I have recently heard from Peter Mckee from Docker on the talk python to me podcast episode 308 that we should not assign IP addresses to our containers.
He compared containers to food that we should cook, consume and when hungry cook another meal, therefore having the host handling the networking.
Although not recommended, I have decided to set up a
pihole container and such application requires an IP address and we are going to set it on a different network than its host. Since my network is using VLANs and my container is going to sit in an specific VLAN it will need to be configured with docker's
MACVLAN network driver.
That decision had some implications on my network, the switch port our host is connected had to be changed from untagged to tagged and the host NIC set with a VLAN.
Let's create the new VLAN that the docker container is going to use.
The OpenWRT switch configuration is a bit confusing but to create a new VLAN the order is as follows :
1) Add the VLAN to the swith configuration and set it as tagged on the trunk and on the physical port it is connecting or according your network parameters.
2) Add a new sub interface and name it then set DNS and DHCP settings.
We now have created the
VLAN6 for our pihole and a few other servers that will be added to our network in the future like NTP.
My pihole is currently using
VLAN10 which was set for testing purposes now we are going to move it to our newly created
VLAN6. First let's inspect our docker networks :
root@home-svr1:/etc/systemd/network# docker network ls NETWORK ID NAME DRIVER SCOPE 95bc94a1e0e7 bridge bridge local 351c7ea05fa7 host host local fdfa287915ea macvlan10 macvlan local d35120bf0522 none null local
Since we already have a working network it could have been cloned with the create command and the option :
--config-from string The network from which copying the configuration
But, to have an example for future reference we are going to create a new one from scratch as explained in the docker's documentation.
root@home-svr1:~# docker network create -d macvlan \ > --subnet=192.168.6.0/24 \ > --gateway=192.168.6.1 \ > --opt parent=enp0s10.6 \ > macvlan6 root@home-svr1:~# docker network ls NETWORK ID NAME DRIVER SCOPE 95bc94a1e0e7 bridge bridge local 351c7ea05fa7 host host local cb20a724db68 macvlan6 macvlan local fdfa287915ea macvlan10 macvlan local d35120bf0522 none null local root@home-svr1:~# ip -c addr show dev enp0s10.6 144: enp0s10.6@enp0s10: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default link/ether f8:0f:41:21:3f:02 brd ff:ff:ff:ff:ff:ff inet6 fe80::fa0f:41ff:fe21:3f02/64 scope link valid_lft forever preferred_lft forever
Docker will automatically create the new interface for the macvlan network if not already present on the host.
After, our network was created we can create our container following the guide below.
pihole has been deployed and we can now work towards creating an script for our openWRT dnsmasq instances to use
pihole as the DNS server for some of our networks.
External Sources :