[meta-virtualization][PATCH] lxc: don't allow named listening IPv6 address on lxcbrX network interface

[meta-virtualization][PATCH] lxc: don't allow named listening IPv6 address on lxcbrX network interface

[Xiangyu Chen]

From: Xiangyu Chen <xiangyu.chen@windriver.com>

lxc-net enabled the IPv6 by default since v6.0.0[1], when named enabled on
system, the lxc-net which based on dnsmasq would fail to bind the IPv6
address on lxcbrX interface, that cause lxc cannot work correctly.

Add the lxc-net default v6 address to named.conf.option to tell named don't
bind and listen that address.

[1] https://github.com/lxc/lxc/commit/e8888344

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
---
 recipes-core/bind/bind_virtualization.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/recipes-core/bind/bind_virtualization.inc b/recipes-core/bind/bind_virtualization.inc
index a6e39049..f942d7ad 100644
--- a/recipes-core/bind/bind_virtualization.inc
+++ b/recipes-core/bind/bind_virtualization.inc
@@ -1,4 +1,4 @@
 # Tell named not to bother listening on the IP address that lxc and libvirtd handles itself.
 do_install:append() {
-	sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would take care of this address itself\n\tlisten-on { ! 10.0.3.1; ! 192.168.122.1; any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
+	sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would take care of this address itself\n\tlisten-on { ! 10.0.3.1; ! 192.168.122.1; any;};\n\tlisten-on-v6 { ! fc11:4514:1919:810::1; any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
 }
-- 
2.35.5

Re: [meta-virtualization][PATCH] lxc: don't allow named listening IPv6 address on lxcbrX network interface

[Bruce Ashfield]

[-- Attachment #1: Type: text/plain, Size: 2411 bytes --]

Thanks for the patch.

I injured my hand (so I couldn't type) and then had to do some release
preparation, but will get to merging his shortly.

Bruce

On Mon, Oct 28, 2024 at 3:36 AM Xiangyu Chen via lists.yoctoproject.org
<xiangyu.chen=eng.windriver.com@lists.yoctoproject.org> wrote:

> From: Xiangyu Chen <xiangyu.chen@windriver.com>
>
> lxc-net enabled the IPv6 by default since v6.0.0[1], when named enabled on
> system, the lxc-net which based on dnsmasq would fail to bind the IPv6
> address on lxcbrX interface, that cause lxc cannot work correctly.
>
> Add the lxc-net default v6 address to named.conf.option to tell named don't
> bind and listen that address.
>
> [1] https://github.com/lxc/lxc/commit/e8888344
>
> Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
> ---
>  recipes-core/bind/bind_virtualization.inc | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/recipes-core/bind/bind_virtualization.inc
> b/recipes-core/bind/bind_virtualization.inc
> index a6e39049..f942d7ad 100644
> --- a/recipes-core/bind/bind_virtualization.inc
> +++ b/recipes-core/bind/bind_virtualization.inc
> @@ -1,4 +1,4 @@
>  # Tell named not to bother listening on the IP address that lxc and
> libvirtd handles itself.
>  do_install:append() {
> -       sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would
> take care of this address itself\n\tlisten-on { ! 10.0.3.1; !
> 192.168.122.1; any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
> +       sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would
> take care of this address itself\n\tlisten-on { ! 10.0.3.1; !
> 192.168.122.1; any;};\n\tlisten-on-v6 { ! fc11:4514:1919:810::1; any;};\n,'
> ${D}${sysconfdir}/bind/named.conf.options
>  }
> --
> 2.35.5
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#8938):
> https://lists.yoctoproject.org/g/meta-virtualization/message/8938
> Mute This Topic: https://lists.yoctoproject.org/mt/109253028/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [
> bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>

-- 
- Thou shalt not follow the NULL pointer, for chaos and madness await thee
at its end
- "Use the force Harry" - Gandalf, Star Trek II

[-- Attachment #2: Type: text/html, Size: 4185 bytes --]

Re: [meta-virtualization][PATCH] lxc: don't allow named listening IPv6 address on lxcbrX network interface

[Bruce Ashfield]

merged to master (which will become styhead shortly)

Bruce

In message: [meta-virtualization][PATCH] lxc: don't allow named listening IPv6 address on lxcbrX network interface
on 28/10/2024 Xiangyu Chen via lists.yoctoproject.org wrote:

