Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry.
Control: severity -1 serious
Moin
This bug breaks any DHCPv6 use, as it never resets the lifetime of
existing addresses on rebind. This makes it not really useful for IPv6,
depending on settings of outside control. Let's set the severity
correctly as broken or mostly so.
Not completely minimal and not yet properly tested patch:
diff --git a/debian/dhclient-script.linux b/debian/dhclient-script.linux
index f9b734a..e0133b7 100644
--- a/debian/dhclient-script.linux
+++ b/debian/dhclient-script.linux
@@ -393,10 +393,11 @@ case "$reason" in
;;
BOUND6|RENEW6|REBIND6)
-if [ "${new_ip6_address}" ]; then
+if [ "${new_ip6_address}" ] && [ "${new_ip6_prefixlen}" ]; then
# set leased IP
-ip -6 addr add ${new_ip6_address} \
-dev ${interface} scope global
+ip -6 addr replace ${new_ip6_address}/${new_ip6_prefixlen} \
+dev ${interface} scope global valid_lft ${new_max_life} \
+preferred_lft ${new_preferred_life}
fi
# update /etc/resolv.conf
@@ -409,19 +410,23 @@ case "$reason" in
;;
DEPREF6)
+if [ -z "${cur_ip6_prefixlen}" ]; then
+exit_with_hooks 2
+fi
+
# set preferred lifetime of leased IP to 0
-ip -6 addr change ${cur_ip6_address} \
+ip -6 addr change ${cur_ip6_address}/${cur_ip6_prefixlen} \
dev ${interface} scope global preferred_lft 0
;;
EXPIRE6|RELEASE6|STOP6)
-if [ -z "${old_ip6_address}" ]; then
+if [ -z "${old_ip6_address}" ] || [ -z "${old_ip6_prefixlen}" ]; then
exit_with_hooks 2
fi
# delete leased IP
-ip -6 addr del ${old_ip6_address} \
+ip -6 addr del ${old_ip6_address}/${old_ip6_prefixlen} \
dev ${interface}
;;
I intend to fix that from oldstable up.
Regards,
Bastian
--
Vulcans do not approve of violence.
-- Spock, "Journey to Babel", stardate 3842.4
Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry.
@'Bastian Blank', I believe there was an image refresh due for this month. Can you please provide an ETA on when we can have an image with this fixed included? This is for Bytedance/TikTok which as you can assume is a major customer and they need this fix urgently at this point. The proposed workaround is causing issues. Jack -Original Message- From: Jack Aboutboul Sent: Tuesday, November 29, 2022 12:46 AM To: 'Bastian Blank' ; Souradeep Chakrabarti Cc: '1022969-qu...@bugs.debian.org' <1022969-qu...@bugs.debian.org>; '1022...@bugs.debian.org' <1022...@bugs.debian.org>; '1022969-submit...@bugs.debian.org' <1022969-submit...@bugs.debian.org>; Anirudh Rayabharam ; Jinank Jain Subject: RE: Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry. Ping on this Bastian. Can you please confirm we can get this into the next image refresh. -Original Message- From: Jack Aboutboul Sent: Tuesday, November 22, 2022 2:54 AM To: 'Bastian Blank' ; Souradeep Chakrabarti Cc: 1022969-qu...@bugs.debian.org; 1022...@bugs.debian.org; 1022969-submit...@bugs.debian.org; Anirudh Rayabharam ; Jinank Jain Subject: RE: Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry. Thanks Bastian for the efforts on this. Should this be the default behavior? If so, can we get a package update and image refresh? Thanks, Jack -Original Message- From: Bastian Blank Sent: Tuesday, November 22, 2022 2:52 AM To: Souradeep Chakrabarti Cc: 1022969-qu...@bugs.debian.org; 1022...@bugs.debian.org; 1022969-submit...@bugs.debian.org; Jack Aboutboul ; Anirudh Rayabharam ; Jinank Jain Subject: Re: Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry. [Some people who received this message don't often get email from bastian.bl...@credativ.de. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ] Hi Souradeep On Tue, Nov 22, 2022 at 07:44:11AM +, Souradeep Chakrabarti wrote: > Is there any work around for the time being? Yes, you replace /sbin/dhclient-script with the file client/scripts/linux out of the isc-dhcp source. Bastian -- Bastian Blank Berater Telefon: +49 2166 9901-194 E-Mail: bastian.bl...@credativ.de credativ GmbH, HRB Mönchengladbach 12080, USt-ID-Nummer: DE204566209 Trompeterallee 108, 41189 Mönchengladbach Geschäftsführung: Dr. Michael Meskes, James Mark McGowan Unser Umgang mit personenbezogenen Daten unterliegt folgenden Bestimmungen: https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.credativ.de%2Fdatenschutz=05%7C01%7Cjaboutboul%40microsoft.com%7C51820d3fe8e94b397db408dacc5e79eb%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638047003427902103%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=IMK67PgesfkjoLPVAYqs9Q9S4yAUfrJEB4VYgoVV5O8%3D=0
Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry.
