fix(rootless): start daemon with slirp4netns, not invalid pasta+builtin
The rootless dockerd override forced NET=pasta + PORT_DRIVER=builtin, which
rootlesskit rejects ('pasta requires port driver none or implicit'), so the
daemon failed to start every time (the real cause behind 'rootless socket not
found'). Use slirp4netns + builtin (valid, still skips the userspace
port-handler). Verified: daemon now comes up, docker Server 29.5.2 responds.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Signed-off-by: librelad <librelad@digitalangels.vip>
This commit is contained in:
parent
7a277384f0
commit
049d5de6a8
@ -111,13 +111,14 @@ EOF
|
|||||||
|
|
||||||
((menu_number++))
|
((menu_number++))
|
||||||
echo ""
|
echo ""
|
||||||
echo "---- $menu_number. Configuring rootless networking (pasta + builtin port driver)."
|
echo "---- $menu_number. Configuring rootless networking (slirp4netns + builtin port driver)."
|
||||||
echo ""
|
echo ""
|
||||||
|
|
||||||
# pasta replaces slirp4netns as the net namespace driver — higher
|
# slirp4netns is the net namespace driver; the builtin rootlesskit port
|
||||||
# throughput, lower latency, native IPv6, much better UDP. The
|
# driver skips slirp4netns's userspace port-handler and shaves
|
||||||
# builtin rootlesskit port driver skips the slirp4netns userspace
|
# per-connection overhead. (pasta is faster but requires a recent passt
|
||||||
# port-handler and shaves per-connection overhead.
|
# AND port driver none/implicit — the pasta+builtin combo is rejected by
|
||||||
|
# rootlesskit, which silently kept the rootless daemon from starting.)
|
||||||
systemd_user_dir="/home/$CFG_DOCKER_INSTALL_USER/.config/systemd/user"
|
systemd_user_dir="/home/$CFG_DOCKER_INSTALL_USER/.config/systemd/user"
|
||||||
local result=$(dockerCommandRunInstallUser "mkdir -p $systemd_user_dir")
|
local result=$(dockerCommandRunInstallUser "mkdir -p $systemd_user_dir")
|
||||||
checkSuccess "Create the systemd user directory if it doesn't exist"
|
checkSuccess "Create the systemd user directory if it doesn't exist"
|
||||||
@ -131,7 +132,7 @@ EOF
|
|||||||
|
|
||||||
sudo bash -c "cat <<EOL > '$override_conf_file'
|
sudo bash -c "cat <<EOL > '$override_conf_file'
|
||||||
[Service]
|
[Service]
|
||||||
Environment='DOCKERD_ROOTLESS_ROOTLESSKIT_NET=pasta'
|
Environment='DOCKERD_ROOTLESS_ROOTLESSKIT_NET=slirp4netns'
|
||||||
Environment='DOCKERD_ROOTLESS_ROOTLESSKIT_PORT_DRIVER=builtin'
|
Environment='DOCKERD_ROOTLESS_ROOTLESSKIT_PORT_DRIVER=builtin'
|
||||||
Environment='DOCKERD_ROOTLESS_ROOTLESSKIT_MTU=$CFG_NETWORK_MTU'
|
Environment='DOCKERD_ROOTLESS_ROOTLESSKIT_MTU=$CFG_NETWORK_MTU'
|
||||||
EOL"
|
EOL"
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user