merged to master (which will become styhead shortly)

Bruce

In message: [meta-virtualization][PATCH] lxc: don't allow named listening IPv6 
address on lxcbrX network interface
on 28/10/2024 Xiangyu Chen via lists.yoctoproject.org wrote:

> From: Xiangyu Chen <[email protected]>
> 
> lxc-net enabled the IPv6 by default since v6.0.0[1], when named enabled on
> system, the lxc-net which based on dnsmasq would fail to bind the IPv6
> address on lxcbrX interface, that cause lxc cannot work correctly.
> 
> Add the lxc-net default v6 address to named.conf.option to tell named don't
> bind and listen that address.
> 
> [1] https://github.com/lxc/lxc/commit/e8888344
> 
> Signed-off-by: Xiangyu Chen <[email protected]>
> ---
>  recipes-core/bind/bind_virtualization.inc | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/recipes-core/bind/bind_virtualization.inc 
> b/recipes-core/bind/bind_virtualization.inc
> index a6e39049..f942d7ad 100644
> --- a/recipes-core/bind/bind_virtualization.inc
> +++ b/recipes-core/bind/bind_virtualization.inc
> @@ -1,4 +1,4 @@
>  # Tell named not to bother listening on the IP address that lxc and libvirtd 
> handles itself.
>  do_install:append() {
> -     sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would take 
> care of this address itself\n\tlisten-on { ! 10.0.3.1; ! 192.168.122.1; 
> any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
> +     sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would take 
> care of this address itself\n\tlisten-on { ! 10.0.3.1; ! 192.168.122.1; 
> any;};\n\tlisten-on-v6 { ! fc11:4514:1919:810::1; any;};\n,' 
> ${D}${sysconfdir}/bind/named.conf.options
>  }
> -- 
> 2.35.5
> 

> 
> 
> 

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#8950): 
https://lists.yoctoproject.org/g/meta-virtualization/message/8950
Mute This Topic: https://lists.yoctoproject.org/mt/109253028/21656
Group Owner: [email protected]
Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to