> -Original Message- > From: Jack Aboutboul > Sent: Tuesday, November 22, 2022 1:24 PM > To: Bastian Blank ; Souradeep Chakrabarti > > Cc: 1022969-qu...@bugs.debian.org; 1022...@bugs.debian.org; 1022969- > submit...@bugs.debian.org; Anirudh Rayabharam > ; Jinank Jain > Subject: RE: Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 > client > failing to renew the IPv6 address upon T1 expiry. > > Thanks Bastian for the efforts on this. > > Should this be the default behavior? > > If so, can we get a package update and image refresh? > > Thanks, > Jack > > -Original Message- > From: Bastian Blank > Sent: Tuesday, November 22, 2022 2:52 AM > To: Souradeep Chakrabarti > Cc: 1022969-qu...@bugs.debian.org; 1022...@bugs.debian.org; 1022969- > submit...@bugs.debian.org; Jack Aboutboul ; > Anirudh Rayabharam ; Jinank Jain > > Subject: Re: Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 > client > failing to renew the IPv6 address upon T1 expiry. > > [Some people who received this message don't often get email from > bastian.bl...@credativ.de. Learn why this is important at > https://aka.ms/LearnAboutSenderIdentification ] > > Hi Souradeep > > On Tue, Nov 22, 2022 at 07:44:11AM +, Souradeep Chakrabarti wrote: > > Is there any work around for the time being? > > Yes, you replace /sbin/dhclient-script with the file client/scripts/linux out > of the > isc-dhcp source. [Souradeep] When tried by customer they are getting login problem. They have tested the workaround in Debian 10' VM from marketplace image. When replace file and restart dhclient, the VM will loss connection. The VM can't login, when dhclient -r after replacing the file. > > Bastian > > -- > Bastian Blank > Berater > Telefon: +49 2166 9901-194 > E-Mail: bastian.bl...@credativ.de > credativ GmbH, HRB Mönchengladbach 12080, USt-ID-Nummer: DE204566209 > Trompeterallee 108, 41189 Mönchengladbach > Geschäftsführung: Dr. Michael Meskes, James Mark McGowan Unser Umgang > mit personenbezogenen Daten unterliegt folgenden Bestimmungen: > https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.cr > edativ.de%2Fdatenschutz=05%7C01%7Cschakrabarti%40microsoft.com%7C > 8761426f79eb4f60a71a08dacc5eacf1%7C72f988bf86f141af91ab2d7cd011db47%7C > 1%7C0%7C638047004272788278%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4w > LjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C > %7C=ROkreHDPOexclVkVhe3tIv%2BTNmhwYrD%2B2psecHqm6P0%3D > served=0
Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry.
