Page MenuHomeVyOS Platform

Container configuration upgrade destroys system
Closed, ResolvedPublicBUG


When upgrading a vyos system containing container configuration, the configuration will be destroyed, such as the following configuration:

set interfaces ethernet eth0 address dhcp
set interfaces ethernet eth0 ipv6 address autoconf
set system name-service
set container name nginx image nginx
set container name nginx allow-host-networks

Then, upgrade the vyos:

add system image

Restart after the first upgrade:

Restart after the second upgrade:


Difficulty level
Hard (possibly days)
Why the issue appeared?
Issues in third-party code
Is it a breaking change?
Perfectly compatible
Issue type
Bug (incorrect behavior)

Event Timeline

In the latest rolling release all works fine without any changes

[email protected]:~$ show version 

Version:          VyOS 1.4-rolling-202107010537
Release Train:    sagitta

[email protected]:~$ sudo podman  run --net host --rm fedora echo it works
it works
[email protected]:~$

note: Record the process of upgrading from 1.4-rolling-202107010537 to 1.4-rolling-202107122017

After the first startup, the container fails to start. Restart the operating system and start normally.

Wait for the next test to determine if this problem is resolved!

Unfortunately, it seems that the same problem still happened. Although it seems that the container can be started normally after restart due to priority adjustment and some factors, it is not a normal operation result!

c-po changed the task status from Open to Confirmed.Aug 29 2021, 8:09 AM
c-po set Issue type to Unspecified (please specify).
c-po added a subscriber: c-po.

Reproducible on my side, too.

set container name unifi environment TZ value 'Europe/Berlin'
set container name unifi image 'jacobalberty/unifi'
set container name unifi memory '1024'
set container name unifi network pod-network-01 address ''
set container name unifi volume config destination '/unifi'
set container name unifi volume config source '/config/unifi'
set container network pod-network-01 prefix ''

It only happens once after the VyOS upgrade. Podman errors out with 125.

If podman can not find an image it returns 125. I don't think this is an error, I think that Fedora for some reason did not have fedoraMinimal available for a while.

Another call to:

[email protected]:~$ configure
[email protected]# load
Loading configuration from 'config.boot'
Load complete. Use 'commit' to make changes effective.
[email protected]# commit
[ container ]
systemctl start podman.service
podman network ls --quiet --filter name=^pod-network-01$
podman run --detach --interactive --tty --replace --memory 1024m --memory-swap 0 --restart on-failure --name unifi   -v /config/unifi:/unifi  -e "TZ=Europe/Berlin" --net pod-network-01 --ip jacobalberty/unifi

[email protected]#

and all is god for every reboot

c-po claimed this task.
c-po changed Difficulty level from Unknown (require assessment) to Hard (possibly days).
c-po changed Why the issue appeared? from Will be filled on close to Issues in third-party code.
c-po changed Is it a breaking change? from Unspecified (possibly destroys the router) to Perfectly compatible.
c-po changed Issue type from Unspecified (please specify) to Bug (incorrect behavior).

Hi, I've just submitted a pull request ( to hopefully complete this bugfix.

The earlier commit (thanks @c-po) introduced a startup retry (up to 10 times) to allow the OS to settle before the container is started.
That is a welcome change, but it only applies if host networking is NOT used.
This further change applies the same fix for containers where host networking is employed.