----- Original Message ----- > From: "Josef Bacik" <jo...@toxicpanda.com> > To: "Development discussions related to Fedora" > <devel@lists.fedoraproject.org> > Cc: "Pavel Simerda" <psime...@redhat.com>, "Paul Wouters" > <pwout...@redhat.com>, "Tore Anderson" <t...@fud.no> > Sent: Tuesday, November 3, 2015 6:56:42 PM > Subject: Re: Fedora IPv6 testing and improvements - request for ideas > > So one thing I would suggest is testing ipv6 only environments. At > Facebook we are running into and fixing a whole host of problems with > NetworkManager, Anaconda, Dracut, etc. because they don't handle ipv6 > only very well. It seems that having ipv4 enabled allows things to > work well enough that nobody notices problems with ipv6. Thanks,
Hi Josef, there is indeed a lot of assumptions in software regarding availability of IPv4. Is there a possibility you or anyone could provide a list of issues and reproducers related to IPv6-only installation and operation? In that case we could add them to the wiki. Cheers, Pavel > > Josef > > On Tue, Nov 3, 2015 at 12:50 PM, Moez Roy <moez....@gmail.com> wrote: > > Hi Pavel Simerda, > > > > The IPv6 updates are breaking stuff (and probably increasing the > > attack surface): > > > > Bug 1231946 - unbound-anchor ignores net.ipv6.conf.all.disable_ipv6=1 > > in /etc/sysctl.conf > > https://bugzilla.redhat.com/show_bug.cgi?id=1231946 > > > > Bug 1251762 - dnssec-triggerd ignores net.ipv6.conf.all.disable_ipv6=1 > > in /etc/sysctl.conf > > https://bugzilla.redhat.com/show_bug.cgi?id=1251762 > > > > (maybe other software like avahi also don't remember right now) > > > > You can reproduce this by putting "ipv6.disable=1" in the kernel command > > line. > > > > Doing 'setsebool -P domain_kernel_load_modules 1' would reduce the > > security provided by SELinux so it is not an option. > > > > Would appreciate fixes please. Thanks. > > -- > > devel mailing list > > devel@lists.fedoraproject.org > > https://admin.fedoraproject.org/mailman/listinfo/devel > > Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct > -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
