fix(docker): disable IPv6 on the gateway network #515

Merged
didericis merged 1 commits from fix-gateway-disable-ipv6 into main 2026-07-26 18:33:53 -04:00

1 Commits

Author SHA1 Message Date
didericis-claude 592949d6cd fix(docker): disable IPv6 on the gateway network
prd-number-check / require-numbered-prds (pull_request) Successful in 7s
lint / lint (push) Successful in 1m1s
test / unit (pull_request) Successful in 46s
test / integration-docker (pull_request) Successful in 1m5s
test / coverage (pull_request) Successful in 20s
tracker-policy-pr / check-pr (pull_request) Successful in 7s
On a docker daemon that default-enables IPv6 (default-address-pools),
creating the gateway network with only `--subnet` lets the daemon also
attach an fdd0::/64 IPv6 subnet. Its gateway is stored as `::1/64`,
which trips docker's own netip.ParseAddr in `network inspect`/`ls`:

  ParseAddr("fdd0:0:0:6::1/64"): unexpected character, want colon

That poisons every `_network_cidr`/`network ls` read and fails the
docker integration suite intermittently (whichever run the runner's
IPv6 pool index lands on a broken network). bot-bottle attribution
pins IPv4 source IPs and has no IPv6 support, so pass `--ipv6=false`
explicitly at network create to keep the gateway network IPv4-only
regardless of the daemon default.

Note: an already-poisoned runner still needs a one-time
`docker network rm bot-bottle-gateway` (and possibly a daemon
restart) to clear the malformed network.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-26 22:30:59 +00:00