CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

net/containernetworking-plugins 0.6_20

Networking plugins for container networking support

Port info

Maintainer
dfr@FreeBSD.org
Packages
latest: 0.6_20
Upstream
Higher version available: 1.9.1
Last update
to 0.6_20 · d81b7ba3c3
Quarterly
2026Q4: 0.6_20 · last MFH 60647eff54
WWW
https://www.cni.dev/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install containernetworking-plugins
installs 0.6_20 from latest; from quarterly (2026Q4) 0.6_20
Port
# cd /usr/ports/net/containernetworking-plugins && make install clean
Size
2.9 MiB download · 22 MiB installed
Depends on
nothing
License
APACHE20
pkg-message
Shown after installing
Container networking relies on NAT to allow container network packets
out to the host's network. This requires a PF firewall to perform the
translation. A simple example is included - to use it:

# cp /usr/local/etc/containers/pf.conf.sample /etc/pf.conf
...
Edit /etc/pf.conf and set v4egress_if, v6egress_if to your network interface(s)
...
# sysrc pf_enable=YES
# service pf start

The sample PF configuration includes support for port redirections. These are
implemented as redirect rules in anchors nested under cni-rdr.

Support for redirecting connections from the container host to services running
inside a container is included for FreeBSD 13.3 and later. To enable this, first
load the pf kernel module, by adding pf_load="YES" to /boot/loader.conf and
enable PF support for these redirections using sysctl:

# kldload pf
# sysctl net.pf.filter_local=1
# service pf restart

Redirect rules will work if the destination address is localhost (e.g. 127.0.0.1
or ::1) - to enable this, the following line must be included in your
/etc/pf.conf:

nat-anchor "cni-rdr/*"

if upgrading from an older version, this needs to be added to /etc/pf.conf.

For example if host port 1234 is redirected to an http service running in a
container, you could connect to it using:

# fetch -o- http://$(hostname):1234

or

# fetch -o- http://localhost:1234

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.6_200.6_19–
FreeBSD 150.6_200.6_19–
FreeBSD 140.6_200.6_190.6_20

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.6_200.6_19–
FreeBSD 140.6_200.6_190.6_20

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.6_20.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (51)

Dave Cottlehuber (dch) · 0.1
net/containernetworking-plugins: new port

CNI plugins for container networking support

PR:		267184
Reviewed by:	arrowd
Reviewed by:	dch
Sponsored by:	SkunkWerks, GmbH
Differential Revision:	https://reviews.freebsd.org/D37324
f23ec27767