Your message dated Sat, 08 Mar 2025 12:04:39 +0000
with message-id <[email protected]>
and subject line Bug#1059332: fixed in bridge-utils 1.7.1-4
has caused the Debian Bug report #1059332,
regarding bridge-utils: Using tokenized interface identifiers with bridge-utils
ifupdown via /etc/network/interfaces fails
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1059332: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059332
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: bridge-utils
Version: 1.7.1-1
Severity: normal
Issue
=====
Using "ip token", a command to specify a fixed Interface ID for IPv6
addressing, fails with bridges in Debian Bookworm, as the token needs to be set in
between interface creation and taking the interface up.
/lib/bridge-utils/ifupdown.sh currently does not allow to hook into that stage.
Using the following interface config:
auto br0
iface br0 inet dhcp
bridge_ports enp1s0
bridge_hw 12:34:56:78:90:12
iface br0 inet6 manual
pre-up ip token set ::192.168.1.35 dev br0
causes the system to end up with the usual EUI-64 based global IPv6 addresses
in addition to the token-based addresses.
The kernel then keeps the EUI-64 based addresses in addition to the wanted
token-based addresses until they expire, at which point only the tokized
interface identifiers keep being used.
Workaround
==========
As a "hack", the following workaround configuration can be used:
auto br0
iface br0 inet dhcp
pre-up brctl addbr br0
pre-up ip link set dev br0 address 12:34:56:78:90:12
pre-up ip token set ::192.168.1.35 dev br0
bridge_ports enp1s0
bridge_hw 00:1e:06:45:2e:fa
iface br0 inet6 manual
This causes the "ip token" command to apply between interface creation and
taking the interface up, which works as expected (i.e. the system only has global
addresses based on the token).
Of course, any required feature dealt with in /lib/bridge-utils/ifupdown.sh in
between interface creation and taking the interface up needs to be replicated
manually via pre-up.
Proposed fix
============
Adding the lines:
if [ "$IF_BRIDGE_TOKEN" ]
then
ip token set $IF_BRIDGE_TOKEN dev $IFACE
fi
right before:
# We activate the bridge
ip link set dev $IFACE up
in /lib/bridge-utils/ifupdown.sh and using the interface config:
auto br0
iface br0 inet dhcp
bridge_ports enp1s0
bridge_hw 12:34:56:78:90:12
bridge_token ::192.168.1.35
fixes the problem. However, this necessarily introduces a dependency on iproute2 (i.e. it should
probably be a "recommends", existence of "/sbin/ip" might be necessary to
check, documentation needs to be adapted).
--- End Message ---
--- Begin Message ---
Source: bridge-utils
Source-Version: 1.7.1-4
Done: Santiago García Mantiñán <[email protected]>
We believe that the bug you reported is fixed in the latest version of
bridge-utils, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Santiago García Mantiñán <[email protected]> (supplier of updated bridge-utils
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 07 Mar 2025 15:36:34 +0100
Source: bridge-utils
Binary: bridge-utils bridge-utils-dbgsym
Architecture: source amd64
Version: 1.7.1-4
Distribution: unstable
Urgency: low
Maintainer: Santiago García Mantiñán <[email protected]>
Changed-By: Santiago García Mantiñán <[email protected]>
Description:
bridge-utils - Utilities for configuring the Linux Ethernet bridge
Closes: 1059332
Changes:
bridge-utils (1.7.1-4) unstable; urgency=low
.
* Add bridge_token option to set tokenized interface id for the
bridges, thanks to Oliver. Closes: #1059332.
Checksums-Sha1:
ac6f3722a1df1e16e366f618e83197853ae54cd6 1884 bridge-utils_1.7.1-4.dsc
c2a616e89c6181574df4eef6e5937be2f32918c9 16024
bridge-utils_1.7.1-4.debian.tar.xz
69a7147f0d09f0776fe9c9da23cea66608e17421 42904
bridge-utils-dbgsym_1.7.1-4_amd64.deb
e38b4f27b590373498976d096021e783a062fc99 6717
bridge-utils_1.7.1-4_amd64.buildinfo
b5394f61f296150ef2b17b3e44314c5876372e61 34372 bridge-utils_1.7.1-4_amd64.deb
Checksums-Sha256:
5d0d64df6e705e294dd6cd0cd34c595b8172b6218ba8553fcc4ea284ffad887c 1884
bridge-utils_1.7.1-4.dsc
335dd715103f19b2087f186133a2f2200c4e27c74545c16c8b02dad7627d13e7 16024
bridge-utils_1.7.1-4.debian.tar.xz
41544e98e09ea38b033ecb1c303a23d9c0afed7821cd92197a13fb62fcc83a29 42904
bridge-utils-dbgsym_1.7.1-4_amd64.deb
bb2344db1311badbeb7966f8be716f8c4154f9aa1ec8b61d4ca128099a81ea60 6717
bridge-utils_1.7.1-4_amd64.buildinfo
ffd95f7a5e68ee97d6890b78c8b8150581688f27e9b0bad317b08ea8686912e0 34372
bridge-utils_1.7.1-4_amd64.deb
Files:
65ad7216c02f59fb049c99fa682ca60b 1884 net optional bridge-utils_1.7.1-4.dsc
8551e993d02cfaf10890e44cd6dd4252 16024 net optional
bridge-utils_1.7.1-4.debian.tar.xz
8af06053f887af7f5d8c79eed2a09f7a 42904 debug optional
bridge-utils-dbgsym_1.7.1-4_amd64.deb
1a31d13ee9ef69025dfc3a5de0e0c28e 6717 net optional
bridge-utils_1.7.1-4_amd64.buildinfo
32aff20495846cc93bd7ab0fe4e9f7de 34372 net optional
bridge-utils_1.7.1-4_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEBqPldg9hG0uxqQ5ouGiMo9h21aMFAmfMK7IACgkQuGiMo9h2
1aMBDw//T77xRPRQetlF48G+HG+hnOKfPW5biJ92rVaaXGcJFYY08Z809ET4nKQY
afC0YJ26hb+vSL3Mz4vNn1AZUbhcnPU3EMkFejwcTlsPHdmrXwV92f/QqqX39Giw
/rFHtv3LwGvVuG1BvRpm7cJp78ye9NKa20TJKOtjR12JZ78FuqLRJirzUCimKtuX
i7+PGne2sIhVgj5YbFeIJ3gRDCWqsWng6n9FYXCCoSVeOBrCzuzGfawfAS7MTb7S
EXxJuyThibp1DbXhoL9+k29VsWGJnXziE6GDb/aH9yyDI0mmdj8nIcjC90KiWe4I
TkREYmLY1gwqg7dJE4WNHXa2fpCZaKZ9FCugq7BjsICA7eTNL7y+a89Bv57xXxzP
Cm0xOhPZjt6E3mLqQrBIFbh878z1vYQYwg516kZ1kihWa5zT4yllH1vrDPnuBz+g
08j0n0wUxRWv5QZ5eTiarYmmhZ30HLtb427gzW2qX2zb35sW8+gDUJCak09RMQM3
HTHNLzpSJTiERkbZCvdFrh7RWSm7jix3PjOuvhpY3STnV7dL2rzJsLKtu5Ps/o+M
HxK41FRcR1Sd98960T6gY0y1nRweMq689RMtUP/6K+0BdPtv9VOSZKtX3EZS5kWK
AOr5VAPAJzbcGSgs2WZtrCVGzT6/icu4wGj7I5b9dR4xuGICdwQ=
=bow6
-----END PGP SIGNATURE-----
pgpccZaHAj_gD.pgp
Description: PGP signature
--- End Message ---
