summaryrefslogtreecommitdiff
path: root/contrib
diff options
context:
space:
mode:
authorPaul Holzinger <pholzing@redhat.com>2021-09-14 11:13:28 +0200
committerMatthew Heon <mheon@redhat.com>2021-09-16 09:42:14 -0400
commit0ca62196a0432355365ba2db0c20934fa36d8039 (patch)
tree2ffe2d1a0a5115ee384d1693e3fe79f0cdeb63be /contrib
parentb6789c3d5f763b2b7ff9a795e1a046de745bd3eb (diff)
downloadpodman-0ca62196a0432355365ba2db0c20934fa36d8039.tar.gz
podman-0ca62196a0432355365ba2db0c20934fa36d8039.tar.bz2
podman-0ca62196a0432355365ba2db0c20934fa36d8039.zip
libpod: rootful close binded ports
For rootful users ports are forwarded via iptables. To make sure no other process tries to use them, libpod will bind the ports and pass the fds to conmon. There seems to be race when a container is restarted because libpod tries to bind the port before the conmon process exited. The problem only hapens with the podman service because it keeps the connection open. Once we have the fd and passed it to conmon the podman service should close the connection. To verify run `sudo ss -tulpn` and check that only the conmon process keeps the port open. Previously you would also see the podman server process listed. Signed-off-by: Paul Holzinger <pholzing@redhat.com>
Diffstat (limited to 'contrib')
0 files changed, 0 insertions, 0 deletions