[Error] SNX VPN in rootful container: Connection NetworkManager possible? #1703
Labels
bug
Something isn't working
Comments
TobiPeterG
changed the title
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Describe the bug
My university uses SNX VPN to connect to internal resources. The client is quite outdated, but I managed to install it successfully in a rootful distrobox container. It also says that it connected successfully after installing kmod in the container. However, I still can't access internal web pages. The weird thing is: After some time, it started working and I could access internal pages, but after a reboot, it doesn't work again. ip link and ip route show that it is able to do something, but I'm not sure why it isn't connecting.
To Reproduce
Create distrobox using this command:
distrobox-create --name Tumbleweed-SNX --image opensuse/distrobox:latest --additional-flags "--cap-add=ALL -v /lib/modules:/lib/modules --privileged" --rootInstall SNX VPN in container
Try to connect to a supported VPN
Expected behavior
The connections should work, I should be able to access internal resources
Logs
Run the commands with
--verboseand post the log here as a file uploadAttach also the output of
podman logsordocker logs, possibly with--latestflagpodman logs doesn't find the container help?
Desktop (please complete the following information):
Additional context
Add any other context about the problem here.
ip link and ip route on the host and in the container are identical.
They show:
with VPN:
without VPN:
Since the connection already worked, I know that there is a way to get it to work, but I don't know why it mysteriously started working and I don't know why it stopped working now. :(
The VPN needs access to kernel modules and the network, so I didn't try unshare options yet.
EDIT: I am able to ping the internal DNS servers, so maybe it is a DNS issue?
EDIT 2: Under /etc/resolve.conf the VPN DNS servers are entered correctly:
The 10.XX... are the VPN DNS servers
EDIT 3:
Aha, after I verified that the DNS servers are in the resolve.conf, the websites were reachable again. I disconnected and reconnected and now the /etc/resolv.conf only shows:
So the DNS servers were not entered correctly. Could it be that NetworkManager would need to be triggered to add the DNS servers?
EDIT 4: I can confirm, after manually adding the dns servers to the resolv.conf, the websites are all reachable. :)
Is there a way to make the hosts NetworkManager aware that it needs to update the DNS entries or bind something into the container so snx can tell NetworkManager to update the DNS servers?
The text was updated successfully, but these errors were encountered: