how to fully disable ipv6?

172 views
Skip to first unread message

alwinbr...@gmail.com

unread,
Jan 6, 2015, 9:14:06 AM1/6/15
to qubes...@googlegroups.com
Hello,

My qubes R2 is getting an ipv6 address when it's conntected to the internet (except from ipv4, wich is normal)

I don't want a connect ipv6 address on my machine, just only ipv4

How can i fully disable the ipv6 address-fix on my qubes r2 machine?

alwinbr...@gmail.com

unread,
Jan 6, 2015, 9:17:44 AM1/6/15
to qubes...@googlegroups.com, alwinbr...@gmail.com
i forgot to say that i have disabled ipv6 in the network manager, but it still keeps the ipv6 prefix.

Zrubi

unread,
Jan 6, 2015, 9:17:45 AM1/6/15
to qubes...@googlegroups.com
Add this to the kernel options to a (net)VM:
ipv6.disable=1



--
Zrubi

signature.asc

alwinbr...@gmail.com

unread,
Jan 6, 2015, 9:21:02 AM1/6/15
to qubes...@googlegroups.com, alwinbr...@gmail.com
Thank you Zrubi for the quick response,
But could you maybe explain to me how i can come into the kernel rules, so i can add the rule you suggested to me?

Andrew

unread,
Jan 6, 2015, 11:04:00 AM1/6/15
to qubes...@googlegroups.com
On 01/06/15 15:21, alwinbr...@gmail.com wrote:
> Thank you Zrubi for the quick response,
> But could you maybe explain to me how i can come into the kernel rules, so i can add the rule you suggested to me?
>


I'm not sure why Qubes Manager doesn't let you modify the kernel options
directly, but you should be able to modify the appropriate QubesNetVm
entry in Dom0's /var/lib/qubes/qubes.xml. Haven't tested this, though,
so I don't know if this survives other config changes or even if it
works :).

Andrew

Marek Marczykowski-Górecki

unread,
Jan 6, 2015, 11:07:02 AM1/6/15
to Andrew, qubes...@googlegroups.com
You can simply use qvm-prefs.

--
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?

alwinbr...@gmail.com

unread,
Jan 6, 2015, 11:38:46 AM1/6/15
to qubes...@googlegroups.com, alwinbr...@gmail.com
i did.
"qvm-prefs -s disable.ipv6=1 netvm kernelopts"
but that did not work out.

so i tried:
"qvm-prefs -s netvm kernelopts disable.ipv6=1"
that did work.

but now are my previous settings kernelopts from the netvm completely replaced instead of just added.
before the kernelopts where: nopat iommu=soft swiotlb=4096 (default)
now the kernelopts for the netvm are only: disable.ipv6=1

i think i did something not the right way? or??

Marek Marczykowski-Górecki

unread,
Jan 6, 2015, 12:10:02 PM1/6/15
to alwinbr...@gmail.com, qubes...@googlegroups.com
Those settings are required for some network drivers. If your network
works now, it is just fine to keep it as is. If not, add the option,
instead to the default ones:
qvm-prefs -s netvm kernelopts "nopat iommu=soft swiotlb=4096 disable.ipv6=1"

alwinbr...@gmail.com

unread,
Jan 6, 2015, 12:28:34 PM1/6/15
to qubes...@googlegroups.com, alwinbr...@gmail.com
Thank you for the help Marek:)

alwinbr...@gmail.com

unread,
Jan 6, 2015, 5:38:42 PM1/6/15
to qubes...@googlegroups.com, alwinbr...@gmail.com
Just checked my internet connection but the ipv6 address is still there,
so the change did not have any effect..

Zrubi

unread,
Jan 7, 2015, 2:02:06 AM1/7/15
to qubes...@googlegroups.com
On 01/06/15 23:38, alwinbr...@gmail.com wrote:
> Just checked my internet connection but the ipv6 address is still there,
> so the change did not have any effect..


Yes, because you are not used what I suggested.
The correct kernel parameter is still:
ipv6.disable=1

(instead of disable.ipv6=1)



--
Zrubi

signature.asc
Reply all
Reply to author
Forward
0 new messages