<div dir="ltr"><div>So now here is the tcpdump wide open traffic I see when I attach to a container (I have two now, nsa, and nsa2) and run "dhclient" from inside the container (for some reason they are still not getting a DHCP address when they start up - I have to attach and run "dhclient" manually inside the container to get a DHCP address).</div><div><br></div><div>[ubuntu@f33sv1 ~]$ sudo tcpdump -i lxcbr0 <br>dropped privs to tcpdump<br>tcpdump: verbose output suppressed, use -v or -vv for full protocol decode<br>listening on lxcbr0, link-type EN10MB (Ethernet), capture size 262144 bytes<br>09:57:30.749047 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:16:3e:33:e5:bb (oui Unknown), length 300<br>09:57:30.750038 ARP, Request who-has 10.0.3.162 tell f33sv1, length 28<br>09:57:31.758604 ARP, Request who-has 10.0.3.162 tell f33sv1, length 28<br>09:57:32.782601 ARP, Request who-has 10.0.3.162 tell f33sv1, length 28<br>09:57:33.727730 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:16:3e:33:e5:bb (oui Unknown), length 300<br>09:57:33.756368 IP f33sv1 > <a href="http://10.0.3.162">10.0.3.162</a>: ICMP echo request, id 64473, seq 0, length 28<br>09:57:33.756675 IP f33sv1.bootps > 10.0.3.162.bootpc: BOOTP/DHCP, Reply, length 300<br>09:57:33.756991 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:16:3e:33:e5:bb (oui Unknown), length 300<br>09:57:33.757211 IP f33sv1.bootps > 10.0.3.162.bootpc: BOOTP/DHCP, Reply, length 300<br>09:57:33.768852 IP f33sv1.bootps > 10.0.3.162.bootpc: BOOTP/DHCP, Reply, length 302<br>09:57:38.990702 ARP, Request who-has 10.0.3.162 tell f33sv1, length 28<br>09:57:38.991039 ARP, Reply 10.0.3.162 is-at 00:16:3e:33:e5:bb (oui Unknown), length 28<br>09:57:39.503692 IP6 fe80::216:3eff:fe33:e5bb > ff02::2: ICMP6, router solicitation, length 16<br>09:57:54.862603 IP6 fe80::216:3eff:fe13:707c > ff02::2: ICMP6, router solicitation, length 16<br>09:57:57.701930 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 00:16:3e:13:70:7c (oui Unknown), length 300<br>09:57:57.719918 IP f33sv1.bootps > 10.0.3.166.bootpc: BOOTP/DHCP, Reply, length 303<br>09:58:03.054856 ARP, Request who-has 10.0.3.166 tell f33sv1, length 28<br>09:58:03.055166 ARP, Reply 10.0.3.166 is-at 00:16:3e:13:70:7c (oui Unknown), length 28<br>09:58:15.342721 IP6 fe80::216:3eff:fe33:e5bb > ff02::2: ICMP6, router solicitation, length 16<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Dec 23, 2020 at 9:53 AM Orabuntu-LXC <<a href="mailto:gilbert@orabuntu-lxc.com">gilbert@orabuntu-lxc.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div dir="ltr"><div>SOLVED! <br></div><div><br></div><div>I noticed that lxcbr0 had a mac as shown by ifconfig of 00:16:3e:00:00:00 and suddenly realized the "00:00:00" did not look right. So used a mac address random generation function to generate a valid triplet to replace the 00:00:00 and edited my /etc/sysconfig/lxc-net as follows and then restarted lxc-net and voila! the nsa2 container got a DHCP address immediately!</div><div><br></div><div>ifconfig lxcbr0<br></div><div><br></div><div>lxcbr0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500<br> inet 10.0.3.1 netmask 255.255.255.0 broadcast 10.0.3.255<br> ether 00:16:3e:<b>00:00:00</b> txqueuelen 1000 (Ethernet)<br> RX packets 61 bytes 4308 (4.2 KiB)[ubuntu@f33sv1 ~]$ cat /etc/sysconfig/lxc-net<br># Leave USE_LXC_BRIDGE as "true" if you want to use lxcbr0 for your<br># containers. Set to "false" if you'll use virbr0 or another existing<br># bridge, or macvlan to your host's NIC.