How do I connect a pastebin app that uses port 443 to the outside on rootless podman?

[Folaht]

• Host OS: Manjaro OS
• Container OS: Ubuntu 22.04
• Network type: Netavark
• Application I want to use: pbincli

I've got an app that I'd like to post log info manually from time to time.
Right now, I do this by having pbincli installed on the container, then dive into the container
with docker exec ... /bin/bash and call pbincli like so:

$ pbincli send --file ~/.safe/node_dir_1/sn.log

The issue is that this application uses port 443 and the container is rootless.
I'm clueless on how to open it and I'm still really confused about how
to get any outside connection at all on a rootless podman container for that matter.

This is the error I'm getting

admin@46f816b8b9dc:~/.safe$ sn_nodebin
Preparing paste…
Traceback (most recent call last):
  File "/home/admin/.local/lib/python3.10/site-packages/urllib3/connection.py", line 174, in _new_conn
    conn = connection.create_connection(
  File "/home/admin/.local/lib/python3.10/site-packages/urllib3/util/connection.py", line 72, in create_connection
    for res in socket.getaddrinfo(host, port, family, socket.SOCK_STREAM):
  File "/usr/lib/python3.10/socket.py", line 955, in getaddrinfo
    for res in _socket.getaddrinfo(host, port, family, type, proto, flags):
socket.gaierror: [Errno -3] Temporary failure in name resolution

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/home/admin/.local/lib/python3.10/site-packages/urllib3/connectionpool.py", line 703, in urlopen
    httplib_response = self._make_request(
  File "/home/admin/.local/lib/python3.10/site-packages/urllib3/connectionpool.py", line 386, in _make_request
    self._validate_conn(conn)
  File "/home/admin/.local/lib/python3.10/site-packages/urllib3/connectionpool.py", line 1040, in _validate_conn
    conn.connect()
  File "/home/admin/.local/lib/python3.10/site-packages/urllib3/connection.py", line 358, in connect
    self.sock = conn = self._new_conn()
  File "/home/admin/.local/lib/python3.10/site-packages/urllib3/connection.py", line 186, in _new_conn
    raise NewConnectionError(
urllib3.exceptions.NewConnectionError: <urllib3.connection.HTTPSConnection object at 0xffff8a048df0>: Failed to establish a new connection: [Errno -3] Temporary failure in name resolution

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/home/admin/.local/lib/python3.10/site-packages/requests/adapters.py", line 440, in send
    resp = conn.urlopen(
  File "/home/admin/.local/lib/python3.10/site-packages/urllib3/connectionpool.py", line 785, in urlopen
    retries = retries.increment(
  File "/home/admin/.local/lib/python3.10/site-packages/urllib3/util/retry.py", line 592, in increment
    raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPSConnectionPool(host='paste.i2pd.xyz', port=443): Max retries exceeded with url: /?jsonld=paste (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0xffff8a048df0>: Failed to establish a new connection: [Errno -3] Temporary failure in name resolution'))

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/home/admin/.local/bin/pbincli", line 8, in <module>
    sys.exit(main())
  File "/home/admin/.local/lib/python3.10/site-packages/pbincli/cli.py", line 146, in main
    args.func(args, api_client, settings=CONFIG)
  File "/home/admin/.local/lib/python3.10/site-packages/pbincli/actions.py", line 35, in send
    version = api_client.getVersion()
  File "/home/admin/.local/lib/python3.10/site-packages/pbincli/api.py", line 72, in getVersion
    jsonldSchema = self.session.get(
  File "/home/admin/.local/lib/python3.10/site-packages/requests/sessions.py", line 542, in get
    return self.request('GET', url, **kwargs)
  File "/home/admin/.local/lib/python3.10/site-packages/requests/sessions.py", line 529, in request
    resp = self.send(prep, **send_kwargs)
  File "/home/admin/.local/lib/python3.10/site-packages/requests/sessions.py", line 645, in send
    r = adapter.send(request, **kwargs)
  File "/home/admin/.local/lib/python3.10/site-packages/requests/adapters.py", line 519, in send
    raise ConnectionError(e, request=request)
requests.exceptions.ConnectionError: HTTPSConnectionPool(host='paste.i2pd.xyz', port=443): Max retries exceeded with url: /?jsonld=paste (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0xffff8a048df0>: Failed to establish a new connection: [Errno -3] Temporary failure in name resolution'))

ip addr inside container

admin@e7c8edc6d8da:~/.safe/node$ ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
...
2: eth0@if4: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
    link/ether 92:8c:93:6d:59:6c brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet 10.88.0.2/16 brd 10.88.255.255 scope global eth0
       valid_lft forever preferred_lft forever
    inet6 fe80::908c:93ff:fe6d:596c/64 scope link
       valid_lft forever preferred_lft forever

Podman run command

podman run 
--name root_node 
--network podman 
--sysctl net.ipv4.ip_unprivileged_port_start=443
--publish my.ip.v.4:12000-65535:12000-65535/udp 
--publish 192.168.178.26:443:4443/tcp
...
--userns=keep-id 
--ip 10.88.0.2 
-v root_node_vol:/home/admin/.safe/cli 
-d ghcr.io/safenetwork-community/rootnode-ipv4:ubuntu

Dockerfile

...
EXPOSE 443
...

[Luap99]

If you want access to the port from the host you need to forward it with -p, if you have to bind a privileged port on the host side you can set net.ipv4.ip_unprivileged_port_start sysctl to a lower value.
Alternatively you bind to a higher port and redirect traffic with firewall rules from the privileged port to the higher port.

[Folaht]

If you want access to the port from the host you need to forward it with -p

Podman run command

podman run 
...
--sysctl net.ipv4.ip_unprivileged_port_start=443
...
--publish 192.168.178.26:443:4443/tcp
...

if you have to bind a privileged port on the host side you can set net.ipv4.ip_unprivileged_port_start sysctl to a lower value.

[folaht@Rezosur-dy rootnode-ipv4]$ cat /proc/sys/net/ipv4/ip_unprivileged_port_start
443

I seem to have done both things and it still fails.