{"action":"opened","issue":{"url":"https://api.github.com/repos/weaveworks/weave/issues/1455","labels_url":"https://api.github.com/repos/weaveworks/weave/issues/1455/labels{/name}","comments_url":"https://api.github.com/repos/weaveworks/weave/issues/1455/comments","events_url":"https://api.github.com/repos/weaveworks/weave/issues/1455/events","html_url":"https://github.com/weaveworks/weave/issues/1455","id":107690542,"number":1455,"title":"Proxy volume mount of /var/run prevents netns cleanup","user":{"login":"awh","id":1504438,"avatar_url":"https://avatars.githubusercontent.com/u/1504438?v=3","gravatar_id":"","url":"https://api.github.com/users/awh","html_url":"https://github.com/awh","followers_url":"https://api.github.com/users/awh/followers","following_url":"https://api.github.com/users/awh/following{/other_user}","gists_url":"https://api.github.com/users/awh/gists{/gist_id}","starred_url":"https://api.github.com/users/awh/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/awh/subscriptions","organizations_url":"https://api.github.com/users/awh/orgs","repos_url":"https://api.github.com/users/awh/repos","events_url":"https://api.github.com/users/awh/events{/privacy}","received_events_url":"https://api.github.com/users/awh/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/weaveworks/weave/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-09-22T10:58:46Z","updated_at":"2015-09-22T10:58:46Z","closed_at":null,"body":"The weaveproxy volume mount of `/var/run` captures references to extant Docker network namespaces in `/var/run/docker/netns` due to Docker's use of `MS_REC` (`mount --rbind`) on bind mount creation. This prevents associated veths from being cleaned up on container exit, potentially resulting in duplicate IP address use and other mayhem.\r\n\r\nReproducible on Docker 1.7.1 but not Docker 1.8.2"}}