kubernetes / k8s.io

Code and configuration to manage Kubernetes project infrastructure, including various *.k8s.io sites
https://git.k8s.io/community/sig-k8s-infra
Apache License 2.0
690 stars 786 forks source link

https://pkgs.k8s.io/ does not support ipv6 #6820

Open Martin-Luther opened 2 months ago

Martin-Luther commented 2 months ago

The following command generates curl: (22) The requested URL returned error: 403

curl -fsSL https://pkgs.k8s.io/core:/stable:/v1.30/deb/Release.key
k8s-ci-robot commented 2 months ago

This issue is currently awaiting triage.

SIG Docs takes a lead on issue triage for this website, but any Kubernetes member can accept issues by applying the triage/accepted label.

The triage/accepted label can be added by org members by writing /triage accepted in a comment.

Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes-sigs/prow](https://github.com/kubernetes-sigs/prow/issues/new?title=Prow%20issue:) repository.
Martin-Luther commented 2 months ago

I have found out that myth curl was trying to send an IPv6 request... Which means that https://pkgs.k8s.io does not support IPv6 yet ?

Mean while, I had to do this to solve my issue.

echo 'ipv4' >> ~/.curlrc
niranjandarshann commented 2 months ago

Page related issue https://kubernetes.io/docs/setup/production-environment/tools/kubeadm/install-kubeadm/

niranjandarshann commented 2 months ago

@Martin-Luther Thank you for raising the issue. But here I had tried but it is not triggering such error. Can you Please check Which Ubuntu and deb you are using if you are using older than Debian 12 and Ubuntu 22.04, then you manually need to make directory using sudo mkdir -p -m 755 /etc/apt/keyrings before executing this command. Here i think the error is due to the restriction to use the directory so above command will help you to make directory with access.

If you satisfied all these criteria and still you are facing an issue then check if your network might have a firewall or proxy that is blocking the request so disable it.

else check whether you entered the correct url.

niranjandarshann commented 2 months ago

/kind support /language en

Martin-Luther commented 2 months ago

@Martin-Luther Thank you for raising the issue. But here I had tried but it is not triggering such error. Can you Please check Which Ubuntu and deb you are using if you are using older than Debian 12 and Ubuntu 22.04, then you manually need to make directory using sudo mkdir -p -m 755 /etc/apt/keyrings before executing this command. Here i think the error is due to the restriction to use the directory so above command will help you to make directory with access.

If you satisfied all these criteria and still you are facing an issue then check if your network might have a firewall or proxy that is blocking the request so disable it.

else check whether you entered the correct url.

@niranjandarshann

The issue was solved by forcing curl, apt-get & wget to use ipv4 because my system is ipv6 by default.

I am using Debian 12

No LSB modules are available.
Distributor ID: Debian
Description:    Debian GNU/Linux 12 (bookworm)
Release:    12
Codename:   bookworm
---
Linux fr-km0 6.1.0-17-amd64 kubernetes/website#1 SMP PREEMPT_DYNAMIC Debian 6.1.69-1 (2023-12-30) x86_64 GNU/Linux
neolit123 commented 1 month ago

/retitle https://pkgs.k8s.io/ does not support ipv6

neolit123 commented 1 month ago

moving this to k8s.io for triage, seems like the ipv6 problem should be checked /transfer k8s.io

neolit123 commented 1 month ago

/sig release

ameukam commented 1 month ago

cc @xmudrii

Martin-Luther commented 1 month ago

Hello, After more investigations, it seems like my provider gave me IPv6 addresses that were blocked by GCP. So I could only use IPv4. I have tried with another provider, and things worked just fine with IPv6. Let's say that someone in the same situation finds this ticket; is it possible to say to Kubeadmn, Kubelet & Kubectl to fallback to IPv4 when IPv6 fails ?

xmudrii commented 1 month ago

@Martin-Luther What cloud provider are you using? We have been observing blocked IP addresses from Hetzner; are you using Hetzner by any chance?

Martin-Luther commented 1 month ago

@xmudrii

@Martin-Luther What cloud provider are you using? We have been observing blocked IP addresses from Hetzner; are you using Hetzner by any chance?

As mentioned in my previous message :

After more investigations, it seems like my provider gave me IPv6 addresses that were blocked by GCP

I am @ Gandi, and seriously thinking about moving to Digital Ocean or Hostinger if they allow me o add additional volumes ...