Hi! > On 17 Mar 2017, at 09:27, Alexander Shulyak <[email protected]> > wrote: > I have an a question about network interfaces for containers in Nixos. > How I can make a network of container as a full-fledged part of a host > network? > So, I have a host network with subnet in ip-address range 10.0.0.0/23, and I > want that network of container on nixos host is also be in this subnet. How I > can forward this interface to the container? > I already try to make bridge, but it drop the network on host.
I am currently fiddling around in a similar area, I think there are some options available. If I understood you correctly, then you want your containers to work as if they are connected directly to the host's network. Using the "hostBridge" setting for the container should do the trick. Just make sure that the bridge does exist on the host and also includes the real network interface of your host. For imperative containers there should be a flag "--bridge" to nixos-container. Also setting HOST_BRIDGE in the container's config file on the host should do the trick, that's in "/etc/containers/NAME.conf". One option which I did not yet try myself might be using "MACVLANS". I think that's creating virtual interfaces for the container directly on top of an existing host interface. When I studied the things, it helped me a lot to look into the script which starts the containers, it can be found here: https://github.com/NixOS/nixpkgs/blob/release-16.09/nixos/modules/virtualisation/containers.nix#L89 Hope the fragments are useful :) Cheers, Johannes _______________________________________________ nix-dev mailing list [email protected] http://lists.science.uu.nl/mailman/listinfo/nix-dev