<br>USE_LXC_BRIDGE="true"<br><br># If you change the LXC_BRIDGE to something other than lxcbr0, then<br># you will also need to update your /etc/lxc/default.conf as well as the<br># configuration (/var/lib/lxc/<container>/config) for any containers<br># already created using the default config to reflect the new bridge<br># name.<br># If you have the dnsmasq daemon installed, you'll also have to update<br># /etc/dnsmasq.d/lxc and restart the system wide dnsmasq daemon.<br>LXC_BRIDGE="lxcbr0"<br>LXC_BRIDGE_MAC="00:16:3e:<b>8f:2f:ea</b>" <-- changed 00:00:00 to 8f:2f:ea<br>LXC_ADDR="10.0.3.1"<br>LXC_NETMASK="255.255.255.0"<br>LXC_NETWORK="<a href="http://10.0.3.0/24" target="_blank">10.0.3.0/24</a>"<br>LXC_DHCP_RANGE="10.0.3.2,10.0.3.254"<br>LXC_DHCP_MAX="253"<br># Uncomment the next line if you'd like to use a conf-file for the lxcbr0<br># dnsmasq. For instance, you can use 'dhcp-host=mail1,10.0.3.100' to have<br># container 'mail1' always get ip address 10.0.3.100.<br>#LXC_DHCP_CONFILE=/etc/lxc/dnsmasq.conf<br><br># Uncomment the next line if you want lxcbr0's dnsmasq to resolve the .lxc<br># domain. You can then add "server=/lxc/<a href="http://10.0.3.1" target="_blank">10.0.3.1</a>' (or your actual $LXC_ADDR)<br># to /etc/dnsmasq.conf, after which 'container1.lxc' will resolve on your<br># host.<br>LXC_DOMAIN="lxc"<br></div><div><br></div><div>sudo service lxc-net restart</div><div><br></div><div>LXC container nsa2 got an ipv4 address directly these changes were made.<br></div><div><br></div><div>[ubuntu@f33sv1 ~]$ sudo lxc-ls -f<br>[sudo] password for ubuntu: <br>NAME STATE AUTOSTART GROUPS IPV4 IPV6 UNPRIVILEGED <br>nsa2 RUNNING 0 - 10.0.3.166 - false <br>[ubuntu@f33sv1 ~]$ sudo lxc-attach -n nsa2<br>root@nsa2:/home/ubuntu# ifconfig<br>eth0 Link encap:Ethernet HWaddr 00:16:3e:13:70:7c <br> inet addr:10.0.3.166 Bcast:10.0.3.255 Mask:255.255.255.0<br> inet6 addr: fe80::216:3eff:fe13:707c/64 Scope:Link<br> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1<br> RX packets:8 errors:0 dropped:0 overruns:0 frame:0<br> TX packets:15 errors:0 dropped:0 overruns:0 carrier:0<br> collisions:0 txqueuelen:1000 <br> RX bytes:727 (727.0 B) TX bytes:1390 (1.3 KB)<br><br>lo Link encap:Local Loopback <br> inet addr:127.0.0.1 Mask:255.0.0.0<br> inet6 addr: ::1/128 Scope:Host<br> UP LOOPBACK RUNNING MTU:65536 Metric:1<br> RX packets:0 errors:0 dropped:0 overruns:0 frame:0<br> TX packets:0 errors:0 dropped:0 overruns:0 carrier:0<br> collisions:0 txqueuelen:1000 <br> RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)<br><br>root@nsa2:/home/ubuntu# <br></div><div><br></div><div>Checking now to see if I can re-enable ipv6 (which I expect should be fine). I re-enabled ipv6 but it still is having some problems getting an ipv4 address in the container. I find that if I attach to the container and run "dhclient" I can get an address reliably with ipv6 enabled in sysctl and with a proper mac address on lxcbr0, but that the container is not getting an ipv4 address automatically when started (I have to attach and run "dhclient" inside the container).