I’m using lxd for quite a while now and usually I’m very happy with it. I guess my setup with the default bridge and zfs storage is pretty standard. However, yesterday I tried to install apache in a container (bionic) and noticed that apt does not work anymore. I’m just getting connection timeouts.
So far I checked the following things:
- Rebooting the host/containers does not solve the problem (but everything starts up fine)
- apt/curl on the host (bionic) works fine
- iptables rules of the host seem fine
- apt/curl stopped working on all containers (all bionic), not only the one mentioned above
- Firewall rules in the containers seem fine, but it also does not work when the firewall is deactivated
- Launching a new container with a different distribution (xenial) has the same connection problems
- ping works from and to every container
- Calling host in the containers resolves the internal ips of the lxd-network correctly and also works for the rest of the web
- curl from a container to google.com returns ‘network is unreachable’, curling the ip returns with a ‘connection timed out’
- Disabling IPv6 in
/etc/gai.confdoes not solve the problem.
- The lxd logs do not look suspicious (at least not to my eyes)
- Pinging the bridge (IPv4) works from the host, but not from the container
At first I thought I traced the error to a problem with the bridge, but the funny thing is: Nat-forwarded connections to the reverse proxy container and displaying the corresponding websites in other containers still work fine.
I don’t know what to try next. Anybody else with the same problem or a suggestion how to debug?