Ping on this Bastian. Can you please confirm we can get this into the next image refresh. -Original Message- From: Jack Aboutboul Sent: Tuesday, November 22, 2022 2:54 AM To: 'Bastian Blank' ; Souradeep Chakrabarti Cc: 1022969-qu...@bugs.debian.org; 1022...@bugs.debian.org; 1022969-submit...@bugs.debian.org; Anirudh Rayabharam ; Jinank Jain Subject: RE: Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry. Thanks Bastian for the efforts on this. Should this be the default behavior? If so, can we get a package update and image refresh? Thanks, Jack -Original Message- From: Bastian Blank Sent: Tuesday, November 22, 2022 2:52 AM To: Souradeep Chakrabarti Cc: 1022969-qu...@bugs.debian.org; 1022...@bugs.debian.org; 1022969-submit...@bugs.debian.org; Jack Aboutboul ; Anirudh Rayabharam ; Jinank Jain Subject: Re: Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry. [Some people who received this message don't often get email from bastian.bl...@credativ.de. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ] Hi Souradeep On Tue, Nov 22, 2022 at 07:44:11AM +, Souradeep Chakrabarti wrote: > Is there any work around for the time being? Yes, you replace /sbin/dhclient-script with the file client/scripts/linux out of the isc-dhcp source. Bastian -- Bastian Blank Berater Telefon: +49 2166 9901-194 E-Mail: bastian.bl...@credativ.de credativ GmbH, HRB Mönchengladbach 12080, USt-ID-Nummer: DE204566209 Trompeterallee 108, 41189 Mönchengladbach Geschäftsführung: Dr. Michael Meskes, James Mark McGowan Unser Umgang mit personenbezogenen Daten unterliegt folgenden Bestimmungen: https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.credativ.de%2Fdatenschutz=05%7C01%7Cjaboutboul%40microsoft.com%7C51820d3fe8e94b397db408dacc5e79eb%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638047003427902103%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=IMK67PgesfkjoLPVAYqs9Q9S4yAUfrJEB4VYgoVV5O8%3D=0
Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry.
Hi Souradeep On Tue, Nov 22, 2022 at 07:44:11AM +, Souradeep Chakrabarti wrote: > Is there any work around for the time being? Yes, you replace /sbin/dhclient-script with the file client/scripts/linux out of the isc-dhcp source. Bastian -- Bastian Blank Berater Telefon: +49 2166 9901-194 E-Mail: bastian.bl...@credativ.de credativ GmbH, HRB Mönchengladbach 12080, USt-ID-Nummer: DE204566209 Trompeterallee 108, 41189 Mönchengladbach Geschäftsführung: Dr. Michael Meskes, James Mark McGowan Unser Umgang mit personenbezogenen Daten unterliegt folgenden Bestimmungen: https://www.credativ.de/datenschutz
Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry.
Thanks Bastian for the efforts on this. Should this be the default behavior? If so, can we get a package update and image refresh? Thanks, Jack -Original Message- From: Bastian Blank Sent: Tuesday, November 22, 2022 2:52 AM To: Souradeep Chakrabarti Cc: 1022969-qu...@bugs.debian.org; 1022...@bugs.debian.org; 1022969-submit...@bugs.debian.org; Jack Aboutboul ; Anirudh Rayabharam ; Jinank Jain Subject: Re: Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry. [Some people who received this message don't often get email from bastian.bl...@credativ.de. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ] Hi Souradeep On Tue, Nov 22, 2022 at 07:44:11AM +, Souradeep Chakrabarti wrote: > Is there any work around for the time being? Yes, you replace /sbin/dhclient-script with the file client/scripts/linux out of the isc-dhcp source. Bastian -- Bastian Blank Berater Telefon: +49 2166 9901-194 E-Mail: bastian.bl...@credativ.de credativ GmbH, HRB Mönchengladbach 12080, USt-ID-Nummer: DE204566209 Trompeterallee 108, 41189 Mönchengladbach Geschäftsführung: Dr. Michael Meskes, James Mark McGowan Unser Umgang mit personenbezogenen Daten unterliegt folgenden Bestimmungen: https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.credativ.de%2Fdatenschutz=05%7C01%7Cjaboutboul%40microsoft.com%7C51820d3fe8e94b397db408dacc5e79eb%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C638047003427902103%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=IMK67PgesfkjoLPVAYqs9Q9S4yAUfrJEB4VYgoVV5O8%3D=0
Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry.
