common: valid hex IPv6 stable-secret written before addr_gen_mode, sysctl reload only of the role files

2026-11-07 19:23:51 +00:00
parent 975beccf50
commit cc9cc6d34f
2 changed files with 13 additions and 9 deletions
@@ -1,5 +1,12 @@
+# Only the files of this role that exist: in a container the distribution files hold keys that
+# are not writable there, and sysctl --system fails on them.
 - name: reload_sysctl
-  command: sysctl --system
+  shell: >-
+    cd /etc/sysctl.d && sysctl -p $(ls
+    ip-forwarding.conf
+    ipv6-slaac-address-generation.conf
+    ipv6-slaac-override.conf
+    tcp-bbr.conf 2>/dev/null)

 - name: restart_journald
  systemd: