Skip to content

Commit 3250f8b

Browse files
committed
docs: Update docs for propagations the address specified in the -p option
Signed-off-by: Hayato Kiwata <[email protected]>
1 parent e0eb64e commit 3250f8b

File tree

2 files changed

+1
-9
lines changed

2 files changed

+1
-9
lines changed

docs/faq.md

-8
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,6 @@
2626
- [Does nerdctl have an equivalent of `sudo usermod -aG docker <USER>` ?](#does-nerdctl-have-an-equivalent-of-sudo-usermod--ag-docker-user-)
2727
- [Rootless](#rootless)
2828
- [How to use nerdctl as a non-root user? (Rootless mode)](#how-to-use-nerdctl-as-a-non-root-user-rootless-mode)
29-
- [`nerdctl run -p <PORT>` does not propagate source IP](#nerdctl-run--p-port-does-not-propagate-source-ip)
3029
- [`nerdctl run -p <PORT>` does not work with port numbers below 1024](#nerdctl-run--p-port-does-not-work-with-port-numbers-below-1024)
3130
- [Can't ping](#cant-ping)
3231
- [Containers do not automatically start after rebooting the host](#containers-do-not-automatically-start-after-rebooting-the-host)
@@ -309,13 +308,6 @@ See also:
309308
- https://rootlesscontaine.rs/getting-started/common/
310309
- https://rootlesscontaine.rs/getting-started/containerd/
311310
312-
### `nerdctl run -p <PORT>` does not propagate source IP
313-
Expected behavior with the default `rootlesskit` port driver.
314-
315-
The solution is to change the port driver to `slirp4netns` (sacrifices performance).
316-
317-
See https://rootlesscontaine.rs/getting-started/containerd/#changing-the-port-forwarder .
318-
319311
### `nerdctl run -p <PORT>` does not work with port numbers below 1024
320312
321313
Set sysctl value `net.ipv4.ip_unprivileged_port_start=0` .

docs/rootless.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -145,7 +145,7 @@ Rootless containerd recognizes the following environment variables to configure
145145
* `CONTAINERD_ROOTLESS_ROOTLESSKIT_STATE_DIR=DIR`: the rootlesskit state dir. Defaults to `$XDG_RUNTIME_DIR/containerd-rootless`.
146146
* `CONTAINERD_ROOTLESS_ROOTLESSKIT_NET=(slirp4netns|vpnkit|lxc-user-nic)`: the rootlesskit network driver. Defaults to "slirp4netns" if slirp4netns (>= v0.4.0) is installed. Otherwise defaults to "vpnkit".
147147
* `CONTAINERD_ROOTLESS_ROOTLESSKIT_MTU=NUM`: the MTU value for the rootlesskit network driver. Defaults to 65520 for slirp4netns, 1500 for other drivers.
148-
* `CONTAINERD_ROOTLESS_ROOTLESSKIT_PORT_DRIVER=(builtin|slirp4netns)`: the rootlesskit port driver. Defaults to "builtin" (this driver does not propagate the container's source IP address and always uses 127.0.0.1. Please check [Port Drivers](https://github.com/rootless-containers/rootlesskit/blob/master/docs/port.md#port-drivers) for more details).
148+
* `CONTAINERD_ROOTLESS_ROOTLESSKIT_PORT_DRIVER=(builtin|slirp4netns)`: the rootlesskit port driver. Defaults to "builtin".
149149
* `CONTAINERD_ROOTLESS_ROOTLESSKIT_SLIRP4NETNS_SANDBOX=(auto|true|false)`: whether to protect slirp4netns with a dedicated mount namespace. Defaults to "auto".
150150
* `CONTAINERD_ROOTLESS_ROOTLESSKIT_SLIRP4NETNS_SECCOMP=(auto|true|false)`: whether to protect slirp4netns with seccomp. Defaults to "auto".
151151
* `CONTAINERD_ROOTLESS_ROOTLESSKIT_DETACH_NETNS=(auto|true|false)`: whether to launch rootlesskit with the "detach-netns" mode.

0 commit comments

Comments
 (0)