> -Original Message- > From: Bastian Blank > Sent: Monday, November 21, 2022 9:23 PM > To: Souradeep Chakrabarti > Cc: 1022969-qu...@bugs.debian.org; 1022...@bugs.debian.org; 1022969- > submit...@bugs.debian.org; Jack Aboutboul ; > Anirudh Rayabharam ; Jinank Jain > > Subject: Re: Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 > client > failing to renew the IPv6 address upon T1 expiry. > > [You don't often get email from bastian.bl...@credativ.de. Learn why this is > important at https://aka.ms/LearnAboutSenderIdentification ] > > Hi Souradeep > > Thanks. I found the problem. It's burried in the unrelated copy of the > dhclient- > script. > > It never set's a lifetime for a renewed address. So as soon as one expired > it will > never reset the lifetime. > > The upstream script just replaces the complete address entry. [Souradeep] Is there any work around for the time being? > > Bastian > > -- > Bastian Blank > Berater > Telefon: +49 2166 9901-194 > E-Mail: bastian.bl...@credativ.de > credativ GmbH, HRB Mönchengladbach 12080, USt-ID-Nummer: DE204566209 > Trompeterallee 108, 41189 Mönchengladbach > Geschäftsführung: Dr. Michael Meskes, James Mark McGowan Unser Umgang > mit personenbezogenen Daten unterliegt folgenden Bestimmungen: > https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.cr > edativ.de%2Fdatenschutzdata=05%7C01%7Cschakrabarti%40microsoft.co > m%7Cb4e026b3a44f4dc38f2c08dacbd88807%7C72f988bf86f141af91ab2d7cd011db > 47%7C1%7C0%7C638046428185323465%7CUnknown%7CTWFpbGZsb3d8eyJWIjoi > MC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7 > C%7C%7Csdata=5qrl24QzqX0YHBH%2FnDM1rKVfK6G7rKQaHzTUsteIkFE%3 > Dreserved=0
Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry.
Hi Souradeep Thanks. I found the problem. It's burried in the unrelated copy of the dhclient-script. It never set's a lifetime for a renewed address. So as soon as one expired it will never reset the lifetime. The upstream script just replaces the complete address entry. Bastian -- Bastian Blank Berater Telefon: +49 2166 9901-194 E-Mail: bastian.bl...@credativ.de credativ GmbH, HRB Mönchengladbach 12080, USt-ID-Nummer: DE204566209 Trompeterallee 108, 41189 Mönchengladbach Geschäftsführung: Dr. Michael Meskes, James Mark McGowan Unser Umgang mit personenbezogenen Daten unterliegt folgenden Bestimmungen: https://www.credativ.de/datenschutz
Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry.
