Bug #1717404 “IPv6 support regresses with nplan transition” : Bugs : nplan package : Ubuntu

Stéphane Graber (stgraber) on 2017-09-15

Changed in nplan (Ubuntu):
importance:	Critical → High

Stéphane Graber (stgraber) wrote on 2017-09-15:

#1

The nplan.yaml which is included in our containers is:

root@artful:~# cat /etc/netplan/10-lxc.yaml
network:
  ethernets:
    eth0: {dhcp4: true}
  version: 2

/etc/network/interfaces used to be:
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet dhcp

Right now this seems to only affect the LXC images, not the one generated by CPC as that one is still using ifupdown with a /etc/network/interfaces similar to that above and without a netplan .yaml.

Stéphane Graber (stgraber) wrote on 2017-09-15:

#2

Just looked at what netplan generates in networkd:

[Match]
Name=eth0

[Network]
DHCP=ipv4
IPv6AcceptRA=no

[DHCP]
RouteMetric=100

So that shows it's explicitly disabling IPv6 RA handling on the interface, causing the regression.

Michael Hudson-Doyle (mwhudson) wrote on 2017-09-15:

#3

This is caused by the fix for https://bugs.launchpad.net/maas/+bug/1655440. I guess netplan needs some way of spelling all of "do dhcp6", "use kernel default for RA", "do not configure ipv6 at all". My inclination is that we should add syntax for the last one, which would break 1655440 again but well. People are hard :)

Stéphane Graber (stgraber) wrote on 2017-09-15:

#4

What we're expecting for LXC at least is:
- IPv4 -> DHCP (and block until you get something)
- IPv6 -> passive kernel SLAAC (don't block on lack of IPv6)

Is that something the current yaml can do?

Mathieu Trudel-Lapierre (cyphermox) wrote on 2017-09-15:

#5

With the current YAML, despite the disabled processing of RAs, you could add a dummy IPv6 address and thus let RAs be processed; but I'm going to revert that and instead provide a way to toggle RA processing.

Changed in nplan (Ubuntu):
importance:	High → Critical
status:	New → In Progress
assignee:	nobody → Mathieu Trudel-Lapierre (cyphermox)

Launchpad Janitor (janitor) wrote on 2017-09-20:

#6

This bug was fixed in the package nplan - 0.29

---------------
nplan (0.29) artful; urgency=medium

  * Fix autopkgtests in a world where /run/NetworkManager/conf.d already
    exists. nplan is enabled by default, so it might well have the directory
    already created on the filesystem.

-- Mathieu Trudel-Lapierre <email address hidden> Tue, 19 Sep 2017 15:24:17 -0400

Changed in nplan (Ubuntu):
status:	In Progress → Fix Released

Mathieu Trudel-Lapierre (cyphermox) on 2017-09-26

description:	updated
description:	updated

Brian Murray (brian-murray) wrote on 2017-10-06: Please test proposed package

#7

Hello Stéphane, or anyone else affected,

Accepted nplan into zesty-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/nplan/0.29~17.04.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed.Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-zesty to verification-done-zesty. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-zesty. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

Changed in nplan (Ubuntu Zesty):
status:	New → Fix Committed
tags:	added: verification-needed verification-needed-zesty

Brian Murray (brian-murray) wrote on 2017-10-06:

#8

Hello Stéphane, or anyone else affected,

Accepted nplan into xenial-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/nplan/0.29~16.04.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed.Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-xenial to verification-done-xenial. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-xenial. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

Changed in nplan (Ubuntu Xenial):
status:	New → Fix Committed
tags:	added: verification-needed-xenial

Mathieu Trudel-Lapierre (cyphermox) wrote on 2017-10-24:

#9

Verification-done for xenial with nplan 0.29~16.04.1:

The bug this is fixing is a regression in 0.26~16.04.1, which is a version that only landed in -proposed. 0.23~16.04.1 (the previous released nplan) does not show this bug, and 0.29~16.04.1 does not show IPv6 issues.

