-
Notifications
You must be signed in to change notification settings - Fork 39
/
Copy pathdisable_ipv6.sh
executable file
·205 lines (191 loc) · 7.42 KB
/
disable_ipv6.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
#!/bin/bash
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
# Copyright Clairvoyant 2016
DATE=$(date +'%Y%m%d%H%M%S')
# Function to discover basic OS details.
discover_os() {
if command -v lsb_release >/dev/null; then
# CentOS, Ubuntu
# shellcheck disable=SC2034
OS=$(lsb_release -is)
# 7.2.1511, 14.04
# shellcheck disable=SC2034
OSVER=$(lsb_release -rs)
# 7, 14
# shellcheck disable=SC2034
OSREL=$(echo "$OSVER" | awk -F. '{print $1}')
# trusty, wheezy, Final
# shellcheck disable=SC2034
OSNAME=$(lsb_release -cs)
else
if [ -f /etc/redhat-release ]; then
if [ -f /etc/centos-release ]; then
# shellcheck disable=SC2034
OS=CentOS
else
# shellcheck disable=SC2034
OS=RedHatEnterpriseServer
fi
# shellcheck disable=SC2034
OSVER=$(rpm -qf /etc/redhat-release --qf='%{VERSION}.%{RELEASE}\n')
# shellcheck disable=SC2034
OSREL=$(rpm -qf /etc/redhat-release --qf='%{VERSION}\n' | awk -F. '{print $1}')
fi
fi
}
echo "********************************************************************************"
echo "*** $(basename "$0")"
echo "********************************************************************************"
# Check to see if we are on a supported OS.
discover_os
if [ "$OS" != RedHatEnterpriseServer ] && [ "$OS" != CentOS ] && [ "$OS" != Debian ] && [ "$OS" != Ubuntu ]; then
echo "ERROR: Unsupported OS."
exit 3
fi
echo "** Before disabling IPv6:"
ip -6 address
if [ "$OS" == RedHatEnterpriseServer ] || [ "$OS" == CentOS ]; then
echo "** sysctl method"
echo "** Disabling IPv6 kernel configuration..."
# https://access.redhat.com/solutions/8709
# https://wiki.centos.org/FAQ/CentOS7#head-8984faf811faccca74c7bcdd74de7467f2fcd8ee
# https://wiki.centos.org/FAQ/CentOS6#head-d47139912868bcb9d754441ecb6a8a10d41781df
if [ -d /etc/sysctl.d ]; then
if grep -q net.ipv6.conf.all.disable_ipv6 /etc/sysctl.conf; then
sed -i -e '/^net.ipv6.conf.all.disable_ipv6/d' /etc/sysctl.conf
fi
if grep -q net.ipv6.conf.default.disable_ipv6 /etc/sysctl.conf; then
sed -i -e '/^net.ipv6.conf.default.disable_ipv6/d' /etc/sysctl.conf
fi
echo "# Tuning for Hadoop installation." >/etc/sysctl.d/cloudera-ipv6.conf
# shellcheck disable=SC2129
echo "# CLAIRVOYANT" >>/etc/sysctl.d/cloudera-ipv6.conf
echo "net.ipv6.conf.all.disable_ipv6 = 1" >>/etc/sysctl.d/cloudera-ipv6.conf
echo "net.ipv6.conf.default.disable_ipv6 = 1" >>/etc/sysctl.d/cloudera-ipv6.conf
chown root:root /etc/sysctl.d/cloudera-ipv6.conf
chmod 0644 /etc/sysctl.d/cloudera-ipv6.conf
sysctl -p /etc/sysctl.d/cloudera-ipv6.conf
if [ "$OSREL" == 7 ]; then
dracut -f
elif [ "$OSREL" == 6 ]; then
cp -p /etc/hosts /etc/hosts."${DATE}"
