dockerd-rootless.sh: reject DOCKERD_ROOTLESS_ROOTLESSKIT_NET=host

AkihiroSuda · thaJeztah · commit 2fbc51b4f895 · 2025-11-05T12:00:54.000+01:00
`rootlesskit --net=host` does not work with Docker. Alternative ways to run Rootless Docker without the network overhead: - Use https://github.com/rootless-containers/bypass4netns - Or, use `docker run --net=host` with a PR 47103 (WIP) See issue 51363 Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp> (cherry picked from commit 76b1d30) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
diff --git a/contrib/dockerd-rootless.sh b/contrib/dockerd-rootless.sh
@@ -130,6 +130,10 @@ if [ -z "$net" ]; then
 		echo "One of slirp4netns (>= v0.4.0), pasta (passt >= 2023_12_04), or vpnkit needs to be installed"
 	fi
 fi
+if [ "$net" = host ]; then
+	echo "Unsupported RootlessKit network driver: $net"
+	exit 1
+fi
 if [ -z "$mtu" ]; then
 	if [ "$net" = slirp4netns -o "$net" = pasta ]; then
 		mtu=65520
