Replace slirp4netns with pasta as the rootless Docker network driver. slirp4netns lacks outgoing IPv6 support (known limitation), causing runner containers to fail with "network is unreachable" when resolving hostnames to IPv6 addresses.
Add systemd user override for rootless Docker with pasta net driver, implicit port driver, and --ipv6 flag
Enable IPv6 in daemon.json with ULA subnet (fd00:dead:beef::/48)
Add docker_rootless_net_driver and docker_ipv6_cidr variables
Update architecture docs
Test plan
Unit tests pass (203 passed, 100% coverage)
ansible-lint passes
Pre-commit hooks pass
Molecule tests
Manual: deploy to a runner VM and verify docker pull works with IPv6
Closes GRM-144
## Summary
Replace slirp4netns with pasta as the rootless Docker network driver. slirp4netns lacks outgoing IPv6 support (known limitation), causing runner containers to fail with "network is unreachable" when resolving hostnames to IPv6 addresses.
## Changes
- Install passt package alongside slirp4netns (fallback)
- Add systemd user override for rootless Docker with pasta net driver, implicit port driver, and --ipv6 flag
- Enable IPv6 in daemon.json with ULA subnet (fd00:dead:beef::/48)
- Add docker_rootless_net_driver and docker_ipv6_cidr variables
- Update architecture docs
## Test plan
- [x] Unit tests pass (203 passed, 100% coverage)
- [x] ansible-lint passes
- [x] Pre-commit hooks pass
- [ ] Molecule tests
- [ ] Manual: deploy to a runner VM and verify docker pull works with IPv6
Closes GRM-144
Auto-merge: If all CI checks pass, this PR will be merged automatically.
## Automated PR Review
- Architecture compliance: OK
- Best practices: OK
- Security: OK
- i18n: OK
- Resource management: OK
- Documentation: OK
- Tests: OK
- Commit conventions: OK
No issues found by automated checks.
---
**Auto-merge:** If all CI checks pass, this PR will be merged automatically.
kireto
approved these changes 2026-07-12 01:12:39 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
emil
kireto
Summary
Replace slirp4netns with pasta as the rootless Docker network driver. slirp4netns lacks outgoing IPv6 support (known limitation), causing runner containers to fail with "network is unreachable" when resolving hostnames to IPv6 addresses.
Changes
Test plan
Closes GRM-144
9b1748c7a8tocd10156308Automated PR Review
No issues found by automated checks.
Auto-merge: If all CI checks pass, this PR will be merged automatically.
Auto-approved: all CI checks passed (quality, molecule, pr-review, pre-merge-check).