diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-08-07 20:59:54 +0000 |
|---|---|---|
| committer | Christian Breunig <christian@breunig.cc> | 2026-08-07 23:17:28 +0200 |
| commit | dabeff277774190d047155be6566da184b2b3e8f (patch) | |
| tree | f881d9e45f8d128bc329afcedb73a80ab2ae64c8 /interface-definitions/include/interface/authentication.xml.i | |
| parent | 278fba204200f02bb461f786f889b40dc38a26f6 (diff) | |
| download | vyos-1x-dabeff277774190d047155be6566da184b2b3e8f.tar.gz vyos-1x-dabeff277774190d047155be6566da184b2b3e8f.zip | |
container: T7736: disable IPv6 DAD for netavark bridges to fix aardvark-dns race
netavark assigns the IPv6 gateway address to a container "pod-*" bridge
and immediately invokes aardvark-dns to bind its DNS listener to it. While
the address is "tentative" during Duplicate Address Detection, that bind()
fails with EADDRNOTAVAIL and container startup fails for any IPv6-enabled
network.
The kernel only skips DAD for an address if both "all" and the specific
interface's own accept_dad are disabled at the moment the interface is
created. A per-interface override is always either too late for a network's
first-ever container - as the network can only be created in-time and not
explicitly before starting the first container.
Diffstat (limited to 'interface-definitions/include/interface/authentication.xml.i')
0 files changed, 0 insertions, 0 deletions