</div><div><br></div><div>[ubuntu@f33sv1 ~]$ sudo lxc-attach -n nsa2<br>root@nsa2:/home/ubuntu# ifconfig<br>eth0 Link encap:Ethernet HWaddr 00:16:3e:13:70:7c <br> inet6 addr: fe80::216:3eff:fe13:707c/64 Scope:Link<br> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1<br> RX packets:2 errors:0 dropped:0 overruns:0 frame:0<br> TX packets:8 errors:0 dropped:0 overruns:0 carrier:0<br> collisions:0 txqueuelen:1000 <br> RX bytes:108 (108.0 B) TX bytes:656 (656.0 B)<br><br>lo Link encap:Local Loopback <br> inet addr:127.0.0.1 Mask:255.0.0.0<br> inet6 addr: ::1/128 Scope:Host<br> UP LOOPBACK RUNNING MTU:65536 Metric:1<br> RX packets:0 errors:0 dropped:0 overruns:0 frame:0<br> TX packets:0 errors:0 dropped:0 overruns:0 carrier:0<br> collisions:0 txqueuelen:1000 <br> RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)<br><br>root@nsa2:/home/ubuntu# dhclient<br>root@nsa2:/home/ubuntu# ifconfig<br>eth0 Link encap:Ethernet HWaddr 00:16:3e:13:70:7c <br> inet addr:10.0.3.166 Bcast:10.0.3.255 Mask:255.255.255.0<br> inet6 addr: fe80::216:3eff:fe13:707c/64 Scope:Link<br> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1<br> RX packets:3 errors:0 dropped:0 overruns:0 frame:0<br> TX packets:10 errors:0 dropped:0 overruns:0 carrier:0<br> collisions:0 txqueuelen:1000 <br> RX bytes:453 (453.0 B) TX bytes:1068 (1.0 KB)<br><br>lo Link encap:Local Loopback <br> inet addr:127.0.0.1 Mask:255.0.0.0<br> inet6 addr: ::1/128 Scope:Host<br> UP LOOPBACK RUNNING MTU:65536 Metric:1<br> RX packets:0 errors:0 dropped:0 overruns:0 frame:0<br> TX packets:0 errors:0 dropped:0 overruns:0 carrier:0<br> collisions:0 txqueuelen:1000 <br> RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)</div><div><br></div><div>But this is progress ... also I have the following firewalld set:</div><div><br></div><div>[ubuntu@f33sv1 ~]$ sudo firewall-cmd --add-service=dhcp --permanent<br>Warning: ALREADY_ENABLED: dhcp<br>success<br>[ubuntu@f33sv1 ~]$ <br></div><div><br></div><div>So still working out which moving parts here are actually at issue ... but progress made.<br></div><div><br></div><div><br></div><div><br></div></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Dec 23, 2020 at 9:00 AM Orabuntu-LXC <<a href="mailto:gilbert@orabuntu-lxc.com" target="_blank">gilbert@orabuntu-lxc.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Next I tried listening on the veth that LXC creates when the container is started. Once it was up, I logged into the LXC container nsa2 and ran the command "dhclient" at the command line of the container. Now I see some traffic on ports 67 and 68 as follows but still not understanding what is happening here.<br></div><div><br></div><div>vethLVRkjQ: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500<br> inet6 fe80::fcb2:39ff:fe74:cb61 prefixlen 64 scopeid 0x20<link><br> ether fe:b2:39:74:cb:61 txqueuelen 1000 (Ethernet)<br> RX packets 7 bytes 586 (586.0 B)<br> RX errors 0 dropped 0 overruns 0 frame 0<br> TX packets 14 bytes 1224 (1.1 KiB)<br> TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0<br><br>[ubuntu@f33sv1 ~]$ sudo tcpdump -i vethLVRkjQ -vvv -s 1500 '((port 67 or port 68))'<br>dropped privs to tcpdump<br>tcpdump: listening on vethLVRkjQ, link-type EN10MB (Ethernet), capture size 1500 bytes<br>08:57:05.392702 IP (tos 0x10, ttl 128, id 0, offset 0, flags [none], proto UDP (17), length 328)<br> 0.0.0.0.bootpc > 255.255.255.255.bootps: [udp sum ok] BOOTP/DHCP, Request from 00:16:3e:13:70:7c (oui Unknown), length 300, xid 0xb7304d0f, Flags [none] (0x0000)<br> Client-Ethernet-Address 00:16:3e:13:70:7c (oui Unknown)<br> Vendor-rfc1048 Extensions<br> Magic Cookie 0x63825363<br> DHCP-Message Option 53, length 1: Discover<br> Hostname Option 12, length 