AdguardTeam/AdGuardHome

Failed to start DHCP server in Podman container

Open

#4,887 opened on Sep 3, 2022

View on GitHub
 (6 comments) (0 reactions) (0 assignees)Go (34,000 stars) (2,333 forks)batch import
help wanted

Description

Prerequisites

  • I have checked the Wiki and Discussions and found no answer

  • I have searched other issues and found no duplicates

  • I want to report a bug and not ask a question

Operating system type

Linux, Other (please mention the version in the description)

CPU architecture

AMD64

Installation

Docker

Setup

On one machine

AdGuard Home version

v0.107.11

Description

What did you do?

I installed AdguardHome:

podman run --name adguardhome\
    --restart unless-stopped\
    -v /usr/local/etc/adguard/work:/opt/adguardhome/work\
    -v /usr/local/etc/adguard/conf:/opt/adguardhome/conf\
    --network host\
    -d adguard/adguardhome

Expected result

It should act as a DHCP server

Actual result

I got this error in the log:

starting dhcp server: dhcpv4: creating raw udp connection: listen packet 04:d4:c4:58:3d:69: socket: operation not permitted

It would also really help if this was somehow apparent in the web interface.

Contributor guide

Tech stack
godocker
Domain
backend
Issue type
bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
4
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-2 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
fresh
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
mostly clear
Prerequisites
Go programming basicsLinux socket programming and capabilitiesDocker/Podman containerizationDHCP protocol basics
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
20
Research direction
The issue is about a permission error when creating a raw UDP socket for DHCP in a Podman container. The error 'operation not permitted' suggests missing capabilities like CAP NET RAW or CAP NET ADMIN. Look into how AdGuardHome creates DHCP sockets in dhcp/server.go and similar files. Check if the code properly handles missing capabilities or if there's a way to detect this and provide a user friendly error in the web interface. Also review container documentation for required privileges.
Failed to start DHCP server in Podman container · AdguardTeam/AdGuardHome#4887 | Good First Issue