fix: DNS resolution for network namespaces with symlinked resolv.conf#81

Merged

ammario merged 21 commits intomainfrom

fix/dns-host-corruption

Nov 3, 2025

Commits on Nov 3, 2025

fix: prevent DNS bind-mount from escaping namespace and corrupting host

ammario
and
claude
committed
fix: create /etc/netns/<namespace>/ directory before writing resolv.conf
ammario
committed
fix: create NamespaceConfig resource after writing resolv.conf file
ammario
committed
fix: use mkdir command for more robust directory creation
ammario
committed
fix: use DNAT to intercept all DNS queries

ammario
and
claude
committed
feat: run DNS server inside namespace for localhost compatibility

ammario
and
claude
committed
fix: make test_weak_mode_allows_localhost tolerant of timeouts

ammario
and
claude
committed
fix: bind DNS server to multiple addresses for resolv.conf compatibility
ammario
committed
fix: implement two-pronged DNS strategy for robust resolution
ammario
committed
refactor: use /etc/netns/ for DNS resolution (simpler, kernel-native)
ammario
committed
fix: create placeholder /etc/resolv.conf in namespace for bind-mount
ammario
committed
fix: use mount namespace with bind-mount for safe /etc/resolv.conf handling

ammario
and
claude
committed
fix: directly bind-mount custom resolv.conf over /etc/resolv.conf

ammario
and
claude
committed
fix: let ip netns exec handle mount namespace and resolv.conf bind-mount

ammario
and
claude
committed
fix: create symlink target placeholder in ip netns exec mount namespace

ammario
and
claude
committed
fix: use nsenter + unshare for manual bind-mount control

ammario
and
claude
committed
fix: mount to resolved symlink target path using readlink

ammario
and
claude
committed
fix: revert to simple ip netns exec with documented limitations

ammario
and
claude
committed
✨🎉🔧 FIX: unmount bind-mount on symlinked resolv.conf during cleanup 🎉✨
ammario
committed
refactor: DRY cleanup and improved documentation for NetnsResolv
ammario
committed
fix: reorder struct fields to ensure proper cleanup order
ammario
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix: DNS resolution for network namespaces with symlinked resolv.conf#81

fix: DNS resolution for network namespaces with symlinked resolv.conf#81
ammario merged 21 commits intomainfrom
fix/dns-host-corruption

Commits on Nov 3, 2025

fix: prevent DNS bind-mount from escaping namespace and corrupting host

fix: create /etc/netns/<namespace>/ directory before writing resolv.conf

fix: create NamespaceConfig resource after writing resolv.conf file

fix: use mkdir command for more robust directory creation

fix: use DNAT to intercept all DNS queries

feat: run DNS server inside namespace for localhost compatibility

fix: make test_weak_mode_allows_localhost tolerant of timeouts

fix: bind DNS server to multiple addresses for resolv.conf compatibility

fix: implement two-pronged DNS strategy for robust resolution

refactor: use /etc/netns/ for DNS resolution (simpler, kernel-native)

fix: create placeholder /etc/resolv.conf in namespace for bind-mount

fix: use mount namespace with bind-mount for safe /etc/resolv.conf handling

fix: directly bind-mount custom resolv.conf over /etc/resolv.conf

fix: let ip netns exec handle mount namespace and resolv.conf bind-mount

fix: create symlink target placeholder in ip netns exec mount namespace

fix: use nsenter + unshare for manual bind-mount control

fix: mount to resolved symlink target path using readlink

fix: revert to simple ip netns exec with documented limitations

✨🎉🔧 FIX: unmount bind-mount on symlinked resolv.conf during cleanup 🎉✨

refactor: DRY cleanup and improved documentation for NetnsResolv

fix: reorder struct fields to ensure proper cleanup order