X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fdebian_org%2Fmanifests%2Finit.pp;h=943c36946dbe72aa29b6a83647e1808c219b816b;hb=faf0b00a7b3ef90757b7fcf9dec93c9987383f8a;hp=e1691515105b9d7eaa48501261e2c4976cd41462;hpb=168aa3f05f914802698b8db5fdde823c4e992913;p=mirror%2Fdsa-puppet.git

diff --git a/modules/debian_org/manifests/init.pp b/modules/debian_org/manifests/init.pp
index e16915151..943c36946 100644
--- a/modules/debian_org/manifests/init.pp
+++ b/modules/debian_org/manifests/init.pp
@@ -269,8 +269,7 @@ class debian_org {
 		group  => root,
 	}
 	file { '/usr/local/bin/dsa-is-shutdown-scheduled':
-		source	=> 'puppet:///modules/debian_org/dsa-is-shutdown-scheduled',
-		mode	=> '0555',
+		ensure => 'absent',
 	}
 
 	exec { 'dpkg-reconfigure tzdata -pcritical -fnoninteractive':
@@ -340,6 +339,18 @@ class debian_org {
 		value => '1',
 	}
 
+	# our ipv6 addresses and routes are statically configured.
+	file { '/etc/network/if-pre-up.d/no_accept_ra':
+		source => 'puppet:///modules/debian_org/ifupdown-pre-up-accept-ra',
+		mode   => '0555',
+	}
+	base::sysctl { 'dsa-accept-ra-default':
+		ensure => absent,
+	}
+	base::sysctl { 'dsa-accept-ra-all':
+		ensure => absent,
+	}
+
 	# Disable kpartx udev rules
 	file { '/etc/udev/rules.d/60-kpartx.rules':
 		ensure => $has_lib_udev_rules_d_60_kpartx_rules ? { true  => 'present', default => 'absent' },