> -Original Message- > From: Souradeep Chakrabarti > Sent: Thursday, November 3, 2022 6:35 PM > To: Bastian Blank ; 1022969-qu...@bugs.debian.org; > 1022...@bugs.debian.org; 1022969-submit...@bugs.debian.org > Cc: Jack Aboutboul ; Anirudh Rayabharam > ; Jinank Jain > Subject: Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client > failing to renew the IPv6 address upon T1 expiry. > > Adding Anirudh and Jinank to get those information asked below. > > > > -Original Message- > > From: Bastian Blank > > Sent: Thursday, November 3, 2022 5:27 PM > > To: 1022...@bugs.debian.org; 1022969-submit...@bugs.debian.org > > Cc: Jack Aboutboul > > Subject: Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 > > client failing to renew the IPv6 address upon T1 expiry. > > > > [You don't often get email from bastian.bl...@credativ.de. Learn why > > this is important at https://aka.ms/LearnAboutSenderIdentification ] > > > > Hi Souradeep > > > > On Thu, Nov 03, 2022 at 08:53:38AM +0100, Bastian Blank wrote: > > > > Now if we change the date to 100 days, and do a restart of > > > > networking service, we can see ipv6 global address has got deprecated. > > > > root@ipv6vm4:/var/lib/dhcp# date --set "2024/02/10" > > > > Sat Feb 10 00:00:00 UTC 2024 > > > > root@ipv6vm4:/var/lib/dhcp# ip a show > > > > 2: eth0: mtu 1500 qdisc mq state > > UP group default qlen 1000 > > > > link/ether 60:45:bd:a7:35:11 brd ff:ff:ff:ff:ff:ff > > > > inet6 ace:cab:deca:1234::7/128 scope global deprecated > > > >valid_lft forever preferred_lft 0sec > > > > > > > > By looking at the journal log, I can see following the address is > > > > depreferred. > > > > Please let me know, if you need any other info. > > > > Deprecating an address is correct behaviour, you just advanced the > > time past the address' maximum life time. But in normal circumstances > > this would have been renewed by now or replaced with a different address. > > > > With the network config as shipped in the Azure images up to Debian > > 11, I can't get it to do that. The code do deprecate addresses (by > > running the script with > > DEPREF6) only runs from a timer, and that timeout is scheduled with > > select(2) and not directly affected by the date change. > > > > So new question: How do you configure the network on this instance? > > Please show complete contents of: > > - /etc/network/interfaces > > - /etc/network/interfaces.d > > - /run/network/interfaces.d > > [Souradeep] root@ipv6vm6:/home/ipv6vm6# ip a 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: mtu 1500 qdisc mq state UP group default qlen 1000 link/ether 00:0d:3a:1c:dd:d9 brd ff:ff:ff:ff:ff:ff inet 172.21.0.9/24 brd 172.21.0.255 scope global eth0 valid_lft forever preferred_lft forever inet6 ace:cab:deca:1234::9/128 scope global deprecated valid_lft forever preferred_lft 0sec inet6 fe80::20d:3aff:fe1c:ddd9/64 scope link valid_lft forever preferred_lft forever root@ipv6vm6:/home/ipv6vm6# root@ipv6vm6:/home/ipv6vm6# cat /run/network/interfaces.d/eth0 auto eth0 allow-hotplug eth0 iface eth0 inet dhcp iface eth0 inet6 manual try_dhcp 1 root@ipv6vm6:/home/ipv6vm6# cat /etc/network/interfaces # Include files from /etc/network/interfaces.d: source-directory /etc/network/interfaces.d # Cloud images dynamically generate config fragments for newly # attached interfaces. See /etc/udev/rules.d/75-cloud-ifupdown.rules # and /etc/network/cloud-ifupdown-helper. Dynamically generated # configuration fragments are stored in /run: source-directory /run/network/interfaces.d root@ipv6vm6:/home/ipv6vm6# cat /etc/network/interfaces.d/^C root@ipv6vm6:/home/ipv6vm6# ls -a /etc/network/interfaces.d/ . .. root@ipv6vm6:/home/ipv6vm6# > > There exists also a debug script, which logs all hook calls. For that > > please modify /etc/dhcp/debug and set RUN to yes. After the next try, > > you'll find a file /tmp/dhclient-script.debug, please show the contents. > > [Souradeep] root@ipv6vm6:/home/ipv6vm6# cat /tmp/dhclient-script.debug Tue Jul 11 00:00:53 UTC 2023: entering /etc/dhcp/dhclient-enter-hooks.d, dumping variables. reason='RELEASE' interface='eth0' old_ip_address='172.21.0.9' old_network_number='172.21.0.0' old_subnet_mask='255.255.255.0' old_broadcast_address='172.2
Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry.
