Bug 1214612

Summary: rootless ipv6 containers can't be started
Product: [openSUSE] openSUSE Tumbleweed Reporter: Frederic Crozat <fcrozat>
Component: ContainersAssignee: Containers Team <containers-bugowner>
Status: NEW --- QA Contact: E-mail List <qa-bugs>
Severity: Normal    
Priority: P5 - None    
Version: Current   
Target Milestone: ---   
Hardware: Other   
OS: Other   
Whiteboard:
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Frederic Crozat 2023-08-25 09:47:43 UTC
ip6_tables module is not preloaded and regular users have no right to modprobe it (and it is not auto-modprobed). 

I would suggest to add ip6_tables to /usr/lib/modules-load.d/podman.conf

to reproduce:
as regular user:

~/.config/containers/containers.conf :
[network]
network_backend="netavark"

podman network create --ipv6 --gateway fd00::1:8:1 --subnet fd00::1:8:0/112 ipv6

podman run --network ipv6 -ti registry.opensuse.org/opensuse/tumbleweed

it will fail unless ip6_tables is loaded