aboutsummaryrefslogtreecommitdiffstats
path: root/recipes-networking
AgeCommit message (Collapse)Author
2022-04-20openvswitch: uprev from v2.17.0-30-g2404d4536 to v2.17.1He Zhe
commits short log: 41bb202fb (tag: v2.17.1) Set release date for 2.17.1. 8f42d4f59 NEWS: Highlight libopenvswitch API change caused by UB fixes. 14301b3a3 netdev-offload-tc: Check for ct_state flag combinations that are not offloadable. 3a2eef792 python: idl: Set cond_changed to true if condition change requested. d05ccf288 dpif-netdev: Fix dp_netdev_get_pmd() function getting correct core_id. 79e291f98 alb.at: Add tests for cross-numa polling. 9c3b74fb2 dpif-netdev: Fix PMD auto load balance with pmd-rxq-isolate. 8580ff9dd pmd.at: Add tests for multi non-local numa pmds. 6bf4eeddb dpif-netdev: Fix non-local numa selection for more than two numas. c41434b3b dpif-netdev: Fix typo in function name. e0aa5e132 python: idl: Set cond_changed to false if last id is zero. 8da40d31c ofproto-dpif-xlate: Fix NULL pointer dereference in xlate_normal(). 63a903ab4 ofproto/ofproto-dpif: Fix dpif_type for userspace tunnels. 14d54eb8b sset: add SHORT version of SAFE loop macros. f0e63b115 sparse: bump recommended version and include headers. 70b87cf72 idlc: support short version of SAFE macros. 3777ed90c rculist: use multi-variable helpers for loop macros. bb52e9beb hindex: remove the next variable in safe loops. 7d6cbfa24 hindex: use multi-variable iterators. 97ad96b63 cmap: use multi-variable iterators. cd62fda22 hmap: use short version of safe loops if possible. d56bfd752 hmap: implement UB-safe hmap pop iterator. e2c835486 hmap: use multi-variable helpers for hmap loops. 897d6647e list: use short version of safe loops if possible. 979a9eb5b list: use multi-variable helpers for list loops. 6bacf802c util: add helpers to overload SAFE macro. f127123d6 util: add safe multi-variable iterators. 38e73f0b6 util: add multi-variable loop iterator macros. e91edf456 ovsdb: raft: Fix inability to read the database with DNS host names. The ptest results BEFORE uprev: ERROR: 2340 tests were run, 30 failed unexpectedly. 65 tests were skipped. failed cases: 10 11 12 13 14 15 16 17 18 462 769 785 786 787 788 791 792 793 1024 1180 1181 1182 1183 1184 1185 1290 1291 2387 2391 2394 The ptest results AFTER uprev: ERROR: 2343 tests were run, 30 failed unexpectedly. 65 tests were skipped. failed cases: 10 11 12 13 14 15 16 17 18 462 769 785 786 787 788 791 792 793 1025 1183 1184 1185 1186 1187 1188 1293 1294 2390 2394 2397 Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-11cni: fix protocol argument typoBruce Ashfield
The newly added flannel_plugin had a typo of protcol, so we add our missing 'o' and fix the uri parameter. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-04-08cni: add flannel plugin from separate repositoryBruce Ashfield
We have flannel users! It was noted that flannel is no longer part of the main cni-plugins repo, but is instead hosted in a standalone location. We add the new repository, its SRCREV and drop it back where it can be built and packaged in the same way as it previously was. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-29slirp: update to 4.6.1-latestBruce Ashfield
Bumping libslirp to version v4.6.1-55-g888ddad, which comprises the following commits: 888ddad Add sanitizers CI runs 55d498c socket: Handle ECONNABORTED from recv Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-28ovs: update to v2.17.0Bruce Ashfield
Along with patch refreshes, and a drop since it is now upstream .. Bumping ovs to version v2.17.0-30-g2404d4536, which comprises the following commits: 2404d4536 system-traffic.at: Fix flaky DNAT load balancing test. 6b8adfdd8 dpif-netdev: Keep orig_in_port as a field of the flow. 6098b7f25 tests: Fix incorrect usage of OVS_WAIT_UNTIL. cf9018d37 odp-util: Fix output for tc to be equal to kernel. 992de2406 netdev-offload-tc: Fix IP and port ranges in flower returns. 7e26796c0 netdev-offload-tc: Fix use of ICMP values instead of masks defines. e319e2706 netdev-offload-tc: Always include conntrack information to tc. 51ef81ad7 netdev-offload-tc: Check for valid netdev ifindex in flow_put. 974253dc2 netdev-offload-tc: Set the correct VLAN_VID and VLAN_PCP masks. c43c159ae netdev-offload-tc: Add debug logs on tc rule verify failures. d34622a03 tc: Keep header rewrite actions order. 5255713d1 faq: Update OVS/DPDK version table for OVS 2.15/2.16 05cf36a62 system-dpdk: Fix mfex autovalidator tests. 87540e3b9 ofp-prop: Silence the 'may be uninitialized' warning. 812164ade tests: Ignore log about failing to set NETLINK_EXT_ACK. ae51ccc12 ovsdb-cluster.at: Avoid test failures due to different hashing. f33cde23c ofproto: Use xlate map for uuid lookups. 6ac255496 ofproto: Add refcount to ofproto to fix ofproto use-after-free. db0cc8be3 ofproto-dpif: Trigger revalidation when ipfix config set. 31b86e5c9 conntrack: Prefer dst port range during unique tuple search. b761b532c conntrack: Select correct sport range for well-known origin sport. 78bd058c3 ipsec: StrongSwan report connection update failures to ovs logs. aa05596df ipsec: Libreswan report connection failures to ovs logs. 427776cea system-tso: Skip encap tests when userspace TSO is enabled. 66d16e288 tc: Fix stats byte count on fragmented packets. b63c41f31 compat: Add gen_stats include to define tc hw stats. c531b3828 ovsdb: raft: Fix inability to join the cluster after interrupted attempt. 498cedc48 reconnect: Fix broken inactivity probe if there is no other reason to wake up. 5dc1423d8 datapath-windows: Fix NXM_OF_IP_TOS issue 91c0f0068 Prepare for 2.17.1. db7c86e5d Set release date for 2.17.0. 6dd933478 Documentation: Update USDT documentation to include systemtap dependency. 8b5136a89 ovsdb-idl: Fix use-after-free when destroying an IDL loop. a3182552c dpif-netdev: Use dp_netdev reference in offload threads. 691295d5a dpif-netdev: Fix a race condition in deletion of offloaded flows. bebbf0d6e dpif-netdev: Move port flush after datapath reconfiguration. e03a14c89 dpif-netdev-dpcls: Make subtable reprobe thread-safe. 036957015 ci: Fix typo in variable name. 76da23462 dp-packet: Ensure packet base is always non-NULL. 2cd30fd6b bfd: lldp: stp: Fix misaligned packet field access. 88705f1ba ovsdb-idlc: Avoid accessing member within NULL idl index cursors. b006e8ebb stopwatch: Fix buffer underflow when computing percentiles. a6ba4b037 dpif-netdev: Fix misaligned access. 6da79614a treewide: Don't pass NULL to library functions that expect non-NULL. bee8ec09d system-traffic.at: Avoid sporadic failures during conntrack IPv6 HTTP/FTP tests. 3626f3ca6 system-traffic.at: Do not use ranges with broadcast address. 2035b1b33 system-dpdk.at: Add warning log in mfex fuzzy test. 095f87c24 ofproto: Fix ipfix not always sampling on egress. fbeef2794 tc: Fix incorrect TC rule for decap+encap datapath flow. 54bca0430 dpif-netdev: fix vlan and ipv4 parsing in avx512 aa713d9b4 ci: Install wheel before installing any other python packages. 573230ec0 odp-util: Fix tunnel key attr for GTP-U. 4638cb58f ovsdb-idl: Only process successful txn in ovsdb_idl_loop_run. 87f67448b ofproto-dpif-upcall: Fix n_revalidators on upcall show. 268402b47 acinclude: Detect avx512 vpopcntdq compiler support. 1ff8fe347 Documentation: Fix userspace Tx steering section. 44963a78e vswitchd.xml: Add missing tx-steering PMD option. 17cedcb2d ovsdb-idl: ovsdb_idl_loop_destroy must also destroy the committing txn. 06d484409 ofproto-dpif-xlate: Fix packet drops with decap action on MPLS Multicast. 69155eb20 tests: Fix cosmetic errors in system-traffic.at. 62eeea709 python: idl: Clear last_id on reconnect if condition changes in-flight. ecdb9ca81 ovsdb-cs: Clear last_id on reconnect if condition changes in-flight. f08013b5e python: idl: Resend requested but not acked conditions when reconnecting. 15bb5a978 ofp-flow: Skip flow reply if it exceeds the maximum message size. 4fdd6666a ovsdb: transaction: Keep one entry in the transaction history. 553f566d9 ovsdb-cs: Fix ignoring of the last id from the initial monitor reply. 167c2ff0e ofproto-dpif: Fix issue with non-reversible actions on a patch ports. b8dba6594 NEWS: Fix some typo. b1b77967f ovs-monitor-ipsec: Fix generated strongSwan ipsec.conf for IPv6. 109d02455 system-dpdk: Fix MFEX logs check. 6b1cfa209 datapath-windows: Pickup Ct tuple as CT lookup key in function OvsCtSetupLookupCtx 280d8de05 Prepare for 2.17.0. f20abde5a netdev-dpdk: Remove rte-flow API access locks. b0b6b7b46 dpif-netdev: Use one or more offload threads. 7daa50346 dpif-netdev: Replace port mutex by rwlock. d85b9230a dpif-netdev: Make megaflow and mark mappings thread objects. ec4ac6258 dpif-netdev: Use lockless queue to manage offloads. b3e029f7c netdev-offload-dpdk: Protect concurrent offload destroy/query. 54dcf60e6 netdev-offload-dpdk: Lock rte_flow map access. 7851e602c netdev-offload-dpdk: Use per-thread HW offload stats. 5b0aa5577 dpif-netdev: Execute flush from offload thread. d68d2ed46 dpif-netdev: Introduce tagged union of offload requests. 73ecf098d dpif-netdev: Use id-fpool for mark allocation. 528a8ab62 dpif-netdev: Postpone flow offload item freeing. 55dc4ef17 dpif-netdev: Quiesce offload thread periodically. 62c2d8a67 netdev-offload: Add multi-thread API. 2eac33c6c id-fpool: Module for fast ID generation. 5396ba5b2 mpsc-queue: Module for lock-free message passing. 5878b9252 ovs-atomic: Expose atomic exchange operation. 83823ae32 dpif-netdev: Implement hardware offloads stats query. 9ac3d951b mov-avg: Add a moving average helper structure. e4543c7b1 dpif-netdev: Rename offload thread structure. 9ab104718 dpctl: Add function to read hardware offload statistics. 0e6366c23 netdev-offload-dpdk: Implement hw-offload statistics read. adbd4301a netdev-offload-dpdk: Use per-netdev offload metadata. 1088f4e7f netdev: Add flow API uninit function. aec1081c7 tests: Add ovs-barrier unit test. 59b8f9f8f dpif-netdev: Rename flow offload thread. 6207205e5 ovs-thread: Fix barrier use-after-free. 1b9fd884f Documentation: Remove experimental tag for PMD ALB. 09192a815 Documentation: Update PMD Auto Load Balance section. 5cc052435 Documentation: Update PMD thread statistics. f0adea3fc Documentation: Minor spelling and grammar fixes. 4da71121d Documentation: Fix Rx/Tx queue configuration section. 85d3785e6 utilities: Add netlink flow operation USDT probes and upcall_cost script. 51ec98635 utilities: Add upcall USDT probe and associated script. ff4c712d4 Documentation: Add USDT documentation and bpftrace example. 512fab8f2 openvswitch: Define the OVS_STATIC_TRACE() macro. 191013cae configure: Add --enable-usdt-probes option to enable USDT probes. 844f14181 dpif-netdev.at: Add test for Tx packet steering. c18e707b2 dpif-netdev: Introduce hash-based Tx packet steering mode. 31e67c998 dpif-netdev: Introduce Tx queue mode. e97112ce7 netdev-dummy: Introduce per rxq/txq statistics. eff740b14 ofproto-dpif: Fix memory leak in dpif/show-dp-features appctl. 