social.coop is one of the many independent Mastodon servers you can use to participate in the fediverse.
A Fediverse instance for people interested in cooperative and collective projects. If you are interested in joining our community, please apply at https://join.social.coop/registration-form.html.

Administered by:

Server stats:

488
active users

#linuxnetworking

0 posts0 participants0 posts today
Continued thread

Das Wetter ist hier so lala: statt eines schönen Landregens ist alles nur grau bewölkt 🤪 … also gute Gelegenheit meinen CLT Vortrag nachzuarbeiten:

Ihr findet neben der Aufzeichnung jetzt auch die Folien als PDF: chemnitzer.linux-tage.de/2025/

Wer sich für die Demos interessiert findet hier die Quellen für das Ansible Deployment: codeberg.org/liske/clt2025-lis

(Bei @clt_news ist wohl auch schlechtes Wetter, die Folien wurden innerhalb von 15min verlinkt 😅 - Danke! 🙏 )

chemnitzer.linux-tage.deChemnitzer Linux-Tage 2025 · Vortrag: Firewalls – mandantenfähig, redundant, deklarativDie Chemnitzer Linux-Tage sind eine Veranstaltung rund um das Thema Linux und Open Source für jedermann, die Linux-Nutzer, Insider und Unternehmen zusammenbringt.

#ifstate 1.13.4 was released:
codeberg.org/liske/ifstate/rel

(already available in @alpinelinux edge + 3.21 + 3.20 + 3.19 and in @m4rc3l's Nix flake codeberg.org/m4rc3l/ifstate.ni)

This maintenance release includes a single fix for the configuration of sysctl settings. The bug prevented ifstate from changing more than a single sysctl setting at a time. 🤦

Codeberg.org1.13.4 - liske/ifstate## Fixes - sysctl: fix stopping sysctl processing after the first change (closes #82)
Continued thread

Mein Vortrag von den #clt2025 ist schon als Aufzeichnung verfügbar: media.ccc.de/v/clt25-306-firew

Vielen Dank an alle die zugeschaut haben/es sich ggf. noch anschauen werden. Ich hoffe es hat euch ein paar neue Einblicke gegeben. Mir hat es wieder sehr viel Spaß gemacht. 🤗

Und großen Dank an das Team der @clt_news und das @c3voc 🙏

#TIL sysctl net.ipv4.conf.all.promote_secondaries

When enabled (it is not by default) one can remove the primary (read: first assigned) ipv4 address of an interface w/o removing all other assigned ipv4 addresses. This may help when you need to renumber remotely…
(…and do not have some declarative network configuration tool like #ifstate ;-)

sysctl-explorer.net/net/ipv4/p

sysctl-explorer.netpromote_secondaries | sysctl-explorer.netsysctl reference for net.ipv4.conf.interface.promote_secondaries

I noticed that the Alpine Linux kernel had CONFIG_IPV6_OPTIMISTIC_DAD not set.

Opened an issue in @alpinelinux Gitab gitlab.alpinelinux.org/alpine/ today.

Fixed by @ncopa a short time later* for Alpine 3.21 🌬️ 🏁

Rebuild my Alpine ISO image and upgraded the routers in the evening where I missed this features.

Wow that was incredibly fast, I'm still feeling quite dizzy. I am very grateful 🙏

*) we talked about it on IRC and Linux 6.12.8 was just to be packaged 😅

GitLablinux-lts: missing Optimistic Duplicate Address Detection (RFC 4429) support (#16799) · Issues · alpine / aports · GitLabTo enable Optimistic Duplicate Address Detection (RFC 4429) support in Linux the kernel requires this option to be enabled: CONFIG_IPV6_OPTIMISTIC_DAD=y Seems to be...

#ifstate 1.13.0 was released:
codeberg.org/liske/ifstate/rel

(available in @alpinelinux edge + 3.20 + 3.19 and in @m4rc3l's Nix flake codeberg.org/m4rc3l/ifstate.ni)

Among other minor changes one major change is the refactoring of the vrrp-fifo action (which allows to use ifstate with keepalived's vrrp_notify_fifo_script option). This fixes a race condition breaking ip failover when using more than a single vrrp groups or instances with a netns were used.

Codeberg.orgifstateManage host interface settings in a declarative manner

#ifstate 1.12.0 was released:
codeberg.org/liske/ifstate/rel

(available in @alpinelinux edge + 3.20 + 3.19)

The config schema has two small extensions:
- add missing bind_netns support for sit tunnels
- support Distributed Switch Architecture (DSA) interfaces that (e.g. available on Banana Pi)

Bugfixes found in this release:
- ipv6 addresses disabled by DAD are now reconfigured
- handle missing /dev/log (e.g. for #NixOS initrd support)

Codeberg.orgifstateManage host interface settings in a declarative manner

#ifstate 1.11.0 has been released:
github.com/liske/ifstate/relea

(available in @alpinelinux edge)

With this release it is possible to add ethtool default settings for interfaces and configure routes and rules conditional for vrrp setups (to be used with #keepalived).

It also fixes not working settings for `ethtool --change` (speed, duplex etc.).

GitHubRelease 1.11.0 · liske/ifstateChanges ethtool: allow default settings for ethtool link: allow unsetting the master attribute link: improve attr state debug logging routing: add vrrp conditions for routing items Fixes ethtool...
Continued thread

The OpenRC netns support in Alpine Linux edge is now available. Some network related initd scripts got patched for netns support (ipset, iptables, nftables), too.

OpenRC can now start regular daemons inside netns. In combination with the multi-services function it is possible to run multiple instances of daemons in different netns (i.e. dnsmasq).

A new Alpine Linux wiki page gives a short overview: wiki.alpinelinux.org/wiki/Netn

#alpinelinux #networking #linuxnetworking #netns #ifstate @alpinelinux

wiki.alpinelinux.orgnetns - Alpine Linux

Giving up for today trying to get #8021x (via ethernet, only using credentials, no certificates) working on #NixOS using #wpa_suplicant and #NetworkManager authing against a #UniFi infrastructure...

The debug output from both, NetworkManager, and (especially) wpa_supplicant is quite useless in this regard, as it focuses on technical mumble-jumble that might be useful to someone knees-deep into #RADIUS, but helps zero when it comes to a regular admin trying to get this working.