Re: Disabling IPv6 by default when creating a new namespace in Linux
Dheeraj Kandula <[email protected]> Tue, 7 Jun 2022 16:25:58 -0400
| Newsgroups | gmane.linux.debian.devel.ipv6 |
|---|---|
| Message-ID | <CA+qNgxTYzZhGXKycbe4zKLHSF6+qzh2=qmF__uPV+Q---2atWg@mail.gmail.com> |
--00000000000028be7705e0e166a7 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Thanks a lot Bjorn for pointing this out. I now have IPv6 disabled by default in newly created namespaces too. However, when I enable IPv6 globally it is not enabled inside the already created namespaces. Maybe it has to be done explicitly. I will see if this behavior is acceptable. Thanks a lot Bjorn. I really appreciate your time and patience. Thanks, Marc too for taking the time to respond to my emails. Dheeraj On Tue, Jun 7, 2022 at 4:05 PM Bj=C3=B8rn Mork <[email protected]> wrote: > Dheeraj Kandula <[email protected]> writes: > > > Thanks Bj=C3=B8rn for the reply. But with the grub command line, IPv6 o= ption > is > > not available i.e.* net.ipv6.conf.all.disable_ipv6* i.e. net.ipv6 itsel= f > is > > not available. > > > > $ sudo sysctl net.ipv6 > > sysctl: cannot stat /proc/sys/net/ipv6: No such file or directory > > Huh? Did you set ipv6.disable instead og ipv6.disable_ipv6? Those are > very different, as documented in the module: > > > bjorn@miraculix:~$ modinfo ipv6 > name: ipv6 > filename: (builtin) > alias: net-pf-10 > license: GPL > file: net/ipv6/ipv6 > description: IPv6 protocol stack for Linux > author: Cast of dozens > parm: disable:Disable IPv6 module such that it is non-functiona= l > (int) > parm: disable_ipv6:Disable IPv6 on all interfaces (int) > parm: autoconf:Enable IPv6 address autoconfiguration on all > interfaces (int) > > > > > Bj=C3=B8rn > --00000000000028be7705e0e166a7 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div>Thanks a lot Bjorn for pointing this out. I now have = IPv6 disabled by default in newly created namespaces too.<br></div><div><br= ></div><div>However, when I enable IPv6 globally it is not enabled inside t= he already created namespaces. Maybe it has to be done explicitly. I will s= ee if this behavior is acceptable. <br></div><div><br></div><div>Thanks a l= ot Bjorn. I really appreciate your time and patience. <br></div><div><br></= div><div>Thanks, Marc too for taking the time to respond to my emails.<br><= /div><div><br></div><div>Dheeraj<br></div></div><br><div class=3D"gmail_quo= te"><div dir=3D"ltr" class=3D"gmail_attr">On Tue, Jun 7, 2022 at 4:05 PM Bj= =C3=B8rn Mork <<a href=3D"mailto:[email protected]">[email protected]</a>> wr= ote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px= 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Dheeraj Kan= dula <<a href=3D"mailto:[email protected]" target=3D"_blank">dkandula@g= mail.com</a>> writes:<br> <br> > Thanks Bj=C3=B8rn for the reply. But with the grub command line, IPv6 = option is<br> > not available i.e.* net.ipv6.conf.all.disable_ipv6* i.e. net.ipv6 itse= lf is<br> > not available.<br> ><br> > $ sudo sysctl net.ipv6<br> > sysctl: cannot stat /proc/sys/net/ipv6: No such file or directory<br> <br> Huh?=C2=A0 Did you set ipv6.disable instead og ipv6.disable_ipv6?=C2=A0 Tho= se are<br> very different, as documented in the module:<br> <br> <br> bjorn@miraculix:~$ modinfo ipv6<br> name:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0ipv6<br> filename:=C2=A0 =C2=A0 =C2=A0 =C2=A0(builtin)<br> alias:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 net-pf-10<br> license:=C2=A0 =C2=A0 =C2=A0 =C2=A0 GPL<br> file:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0net/ipv6/ipv6<br> description:=C2=A0 =C2=A0 IPv6 protocol stack for Linux<br> author:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Cast of dozens<br> parm:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0disable:Disable IPv6 module s= uch that it is non-functional (int)<br> parm:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0disable_ipv6:Disable IPv6 on = all interfaces (int)<br> parm:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0autoconf:Enable IPv6 address = autoconfiguration on all interfaces (int)<br> <br> <br> <br> <br> Bj=C3=B8rn<br> </blockquote></div> --00000000000028be7705e0e166a7--