1917ace89 Encap & Decap actions for MPLS packet type. 4a6a47346 netlink-socket: Log extack error messages in netlink transactions. eb1ab5357 netdev-linux: Use matchall classifier for ingress policing. 3b489a3b1 dpif-netdev: Improve loading of packet data for undersized packets. 8bc135d2d acinclude: Provide better error info when linking fails with DPDK. 1140c87e2 netdev-dpdk: Expose per rxq/txq basic statistics. f260db1ef netdev-dpdk: Fix statistics when changing Rx/Tx queues count. b84386fa9 dpdk: Support running PMD threads on any core. 356f36206 tests/oss-fuzz: Fix the arguments of parse_tcp_flags. ddca1eb3a odp-util: Stop action list parsing if already oversized. 6e50c1651 dpif-netdev: Avoid hw_miss_packet_recover() for devices with no support. e7e9973b8 dpif-netdev: Forwarding optimization for flows with a simple match. 46d44cf3b python: idl: Add monitor_cond_since support. 0d1ffb775 checkpatch: Detect "trojan source" attack. 428b11caa utilities: Add another GDB macro for ovs-vswitchd. 2f2ae5b6b tests: Fix endianness in netlink policy test fixtures. 0b6d2faac ci: Remove -Wno-cast-align from CI. d652fc6a5 checkpatch: Correct line count in error messages. 28ef2535c dpif-netdev-extract: Change availability log level to DBG. 38c53dd17 AUTHORS: Add Nobuhiro MIKI. 9a834205a docs: afxdp: Remove duplicated lines. d446dcb7e system-dpdk: Refactor common logs matching. b366fa2f4 dpif-netdev: Call cpuid for x86 isa availability. 11441385c bridge: Fix incorrect configuration of netdev's dpif type. ec2aa2ab4 ofproto-dpif-xlate: Snoop ingress packets and update neigh cache if needed. b723b9320 tnl-neigh-cache: Do not refresh the entry while revalidating. 02f95638a tnl-neigh-cache: Add tnl/neigh/aging command. f527aef14 tnl-neigh-cache: Read/write expires atomically. f0266292b dpif-netdev: Improve handling of IP/TCP in avx512 mfex. 893693e80 AUTHORS: Add Nir Anteby. 7617d0583 netdev-offload-dpdk: Add support for matching on gre fields. 5f60741dc netdev-offload-dpdk: Support tnl_pop for gre tunnel. a32cb78b5 netdev-dpdk: Add flow_api support for netdev gre vports. 827904146 netdev-offload-dpdk: Refactor get_vport_netdev(). 76527525e AUTHORS: Update email for Alin Serdean. 38b42aa93 MAINTAINERS: Move Joe to emeritus status. 269b927fd dpdk: Use --in-memory by default. b5d2dbdbb system-dpdk: Fix race in vhost-user tests. 9827312fa docs: Re-work the documentation around CPU ISA optimizations. ed9778e94 dpif-netdev: Fix the autovalidator output for the miniflow extract. 339f97044 ovsdb: storage: Randomize should_snapshot checks when the minimum time passed. bf07cc9cd raft: Only allow followers to snapshot. 20a4f546f dpif-netdev: Use PMD context to get the port for HW miss recovery. 17346b389 dpdk: Update to use DPDK v21.11. 72745ab0c compat: handle NF_REPEAT error on nf_conntrack_in. 18db7ec5e system-dpdk: Improve vhost-user ping tests reliability. 4f19a78a6 netdev-vport: Fix userspace tunnel ioctl(SIOCGIFINDEX) info logs. 4a7b58163 alb.at: Increase time/warp. 09c4449b2 alb.at: Check for log from correct line number. 1f5749c79 flow: Consider dataofs when parsing TCP packets. d4bed9596 tests/flowgen: Fix packet data endianness. e40982468 dpif-netlink: Improve feature negotiation for older kernels. 4490792dd ofproto-dpif: Increase dp_hash default max buckets. 91e1ff5dd ovsdb-idl: Don't reparse orphaned rows. 149169836 ofproto: Fix resource usage explosion due to removal of large number of flows. a05883b89 ofproto: Fix resource usage explosion while processing bundled FLOW_MOD. 79953a57e stream-ssl: Avoid unnecessary memory copies on send. dec429168 ovsdb-data: Consolidate ovsdb atom and json strings. 9d29990c2 json: Inline clone and destroy functions. 19aa70168 tests/flowgen: Fix length field of 802.2 data link header. 024ba5257 AUTHORS: Add Mike Pattrick. 958ca7ba3 ovs-tcpdump: Improve performance with dummy interface. c60eec064 ovs-lib: Backup and remove existing DB when joining cluster. c041042c1 python: idl: Avoid pre-allocating column defaults. 2fe20d0be docs/dpdk: Fix install doc. 29f8dc629 AUTHORS: Add Salvatore Daniele. f88ee78e0 match: Do not print "igmp" match keyword. 59622fd1b ovs-save: Save igmp flows in ofp_parse syntax. 3b2982c42 faq: Update OVS/DPDK version table for OVS 2.13/2.14. 72fbb90af ofproto-dpif-xlate: Add a trace log for tnl_port_build_header() error. 7b8aeadd6 ovsdb-idl: Re-parse backrefs of inserted rows only once. fb7a75e52 ofproto-dpif-xlate: Terminate native tunnels only on ports with IP addresses. 9fe0ce4f7 ofproto-dpif-xlate: Fix check_pkt_larger incomplete translation. a83a40609 dpif-netdev: Sync PMD ALB state with user commands. 513ed6570 system-traffic.at: Fix typo in conntrack zones tests. 23083672b dpif-netdev: Reset RxQ cycles history on PMD reload. bd0fec42a ofproto/bond: Improve admissibility debug readability. 71eb2ec44 datapath-windows: Reset flow key after Ipv4 fragments are reassembled 04b017e3a python: db: Avoid allocation of an attr dict/row+column. 695530d8f github: Remove workaround fixing up /etc/hosts. 113f925aa rhel: Use /run instead of /var/run. 9b20df73a dpctl: dpif: Allow viewing and configuring dp cache sizes. efd55eb34 dpctl: dpif: Add kernel datapath cache hit output. 317b1bfd7 ovsdb: Don't let transaction history grow larger than the database. 1bdda7b6d ovsdb-idl: Use functions to apply diff in place. 4dbff9f0a ovsdb: transaction: Incremental reassessment of weak refs. 066741d9c ovsdb-idl: Add memory report function. c5d384f77 checkpatch: Check if some tags are wrongly written. 9f2258360 AUTHORS: Add Somnath Chatterjee. 42c348184 dpif: Fix function pointer check for bond_add. 68543dd52 python: Replace pyOpenSSL with ssl. 3f550fa53 python: socket-util: Split inet_open_active function and use connect_ex. 56c3de3c6 datapath-windows:Reset PseudoChecksum value only for TX direction offload case 4bd375581 ci: Make linux-prepare trust system installs. fa2bc2bb7 github: Stick to python 3.9. a621ac5ea datapath-windows: add layers when adding the deferred actions c1fdb8347 ofproto-dpif-xlate: Fix zone set from non-frozen-metadata fields. 02aebad3f dpif-netdev: Fix use-after-free on PACKET_OUT of IP fragments. 01bca6dab tunnel-push-pop.at: Mask source port in tunnel header. 3486d81d1 AUTHORS: Add Remi Jouannet. f9f391982 ovs-ctl: Add missing description for --ovs-vswitchd-options and --ovsdb-server-options to usage(). 755cf31a3 dpdk-stub: Change the ERR log to DBG. d41cac475 docs/userspace-tunneling: Fix IP addresses for host2. 32899c824 acinclude: Use standardized DPDK component defines. b841e3cd4 dpif-netlink: Fix feature negotiation for older kernels. b12242e0e packets: Correct VXLAN_GPE_FLAGS_P macro name. bd056cb94 dpif-netdev: Fix pmd thread comments to include SMC. 4a6217fab datapath: handle DNAT tuple collision. cc0a87b11 pmd.at: Add test-cases for DPCLS and DPIF commands. 34fbdc410 python: idl: Avoid sending transactions when the DB is not synced up. 803ed12e3 ipf: release unhandled packets from the batch 13d05b8e5 sflow functions: fix unused parameter warnings for sflow functions 7796253db datapath-windows: Add file digest algorithm for signtool 5b7d54efc MAINTAINERS: Transition myself to emeritus status. a461bc62e datapath-windows:adjust Offset when processing packet in POP_VLAN action 4feb05140 fix typo in dpdk doc 429b114c5 ovsdb-data: Deduplicate string atoms. 32b51326e ovsdb-data: Add function to apply diff in-place. bb12b6317 ovsdb-data: Optimize subtraction of sets. 51946d222 ovsdb-data: Optimize union of sets. bfc6e9735 dpif-netdev: Remove OVS_UNUSED flag in functions for ct_zone limits. b2712d026 ovsdb: transaction: Use diffs for strong reference counting. 9e7081b14 cirrus: Reduce memory requirements for FreeBSD VMs. 849a40ccf netdev-linux: Fix a null pointer dereference in netdev_linux_notify_sock(). 81de3a81a bond: Check for NULL member in bond_member_set_enable(). 3168f328c pcap-file: Fix memory leak in ovs_pcap_open(). 22c95f9fe odp-util: Fix a null pointer dereference in odp_flow_format(). a566c02a2 odp-util: Fix a null pointer dereference in odp_nsh_key_from_attr__(). 5e86db383 netdev-dpdk: Fix RSS configuration for virtio. d0020c5e8 docs: Recommend the use of dpdkvhostuserclient ports. 16e5b51f2 docs: afxdp: Fix wrapping in QEMU CMDs. 0eeca50f0 Documentation: Cleanup PMD information. ee74a8b75 AUTHORS: Add Sergey Madaminov. aae08a577 include/windows/unistd.h: Fixed type cast warning on Windows. e05e1e3c0 netdev-offload-dpdk: Don't ignore frags as they are handled. 1318929f9 netdev-offload-dpdk: Support IPv6 fragmentation types. c1a5d0e2b netdev-offload-dpdk: Support IPv4 fragmentation types. 26b18f189 netdev-offload-dpdk: Add last attribute to patterns. a2fa8b289 conntrack: Remove the nat_action_info from the conn. fdef31fb7 hash: Fix compilation error on Fedora 34 with GCC 11 and -O0. ebcbb534e ipf: Fix only nat the first fragment in the reass process. 00d3d4a7d checkpatch: Avoid catastrophic backtracking. 372b790f1 AUTHORS: Add Tony van der Peet. 7e6b41ac8 dpif-netdev: Fix crash when PACKET_OUT is metered. 5c1cc74da rhel: Fix dual kernel rpm install for RHEL 8.4 944950dcc AUTHORS: Update Simon Horman 43e66fc27 ovsdb: monitor: Store serialized json in a json cache. 0de882954 raft: Don't keep full json objects in memory if no longer needed. b0bca6f27 json: Add support for partially serialized json objects. c2fb5bdae ovs-actions: Convert man page from xml to rST. 748010ff3 json: Optimize string serialization. 7847bf89e tests: Skip netlink policy test on non-Linux platforms. 7502849e9 ovsdb-idl: Add APIs to query if a table and a column is present. bfee9f6c0 netlink: Add support for parsing link layer address. 9ab5075bf Set release date for 2.16.0. 3fc34862b AUTHORS: Add Vlad Buslov. 6bb3f363d tc: Set action flags for tunnel_key release. d08c086e5 netlink-socket: Replace error with txn->error when logging nacked transactions. d9a5fb78d netdev-offload-dpdk: Initialize s_tnl dynamic string. 0363891d1 dynamic-string: Fix a crash in ds_clone(). 0b3a5d7ad dpif-netdev: fix memory leak in dpif and mfex commands 01cbe1ed4 dpif-netdev: fix memory leak in dpcls subtable set command d2ad305a6 dpif-netdev: Fix dead code in mfex command 8a5f055a0 docs/dpdk/bridge: Fix dpif-netdev/miniflow-parser-set formatting 96e513f55 dpif-netdev-unixctl.man: Document miniflow-parser-* CMDs 3004ebf20 dpif-netdev-unixctl.man: Document subtable-lookup-* CMDs c15c3df3a dpcls: fix build on compilers without AVX512-VPOPCNT ccb6cc20f AUTHORS.rst: Add Lin Huang. 765c8a774 AUTHORS.rst: Add Gaetan Rivet and Wentao Jia. 2480d09e9 ovsdb: transaction-forward: Fix initialization of the 'sent' hmap node. a3bd383e9 acinclude: Don't set AVX512-related configuration via CFLAGS. e21e9dcec dpif-netdev: Log flow modification in debug level. 