hashicorp / nomad-driver-podman

A nomad task driver plugin for sandboxing workloads in podman containers
https://developer.hashicorp.com/nomad/plugins/drivers/podman
Mozilla Public License 2.0
232 stars 62 forks source link

Podman pasta usermode networking #345

Open skoppe opened 6 months ago

skoppe commented 6 months ago

I am looking to implement pasta usermode networking for rootless containers. Pasta is a replacement of slirp4netns.

See https://docs.podman.io/en/latest/markdown/podman-run.1.html#network-mode-net (scroll down to pasta[:OPTIONS,…]).

Aside from being (supposedly) faster than slirp4netns, it should support inter-container networking better. Allowing things like sidecars and Nomad inter task communication.

Before all that, I am trying to gauge support. So, is pasta rootless networking in line with the project?

In terms of implementation, even though it is the default in Podman > 5, I am thinking of requiring explicit boolean in plugin config to toggle it on. It also requires the pasta binary to be present in podman's info output.