Issue metadata
Sign in to add a comment
|
Linux container for Crostini fails to download/install if 8.8.8.8/8.8.4.4 are inaccessible
Reported by
i.am.d...@gmail.com,
Sep 11
|
||||||||||||||||||||||
Issue descriptionUserAgent: Mozilla/5.0 (X11; CrOS x86_64 10895.49.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.87 Safari/537.36 Platform: 10895.49.0 (Official Build) beta-channel eve Steps to reproduce the problem: 1. From a freshly wiped machine (powerwashed) v69+. Connect to a network which blocks DNS queries to external servers. 2. Enable Linux in settings. Termina installs correctly. 3. Attempt to start Termina. 4. Termina shows a loading icon which closes after ~ 20 seconds What is the expected behavior? Termina successfully downloads and installs the LXC container and launches. Or if the download fails, some sort of error is returned to the user. What went wrong? Termina finds no existing copy of debian/stretch and attempts to download it, but the container the download process is in has the DNS servers hard coded to 8.8.8.8 and 8.8.4.4. These should be taken from DHCP or other network settings. Did this work before? No Chrome version: 69.0.3497.87 Channel: beta OS Version: 10895.49.0 Flash Version: This issue is related to but not identical to issue: 829192 and 863665 . The DNS settings should also be carried over to the download container in addition to the actual linux container environment.
,
Sep 16
I've run into the same issue here. Looking at /etc/resolv.conf inside the termina VM shows hard-coded 8.8.8.8 and 8.8.4.4 regardless of what the Chromebook itself is configured to use. This also means that if a VPN is in use, the DNS setting from the VPN will be ignored for the termina VM and containers running inside it, possibly causing DNS leakage. So this may or may not be security relevant (I'm not very familiar with Chromebooks and their VPN integration).
,
Sep 28
I'm picking this up now, since we'll definitely want this for VPNs. |
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by dtapu...@chromium.org
, Sep 11