Podman (Docker replacement) and CSF (Firewall)

[stevet224]

Hello,

Centos and Redhat have now moved away from Docker to Podman but i am unable to get CSF to work with podman. Docker used interface docker0 but podman handles the network differently.

Any suggestions would be welcome.

I have tested the below config but with no luck.

# podman network inspect podman
[
  {
    "cniVersion": "0.4.0",
    "name": "podman",
    "plugins": [
      {
        "bridge": "cni-podman0",
        "hairpinMode": true,
        "ipMasq": true,
        "ipam": {
          "ranges": [
            [
              {
                "gateway": "10.88.0.1",
                "subnet": "10.88.0.0/16"
              }
            ]
          ],
          "routes": [
            {
              "dst": "0.0.0.0/0"
            }
          ],
          "type": "host-local"
        },
        "isGateway": true,
        "type": "bridge"
      },
      {
        "capabilities": {
          "portMappings": true
        },
        "type": "portmap"
      },
      {
        "type": "firewall"
      },
      {
        "type": "tuning"
      }
    ]
  }
]

 

[stevet224]

I have been able to get it partly working using the below command but csf restart destroys the iptables podman creates.

sudo iptables -I CNI-FORWARD -p tcp ! -i cni-podman0 -o cni-podman0 --jump LOCALINPUT