From fa0743a28ba3285b9f766eb9d9464c83e530d5cd Mon Sep 17 00:00:00 2001
From: Ryan Yin <xiaoyin_c@qq.com>
Date: Wed, 23 Sep 2026 22:28:35 +0800
Subject: [PATCH 1/2] fix(k3s): disable temporary IPv6 addresses in test VMs

---
 lib/genMicrovmGuestModule.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lib/genMicrovmGuestModule.nix b/lib/genMicrovmGuestModule.nix
index f2cc5489..12305396 100644
--- a/lib/genMicrovmGuestModule.nix
+++ b/lib/genMicrovmGuestModule.nix
@@ -84,6 +84,8 @@ in
     inherit hostName;
     networkmanager.enable = false;
     useDHCP = false;
+    # Keep node IPv6 addresses stable for Cilium across agent restarts.
+    tempAddresses = "disabled";
   };
   networking.useNetworkd = true;
   systemd.network.enable = true;

From f357569d3219520c3c63f12bf8e5bd90ffc582b7 Mon Sep 17 00:00:00 2001
From: Ryan Yin <xiaoyin_c@qq.com>
Date: Wed, 23 Sep 2026 23:05:53 +0800
Subject: [PATCH 2/2] fix(k3s): disable IPv6 privacy on guest NICs

---
 lib/genMicrovmGuestModule.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/genMicrovmGuestModule.nix b/lib/genMicrovmGuestModule.nix
index 12305396..f7f5c7b2 100644
--- a/lib/genMicrovmGuestModule.nix
+++ b/lib/genMicrovmGuestModule.nix
@@ -98,6 +98,7 @@ in
       DNS = [ proxyGateway ];
       DHCP = "ipv6";
       IPv6AcceptRA = true;
+      IPv6PrivacyExtensions = false;
       LinkLocalAddressing = "ipv6";
     };
     routes = [