[pve-devel] seem than ifupdown2 is installed by default on upgrade (a friend reported me an ipv6 slaac bug)
Thomas Lamprecht
t.lamprecht at proxmox.com
Fri Nov 24 13:49:26 CET 2023
Am 24/11/2023 um 11:12 schrieb DERUMIER, Alexandre:
> After investigate a litte bit,
>
> I think this is because ifupdown1 is setting accept_ra=2 by default.
>
>
> and with ifupdown2, by security, we setup accept_ra=0 until it's
> really setup in /etc/network/interfaces
>
>
> iface vmbr0 inet6 auto
> accept_ra 2
Yeah, it's your patch that broke compat here which we applied
already [0], but upstream hasn't yet [1] (do you know what's going on
with them, much less responsive and no release yet since over three
years, maybe just NVIDIA stifling the great work the cumulus devs?)
anyhow, disabling accept_ra by default was IMO the right call.
[0]: https://git.proxmox.com/?p=ifupdown2.git;a=blob;f=debian/patches/upstream/0001-add-ipv6-slaac-support-inet6-auto-accept_ra.patch;h=9e1bb138e777b3ef914460a32d6d0ba6a1048e70;hb=e6835fd11d94148db9d6fc93a19e6bdb45915e29
[1]: https://github.com/CumulusNetworks/ifupdown2/pull/259
>
> (So maybe adding a note in documentation about this behaviour change
> should be enough ?)
Yeah, I added a note now to our release notes known issues & breaking
changes section:
https://pve.proxmox.com/wiki/Roadmap#8.1-known-issues
More information about the pve-devel
mailing list