linux/meta-virtualization.git/recipes-networking, branch master-test

slirp4netns: Add seccomp as REQUIRED_DISTRO_FEATURES

2021-06-30T15:19:21+00:00

The libseccomp package is only available if seccomp is in DISTRO_FEATURES. Signed-off-by: Diego Sueiro Signed-off-by: Bruce Ashfield

cni: inhibit go.mod build for main cni

2021-06-15T14:33:41+00:00

The cni plugins already have mod=vendor, but we also need to ensure that the main CNI build is not using go module based builds. To avoid inconsistent vendoring messages, we switch all plugins to no module builds as well. Signed-off-by: Bruce Ashfield

cni/plugins: update to 0.9.1

2021-06-04T12:43:11+00:00

Update the cni plugins part of the recipe to the 0.9.1 release: c4d4aa7 Remove Bryan Boreham as maintainer af26bab host-local: support ip/prefix in env args and CNI args f72aa98 [sbr]: Use different tableID for every ipCfg Check tableID not in use for every ipCfg 40c225e Small typo improves in README.md 76ef07e Allow multiple routes to be added for the same prefix. Enables ECMP d6bf1ea Update to lastest vendor/github.com/vishvananda/netlink bdaaa20 tuning: always update MAC in CNI result 33a2929 vendor: bump to libcni v1.0-rc1 820fee9 tuning: Add support of altering the allmulticast flag f34c600 [sbr]: Use different tableID for every ipCfg Move default table routes which match the ipCfg config 8f32968 Fix nil-pointer check 028fc2f host-local: support custom IPs allocation through runtime configuration 7da1c84 pkg/ip: introduce a new type `IP` to support formated [/] 2eac102 go.mod: github.com/j-keck/arping v1.0.1 f4d2925 go.mod: github.com/buger/jsonparser v1.1.1 c3d0153 go.mod: github.com/alexflint/go-filemutex v1.1.0 75b64e0 go.mod github.com/Microsoft/hcsshim v0.8.16 bc85637 go.mod: godbus/dbus/v5 v5.0.3, coreos/go-systemd v22.2.0 d2d89dd go.mod: github.com/mattn/go-shellwords v1.0.11 59a6259 go.mod: github.com/sirupsen/logrus v1.8.1 3cc1135 CI: Install linux-modules-extra for VRF module 5b02c2a Fix broken links to online docs in plugin READMEs f275746 gha: update actions/setup-go@v2 b811967 remove redundant startRange in RangeIter due to overlap check on multi ranges 178d7c0 fix(win-bridge): panic while calling HNS api e09a17f portmap: use slashes in sysctl template to support interface names which separated by dots 9b09f16 pkg/ipam: use slash as sysctl separator so interface name can have dot e31cd2c [macvlan] Stop setting proxy-arp on macvlan interface 8e540bf tuning: increase test coverage to 1.0.0 and older spec versions d2e5b5d portmap: increase test coverage to 1.0.0 and older spec versions 8f7fe6d flannel: increase test coverage to 1.0.0 and older spec versions f33eedb firewall: increase test coverage to 1.0.0 and older spec versions da52be3 bandwidth: increase test coverage to 1.0.0 and older spec versions 02cdaaf host-local: increase test coverage to 1.0.0 and older spec versions f534133 static: increase test coverage to 1.0.0 and older spec versions 932653f dhcp: increase test coverage to 1.0.0 and older spec versions dd3f606 dhcp: add -resendmax option to limit lease acquisition time for testcases 4ddc8ba vlan: increase test coverage to 1.0.0 and older spec versions f56545c ptp: increase test coverage to 1.0.0 and older spec versions bbf7189 macvlan: increase test coverage to 1.0.0 and older spec versions 5eae558 loopback: increase test coverage to 1.0.0 and older spec versions 5096b53 ipvlan: increase test coverage to 1.0.0 and older spec versions 34cee8c host-device: increase test coverage to 1.0.0 and older spec versions c3c286c bridge: increase test coverage to 1.0.0 and older spec versions c8f341d bridge: simplify version-based testcase code 8c25db8 testutils: add test utilities for spec version features 7d8c767 plugins: update to spec version 1.0.0 9e2430b vendor: bump CNI to 1.0.0-pre @ 62e54113 Signed-off-by: Bruce Ashfield

ipset: drop recipe

2021-04-09T19:07:50+00:00

In the time between the k3s work starting and ending, meta-networking picked up the support we need for ipset. Now that the recipe is in a layer we already depend on, we don't need our own copy. Signed-off-by: Bruce Ashfield