sed -i -e 's/^[[:space:]]*::/#::/' /etc/hosts
fi
else
if grep -q net.ipv6.conf.all.disable_ipv6 /etc/sysctl.conf; then
sed -i -e "/^net.ipv6.conf.all.disable_ipv6/s|=.*|= 1|" /etc/sysctl.conf
else
echo "net.ipv6.conf.all.disable_ipv6 = 1" >>/etc/sysctl.conf
fi
if grep -q net.ipv6.conf.default.disable_ipv6 /etc/sysctl.conf; then
sed -i -e "/^net.ipv6.conf.default.disable_ipv6/s|=.*|= 1|" /etc/sysctl.conf
else
echo "net.ipv6.conf.default.disable_ipv6 = 1" >>/etc/sysctl.conf
fi
sysctl -p /etc/sysctl.conf
fi
# if [ "$OSREL" == 7 ]; then
# echo "** kernel module method"
# echo "** Disabling IPv6 kernel module..."
# cp -p /etc/default/grub /etc/default/grub."${DATE}"
# # Alternatively use "ipv6.disable_ipv6=1".
# if grep -q ipv6.disable /etc/default/grub; then
# sed -i -e '/^GRUB_CMDLINE_LINUX=/s|ipv6.disable=.|ipv6.disable=1|' /etc/default/grub
# else
# sed -i -e '/^GRUB_CMDLINE_LINUX=/s|"$| ipv6.disable=1"|' /etc/default/grub
# fi
# if [ -f /boot/efi/EFI/redhat/grub.cfg ]; then
# grub2-mkconfig -o /boot/efi/EFI/redhat/grub.cfg
# else
# grub2-mkconfig -o /boot/grub2/grub.cfg
# fi
# elif [ "$OSREL" == 6 ]; then
# echo "** kernel module method"
# echo "** Disabling IPv6 kernel module..."
# cat <<EOF >/etc/modprobe.d/cloudera-ipv6.conf
## CLAIRVOYANT
## Tuning for Hadoop installation.
#options ipv6 disable=1
#EOF
# chown root:root /etc/modprobe.d/cloudera-ipv6.conf
# chmod 0644 /etc/modprobe.d/cloudera-ipv6.conf
# echo "** Unloading IPv6 kernel module..."
# rmmod ipv6 &>/dev/null
# fi
echo "** Stopping IPv6 firewall..."
service ip6tables stop
chkconfig ip6tables off
elif [ "$OS" == Debian ] || [ "$OS" == Ubuntu ]; then
echo "** sysctl method"
echo "** Disabling IPv6 kernel configuration..."
# https://wiki.debian.org/DebianIPv6#How_to_turn_off_IPv6
# https://wiki.ubuntu.com/IPv6#Disabling_IPv6
# https://askubuntu.com/questions/440649/how-to-disable-ipv6-in-ubuntu-14-04
if grep -q net.ipv6.conf.all.disable_ipv6 /etc/sysctl.conf; then
sed -i -e '/^net.ipv6.conf.all.disable_ipv6/d' /etc/sysctl.conf
fi
if grep -q net.ipv6.conf.default.disable_ipv6 /etc/sysctl.conf; then
sed -i -e '/^net.ipv6.conf.default.disable_ipv6/d' /etc/sysctl.conf
fi
#if grep -q net.ipv6.conf.lo.disable_ipv6 /etc/sysctl.conf; then
# sed -i -e '/^net.ipv6.conf.lo.disable_ipv6/d' /etc/sysctl.conf
#fi
echo "# Tuning for Hadoop installation." >/etc/sysctl.d/cloudera-ipv6.conf
# shellcheck disable=SC2129
echo "# CLAIRVOYANT" >>/etc/sysctl.d/cloudera-ipv6.conf
echo "net.ipv6.conf.all.disable_ipv6 = 1" >>/etc/sysctl.d/cloudera-ipv6.conf
echo "net.ipv6.conf.default.disable_ipv6 = 1" >>/etc/sysctl.d/cloudera-ipv6.conf
#echo "net.ipv6.conf.lo.disable_ipv6 = 1" >>/etc/sysctl.d/cloudera-ipv6.conf
chown root:root /etc/sysctl.d/cloudera-ipv6.conf
chmod 0644 /etc/sysctl.d/cloudera-ipv6.conf
service procps restart
fi
# https://www.suse.com/support/kb/doc.php?id=7015035
# https://www.suse.com/support/kb/doc/?id=7012111
echo "** After disabling IPv6:"
ip -6 address
exit 0
# Fix any breakage in other applications.
if [ "$OS" == RedHatEnterpriseServer ] || [ "$OS" == CentOS ]; then
if rpm -q postfix >/dev/null; then
echo "** Disabling IPv6 in Postfix..."
cp -p /etc/postfix/main.cf /etc/postfix/main.cf."${DATE}"
#mja needs work : assumes 127.0.0.1
postconf inet_interfaces
postconf -e inet_interfaces=127.0.0.1
service postfix condrestart
fi
elif [ "$OS" == Debian ] || [ "$OS" == Ubuntu ]; then
:
fi
echo "** Disabling IPv6 in /etc/ssh/sshd_config..."
cp -p /etc/ssh/sshd_config /etc/ssh/sshd_config."${DATE}"
sed -e '/# CLAIRVOYANT$/d' \
-e '/^AddressFamily /d' \
-e '/^ListenAddress /d' \
-i /etc/ssh/sshd_config
#mja needs work : assumes 0.0.0.0
cat <<EOF >>/etc/ssh/sshd_config
# Hadoop: Disable IPv6 support # CLAIRVOYANT
AddressFamily inet # CLAIRVOYANT
ListenAddress 0.0.0.0 # CLAIRVOYANT
# Hadoop: Disable IPv6 support # CLAIRVOYANT
EOF
service ssh restart
if [ -f /etc/netconfig ]; then
echo "** Disabling IPv6 in netconfig..."
cp -p /etc/netconfig /etc/netconfig."${DATE}"
sed -e '/inet6/d' -i /etc/netconfig
fi