fix: init with podman and netns=host create containers without ports

pkg/standalone/container.go

@@ -98,6 +98,19 @@ func confirmContainerIsRunningOrExists(containerName string, isRunning bool, run
 	return true, nil
 }
 
+// publishPortNetworkArgs returns the extra network args needed so that -p
+// mappings are honoured when the CLI does not pass an explicit --network.
+// podman applies the containers.conf netns default (e.g. netns="host"), which
+// silently drops every -p; "private" forces a fresh netns (bridge for rootful,
+// pasta/slirp4netns for rootless), i.e. podman's own default. docker has no
+// such override and does not accept "private", so it gets nothing.
+func publishPortNetworkArgs(runtimeCmd string) []string {
+	if runtimeCmd == string(utils.PODMAN) {
+		return []string{"--network", "private"}
+	}
+	return nil
+}
+
 func isContainerRunError(err error) bool {
 	if exitError, ok := err.(*exec.ExitError); ok {
 		exitCode := exitError.ExitCode()

pkg/standalone/standalone.go

@@ -437,6 +437,7 @@ func runZipkin(wg *sync.WaitGroup, errorChan chan<- error, info initInfo) {
 				"--network", info.dockerNetwork,
 				"--network-alias", DaprZipkinContainerName)
 		} else {
+			args = append(args, publishPortNetworkArgs(runtimeCmd)...)
 			args = append(
 				args,
 				"-p", "9411:9411")
@@ -498,6 +499,7 @@ func runRedis(wg *sync.WaitGroup, errorChan chan<- error, info initInfo) {
 				"--network", info.dockerNetwork,
 				"--network-alias", DaprRedisContainerName)
 		} else {
+			args = append(args, publishPortNetworkArgs(runtimeCmd)...)
 			args = append(
 				args,
 				"-p", "6379:6379")
@@ -599,6 +601,7 @@ func runPlacementService(wg *sync.WaitGroup, errorChan chan<- error, info initIn
 			osPort = 6050
 		}
 
+		args = append(args, publishPortNetworkArgs(runtimeCmd)...)
 		args = append(args,
 			"-p", fmt.Sprintf("%v:50005", osPort),
 			"-p", fmt.Sprintf("%v:8080", healthPort),
@@ -710,6 +713,7 @@ func runSchedulerService(wg *sync.WaitGroup, errorChan chan<- error, info initIn
 			osPort = 6060
 		}
 
+		args = append(args, publishPortNetworkArgs(runtimeCmd)...)
 		args = append(args,
 			"-p", fmt.Sprintf("%v:50006", osPort),
 			"-p", fmt.Sprintf("%v:2379", schedulerEtcdPort),

pkg/standalone/standalone_test.go

@@ -407,3 +407,8 @@ func TestIsSchedulerIncluded(t *testing.T) {
 		})
 	}
 }
+
+func TestPublishPortNetworkArgs(t *testing.T) {
+	assert.Equal(t, []string{"--network", "private"}, publishPortNetworkArgs("podman"))
+	assert.Nil(t, publishPortNetworkArgs("docker"))
+}