IPv6 is disabled on my VPS. Installer works fine if I say 'no' to starting the containers. If I say 'yes' then it gives me an error about the ipv6 portion because it's not available on my VPS. This also halts the installer so you never get asked about anything after this point like Crowdsec. I did originally comment out the IPv6 portion of the compose file and everything worked fine, I just realized after that it never did actually finish the installer. I tried it again just to be sure and then moved onto inputting 'no'.
=== Starting installation ===
Would you like to install and start the containers? (yes/no) (default: yes): yes
Pulling the container images...
[+] Pulling 3/3
✔ pangolin Pulled 0.1s
✔ gerbil Pulled 0.2s
✔ traefik Pulled 0.1s
Starting containers...
[+] Running 1/1
✘ Network pangolin Error 0.0s
failed to create network pangolin: Error response from daemon: Cannot read IPv6 setup for bridge br-9b656c609139: open /proc/sys/net/ipv6/conf/br-9b656c609139/disable_ipv6: no such file or directory
Error: failed to start containers: exit status 1
After inputting 'no':
=== Starting installation ===
Would you like to install and start the containers? (yes/no) (default: yes): no
=== CrowdSec Install ===
Would you like to install CrowdSec? (yes/no) (default: no): yes
This installer constitutes a minimal viable CrowdSec deployment. CrowdSec will add extra complexity to your Pangolin installation and may not work to the best of its abilities out of the box. Users are expected to implement configuration adjustments on their own to achieve the best security posture. Consult the CrowdSec documentation for detailed configuration instructions.
Are you willing to manage CrowdSec? (yes/no) (default: no): yes
Stopping containers...
Installation complete!
To complete the initial setup, please visit:
https://domain/auth/initial-setup
Originally created by @djlobster on GitHub (Jul 31, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/1184
Originally assigned to: @Xentrice on GitHub.
IPv6 is disabled on my VPS. Installer works fine if I say 'no' to starting the containers. If I say 'yes' then it gives me an error about the ipv6 portion because it's not available on my VPS. This also halts the installer so you never get asked about anything after this point like Crowdsec. I did originally comment out the IPv6 portion of the compose file and everything worked fine, I just realized after that it never did actually finish the installer. I tried it again just to be sure and then moved onto inputting 'no'.
```
=== Starting installation ===
Would you like to install and start the containers? (yes/no) (default: yes): yes
Pulling the container images...
[+] Pulling 3/3
✔ pangolin Pulled 0.1s
✔ gerbil Pulled 0.2s
✔ traefik Pulled 0.1s
Starting containers...
[+] Running 1/1
✘ Network pangolin Error 0.0s
failed to create network pangolin: Error response from daemon: Cannot read IPv6 setup for bridge br-9b656c609139: open /proc/sys/net/ipv6/conf/br-9b656c609139/disable_ipv6: no such file or directory
Error: failed to start containers: exit status 1
```
After inputting 'no':
```
=== Starting installation ===
Would you like to install and start the containers? (yes/no) (default: yes): no
=== CrowdSec Install ===
Would you like to install CrowdSec? (yes/no) (default: no): yes
This installer constitutes a minimal viable CrowdSec deployment. CrowdSec will add extra complexity to your Pangolin installation and may not work to the best of its abilities out of the box. Users are expected to implement configuration adjustments on their own to achieve the best security posture. Consult the CrowdSec documentation for detailed configuration instructions.
Are you willing to manage CrowdSec? (yes/no) (default: no): yes
Stopping containers...
Installation complete!
To complete the initial setup, please visit:
https://domain/auth/initial-setup
```
This is caused by my pull request #1111
Damn, i was sure i tested everything.
I will create a pull request shortly making the IPv6 optional during installation. I didn't think this was necessary.
Which VPS and OS are you using?
<!-- gh-comment-id:3145041140 -->
@Xentrice commented on GitHub (Aug 1, 2025):
This is caused by my pull request #1111
Damn, i was sure i tested everything.
I will create a pull request shortly making the IPv6 optional during installation. I didn't think this was necessary.
Which VPS and OS are you using?
I'm using a Netcup VPS with Ubuntu 24.04.2 LTS. I can use IPv6 with my VPS, but I've manually disabled it in the OS and that's why this happened. Would it be easy to put a check in the installer to see if IPv6 is enabled or not and skip that part of the compose file if it's not? Everything works fine as long as I don't try to start the container during install and then remove the IPv6 part of the compose file after the installer finishes.
