Hi,
Re-visiting this problem since the root issue is now impacting me. (I was able to work around the previous storage access issues through bind-mounts).
I am able to access LXD containers from my LAN and from other containers (or even KVM VMs running on the host). I am able to access my host from KVM VMs and my LAN. I am unable to access the host from my containers, or the containers from my host.
djwhyte@server1:~$ ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: em1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq master br1 state UP group default qlen 1000
link/ether 00:26:b9:8b:16:17 brd ff:ff:ff:ff:ff:ff
3: br1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 00:26:b9:8b:16:17 brd ff:ff:ff:ff:ff:ff
inet 192.168.0.30/24 brd 192.168.0.255 scope global br1
valid_lft forever preferred_lft forever
inet6 fe80::226:b9ff:fe8b:1617/64 scope link
valid_lft forever preferred_lft forever
4: macvlan0@br1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN group default qlen 1
link/ether 6e:67:c7:0c:4d:7c brd ff:ff:ff:ff:ff:ff
inet 192.168.0.230/24 brd 192.168.0.255 scope global macvlan0
valid_lft forever preferred_lft forever
inet6 fe80::6c67:c7ff:fe0c:4d7c/64 scope link
valid_lft forever preferred_lft forever
5: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
link/ether 3e:65:ec:ef:45:70 brd ff:ff:ff:ff:ff:ff
inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
valid_lft forever preferred_lft forever
13: mac2ef23a72@br1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1
link/ether 00:16:3e:68:d4:42 brd ff:ff:ff:ff:ff:ff
31: mac11cd0e68@br1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1
link/ether 00:16:3e:1a:a2:d7 brd ff:ff:ff:ff:ff:ff
33: mac345422a8@br1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1
link/ether 00:16:3e:1a:a2:d7 brd ff:ff:ff:ff:ff:ff
44: vnet0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br1 state UNKNOWN group default qlen 1000
link/ether fe:54:00:0a:fe:7d brd ff:ff:ff:ff:ff:ff
inet6 fe80::fc54:ff:fe0a:fe7d/64 scope link
valid_lft forever preferred_lft forever
46: vnet1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master br1 state UNKNOWN group default qlen 1000
link/ether fe:54:00:ff:aa:a9 brd ff:ff:ff:ff:ff:ff
inet6 fe80::fc54:ff:feff:aaa9/64 scope link
valid_lft forever preferred_lft forever
I personally haven’t configured any iptable rules but this is what I show:
djwhyte@server1:~$ sudo iptables -L
[sudo] password for djwhyte:
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp dpt:domain
ACCEPT tcp -- anywhere anywhere tcp dpt:domain
ACCEPT udp -- anywhere anywhere udp dpt:bootps
ACCEPT tcp -- anywhere anywhere tcp dpt:bootps
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere 192.168.122.0/24 ctstate RELATED,ESTABLISHED
ACCEPT all -- 192.168.122.0/24 anywhere
ACCEPT all -- anywhere anywhere
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp dpt:bootpc
Interfaces:
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
auto br1
iface br1 inet static
address 192.168.0.30
network 192.168.0.0
netmask 255.255.255.0
broadcast 192.168.0.255
gateway 192.168.0.1
dns-nameserver 192.168.0.1
bridge_ports em1
bridge_maxwait 0
bridge_fd 0
auto macvlan0
iface macvlan0 inet dhcp
# as br1 and macvlan0 are on the same LAN, we must drop default route and LAN route
# from br1 configuration to avoid conflicts (this just slooooow down things).
# pre-up route del default
# NOTE: adapt this line to your LAN address and netmask
# pre-up route del -net 192.168.0.30 netmask 255.255.255.255
pre-up ip link add link br1 name macvlan0 type macvlan mode bridge
/etc/network/interfaces (END)
I wonder if it is related in some way to the macvlan entry in interfaces. I can’t recall what inspired me to configure it like that back when I setup LXD and I don’t really like how it has its own IP.
Any help is greatly appreciated.
Thanks,
Whytey