6f69e0e30 dpif-netdev: Fix offloads of modified flows. 0d25621e4 dpif-netdev: Fix flow modification after failure. 8917010b0 dpif-netdev: Do not flush PMD offloads on reload. cd36a34f3 dpif-netdev: Fix non-atomic read of smc_enable_db. de15afa50 dpdk: Stop configuring socket-limit with the value of socket-mem. a8621f49d dpdk: Remove default values for socket-mem and limit. 1f7f55760 netdev-offload-dpdk: Fix vxlan vni cast-align warnings. e8cccd3a3 netdev-offload-dpdk: Fix IPv6 rewrite cast-align warning. b8b31d841 daemon-unix: Fix leak of a fork error message. daf627f45 ovsdb-cs: Perform forced reconnects without a backoff. 69b2bdfd3 system-dpdk.at: Fix module not found error for pyhton < 3.6. 43b7d960a netdev-dummy: Silence the 'may be uninitialized' warning. f05d6d623 ofproto-dpif-xlate: Fix continuations with OF instructions in OF1.1+. 8e808e7f1 datapath-windows:Correct checksum for DNAT action 954798752 Documentation: Remove duplicate words. 4703bc67b Prepare for post-2.16.0 (2.16.90). 45bd6d93f Prepare for 2.16.0. 298d4151f bond: Fix broken rebalancing after link state changes. b1e517bd2 dpif-netlink: Introduce per-cpu upcall dispatch. 485e3a13a dpif-netlink: Fix report_loss() message. 1325debb4 ofproto: Change type of n_handlers and n_revalidators. 3222a89d9 dpif-netdev: Report overhead busy cycles per pmd. 30bfba024 tests: Add new test for cross-numa pmd rxq assignments. 6193e0326 dpif-netdev: Allow pin rxq and non-isolate PMD. 3dd050909 dpif-netdev: Add group rxq scheduling assignment type. 4fb54652e dpif-netdev: Assign PMD for failed pinned rxqs. 0efefc4f9 dpif-netdev: Sort PMD list by core id for rxq scheduling. 58fed7e8d dpif-netdev: Make PMD auto load balance use common rxq scheduling. f577c2d04 dpif-netdev: Rework rxq scheduling code. ccc24fc88 ofproto-dpif: APIs and CLI option to add/delete static fdb entry. ae2424696 dpdk: Logs to announce removal of defaults for socket-mem and limit. 15329b728 flow: Count and dump invalid IP packets. 6545977ce ovs-rcu: Remove unused perthread mutex. cb4bff6ff Don't mangle shebangs when building DKMS RPM package. 1f38f9dcf AUTHORS: Add Adrian Guzowski. 2abd8148c Add ability to override default Release suffix in RPM packages. d28c5ca57 python: Add cooperative_yield() API method to Idl. 487253d5b python: Update bundled sortedcontainers to 2.4.0. 6c41bcb13 ci: Do not dump logs on error for GitHub Actions. 7ab851e1b dpif-netdev: Do not execute packet recovery without experimental support. a72c1dfbd dpif/dpcls: limit count subtable search info logs 26fbd1a1b AUTHORS: Add Cian Ferriter. 83aae83e6 AUTHORS: Add Amber Kumar. aa85a2509 dpif-netdev/mfex: Add more AVX512 traffic profiles 250ceddcc dpif-netdev/mfex: Add AVX512 based optimized miniflow extract 32f93dc5e dpdk: Add additional CPU ISA detection strings dc39608d2 dpif/stats: Add miniflow extract opt hits counter 50be6715c test/sytem-dpdk: Add unit test for mfex autovalidator a395b132b dpif-netdev: Add packet count and core id paramters for study 5324b54e6 dpif-netdev: Add configure to enable autovalidator at build time. 5c5c98cec docs/dpdk/bridge: Add miniflow extract section. 72dd22a0d dpif-netdev: Add study function to select the best mfex function dd3f5d86d dpif-netdev: Add auto validation function for miniflow extract 3d8f47bc0 dpif-netdev: Add command line and function pointer for miniflow extract 3e82604b7 docs: Add documentation for ovsdb relay mode. e26bf9726 ovsdb: Make clients aware of relay service model. edcf44172 ovsdb: relay: Reflect connection status in _Server database. 7964ffe7d ovsdb: relay: Add support for transaction forwarding. 026c77c58 ovsdb: New ovsdb 'relay' service model. b4cef64c8 ovsdb: row: Add support for xor-based row updates. 85dbbe275 ovsdb: table: Expose functions to execute operations on ovsdb tables. e93fc5db9 ovsdb: storage: Allow setting the name for the unbacked storage. 4d9605379 jsonrpc-server: Wake up jsonrpc session if there are completed triggers. 00dda78ed ovsdb-cs: Avoid unnecessary re-connections when updating remotes. 73259ea70 ovsdb-server: Fix memleak when failing to read storage. 066a84f89 latch-unix: Decrease the stack usage in latch d2e97030e netdev-linux: fix compile error in nl_msg_put_act_police d53ea18be AUTHORS: Add Andrew Rybchenko. 909b40f67 netdev-offload-dpdk: Fix port ID logging on destroy. b889d5dcc conntrack: Init hash basis first at creation. b0d289bb5 netdev-linux: Ignore TSO packets when TSO is not enabled for userspace. 464b5b13e netdev-offload-tc: Verify the flower rule installed. 1e3148913 dpcls-avx512: Enable avx512 vector popcount instruction. 60c9e1a2f dpdk: Cache result of CPU ISA checks. 2100f0e51 dpif-netdev/dpcls: Specialize more subtable signatures. 47a2a8f41 dpif-netdev/dpcls-avx512: Enable 16 block processing. d76a719a7 dpif-netdev: Add a partial HWOL PMD statistic. 3f86fdf5c dpif-netdev: Add command to get dpif implementations. abb807e27 dpif-netdev: Add command to switch dpif implementation. 9ac84a1a3 dpif-avx512: Add ISA implementation of dpif. e540499e4 dpif-netdev: Add function pointer for netdev input. 5930dfeeb dpif-netdev: Refactor to multiple header files. c36c8e3f5 ovsdb-tool: Fix memory leak in "check-cluster" command. ba16a36f3 dpif-netdev: Add all-zero SNAT to the advertised features of ct. 61e48c2d1 conntrack: Handle SNAT with all-zero IP address. fa0e2d26d util: Add token concatenation macro with argument expansion. 1e19f9aa2 conntrack: Handle already natted packets. aa4359cb9 dpif-netdev: Read recirc depth and flow api enabled once per batch. e6ad4d8d9 conntrack: Document all-zero IP SNAT behavior and add a test case. 355fef6f2 ofproto-dpif-xlate: Avoid successive ct_clear datapath actions. 347362d0c AUTHORS: Add Bodo Petermann and David Wilder. b7809111a odp-util: Stop key parsing if already oversized. 3da3cc1a0 ovs-numa: Support non-contiguous numa nodes and offline CPU cores. 154983c59 python: Fix Idl.run change_seqno update. b57b062f5 ofp-actions: Report an error if there are too many actions to parse. b30bfb6b8 ovsdb-server.7.rst Fix response result of monitor_cond_change 0c0995238 stream-ssl: Remove unsafe 1024 bit dh params 4e948b86c bridge: Use correct (legacy) role names in database. 828d9cb8d ovs: fix wrong quote 00c1bce13 docs: fix wrong quote 780b2bde8 bridge: fix type mismatch 911adb93e ovs-save: Use right OpenFlow version for "ovs-ofctl dump-tlv-map". 8ab198092 NEWS: Add note about PPS support for ingress policing 10c9dfeb5 bridge: Only an inactivity_probe of 0 should turn off inactivity probes. 8d7c24083 fail-open: Only fail open if we've been disconnected for at least 1 s. f686957c9 add test cases for ingress_policing_kpkts parameters c2567e533 add port-based ingress policing based packet-per-second rate-limiting b6c5f30cf checkpatch: Ignore macro definitions of FOR_EACH. 772a842fb dpif-netdev: Apply subtable-lookup-prio-set on any datapath. 07a5fa610 AUTHORS: Add Paolo Valerio. 331975506 ovs-actions.xml: Add missing bracket. 63c01b895 netdev-offload-tc: Use nl_msg_put_flag for OVS_TUNNEL_KEY_ATTR_CSUM. 2c597c890 conntrack: add coverage counters for L3 bad checksum. 76700f374 conntrack: Increment coverage counter for all bad checksum cases. e5b5008ac ovs-lib: pass optional --election-timer arg to ovsdb-tool e098c2f96 netdev-dpdk-offload: Add vxlan pattern matching function. 507d20e77 netdev-offload-dpdk: Support vports flows offload. b5e6f6f6b dpif-netdev: Provide orig_in_port in metadata for tunneled packets. be56e063d netdev-offload-dpdk: Support tunnel pop action. 20b176044 netdev-offload-dpdk: Change log rate limits. a1ec42803 netdev-offload: Disallow offloading to unrelated tunneling vports. 6a855d3e7 netdev-offload: Allow offloading to netdev without ifindex. bc341440d dpif-netdev: Add HW miss packet state recover logic. aca2f8a8a netdev-offload-dpdk: Implement HW miss packet recover for vport. c5b56f0eb netdev-dpdk: Add flow_api support for netdev vxlan vports. 1b27484f2 netdev-offload: Introduce an API to traverse ports. 6f50f28b9 netdev-dpdk: Introduce DPDK tunnel APIs. f36e7438f netdev-offload: Add HW miss packet state recover API. f0e4a7338 tests: Add PMD auto load balance unit tests. 833f1b843 pmd.at: Get next line number of log. f3ad560d5 dpif-netdev: Expand the meter capacity. bd9052455 Remove Python 2 leftovers. ad256c314 dpdk: Add debug appctl to get malloc statistics. c16b9ac74 datapath-windows: Specify external include paths e81ed9421 Fix redundant datapath set ethernet action with NSH Decap. c2999459d tests: Fixed L3 over patch port tests. cca40141a netlink: removed incorrect optimization 661fd5edb AUTHORS: Add Wang Liang. 640d4db78 ipf: Fix a use-after-free error, and remove the 'do_not_steal' flag. 2afe31169 odp-util: Return an error on actions overflow while parsing from string. 5fe3ef1a0 tests: Fix spelling error in test name. 50b419d0a raft: print local server ID when opening RAFT database c5a58ec15 python: idl: Allow retry even when using a single remote. 04f8881f5 ovsdb-idl: Fix the database update signaling if it has never been connected. 91cb55bc8 system-traffic.at:add missing comma 9f3815ed6 AUTHORS: Add Rosemarie O'Riorden. 6426417c1 ipfix-gen-entities: Add missing argument in function call. 210c4cba9 docs: Add a topic about record/replay with ovsdb-server. 4275b5b7f ovsdb-client: Integrate record/replay functionality. 0be15ad76 ovsdb-server.at: Add unit test for record/replay. 964da9a8b jsonrpc: Disable inactivity probes if replay engine is active. 30ccf2c51 ovsdb-server: Don't update manager status if replay engine is active. 182a0b8ad ovsdb-server: Integrate stream replay engine. 07a07d06a uuid: Allow record/replay of generated UUIDs. fae1ae043 stream: Add record/replay functionality. 610ac1e82 ovs-replay: New library to create and manage replay files. a4b04276a ofproto: Fix potential NULL dereference in ofproto_ct_*_zone_timeout_policy(). dd0f59783 ofproto: Fix potential NULL dereference in ofproto_get_datapath_cap(). f1951d41f ovs-save: Fix awk command to return highest ofp version. 3012710ec tests: Fix PKIDIR checks in AT_SKIP. 5da031d6d tests: Drop support for glibc before version 2.11. fb1e7863e ovsdb-tool: add --election-timer=ms option to 'create-cluster' 13c0eaa7b dpif-netlink: Fix send of uninitialized memory in ct limit requests. 328d20e0f ofproto-dpif: Fix use of uninitialized attributes of timeout policy. 577b9a816 netdev-linux: Fix use of uninitialized LAG master name. 0b3ff31d3 ofp_actions: Fix set_mpls_tc formatting. 7731d2614 dpif-netdev: Remove meter rate from the bucket size calculation. 76b720ed1 ovs-actions: Document normal pipeline. 60638d61a AUTHORS: Add Wang Yibo. f173527ec ovs-ofctl: Fix coredump when using "add-groups" command. 