<!-- gh-comment-id:3145218571 -->
@djlobster commented on GitHub (Aug 1, 2025):
I'm using a Netcup VPS with Ubuntu 24.04.2 LTS. I _can_ use IPv6 with my VPS, but I've manually disabled it in the OS and that's why this happened. Would it be easy to put a check in the installer to see if IPv6 is enabled or not and skip that part of the compose file if it's not? Everything works fine as long as I don't try to start the container during install and then remove the IPv6 part of the compose file after the installer finishes.
@oschwartz10612 commented on GitHub (Aug 1, 2025):
Thanks for taking point @Xentrice !
Did you hard disable in /etc/sysctl.conf? That would make sense if docker is complaining.
<!-- gh-comment-id:3145254681 -->
@oschwartz10612 commented on GitHub (Aug 1, 2025):
Thanks for taking point @Xentrice !
Did you hard disable in `/etc/sysctl.conf`? That would make sense if docker is complaining.
This is very interesting, provisioning an IPv6 capable server and disabling IPv6 afterwards in the OS is something I specifically tested without problem, although on a hetzner VPS with Debian 12. How did you disable IPv6?
Automatically checking for IPv6 during install could be done ofc, but I'm not sure how to ensure that all edge cases and different distributions are considered as well.
I feel like asking the user during install is the safest bet for now.
<!-- gh-comment-id:3145256028 -->
@Xentrice commented on GitHub (Aug 1, 2025):
This is very interesting, provisioning an IPv6 capable server and disabling IPv6 afterwards in the OS is something I specifically tested without problem, although on a hetzner VPS with Debian 12. How did you disable IPv6?
Automatically checking for IPv6 during install could be done ofc, but I'm not sure how to ensure that all edge cases and different distributions are considered as well.
I feel like asking the user during install is the safest bet for now.
<!-- gh-comment-id:3145315476 -->
@djlobster commented on GitHub (Aug 1, 2025):
I have `/etc/sysctl.d/99-disable-ipv6.conf` set with:
```
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1
```
and in `/etc/default/grub` I have:
```
GRUB_CMDLINE_LINUX="ipv6.disable=1"
```
Ubuntu 24 CIS disabled ipv6 as well. I encountered an issue with it on install, but changing the ipv6 to false under networks seems to get things moving again.
<!-- gh-comment-id:3162261853 -->
@crookshanked commented on GitHub (Aug 7, 2025):
Ubuntu 24 CIS disabled ipv6 as well. I encountered an issue with it on install, but changing the ipv6 to false under networks seems to get things moving again.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Originally created by @djlobster on GitHub (Jul 31, 2025).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/1184
Originally assigned to: @Xentrice on GitHub.
IPv6 is disabled on my VPS. Installer works fine if I say 'no' to starting the containers. If I say 'yes' then it gives me an error about the ipv6 portion because it's not available on my VPS. This also halts the installer so you never get asked about anything after this point like Crowdsec. I did originally comment out the IPv6 portion of the compose file and everything worked fine, I just realized after that it never did actually finish the installer. I tried it again just to be sure and then moved onto inputting 'no'.
After inputting 'no':
@Xentrice commented on GitHub (Aug 1, 2025):
This is caused by my pull request #1111
Damn, i was sure i tested everything.
I will create a pull request shortly making the IPv6 optional during installation. I didn't think this was necessary.
Which VPS and OS are you using?
@djlobster commented on GitHub (Aug 1, 2025):
I'm using a Netcup VPS with Ubuntu 24.04.2 LTS. I can use IPv6 with my VPS, but I've manually disabled it in the OS and that's why this happened. Would it be easy to put a check in the installer to see if IPv6 is enabled or not and skip that part of the compose file if it's not? Everything works fine as long as I don't try to start the container during install and then remove the IPv6 part of the compose file after the installer finishes.
@oschwartz10612 commented on GitHub (Aug 1, 2025):
Thanks for taking point @Xentrice !
Did you hard disable in
/etc/sysctl.conf? That would make sense if docker is complaining.@Xentrice commented on GitHub (Aug 1, 2025):
This is very interesting, provisioning an IPv6 capable server and disabling IPv6 afterwards in the OS is something I specifically tested without problem, although on a hetzner VPS with Debian 12. How did you disable IPv6?
Automatically checking for IPv6 during install could be done ofc, but I'm not sure how to ensure that all edge cases and different distributions are considered as well.
I feel like asking the user during install is the safest bet for now.
@djlobster commented on GitHub (Aug 1, 2025):
I have
/etc/sysctl.d/99-disable-ipv6.confset with:and in
/etc/default/grubI have:@crookshanked commented on GitHub (Aug 7, 2025):
Ubuntu 24 CIS disabled ipv6 as well. I encountered an issue with it on install, but changing the ipv6 to false under networks seems to get things moving again.
@oschwartz10612 commented on GitHub (Aug 8, 2025):
Hopefully fixed by #1212