I set up a container with the new nplan version, verified that once netplan is configured the container can successfully get both an IPv4 and IPv6 address; which is displayed in 'lxc ls' on the host.

tags:

added: verification-done-xenial
removed: verification-needed-xenial

Mathieu Trudel-Lapierre (cyphermox) wrote on 2017-11-08:

#10

Verification-done for zesty with nplan 0.29~17.04.1:

As for xenial, this is a fix for a regression introduced in a package that never actually made it to zesty. The regression does not appear in netplan 0.29~17.04.1 at all, I verified that the container with nplan upgraded properly gets both IPv4 and IPv6 addresses; and those are displayed in 'lxc ls'.

tags:

added: verification-done-zesty
removed: verification-needed verification-needed-zesty

Scott Moser (smoser) wrote on 2017-11-13:

#11

I am confused by Stephane's orginal opening statement that

| Prior to the switch to nplan, systems (in my case containers) would
| DHCP for IPv4 and let the kernel do IPv6 auto-configuration whenever a
| router advertisement comes in.

I opened bug 1732002 with information to the contrary.
On my system, 16.04 images do *not* get ipv6 addresses, but current
artful and bionic images do.

I'm raising this because it seems that it was used for justification
of a change to a stable release.

$ lxc network show lxdbr0
config:
  ipv4.address: 10.75.205.1/24
  ipv4.nat: "true"
  ipv6.address: fd42:eee5:7c43:3d62::1/64
  ipv6.dhcp.stateful: "true"

$ lxc list "(artful|xenial)-demo"
+-------------+---------+----------------------+------------------------------------------------+------------+-----------+
| NAME | STATE | IPV4 | IPV6 | TYPE | SNAPSHOTS |
+-------------+---------+----------------------+------------------------------------------------+------------+-----------+
| artful-demo | RUNNING | 10.75.205.208 (eth0) | fd42:eee5:7c43:3d62:3a42:611c:3f6f:1184 (eth0) | PERSISTENT | 0 |
+-------------+---------+----------------------+------------------------------------------------+------------+-----------+
| xenial-demo | RUNNING | 10.75.205.143 (eth0) | | PERSISTENT | 0 |
+-------------+---------+----------------------+------------------------------------------------+------------+-----------+

Stéphane Graber (stgraber) wrote on 2017-11-13:

#12

That's because you're using stateful DHCP which the kernel doesn't do.

My comment was about a stock setup which comes with stateless DHCP, in which case all Linux distros do get a configured IPv6 address regardless of what their userspace does, so long (and that was the problem with nplan) as the interface hasn't been directly configured not to do auto config.

Łukasz Zemczak (sil2100) wrote on 2017-11-23:

#13

Hello Stéphane, or anyone else affected,

Accepted nplan into zesty-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/nplan/0.32~17.04.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed.Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-zesty to verification-done-zesty. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-zesty. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

tags:

added: verification-needed verification-needed-zesty
removed: verification-done-zesty

Łukasz Zemczak (sil2100) wrote on 2017-11-23:

#14

Hello Stéphane, or anyone else affected,

Accepted nplan into xenial-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/nplan/0.32~16.04.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed.Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-xenial to verification-done-xenial. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-xenial. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

tags:

added: verification-needed-xenial
removed: verification-done-xenial

Mathieu Trudel-Lapierre (cyphermox) wrote on 2017-11-28:

#15

nplan 0.32~16.04.2 fails to build because I mismerged 0.32 and broke the code skipping the test_routes_v6 test in the NetworkManager case. Therefore, it can't possibly pass SRU verification.

tags:

added: verification-failed-xenial
removed: verification-needed-xenial

Brian Murray (brian-murray) wrote on 2017-11-29:

#16

Hello Stéphane, or anyone else affected,

Accepted nplan into xenial-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/nplan/0.32~16.04.2 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed.Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-xenial to verification-done-xenial. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-xenial. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

tags:

added: verification-needed-xenial
removed: verification-failed-xenial

Mathieu Trudel-Lapierre (cyphermox) wrote on 2017-12-04:

#17

Autopktests still failing for xenial; the test is still not being skipped (we know it won't work on Xenial due to the version of NM shipped there). Marking verification-failed-xenial.

tags:

added: verification-failed-xenial
removed: verification-needed-xenial

Łukasz Zemczak (sil2100) wrote on 2017-12-05:

