Configure IPv6 with DUID for Online network
ClosedPublic
Actions

Authored by dereckson on Jun 7 2023, 00:41.

Details

Reviewers

dereckson

Maniphest Tasks

T1861: Configure static IPv6 on WindRiver

Commits

rOPS3bd8e5560880: Configure IPv6 with DUID for Online network

Summary

Online requests DHCP connection with a specific DUID.

It's treated as a secret to restrict range use to a specific account.
As such, it's stored in Vault, hence a policy change and specialized
credentials methods.

Ref T1861.

Test Plan

Tested on Windriver

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Jun 7 2023, 00:41

dereckson created this revision.

Harbormaster completed remote builds in B5015: Diff 8114.Jun 7 2023, 00:41

dereckson accepted this revision.Jun 7 2023, 00:42

This revision is now accepted and ready to land.Jun 7 2023, 00:42

dereckson added inline comments.Jun 7 2023, 00:48

pillar/nodes/nodes.sls
277–281	What I'd ideally like to see is this: ipv6: addresses: # SLAAC - address: 2001:0bc8:6005:0005:aa1e:84ff:fef3:5d9c prefixlen: 128 # /56 routed block - address: 2001:bc8:2e84:700::da7a:7001 prefixlen: 56 aliases: - 2001:bc8:2e84:700::...

dereckson planned changes to this revision.Jun 7 2023, 01:07

dereckson added inline comments.

pillar/nodes/nodes.sls
277–281	At Online, you need to disable SLAAC to get the /56 routed block working.
roles/core/network/ipv6.sls
102	Ok, we've a configuration. But we also need a service to start: `/usr/local/sbin/dhclient -cf /usr/local/etc/dhclient6.conf -6 -P -v igb0`