3c2d6274b raft: Transfer leadership before creating snapshots. b5bb044fb ovsdb-cs: Consider all tables when computing expected cond seqno. 7100c220e mac-learning: Remove obsolete comments about tags. b45958bf7 dpdk: Use DPDK 20.11.1 release. 484e9a4dd github: Fix up malformed /etc/hosts. 843cd4304 doc: automake: Add support for sphinx 4.0. b03daccfd cirrus: Look up existing versions of python dependencies. 721488d4a classifier: Make find_match_wc() prototype and definition match. b96d2756f tnl-neigh-cache: Include expected array sizes in prototypes. f09182a3b ofp-group: Use big-enough buffer in ofputil_format_group(). 09fe18af2 xml2nroff: Fix formatting of action headers in ovs-actions(7) manpage. a019868a6 ofproto/ofproto-dpif-sflow: Check sflow agent in case of race 5dce24d04 ipsec: Fix race in system tests. fd1114e96 AUTHORS: Add Michal Kazior. d90b4f292 rtnetlink: ignore IFLA_WIRELESS events. f9d303903 dpif: Fix use of uninitialized execute hash. 4a6be85c8 odp-util: Fix use of uninitialized erspan metadata. 3311ca0d4 AUTHORS: Add Ariel Levkovich. ea71a9d44 netdev-offload-tc: Add support for ct_state flag rel. 0c147fb4e dpif-netlink: Fix using uninitialized info.tc_modify_flow_deleted in out label. 44ea24427 Add test cases for ingress_policing parameters 67e0e0bc1 netdev-linux: correct unit of burst parameter d2d051310 AUTHORS: Add Aidan Shribman. 23f9ec9eb make: don't prompt during build 332b8a3e4 util: Add allocation wrappers that don't increment coverage counters. 4cb38cd22 ovs-lldp: Get rid of pointless null pointer check. f8be30acf ipsec: Update ordering of imports. 8fc62df8b ipsec: Introduce IPsec system tests for Libreswan. d6afbc00d ipsec: Allow custom file locations. 4ce8bb159 system-common-macros: clean up veth device on test failure. 58b4146e0 ipsec: Fix IPv6 default route support for Libreswan. ac85cdb38 ovsdb-idl: Mark arc sources as updated when destination is deleted. 95689f166 ovsdb-idl: Preserve references for deleted rows. 4c0d093b1 ovsdb-idl.at: Make test outputs more predictable. 31629b538 ovs-ofctl: Fix segfault due to bad meter n_bands. b4a9c9cd8 netlink: make Netlink socket receive buffer 4x larger 50b0b4d86 db-ctl-base: Warn if "destroy" command lacks --all or record argument. 9801d7c4b github: Fix handling of python packages. c3690ccbc dpif-netdev: Refactor and fix the buckets calculation. 759aaa851 dpif-netdev: Fix the meter buckets overflow. af0ce3866 AUTHORS: Add Shahar Klein. 925a09477 debian: Add configure option to debian/rules 2eb7e22a4 rhel: Do not update kmod RPM newer major revision kernels. 56e60eca7 rhel: ovs-kmod-manage.sh: Disable unneeded warning. ec68a877d dpif-netdev: Allow PMD auto load balance with cross-numa. edcfd7176 netdev-offload-tc: Add support for ct_state flags inv and rpl 1e4aa061a netdev-offload-tc: Probe for support for any of the ct_state flags 0a8bd432a compat: Add ct_state flags definitions 64b8c1d9a python: Send notifications after the transaction ends. cdaa7e0fd dpif-netdev: Fix crash when add dp flow without in_port field. 2ad201659 ovs-ctl: Allow recording hostname separately. f013e6f2d Documentation: Fix DPDK qos example. 39b937f06 raft: Add 'stop-raft-rpc' failure test command. 4c1d9ef14 raft: Report disconnected in cluster/status if candidate retries election. 14b2b0aad raft: Reintroduce jsonrpc inactivity probes. ac09cbfcb ovsdb-cs: Fix use-after-free for the request id. 47e73f7f0 netdev-offload-tc: Flush rules on all chains before attach ingress block 436ce00da connmgr: Check nullptr inside ofmonitor_report(). 8f09b2688 AUTHORS: Add Alexey Roytman. e775bf32e ovsdb-client: Fix needs-conversion when SERVER is explicitly specified. 4cee0150a windows, tests: Modify service test. e7df370cf netdev-linux: Fix indentation. 97918ed19 AUTHORS: Add Balazs Nemeth. 647a71988 docs: Add instruction to set local_ip to ipsec tutorial. 163b134d0 ofproto-dpif-upcall: Fix ukey leak on udpif destroy. 014496e73 ci: Use parallel build for distcheck. 5740843c4 github: Run clang test with AddressSanitizer enabled. 77cccc74d ofp-actions: Fix use-after-free while decoding RAW_ENCAP. 5704a7f35 Set release date for 2.15.0. 4b674829f dpif-netdev: auto load balance log state on user request. 81661d768 AUTHORS: Add Hariprasad Govindharajan. 8d0416153 faq: Update OVS/DPDK version table for OVS 2.15. 1560b4667 docs: Update for auto load balance threshold parameters. caa41a871 cirrus: Use FreeBSD 12.2. 79349cbab flow: Support extra padding length. e4a89a7cc rhel: Update build required dpdk. 9acbdd65c rhel: Add option to enable AF_XDP on rpm package. 498cf3eae netdev-offload-tc: Reject rules with unsupported ct_state flags. 255fd6ad2 dist-docs: Include manpages generated from rST. da33a6875 db-ctl-base: Fix XML syntax error. 9513c0233 db-ctl-base: Add {in} and {not-in} set relational operators. 0f252daa9 tc: Fix mpls bottom of stack bit mask reporting. 3eec7fb07 pcap-file: Fix calculation of TCP payload length in tcp_reader_run(). c3da0ae65 ofp-table: Improve log message in ofputil_decode_table_features(). 83f5e6fda AUTHORS: Add Volkan Atlı. d8df84998 rhel: Update '--with-dpdk' argument for DPDK 20.11. 59611d6fe ovs-lib: Remove second parameter for stop_daemon. 9cf39b3e7 Add Tao YunXiang <taoyunxiang@cmss.chinamobile.com>. 2e0dace0e doc: Add 'faq' about datapath-id c17f32a11 netdev-dpdk: Fix incorrect shinfo initialization. 75e1e6fd2 lib/tc: add ICMP type and code match offload d5c429a30 github: Don't fail the job if 'apt update' failed. 492bbb54c vswitchd.xml: Fix supported IPsec tunnels. 748483d3f netdev-afxdp: Updated documentation. d27494647 acinclude: Remove default library for DPDK. 3f19b124e ovsdb-doc: Add build dependency on dirs.py. 9049a11f0 system-dpdk: Fix 4th and 5th testcases of the system-dpdk testsuite. 25eb72a26 ovs-ctl: Prepend OVS binary directories to PATH. c2e501c16 AUTHORS: Add Mao YingMing. 82440ad72 dpctl: Fix dpctl process command parameter error. 8e69349f2 conntrack: Fix the icmp conntrack new state. 1c337c43a ovsdb-idl: Break into two layers. a5c067a8b ovsdb-cs: New module that factors out code from ovsdb-idl. 81f06e2b8 test-ovsdb: Log steps in idl test. e7eb904d2 odp-util: Fix abort while formatting nsh actions. 50e5523b9 Prepare for post-2.15.0 (2.15.90). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21netns: update to 0.5.3-tipBruce Ashfield
We also switch to building with -mod=vendor, and drop our custom symlink configuration. Bumping netns to version v0.5.3-8-g00d5d07, which comprises the following commits: 00d5d07 update generation 74d2bd0 update 6cba61f update to github actions dc7233e update to github actions d6b2244 update to github actions b65a990 docs: Update TOC 16152a0 update to github actions 56ffc34 update travis 9b103a1 Bump version to v0.5.3 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21networking: introduce slirp dependencyBruce Ashfield
Importing libslirp to meet the requirements of the updated slirp4netns. This is very similar to: https://github.com/schnitzeltony/meta-retro/blob/master/recipes-support/slirp/libslirp.bb But we create our own recipe for now, as we don't want to introduce more layer dependencies. If we can get libslirp moved to meta-openembedded, we'll drop this recipe. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21slip4netns: update to 1.2.0Bruce Ashfield
Bumping slirp4netns to version v1.2.0-beta.0-5-g323aa69, which comprises the following commits: 2365e85 configure: remove inet_ntoa check 2b607f2 Replace deprecated inet_ntoa with safer inet_ntop Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-03-21cni: update to v1.0.1Bruce Ashfield
Bumping cni to version v0.8.0-90-g35efaab, which comprises the following commits: 3e49ce1 Fix incorrect pointer inputs to `json.Unmarshal` b92c836 fix version of cni v0.8.1 does not have a directory of github.com/containernetworking/cni/pkg/types/100 refer to https://github.com/containernetworking/cni/tree/v0.8.1/pkg/types 269bf61 Spec: Container runtime shall tear down namespaces 48fac6a Update README.md 798e63d Updated README.md to include Netlox loxilight CNI 9070cb3 documentation: update Multus link in README.md to point to the k8snetworkplumbingwg repository 21cd5f0 [exec-plugins]: support plugin lists c362597 skel: remove superfluous err nil check in (*dispatcher).pluginMain 42f2474 Remove Gabe Rosenhouse as maintainer 2e4887b skel: print out CNI versions supported in help text. c7f5f70 pkg/version: add VersionsFrom function 5608690 spec: bump to 1.0.0 30e06a8 Docs: bump spec version information a956246 docs: revise cnitool docs 63a3bca wrap returned errors b277ec1 docs: correct the extension name of the configuration file 34a8a46 chore: standardize documentation on IP assignment 76bf3de types: ensure empty CNIVersion always creates/converts to 0.1.0 4feedb9 Add breadcrumbs for CNI.go 57cf1ce types/create: add CreateFromBytes() 4fdc5f6 chore: support both value type and pointer type in LoadArgs f30a824 Remove Bryan Boreham as maintainer c63d850 Add debug plugin to help debugging/troubleshooting (#818) 9546b70 spec: Some minor corrections 3a13f68 Spec: Bring 1.0's treatment of "args" in line with 0.4.0 c92642b upgrade kube-ovn new github site 67ec904 Fix typo in SPEC.md 0555966 typos correct 8ad568b Rewrite spec.md for 1.0.0 0016917 Adding reference to Azure CNI as 3rd party plugin in readme ad59be0 types/040: add testcase for <= 0.2.0 Result requirement of one or more IPs e32b586 remove build badges from homepage 296290a Switch from Travis to GH Actions a199e6a go fmt c735780 Markups. b678c26 Log out the plugin name on ADD/DEL failure. cni-plugins: update to 1.1,0 Bumping cni-plugins.git to version v1.1.0-6-gb8a10bb, which comprises the following commits: 7a98979 ipam/dhcp: Fix client id in renew/release 7aa07ef call ipam.ExceDel after clean up device in netns fix #666 96c3af8 Add sysctl allowlist 08d0f33 portmap: fix checkPorts result when chain does not exist dca23ad portmap: fix bug that new udp connection deletes all existing conntrack entries ba47b49 Enhanced dad set to 1 2be2960 Add boolean to enable/disable dad 8ede7ee Disable DAD for container side veth 22dd6c5 firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker 90e8e1f Fix host-device gofmt 3b2afc9 host-device: Bring interfaces up after moving into container 9649ec1 pkg/ns: use file system magic numbers from golang.org/x/sys/unix 0c12d8a gofmt 152e7a4 go mod tidy 4319bc4 build: bump to go 1.17 7a55617 Remove arp notify setting per comment 5d073d6 plugins: replace arping package with arp_notify 67110e0 fix #685 1324428 Ran go fmt so tests would pass fd4c335 Fixed DHCP problem that broke when fast retry was added. c9d0423 dhcp ipam: adjust retry mechanism 547a516 add ipam tests for dpdk device 3033fd2 add ipam support for dpdk device d5a6569 ipvlan: Send Gratuitous ARP after IPs are set 27fdec5 dhcp ipam: