• VM_0.2.4 a17c915dbc

    hclaude released this 2026-09-18 14:28:25 +00:00 | 8 commits to master since this release

    VM images 0.2.4

    Artifacts (Forgejo generic registry):

    • devuan-6-excalibur-ECS01_6-0.2.4_amd64.qcow2 (555 MB)
    • debian-13-trixie-ECS01_13-0.2.4_amd64.qcow2 (566 MB)
    • ubuntu-24.04-noble-ECS01_24.04-0.2.4_amd64.qcow2 (1082 MB)

    Changes

    Network policy release. Every image now always does IPv6 SLAAC with an EUI-64 address and takes DNS from the RA (RDNSS); IPv4 is mostly static (PVE cloud-init), DHCPv4 the exception; a static IPv6 address is additional, never instead of SLAAC. See PR #19 (commits 23d2f0c, a17c915).

    • SLAAC-1 - sysctl policy (RA on, EUI-64, no temporary addresses); dhcpcd.conf ipv4only (dhcpcd used to replace the kernel's EUI-64 SLAAC with RFC 7217 addresses on every DHCPv4 VM); if-up.d/ecs-slaac restores SLAAC on inet6 static NICs (ifupdown disables it there), keeps the static address as outbound source (RA default route demoted to metric 2048) and solicits an RA on every ifup.
    • DNS-1 - rdnssd + ndisc6 on all images. Debian/Devuan add resolvconf as arbiter: RDNSS -> PVE nameservers -> DHCP -> Quad9 fallback. Before, RDNSS reached resolv.conf only by accident (dhcpcd) and PVE's nameserver/searchdomain were silently ignored. Ubuntu noble ships no resolvconf/openresolv: rdnssd's built-in merge only, PVE nameservers still ignored there.
    • NET-1 - no eth0/lo stanzas in /etc/network/interfaces: ifupdown merged them with cloud-init's, so a VM with a static address also ran a DHCP client, and an empty lo record wiped PVE's DNS.
    • NET-2 (standalone) - net.ifnames=0 (NIC is eth0 everywhere); the default "DHCPv4 + SLAAC" stanza ships as the file cloud-init overwrites, so it never coexists with a real config; hvisage user (sudo NOPASSWD, SSH keys, zsh) baked in like the LXC ECS01 bundle - a VM without a cloud-init drive is reachable on its EUI-64 address and can be logged into (root stays locked); cloud-init's fallback netcfg patched to dhcp6: False ("No DHCPv6 client software found!" failed networking.service on every VM without a network-config since 0.1.0).
    • ORDER-1 (Devuan) - cloud-init-local now runs in OpenRC's sysinit runlevel before networking; previously PVE's static IPv4/IPv6 was not applied on first boot (masked by the old DHCP stanza).
    • HOME-1 - ecs-firstboot defaults HOME=/root; the unit was FAILED and etckeeper uninitialised at first boot on every VM with a real hostname.
    • VSOCK-1 - mask systemd-ssh-generator (Debian 13 AF_VSOCK log spam).

    Verified per image under TCG with PVE-style NoCloud seeds: static4, static4+static6, static4+ip6=auto, dhcp4, no network-config, no datasource. 0 outdated packages vs release+updates+security. Not supported: PVE ip6=dhcp (ifupdown needs ISC dhclient; out of policy).

    VMs deployed from <= 0.2.3 keep their old behaviour (no -updates/-security sources on <= 0.2.2, DHCP client beside static config, no RDNSS consumer) - re-provision or fix by hand.

    SHA256SUMS

    99d8fcc66192d2f730a63e873900d15e680a756fc0126df0cd447fcc65184a3f  devuan-6-excalibur-ECS01_6-0.2.4_amd64.qcow2
    8cb52a1fd770cced60ff3721890de0520f5f3d6fea8d7515b837b52484e6636a  devuan-6-excalibur-ECS01_6-0.2.4_amd64.manifest.txt
    ef86434833b2610a0976640dd7f5c2be37d34b7346d23cfd237eaefc76631496  devuan-6-excalibur-ECS01_6-0.2.4_amd64.install.sh
    1bd2cefe8d43df4a64e1e56b01932840b92aa797dc487f8e727b415ae9422d8f  debian-13-trixie-ECS01_13-0.2.4_amd64.qcow2
    71e3cc2f343e467fa78ad287c727b21f032b5b30ff563738ac5c75d2c16852a1  debian-13-trixie-ECS01_13-0.2.4_amd64.manifest.txt
    28e81651f6f40a60217bb1eff4b673a5850c4ff6a18eaef240aa7cc2070112f6  debian-13-trixie-ECS01_13-0.2.4_amd64.install.sh
    6091936d31bc0b32420e18cbce5dd2a469bfae74332e08c9e4981fbd9afdcfd5  ubuntu-24.04-noble-ECS01_24.04-0.2.4_amd64.qcow2
    9e0db7b6da202767fcdda28ec18c1059c9ce8b1adb9c029519e80ada39ffbc3d  ubuntu-24.04-noble-ECS01_24.04-0.2.4_amd64.manifest.txt
    65fb38d67adb71183d17865e58ff073cf82c86c21e8be1ef51c4fc45e365cc46  ubuntu-24.04-noble-ECS01_24.04-0.2.4_amd64.install.sh
    

    Pull

    forgejo-curl -sLO https://git.cloudoffice.co.za/api/packages/ECS-Public-Infra/generic/qemu-images/0.2.4/<file>     # or .../latest/<file>
    
    Downloads