Destination Host Unreachable with docker

When i set static ip for my container and ping this ip from my host machine it showing

dipak@dipak-HP:~$ ping 10.0.3.11
PING 10.0.3.11 (10.0.3.11) 56(84) bytes of data.
From 10.0.3.1 icmp_seq=1 Destination Host Unreachable

I have centos container. This is my static ip configuration :

lxc.net.0.type = veth
lxc.net.0.link = lxcbr0
lxc.net.0.flags = up
lxc.net.0.hwaddr = 00:16:3e:79:bb:c7
lxc.net.0.ipv4.address = 10.0.3.11/24
lxc.net.0.ipv4.gateway = auto
lxc.start.auto=1

Please show output of ip a and ip r both on the LXC host and inside the container.

lxc host

root@dipak-HP:~# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: enp0s25: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc fq_codel state DOWN group default qlen 1000
    link/ether 74:46:a0:3a:aa:eb brd ff:ff:ff:ff:ff:ff
3: wlo1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 84:3a:4b:44:05:34 brd ff:ff:ff:ff:ff:ff
    altname wlp36s0
    inet 192.168.31.213/24 brd 192.168.31.255 scope global noprefixroute wlo1
       valid_lft forever preferred_lft forever
    inet6 fe80::434b:4029:a324:fa75/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
4: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    link/ether 52:54:00:dc:93:03 brd ff:ff:ff:ff:ff:ff
    inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
       valid_lft forever preferred_lft forever
5: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc fq_codel master virbr0 state DOWN group default qlen 1000
    link/ether 52:54:00:dc:93:03 brd ff:ff:ff:ff:ff:ff
6: lxcbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    link/ether 00:16:3e:00:00:00 brd ff:ff:ff:ff:ff:ff
    inet 10.0.3.1/24 scope global lxcbr0
       valid_lft forever preferred_lft forever
    inet6 fe80::216:3eff:fe00:0/64 scope link 
       valid_lft forever preferred_lft forever
7: br-3f76182d0e41: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default 
    link/ether 02:42:24:e2:7a:98 brd ff:ff:ff:ff:ff:ff
    inet 172.19.0.1/16 brd 172.19.255.255 scope global br-3f76182d0e41
       valid_lft forever preferred_lft forever
    inet6 fe80::42:24ff:fee2:7a98/64 scope link 
       valid_lft forever preferred_lft forever
8: br-87c5dd0bf742: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
    link/ether 02:42:fd:38:c6:96 brd ff:ff:ff:ff:ff:ff
    inet 172.18.0.1/16 brd 172.18.255.255 scope global br-87c5dd0bf742
       valid_lft forever preferred_lft forever
    inet6 fe80::42:fdff:fe38:c696/64 scope link 
       valid_lft forever preferred_lft forever
9: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default 
    link/ether 02:42:8a:02:2f:21 brd ff:ff:ff:ff:ff:ff
    inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
       valid_lft forever preferred_lft forever
    inet6 fe80::42:8aff:fe02:2f21/64 scope link 
       valid_lft forever preferred_lft forever
11: veth121c479@if10: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master docker0 state UP group default 
    link/ether 1a:16:55:c9:39:a2 brd ff:ff:ff:ff:ff:ff link-netnsid 2
    inet6 fe80::1816:55ff:fec9:39a2/64 scope link 
       valid_lft forever preferred_lft forever
13: vethb6fa539@if12: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-87c5dd0bf742 state UP group default 
    link/ether de:5c:a5:8e:7e:22 brd ff:ff:ff:ff:ff:ff link-netnsid 3
    inet6 fe80::dc5c:a5ff:fe8e:7e22/64 scope link 
       valid_lft forever preferred_lft forever
15: veth224d1ab@if14: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master docker0 state UP group default 
    link/ether 86:a2:25:c9:35:5e brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet6 fe80::84a2:25ff:fec9:355e/64 scope link 
       valid_lft forever preferred_lft forever
17: veth559c26d@if16: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master docker0 state UP group default 
    link/ether b2:85:df:1b:e4:95 brd ff:ff:ff:ff:ff:ff link-netnsid 1
    inet6 fe80::b085:dfff:fe1b:e495/64 scope link 
       valid_lft forever preferred_lft forever
56: veth7CaYaZ@if2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue master lxcbr0 state LOWERLAYERDOWN group default qlen 1000
    link/ether fe:37:11:9b:31:d5 brd ff:ff:ff:ff:ff:ff link-netnsid 4
    inet6 fe80::fc37:11ff:fe9b:31d5/64 scope link 
       valid_lft forever preferred_lft forever
root@dipak-HP:~# ip r
default via 192.168.31.1 dev wlo1 proto static metric 600 
10.0.3.0/24 dev lxcbr0 proto kernel scope link src 10.0.3.1 linkdown 
169.254.0.0/16 dev virbr0 scope link metric 1000 linkdown 
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 
172.18.0.0/16 dev br-87c5dd0bf742 proto kernel scope link src 172.18.0.1 
172.19.0.0/16 dev br-3f76182d0e41 proto kernel scope link src 172.19.0.1 linkdown 
192.168.31.0/24 dev wlo1 proto kernel scope link src 192.168.31.213 metric 600 
192.168.122.0/24 dev virbr0 proto kernel scope link src 192.168.122.1 linkdown 
root@dipak-HP:~#

inside container:

[root@jenkins ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0@if56: <BROADCAST,MULTICAST> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    link/ether 00:16:3e:1a:af:34 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet 10.0.3.11/24 brd 10.0.3.255 scope global eth0
       valid_lft forever preferred_lft forever
[root@jenkins ~]# ip r
[root@jenkins ~]#

Ah you have docker0 so most likely this means docker is adding firewall rules that are blocking your containers accessing the bridge.

Hey there, than what’s the solution of removing docker0?