Commit c1f2ade
committed
remove unroutable ipv6 config
The current configuration configures the docker daemon to issue ipv6
addresses in an RFC 3849 IPv6 documentation range[1], most Likely copied f
rom the docker documentation[2]. I suspect that theses images dont have
any additional IPv6 prefixes delegated to them so im not sure any value
makes senses here.
I suspect that this is never the desired outcome as it means the docker
instance gets configured with a un-routable global IPv6 address. This
means outgoing connections will first try to connect to resources via
IPv6 (if a AAAA is avalible) and time out before trying IPv4. This can
be observed in a beaker job[3] where wget first tries to download the
puppet.deb file over ipv6
In most cases i think one just wants to have the docker image have a
ipv6 loopback and linklocal address which for reasons [4] docker dosn't
give us. I don't think anyone actually needs a global IPv6
address. As such adding something like the following to[4]
spec_helper_acceptance.rb would produce the desired affect
shell('sysctl net.ipv6.conf.all.disable_ipv6=0')
[1]https://tools.ietf.org/html/rfc3849
[2]https://docs.docker.com/config/daemon/ipv6/
[3]https://github.com/voxpupuli/puppet-unbound/runs/1595247379?check_suite_focus=true
(line 272)
[4]moby/moby#33099
[5]https://github.com/voxpupuli/puppet-unbound/blob/master/spec/acceptance/unbound_spec.rb#L13
Signed-off-by: John Bond <[email protected]>1 parent 48044bb commit c1f2ade
1 file changed
Lines changed: 0 additions & 4 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
79 | 79 | | |
80 | 80 | | |
81 | 81 | | |
82 | | - | |
83 | | - | |
84 | | - | |
85 | | - | |
86 | 82 | | |
87 | 83 | | |
88 | 84 | | |
| |||
0 commit comments