Configure IPv6 with DUID for Online network
ClosedPublic
Actions

Authored by dereckson on Jun 7 2023, 00:41.

Details

Reviewers

dereckson

Maniphest Tasks

T1861: Configure static IPv6 on WindRiver

Commits

rOPS3bd8e5560880: Configure IPv6 with DUID for Online network

Summary

Online requests DHCP connection with a specific DUID.

It's treated as a secret to restrict range use to a specific account.
As such, it's stored in Vault, hence a policy change and specialized
credentials methods.

Ref T1861.

Test Plan

Tested on Windriver

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Passed

Unit

No Test Coverage

Branch

ipv6-windriver

Build Status

Buildable 5015
Build 5296: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Jun 7 2023, 00:41

dereckson created this revision.

Harbormaster completed remote builds in B5015: Diff 8114.Jun 7 2023, 00:41

dereckson accepted this revision.Jun 7 2023, 00:42

This revision is now accepted and ready to land.Jun 7 2023, 00:42

dereckson added inline comments.Jun 7 2023, 00:48

pillar/nodes/nodes.sls
277	What I'd ideally like to see is this: ipv6: addresses: # SLAAC - address: 2001:0bc8:6005:0005:aa1e:84ff:fef3:5d9c prefixlen: 128 # /56 routed block - address: 2001:bc8:2e84:700::da7a:7001 prefixlen: 56 aliases: - 2001:bc8:2e84:700::...

dereckson planned changes to this revision.Jun 7 2023, 01:07

dereckson added inline comments.

pillar/nodes/nodes.sls
277	At Online, you need to disable SLAAC to get the /56 routed block working.
roles/core/network/ipv6.sls
102	Ok, we've a configuration. But we also need a service to start: `/usr/local/sbin/dhclient -cf /usr/local/etc/dhclient6.conf -6 -P -v igb0`