fix client id a1051f3 dhcp ipam: rename inconsistent options among files c627ea8 dhcp ipam: add more options capable for sending 4b216e9 dhcp ipam: add fast retry 2bebd89 dhcp ipam: support customizing dhcp options be383cf dhcp ipam: truncate client id to 254 bytes 6d1f71e dhcp ipam: print error correctly without format string 24259e7 dhcp ipam: using full config to regular the code c16cff9 Allow setting sysctls on a particular interface 7cb3453 dhcp: remove implemented TODO ceb34eb Don't redundantly filepath.Clean the output of filepath.Join 90c0185 Use crypto/rand.Read, not crypto.Reader.Read 081ed44 bridge: Add macspoofchk support ba48f8a plugins: fix bug where support for CNI version 0.4.0 or 1.0.0 was dropped 62952ff vendor: bump to libcni v1.0.1 8ab2336 static ipam: do not parse the CIDR twice 2052c30 static ipam: improve error msgs when provisioning invalid CIDR 156e59c bump go to 1.16, other misc fixes 0818512 vendor: bump all direct dependencies 9b1666d vendor: bump to libcni v1.0 0e38a1d docs: Update the CI badge from Travis CI to GitHub Actions 24b3fbc bridge: Fix typo in error message for promiscuous mode a49f908 ip: place veth peer in host namspace directly a3cde17 bridge: Add mac field to specify container iface mac a786b12 static ipam: decide wrong cidr error msg 0db5882 static ipam: stop wrapping net.ParseCIDR errors 5a40818 static ipam: show confusing error msg 2f9917e utils, hwaddr: Remove unused package 272f154 ip, link_linux: Remove unused SetHWAddrByIP function 77233dd plugins: remove flannel 4b180a9 refactor(win-bridge): netconf 9215e60 refactor(win-bridge): hcn api processing 93a5503 refactor(win-bridge): hns api processing aa8c8c1 chore(win-bridge): location related ec75bb8 chore(win-bridge): text related c4d4aa7 Remove Bryan Boreham as maintainer Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-02-18global: update licence values to SPDX valuesBruce Ashfield
These changes are the result of running the convert-spdx-licenses.py oe-core script. There's no impact to the build, but we will avoid issues when interacting with core QA by the alignment. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-02-04openvswitch: uprev from v2.15.1 to v2.15.3He Zhe
commits short logs: e4d2df62e (tag: v2.15.3) Set release date for 2.15.3. b8baa1141 python: Add cooperative_yield() API method to Idl. 7834abc66 ofproto-dpif-xlate: Snoop ingress packets and update neigh cache if needed. 833c02daa tnl-neigh-cache: Do not refresh the entry while revalidating. e2182eca8 tnl-neigh-cache: Include expected array sizes in prototypes. 566fe4372 tnl-neigh-cache: Read/write expires atomically. d477f6000 compat: handle NF_REPEAT error on nf_conntrack_in. 0590e8838 flow: Consider dataofs when parsing TCP packets. 7266042d8 tests/flowgen: Fix packet data endianness. d2e0632db ofproto: Fix resource usage explosion due to removal of large number of flows. 0a7e66e37 ofproto: Fix resource usage explosion while processing bundled FLOW_MOD. 68466efed tests/flowgen: Fix length field of 802.2 data link header. 2a2185f9e ovs-lib: Backup and remove existing DB when joining cluster. fcbc29c6f docs/dpdk: Fix install doc. a5d97d420 ovs-save: Save igmp flows in ofp_parse syntax. 1cbd1f0f5 faq: Update OVS/DPDK version table for OVS 2.13/2.14. 01bc910e5 ofproto-dpif-xlate: Fix check_pkt_larger incomplete translation. 08a270dda datapath-windows: Reset flow key after Ipv4 fragments are reassembled eca2d50d4 datapath-windows:Reset PseudoChecksum value only for TX direction offload case 031cf67e0 netdev-offload-tc: Verify the flower rule installed. 952e85150 ci: Make linux-prepare trust system installs. 2cf63851a Prepare for 2.15.3. 63f9a7c5d (tag: v2.15.2) Set release date for 2.15.2. b7d9c491e datapath-windows: add layers when adding the deferred actions 3f718857e ofproto-dpif-xlate: Fix zone set from non-frozen-metadata fields. ea2ca0af1 dpif-netdev: Fix use-after-free on PACKET_OUT of IP fragments. 9f964354e tunnel-push-pop.at: Mask source port in tunnel header. 58397f222 dpdk-stub: Change the ERR log to DBG. 2a963fc31 python: idl: Avoid sending transactions when the DB is not synced up. 9efa2ea61 ipf: release unhandled packets from the batch f8274b78c datapath-windows:adjust Offset when processing packet in POP_VLAN action a2f860aa2 cirrus: Reduce memory requirements for FreeBSD VMs. 7788f1579 netdev-linux: Fix a null pointer dereference in netdev_linux_notify_sock(). dd32deba6 pcap-file: Fix memory leak in ovs_pcap_open(). 9f2f66c8e odp-util: Fix a null pointer dereference in odp_flow_format(). 02b0c265c odp-util: Fix a null pointer dereference in odp_nsh_key_from_attr__(). 031eff456 netdev-dpdk: Fix RSS configuration for virtio. 09cd9570d ipf: Fix only nat the first fragment in the reass process. ef8ca3e19 dpif-netdev: Fix crash when PACKET_OUT is metered. d3ff41d60 tc: Set action flags for tunnel_key release. 079a4de72 netlink-socket: Replace error with txn->error when logging nacked transactions. f8cc5aa35 dynamic-string: Fix a crash in ds_clone(). 64d1bba91 dpif-netdev: fix memory leak in dpcls subtable set command 90b219275 dpif-netdev: Do not flush PMD offloads on reload. b29b04f85 dpif-netdev: Fix offloads of modified flows. 1d0b89ea7 dpif-netdev: Fix flow modification after failure. 8d84a4b16 netdev-offload-dpdk: Fix IPv6 rewrite cast-align warning. f3f7849cb daemon-unix: Fix leak of a fork error message. 8aa0f0374 ovsdb-cs: Perform forced reconnects without a backoff. ee4e034dc datapath-windows:Correct checksum for DNAT action 72132a940 bond: Fix broken rebalancing after link state changes. aa84cfe25 dpif-netlink: Fix report_loss() message. aec05f7cd ovsdb-server: Fix memleak when failing to read storage. 05bdf11fc conntrack: Init hash basis first at creation. 94e3b9d9c netdev-linux: Ignore TSO packets when TSO is not enabled for userspace. 842bfb899 conntrack: Handle already natted packets. ab873c1af conntrack: Document all-zero IP SNAT behavior and add a test case. 86d6a9ee1 python: Fix Idl.run change_seqno update. 1ba0c8365 bridge: Use correct (legacy) role names in database. 7e5293ea5 Prepare for 2.15.2. The ptest results BEFORE uprev: ERROR: 2231 tests were run, 27 failed unexpectedly. 62 tests were skipped. Failed tests: checkpatch - sign-offs checkpatch - parenthesized constructs checkpatch - parenthesized constructs - for checkpatch - comments checkpatch - whitespace around operator checkpatch - whitespace around cast ovs-ofctl snoop tunnel - table version tunnel_push_pop - erspan tunnel_push_pop - action tunnel_push_pop - packet_out tunnel_push_pop_ipv6 - ip6gre tunnel_push_pop_ipv6 - ip6erspan tunnel_push_pop_ipv6 - action PMD - non pmd device ofproto-dpif - recirculation after resubmit ofproto-dpif - sFlow packet sampling - IPv4 collector ofproto-dpif - sFlow packet sampling - IPv6 collector ofproto-dpif - sFlow packet sampling - LACP structures ofproto-dpif - sFlow packet sampling - tunnel set ofproto-dpif - sFlow packet sampling - tunnel push ofproto-dpif - sFlow packet sampling - MPLS bridge - multiple bridges share a controller bridge - add port after stopping controller mcast - check multicasts to trunk ports are not duplicated ptap - triangle bridge setup with L2 and L3 GRE tunnels ptap - L3 over patch port The ptest results AFTER uprev: ERROR: 2266 tests were run, 27 failed unexpectedly. 65 tests were skipped. Failed tests: checkpatch - sign-offs checkpatch - parenthesized constructs checkpatch - parenthesized constructs - for checkpatch - comments checkpatch - whitespace around operator checkpatch - whitespace around cast ovs-ofctl snoop tunnel - table version tunnel_push_pop - erspan tunnel_push_pop - action tunnel_push_pop - packet_out tunnel_push_pop - packet_out debug_slow tunnel_push_pop_ipv6 - ip6gre tunnel_push_pop_ipv6 - ip6erspan tunnel_push_pop_ipv6 - action PMD - non pmd device ofproto-dpif - sFlow packet sampling - IPv4 collector ofproto-dpif - sFlow packet sampling - IPv6 collector ofproto-dpif - sFlow packet sampling - LACP structures ofproto-dpif - sFlow packet sampling - tunnel set ofproto-dpif - sFlow packet sampling - tunnel push ofproto-dpif - sFlow packet sampling - MPLS bridge - multiple bridges share a controller bridge - add port after stopping controller mcast - check multicasts to trunk ports are not duplicated ptap - triangle bridge setup with L2 and L3 GRE tunnels ptap - L3 over patch port Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-01-16openvswitch: systemd: add option -p for mkir commandChangqing Li
To avoid "cannot create directory '/var/log/openvswitch': File exists" when service is restart Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-15cni: add READMEBruce Ashfield
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-12-13cni: don't provide kubernetes-cni by defaultBruce Ashfield
The kubernetes recipes can inherit cni_networking and provide their own PN-cni packages, so we no longer need to provide this by default. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-19openvswitch: fix configure error with dpdk enabledChen Qi
When enabling 'dpdk' PACKAGECONFIG, the following error appears. | configure: error: Could not find DPDK library in default search path Fix the error by tweaking the configure option regarding dpdk. Add pkgconfig to 'inherit' because pkgconfig is required at do_configure when dpdk is enabled. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-02global: convert github SRC_URIs to use https protocolBruce Ashfield
github is removing git:// access, and fetches will start experiencing interruptions in service, and eventually will fail completely. bitbake will also begin to warn on github src_uri's that don't use https. So we convert the meta-virt instances to use protocol=https (done using the oe-core contrib conversion script) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-19cni: add SRCREV_FORMATBruce Ashfield
recipes that use multiple SCMs in the SRC_URI, must supply SRCREV_FORMAT or SRCPV triggers an expansion error. While this isn't fatal during the build, it can cause issues with setscene (and possibly) other tasks failing, which then leads to no sstate re-use, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-09-30ovs: update to 2.15.1Bruce Ashfield
