rootless: enable IPv6 in RootlessKit network namespace#5055
Open
Akshitguptaa wants to merge 2 commits into
Open
rootless: enable IPv6 in RootlessKit network namespace#5055Akshitguptaa wants to merge 2 commits into
Akshitguptaa wants to merge 2 commits into
Conversation
AkihiroSuda
reviewed
Jul 9, 2026
AkihiroSuda
reviewed
Jul 9, 2026
AkihiroSuda
reviewed
Jul 9, 2026
AkihiroSuda
reviewed
Jul 9, 2026
AkihiroSuda
reviewed
Jul 9, 2026
AkihiroSuda
reviewed
Jul 9, 2026
| * `CONTAINERD_ROOTLESS_ROOTLESSKIT_IPV6=(true|false)`: whether to enable IPv6 inside the RootlessKit network namespace. | ||
| Defaults to "false". After enabling this, create IPv6-capable CNI networks with | ||
| `nerdctl network create --ipv6 --subnet <v6-subnet>` as usual. Published ports over IPv6 are | ||
| supported with `--port-driver=builtin` (the default). `--port-driver=slirp4netns` does not yet |
Member
There was a problem hiding this comment.
Does it work with pasta too? (--net=pasta --port-driver=implicit)
Author
There was a problem hiding this comment.
I tested this with pasta and --port-driver=implicit, but it currently fails during port exposure with no PortDriver is available. It looks like nerdctl's rootless-port hook expects the PortDriver API to be active when -p is passed, which isn't the case under implicit.
I've updated the docs in 5e18ed0 to explicitly note that pasta isn't supported for IPv6 port forwarding yet.
AkihiroSuda
reviewed
Jul 9, 2026
Akshitguptaa
force-pushed
the
ipv6-rootless-2608
branch
from
6f5ebe8 to
8eca7c7
Compare
AkihiroSuda
reviewed
Jul 12, 2026
AkihiroSuda
reviewed
Jul 12, 2026
AkihiroSuda
reviewed
Jul 12, 2026
Signed-off-by: akshitguptaa <akshitguptaa29@gmail.com>
Akshitguptaa
force-pushed
the
ipv6-rootless-2608
branch
from
8eca7c7 to
73bb564
Compare
AkihiroSuda
reviewed
Jul 12, 2026
| func TestRunContainerWithStaticIP6(t *testing.T) { | ||
| if rootlessutil.IsRootless() { | ||
| t.Skip("Static IP6 assignment is not supported rootless mode yet.") | ||
| if rootlessutil.IsRootless() && !testutil.RootlessKitIPv6Enabled(context.Background()) { |
Signed-off-by: akshitguptaa <akshitguptaa29@gmail.com>
Akshitguptaa
force-pushed
the
ipv6-rootless-2608
branch
from
73bb564 to
624b769
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds CONTAINERD_ROOTLESS_ROOTLESSKIT_IPV6=(true|false) to enable IPv6 inside the
RootlessKit network namespace, wired through to
rootlesskit --ipv6.Scope: covers --port-driver=builtin (the default). --port-driver=slirp4netns
does not yet support IPv6 port forwarding upstream
(rootless-containers/slirp4netns#276 is still open), so that path remains
unsupported here.
Fixes #2608