Connecting containers to a OVS bridge

[Shivaram Mysore]

Hello,

I would greatly appreciate some pointers/answers to the below questions:

*Questions*:

   1. On CoreOS, what is the best way to connect containers to this OVS
   bridge created on a container?
      1. Note: the model applied on standard linux install of OVS to move a
      container namespace does not work here.
   2. What does it mean to have DPDK enabled OVS for OVS to be running on
   Containers.

*Background:*
I have been able to successfully create containers running Open vSwitch
which are operational on Fedora Core OS.
https://github.com/servicefractal/ovs
https://hub.docker.com/r/shivarammysore/ovs

I also gave a talk about it:
Running OVS on Containers
<https://www.openvswitch.org/support/ovscon2019/#7.1L> (Shivaram Mysore,
Service Fractal) PDF
<https://www.openvswitch.org/support/ovscon2019/day2/1305-mysore.pdf> Video
<https://youtu.be/EWzwtj7edOc>

Thanks & Regards

/Shivaram

[Dusty Mabe]

There might be someone else on the list that has some knowledge that might be able
to help you, but I don't have a lot of experience with OVS. I think you're going
to
have to ask some more specific questions to see if we can find some issues to work out.

What are you trying to do that's not working? Do you have any error messages to
report?

Dusty


On 2/20/20 6:38 PM, Shivaram Mysore wrote:
> Hello,
> 
> I would greatly appreciate some pointers/answers to the below questions:
> 
> *_Questions_*:
> 
>  1. On CoreOS, what is the best way to connect containers to this OVS bridge created
on a container?
>      1. Note: the model applied on standard linux install of OVS to move a container
namespace does not work here.
>  2. What does it mean to have DPDK enabled OVS for OVS to be running on Containers.
> 
> *_Background:_*
> I have been able to successfully create containers running Open vSwitch which are
operational on Fedora Core OS.
> https://github.com/servicefractal/ovs
> https://hub.docker.com/r/shivarammysore/ovs
> 
> I also gave a talk about it:
> Running OVS on Containers
<https://www.openvswitch.org/support/ovscon2019/#7.1L> (Shivaram Mysore, Service
Fractal)	PDF
<https://www.openvswitch.org/support/ovscon2019/day2/1305-mysore.pdf>	Video
<https://youtu.be/EWzwtj7edOc>
> 
> 
> Thanks & Regards
> 
> /Shivaram
> 
> _______________________________________________
> CoreOS mailing list -- coreos(a)lists.fedoraproject.org
> To unsubscribe send an email to coreos-leave(a)lists.fedoraproject.org
> Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
https://lists.fedoraproject.org/archives/list/[e-mail]
>

[Shivaram Mysore]

Thanks Dusty for the response.

I would love to speak with someone responsible for networking/Container
networking on FCOS.

In short, if we have networking infrastructure which is provided by a
"Container", how can we use a colocated container to use the networking
services provided by the Container.  In this case, it is network bridge and
I am trying to understand how to connect this colocated container to this
container provided network bridge.

Thanks

/Shivaram

On Fri, Mar 6, 2020 at 11:53 AM Dusty Mabe <dusty(a)dustymabe.com&gt; wrote:

>  There might be someone else on the list that has some knowledge that might
>  be able
>  to help you, but I don't have a lot of experience with OVS. I think you're
>  going to
>  have to ask some more specific questions to see if we can find some issues
>  to work out.
>
>  What are you trying to do that's not working? Do you have any error
>  messages to
>  report?
>
>  Dusty
>
>
>  On 2/20/20 6:38 PM, Shivaram Mysore wrote:
>  > Hello,
>  >
>  > I would greatly appreciate some pointers/answers to the below questions:
>  >
>  > *_Questions_*:
>  >
>  >  1. On CoreOS, what is the best way to connect containers to this OVS
>  bridge created on a container?
>  >      1. Note: the model applied on standard linux install of OVS to move
>  a container namespace does not work here.
>  >  2. What does it mean to have DPDK enabled OVS for OVS to be running on
>  Containers.
>  >
>  > *_Background:_*
>  > I have been able to successfully create containers running Open vSwitch
>  which are operational on Fedora Core OS.
>  > https://github.com/servicefractal/ovs
>  > https://hub.docker.com/r/shivarammysore/ovs
>  >
>  > I also gave a talk about it:
>  > Running OVS on Containers <
>  https://www.openvswitch.org/support/ovscon2019/#7.1L> (Shivaram Mysore,
>  Service Fractal)   PDF <
>  https://www.openvswitch.org/support/ovscon2019/day2/1305-mysore.pdf>
>   Video <https://youtu.be/EWzwtj7edOc>
>  >
>  >
>  > Thanks & Regards
>  >
>  > /Shivaram
>  >
>  > _______________________________________________
>  > CoreOS mailing list -- coreos(a)lists.fedoraproject.org
>  > To unsubscribe send an email to coreos-leave(a)lists.fedoraproject.org
>  > Fedora Code of Conduct:
>  https://docs.fedoraproject.org/en-US/project/code-of-conduct/
>  > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
>  > List Archives:
>  https://lists.fedoraproject.org/archives/list/[e-mail]
>  >
>

[Dusty Mabe]

On 3/6/20 3:39 PM, Shivaram Mysore wrote:
>  Thanks Dusty for the response.
>  
>  I would love to speak with someone responsible for networking/Container networking on
> FCOS. 
Yep. I'm no networking expert. Maybe somebody that reads this list has more knowledge
or maybe you can try reaching out to the containers team on their mailing list (info
at https://podman.io/community/)


>  
>  In short, if we have networking infrastructure which is provided by a
> "Container", how can we use a colocated container to use the networking services
> provided by the Container.  In this case, it is network bridge and I am trying to
> understand how to connect this colocated container to this container provided network
> bridge.
>   
Maybe `--network=bridgename` ?

https://www.mankier.com/1/podman-run#--network

Dusty

[Shivaram Mysore]

Ok thanks.  Will reach out.

Unfortunately, `--network=bridgename` will not work as the bridge is
provided by container and not accessible by others.  In a way, running the
network bridge on the container is like a user-space process (crude
analogy, sorry!).

/Shivaram

On Fri, Mar 6, 2020 at 1:15 PM Dusty Mabe <dusty(a)dustymabe.com&gt; wrote:

>  On 3/6/20 3:39 PM, Shivaram Mysore wrote:
>  > Thanks Dusty for the response.
>  >
>  > I would love to speak with someone responsible for networking/Container
>  networking on FCOS.
>
>  Yep. I'm no networking expert. Maybe somebody that reads this list has
>  more knowledge
>  or maybe you can try reaching out to the containers team on their mailing
>  list (info
>  at https://podman.io/community/)
>
>
>  >
>  > In short, if we have networking infrastructure which is provided by a
>  "Container", how can we use a colocated container to use the networking
>  services provided by the Container.  In this case, it is network bridge and
>  I am trying to understand how to connect this colocated container to this
>  container provided network bridge.
>  >
>
>  Maybe `--network=bridgename` ?
>
>  https://www.mankier.com/1/podman-run#--network
>
>  Dusty
>