Bug #14867: Agent fatal error if policy server resolves to a link-local IPv6 address - Rudder - Issue Tracker

Actions

Copy link

Bug #14867

open

Agent fatal error if policy server resolves to a link-local IPv6 address

Added by Alexis Mousset almost 5 years ago. Updated about 1 month ago.

Status:

New

Priority:

N/A

Assignee:

Category:

Agent

Target version:

7.3.14

Pull Request:

Severity:

Critical - prevents main use of Rudder | no workaround | data loss | security

UX impact:

User visibility:

Getting started - demo | first install | Technique editor and level 1 Techniques

Effort required:

Medium

Priority:

Name check:

Fix check:

Regression:

Description

   error: /var/rudder/ncf/common/30_generic_methods/file_from_remote_source_recursion.cf:0:0: In attribute 'servers', Scalar value is out of range. Given attribute value ' {"fe80::5054:ff:fe6f:e964%eth0"}'
   error: Fatal CFEngine error: Cannot continue

policy_server.dta contains "rudder" and:

$ getent hosts rudder
fe80::5054:ff:fe6f:e964 rudder

Actions

Copy link

Updated by Alexis Mousset almost 5 years ago

Description updated (diff)

Actions

Copy link

Updated by Alexis Mousset almost 5 years ago

Category set to Agent
Target version set to 5.0.10

Actions

Copy link

Updated by Alexis Mousset almost 5 years ago

getaddrinfo() supports the address%scope-id notation for specifying the IPv6 scope-ID.

CFEngine does not seem to know about that and try to parse it as an IPv6 address directly.

Actions

Copy link

Updated by Alexis Mousset almost 5 years ago

Subject changed from Broken remote copy due to malformed IPv6 address to Agent fatal error if policy server resolves to a link-local IPv6 address

Upstream issue: https://tracker.mender.io/browse/CFE-3053

Actions

Copy link

Updated by Vincent MEMBRÉ almost 5 years ago

Target version changed from 5.0.10 to 5.0.11

Actions

Copy link

Updated by Vincent MEMBRÉ almost 5 years ago

Target version changed from 5.0.11 to 5.0.12

Actions

Copy link

Updated by Vincent MEMBRÉ almost 5 years ago

Target version changed from 5.0.12 to 5.0.13

Actions

Copy link

Updated by Vincent MEMBRÉ over 4 years ago

Target version changed from 5.0.13 to 5.0.14

Actions

Copy link

Updated by Vincent MEMBRÉ over 4 years ago

Target version changed from 5.0.14 to 5.0.15

Actions

Copy link

#10

Updated by Benoît PECCATTE over 4 years ago

Effort required set to Medium

This seems a cfenine bug, so you need cfengine source skills to solve it -> medium

Actions

Copy link

#11

Updated by Vincent MEMBRÉ over 4 years ago

Target version changed from 5.0.15 to 5.0.16

Actions

Copy link

#12

Updated by Alexis Mousset about 4 years ago

Target version changed from 5.0.16 to 5.0.17

Actions

Copy link

#13

Updated by Vincent MEMBRÉ about 4 years ago

Target version changed from 5.0.17 to 5.0.18

Actions

Copy link

#14

Updated by François ARMAND almost 4 years ago

Severity set to Critical - prevents main use of Rudder | no workaround | data loss | security
User visibility set to Getting started - demo | first install | Technique editor and level 1 Techniques
Priority changed from 0 to 64

It seems that that bug will become quite common, and it's a pity we don't support ipv6 well. Moreover, it's not clear how you can workaround that if your infra is ipv6 only. Is there any?

Actions

Copy link

#15