We drop a previously backported patch, and bump to version v2.15.1-30-gf8274b78c, which comprises the following commits: f8274b78c datapath-windows:adjust Offset when processing packet in POP_VLAN action a2f860aa2 cirrus: Reduce memory requirements for FreeBSD VMs. 7788f1579 netdev-linux: Fix a null pointer dereference in netdev_linux_notify_sock(). dd32deba6 pcap-file: Fix memory leak in ovs_pcap_open(). 9f2f66c8e odp-util: Fix a null pointer dereference in odp_flow_format(). 02b0c265c odp-util: Fix a null pointer dereference in odp_nsh_key_from_attr__(). 031eff456 netdev-dpdk: Fix RSS configuration for virtio. 09cd9570d ipf: Fix only nat the first fragment in the reass process. ef8ca3e19 dpif-netdev: Fix crash when PACKET_OUT is metered. d3ff41d60 tc: Set action flags for tunnel_key release. 079a4de72 netlink-socket: Replace error with txn->error when logging nacked transactions. f8cc5aa35 dynamic-string: Fix a crash in ds_clone(). 64d1bba91 dpif-netdev: fix memory leak in dpcls subtable set command 90b219275 dpif-netdev: Do not flush PMD offloads on reload. b29b04f85 dpif-netdev: Fix offloads of modified flows. 1d0b89ea7 dpif-netdev: Fix flow modification after failure. 8d84a4b16 netdev-offload-dpdk: Fix IPv6 rewrite cast-align warning. f3f7849cb daemon-unix: Fix leak of a fork error message. 8aa0f0374 ovsdb-cs: Perform forced reconnects without a backoff. ee4e034dc datapath-windows:Correct checksum for DNAT action 72132a940 bond: Fix broken rebalancing after link state changes. aa84cfe25 dpif-netlink: Fix report_loss() message. aec05f7cd ovsdb-server: Fix memleak when failing to read storage. 05bdf11fc conntrack: Init hash basis first at creation. 94e3b9d9c netdev-linux: Ignore TSO packets when TSO is not enabled for userspace. 842bfb899 conntrack: Handle already natted packets. ab873c1af conntrack: Document all-zero IP SNAT behavior and add a test case. 86d6a9ee1 python: Fix Idl.run change_seqno update. 1ba0c8365 bridge: Use correct (legacy) role names in database. 7e5293ea5 Prepare for 2.15.2. b855bbc32 Set release date for 2.15.1. 007a4f48f dpif-netdev: Apply subtable-lookup-prio-set on any datapath. c93358a56 netlink: removed incorrect optimization 31626579f ovs-actions.xml: Add missing bracket. 30596ec27 netdev-offload-tc: Use nl_msg_put_flag for OVS_TUNNEL_KEY_ATTR_CSUM. 728980291 conntrack: Increment coverage counter for all bad checksum cases. 881d71ea2 datapath-windows: Specify external include paths 934668c29 Remove Python 2 leftovers. aaa596705 ipf: Fix a use-after-free error, and remove the 'do_not_steal' flag. bc0aa785a ovsdb-idl: Fix the database update signaling if it has never been connected. 559426d2b ofproto: Fix potential NULL dereference in ofproto_ct_*_zone_timeout_policy(). f31070e27 ofproto: Fix potential NULL dereference in ofproto_get_datapath_cap(). 8995d5311 dpif-netlink: Fix send of uninitialized memory in ct limit requests. 0c056891c ofproto-dpif: Fix use of uninitialized attributes of timeout policy. 121a67cad netdev-linux: Fix use of uninitialized LAG master name. 5f27ff1cf ofp_actions: Fix set_mpls_tc formatting. e87adce83 dpif-netdev: Remove meter rate from the bucket size calculation. a3ee3258e ovs-ofctl: Fix coredump when using "add-groups" command. c5d2a6275 raft: Transfer leadership before creating snapshots. 553d52392 ovsdb-cs: Consider all tables when computing expected cond seqno. 8d0aebcc4 dpdk: Use DPDK 20.11.1 release. 21452722b github: Fix up malformed /etc/hosts. 90d1984b9 doc: automake: Add support for sphinx 4.0. 38a8bed70 cirrus: Look up existing versions of python dependencies. 255c38c74 ofp-group: Use big-enough buffer in ofputil_format_group(). f2c0744d2 ofproto/ofproto-dpif-sflow: Check sflow agent in case of race ab157ef34 dpif: Fix use of uninitialized execute hash. b1fded020 odp-util: Fix use of uninitialized erspan metadata. f473ee568 dpif-netlink: Fix using uninitialized info.tc_modify_flow_deleted in out label. 2721606bd netdev-offload-tc: Probe for support for any of the ct_state flags. 091bc48d9 compat: Add ct_state flags definitions. 1307e90e3 Add test cases for ingress_policing parameters d184c6ce6 netdev-linux: correct unit of burst parameter cab998e50 ipsec: Fix IPv6 default route support for Libreswan. b9ab7827e ovsdb-idl: Mark arc sources as updated when destination is deleted. c82d2e3fb ovsdb-idl: Preserve references for deleted rows. 9a24ecbc2 ovsdb-idl.at: Make test outputs more predictable. 8d71feb1b ovs-ofctl: Fix segfault due to bad meter n_bands. 3a716b1d9 dpif-netdev: Refactor and fix the buckets calculation. 73ece9c87 dpif-netdev: Fix the meter buckets overflow. d5dc16670 python: Send notifications after the transaction ends. 556e65e17 ovs-ctl: Allow recording hostname separately. 3982aee45 dpif-netdev: Fix crash when add dp flow without in_port field. 02096f1b3 Documentation: Fix DPDK qos example. 8f1dda316 raft: Report disconnected in cluster/status if candidate retries election. 79e9749da raft: Reintroduce jsonrpc inactivity probes. 2e84a4adb ovsdb-cs: Fix use-after-free for the request id. d2c311dce connmgr: Check nullptr inside ofmonitor_report(). 7307af690 ovsdb-client: Fix needs-conversion when SERVER is explicitly specified. 2a7a63571 windows, tests: Modify service test. 9b48549c6 netdev-linux: Fix indentation. 861a9f3b4 ofproto-dpif-upcall: Fix ukey leak on udpif destroy. 339044c3c ci: Use parallel build for distcheck. 38744b1bc ofp-actions: Fix use-after-free while decoding RAW_ENCAP. 33abe6c05 Prepare for 2.15.1. 8dc1733ea Set release date for 2.15.0. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-09-16ovs: add upstream-status to CVE patchBruce Ashfield
The patch file itself is missing an upstream-status, so we add it here. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-09-16openvswitch: fix CVE-2021-36980Zqiang
Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_decode) during the decoding of a RAW_ENCAP action. Reference: https://nvd.nist.gov/vuln/detail/CVE-2021-36980 Patches from: https://github.com/openvswitch/ovs/commit/65c61b0c23a0d474696d7b1cea522a5016a8aeb3 Signed-off-by: Zqiang <qiang.zhang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-08-02global: overrides syntax conversionBruce Ashfield
OEcore/bitbake are moving to use the clearer ":" as an overrides separator. This is pass one of updating the meta-virt recipes to use that syntax. This has only been minimally build/runtime tested, more changes will be required for missed overrides, or incorrect conversions Note: A recent bitbake is required: commit 75fad23fc06c008a03414a1fc288a8614c6af9ca Author: Richard Purdie <richard.purdie@linuxfoundation.org> Date: Sun Jul 18 12:59:15 2021 +0100 bitbake: data_smart/parse: Allow ':' characters in variable/function names It is becomming increasingly clear we need to find a way to show what is/is not an override in our syntax. We need to do this in a way which is clear to users, readable and in a way we can transition to. The most effective way I've found to this is to use the ":" charater to directly replace "_" where an override is being specified. This includes "append", "prepend" and "remove" which are effectively special override directives. This patch simply adds the character to the parser so bitbake accepts the value but maps it back to "_" internally so there is no behaviour change. This change is simple enough it could potentially be backported to older version of bitbake meaning layers using the new syntax/markup could work with older releases. Even if other no other changes are accepted at this time and we don't backport, it does set us on a path where at some point in future we could require a more explict syntax. I've tested this patch by converting oe-core/meta-yocto to the new syntax for overrides (9000+ changes) and then seeing that builds continue to work with this patch. (Bitbake rev: 0dbbb4547cb2570d2ce607e9a53459df3c0ac284) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-30slirp4netns: Add seccomp as REQUIRED_DISTRO_FEATURESDiego Sueiro
The libseccomp package is only available if seccomp is in DISTRO_FEATURES. Signed-off-by: Diego Sueiro <diego.sueiro@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-15cni: inhibit go.mod build for main cniBruce Ashfield
The cni plugins already have mod=vendor, but we also need to ensure that the main CNI build is not using go module based builds. To avoid inconsistent vendoring messages, we switch all plugins to no module builds as well. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04cni/plugins: update to 0.9.1Bruce Ashfield
Update the cni plugins part of the recipe to the 0.9.1 release: c4d4aa7 Remove Bryan Boreham as maintainer af26bab host-local: support ip/prefix in env args and CNI args f72aa98 [sbr]: Use different tableID for every ipCfg Check tableID not in use for every ipCfg 40c225e Small typo improves in README.md 76ef07e Allow multiple routes to be added for the same prefix. Enables ECMP d6bf1ea Update to lastest vendor/github.com/vishvananda/netlink bdaaa20 tuning: always update MAC in CNI result 33a2929 vendor: bump to libcni v1.0-rc1 820fee9 tuning: Add support of altering the allmulticast flag f34c600 [sbr]: Use different tableID for every ipCfg Move default table routes which match the ipCfg config 8f32968 Fix nil-pointer check 028fc2f host-local: support custom IPs allocation through runtime configuration 7da1c84 pkg/ip: introduce a new type `IP` to support formated <ip>[/<prefix>] 2eac102 go.mod: github.com/j-keck/arping v1.0.1 f4d2925 go.mod: github.com/buger/jsonparser v1.1.1 c3d0153 go.mod: github.com/alexflint/go-filemutex v1.1.0 75b64e0 go.mod github.com/Microsoft/hcsshim v0.8.16 bc85637 go.mod: godbus/dbus/v5 v5.0.3, coreos/go-systemd v22.2.0 d2d89dd go.mod: github.com/mattn/go-shellwords v1.0.11 59a6259 go.mod: github.com/sirupsen/logrus v1.8.1 3cc1135 CI: Install linux-modules-extra for VRF module 5b02c2a Fix broken links to online docs in plugin READMEs f275746 gha: update actions/setup-go@v2 b811967 remove redundant startRange in RangeIter due to overlap check on multi ranges 178d7c0 fix(win-bridge): panic while calling HNS api e09a17f portmap: use slashes in sysctl template to support interface names which separated by dots 9b09f16 pkg/ipam: use slash as sysctl separator so interface name can have dot e31cd2c [macvlan] Stop setting proxy-arp on macvlan interface 8e540bf tuning: increase test coverage to 1.0.0 and older spec versions d2e5b5d portmap: increase test coverage to 1.0.0 and older spec versions 8f7fe6d flannel: increase test coverage to 1.0.0 and older spec versions f33eedb firewall: increase test coverage to 1.0.0 and older spec versions da52be3 bandwidth: increase test coverage to 1.0.0 and older spec versions 02cdaaf host-local: increase test coverage to 1.0.0 and older spec versions f534133 static: increase test coverage to 1.0.0 and older spec versions 932653f dhcp: increase test coverage to 1.0.0 and older spec versions dd3f606 dhcp: add -resendmax option to limit lease acquisition time for testcases 4ddc8ba vlan: increase test coverage to 1.0.0 and older spec versions f56545c ptp: increase test coverage to 1.0.0 and older spec versions bbf7189 macvlan: increase test coverage to 1.0.0 and older spec versions 5eae558 loopback: increase test coverage to 1.0.0 and older spec versions 5096b53 ipvlan: increase test coverage to 1.0.0 and older spec versions 34cee8c host-device: increase test coverage to 1.0.0 and older spec versions c3c286c bridge: increase test coverage to 1.0.0 and older spec versions c8f341d bridge: simplify version-based testcase code 8c25db8 testutils: add test utilities for spec version features 7d8c767 plugins: update to spec version 1.0.0 9e2430b vendor: bump CNI to 1.0.0-pre @ 62e54113 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-09ipset: drop recipeBruce Ashfield
