Add dual-stack IPv4/IPv6 network support for TKL v19#338
Open
marcos-mendez wants to merge 7 commits intoturnkeylinux:19.x-devfrom
Open
Add dual-stack IPv4/IPv6 network support for TKL v19#338marcos-mendez wants to merge 7 commits intoturnkeylinux:19.x-devfrom
marcos-mendez wants to merge 7 commits intoturnkeylinux:19.x-devfrom
Conversation
- plans/turnkey/base: add libsocket6-perl + libio-socket-ssl-perl (IPv6 Webmin) - plans/turnkey/base: uncomment tklbam (migrated to Python 3.13) - conf/turnkey.d/webmin-conf: enable ipv6=1 by default - overlays/turnkey.d/networking/etc/gai.conf: prefer IPv4 for external connections Tested: Built turnkey-core v19 ISO (406MB), LXC container running with Webmin on IPv4+IPv6, SSH, systemd, Python 3.13, kernel 6.12.
- Switch from udhcpc (IPv4-only) to dhcpcd (dual-stack v4+v6) - Add inet6 dhcp stanzas to interfaces overlay for eth0 and eth1 - Remove udhcpc-fix overlay (resolvconf integration handled natively by dhcpcd) - Mask dhcpcd.service daemon to prevent conflict with ifupdown (ifupdown invokes dhcpcd on-demand via ifup/ifdown) Tested: ifupdown 0.8.44 (Trixie) natively supports dhcpcd-base. With daemon masked, ifup eth0 successfully obtains both DHCPv4 and DHCPv6 (SLAAC) addresses using a single package. This enables dual-stack IPv4+IPv6 out of the box for all TKL v19 appliances without breaking confconsole/ifupdown integration.
The apache-ssl conf script (which configures TLS protocol hardening, cipher suites, default certificate paths, OCSP stapling, HSTS, and HTTP/2) existed in common/conf/ but was never invoked by any .mk file. This caused all Apache+SSL appliances on Trixie to start with SSLEngine on but no SSLCertificateFile, resulting in fatal mod_ssl errors on boot. Add apache-ssl to apache.mk COMMON_CONF so it runs automatically for every appliance that includes Apache.
Contributor
Author
Note on companion workA related fix for confconsole (separate repo) was also developed: Impact noteThe apache-ssl fix (item 2) affects all Apache-based TKL appliances MotivationThese changes are part of an effort to make TKL v19 IPv6-first ready. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Changes
1. Replace udhcpc with dhcpcd for dual-stack DHCPv4/DHCPv6
2. Enable apache-ssl conf script for all Apache appliances
Testing