Skip to content

ipv6 error with nftables #8

@jknaus

Description

@jknaus

Hi, I have installed aigate on Fedora43.
When I start aigate e.g. with
aigate run -- aider
i get the following messages from iptables at startup:

[aigate] sandbox active
[aigate] deny_read: .env, .env.*, secrets/, credentials/, ~/.ssh/, *.pem, *.key, *.p12, ~/.aws/, ~/.gcloud/, ~/.kube/config, ~/.npmrc, ~/.pypirc, terraform.tfstate, *.tfvars
[aigate] deny_exec: curl, wget, nc, ncat, netcat, ssh, scp, rsync, ftp, kubectl delete, kubectl exec
[aigate] allow_net: api.anthropic.com, api.openai.com, api.github.com, registry.npmjs.org, proxy.golang.org (all other outbound connections will be blocked)
[aigate] mask_stdout: openai, anthropic, aws_key, aws_secret, github, bearer; +1 custom pattern(s)
18:25:43 INFO    starting network-filtered sandbox allow_net=["api.anthropic.com","api.openai.com","api.github.com","registry.npmjs.org","proxy.golang.org"] dns_servers=["192.168.178.1","fd2e:2bd1:b699:0:4a5d:35ff:fe1c:74fd","2003:c2:3f1c:8100:4a5d:35ff:fe1c:74fd"]
sent tapfd=5 for tap0
received tapfd=5
iptables v1.8.11 (nf_tables): host/network `fd2e:2bd1:b699:0:4a5d:35ff:fe1c:74fd' not found
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.8.11 (nf_tables): host/network `2003:c2:3f1c:8100:4a5d:35ff:fe1c:74fd' not found
Try `iptables -h' or 'iptables --help' for more information.

Is this due to Fedora using the nftables backend not resolving the ipv6 addresses correctly?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions