5. Windows Server 2019 Container Hyper-V isolation with Transparent

Опубликовано: 30 Сентябрь 2024
на канале: Donghowa Network
674
1

https://docs.microsoft.com/en-us/virt...
Process Isolation - deesn't support transparent network
Hyper-V isolation - requires Nested Virtualization - VT-x

Nested Virtualization
Virtual Machine in Virtual Machine

https://docs.microsoft.com/en-us/virt...

$(Get-VMProcessor -VMName container-win).ExposeVirtualizationExtensions
Set-VMProcessor -VMName Container-Win -ExposeVirtualizationExtensions $true

docker run -it --isolation=hyperv mcr.microsoft.com/windows/nanoserver:1809 cmd
docker run -it mcr.microsoft.com/windows/nanoserver:1809 cmd


*without hyper-v, hyper-v isolation is not working
docker: Error response from daemon: hcsshim::CreateComputeSystem a1a939079332e0c5ed6a0f2ef2b1c71b8a93f03aca73fcb1fddc4ebd3d8f4e23: The request is not supported.

To crate transparent network
https://docs.microsoft.com/en-us/virt...

docker network create -d transparent transparent

*Error response from daemon: failed during hnsCallRawResponse: hnsCall failed in Win32: An adapter was not found. (0x803b0006)

docker system prune --all
hnsdiag list networks
hnsdiag delete networks 9BDA2B13-FED4-4EF9-A271-AC689D1EC0E8

unInstall-Package -Name docker -ProviderName DockerMsftProvider
unInstall-Module -Name DockerMsftProvider -Repository PSGallery

docker run -it --network="Microsoft Hyper-V Network Adapter - Virtual Switch" --isolation=hyperv mcr.microsoft.com/windows/nanoserver:1809 cmd

Get-VMNetworkAdapter -vmname container-win | Set-VMNetworkAdapter -MacAddressSpoofing On