Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1755896

Summary:	[RFE] Add support of disable IPv6 persistently
Product:	Red Hat Enterprise Linux 8	Reporter:	Gris Ge <fge>
Component:	nmstate	Assignee:	Gris Ge <fge>
Status:	CLOSED ERRATA	QA Contact:	Mingyu Shi <mshi>
Severity:	medium	Docs Contact:
Priority:	high
Version:	8.1	CC:	jiji, jishi, kanderso, network-qe
Target Milestone:	rc	Keywords:	RFE
Target Release:	8.1	Flags:	pm-rhel: mirror+
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:	nmstate-0.1.1-2.el8	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-02-04 12:27:08 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Gris Ge 2019-09-26 12:27:04 UTC

Description of problem:

Currently, the ipv6 disabled by nmstate will be re-enabled after reboot.
Need to use the NM 1.20 new feature to support disabling IPv6 persistently.


Version-Release number of selected component (if applicable):
nmstate-0.0.8-15.el8

How reproducible:
100%

Steps to Reproduce:
1. Use nmstatectl to disable IPvv6 of certain interface.
2. Reboot
3. Check ipv6 status of that interface

Actual results:

IPv6 got enabled after reboot.

Expected results:

IPv6 stay in disable mode

Additional info:

The libnm 1.20 supports `NM.SETTING_IP6_CONFIG_METHOD_DISABLED`.

Comment 3 Gris Ge 2019-10-09 08:07:26 UTC

Upstream patch is https://github.com/nmstate/nmstate/pull/447

Comment 6 Mingyu Shi 2019-12-04 10:01:54 UTC

RHEL-8.1.1-20191202.n.3
[root@hp-dl388g8-04 ~]0# rpm -q nmstate
nmstate-0.1.1-5.el8.noarch

[root@hp-dl388g8-04 /mnt/tests/kernel/networking/nmstate/temp]0# cat /etc/NetworkManager/system-connections/dummy0.nmconnection 
[connection]
id=dummy0
uuid=49fa4c29-e3df-44b3-8aab-688eacb44808
type=dummy
autoconnect-slaves=1
interface-name=dummy0
permissions=

[ethernet]
cloned-mac-address=5A:A3:C8:3D:26:FB
mac-address-blacklist=
mtu=1500

[ipv4]
dhcp-client-id=mac
dns-search=
method=disabled

[ipv6]
addr-gen-mode=eui64
dhcp-duid=ll
dns-search=
method=link-local
[root@hp-dl388g8-04 /mnt/tests/kernel/networking/nmstate/temp]0# ip -6 a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eno1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 2620:52:0:4982:b285:95b0:cd4f:814d/64 scope global dynamic noprefixroute 
       valid_lft 2592000sec preferred_lft 604800sec
    inet6 fe80::2eb3:eb04:4162:2aa2/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
12: dummy0: <BROADCAST,NOARP,UP,LOWER_UP> mtu 1500 state UNKNOWN qlen 1000
    inet6 fe80::58a3:c8ff:fe3d:26fb/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
[root@hp-dl388g8-04 /mnt/tests/kernel/networking/nmstate/temp]0# nmstatectl set dummydisableipv6.yaml 
2019-12-04 04:31:21,665 root         DEBUG    Checkpoint /org/freedesktop/NetworkManager/Checkpoint/2 created for all devices: 60
2019-12-04 04:31:21,665 root         DEBUG    Adding new interfaces: []
2019-12-04 04:31:21,667 root         DEBUG    Editing interfaces: ['dummy0']
2019-12-04 04:31:21,668 root         DEBUG    Connection settings for ConnectionSetting.import_by_profile:
id: dummy0
iface: dummy0
uuid: 49fa4c29-e3df-44b3-8aab-688eacb44808
type: dummy
autoconnect: True
autoconnect_slaves: <enum NM_SETTING_CONNECTION_AUTOCONNECT_SLAVES_YES of type NM.SettingConnectionAutoconnectSlaves>
2019-12-04 04:31:21,671 root         DEBUG    Executing NM action: func=commit_changes_async
2019-12-04 04:31:21,676 root         DEBUG    Connection update succeeded: dev=dummy0
2019-12-04 04:31:21,676 root         DEBUG    Executing NM action: func=_safe_modify_async
2019-12-04 04:31:21,678 root         DEBUG    Device reapply succeeded: dev=dummy0
2019-12-04 04:31:21,678 root         DEBUG    NM action queue exhausted, quiting mainloop
2019-12-04 04:31:21,745 root         DEBUG    Checkpoint /org/freedesktop/NetworkManager/Checkpoint/2 destroyed
Desired state applied: 
---
interfaces:
- name: dummy0
  type: dummy
  state: up
  ipv6:
    enabled: false
  mtu: 1500
[root@hp-dl388g8-04 /mnt/tests/kernel/networking/nmstate/temp]0# nmcli connection up dummy0 
ap           ifname       passwd-file  
[root@hp-dl388g8-04 /mnt/tests/kernel/networking/nmstate/temp]0# nmcli connection up dummy0 
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/4)
[root@hp-dl388g8-04 /mnt/tests/kernel/networking/nmstate/temp]0# ip -6 a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eno1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 2620:52:0:4982:b285:95b0:cd4f:814d/64 scope global dynamic noprefixroute 
       valid_lft 2591939sec preferred_lft 604739sec
    inet6 fe80::2eb3:eb04:4162:2aa2/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever

[root@hp-dl388g8-04 /mnt/tests/kernel/networking/nmstate/temp]0# cat dummydisableipv6.yaml 
---
interfaces:
  - name: dummy0
    type: dummy
    state: up
    mtu: 1500
    ipv6:
      enabled: false

[root@hp-dl388g8-04 ~]0# cat /etc/NetworkManager/system-connections/dummy0.nmconnection 
[connection]
id=dummy0
uuid=49fa4c29-e3df-44b3-8aab-688eacb44808
type=dummy
autoconnect-slaves=1
interface-name=dummy0
permissions=

[ethernet]
cloned-mac-address=5A:A3:C8:3D:26:FB
mac-address-blacklist=
mtu=1500

[ipv4]
dhcp-client-id=mac
dns-search=
method=disabled

[ipv6]
addr-gen-mode=eui64
dhcp-duid=ll
dns-search=
method=disabled



after 'nmcli con up' or reboot, the ipv6 of the interface remains disabled.

The bug can be reproduced on RHEL-8.1.0: by 'nmcli up' or rebooting system after disabled ipv6, and the iface's configuration under /etc/NetworkManager/system-connections will always be ipv6.method=ignore

Comment 8 errata-xmlrpc 2020-02-04 12:27:08 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:0350