Enable IPv6 dual-stack networking for containers

[pfreyburg]

RHINENG-24842

[pfreyburg]

How to run it on existing broker instance:

1. copy the changes into /usr/share/foreman-installer/modules/iop/manifests/ (replace existing files),
2. remove iop-core-network with podman network rm -f iop-core-network and ip link delete podman1
3. then run foreman-installer

Then you can check whether ipv6 is enabled: podman network inspect iop-core-network | grep ipv6_enabled

[vkrizan]

One organizational suggestions, if you are changing the code that you are submitting, then feel free to utilize rebase to include changes that are relevant (i.e. clean up the history).

Thank you!

[vkrizan]

@ehelms @evgeni Would you be able to review this? Thank you!

[evgeni]

Does this setup NAT for v6 too? Do you happen to have a system handy where I could see the result of this change?

[vkrizan]

Does this setup NAT for v6 too?

Yes, I believe that's the purpose of the ipv6 flag besides the IPv6 subnet.

Petr had a machine provisioned by broker where he tested this. I'm not sure if it still exists.

[evgeni]

One thing to remember (even if we can't fix it from inside puppet-iop): the podman module won't fix existing networks to enable IPv6, due to the way how the creation is handled in
https://github.com/southalc/podman/blob/f4cc7f6ce6b70130cbdb4b8cde2b064b35b081ab/manifests/network.pp#L158-L159
(It's non-trivial to orchestrate this case with Puppet, as it doesn't know how to "update" a network at all)

[ekohl]

(It's non-trivial to orchestrate this case with Puppet, as it doesn't know how to "update" a network at all)

Looking at podman network update --help I only see options to add or remove DNS options, nothing else.