LXC IPv6 HE.net tunnel using sit module

[CanadaGuy]

I've been trying to configure a site tunnel to HE.net on an Almalinux 9.1 container. I get the following message:

modprobe: FATAL: Module ipv6 not found in directory /lib/modules/5.15.83-1-pve
add tunnel "sit0" failed: No such device

will loading with "modprobe sit" load the appropriate module? Will that interfere with any other PVE functionality?

I noticed someone did a privileged container and it worked, but I'd like to avoid that if possible.

 

[Stoiko Ivanov]

LXC containers share the kernel with the physical PVE node - and you cannot (for security reasons) load kernel modules inside those containers.

One option I'd try is to load the sit module on the host and then see if the setup works.

If this does not help please share the howto/tutorial you're following (It's odd that it tries to load a module (ipv6), which is (from a quick glance) compiled in the kernel ....

I hope this helps!

 

[CanadaGuy]

LXC containers share the kernel with the physical PVE node - and you cannot (for security reasons) load kernel modules inside those containers.

One option I'd try is to load the sit module on the host and then see if the setup works.

If this does not help please share the howto/tutorial you're following (It's odd that it tries to load a module (ipv6), which is (from a quick glance) compiled in the kernel ....

I hope this helps!

thanks! Yes, I tried doing "modprobe sit" and it loaded right up and the sit interface commands worked inside the container. I was just a bit nervous using modprobe as I've done very little poking at the kernel, even things as simple as this.

For reference, this is the recommended "script" from the Hurricane Electric tunnel broker:

modprobe ipv6
ip tunnel add he-ipv6 mode sit remote 216.66.38.58 local <local ip> ttl 255
ip link set he-ipv6 up
ip addr add <my tunnel ip>/64 dev he-ipv6
ip route add ::/0 dev he-ipv6
ip -f inet6 addr

I realized after some googling that the modprobe was largely redundant these days as I knew the IPv6 core (with link local addresses and things) were fine.