On Sat, Apr 08, 2017 at 10:43:28PM +0200, Nicolas Sebrecht wrote: > Hi, > > The latest docker image fails with errors like: > > fatal: Unable to look up github.com (port 9418) (Name or service not known) > > Later mirrorselect and layman syncs fail, too. > > Any idea?
I don't think the issue comes from the image. builder-amd64> ping 172.17.0.1 OK builder-amd64> ping IP_HOST OK builder-amd64> ping 8.8.8.8 FAIL host> ping 8.8.8.8 OK host> ping IP_BUILDER_AMD64 OK host> cat /proc/sys/net/ipv4/ip_forward 1 host> iptables -L -t nat Chain PREROUTING (policy ACCEPT) target prot opt source destination DOCKER all -- anywhere anywhere ADDRTYPE match dst-type LOCAL Chain INPUT (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination DOCKER all -- anywhere !127.0.0.0/8 ADDRTYPE match dst-type LOCAL Chain POSTROUTING (policy ACCEPT) target prot opt source destination MASQUERADE all -- 172.17.0.0/16 anywhere Chain DOCKER (2 references) target prot opt source destination RETURN all -- anywhere anywhere host> The ping goes out from the host. The reponse goes to IP_HOST but is not forwarded to IP_BUILDER_AMD64. Hmm... -- Nicolas Sebrecht