Path: csiph.com!fu-berlin.de!bofh.it!news.nic.it!robomod
From: Salvatore Bonaccorso <carnil@debian.org>
Newsgroups: linux.debian.bugs.dist,linux.debian.kernel
Subject: Bug#1037138: linux-image-6.0.0-4-amd64: Linux kernel appears to not be respecting sysctl config value "net.ipv6.conf.all.disable_ipv6=1"
Date: Tue, 06 Jun 2023 18:00:02 +0200
Message-ID: <GDHge-e5as-5@gated-at.bofh.it>
References: <GDBaN-e1EZ-1@gated-at.bofh.it> <GDBaN-e1EZ-1@gated-at.bofh.it>
X-Original-To: Dylan Morrison <dizzy@domad.science>, 1037138@bugs.debian.org
X-Mailbox-Line: From debian-bugs-dist-request@lists.debian.org  Tue Jun  6 15:54:09 2023
Old-Return-Path: <debbugs@buxtehude.debian.org>
X-Spam-Flag: NO
X-Spam-Score: -4.009
Reply-To: Salvatore Bonaccorso <carnil@debian.org>, 1037138@bugs.debian.org
Resent-To: debian-bugs-dist@lists.debian.org
Resent-Cc: Debian Kernel Team <debian-kernel@lists.debian.org>
X-Debian-Pr-Message: followup 1037138
X-Debian-Pr-Package: src:linux
X-Debian-Pr-Keywords: ipv6
X-Debian-Pr-Source: linux
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Debian-User: carnil
X-Debian-Message: from BTS
X-Mailing-List: <debian-bugs-dist@lists.debian.org> archive/latest/1773941
List-ID: <debian-bugs-dist.lists.debian.org>
List-URL: <https://lists.debian.org/debian-bugs-dist/>
Approved: robomod@news.nic.it
Lines: 43
Organization: linux.* mail to news gateway
Sender: robomod@news.nic.it
X-Original-Date: Tue, 6 Jun 2023 17:48:03 +0200
X-Original-Message-ID: <ZH9VM6llMVQpcRhO@eldamar.lan>
X-Original-References: <168604317888.296705.8812385445321024157.reportbug@shodan.lan> <168604317888.296705.8812385445321024157.reportbug@shodan.lan>
Xref: csiph.com linux.debian.bugs.dist:1148870 linux.debian.kernel:79236

Control: tags -1 + unreproducible moreinfo

Hi Dylan,

On Tue, Jun 06, 2023 at 05:19:38AM -0400, Dylan Morrison wrote:
> Package: src:linux
> Version: 6.0.8-1
> Severity: normal
> Tags: ipv6
> X-Debbugs-Cc: dizzy@domad.science

First a note on the version, 6.0.8-1 is not in testing, please update
to 6.1.27-1. 

> Dear Maintainer,
> 
> I am attempting to disable ipv6 entirely on this machine as it being enabled is causing multiple issues with long connection timeouts etc, and I do not have ipv6 support from my ISP nor do I use it locally. However, the generally given advice to set net.ipv6.conf.all.disable_ipv6 to 1 is having no effect, neither setting it in /etc/sysctl.conf nor using command line sysctl. Setting net.conf.ipv6.<adapter>.disable_ipv6 works, and is what I am currently doing for my primary network interface, but I would like ipv6 disabled globally.
> This appears to be a kernel issue afaict, I'm not 100% up on how the sysctl mechanism works, but yeah.

After updating to 6.1.27, can you elaborate how IPv6 not disabled is
observed? Note that reading net.ipv6.conf.all.disable_ipv6 and getting
1 is not an indicator of IPv6 beeing not disabled, cf.
https://www.kernel.org/doc/html/latest/networking/ip-sysctl.html?highlight=conf/all/disable_ipv6
.

What does 'ip add show' shows, and what does it show after executing
sysctl net.ipv6.conf.all.disable_ipv6=1 ?

ipv6 can as well entirely be disabled by using the disable_ipv6 kernel
parameter, cf. https://www.kernel.org/doc/html/latest/admin-guide/kernel-parameters.html?highlight=disable_ipv6=
that is e.g. adding ipv6.disable=1 to the kernel command line. Trough
grub2 you could add 

# cat /etc/default/grub.d/ipv6.cfg 
GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX ipv6.disable_ipv6=1"

and run update-grub2.

I would like to understand what makes for you disabling it trough
net.ipv6.conf.all.disable_ipv6 not work.

Regards,
Salvatore