podman: failed to create bridge "cni-podman0" when trying to start a container

Is this a BUG REPORT or FEATURE REQUEST? (leave only one on its own line)

/kind bug

Description

Steps to reproduce the issue:

  1. start a container eg. podman run docker.io/busybox

Describe the results you received:

container failed to start

# podman run docker.io/busybox
Trying to pull docker.io/busybox...
Getting image source signatures
Copying blob 7c9d20b9b6cd done
Copying config 19485c79a9 done
Writing manifest to image destination
Storing signatures
ERRO[0014] Error adding network: failed to create bridge "cni-podman0": could not add "cni-podman0": operation not supported
ERRO[0014] Error while adding pod to CNI network "podman": failed to create bridge "cni-podman0": could not add "cni-podman0": operation not supported
Error: error configuring network namespace for container 6aaba61c7b57874b46c1b5358edf6c88f921f504a57b3c9ea09b7496eceb535b: failed to create bridge "cni-podman0": could not add "cni-podman0": operation not supported

Describe the results you expected:

Additional information you deem important (e.g. issue happens only occasionally):

I used the exact configure file as https://github.com/containers/libpod/blob/master/cni/87-podman-bridge.conflist

the log in everything could be helpful ?

Sep 26 19:25:20 some_host [606172.428539] systemd-udevd[14153]: Process 'net.sh cni-podman0 start' failed with exit code 1.
Sep 26 19:25:20 some_host [606172.430647] systemd-udevd[14153]: Process 'net.sh cni-podman0 stop' failed with exit code 1.

I’ve checked the network as the document in https://kubernetes.io/docs/concepts/extend-kubernetes/compute-storage-net/network-plugins/#network-plugin-requirements

the net/bridge/bridge-nf-call-iptables is already set to 1.

How can I troubleshoot this problem now?

Output of podman version:

Version:            1.6.0-rc1
RemoteAPI Version:  1
Go Version:         go1.12.9
OS/Arch:            linux/amd64

Output of podman info --debug:

debug:
  compiler: gc
  git commit: ""
  go version: go1.12.9
  podman version: 1.6.0-rc1
host:
  BuildahVersion: 1.11.2
  Conmon:
    package: Unknown
    path: /usr/libexec/podman/conmon
    version: 'conmon version 2.0.1, commit: 4dc8bcfec41e10ca760c8e2089474c2843dfd066'
  Distribution:
    distribution: gentoo
    version: unknown
  MemFree: 216048619520
  MemTotal: 270106537984
  OCIRuntime:
    package: Unknown
    path: /usr/bin/runc
    version: |-
      runc version 1.0.0-rc8
      commit: 425e105d5a03fabd737a126ad93d62a9eeede87f
      spec: 1.0.1-dev
  SwapFree: 0
  SwapTotal: 0
  arch: amd64
  cpus: 80
  eventlogger: file
  hostname: some_host
  kernel: 4.19.44-gentoo
  os: linux
  rootless: false
  uptime: 168h 19m 38.59s (Approximately 7.00 days)
registries:
  blocked: null
  insecure: null
  search:
  - docker.douban
store:
  ConfigFile: /etc/containers/storage.conf
  ContainerStore:
    number: 33
  GraphDriverName: overlay
  GraphOptions: {}
  GraphRoot: /var/lib/containers/storage
  GraphStatus:
    Backing Filesystem: extfs
    Native Overlay Diff: "true"
    Supports d_type: "true"
    Using metacopy: "false"
  ImageStore:
    number: 3
  RunRoot: /var/run/containers/storage
  VolumePath: /var/lib/containers/storage/volumes

Package info (e.g. output of rpm -q podman or apt list podman):

eix libpod
[I] app-emulation/libpod
     Available versions:  ~1.5.1-r1^t{tbz2} (~)1.6.0_rc1^t{tbz2}[1] {apparmor btrfs ostree +rootless selinux}
     Installed versions:  1.6.0_rc1^t{tbz2}[1](04:20:28 PM 09/23/2019)(rootless -apparmor -btrfs -ostree -selinux)
     Homepage:            https://github.com/containers/libpod/
     Description:         Library and podman tool for running OCI-based containers in Pods

Additional environment details (AWS, VirtualBox, physical, etc.): physical

The cni-plugin version is 0.8.1

About this issue

  • Original URL
  • State: closed
  • Created 5 years ago
  • Comments: 20 (9 by maintainers)

Most upvoted comments

I view this as a CNI bug; we should never require manual intervention in bridge creation.