> From: Xiangyu Chen <xiangyu.chen@windriver.com>
> 
> lxc-net enabled the IPv6 by default since v6.0.0[1], when named enabled on
> system, the lxc-net which based on dnsmasq would fail to bind the IPv6
> address on lxcbrX interface, that cause lxc cannot work correctly.
> 
> Add the lxc-net default v6 address to named.conf.option to tell named don't
> bind and listen that address.
> 
> [1] https://github.com/lxc/lxc/commit/e8888344
> 
> Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
> ---
>  recipes-core/bind/bind_virtualization.inc | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/recipes-core/bind/bind_virtualization.inc b/recipes-core/bind/bind_virtualization.inc
> index a6e39049..f942d7ad 100644
> --- a/recipes-core/bind/bind_virtualization.inc
> +++ b/recipes-core/bind/bind_virtualization.inc
> @@ -1,4 +1,4 @@
>  # Tell named not to bother listening on the IP address that lxc and libvirtd handles itself.
>  do_install:append() {
> -	sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would take care of this address itself\n\tlisten-on { ! 10.0.3.1; ! 192.168.122.1; any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
> +	sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would take care of this address itself\n\tlisten-on { ! 10.0.3.1; ! 192.168.122.1; any;};\n\tlisten-on-v6 { ! fc11:4514:1919:810::1; any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
>  }
> -- 
> 2.35.5
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#8938): https://lists.yoctoproject.org/g/meta-virtualization/message/8938
> Mute This Topic: https://lists.yoctoproject.org/mt/109253028/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
> 

[meta-virtualization][PATCH] lxc: don't allow named listening IPv6 address on lxcbrX network interface

[Xiangyu Chen]

From: Xiangyu Chen <xiangyu.chen@windriver.com>

lxc-net enabled the IPv6 by default since v6.0.0[1], when named enabled on
system, the lxc-net which based on dnsmasq would fail to bind the IPv6
address on lxcbrX interface, that cause lxc cannot work correctly.

LXC upstream changed the default v6 address again[2], we need to line up with
upstream. Updated the lxc-net default v6 address to named.conf.option to tell
named don't bind and listen that address.

Ref:

[1] https://github.com/lxc/lxc/commit/e8888344
[2] https://github.com/lxc/lxc/commit/31012d49

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
---
 recipes-core/bind/bind_virtualization.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/recipes-core/bind/bind_virtualization.inc b/recipes-core/bind/bind_virtualization.inc
index f942d7ad..bb4e22b2 100644
--- a/recipes-core/bind/bind_virtualization.inc
+++ b/recipes-core/bind/bind_virtualization.inc
@@ -1,4 +1,4 @@
 # Tell named not to bother listening on the IP address that lxc and libvirtd handles itself.
 do_install:append() {
-	sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would take care of this address itself\n\tlisten-on { ! 10.0.3.1; ! 192.168.122.1; any;};\n\tlisten-on-v6 { ! fc11:4514:1919:810::1; any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
+	sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would take care of this address itself\n\tlisten-on { ! 10.0.3.1; ! 192.168.122.1; any;};\n\tlisten-on-v6 { ! fc42:5009:ba4b:5ab0::1; any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
 }
-- 
2.34.1

Re: [meta-virtualization][PATCH] lxc: don't allow named listening IPv6 address on lxcbrX network interface

[Bruce Ashfield]

merged.

Bruce

In message: [meta-virtualization][PATCH] lxc: don't allow named listening IPv6 address on lxcbrX network interface
on 06/06/2025 Xiangyu Chen via lists.yoctoproject.org wrote:

> From: Xiangyu Chen <xiangyu.chen@windriver.com>
> 
> lxc-net enabled the IPv6 by default since v6.0.0[1], when named enabled on
> system, the lxc-net which based on dnsmasq would fail to bind the IPv6
> address on lxcbrX interface, that cause lxc cannot work correctly.
> 
> LXC upstream changed the default v6 address again[2], we need to line up with
> upstream. Updated the lxc-net default v6 address to named.conf.option to tell
> named don't bind and listen that address.
> 
> Ref:
> 
> [1] https://github.com/lxc/lxc/commit/e8888344
> [2] https://github.com/lxc/lxc/commit/31012d49
> 
> Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
> ---
>  recipes-core/bind/bind_virtualization.inc | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/recipes-core/bind/bind_virtualization.inc b/recipes-core/bind/bind_virtualization.inc
> index f942d7ad..bb4e22b2 100644
> --- a/recipes-core/bind/bind_virtualization.inc
> +++ b/recipes-core/bind/bind_virtualization.inc
> @@ -1,4 +1,4 @@
>  # Tell named not to bother listening on the IP address that lxc and libvirtd handles itself.
>  do_install:append() {
> -	sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would take care of this address itself\n\tlisten-on { ! 10.0.3.1; ! 192.168.122.1; any;};\n\tlisten-on-v6 { ! fc11:4514:1919:810::1; any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
> +	sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would take care of this address itself\n\tlisten-on { ! 10.0.3.1; ! 192.168.122.1; any;};\n\tlisten-on-v6 { ! fc42:5009:ba4b:5ab0::1; any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
>  }
> -- 
> 2.34.1
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#9273): https://lists.yoctoproject.org/g/meta-virtualization/message/9273
> Mute This Topic: https://lists.yoctoproject.org/mt/113498088/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>