diskimage-builder/elements/ubuntu-common/install.d/80-disable-rfc3041

40 lines
1.4 KiB
Text
Raw Normal View History

#!/bin/bash
# Copyright 2016, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
# implied.
#
# See the License for the specific language governing permissions and
# limitations under the License.
# dib-lint: disable=set setu setpipefail indent
if [ ${DIB_DEBUG_TRACE:-0} -gt 0 ]; then
set -x
fi
set -e
# This will disable the privacy extensions for IPv6 (RFC4941)
# (RFC4941 obsoletes RFC3041)
#
# Note that depending on the implementation of how the sysctl
# settings are applied there is a race condition: there might be
# a small time-frame where the original Ubuntu settings from
# /etc/sysctl.d/10-ipv6-privacy.conf are already applied but the
# new settings from /etc/sysctl.d/99-cloudimg-ipv6.conf
# not yet.
# If during this time all started network interfaces will
# use the privacy extension.
cat > /etc/sysctl.d/99-cloudimg-ipv6.conf <<EOF
# See https://bugs.launchpad.net/ubuntu/+source/procps/+bug/1068756
net.ipv6.conf.all.use_tempaddr=0
net.ipv6.conf.default.use_tempaddr=0
EOF