Adding Anirudh and Jinank to get those information asked below. > -Original Message- > From: Bastian Blank > Sent: Thursday, November 3, 2022 5:27 PM > To: 1022...@bugs.debian.org; 1022969-submit...@bugs.debian.org > Cc: Jack Aboutboul > Subject: Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client > failing to renew the IPv6 address upon T1 expiry. > > [You don't often get email from bastian.bl...@credativ.de. Learn why this is > important at https://aka.ms/LearnAboutSenderIdentification ] > > Hi Souradeep > > On Thu, Nov 03, 2022 at 08:53:38AM +0100, Bastian Blank wrote: > > > Now if we change the date to 100 days, and do a restart of > > > networking service, we can see ipv6 global address has got deprecated. > > > root@ipv6vm4:/var/lib/dhcp# date --set "2024/02/10" > > > Sat Feb 10 00:00:00 UTC 2024 > > > root@ipv6vm4:/var/lib/dhcp# ip a show > > > 2: eth0: mtu 1500 qdisc mq state > UP group default qlen 1000 > > > link/ether 60:45:bd:a7:35:11 brd ff:ff:ff:ff:ff:ff > > > inet6 ace:cab:deca:1234::7/128 scope global deprecated > > >valid_lft forever preferred_lft 0sec > > > > > > By looking at the journal log, I can see following the address is > > > depreferred. > > > Please let me know, if you need any other info. > > Deprecating an address is correct behaviour, you just advanced the time past > the > address' maximum life time. But in normal circumstances this would have been > renewed by now or replaced with a different address. > > With the network config as shipped in the Azure images up to Debian 11, I > can't > get it to do that. The code do deprecate addresses (by running the script > with > DEPREF6) only runs from a timer, and that timeout is scheduled with select(2) > and > not directly affected by the date change. > > So new question: How do you configure the network on this instance? > Please show complete contents of: > - /etc/network/interfaces > - /etc/network/interfaces.d > - /run/network/interfaces.d > > There exists also a debug script, which logs all hook calls. For that please > modify > /etc/dhcp/debug and set RUN to yes. After the next try, you'll find a file > /tmp/dhclient-script.debug, please show the contents. > > Regards, > Bastian > > -- > Bastian Blank > Berater > Telefon: +49 2166 9901-194 > E-Mail: bastian.bl...@credativ.de > credativ GmbH, HRB Mönchengladbach 12080, USt-ID-Nummer: DE204566209 > Trompeterallee 108, 41189 Mönchengladbach > Geschäftsführung: Dr. Michael Meskes, James Mark McGowan Unser Umgang > mit personenbezogenen Daten unterliegt folgenden Bestimmungen: > https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.cr > edativ.de%2Fdatenschutzdata=05%7C01%7Cschakrabarti%40microsoft.co > m%7Cb25b7200588d45b8095f08dabd92f5c6%7C72f988bf86f141af91ab2d7cd011d > b47%7C1%7C0%7C638030736511592216%7CUnknown%7CTWFpbGZsb3d8eyJWIj > oiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000 > %7C%7C%7Csdata=ckjlqIosNSVpQzw1lzZ625YmtcaNi5PmYqG6Op9St7Y%3 > Dreserved=0
Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry.
