fix: strip IPv6 http_port listeners when IPv6 is disabled in Squid container by Copilot · Pull Request #2203 · github/gh-aw-firewall

Copilot · 2026-04-24T20:18:15Z

On Docker daemons with ipv6: false (the default on most Linux distros), Squid aborts with FATAL: http_port: IPv6 is not available because Docker injects net.ipv6.conf.all.disable_ipv6=1 into the container network namespace and Squid treats the http_port [::]:3128 directive as fatal during config parse — before opening any log files.

Changes

containers/squid/entrypoint.sh: Before starting Squid, probe /proc/sys/net/ipv6/conf/all/disable_ipv6. If IPv6 is disabled, strip all http_port [::]: lines from /etc/squid/squid.conf via sed so Squid starts normally. The dual-stack listener is preserved on hosts where IPv6 is available.

IPV6_DISABLED="$(cat /proc/sys/net/ipv6/conf/all/disable_ipv6 2>/dev/null || echo 1)"
if [ "$IPV6_DISABLED" = "1" ]; then
  sed -i '/^http_port \[::\]:/d' /etc/squid/squid.conf
fi

This handles both the plain-proxy and SSL-bump port configs, which both emit http_port [::]:3128 unconditionally from src/squid-config.ts.

…ntainer

github-actions · 2026-04-24T22:38:58Z

🔥 Smoke Test: Copilot BYOK (Offline) — PASS

Test	Result
GitHub MCP (latest merged PR: #2200 "feat(api-proxy): add startup API key validation")	✅
GitHub.com connectivity	✅
File write/read (`smoke-test-copilot-byok-24910109126.txt`)	✅
BYOK inference (agent → api-proxy → api.githubcopilot.com)	✅

Running in BYOK offline mode (COPILOT_OFFLINE=true) via api-proxy → api.githubcopilot.com.

Overall: PASS · Author: @app/copilot-swe-agent · Assignees: @lpcox, @Copilot

🔑 BYOK report filed by Smoke Copilot BYOK

github-actions · 2026-04-24T22:39:07Z

Smoke Test Results:

✅ GitHub MCP: Last 2 merged PRs retrieved (#2200, #2183)
✅ Playwright: github.com page title verified
✅ File Writing: Test file created successfully
✅ Bash Verification: File content confirmed

Overall: PASS

💥 [THE END] — Illustrated by Smoke Claude

Copilot

Pull request overview

This PR aims to prevent the Squid container from failing at startup on Docker daemons with IPv6 disabled by removing IPv6 http_port [::]:... listeners from squid.conf at container startup when IPv6 is unavailable.

Changes:

Detect IPv6 availability in the Squid container via /proc/sys/net/ipv6/conf/all/disable_ipv6.
When IPv6 is disabled, edit /etc/squid/squid.conf to remove IPv6 http_port [::]:... listeners before launching Squid.

Show a summary per file

File	Description
containers/squid/entrypoint.sh	Adds an IPv6-disabled probe and attempts to strip IPv6 `http_port` listeners from squid.conf prior to starting Squid.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 1/1 changed files
Comments generated: 1

Copilot · 2026-04-24T22:39:12Z

+IPV6_DISABLED="$(cat /proc/sys/net/ipv6/conf/all/disable_ipv6 2>/dev/null || echo 1)"
+if [ "$IPV6_DISABLED" = "1" ]; then
+  echo "[squid-entrypoint] IPv6 is disabled in this namespace - removing http_port [::]: listeners to prevent fatal startup error"
+  sed -i '/^http_port \[::\]:/d' /etc/squid/squid.conf


The sed deletion only removes a single http_port [::]:... line. In SSL Bump mode, the generated squid.conf has an IPv6 http_port [::]:3128 ssl-bump \\ line followed by indented continuation lines (cert=..., key=..., etc.); deleting just the http_port line would leave those continuation lines behind and break config parsing. Also, the SSL-bump http_port [::]:... line in the generated config is prefixed by whitespace, so the current ^http_port anchor likely won’t match and won’t prevent the original fatal error. Update the removal logic to (1) match optional leading whitespace and (2) remove the entire multi-line stanza for IPv6 http_port directives (the header line plus its continuation lines).

