sys-apps/openrc's sysctl init script as seen in URL has "keyword -openvz", which disables the sysctl service on OpenVZ containers. This is not necessary, as OpenVZ supports setting values in the container which are different from the host. In my case this leaves the default for net.ipv6.conf.all.forwarding to 1 (with no standard way to fix it), which is unlikely to be useful in most containers. Reproducible: Always
This is fixed in git, commit b2e9b9. Thanks for the report.
