Ignore RAs on internal network for spikes and thorns

diff --git a/roles/spike-01.rb b/roles/spike-01.rb
index 38ffdfcb00aad23cff41158abb682d62fa1fe159..7ac4eceaead3a90d995efe0fb12544328c0d732a 100644 (file)
--- a/roles/spike-01.rb
+++ b/roles/spike-01.rb
@@ -30,7 +30,10 @@ default_attributes(
   :sysctl => {
     :ipv6_autoconf => {
       :comment => "Disable IPv6 auto-configuration on internal interface",
-      :parameters => { "net.ipv6.conf.eth0.autoconf" => "0" }
+      :parameters => {
+        "net.ipv6.conf.eth0.autoconf" => "0",
+        "net.ipv6.conf.eth0.accept_ra" => "0"
+      }
     }
   }
 )

diff --git a/roles/spike-02.rb b/roles/spike-02.rb
index 368eaf366b351d32ca4117ef9921129d44f277f8..84ee0b118caa9557b91708be0d0c8c60f96020f1 100644 (file)
--- a/roles/spike-02.rb
+++ b/roles/spike-02.rb
@@ -30,7 +30,10 @@ default_attributes(
   :sysctl => {
     :ipv6_autoconf => {
       :comment => "Disable IPv6 auto-configuration on internal interface",
-      :parameters => { "net.ipv6.conf.eth0.autoconf" => "0" }
+      :parameters => {
+        "net.ipv6.conf.eth0.autoconf" => "0",
+        "net.ipv6.conf.eth0.accept_ra" => "0"
+      }
     }
   }
 )

diff --git a/roles/spike-03.rb b/roles/spike-03.rb
index 532eb8d45f303e0149fcde863630dbfff818c751..ee85b29d34727d17efa1e1c7032c53c1331557a8 100644 (file)
--- a/roles/spike-03.rb
+++ b/roles/spike-03.rb
@@ -30,7 +30,10 @@ default_attributes(
   :sysctl => {
     :ipv6_autoconf => {
       :comment => "Disable IPv6 auto-configuration on internal interface",
-      :parameters => { "net.ipv6.conf.eth0.autoconf" => "0" }
+      :parameters => {
+        "net.ipv6.conf.eth0.autoconf" => "0",
+        "net.ipv6.conf.eth0.accept_ra" => "0"
+      }
     }
   }
 )

diff --git a/roles/thorn-01.rb b/roles/thorn-01.rb
index 0ce99559799d8f095381574e990237f690adfbfa..32d92d8f58f3c1e2545584d85fe25ea2a037885d 100644 (file)
--- a/roles/thorn-01.rb
+++ b/roles/thorn-01.rb
@@ -15,7 +15,10 @@ default_attributes(
   :sysctl => {
     :ipv6_autoconf => {
       :comment => "Disable IPv6 auto-configuration on internal interface",
-      :parameters => { "net.ipv6.conf.eth0.autoconf" => "0" }
+      :parameters => {
+        "net.ipv6.conf.eth0.autoconf" => "0",
+        "net.ipv6.conf.eth0.accept_ra" => "0"
+      }
     }
   },
   :web => {

diff --git a/roles/thorn-02.rb b/roles/thorn-02.rb
index 23439c6b4975968df3e09dba93e2c5de7d1c4168..7f37e8b17ff397e27d7a69f1fae4d4d0b5a9cbef 100644 (file)
--- a/roles/thorn-02.rb
+++ b/roles/thorn-02.rb
@@ -15,7 +15,10 @@ default_attributes(
   :sysctl => {
     :ipv6_autoconf => {
       :comment => "Disable IPv6 auto-configuration on internal interface",
-      :parameters => { "net.ipv6.conf.eth0.autoconf" => "0" }
+      :parameters => {
+        "net.ipv6.conf.eth0.autoconf" => "0",
+        "net.ipv6.conf.eth0.accept_ra" => "0"
+      }
     }
   },
   :web => {

diff --git a/roles/thorn-03.rb b/roles/thorn-03.rb
index 998342ad7348bf17fba5e74801eaa7af561f92ec..d2f7cf602deecd939aae7b59cc0dd87210b04a49 100644 (file)
--- a/roles/thorn-03.rb
+++ b/roles/thorn-03.rb
@@ -15,7 +15,10 @@ default_attributes(
   :sysctl => {
     :ipv6_autoconf => {
       :comment => "Disable IPv6 auto-configuration on internal interface",
-      :parameters => { "net.ipv6.conf.eth0.autoconf" => "0" }
+      :parameters => {
+        "net.ipv6.conf.eth0.autoconf" => "0",
+        "net.ipv6.conf.eth0.accept_ra" => "0"
+      }
     }
   },
   :web => {