public inbox for pve-devel@lists.proxmox.com
 help / color / mirror / Atom feed
From: Thomas Lamprecht <t.lamprecht@proxmox.com>
To: "DERUMIER, Alexandre" <alexandre.derumier@groupe-cyllene.com>,
	"pve-devel@lists.proxmox.com" <pve-devel@lists.proxmox.com>
Subject: Re: [pve-devel] seem than ifupdown2 is installed by default on upgrade (a friend reported me an ipv6 slaac bug)
Date: Fri, 24 Nov 2023 13:49:26 +0100	[thread overview]
Message-ID: <8c41e5a8-4be7-4d1b-8832-787f402f767d@proxmox.com> (raw)
In-Reply-To: <24a58df97bcc401449017ae4aaf85d65b4f21e79.camel@groupe-cyllene.com>

Am 24/11/2023 um 11:12 schrieb DERUMIER, Alexandre:
> After investigate a litte bit,
> 
> I think this is because  ifupdown1  is setting accept_ra=2  by default.
> 
> 
> and with ifupdown2, by security, we setup accept_ra=0   until it's
> really setup in /etc/network/interfaces
> 
> 
> iface vmbr0 inet6 auto
>           accept_ra 2

Yeah, it's your patch that broke compat here which we applied
already [0], but upstream hasn't yet [1] (do you know what's going on
with them, much less responsive and no release yet since over three
years, maybe just NVIDIA stifling the great work the cumulus devs?)
anyhow, disabling accept_ra by default was IMO the right call.

[0]: https://git.proxmox.com/?p=ifupdown2.git;a=blob;f=debian/patches/upstream/0001-add-ipv6-slaac-support-inet6-auto-accept_ra.patch;h=9e1bb138e777b3ef914460a32d6d0ba6a1048e70;hb=e6835fd11d94148db9d6fc93a19e6bdb45915e29
[1]: https://github.com/CumulusNetworks/ifupdown2/pull/259
 > 
> (So maybe adding a note in documentation about this behaviour change
> should be enough ?)

Yeah, I added a note now to our release notes known issues & breaking
changes section:

https://pve.proxmox.com/wiki/Roadmap#8.1-known-issues




  reply	other threads:[~2023-11-24 12:49 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2023-11-23 17:50 DERUMIER, Alexandre
2023-11-24  9:07 ` Thomas Lamprecht
2023-11-24 10:12   ` DERUMIER, Alexandre
2023-11-24 12:49     ` Thomas Lamprecht [this message]
2023-11-24 13:12       ` DERUMIER, Alexandre
2023-11-24 13:41       ` DERUMIER, Alexandre
2023-11-29 12:55         ` DERUMIER, Alexandre

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=8c41e5a8-4be7-4d1b-8832-787f402f767d@proxmox.com \
    --to=t.lamprecht@proxmox.com \
    --cc=alexandre.derumier@groupe-cyllene.com \
    --cc=pve-devel@lists.proxmox.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
Service provided by Proxmox Server Solutions GmbH | Privacy | Legal