[Bug 1033606] New: Failed to connect to network from Docker container

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1033606

            Bug ID: 1033606
           Summary: Failed to connect to network from Docker container
           Product: Fedora
           Version: 20
         Component: docker-io
          Assignee: lsm5(a)redhat.com
          Reporter: mfojtik(a)redhat.com
        QA Contact: extras-qa(a)fedoraproject.org
                CC: golang(a)lists.fedoraproject.org, lsm5(a)redhat.com,
                    mattdm(a)redhat.com, mgoldman(a)redhat.com,
                    vbatts(a)redhat.com



Description of problem:

Connecting to external network from Docker container fail due to firewalld. I
guess you must have masquerade enabled, however this is not mentioned anywhere.
I think docker-io should set the firewalld rules automatically, or tell users
that they need to enable masquarade in firewalld.

Version-Release number of selected component (if applicable):

Name        : docker-io
Arch        : x86_64
Version     : 0.7
Release     : 0.17.rc6.fc20

Steps to Reproduce:
1. $ yum install docker-io
2. $ systemctl enable docker.service
3. $ systemctl start docker.service
4. $ docker pull mattdm/fedora
5. $ docker run -i -t mattdm/fedora:latest /bin/bash
6. $ ping google.com
ping: unknown host google.com

When I stop firewalld on host (systemctl stop firewalld) and then restart the
docker (systemctl restart docker), the ping works like a charm.

Actual results:

Unable to connect outside the Docker container with firewalld enabled.

Expected results:

Docker should configure firewalld automatically (during install?), or inform
users to do so manually.

Additional info:

-- 
You are receiving this mail because:
You are on the CC list for the bug.