4: "nsa2"<br> Parameter-Request Option 55, length 13: <br> Subnet-Mask, BR, Time-Zone, Default-Gateway<br> Domain-Name, Domain-Name-Server, Option 119, Hostname<br> Netbios-Name-Server, Netbios-Scope, MTU, Classless-Static-Route<br> NTP<br> END Option 255, length 0<br> PAD Option 0, length 0, occurs 35<br>08:57:08.398285 IP (tos 0xc0, ttl 64, id 7927, offset 0, flags [none], proto UDP (17), length 328)<br> f33sv1.bootps > 10.0.3.166.bootpc: [bad udp cksum 0x1bec -> 0x19ab!] BOOTP/DHCP, Reply, length 300, xid 0xb7304d0f, Flags [none] (0x0000)<br> Your-IP 10.0.3.166<br> Server-IP f33sv1<br> Client-Ethernet-Address 00:16:3e:13:70:7c (oui Unknown)<br> Vendor-rfc1048 Extensions<br> Magic Cookie 0x63825363<br> DHCP-Message Option 53, length 1: Offer<br> Server-ID Option 54, length 4: f33sv1<br> Lease-Time Option 51, length 4: 3600<br> RN Option 58, length 4: 1800<br> RB Option 59, length 4: 3150<br> Subnet-Mask Option 1, length 4: 255.255.255.0<br> BR Option 28, length 4: 10.0.3.255<br> Default-Gateway Option 3, length 4: f33sv1<br> Domain-Name-Server Option 6, length 4: f33sv1<br> Domain-Name Option 15, length 3: "lxc"<br> END Option 255, length 0<br> PAD Option 0, length 0, occurs 3<br>08:57:08.398693 IP (tos 0x10, ttl 128, id 0, offset 0, flags [none], proto UDP (17), length 328)<br> 0.0.0.0.bootpc > 255.255.255.255.bootps: [udp sum ok] BOOTP/DHCP, Request from 00:16:3e:13:70:7c (oui Unknown), length 300, xid 0xb7304d0f, Flags [none] (0x0000)<br> Client-Ethernet-Address 00:16:3e:13:70:7c (oui Unknown)<br> Vendor-rfc1048 Extensions<br> Magic Cookie 0x63825363<br> DHCP-Message Option 53, length 1: Request<br> Server-ID Option 54, length 4: f33sv1<br> Requested-IP Option 50, length 4: 10.0.3.166<br> Hostname Option 12, length 4: "nsa2"<br> Parameter-Request Option 55, length 13: <br> Subnet-Mask, BR, Time-Zone, Default-Gateway<br> Domain-Name, Domain-Name-Server, Option 119, Hostname<br> Netbios-Name-Server, Netbios-Scope, MTU, Classless-Static-Route<br> NTP<br> END Option 255, length 0<br> PAD Option 0, length 0, occurs 23<br>08:57:08.413078 IP (tos 0xc0, ttl 64, id 7931, offset 0, flags [none], proto UDP (17), length 331)<br> f33sv1.bootps > 10.0.3.166.bootpc: [bad udp cksum 0x1bef -> 0x3afb!] BOOTP/DHCP, Reply, length 303, xid 0xb7304d0f, Flags [none] (0x0000)<br> Your-IP 10.0.3.166<br> Server-IP f33sv1<br> Client-Ethernet-Address 00:16:3e:13:70:7c (oui Unknown)<br> Vendor-rfc1048 Extensions<br> Magic Cookie 0x63825363<br> DHCP-Message Option 53, length 1: ACK<br> Server-ID Option 54, length 4: f33sv1<br> Lease-Time Option 51, length 4: 3600<br> RN Option 58, length 4: 1800<br> RB Option 59, length 4: 3150<br> Subnet-Mask Option 1, length 4: 255.255.255.0<br> BR Option 28, length 4: 10.0.3.255<br> Default-Gateway Option 3, length 4: f33sv1<br> Domain-Name-Server Option 6, length 4: f33sv1<br> Domain-Name Option 15, length 3: "lxc"<br> Hostname Option 12, length 4: "nsa2"<br> END Option 255, length 0<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Dec 23, 2020 at 8:40 AM Orabuntu-LXC <<a href="mailto:gilbert@orabuntu-lxc.com" target="_blank">gilbert@orabuntu-lxc.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>I ran tcpdump this morning wide open (when I ran it for port 67 and port 68 there was zero traffic detected when starting the lxc container nsa2). When I ran tcpdump wide open I got the following traffic detected when the lxc container starts. I again tried turning off firewalld completely and this is still what I get as shown below. Wondering what is going on here?