openvswitch: fix clobbered SRC_URI

2021-04-09T13:47:14+00:00

commit 1b83c21436b2 [openvswitch: Fix build with musl libc] mistakenly copies common files and then clobbers the SRC_URI. While we could drop the SRC_URI components from the .inc now that we only have one active version in master (_git), we avoid that for now, since it is possible that a LTS version will be introduced in future cycles. So to fix the oddity, we drop the common components from the _git SRC_URI and append versus clobber. Signed-off-by: Bruce Ashfield

cni: add ca-certifcates dependency

2021-03-16T03:15:42+00:00

Many of the CNI plugins require authenticated connections, as such they are looking for elements of ca-certificates. CNI isn't small, so we add this as a general rdepends. If we need to slim things down in the future, we can split the CNI into specific implementations and add the dependency to those packages. Signed-off-by: Bruce Ashfield

ipset: warning fix, use BPN instead of PN in SRC_URI

2021-03-16T03:15:42+00:00

Signed-off-by: Bruce Ashfield

k3s: import version locked ipset dependency

2021-03-16T03:15:42+00:00

Signed-off-by: Bruce Ashfield

openvswitch: uprev from 2.13 to 2.15

2021-03-12T03:33:29+00:00

- OVSDB: * Changed format in which ovsdb transactions are stored in database files. Now each transaction contains diff of data instead of the whole new value of a column. New ovsdb-server process will be able to read old database format, but old processes will *fail* to read database created by the new one. For cluster and active-backup service models follow upgrade instructions in 'Upgrading from version 2.14 and earlier to 2.15 and later' section of ovsdb(7). * New unixctl command 'ovsdb-server/get-db-storage-status' to show the status of the storage that's backing a database. * New unixctl command 'ovsdb-server/memory-trim-on-compaction on|off'. If turned on, ovsdb-server will try to reclaim all the unused memory after every DB compaction back to OS. Disabled by default. * Maximum backlog on RAFT connections limited to 500 messages or 4GB. Once threshold reached, connection is dropped (and re-established). Use the 'cluster/set-backlog-threshold' command to change limits. - DPDK: * Removed support for vhost-user dequeue zero-copy. * Add support for DPDK 20.11. - Userspace datapath: * Add the 'pmd' option to "ovs-appctl dpctl/dump-flows", which restricts a flow dump to a single PMD thread if set. * New 'options:dpdk-vf-mac' field for DPDK interface of VF ports, that allows configuring the MAC address of a VF representor. * Add generic IP protocol support to conntrack. With this change, all none UDP, TCP, and ICMP traffic will be treated as general L3 traffic, i.e. using 3 tupples. * Add parameters 'pmd-auto-lb-load-threshold' and 'pmd-auto-lb-improvement-threshold' to configure PMD auto load balance behaviour. - The environment variable OVS_UNBOUND_CONF, if set, is now used as the DNS resolver's (unbound) configuration file. - Linux datapath: * Support for kernel versions up to 5.8.x. - Terminology: * The terms "master" and "slave" have been replaced by "primary" and "secondary", respectively, for OpenFlow connection roles. * The term "slave" has been replaced by "member", for bonds, LACP, and OpenFlow bundle actions. - Support for GitHub Actions based continuous integration builds has been added. - Bareudp Tunnel * Bareudp device support is present in linux kernel from version 5.7 * Kernel bareudp device is not backported to ovs tree. * Userspace datapath support is not added - ovs-dpctl and 'ovs-appctl dpctl/': * New commands '{add,mod,del}-flows' where added, which allow adding, deleting, or modifying flows based on information read from a file. - IPsec: * Add option '--no-cleanup' to allow ovs-monitor-ipsec to stop without tearing down IPsec tunnels. * Add option '--no-restart-ike-daemon' to allow ovs-monitor-ipsec to start without restarting ipsec daemon. - Building the Linux kernel module from the OVS source tree is deprecated * Support for the Linux kernel is capped at version 5.8 * Only bug fixes for the Linux OOT kernel module will be accepted. * The Linux kernel module will be fully removed from the OVS source tree in OVS branch 2.18 fix some do_patch error about local patch. Signed-off-by: Zqiang Signed-off-by: Bruce Ashfield

openvswitch: set CVE_VERSION

2021-03-05T03:45:17+00:00

CVE entries are using version 2.xx.xx, our PV is 2.13+xxx, this causes problem for CVE detection. So we need to set a CVE_VERSION for better CVE scanning. Signed-off-by: Chen Qi Signed-off-by: Bruce Ashfield