Hi Souradeep On Thu, Nov 03, 2022 at 08:53:38AM +0100, Bastian Blank wrote: > > Now if we change the date to 100 days, and do a restart of networking > > service, > > we can see ipv6 global address has got deprecated. > > root@ipv6vm4:/var/lib/dhcp# date --set "2024/02/10" > > Sat Feb 10 00:00:00 UTC 2024 > > root@ipv6vm4:/var/lib/dhcp# ip a show > > 2: eth0: mtu 1500 qdisc mq state UP group > > default qlen 1000 > > link/ether 60:45:bd:a7:35:11 brd ff:ff:ff:ff:ff:ff > > inet6 ace:cab:deca:1234::7/128 scope global deprecated > >valid_lft forever preferred_lft 0sec > > > > By looking at the journal log, I can see following the address is > > depreferred. > > Please let me know, if you need any other info. Deprecating an address is correct behaviour, you just advanced the time past the address' maximum life time. But in normal circumstances this would have been renewed by now or replaced with a different address. With the network config as shipped in the Azure images up to Debian 11, I can't get it to do that. The code do deprecate addresses (by running the script with DEPREF6) only runs from a timer, and that timeout is scheduled with select(2) and not directly affected by the date change. So new question: How do you configure the network on this instance? Please show complete contents of: - /etc/network/interfaces - /etc/network/interfaces.d - /run/network/interfaces.d There exists also a debug script, which logs all hook calls. For that please modify /etc/dhcp/debug and set RUN to yes. After the next try, you'll find a file /tmp/dhclient-script.debug, please show the contents. Regards, Bastian -- Bastian Blank Berater Telefon: +49 2166 9901-194 E-Mail: bastian.bl...@credativ.de credativ GmbH, HRB Mönchengladbach 12080, USt-ID-Nummer: DE204566209 Trompeterallee 108, 41189 Mönchengladbach Geschäftsführung: Dr. Michael Meskes, James Mark McGowan Unser Umgang mit personenbezogenen Daten unterliegt folgenden Bestimmungen: https://www.credativ.de/datenschutz
Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry.
Hi Souradeep Please fix your quoting style. TOFU is not appropriate for technical discussions. Stuff is easily missed this way, as you showed by already ignoring at least one of my four questions. On Thu, Nov 03, 2022 at 05:57:53AM +, Souradeep Chakrabarti wrote: > > - What does the log show? > If we have both ipv4 and ipv6 as global ip address on interface eth0, and > with renewal time > set to MAX (in this case DHCP server sending 0 for both T1 and T2 ). > > RCV: | | | X-- Preferred lifetime 864. > RCV: | | | X-- Max lifetime 1728. Sadly none of my systems shows this messages. So where do they come from? Please show complete logs, unaltered. > > - How to actually test this problem? > Now if we change the date to 100 days, and do a restart of networking service, > we can see ipv6 global address has got deprecated. > > root@ipv6vm4:/var/lib/dhcp# date --set "2024/02/10" > Sat Feb 10 00:00:00 UTC 2024 > root@ipv6vm4:/var/lib/dhcp# systemctl restart networking.service > root@ipv6vm4:/var/lib/dhcp# ip a show > 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group > default qlen 1000 > link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 > inet 127.0.0.1/8 scope host lo >valid_lft forever preferred_lft forever > inet6 ::1/128 scope host >valid_lft forever preferred_lft forever > 2: eth0: mtu 1500 qdisc mq state UP group > default qlen 1000 > link/ether 60:45:bd:a7:35:11 brd ff:ff:ff:ff:ff:ff > inet 172.21.0.7/24 brd 172.21.0.255 scope global eth0 >valid_lft forever preferred_lft forever > inet6 ace:cab:deca:1234::7/128 scope global deprecated >valid_lft forever preferred_lft 0sec > inet6 fe80::6245:bdff:fea7:3511/64 scope link >valid_lft forever preferred_lft forever > > By looking at the journal log, I can see following the address is depreferred. > Please let me know, if you need any other info. I can't reproduce this on my current Azure test environment: | # date | Thu Nov 3 07:41:59 UTC 2022 | # ip -6 addr show eth0 | 2: eth0: mtu 1500 state UP qlen 1000 | inet6 fd36:16f1:35c0:1::5/128 scope global |valid_lft forever preferred_lft forever | inet6 fe80::6245:bdff:fe92:85f2/64 scope link |valid_lft forever preferred_lft forever | # date --set "2024/02/10" | Sat Feb 10 00:00:00 UTC 2024 | # systemctl restart networking | # ip -6 addr show eth0 | 2: eth0: mtu 1500 state UP qlen 1000 | inet6 fd36:16f1:35c0:1::5/128 scope global tentative |valid_lft forever preferred_lft forever | inet6 fe80::6245:bdff:fe92:85f2/64 scope link |valid_lft forever preferred_lft forever > > - What is the environment you are running in? > OS version Debian 10 available in Azure market place. Test was done using a > Azure VM. Okay. I'm using the latest available image version 0.20221102.1187 and also the earlier 0.20220911.1135. > > - Is the current stable Debian affected? You missed that one. Regards, Bastian -- Bastian Blank Berater Telefon: +49 2166 9901-194 E-Mail: bastian.bl...@credativ.de credativ GmbH, HRB Mönchengladbach 12080, USt-ID-Nummer: DE204566209 Trompeterallee 108, 41189 Mönchengladbach Geschäftsführung: Dr. Michael Meskes, James Mark McGowan Unser Umgang mit personenbezogenen Daten unterliegt folgenden Bestimmungen: https://www.credativ.de/datenschutz
Bug#1022969: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to renew the IPv6 address upon T1 expiry.