<br></div><div><br></div><div>[ubuntu@f33sv1 ~]$ sudo tcpdump -i lxcbr0 -vvv <br>dropped privs to tcpdump<br>tcpdump: listening on lxcbr0, link-type EN10MB (Ethernet), capture size 262144 bytes<br>08:34:39.305449 IP (tos 0xc0, ttl 1, id 0, offset 0, flags [DF], proto IGMP (2), length 40, options (RA))<br> f33sv1 > <a href="http://igmp.mcast.net" target="_blank">igmp.mcast.net</a>: igmp v3 report, 1 group record(s) [gaddr 224.0.0.252 to_ex { }]<br>08:34:39.305469 IP6 (hlim 1, next-header Options (0) payload length: 76) f33sv1 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 3 group record(s) [gaddr ff02::1:3 to_ex { }] [gaddr ff02::1:ff00:0 to_ex { }] [gaddr ff02::6a to_ex { }]<br>08:34:39.305542 IP6 (hlim 1, next-header Options (0) payload length: 36) :: > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 1 group record(s) [gaddr ff02::1:ff13:707c to_ex { }]<br>08:34:39.397672 IP6 (hlim 1, next-header Options (0) payload length: 76) f33sv1 > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 3 group record(s) [gaddr ff02::1:3 to_ex { }] [gaddr ff02::1:ff00:0 to_ex { }] [gaddr ff02::6a to_ex { }]<br>08:34:39.445676 IP6 (hlim 1, next-header Options (0) payload length: 36) :: > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 1 group record(s) [gaddr ff02::1:ff13:707c to_ex { }]<br>08:34:39.765786 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) :: > ff02::1:ff13:707c: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::216:3eff:fe13:707c<br> unknown option (14), length 8 (1): <br> 0x0000: f203 5136 6f9a<br>08:34:39.891089 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) f33sv1 > ff02::1:ff13:707c: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::216:3eff:fe13:707c<br> source link-address option (1), length 8 (1): 00:16:3e:00:00:00<br> 0x0000: 0016 3e00 0000<br>08:34:40.029649 IP (tos 0xc0, ttl 1, id 0, offset 0, flags [DF], proto IGMP (2), length 40, options (RA))<br> f33sv1 > <a href="http://igmp.mcast.net" target="_blank">igmp.mcast.net</a>: igmp v3 report, 1 group record(s) [gaddr 224.0.0.252 to_ex { }]<br>08:34:40.797778 IP6 (hlim 1, next-header Options (0) payload length: 36) fe80::216:3eff:fe13:707c > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 1 group record(s) [gaddr ff02::1:ff13:707c to_ex { }]<br>08:34:40.797796 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 16) fe80::216:3eff:fe13:707c > ff02::2: [icmp6 sum ok] ICMP6, router solicitation, length 16<br> source link-address option (1), length 8 (1): 00:16:3e:13:70:7c<br> 0x0000: 0016 3e13 707c<br>08:34:40.925732 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) f33sv1 > ff02::1:ff13:707c: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has fe80::216:3eff:fe13:707c<br> source link-address option (1), length 8 (1): 00:16:3e:00:00:00<br> 0x0000: 0016 3e00 0000<br>08:34:40.925787 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::216:3eff:fe13:707c > f33sv1: [icmp6 sum ok] ICMP6, neighbor advertisement, length 32, tgt is fe80::216:3eff:fe13:707c, Flags [solicited, override]<br> destination link-address option (2), length 8 (1): 00:16:3e:13:70:7c<br> 0x0000: 0016 3e13 707c<br>08:34:40.925797 IP6 (flowlabel 0xb6a64, hlim 1, next-header TCP (6) payload length: 44) f33sv1.60688 > fe80::216:3eff:fe13:707c.hostmon: Flags [S], cksum 0xebef (incorrect -> 0xb854), seq 2709608773, win 