In the time between the k3s work starting and ending, meta-networking picked up the support we need for ipset. Now that the recipe is in a layer we already depend on, we don't need our own copy. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-09openvswitch: fix clobbered SRC_URIBruce Ashfield
commit 1b83c21436b2 [openvswitch: Fix build with musl libc] mistakenly copies common files and then clobbers the SRC_URI. While we could drop the SRC_URI components from the .inc now that we only have one active version in master (_git), we avoid that for now, since it is possible that a LTS version will be introduced in future cycles. So to fix the oddity, we drop the common components from the _git SRC_URI and append versus clobber. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-03-15cni: add ca-certifcates dependencyBruce Ashfield
Many of the CNI plugins require authenticated connections, as such they are looking for elements of ca-certificates. CNI isn't small, so we add this as a general rdepends. If we need to slim things down in the future, we can split the CNI into specific implementations and add the dependency to those packages. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-03-15ipset: warning fix, use BPN instead of PN in SRC_URIBruce Ashfield
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-03-15k3s: import version locked ipset dependencyBruce Ashfield
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-03-11openvswitch: uprev from 2.13 to 2.15Zqiang
- OVSDB: * Changed format in which ovsdb transactions are stored in database files. Now each transaction contains diff of data instead of the whole new value of a column. New ovsdb-server process will be able to read old database format, but old processes will *fail* to read database created by the new one. For cluster and active-backup service models follow upgrade instructions in 'Upgrading from version 2.14 and earlier to 2.15 and later' section of ovsdb(7). * New unixctl command 'ovsdb-server/get-db-storage-status' to show the status of the storage that's backing a database. * New unixctl command 'ovsdb-server/memory-trim-on-compaction on|off'. If turned on, ovsdb-server will try to reclaim all the unused memory after every DB compaction back to OS. Disabled by default. * Maximum backlog on RAFT connections limited to 500 messages or 4GB. Once threshold reached, connection is dropped (and re-established). Use the 'cluster/set-backlog-threshold' command to change limits. - DPDK: * Removed support for vhost-user dequeue zero-copy. * Add support for DPDK 20.11. - Userspace datapath: * Add the 'pmd' option to "ovs-appctl dpctl/dump-flows", which restricts a flow dump to a single PMD thread if set. * New 'options:dpdk-vf-mac' field for DPDK interface of VF ports, that allows configuring the MAC address of a VF representor. * Add generic IP protocol support to conntrack. With this change, all none UDP, TCP, and ICMP traffic will be treated as general L3 traffic, i.e. using 3 tupples. * Add parameters 'pmd-auto-lb-load-threshold' and 'pmd-auto-lb-improvement-threshold' to configure PMD auto load balance behaviour. - The environment variable OVS_UNBOUND_CONF, if set, is now used as the DNS resolver's (unbound) configuration file. - Linux datapath: * Support for kernel versions up to 5.8.x. - Terminology: * The terms "master" and "slave" have been replaced by "primary" and "secondary", respectively, for OpenFlow connection roles. * The term "slave" has been replaced by "member", for bonds, LACP, and OpenFlow bundle actions. - Support for GitHub Actions based continuous integration builds has been added. - Bareudp Tunnel * Bareudp device support is present in linux kernel from version 5.7 * Kernel bareudp device is not backported to ovs tree. * Userspace datapath support is not added - ovs-dpctl and 'ovs-appctl dpctl/': * New commands '{add,mod,del}-flows' where added, which allow adding, deleting, or modifying flows based on information read from a file. - IPsec: * Add option '--no-cleanup' to allow ovs-monitor-ipsec to stop without tearing down IPsec tunnels. * Add option '--no-restart-ike-daemon' to allow ovs-monitor-ipsec to start without restarting ipsec daemon. - Building the Linux kernel module from the OVS source tree is deprecated * Support for the Linux kernel is capped at version 5.8 * Only bug fixes for the Linux OOT kernel module will be accepted. * The Linux kernel module will be fully removed from the OVS source tree in OVS branch 2.18 fix some do_patch error about local patch. Signed-off-by: Zqiang <qiang.zhang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-03-04openvswitch: set CVE_VERSIONChen Qi
CVE entries are using version 2.xx.xx, our PV is 2.13+xxx, this causes problem for CVE detection. So we need to set a CVE_VERSION for better CVE scanning. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-02-06cni: update to 0.8.0Bruce Ashfield
The following CNI commits are part of this update: e32b586 remove build badges from homepage 296290a Switch from Travis to GH Actions a199e6a go fmt ada6726 tighten up plugin-finding logic eec3755 Add "alias" to conventions 867451c Fix typo in pkg/types/internal/convert.go 679ed9d Fix typo in CONVENTIONS.md 6d8228e maintainers: fix typo e781c94 types: remove SupportedVersions 7555ca3 spec: bump to 1.0.0-pre-release and remove 'version' from Result addresses 6823eba tests: small cleanup and removal of one useless testcase 3805b13 types: add 1.0.0 0050bfa types: implement convert module and make types use it 90311ea Bump release build Go version to 1.14 f9b5c9b Add security reporting info e5c65a5 Revert formatting of error codes 65bf688 Travis: bump go versions a7cceb9 add go.mod 93a7425 testhelpers: clean up how we build against old libcni targets c78d465 Replace 2019 conference announcement with links to the recordings fc1de42 Sync contact methods in README and CONTRIBUTING c815aca Update the SPEC, CODE-OF-CONDUCT, CONTRIBUTING, RELEASING with minor formatting changes and linting updates. 17a6379 Update README.md 956c943 adding OVN4NFV-K8s-Plugin as 3rd party plugin e2a7366 Retry exec commands on text file busy 76b18ea Typo fixes for infiniband GUID 44dabed invoke: capture and return stderr if plugin exits unexpectedly 279bc6c Add DeviceID attribute to RuntimeConfig fdcc7b1 test: allow specific package testing with PKGS=<x> ./test.sh ca0082f Add Infiniband GUID to well known Capabilities 38353fa Remove extra ',' chars which makes conflist examples invalid. 134f603 maintainers: remove Stefan per personal request 1435c6b Add Michael Cambria as a CNI maintainer 6b46a03 Update link freenode.org to freenode.net 075e303 Update roadmap for 1.0 plans 0b1c649 Change language identifier to jsonc for json with comments 704c56d Update tests f208f19 Remove Result.String cc6e8af pkg/utils: utility package should use black-box testing 025e32f pkg/utils: add utils_test 6f29b01 intercept netplugin std error 777584f Add Kube-OVN to CNI list e00fa53 appending antrea to the cni list 7815be7 Add Project Antrea in CNI list f2fa4a3 Add table of contents b36de6e DOCUMENTATION: Address incomplete instructions in CONTRIBUTING.md c35ac21 Adding Cisco ACI to CNI plugin list 3eb88ac Add Bruce Ma and Piotr Skarmuk as maintainers 6c6a315 Update README to sunset slack and call out kubecon presentations b89eff5 Add a note to README about where to find the binaries 4eec648 When the CNI version isn't supplied in config, use default. eefc069 SPEC: update validation rules for interface name in docs and address some comments b5188cf spec: fix some typo in docs c94fcd7 Perfect annotation: Correct word spelling mistakes 7be1ac9 add interface name validation to libcni and skel 9f4a623 utils: add validation function for interface name 2a82881 Bump golang c0f784d Update cnitool docs 94399d5 add err handling in plugins/test/noop/ d8dfb56 validate containerID and networkName ensure they contain only letters and numbers e4a11ba libcni: cache file operations require full uniqueness tuple in RuntimeConf a83f3cb libcni: also cache IfName, network name, and container ID 894863c libcni: fix cache file 'result' key name f3654f3 skel: remove needless functions and types 3e79703 modify some well-known errors 1318d7c libcni: find plugin in exec 9af40ed libcni: add config caching 722a488 docs: add ips and mac to well-known capabilities and fix some typo 227c438 SPEC: add some well-known error codes ba034ef testcases: make testcase use suitable error code 4b29940 skel: clean up typed Errors in skel 50192c0 types : add NewError method 0af0477 readme: add Alibaba Cloud CNI plugin 'Terway' to the list b92d83c bump linux to Bionic 18.04 in Travis and Vagrant a48337a add missing commas, fix syntax error 5077b14 Add stringifyArgs and parseArgs functions to utils.go 80ad241 libcni: add InitCNIConfigWithCacheDir() and deprecate RuntimeConfig.CacheDir 5dbeae8 clean up : remove useless variable a03dc28 clean up : fix staticcheck warnings cbca752 Docs: Small typo fixes in main README.md As well as the following plugin commits: fa48f75 ipam/dhcp: Add broadcast flag 74a6b28 vendor: bump libcni 8feef71 add flannel to support dual stack ip 343d233 bandwidth: fix panic in tests d41acb8 host-device: Add support for DPDK device (#490) 075c5a0 [main/vlan] Fix error handling for delegate IPAM plugin a8d1f5c dhcp: default dhcp clien timeout is 10s 354def7 vlan: fix error message text by removing ptp references 25fc741 dhcp: daemon dhcp client timeout is configurable 3161bb5 dhcp: timeout value is set in DHCP daemon ebce6d0 remove unused function 691238c deps: go mod tidy coreos/go-iptables 23a1d90 deps: bump coreos/go-iptables e13bab9 tuning: revert values on delete (#540) 680c6dd go mod tidy be19d78 bump to go 1.15 8d52c42 Add ability to trigger retests via comments 3ae85c1 pkg/ns: fix test case to tolerate pids going away. 25704f9 Add github build & test actions eb31403 bridge: fix testcase to check addresses we care about 336ba52 Remove travis. b47d178 vendor: bump ginkgo, gover 108c2ae portmap plugin should flush previous udp connections cccf539 Updating plugin README.md files (#549) c41c78b update netlink dependencies 50a3aa6 Xdhcp: fix example configuration 98c621a VRF: extend supported version to 0.3.1 too. b34402a VRF CNI: Add an optional table parameter. 5fc309a Add more tests for the vrf cni plugin. 