If we have both ipv4 and ipv6 as global ip address on interface eth0, and with renewal time set to MAX (in this case DHCP server sending 0 for both T1 and T2 ). RCV: | | | X-- Preferred lifetime 864. RCV: | | | X-- Max lifetime 1728. Now if we change the date to 100 days, and do a restart of networking service, we can see ipv6 global address has got deprecated. root@ipv6vm4:/var/lib/dhcp# date --set "2024/02/10" Sat Feb 10 00:00:00 UTC 2024 root@ipv6vm4:/var/lib/dhcp# systemctl restart networking.service root@ipv6vm4:/var/lib/dhcp# ip a show 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: mtu 1500 qdisc mq state UP group default qlen 1000 link/ether 60:45:bd:a7:35:11 brd ff:ff:ff:ff:ff:ff inet 172.21.0.7/24 brd 172.21.0.255 scope global eth0 valid_lft forever preferred_lft forever inet6 ace:cab:deca:1234::7/128 scope global deprecated valid_lft forever preferred_lft 0sec inet6 fe80::6245:bdff:fea7:3511/64 scope link valid_lft forever preferred_lft forever By looking at the journal log, I can see following the address is depreferred. Please let me know, if you need any other info. OS version Debian 10 available in Azure market place. Test was done using a Azure VM. > -Original Message- > From: Bastian Blank > Sent: Wednesday, November 2, 2022 6:28 PM > To: 1022...@bugs.debian.org; 1022969-submit...@bugs.debian.org > Subject: [EXTERNAL] Bug#1022969: isc-dhcp-client: dhcp6 client failing to > renew > the IPv6 address upon T1 expiry. > > [You don't often get email from bastian.bl...@credativ.de. Learn why this is > important at https://aka.ms/LearnAboutSenderIdentification ] > > Control: tags -1 moreinfo > > Hi souradeep > > Please provide us with a bit more information: > - What is the environment you are running in? > - How to actually test this problem? > - What does the log show? > - Is the current stable Debian affected? > > Regards, > Bastian > > -- > Bastian Blank > Berater > Telefon: +49 2166 9901-194 > E-Mail: bastian.bl...@credativ.de > credativ GmbH, HRB Mönchengladbach 12080, USt-ID-Nummer: DE204566209 > Trompeterallee 108, 41189 Mönchengladbach > Geschäftsführung: Dr. Michael Meskes, James Mark McGowan Unser Umgang > mit personenbezogenen Daten unterliegt folgenden Bestimmungen: > https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.cr > edativ.de%2Fdatenschutzdata=05%7C01%7Cschakrabarti%40microsoft.co > m%7C209f346263d340ac512f08dabcd36df4%7C72f988bf86f141af91ab2d7cd011db > 47%7C1%7C0%7C638029913889928518%7CUnknown%7CTWFpbGZsb3d8eyJWIjoi > MC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7 > C%7C%7Csdata=KzO%2BwEMSQZYt12IhZYVTJLDm8BhSLBV8RFzDd6bQVrw > %3Dreserved=0
