Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ifconfig lo:0 169.254.169.254 netmask 255.255.255.255 up #3

Open
johnnorton opened this issue Oct 20, 2016 · 4 comments
Open

ifconfig lo:0 169.254.169.254 netmask 255.255.255.255 up #3

johnnorton opened this issue Oct 20, 2016 · 4 comments

Comments

@johnnorton
Copy link

This does not seem to work on my mac. Are there any tricks?

@bpholt
Copy link
Owner

bpholt commented Oct 20, 2016

Are you using Docker for Mac? If so, can you look at the readme in the Docker for Mac branch?

Also, I just created #4 to document/discuss a known issue I found a couple days ago. So, right now, the only piece that's working with Docker for Mac is the credentials part.

My company has a bunch of developers who are using this inside Parallels VMs, using the Linux setup instructions, and it's working well for them. I am the first one to try getting it working using Docker for Mac directly, and I haven't had time to work out all the issues yet.

@bpholt
Copy link
Owner

bpholt commented Oct 20, 2016

Oh, also: you may have to create the logging interface before the pf redirects will work. (I'm a little fuzzy as to whether this is actually required or not, so I'm interested in more data on this point.)

sudo ifconfig pflog0 create

@bpholt
Copy link
Owner

bpholt commented Oct 25, 2016

FWIW, I just upgraded to Sierra, and it's no longer working for me. I'm trying to figure out why not.

@bpholt
Copy link
Owner

bpholt commented Oct 25, 2016

Ok, thanks to http://apple.stackexchange.com/questions/254654/port-forwarding-on-macos-sierra I got it working again. No changes needed to the /etc/pf.anchors/fake-ec2-metadata-service and /etc/pf.conf files, but I had to run these commands:

sudo pfctl -d
sudo pfctl -vnf /etc/pf.anchors/fake-ec2-metadata-service 
sudo pfctl -evf /etc/pf.conf

It looks like the pflog0 interface isn't needed either, unless you want packet logging.

I will update the documentation accordingly.

bpholt pushed a commit that referenced this issue Jan 5, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants