.com with SMTP id 38308e7fff4ca-326c8e524e0so12982751fa.3 for ; Mon, 12 May 2025 07:06:19 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1747058777; x=1747663577; h=content-transfer-encoding:mime-version:organization:references :in-reply-to:message-id:subject:cc:to:from:date:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=/ODdg5U2dGrmyOu/9xvKXz4keEYAVn6KrqlagG0KJAY=; b=OVjGdEvTD7hJmdWRaOIcFTItAGaEhg4ESc5GmHU5hbuo7CDZ9n7Eky8oBxB6syttTe HpJ+jZVXTkuOkLKWeK9mkDhxNzzvK9OYWG5YoqqF7AUiYRtv7mSNOfWmfWJV2QCDuHR/ 9eSAYQxuZtNmdHknQuVBGcjKa59dffWpYIDky3CLn+cnlFMOIzYQwgeMNysOvfa5qVZT 76/lz/TtFlaZ2dF6SzUVwyQZ7SZwlL+tUWowsut/wO5hsAnYqDX4CFJ1YnwtXhryKybu MV+BRN1suh28V/i2MKzgxsd6PJhSmFpm7xo3LYNAK8+xNuosIr+Y3bzZ6o9S5NOVXlto /GLg== X-Gm-Message-State: AOJu0YyIrzfLAty6e+9+jAWf9BivpR2LWf4XXpG54SifD0BqhKxQrSeB On8ZS4phZZXhKtCGo8CPlzuhLktge9DxSetGY5Q0EWzNmoLSw0WlaiRgel1oDK5znHLRwVEXeUl PjPZaMGW1TJ/En3UZcn6WyjOX4tPq4S9LCNK5MkuxRr+dg30Zg+e5fJcijD8= X-Gm-Gg: ASbGncs16hbBFf5ek62pAloqLHClpHi+mT/t/ma1/s//GgYIB2hVCwat4BKSz+REUdN aiIGPY6mj2RozERh53aiBlTh2M1aU0aj3SeWF749Ts4uG7RUb1QCGE05l3H2cR9gIPOXwxCIK2O 0NvTPwE7drDFa3M1k9B9L6I4aQ2cmRB6GPNhkwt0Zx8ELj/e7Pz9OqXtUapEhRNfa2c/CPJXDQa WoLAslD5IjiB4XccQUM4Px+5LpjUzZtR20FRk9KcfbNeIviBRAmcDPjAYFmqFBRou0RAuq6EnSh yB4mya+ttwnO+rUbvsPbTFO4r+TNl/6kEPzUY1Y7 X-Received: by 2002:a17:906:c155:b0:ac7:e5c4:1187 with SMTP id a640c23a62f3a-ad218e54dc7mr1155674266b.11.1747058766592; Mon, 12 May 2025 07:06:06 -0700 (PDT) X-Google-Smtp-Source: AGHT+IH295t5DlyGfgdZQsuhM8CxXgdZJggiEcdGGfXl4q/w7EJg1NsdFNCXA4KbUI1U8QsjOrZdbg== X-Received: by 2002:a05:6000:2ce:b0:391:952:c728 with SMTP id ffacd0b85a97d-3a1f6427719mr10315621f8f.4.1747058755103; Mon, 12 May 2025 07:05:55 -0700 (PDT) Received: from maya.myfinge.rs (ifcgrfdd.trafficplex.cloud. [176.103.220.4]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-3a1f58ebd75sm12771774f8f.34.2025.05.12.07.05.54 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 12 May 2025 07:05:54 -0700 (PDT) Date: Mon, 12 May 2025 16:05:53 +0200 From: Stefano Brivio To: Ayon T Subject: Re: Help with pasta usage Message-ID: <20250512160553.3ec3bd50@elisabeth> In-Reply-To: References: Organization: Red Hat X-Mailer: Claws Mail 4.2.0 (GTK 3.24.49; x86_64-pc-linux-gnu) MIME-Version: 1.0 X-Mimecast-Spam-Score: 0 X-Mimecast-MFC-PROC-ID: VYxpAUH2mAD_xMNwSc20wAzWmLlMjEcb48wbjyhqeXc_1747058779 X-Mimecast-Originator: redhat.com Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Message-ID-Hash: E5APURPERXAMAKSJFVZ5SD7AXUVK2KYP X-Message-ID-Hash: E5APURPERXAMAKSJFVZ5SD7AXUVK2KYP X-MailFrom: sbrivio@redhat.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header CC: passt-user@passt.top X-Mailman-Version: 3.3.8 Precedence: list List-Id: "For passt users: support, questions and answers" Archived-At: Archived-At: List-Archive: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Hi Ayon, On Sat, 10 May 2025 21:26:29 -0230 Ayon T wrote: > Hi, > > I've been using pasta as a network driver for rootless docker and I've been > running into a couple of issues for a while now. I hope this is where I can > find some help troubleshooting. > > The issue is that when I use pasta as the network driver as opposed to > slirp4netns, I'm unable to access the internet through rootless docker or > use ping (or traceroute) through its containers. So if I run "docker pull > " I get a timeout error: > > > Using default tag: latest > Error response from daemon: Get "https://registry-1.docker.io/v2/": dial > tcp: lookup registry-1.docker.io on 10.0.2.3:53: read udp 169.254.2.1:58905 > ->10.0.2.3:53: i/o timeout > > I'm running pasta version 0.0~git20250217.a1e48a0-1 on Ubuntu 24.04.2 LTS > with docker v27.3.1 build ce12230. I suspect you might be hitting this: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2077158 ...which is fixed on Ubuntu 24.10 and later versions. As a workaround, I guess you can create the AppArmor profile for pasta manually, from: https://passt.top/passt/tree/contrib/apparmor/usr.bin.pasta or set /proc/sys/kernel/unprivileged_userns_apparmor_policy to 0, see also: https://github.com/kubevirt/kubevirt/issues/12333 Let me know if you still hit the issue. -- Stefano