#18

Hello Stéphane, or anyone else affected,

Accepted nplan into xenial-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/nplan/0.32~16.04.3 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed.Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-xenial to verification-done-xenial. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-xenial. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

tags:

added: verification-needed-xenial
removed: verification-failed-xenial

Mathieu Trudel-Lapierre (cyphermox) wrote on 2017-12-14:

#19

verification-done for xenial 0.32~16.04.3, and zesty 0.32~17.04.1:

IPv6 addresses are handled correctly through the lxd bridge; AcceptRA is not longer set by default but the option is available to users.

tags:

added: verification-done-xenial verification-done-zesty
removed: verification-needed verification-needed-xenial verification-needed-zesty

Launchpad Janitor (janitor) wrote on 2018-01-10:

#20

Download full text (5.3 KiB)

This bug was fixed in the package nplan - 0.32~16.04.3

---------------
nplan (0.32~16.04.3) xenial; urgency=medium

* tests/integration.py: Really fix skipping test_routes_v6 for the NM
backend.

nplan (0.32~16.04.2) xenial; urgency=medium

* tests/integration.py: Fix test_routes_v6 that I clobbered when I re-applied
the skip rules for 16.04 after merging in 0.32.

nplan (0.32~16.04.1) xenial; urgency=medium

  * Backport netplan 0.32 to 16.04. (LP: #1713142)
  * debian/control: Depend on systemd (>= 229-4ubuntu20) for the PrimarySlave
    feature backported in that revision.
  * tests/integration.py: Skip tests that are still not yet supported in xenial

nplan (0.32) bionic; urgency=medium

  * src/nm.c: better handle the UUID generation; the order of iterating
    through interaces may affect things here. Also make sure the tests catch
    a null UUID.

nplan (0.31) bionic; urgency=medium

  [ Mathieu Trudel-Lapierre ]
  * src/nm.c: generate a UUID for a connection only as needed; when we're
    dealing with NM VLANs. (LP: #1712921)
  * debian/tests/autostart: Make the autostart test more verbose and avoid
    failing right from the start when systemd-networkd is disabled.
    (LP: #1699371)
  * tests/integration.py: bump the NetworkManager timeout for settling to
    120 seconds, autopkgtest infrastructure tends to be a little slow for the
    network device configuration to be applied and noticed by NM.
    (LP: #1699371)

  [ Dimitri John Ledkov ]
  * Reload udevd to invalidate configuration cache of .rules/.link files
    as generate step may have changed them. LP: #1669564

  [ Dan Streetman ]
  * Add another interface driver exception to netplan replug to prevent unbind
    of the Xen VIF interfaces. (LP: #1729573)

nplan (0.30) artful; urgency=medium

  * Add an "optional" syntax node for now to all devices. This is unimplemented
    for now, but intended to allow users to mark some devices as optional: to
    make sure they do not delay boot when configured. (LP: #1664844)

nplan (0.29) artful; urgency=medium

  * Fix autopkgtests in a world where /run/NetworkManager/conf.d already
    exists. nplan is enabled by default, so it might well have the directory
    already created on the filesystem.

nplan (0.28) artful; urgency=medium

  * Revert 56cd3eec which disabled IPv6 Router Advertisements by default. It
    broke default network config in LXD and was contrary to the defaults used
    by the kernel. Reopens LP: 1655440. (LP: #1717404)
  * Add "accept-ra:" key for all device types; this will default to OFF but
    allow users to disable processing Router Advertisements when required by
    their network setup. (LP: #1655440)

nplan (0.27) artful; urgency=medium

  [ Mathieu Trudel-Lapierre ]
  * Fix crash in systemd generator if called by an user on the command-line
  * coverage: fix exclusions to properly not cover our "never reached defaults"

  [ Dimitri John Ledkov ]
  * tests/integration.py: In teardown, stop systemd-networkd.socket.
  * src/networkd.c: Set UseMTU=true by default, whenever DHCP is in use.
    (LP: #1717471)
  * tests/integration.py: fix resolved detection.

nplan (0.26) artful; urgency=medium

...

Ubuntu
nplan package

IPv6 support regresses with nplan transition

Bug Description

Other bug subscribers

Changed in nplan (Ubuntu Xenial):
status:	Fix Committed → Fix Released

Ubuntunplan package

IPv6 support regresses with nplan transition

Bug Description

Other bug subscribers

Ubuntu
nplan package