Stefan Agner 205b7dd589 Pin stable MAC address for isolated app network endpoints ...

Docker 28 assigns a random MAC address to macvlan endpoints on every
endpoint creation, while older engines derived it from the endpoint's
IP address. As app containers are recreated on every start, the
isolated endpoint would get a different MAC address on each restart,
making it impossible to reference the app in router or firewall rules.

Pin the MAC address in the endpoint configuration instead, using the
same derivation older engines used (02:42 followed by the static IPv4
octets). With the static IP enforced per app, the MAC address stays
stable across restarts and updates and only changes when the user
assigns a different IP address.

Since the MAC address is now fully determined by the configuration,
report it in the app info API from the configured IP rather than from
the running container's network metadata. This makes it available as
soon as isolation is configured, so users can set up router or
firewall rules before the first start.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-06-12 16:54:40 +02:00

..

__init__.py

Rename addon/addons to app/apps in filenames and imports (#6837)

2026-05-13 20:55:46 +02:00

test_app.py

Add isolated physical network access for apps

2026-06-12 16:54:37 +02:00

test_build.py

Rename addon/addons to app/apps in filenames and imports (#6837)

2026-05-13 20:55:46 +02:00

test_config.py

Migrate addon/addons config paths and schema names to app/apps (#6865)

2026-05-27 09:47:32 +02:00

test_manager.py

Derive App state from container state (#6890)

2026-06-01 19:50:06 +02:00

test_network_isolation.py

Pin stable MAC address for isolated app network endpoints

2026-06-12 16:54:40 +02:00

test_options.py

Rename addon/addons to app/apps in filenames and imports (#6837)

2026-05-13 20:55:46 +02:00