konairius/homelab
10
0
Fork 0
Code Issues 9 Pull Requests 8 Packages Projects Releases 1 Wiki Activity

opentofu: give the woodpecker-agent LXCs IPv6 (root cause) #54

Merged
k.renner merged 1 commits from agents-lxc-ipv6 into master 2026-06-26 13:19:36 +00:00
Conversation 0 Commits 1 Files Changed 3
+29 -7
k.renner commented 2026-06-26 13:07:12 +00:00
Owner
Copy Link
Copy Source

The agent LXCs had an IPv4-only ip_config — no v6 uplink — so all the Docker/Woodpecker v6 config had nothing to egress onto. Adds an ipv6 block to the proxmox_lxc module and sets ipv6_address="auto" (SLAAC) for the agents. Requires RECREATING the agents (initialization is ignore_changes); they are transient. Recreate one at a time, then re-run install-woodpecker-agent.yml.

The agent LXCs had an IPv4-only ip_config — no v6 uplink — so all the Docker/Woodpecker v6 config had nothing to egress onto. Adds an ipv6 block to the proxmox_lxc module and sets ipv6_address="auto" (SLAAC) for the agents. Requires RECREATING the agents (initialization is ignore_changes); they are transient. Recreate one at a time, then re-run install-woodpecker-agent.yml.
k.renner added 1 commit 2026-06-26 13:07:12 +00:00
opentofu: give the woodpecker-agent LXCs IPv6 (the actual root cause)
ci/woodpecker/push/deploy-infrastructure Pipeline failed
Details
3475c2013c 
The agents are unprivileged Proxmox LXCs whose ip_config had only an ipv4
block — no IPv6 at all. So no matter how Docker/Woodpecker were configured
for v6 (daemon.json ip6tables, WOODPECKER_BACKEND_DOCKER_ENABLE_IPV6), the
step containers had no v6 uplink to NAT onto, and deploys to v6-only hosts
(proxy-1) failed 'Network unreachable'. IPv4 NAT works in these LXCs, so v6
NAT will too once the LXC actually has v6.

Add an optional ipv6 block to the proxmox_lxc module (auto/dhcp/static) and
set ipv6_address = "auto" (SLAAC off v40srv) for the agents.

NOTE: `initialization` is in the module's ignore_changes, so this does NOT
apply to running agents on a normal apply — they must be RECREATED to pick
up v6 (they're tagged `transient`). Recreate one at a time to keep CI up,
then re-run install-woodpecker-agent.yml on each.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
k.renner merged commit f337b75ba2 into master 2026-06-26 13:19:36 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
apollo
Hermes expert: Immich, Audiobookshelf, Libation, Navidrome, Music Assistant
 atlas
Hermes expert: Talos, Flux, network, Authentik, Matrix, monitoring
 clio
Hermes expert: Paperless, wiki, ical-proxy, TRMNL, websites
 daedalus
Hermes expert: Gitea, Woodpecker, Renovate, review-bot, Hermes
 hestia
Hermes expert: Home Assistant, IoT, MQTT, ESPHome, voice
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
alert-monitor-bot claude-bot (Claude Bot) flux hermes-bot issue-fix-bot k.renner renovate-bot review-bot (Review Bot) security-bot update-audit-bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: konairius/homelab#54