Intermittent connectivity issues with docker

I’ve got a weird issue I can’t quite nail down. My homeassistant docker container has on/off connectivity and every other request seems to fail.

On the host doing a traceroute to a device on the lan I see:

$ traceroute obi.mydomain.tld
traceroute to obi.mydomain.tld (10.10.1.7), 30 hops max, 60 byte packets
 1  obi.mydomain.tld (10.10.1.7)  0.687 ms  0.649 ms  1.444 ms
$ traceroute obi.mydomain.tld
traceroute to obi.mydomain.tld (10.10.1.7), 30 hops max, 60 byte packets
 1  obi.mydomain.tld (10.10.1.7)  0.654 ms  0.638 ms *
$ traceroute obi.mydomain.tld
traceroute to obi.mydomain.tld (10.10.1.7), 30 hops max, 60 byte packets
 1  obi.mydomain.tld (10.10.1.7)  0.720 ms * *

Ok, that seems perfectly normal.

15b938bcde97:/config# traceroute obi.mydomain.tld
traceroute to obi.mydomain.tld (10.10.1.7), 30 hops max, 46 byte packets
 1  homeassistant.local (172.18.0.1)  0.004 ms  0.009 mstraceroute: sendto: Permission denied
15b938bcde97:/config# traceroute obi.mydomain.tld
traceroute: can't connect to remote host (10.10.1.7): Permission denied
15b938bcde97:/config# traceroute obi.mydomain.tld
traceroute to obi.mydomain.tld (10.10.1.7), 30 hops max, 46 byte packets
 1  homeassistant.local (172.18.0.1)  0.003 mstraceroute: sendto: Permission denied
15b938bcde97:/config# traceroute obi.mydomain.tld
traceroute to obi.mydomain.tld (10.10.1.7), 30 hops max, 46 byte packets
 1  homeassistant.local (172.18.0.1)  0.004 ms  0.004 ms  0.003 ms
 2  obi.mydomain.tld (10.10.1.7)  0.439 ms  0.425 ms  0.399 ms

That’s definitely not normal.

  homeassistant:
    image: ghcr.io/home-assistant/home-assistant:latest
    container_name: homeassistant
    expose:
      - 8123
      - 21063
    ports:
      - 8123:8123
      - 1400:1400 # sonos
      - 5353:5353 #homebridge
      - 21064:21064 #homebridge, default is 21063
      - 21063:21063 #homekit
    labels:
      - autoheal=true
      - traefik.enable=true
      - traefik.http.routers.homeassistant.rule=Host(`homeassistant.mydomain.tld`)
      - traefik.http.routers.homeassistant.entrypoints=websecure
      - traefik.http.routers.homeassistant.tls=true
      - traefik.http.routers.homeassistant.tls.certresolver=letencrypt
      - traefik.http.services.homeassistant.loadbalancer.server.port=8123

    cap_add:
      - NET_ADMIN
      - NET_RAW
    volumes:
      - ./data/homeassistant/:/config
      - /run/dbus:/run/dbus:ro
      - /etc/localtime:/etc/localtime:ro
    depends_on:
      - mqtt
      - db
    restart: unless-stopped
    privileged: true

Nothing in this docker compose seems particularly suspect.

My logs are flooded with warnings due to devices seemingly being intermittently connected. This doesn’t appear to be an issue on the host, connectivity if fine there. I don’t even have any docker networks defined.

Awesome. That seems highly relevant to what I’ve spent a whole evening trying to debug. Thanks.