Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updates for moby 27.0 #20026

Merged
merged 6 commits into from
Jun 25, 2024
Merged

Updates for moby 27.0 #20026

merged 6 commits into from
Jun 25, 2024

Conversation

robmry
Copy link
Contributor

@robmry robmry commented May 13, 2024

Description

A collection of updates for the moby 27.0 release ...

Add "NAT" to the Vale linter's allow-list.

ip6tables enabled by default

--ip6tables is now the default, and it no longer needs --experimental.

Also, daemon.json "ipv6":true only enables IPv6 for the default bridge, it's not required for a user-defined bridge.

Update the description of iptables rules

kernel module 'ip6_tables' is needed for DinD

Explain bridge option host_binding_ipv4

Because it's IPv6 too, despite the option name, and it has surprising differences between v4/v6 handling. Related to ...

Updates to IPv6 address pools

A ULA prefix is used if there's no IPv6 in default-address-pools

Restrictions on IPv6 subnet size and number of pools have been removed

Reviews

@akerouanton, @dvdksn

@github-actions github-actions bot added area/engine Issue affects Docker engine/daemon area/networking Relates to anything around networking area/configuration labels May 13, 2024
Copy link

netlify bot commented May 13, 2024

Deploy Preview for docsdocker ready!

Name Link
🔨 Latest commit 85cf2b7
🔍 Latest deploy log https://app.netlify.com/sites/docsdocker/deploys/667ad900c653f400084749aa
😎 Deploy Preview https://deploy-preview-20026--docsdocker.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@dvdksn dvdksn added this to the engine/27.0.0 milestone May 13, 2024
@dvdksn dvdksn requested review from akerouanton and dvdksn May 13, 2024 14:58
content/config/daemon/ipv6.md Outdated Show resolved Hide resolved
content/config/daemon/ipv6.md Outdated Show resolved Hide resolved
@robmry robmry force-pushed the ip6tables-by-default branch from 6c8b9ea to e964c41 Compare May 29, 2024 08:55
dvdksn
dvdksn previously approved these changes May 29, 2024
Copy link
Member

@thaJeztah thaJeztah left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is part of the 27.0 release, correct? In that case, we can't merge this yet.

@robmry robmry changed the title "--ip6tables" is now the default Updates for moby 27.0 Jun 12, 2024
@robmry robmry force-pushed the ip6tables-by-default branch 6 times, most recently from b7129f7 to a0406df Compare June 13, 2024 09:03
content/config/daemon/ipv6.md Outdated Show resolved Hide resolved
content/network/_index.md Outdated Show resolved Hide resolved
@robmry robmry force-pushed the ip6tables-by-default branch from a0406df to a8ffee2 Compare June 13, 2024 18:05
@robmry
Copy link
Contributor Author

robmry commented Jun 13, 2024

In the last push - I moved the new description of direct routing to the page describing iptables, and updated the iptables description.

content/network/drivers/bridge.md Outdated Show resolved Hide resolved
content/network/drivers/bridge.md Outdated Show resolved Hide resolved
content/network/packet-filtering-firewalls.md Outdated Show resolved Hide resolved
content/network/packet-filtering-firewalls.md Outdated Show resolved Hide resolved
@robmry robmry force-pushed the ip6tables-by-default branch from a8ffee2 to 5ff6e0b Compare June 14, 2024 17:10
@github-actions github-actions bot added the area/release Relates to CI or deployment label Jun 14, 2024
robmry added 3 commits June 25, 2024 16:49
Also, daemon.json "ipv6":true only enables IPv6 for the default bridge,
it's not required for a user-defined bridge.

Signed-off-by: Rob Murray <[email protected]>
- describe Docker's custom chains
- describe the new direct routing options
- use documentation address ranges in examples

Signed-off-by: Rob Murray <[email protected]>
robmry added 3 commits June 25, 2024 16:49
- a ULA prefix is used if there's no IPv6 in default-address-pools
- restrictions on IPv6 subnet size and number of pools have been removed

Signed-off-by: Rob Murray <[email protected]>
@dvdksn dvdksn force-pushed the ip6tables-by-default branch from c964b6a to 85cf2b7 Compare June 25, 2024 14:49
@dvdksn dvdksn merged commit d0d7db3 into docker:main Jun 25, 2024
11 checks passed
@robmry robmry deleted the ip6tables-by-default branch December 10, 2024 18:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/engine Issue affects Docker engine/daemon area/networking Relates to anything around networking area/release Relates to CI or deployment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants