diff --git a/AlmaLinux.md b/AlmaLinux.md index 6710d87..3215e2b 100644 --- a/AlmaLinux.md +++ b/AlmaLinux.md @@ -153,7 +153,9 @@ systemctl enable --now podman > [!NOTE] Read the docs. > `man podman-systemd.unit` -### slirp4netns +### Prepare host networking stack + +#### slirp4netns > [!TODO] > This may not be necessary but my system is currently using it. @@ -162,7 +164,7 @@ systemctl enable --now podman dnf install slirp4netns ``` -### Install DNS server for `podman` +#### Install DNS server for `podman` > [!TODO] > Not sure how to resolve these correctly yet but the journal logs it @@ -171,8 +173,7 @@ dnf install slirp4netns ```bash dnf install aardvark-dns ``` - -### Enable unprivileged port binding +#### Allow rootless binding port 80+ > [!NOTE] This is only necessary if you are setting up the reverse proxy. @@ -181,6 +182,13 @@ printf '%s\n' 'net.ipv4.ip_unprivileged_port_start=80' > /etc/sysctl.d/99-unpriv sysctl 'net.ipv4.ip_unprivileged_port_start=80' ``` +#### Allow containers to route within multiple networks + +```bash +printf '%s\n' 'net.ipv4.conf.all.rp_filter=2' > /etc/sysctl.d/99-reverse-path-loose.conf +sysctl -w net.ipv4.conf.all.rp_filter=2 +``` + ### Prepare container user This user will be the owner of all containers with no login shell or root