Bug 2133390

Once merged, will be fixed with https://github.com/containers/netavark/pull/435

Hello,
All 0Day errata must be submitted to QE by the 26th of October

Paul, it seems the build of netavark off v1.1.0-rhel branch fails with: http://download.eng.bos.redhat.com/brewroot/work/tasks/3573/48413573/build.log

Do you mind having a look? Seems vendor tarball needs updating?

Similar situation for aardvark-dns:

http://download.eng.bos.redhat.com/brewroot/work/tasks/4054/48414054/build.log

Test with podman-4.2.0-3.module+el8.7.0+17049+f4ed52ac.x86_64 and netavark-1.1.0-7.module+el8.7.0+17049+f4ed52ac.x86_64 and it works as expected. The global ipv6 addr is gone inside the container. So set this to verified.
# podman --log-level debug run -itd --name c1 --ip=10.85.41.247 --network ens3 quay.io/libpod/busybox
INFO[0000] podman filtering at log level debug          
DEBU[0000] Called run.PersistentPreRunE(podman --log-level debug run -itd --name c1 --ip=10.85.41.247 --network ens3 quay.io/libpod/busybox) 
DEBU[0000] Merged system config "/usr/share/containers/containers.conf" 
DEBU[0000] Using conmon: "/usr/bin/conmon"              
DEBU[0000] Initializing boltdb state at /var/lib/containers/storage/libpod/bolt_state.db 
DEBU[0000] Using graph driver overlay                   
DEBU[0000] Using graph root /var/lib/containers/storage 
DEBU[0000] Using run root /run/containers/storage       
DEBU[0000] Using static dir /var/lib/containers/storage/libpod 
DEBU[0000] Using tmp dir /run/libpod                    
DEBU[0000] Using volume path /var/lib/containers/storage/volumes 
DEBU[0000] Set libpod namespace to ""                   
DEBU[0000] [graphdriver] trying provided driver "overlay" 
DEBU[0000] Cached value indicated that overlay is supported 
DEBU[0000] Cached value indicated that overlay is supported 
DEBU[0000] Cached value indicated that metacopy is being used 
DEBU[0000] Cached value indicated that native-diff is not being used 
INFO[0000] Not using native diff for overlay, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled 
DEBU[0000] backingFs=xfs, projectQuotaSupported=false, useNativeDiff=false, usingMetacopy=true 
DEBU[0000] Initializing event backend file              
DEBU[0000] Configured OCI runtime runj initialization failed: no valid executable found for OCI runtime runj: invalid argument 
DEBU[0000] Configured OCI runtime kata initialization failed: no valid executable found for OCI runtime kata: invalid argument 
DEBU[0000] Configured OCI runtime runsc initialization failed: no valid executable found for OCI runtime runsc: invalid argument 
DEBU[0000] Configured OCI runtime krun initialization failed: no valid executable found for OCI runtime krun: invalid argument 
DEBU[0000] Using OCI runtime "/usr/bin/runc"            
INFO[0000] Setting parallel job count to 13             
DEBU[0000] Pulling image quay.io/libpod/busybox (policy: missing) 
DEBU[0000] Looking up image "quay.io/libpod/busybox" in local containers storage 
DEBU[0000] Normalized platform linux/amd64 to {amd64 linux  [] } 
DEBU[0000] Trying "quay.io/libpod/busybox:latest" ...   
DEBU[0000] parsed reference into "[overlay@/var/lib/containers/storage+/run/containers/storage:overlay.mountopt=nodev,metacopy=on]@f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f" 
DEBU[0000] Found image "quay.io/libpod/busybox" as "quay.io/libpod/busybox:latest" in local containers storage 
DEBU[0000] Found image "quay.io/libpod/busybox" as "quay.io/libpod/busybox:latest" in local containers storage ([overlay@/var/lib/containers/storage+/run/containers/storage:overlay.mountopt=nodev,metacopy=on]@f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f) 
DEBU[0000] exporting opaque data as blob "sha256:f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f" 
DEBU[0000] Looking up image "quay.io/libpod/busybox:latest" in local containers storage 
DEBU[0000] Normalized platform linux/amd64 to {amd64 linux  [] } 
DEBU[0000] Trying "quay.io/libpod/busybox:latest" ...   
DEBU[0000] parsed reference into "[overlay@/var/lib/containers/storage+/run/containers/storage:overlay.mountopt=nodev,metacopy=on]@f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f" 
DEBU[0000] Found image "quay.io/libpod/busybox:latest" as "quay.io/libpod/busybox:latest" in local containers storage 
DEBU[0000] Found image "quay.io/libpod/busybox:latest" as "quay.io/libpod/busybox:latest" in local containers storage ([overlay@/var/lib/containers/storage+/run/containers/storage:overlay.mountopt=nodev,metacopy=on]@f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f) 
DEBU[0000] exporting opaque data as blob "sha256:f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f" 
DEBU[0000] Looking up image "quay.io/libpod/busybox" in local containers storage 
DEBU[0000] Normalized platform linux/amd64 to {amd64 linux  [] } 
DEBU[0000] Trying "quay.io/libpod/busybox:latest" ...   
DEBU[0000] parsed reference into "[overlay@/var/lib/containers/storage+/run/containers/storage:overlay.mountopt=nodev,metacopy=on]@f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f" 
