bundles/radvd: introduce, add to home.router

bundles/radvd/files/ip-down

@@ -0,0 +1,3 @@
+#!/bin/bash
+
+systemctl stop radvd

bundles/radvd/files/ip-up

@@ -0,0 +1,3 @@
+#!/bin/bash
+
+systemctl start radvd

bundles/radvd/files/radvd.conf

@@ -0,0 +1,16 @@
+% for interface, config in sorted(interfaces.items()):
+interface ${interface}
+{
+    AdvSendAdvert on;
+    prefix ${config.get('prefix', '::/64')}
+    {
+        AdvOnLink on;
+        AdvAutonomous on;
+        AdvRouterAddr on;
+    };
+    RDNSS ${' '.join(sorted(config['rdnss']))}
+    {
+        AdvRDNSSLifetime 900;
+    };
+};
+% endfor

bundles/radvd/items.py

@@ -0,0 +1,36 @@
+if node.metadata.get('radvd', {}).get('integrate-with-pppd', False):
+    files['/etc/ppp/ip-up.d/radvd'] = {
+        'source': 'ip-up',
+        'mode': '0755',
+    }
+    files['/etc/ppp/ip-down.d/radvd'] = {
+        'source': 'ip-down',
+        'mode': '0755',
+    }
+
+    # Will be started and stopped by pppd.
+    should_be_running = None
+    should_be_enabled = False
+else:
+    should_be_running = True
+    should_be_enabled = True
+
+files['/etc/radvd.conf'] = {
+    'content_type': 'mako',
+    'context': {
+        'interfaces': node.metadata['radvd']['interfaces'],
+    },
+    'triggers': {
+        'svc_systemd:radvd:restart',
+    },
+}
+
+svc_systemd = {
+    'radvd': {
+        'running': should_be_running,
+        'enabled': should_be_enabled,
+        'needs': {
+            'file:/etc/radvd.conf',
+        },
+    },
+}

bundles/radvd/metadata.py

@@ -0,0 +1,7 @@
+defaults = {
+    'apt': {
+        'packages': {
+            'radvd': {},
+        },
+    },
+}

nodes/home/router.py

@@ -5,6 +5,7 @@ nodes['home.router'] = {
     'bundles': {
         'iptables',
         'pppd',
+        'radvd',
         'dhcpd',
         'wide-dhcp6c',
     },
@@ -46,6 +47,17 @@ nodes['home.router'] = {
         'nameservers': atomic({
             '9.9.9.10',
         }),
+        'radvd': {
+            'integrate-with-pppd': True,
+            'interfaces': {
+                'enp1s0.42': {
+                    'rdnss': {
+                        '2001:4860:4860::8888',
+                        '2001:4860:4860::8844',
+                    },
+                },
+            },
+        },
         'pppd': {
             'username': vault.decrypt('encrypt$gAAAAABfruZ5AZbgJ3mfMLWqIMx8o4bBRMJsDPD1jElh-vWN_gnhiuZVjrQ1-7Y6zDXNkxXiyhx8rxc2enmvo26axd7EBI8FqknCptXAPruVtDZrBCis4TE='),
             'password': vault.decrypt('encrypt$gAAAAABfruaXEDkaFksFMU8g97ydWyJF8p2KcSDJJBlzaOLDsLL6oCDYjG1kMPVESOzqjn8ThtSht1uZDuMCstA-sATmLS-EWQ=='),