Your message dated Thu, 06 May 2021 22:49:04 +0000 with message-id <[email protected]> and subject line Bug#934676: fixed in systemd 248-1 has caused the Debian Bug report #934676, regarding Support IPv6 in systemd-nspawn to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 934676: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=934676 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: systemd-container Version: 241-5 Severity: wishlist systemd-nspawn --port=tcp:2022:22 redirects port 2022/tcp (on the host) to port 22/tcp (on the guest). (This is equivalent to "-net user,hostfwd=::2022-:22" in qemu VMs.) AFAICT systemd-nspawn only does this for IPv4 (not IPv6). This was not obvious to me from the manpage. Please either fix --port to support IPv6, or clearly document that --port is IPv4-only. I suggest something like the below. PS: I also fixed the confusing phrase "IP port". Per the nft(8) manpage, IPv4 and IPv6 do not have ports. TCP, UDP, UDP-Lite, and SCTP have ports. PPS: Based on "iptables -m sctp --help", it should be trivial to add SCTP support to --port=. (I don't personally care about that.) diff --git a/man/systemd-nspawn.xml b/man/systemd-nspawn.xml index 8c1a1e6871..1a5ec798ed 100644 --- a/man/systemd-nspawn.xml +++ b/man/systemd-nspawn.xml @@ -916,8 +916,8 @@ <term><option>-p</option></term> <term><option>--port=</option></term> - <listitem><para>If private networking is enabled, maps an IP - port on the host onto an IP port on the container. Takes a + <listitem><para>If private networking is enabled, maps a TCP (or UDP) + port on the host onto a TCP (or UDP) port on the container. Takes a protocol specifier (either <literal>tcp</literal> or <literal>udp</literal>), separated by a colon from a host port number in the range 1 to 65535, separated by a colon from a @@ -928,7 +928,9 @@ same port as the host port is implied. This option is only supported if private networking is used, such as with <option>--network-veth</option>, <option>--network-zone=</option> - <option>--network-bridge=</option>.</para></listitem> + <option>--network-bridge=</option>.</para> + + <para>As at systemd v242, this option always affects IPv4, and never affects IPv6.</para></listitem> </varlistentry> </variablelist>
--- End Message ---
--- Begin Message ---Source: systemd Source-Version: 248-1 Done: Michael Biebl <[email protected]> We believe that the bug you reported is fixed in the latest version of systemd, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Michael Biebl <[email protected]> (supplier of updated systemd package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 06 May 2021 23:00:08 +0200 Source: systemd Architecture: source Version: 248-1 Distribution: experimental Urgency: medium Maintainer: Debian systemd Maintainers <[email protected]> Changed-By: Michael Biebl <[email protected]> Closes: 898530 934584 934676 988132 Changes: systemd (248-1) experimental; urgency=medium . [ Balint Reczey ] * New upstream version 248 - add support for answering DNSSEC questions on the stub resolver (Closes: #988132) - turn off DNSSEC validation when timesyncd resolves hostnames (Closes: #898530) - add networkd/nspawn nftables backend (Closes: #934584) - support ipv6 for masquerade and dnat in nspawn and networkd (Closes: #934676) * Refresh patches * debian/rules: Enable new systemd-sysext tool * debian/rules: Build support for flushing of the nscd caches * debian/rules: Build translations for debs but not for udebs * debian/rules: Build without TPM2 support. This is a new feature and needs further review. * Ship systemd-cryptenroll in systemd package * Update symbols file for libsystemd0 * debian/tests/control: Upstream test depends on attr * debian/udev.postinst: Create the sgx system group. Intel SGX enclave device nodes are now owned by this group. * debian/rules: Don't ship README files in (/usr)/lib/*.d. README files are typically shipped in /usr/share/doc. * Revert "pager: stop disabling urlification under a pager" Debian and Ubuntu do not yet have a less version that supports urlification. This requires less 563 or later. Checksums-Sha1: de83696851e2440afc9eba8270a48b798a8ea6b0 5162 systemd_248-1.dsc 76d0d2ff43db75ed408972f9e9290507863b46fa 10306883 systemd_248.orig.tar.gz b18ca95fef75e4a92a3226289cb6234a78018084 158764 systemd_248-1.debian.tar.xz 5f3563788808a79522d7bbc3be1cafa7de4dba70 9319 systemd_248-1_source.buildinfo Checksums-Sha256: ccf352c65698bc59e1c6559a941b4c51ba0bad952ac37601d872ef9989f847fa 5162 systemd_248-1.dsc 4bd75d16e2dcb4d3396f81b2a2ad04e0afaef7183f433aeea664a717e2e20ca1 10306883 systemd_248.orig.tar.gz 4cfb646db8ae06dcb6c1f5640fb8e7fa86bbfb52d4b4a05d5998a047a908b8e9 158764 systemd_248-1.debian.tar.xz a4c75a10e717f0cd1ad6583d08e2e243bdec712f164a8d33bc542e730e6cf188 9319 systemd_248-1_source.buildinfo Files: 9b1026071da181a9ed69a2e916454eac 5162 admin optional systemd_248-1.dsc 00131adf0e98c1fd8a7fde4eb47f10c8 10306883 admin optional systemd_248.orig.tar.gz ed671184d4ee76750758d23b19608302 158764 admin optional systemd_248-1.debian.tar.xz be1bf48efa21f92b79dc63d98db7460d 9319 admin optional systemd_248-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEECbOsLssWnJBDRcxUauHfDWCPItwFAmCUbsYACgkQauHfDWCP ItwsUg/8C8Lf+AdbJHRz63z9qCJ73xg3jTOOXPEMjsgJxrJUA3laWrBWdoz9T4ey l9OwoMSGyYJa5albQbirprZveey/XqUXMbYlcpUu648WOeScU/2NGVLrqByp8bgr X1TXYKAd7DrQ6fpuH9Go3NRG0v+NE1w+ZvAPjCTlx32vpUbVNfDwob5b0PDCvIUT k0j1k3FAxkEU38shMzNXYUGyvTkeFVMN+wNL6K0A4IdNjAuHRyCWneEFNecKmZ0U tlLBRNKC/8kmgoVywptsp4oH1BEJ7ErxaZ3rTDV1tRPLUtsVWb+pAJqA1b2471L2 Kt8g50PfYARSrkIC2WzZ9+SopxD498Hs8+vvEHTM1vbbR0D3xCSOsHqvhwXQwbZS 2bUsj1BiiTlQhyK8ICHCnKXYuNhVqX9nUc2Fc4LqGNG4GAeQFBE+ufWUtubLS2m/ DjjAO8m317qVIJZMymmyScY7kfFYaKBQT0FVRNbDniBS1F/Bs328I8HwK+M4lrKa BHwQcnMWU/f6nOeWzxxhNyyqzET1EvEI7zxN+DDhCBqdlC0Ob7RKtTBQB7YWVdB1 OR95BkTWBubq9Hc3M9pznYSlMxdg4bVs01+qM/2dV02zqZSHku70w5NmWDZEOL9T 3a+MsVN74y2Ou8HEUFmr8RHbGFtfjaFOjEsO0KkNfX/r4rh+PCA= =WJ9A -----END PGP SIGNATURE-----
--- End Message ---
