greg/nix-bitcoin
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

netns-isolation: don't auto-assign IPv6 addrs to peer links

Browse Source 
This simplifies the host's address configuration.

This also removes unused addresses that are returned when resolving
container hostnames via nss-mymachines:
`getent ahosts nb-test`
This commit is contained in:
Erik Arvstedt 2021-11-02 13:07:44 +01:00
parent 6584540828
commit c30fe1919b
No known key found for this signature in database
GPG Key ID: 33312B944DD97846
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
modules/netns-isolation.nix
View File

@ -173,6 +173,8 @@ in {
${ip} link add ${veth} type veth peer name ${peer} ${ip} link add ${veth} type veth peer name ${peer}
${ip} link set ${veth} netns ${netnsName} ${ip} link set ${veth} netns ${netnsName}
${ipNetns} addr add ${v.address}/24 dev ${veth} ${ipNetns} addr add ${v.address}/24 dev ${veth}
# The peer link is never used directly, so don't auto-assign an IPv6 address
echo 1 > /proc/sys/net/ipv6/conf/${peer}/disable_ipv6
${ip} link set ${peer} up ${ip} link set ${peer} up
${ipNetns} link set ${veth} up ${ipNetns} link set ${veth} up
${ip} link set ${peer} master nb-br ${ip} link set ${peer} master nb-br