15 Commits

Author SHA1 Message Date
Sebastiaan van Stijn
5ad3361ff4 Merge pull request #51657 from kumy/patch-2
Improve IP alias handling in service_linux.go
2026-07-30 02:06:07 +02:00
Sebastiaan van Stijn
8eac4aa78e Merge pull request #53022 from SmackleFunky/fix/ingress-proxy-typed-nil-panic
libnetwork: skip storing ingress proxy listener on bind failure
2026-07-17 19:10:01 +02:00
Sebastiaan van Stijn
6194b46a4d use #nosec instead of //nolint, and cleanup some ignores
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-07-14 11:05:13 +02:00
jasg
a0559c361e libnetwork: skip storing ingress proxy listener on bind failure
When plumbIngressPortsProxy fails to bind a port, it stored a typed-nil
listener in ingressProxyTbl. closeIngressPortsProxy then panicked on
Close() during ingress port removal.

Add a regression test and continue on bind error instead of recording
the failed listener.

Signed-off-by: Jason Green <jason@jasg.org>
2026-07-06 22:53:33 -07:00
Sebastiaan van Stijn
17de27ffc2 daemon: gofumpt
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2026-01-24 17:16:05 +01:00
kumy
187436faf2 Improve IP alias handling in service_linux.go
Log a debug message when the IP alias already exists instead of returning an error.

Signed-off-by: kumy <kumy@users.noreply.github.com>
2025-12-03 14:08:33 +01:00
kumy
b56d077034 fix: Correct typo in error message
Signed-off-by: kumy <kumy@users.noreply.github.com>
2025-12-03 13:13:46 +01:00
Derek McGowan
f74e5d48b3 Create github.com/moby/moby/v2 module
Signed-off-by: Derek McGowan <derek@mcg.dev>
2025-07-31 10:13:29 -07:00
Andrey Epifanov
a1f68bf5a6 overlay: Reload Ingress iptables rules in swarm mode
- Implement firewalld reload handling for Ingress rules restoration
- Add TestRestoreIngressRulesOnFirewalldReload() integration test

Signed-off-by: Andrey Epifanov <aepifanov@mirantis.com>
2025-07-23 15:52:10 -04:00
Andrey Epifanov
8b208f1b95 libnetwork: split programIngress() and dependent functions on Add and Del functions
- refactor programIngressPorts to use Rule.Insert/Append/Delete for improved rule management
- split programIngress() and dependent functions on Add and Del functions

Signed-off-by: Andrey Epifanov <aepifanov@mirantis.com>
2025-07-23 14:06:47 -04:00
Andrey Epifanov
50e6f4c4cb libnetwork: refactor ingress chain management for improved rule handling and initialization
Signed-off-by: Andrey Epifanov <aepifanov@mirantis.com>
2025-07-23 14:06:47 -04:00
Andrey Epifanov
c2e2e7fe24 libnetwork: extract plumpIngressProxy steps in a separate function
- Extract plumpIngressProxy steps in a separate function
- Don't create a new listener if there's already one in ingressProxyTbl

Signed-off-by: Andrey Epifanov <aepifanov@mirantis.com>
2025-07-23 14:06:47 -04:00
Andrey Epifanov
51ed289b06 libnetwork: extract programIngressPorts steps in a separate functions
Signed-off-by: Andrey Epifanov <aepifanov@mirantis.com>
2025-07-23 14:06:47 -04:00
Andrey Epifanov
752758ae77 libnetwork: extract creation/initiation of INGRESS-DOCKER chains in separate function
Signed-off-by: Andrey Epifanov <aepifanov@mirantis.com>
2025-07-23 14:06:47 -04:00
Derek McGowan
7a720df61f Move libnetwork to daemon/libnetwork
Signed-off-by: Derek McGowan <derek@mcg.dev>
2025-07-14 09:25:23 -07:00