Suggested change

sed -i '/^http_port \[::\]:/d' /etc/squid/squid.conf

tmp_conf="$(mktemp)"

awk '

skip && /^[[:space:]]+/ { next }

skip { skip = 0 }

/^[[:space:]]*http_port \[::\]:/ { skip = 1; next }

{ print }

' /etc/squid/squid.conf > "$tmp_conf"

mv "$tmp_conf" /etc/squid/squid.conf

github-actions · 2026-04-24T22:39:25Z

🔥 Smoke Test Results

Test	Status
GitHub MCP (list merged PRs)	✅
GitHub.com connectivity (HTTP 200)	✅
File write/read	⚠️ (template vars not substituted)

Overall: PASS ✅

PR: "fix: strip IPv6 http_port listeners when IPv6 is disabled in Squid container" — author @app/copilot-swe-agent, assignees @lpcox @Copilot

📰 BREAKING: Report filed by Smoke Copilot

github-actions · 2026-04-24T22:40:01Z

Smoke test results (run 24910109124)
PR titles: feat(api-proxy): add startup API key validation
PR titles: fix: check binary existence for gh-aw install instead of gh aw --version
GitHub PR queries: ✅
Playwright GitHub title: ✅
Tavily web search: ❌ (tool unavailable in this environment)
File write/read via bash: ✅
Discussion oracle comment: ✅
Build (npm ci && npm run build): ✅
Overall status: FAIL

Warning

⚠️ Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "registry.npmjs.org"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex

github-actions · 2026-04-24T22:40:13Z

Chroot Version Comparison Results

Runtime	Host Version	Chroot Version	Match?
Python	Python 3.12.13	Python 3.12.3	❌ NO
Node.js	v24.14.1	v20.20.2	❌ NO
Go	go1.22.12	go1.22.12	✅ YES

Result: Not all tests passed. Python and Node.js versions differ between host and chroot. Go matches.

Tested by Smoke Chroot

github-actions · 2026-04-24T22:40:43Z

Smoke Test Results: GitHub Actions Services Connectivity

Check	Result
Redis `PING` (host.docker.internal:6379)	❌ Failed — `redis-cli` not available; port unreachable (timeout)
PostgreSQL `pg_isready` (host.docker.internal:5432)	❌ Failed — no response (timeout)
PostgreSQL `SELECT 1` via `psql`	❌ Failed — port unreachable

Summary: All 3 checks failed. host.docker.internal resolves to 172.17.0.1 but both ports 6379 and 5432 timed out. The redis-cli tool was also unavailable (package manager non-functional in this sandbox). The GitHub Actions service containers do not appear to be reachable from this environment.

🔌 Service connectivity validated by Smoke Services

github-actions · 2026-04-24T22:41:21Z

🏗️ Build Test Suite Results

Ecosystem	Project	Build/Install	Tests	Status
Bun	elysia	✅	1/1 passed	✅ PASS
Bun	hono	✅	1/1 passed	✅ PASS
C++	fmt	✅	N/A	✅ PASS
C++	json	✅	N/A	✅ PASS
Deno	oak	N/A	1/1 passed	✅ PASS
Deno	std	N/A	1/1 passed	✅ PASS
.NET	hello-world	✅	N/A	✅ PASS
.NET	json-parse	✅	N/A	✅ PASS
Go	color	✅	1/1 passed	✅ PASS
Go	env	✅	1/1 passed	✅ PASS
Go	uuid	✅	1/1 passed	✅ PASS
Java	gson	✅	1/1 passed	✅ PASS
Java	caffeine	✅	1/1 passed	✅ PASS
Node.js	clsx	✅	All passed	✅ PASS
Node.js	execa	✅	All passed	✅ PASS
Node.js	p-limit	✅	All passed	✅ PASS
Rust	fd	✅	1/1 passed	✅ PASS
Rust	zoxide	✅	1/1 passed	✅ PASS