DEBU[0000] Found image "quay.io/libpod/busybox" as "quay.io/libpod/busybox:latest" in local containers storage 
DEBU[0000] Found image "quay.io/libpod/busybox" as "quay.io/libpod/busybox:latest" in local containers storage ([overlay@/var/lib/containers/storage+/run/containers/storage:overlay.mountopt=nodev,metacopy=on]@f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f) 
DEBU[0000] exporting opaque data as blob "sha256:f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f" 
DEBU[0000] Inspecting image f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f 
DEBU[0000] exporting opaque data as blob "sha256:f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f" 
DEBU[0000] exporting opaque data as blob "sha256:f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f" 
DEBU[0000] Inspecting image f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f 
DEBU[0000] Inspecting image f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f 
DEBU[0000] Inspecting image f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f 
DEBU[0000] using systemd mode: false                    
DEBU[0000] setting container name c1                    
DEBU[0000] No hostname set; container's hostname will default to runtime default 
DEBU[0000] Loading seccomp profile from "/usr/share/containers/seccomp.json" 
DEBU[0000] Successfully loaded network ens3: &{ens3 ffde1b5b11bda8e51db56f3b747d14a17fd4d672d950d950d86f31ac6cfbd3fe macvlan ens3 2022-10-25 06:27:39.315183134 -0400 EDT [{{{10.85.40.0 fffff800}} 10.85.40.1 <nil>}] false false true map[] map[] map[driver:host-local]} 
DEBU[0000] Successfully loaded 2 networks               
DEBU[0000] Allocated lock 0 for container 5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7 
DEBU[0000] parsed reference into "[overlay@/var/lib/containers/storage+/run/containers/storage:overlay.mountopt=nodev,metacopy=on]@f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f" 
DEBU[0000] exporting opaque data as blob "sha256:f0b02e9d092d905d0d87a8455a1ae3e9bb47b4aa3dc125125ca5cd10d6441c9f" 
DEBU[0000] Cached value indicated that idmapped mounts for overlay are not supported 
DEBU[0000] Check for idmapped mounts support            
DEBU[0000] Created container "5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7" 
DEBU[0000] Container "5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7" has work directory "/var/lib/containers/storage/overlay-containers/5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7/userdata" 
DEBU[0000] Container "5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7" has run directory "/run/containers/storage/overlay-containers/5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7/userdata" 
DEBU[0000] [graphdriver] trying provided driver "overlay" 
DEBU[0000] Cached value indicated that overlay is supported 
DEBU[0000] Cached value indicated that overlay is supported 
DEBU[0000] Cached value indicated that metacopy is being used 
DEBU[0000] Made network namespace at /run/netns/netns-ce75426a-d88b-36b4-cd7d-3b5d43a7cf09 for container 5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7 
DEBU[0000] backingFs=xfs, projectQuotaSupported=false, useNativeDiff=false, usingMetacopy=true 
DEBU[0000] overlay: mount_data=lowerdir=/var/lib/containers/storage/overlay/l/QRZGZPUYFCAI4KJCXHW44QAHC3,upperdir=/var/lib/containers/storage/overlay/d671315b004b7cb642e199613c40294ca72c6f7acdb9e50c50a92055fd8d144a/diff,workdir=/var/lib/containers/storage/overlay/d671315b004b7cb642e199613c40294ca72c6f7acdb9e50c50a92055fd8d144a/work,nodev,metacopy=on,context="system_u:object_r:container_file_t:s0:c603,c986" 
DEBU[0000] Mounted container "5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7" at "/var/lib/containers/storage/overlay/d671315b004b7cb642e199613c40294ca72c6f7acdb9e50c50a92055fd8d144a/merged" 
DEBU[0000] Created root filesystem for container 5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7 at /var/lib/containers/storage/overlay/d671315b004b7cb642e199613c40294ca72c6f7acdb9e50c50a92055fd8d144a/merged 
[DEBUG netavark::network::validation] "Validating network namespace..."
[DEBUG netavark::commands::setup] "Setting up..."
[INFO  netavark::firewall] Using iptables firewall driver
[DEBUG netavark::network::core_utils] Setting sysctl value for net.ipv4.ip_forward to 1
[DEBUG netavark::commands::setup] Setting up network ens3 with driver macvlan
[DEBUG netavark::network::core] Container macvlan name: "eth0"
[DEBUG netavark::network::core] Master interface name: "ens3"
[DEBUG netavark::network::core] IP address for macvlan: [10.85.41.247/21]
[DEBUG netavark::network::core_utils] Setting sysctl value for /proc/sys/net/ipv6/conf/eth0/autoconf to 0
[DEBUG netavark::network::core] Configured static up address for eth0
[DEBUG netavark::network::core] Container macvlan mac: "fe:00:dc:66:1a:17"
[DEBUG netavark::commands::setup] {
        "ens3": StatusBlock {
            dns_search_domains: Some(
                [],
            ),
            dns_server_ips: Some(
