Deploy a sysctl.d/dsa-radvd.conf

In some networks IPv6 router advertisment is setup incorrectly and
assigns IPs to us which should not be used. Disabling the default
accept_ra should work around that problem.

Signed-off-by: Martin Zobel-Helas <zobel@debian.org>

diff --git a/modules/sysctl/files/common/dsa-radvd.conf b/modules/sysctl/files/common/dsa-radvd.conf
new file mode 100644 (file)
index 0000000..00e0069
--- /dev/null
+++ b/modules/sysctl/files/common/dsa-radvd.conf
@@ -0,0 +1,2 @@
+net.ipv6.conf.default.accept_ra=0
+net.ipv6.conf.all.accept_ra=0

diff --git a/modules/sysctl/manifests/init.pp b/modules/sysctl/manifests/init.pp
new file mode 100644 (file)
index 0000000..6b8d923
--- /dev/null
+++ b/modules/sysctl/manifests/init.pp
@@ -0,0 +1,17 @@
+class sysctl {
+       package { procps: ensure => installed }
+
+       file { "/etc/sysctl.d/dsa-radvd.conf":
+               owner   => root,
+               group   => root,
+               mode    => 444,
+               source  => [ "puppet:///modules/sysctl/per-host/$fqdn/dsa-radvd.conf",
+                            "puppet:///modules/sysctl/common/dsa-radvd.conf" ],
+               require => Package["procps"]
+                ;
+
+       }
+}
+# vim:set et:
+# vim:set sts=4 ts=4:
+# vim:set shiftwidth=4: