redhat-developer / redhat-developer/rhdh-fullsend
Track upstream OpenShell#1107: /etc/hosts injection for policy-allowed hostnames
Nobody has claimed this yet.
- Dominant language
- Dockerfile
- Stars
- 2
- Forks
- 7
- Avg merge
- 1d 13h
- Merged PRs (30d)
- 8
Description
Upstream: NVIDIA/OpenShell#1107
Inside the sandbox, /etc/resolv.conf points to an unreachable nameserver (inner netns inherits the host's resolver at 10.89.0.1, which is unreachable). This means DNS-dependent tools timeout instead of failing fast, and all network access must go through the L7 proxy.
The upstream fix would inject /etc/hosts entries for policy-allowed hostnames, letting non-HTTP protocols (git://, ssh://) work without DNS.
Impact: Would eliminate the need for explicit httpProxy/httpsProxy workarounds in .yarnrc.yml and improve sandbox networking reliability.
Migrated from docs/known-issues.md
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reading NVIDIA/OpenShell#1107 and the sandbox networking context around /etc/resolv.conf. Review the migrated entry in docs/known-issues.md and the .yarnrc.yml proxy workaround; done means policy-allowed hostnames work through /etc/hosts, including git:// and ssh:// access, without relying on the unreachable nameserver.
Written by the indexing model from the issue text.
Assessment
- Domain
- infrastructure, networking
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100