                [],
            ),
            interfaces: Some(
                {
                    "eth0": NetInterface {
                        mac_address: "fe:00:dc:66:1a:17",
                        subnets: Some(
                            [
                                NetAddress {
                                    gateway: Some(
                                        10.85.40.1,
                                    ),
                                    ipnet: 10.85.41.247/21,
                                },
                            ],
                        ),
                    },
                },
            ),
        },
    }
[DEBUG netavark::commands::setup] "Setup complete"
DEBU[0000] Adding nameserver(s) from network status of '[]' 
DEBU[0000] Adding search domain(s) from network status of '[]' 
DEBU[0000] /etc/system-fips does not exist on host, not mounting FIPS mode subscription 
DEBU[0000] Setting Cgroups for container 5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7 to machine.slice:libpod:5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7 
DEBU[0000] reading hooks from /usr/share/containers/oci/hooks.d 
DEBU[0000] added hook /usr/share/containers/oci/hooks.d/oci-seccomp-bpf-hook.json 
DEBU[0000] hook oci-seccomp-bpf-hook.json did not match 
DEBU[0000] Workdir "/" resolved to host path "/var/lib/containers/storage/overlay/d671315b004b7cb642e199613c40294ca72c6f7acdb9e50c50a92055fd8d144a/merged" 
DEBU[0000] Created OCI spec for container 5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7 at /var/lib/containers/storage/overlay-containers/5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7/userdata/config.json 
DEBU[0000] /usr/bin/conmon messages will be logged to syslog 
DEBU[0000] running conmon: /usr/bin/conmon               args="[--api-version 1 -c 5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7 -u 5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7 -r /usr/bin/runc -b /var/lib/containers/storage/overlay-containers/5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7/userdata -p /run/containers/storage/overlay-containers/5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7/userdata/pidfile -n c1 --exit-dir /run/libpod/exits --full-attach -s -l k8s-file:/var/lib/containers/storage/overlay-containers/5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7/userdata/ctr.log --log-level debug --syslog -t --conmon-pidfile /run/containers/storage/overlay-containers/5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7/userdata/conmon.pid --exit-command /usr/bin/podman --exit-command-arg --root --exit-command-arg /var/lib/containers/storage --exit-command-arg --runroot --exit-command-arg /run/containers/storage --exit-command-arg --log-level --exit-command-arg debug --exit-command-arg --cgroup-manager --exit-command-arg systemd --exit-command-arg --tmpdir --exit-command-arg /run/libpod --exit-command-arg --network-config-dir --exit-command-arg  --exit-command-arg --network-backend --exit-command-arg netavark --exit-command-arg --volumepath --exit-command-arg /var/lib/containers/storage/volumes --exit-command-arg --runtime --exit-command-arg runc --exit-command-arg --storage-driver --exit-command-arg overlay --exit-command-arg --storage-opt --exit-command-arg overlay.mountopt=nodev,metacopy=on --exit-command-arg --events-backend --exit-command-arg file --exit-command-arg --syslog --exit-command-arg container --exit-command-arg cleanup --exit-command-arg 5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7]"
INFO[0000] Running conmon under slice machine.slice and unitName libpod-conmon-5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7.scope 
DEBU[0000] Received: 150524                             
INFO[0000] Got Conmon PID as 150512                     
DEBU[0000] Created container 5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7 in OCI runtime 
DEBU[0000] Starting container 5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7 with command [sh] 
DEBU[0000] Started container 5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7 
5c30360266f4108c5925050fb0afd9fbcd35fed81b362b43d5837532219d55d7
DEBU[0000] Called run.PersistentPostRunE(podman --log-level debug run -itd --name c1 --ip=10.85.41.247 --network ens3 quay.io/libpod/busybox) 
[root@sweetpig-6 ~]#  podman exec -ti c1 sh
/ # ifconfig
eth0      Link encap:Ethernet  HWaddr FE:00:DC:66:1A:17  
          inet addr:10.85.41.247  Bcast:10.85.47.255  Mask:255.255.248.0
          inet6 addr: fe80::fc00:dcff:fe66:1a17/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:139 errors:0 dropped:0 overruns:0 frame:0
          TX packets:7 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:8514 (8.3 KiB)  TX bytes:602 (602.0 B)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

/ # exit

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Low: container-tools:rhel8 security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:7822

The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days