Overall: 8/8 ecosystems passed — ✅ PASS

Generated by Build Test Suite for issue #2203 · ● 486.8K · ◷

Initial plan

6fd9372

Copilot AI assigned Copilot and lpcox Apr 24, 2026

Copilot started work on behalf of lpcox April 24, 2026 20:18 View session

Copilot AI linked an issue Apr 24, 2026 that may be closed by this pull request

Squid aborts with "FATAL: http_port: IPv6 is not available" on runners with IPv6 disabled on the Docker daemon #2139

Closed

fix: strip IPv6 http_port listeners when IPv6 is disabled in Squid co…

c819438

…ntainer

Copilot AI changed the title ~~[WIP] Fix squid start failure due to IPv6 not available~~ fix: strip IPv6 http_port listeners when IPv6 is disabled in Squid container Apr 24, 2026

Copilot finished work on behalf of lpcox April 24, 2026 20:22

Copilot AI requested a review from lpcox April 24, 2026 20:22

lpcox marked this pull request as ready for review April 24, 2026 22:35

lpcox requested a review from Mossaka as a code owner April 24, 2026 22:35

Copilot AI review requested due to automatic review settings April 24, 2026 22:36

Copilot started reviewing on behalf of lpcox April 24, 2026 22:36 View session

github-actions Bot added the smoke-copilot-byok label Apr 24, 2026

github-actions Bot added the smoke-claude label Apr 24, 2026

Copilot AI reviewed Apr 24, 2026

View reviewed changes

github-actions Bot added the smoke-copilot label Apr 24, 2026

github-actions Bot mentioned this pull request Apr 24, 2026

[aw] No-Op Runs #2151

Open

github-actions Bot added the build-test label Apr 24, 2026

lpcox merged commit 57205bc into main Apr 25, 2026
69 of 73 checks passed

lpcox deleted the copilot/fix-ipv6-availability-issue branch April 25, 2026 00:33

github-actions Bot mentioned this pull request Apr 25, 2026

chore: upgrade agentic workflows from v0.69.3 to v0.71.1 #2204

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix: strip IPv6 http_port listeners when IPv6 is disabled in Squid container#2203

fix: strip IPv6 http_port listeners when IPv6 is disabled in Squid container#2203
lpcox merged 2 commits intomainfrom
copilot/fix-ipv6-availability-issue

Copilot AI commented Apr 24, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Apr 24, 2026

Uh oh!

github-actions Bot commented Apr 24, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Apr 24, 2026

Uh oh!

github-actions Bot commented Apr 24, 2026

Uh oh!

github-actions Bot commented Apr 24, 2026

Uh oh!

github-actions Bot commented Apr 24, 2026

Uh oh!

github-actions Bot commented Apr 24, 2026

Uh oh!

github-actions Bot commented Apr 24, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

-  sed -i '/^http_port \[::\]:/d' /etc/squid/squid.conf
+  tmp_conf="$(mktemp)"
+  awk '
+    skip && /^[[:space:]]+/ { next }
+    skip { skip = 0 }
+    /^[[:space:]]*http_port \[::\]:/ { skip = 1; next }
+    { print }
+  ' /etc/squid/squid.conf > "$tmp_conf"
+  mv "$tmp_conf" /etc/squid/squid.conf

Conversation

Copilot AI commented Apr 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changes

Uh oh!

github-actions Bot commented Apr 24, 2026

🔥 Smoke Test: Copilot BYOK (Offline) — PASS

Uh oh!

github-actions Bot commented Apr 24, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

Copilot AI Apr 24, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Apr 24, 2026

🔥 Smoke Test Results

Uh oh!

github-actions Bot commented Apr 24, 2026

Uh oh!

github-actions Bot commented Apr 24, 2026

Chroot Version Comparison Results

Uh oh!

github-actions Bot commented Apr 24, 2026

Smoke Test Results: GitHub Actions Services Connectivity

Uh oh!

github-actions Bot commented Apr 24, 2026

🏗️ Build Test Suite Results

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Copilot AI commented Apr 24, 2026 •

edited

Loading