64800, options [mss 1440,sackOK,TS val 789202957 ecr 0,nop,wscale 7,tfo cookiereq,nop,nop], length 0<br>08:34:40.925818 IP6 (flowlabel 0xed86d, hlim 64, next-header TCP (6) payload length: 20) fe80::216:3eff:fe13:707c.hostmon > f33sv1.60688: Flags [R.], cksum 0xebd7 (incorrect -> 0xc74f), seq 0, ack 2709608774, win 0, length 0<br>08:34:41.693783 IP6 (hlim 1, next-header Options (0) payload length: 36) fe80::216:3eff:fe13:707c > ff02::16: HBH (rtalert: 0x0000) (padn) [icmp6 sum ok] ICMP6, multicast listener report v2, 1 group record(s) [gaddr ff02::1:ff13:707c to_ex { }]<br>08:34:44.509930 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 16) fe80::216:3eff:fe13:707c > ff02::2: [icmp6 sum ok] ICMP6, router solicitation, length 16<br> source link-address option (1), length 8 (1): 00:16:3e:13:70:7c<br> 0x0000: 0016 3e13 707c<br>08:34:46.045831 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 32) fe80::216:3eff:fe13:707c > f33sv1: [icmp6 sum ok] ICMP6, neighbor solicitation, length 32, who has f33sv1<br> source link-address option (1), length 8 (1): 00:16:3e:13:70:7c<br> 0x0000: 0016 3e13 707c<br>08:34:46.045891 IP6 (hlim 255, next-header ICMPv6 (58) payload length: 24) f33sv1 > fe80::216:3eff:fe13:707c: [icmp6 sum ok] ICMP6, neighbor advertisement, length 24, tgt is f33sv1, Flags [solicited]</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Dec 23, 2020 at 12:14 AM Orabuntu-LXC <<a href="mailto:gilbert@orabuntu-lxc.com" target="_blank">gilbert@orabuntu-lxc.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Hi, I cannot get dnsmasq to issue a dhcp address via lxc-net on fedora 33. I have compared it to a working system on Ubuntu 20.04 and what I find is that when an lxc container starts, there is DHCPOFFER normal activity in lxc-net status on Ubuntu 20.04, but not on Fedora 33 where the configuration is afaik exactly the same.</div><div><br></div><div>I have tried various firewalld settings in case firewalld was blocking somehow, but nothing has worked including disabling firewalld entirely as well as disabling selinux entirely. Tomorrow I will try tcpdump and see if there are clues there. Thanks!<br></div><div><br>-- <br><div dir="ltr"><div dir="ltr">Gilbert Standen<div>Creator Orabuntu-LXC</div><div>914-261-4594</div><div><a href="mailto:gilbert@orabuntu-lxc.com" target="_blank">gilbert@orabuntu-lxc.com</a></div><div><br></div></div></div></div></div>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr"><div dir="ltr">Gilbert Standen<div>Creator Orabuntu-LXC</div><div>914-261-4594</div><div><a href="mailto:gilbert@orabuntu-lxc.com" target="_blank">gilbert@orabuntu-lxc.com</a></div><div><br></div></div></div>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr"><div dir="ltr">Gilbert Standen<div>Creator Orabuntu-LXC</div><div>914-261-4594</div><div><a href="mailto:gilbert@orabuntu-lxc.com" target="_blank">gilbert@orabuntu-lxc.com</a></div><div><br></div></div></div>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr"><div dir="ltr">Gilbert Standen<div>Creator Orabuntu-LXC</div><div>914-261-4594</div><div><a href="mailto:gilbert@orabuntu-lxc.com" target="_blank">gilbert@orabuntu-lxc.com</a></div><div><br></div></div></div>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr">Gilbert Standen<div>Creator Orabuntu-LXC</div><div>914-261-4594</div><div><a href="mailto:gilbert@orabuntu-lxc.com" target="_blank">gilbert@orabuntu-lxc.com</a></div><div><br></div></div></div>