[Question]: Directory Server within VDSM

[wikrie]

Is your question not already answered in the FAQ?

• I made sure the question is not listed in the FAQ.

Is this a general question and not a technical issue?

• I am sure my question is not about a technical issue.

Question

Did anybody get the Directory Server Package running and working under VDSM? Install and Setup of Directory Packake work like charme and DSM is adding in the AD without any issues, also the Test wunning fine.
But outside the docker image the AD cannot be used, this is maybe an issue of the network switch from local network to docker network.
my local network is a typical 192.168.178.0/24 and VDSM uses per default 172.30.13.0.
if I try to add a win client to the AD it onyl said AD not reachable, even if I try to ping the domain I do not get an answer. So is it possible in general?

br Chris

[xrh0905]

Yes. Generally it is possible for AD running in vDSM.
However, there are few thing to be considered.

The fastest way to get AD up and running is to migrate to macvlan networking (DHCP=Y in README.md), in such case your vDSM can obtain an IP within 192.168.178.0/24 thus it should work just like normal DSM.
On the other hand, if the bridge network is intended/unchangable, do check necessary ports for AD is opened (53 for DNS, 88 for Kerbos etc.) is properly forwarded. Personally I DON'T recommend this method as it introudced complexity and it's possible that AD won't work in such setup.

[doubleJazzCat]

@xrh0905 你好, 请问一下dhcp模式下vdsm如何才能访问宿主机呢, 我通过ssh连接vdsm无法ping通宿主机

这是我创建macvlan的命令

docker network create -d macvlan \
  -o parent=enp1s0 \
  --subnet 192.168.124.0/24 \
  --gateway 192.168.124.1 \
  --ip-range 192.168.124.128/30 \
  --aux-address 'host=192.168.124.127' \
  macvlan

这是我在主机上创建网口的命令

ip link add macvlan-shim link enp1s0 type macvlan mode bridge
ip addr add 192.168.124.127/32 dev macvlan-shim
ip link set macvlan-shim up
ip route add 192.168.124.128/30 dev macvlan-shim

[xrh0905]

@doubleJazzCat
晚上好。
DHCP下vDSM无法访问宿主机是正常的。这是Docker MACVLAN的实现导致的。
有一些可行的解决方案。参考如下
https://blog.oddbit.com/post/2018-03-12-using-docker-macvlan-networks/
https://hackaday.io/page/399315-docker-macvlan-with-host-access

https://zeeko.dev/2025/01/macvlan-network-connect-containers-host/

我注意到你已经在主机上试图创建网口。我并没有做过类似部署，但我猜测问题可能与 192.168.124.127 并不在 192.168.124.128/30 相关。请尝试移动IP进入子网范围。

Good evening.
It's by-design for vDSM to be unable to direct access the host by default. Restricted by Docker.
There're some viable soluction as links above.

I noticed that you're already attempted to create macvlan-shim on host. Personally I had never attempted such deployment, but I would assume that it's related to Host IP Address not inside the 192.168.124.128/30 . Please try to correct that first.