net/containernetworking-plugins: new port CNI plugins for container networking support PR: 267184 Reviewed by: arrowd Reviewed by: dch Sponsored by: SkunkWerks, GmbH Differential Revision: https://reviews.freebsd.org/D37324f23ec27767
Port details
net/containernetworking-plugins 0.6_20
Networking plugins for container networking support
Port info
- Maintainer
- dfr@FreeBSD.org
- Packages
- latest: 0.6_20
- Upstream
- Higher version available: 1.9.1
- Last update
- to 0.6_20 · d81b7ba3c3
- Quarterly
- 2026Q4: 0.6_20 · last MFH 60647eff54
- WWW
- https://www.cni.dev/
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install containernetworking-pluginsinstalls 0.6_20 fromlatest; fromquarterly(2026Q4) 0.6_20- Port
# cd /usr/ports/net/containernetworking-plugins && make install clean- Size
- 2.9 MiB download · 22 MiB installed
- Depends on
- nothing
- License
- APACHE20
- pkg-message
Shown after installing
Container networking relies on NAT to allow container network packets out to the host's network. This requires a PF firewall to perform the translation. A simple example is included - to use it: # cp /usr/local/etc/containers/pf.conf.sample /etc/pf.conf ... Edit /etc/pf.conf and set v4egress_if, v6egress_if to your network interface(s) ... # sysrc pf_enable=YES # service pf start The sample PF configuration includes support for port redirections. These are implemented as redirect rules in anchors nested under cni-rdr. Support for redirecting connections from the container host to services running inside a container is included for FreeBSD 13.3 and later. To enable this, first load the pf kernel module, by adding pf_load="YES" to /boot/loader.conf and enable PF support for these redirections using sysctl: # kldload pf # sysctl net.pf.filter_local=1 # service pf restart Redirect rules will work if the destination address is localhost (e.g. 127.0.0.1 or ::1) - to enable this, the following line must be included in your /etc/pf.conf: nat-anchor "cni-rdr/*" if upgrading from an older version, this needs to be added to /etc/pf.conf. For example if host port 1234 is redirected to an http service running in a container, you could connect to it using: # fetch -o- http://$(hostname):1234 or # fetch -o- http://localhost:1234
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 0.6_20 | 0.6_19 | – |
| FreeBSD 15 | 0.6_20 | 0.6_19 | – |
| FreeBSD 14 | 0.6_20 | 0.6_19 | 0.6_20 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 0.6_20 | 0.6_19 | – |
| FreeBSD 14 | 0.6_20 | 0.6_19 | 0.6_20 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 0.6_20.Fixed (0)
No VuXML entries for this package.
Problem reports (0) · open in Bugzilla, most recently changed first
None.