AdguardTeam/AdGuardHome

Failed to start DHCP server in Podman container

Open

#4,887 opened on 2022年9月3日

GitHub で見る
 (6 comments) (0 reactions) (0 assignees)Go (34,000 stars) (2,333 forks)batch import
help wanted

説明

Prerequisites

  • I have checked the Wiki and Discussions and found no answer

  • I have searched other issues and found no duplicates

  • I want to report a bug and not ask a question

Operating system type

Linux, Other (please mention the version in the description)

CPU architecture

AMD64

Installation

Docker

Setup

On one machine

AdGuard Home version

v0.107.11

Description

What did you do?

I installed AdguardHome:

podman run --name adguardhome\
    --restart unless-stopped\
    -v /usr/local/etc/adguard/work:/opt/adguardhome/work\
    -v /usr/local/etc/adguard/conf:/opt/adguardhome/conf\
    --network host\
    -d adguard/adguardhome

Expected result

It should act as a DHCP server

Actual result

I got this error in the log:

starting dhcp server: dhcpv4: creating raw udp connection: listen packet 04:d4:c4:58:3d:69: socket: operation not permitted

It would also really help if this was somehow apparent in the web interface.

コントリビューターガイド

技術スタック
godocker
領域
backend
Issue 種別
bug
難度新しい貢献者にとっての実装難度です。1 は非常に小さな変更、5 は専門的な作業です。
4
推定時間経験ある貢献者が調査、実装、テスト、pull request 準備にかけるおおよその時間範囲です。
1-2 days
活動状況Issue が今どれだけ取り組みやすいかを示します。新しい、活発、古い、ブロック中、またはメンテナー入力待ちなどです。
fresh
明確さ期待される変更、受け入れ条件、次の手順がどれだけ明確かを示します。
mostly clear
前提条件
Go programming basicsLinux socket programming and capabilitiesDocker/Podman containerizationDHCP protocol basics
初心者向け度初回貢献者にどれだけ取り組みやすいかを 1-100 で推定したスコアです。
20
調査方針
The issue is about a permission error when creating a raw UDP socket for DHCP in a Podman container. The error 'operation not permitted' suggests missing capabilities like CAP NET RAW or CAP NET ADMIN. Look into how AdGuardHome creates DHCP sockets in dhcp/server.go and similar files. Check if the code properly handles missing capabilities or if there's a way to detect this and provide a user friendly error in the web interface. Also review container documentation for required privileges.