362f5d6 Update github.com/vishvananda/netlink to v1.1.0 8d0d8a9 Introduce a new VRF CNI meta plugin. 1a7f1bd Travis: run tests on arm64 8a6e96b Replace nc with the local echo client. 3227902 Add an echo client to be used instead of nc. 59baaa1 Bump up the ubuntu version used in CI to bionic. 9ce99d3 flannel: allow input ipam parameters as basis for delegate 08ff3b6 ipvlan: make master config as optional 1ea19f9 Remove extraneous test file in Windows plugin 799d3cb Fix race condition in GetCurrentNS 839d918 lo: CNI_IFNAME is no longer ignored c50490e cni: bump to 0.8.0 01a8de9 Bump Go version to 1.13 and 1.14 2b6cd54 Add contact info 0214625 Update firewall README.md CNI-ADMIN 813f541 firewall: fix some typos in docs 051452c Update firewall README.md 877602d portmap DEL noop if no portMappings present 2bd04cb firewall: fix generate of admin chain comment d4775ec Fix handling of delay in acquiring lease with stp turned on 68a80bc Update README.md 5cb3a5e portmap: don't use unspecified address as destination b9560fd macvlan: set mac address from CNI_ARGS 79192cb host-device: Bring interfaces down before moving. 219eb9e ptp, bridge: disable accept_ra on the host-side interface 02bfece plugins/meta/sbr: Adjusted ipv6 address mask to /128 5e0fbd8 portmap: Apply the DNAT hairpin to the whole subnet a78853f Support device id in host device plugin (#471) 2d2583e win-bridge: add support for portMappings capability 30776ff check bridge's port state 2a48d68 Reset the route flag before moving the rule 486ef96 [DO NOT REVIEW] vendor upate to remove useless dependencies 8a0e3fe build error utility package to replace juju/errors 112288e Unlock OS thread after netns is restored c7e2cf7 owners: updates for maintainer changes 53854dd flannel: remove net conf file after DEL succeed a9b4e04 Make host-device to work with virtio net device 45fd949 ptp: remove some redundant lines 2ff84a4 pkg/ip: use type cast instead of untrusty error message 37207f0 pkg/utils: sysctl package should use black-box testing d1360b8 loopback: Fix ipv6 address checks Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-10-27openvswitch: use /run instead of /var/run in systemd service fileChen Qi
/var/run has been deprecated by systemd, so use /run instead, as suggested by systemd. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-03-13cni: prevent go from downloading stuff in the backgroundMark Asselstine
While testing the cni uprev by building in a container with network=none the following error was found: go: github.com/Microsoft/go-winio@v0.4.11: Get https://proxy.golang.org/github.com/%21microsoft/go-winio/@v/v0.4.11.mod: dial tcp: lookup proxy.golang.org on 128.224.144.130:53: dial udp 128.224.144.130:53: connect: network is unreachable After some digging through the go documentation it was found that the '-mod=vendor' is required for 'go build' to use shipped vendor modules when building modules. This can be confirmed by look at the 'build_linux.sh' script which is found in the plugins repo. By using '-mod=vendor' and also ensuring things are properly placed in the GOPATH (ie $B) we can avoid having to create many of the links we had been previously. We also put all the build artifacts into $B to avoid mixing source and build. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-03-13cni: 1.7.0 to 1.7.1 (and plugins 0.8.2 to 0.8.5)Mark Asselstine
Both uprev's are listed as 'minor' in the upstream release notes. Neither introduces an uprev in spec. This fixes issues we observed while testing the forthcoming cri-o uprev. NOTE: this commit should only be used with the follow-on commit [cni: prevent go from downloading stuff in the background] otherwise you will end up with files not owned by you which will prevent the recipe being properly cleaned. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-03-02openvswitch-git: refresh patch to fix patch-fuzz warningChangqing Li
Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-02-20openvswitch: uprev from v2.12 to v2.13Mark Asselstine
Another straightforward uprev with one fairly large change in the changelog. The Open Virtual Network component has now been moved to its own repo (https://github.com/ovn-org/ovn.git). If you were using this functionality a new recipe will need to be created. The ptest results are similar to after the v2.12 uprev ERROR: 2206 tests were run, 28 failed unexpectedly. 62 tests were skipped. The failed tests were in the following areas: checkpatch.at (5) ovs-ofctl.at (1) tunnel.at(1) tunnel-push-pop.at(3) tunnel-push-pop-ipv6.at(3) dpif-netdev.at (1) pmd.at(1) ofproto-dpif.at (7) bridge.at (2) ovsdb-idl.at(1) mcast-snooping.at(1) packet-type-aware.at(2) None of these affect core functionality or usecases and are similar to the results we see with v1.12. If specific usecases are affected by these failures we should address them on a need to fix basis. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-02-13openvswitch: uprev from v2.11 to v2.12Mark Asselstine
A mostly straightforward uprev. Unfortunately a required patch for python3 is only available on a non-release branch so we must carry it in order to build (the discussion on the mailing list was that an uprev might have avoided this, but this is not the case). The ptest results are similar to after the v2.11 uprev ERROR: 2413 tests were run, 23 failed unexpectedly. 383 tests were skipped. NOTE, however, that they have now marked many tests as 'skipped', such as the python2 results, so the failed and skipped numbers have essentially swapped with each other. The failed tests were in the following areas: checkpatch.at (5) ovs-ofctl.at (1) dpif-netdev.at (1) ofproto-dpif.at (6) bridge.at (2) ovn.at (2) ovn-controller-vtep.at (6) Most were issues with the test or expectations that source code would be available. There might be an issue around packaging of "/vswitchd/vswitch.ovsschema" but we should be able to overlook this for now, as we have with previous versions. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-10-02cni: move cni tools to /usr/libexec/cniStefan Agner
Use a standard location to store the cni tools and plugins. This is more in line how other distributions package cni. Keep a symlink to /opt/cni/bin for backward compatibility. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-10-02slirp4netns: add slirp4netns user-mode networkingStefan Agner
slirp4netns allows connecting a network namespace to the Internet in a completely unprivileged way, by connecting a TAP device in a network namespace to the usermode TCP/IP stack ("slirp")." Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-09-26netns: Fix build on qemux86-64Paul Barker
The build has broken again on master, even for non-static builds of netns. The simplest fix is to extend our existing patch to cover this case as well. Signed-off-by: Paul Barker <paul@betafive.co.uk> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-09-14openvswitch: drop LSB bitsMark Asselstine
openembedded-core commit fb064356af61 [Remove LSB support] dropped the 'lsb' recipe which caused openvswitch to throw a dependency fail for both sysvinit and systemd builds. LSB init functions for log_begin_msg, log_end_msg and others were being used. We now use the functions from ovs-lib which are part of OVS and supply the remaining ones directly. This allows us to regain the functionality and drop the dependency on 'lsb'. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-30openvswitch: install ovs-systemd-reloadChen Qi
Install ovs-systemd-reload as openvswitch.service uses it. openvswitch.service:ExecReload=/usr/share/openvswitch/scripts/ovs-systemd-reload Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-12cni: build more pluginsChen Qi
Also build plugins under ipam. Other distros default to contain these plugins. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-12cni: fix problem about cross compilationChen Qi
When setting up k8s, the following error appeared, failing to setup coredns pod. NetworkPlugin cni failed to set up pod "coredns-5f7fc64c95-4nnfq_kube-system" network: fork/exec /opt/cni/bin/loopback: no such file or directory This is because the binary, /opt/cni/bin/loopback, has wrong interpreter. So fix do_compile to use ${GO} instead of go to fix this problem. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-08-12cni: remove unnecessary GO settingsChen Qi
These settings are either in go.bbclass or duplicate, thus removing them. Keep only CGO_ENABLED and GOPATH to easier manipulation while upgrading cni. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-22containers/go/build: don't override global package strip flagsBruce Ashfield
When the go-lang container recipes were first created there were issues with strip and the resulting binaries. As such, strip was inhibited for the various packages. This variable is now set in the default classes, and tests show that strip works on the binaries (saving up to 2M on disk for some binaries) with no runtime issues found. So we drop our explicit set of the inhibit and let the build proceed by the defaults. If issues are found, we can re-enable the setting or bbappends can turn it back on for builds showing issues. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-07-12k8s: update CNI to 0.7.xBruce Ashfield
Updating the CNI and plugins to 0.7.x series. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-05-01netns: Upgrade to v0.5.3Paul Barker
Drop obsolete patches and forward-port the remaining required patch. We also need to fix up permissions after the build so that we can clean the build directory without errors if needed. Signed-off-by: Paul Barker <paul@betafive.co.uk> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-03-20netns: change build target to 'build' instead of 'static'Mark Asselstine
Attempting to build for x86-64 will result in an error: cannot find package runtime/cgo (using -importcfg) ...go/pkg/tool/linux_amd64/link: cannot open file : open : no such file or directory As a workaround we switch the build target to 'build' which results in a slightly smaller executable but does mean that several dynamic libraries are required to run the generated executable. This shouldn't be a problem as the build system will ensure the libraries are present on images where the executable will be included. This change only means the executable can't be copied as a single entity to a different machine and run. We do also patch the Makefile to allow the 'static' target to build successfully and in the patch commit log we describe the issue in full (at least in as much detail as we currently have on the issue). But since the issue isn't fully understood we don't recommend the 'static' build to be used at this time, thus default to the 'build' target. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>