[ovs-git] [openvswitch/ovs] 74aba1: Documentation: Correct claims about Debian packaging.

Ilya Maximets noreply at github.com
Wed Sep 16 12:28:19 UTC 2020


  Branch: refs/heads/master
  Home:   https://github.com/openvswitch/ovs
  Commit: 74aba1ff68178c371e450dc4a73b14d3026f89ef
      https://github.com/openvswitch/ovs/commit/74aba1ff68178c371e450dc4a73b14d3026f89ef
  Author: Ben Pfaff <blp at ovn.org>
  Date:   2020-09-15 (Tue, 15 Sep 2020)

  Changed paths:
    M Documentation/intro/install/distributions.rst

  Log Message:
  -----------
  Documentation: Correct claims about Debian packaging.

The documentation reported the union of all possible Debian- and
Debian-derived packaging.  This isn't realistic: there are differences
between OVS upstream, Debian downstream, and Ubuntu downstream.  This
commit distinguishes them.

Reported-by: Ravi Kerur <rkerur at gmail.com>
Signed-off-by: Ben Pfaff <blp at ovn.org>
Signed-off-by: Ilya Maximets <i.maximets at ovn.org>


  Commit: d3daf73db3e48d71a32839243e6ec323e02c0dd6
      https://github.com/openvswitch/ovs/commit/d3daf73db3e48d71a32839243e6ec323e02c0dd6
  Author: Jaime Caamaño Ruiz <jcaamano at suse.com>
  Date:   2020-09-15 (Tue, 15 Sep 2020)

  Changed paths:
    M rhel/openvswitch-fedora.spec.in

  Log Message:
  -----------
  rhel: Fix logrotate group when dpdk is enabled.

Otherwise logrotate will fail to generate the rotated log files.

Signed-off-by: Jaime Caamaño Ruiz <jcaamano at suse.com>
Acked-by: Flavio Leitner <fbl at sysclose.org>
Signed-off-by: Ilya Maximets <i.maximets at ovn.org>


  Commit: b0008d6233f9fe40f97ce9b37cdd797b30fbc069
      https://github.com/openvswitch/ovs/commit/b0008d6233f9fe40f97ce9b37cdd797b30fbc069
  Author: Flavio Leitner <fbl at sysclose.org>
  Date:   2020-09-15 (Tue, 15 Sep 2020)

  Changed paths:
    M Documentation/topics/userspace-tso.rst

  Log Message:
  -----------
  userspace-tso: Document the minimum kernel version.

The kernel needs to be at least 4.19-rc7 to include the commit
9d2f67e43b73 ("net/packet: fix packet drop as of virtio gso")
otherwise the TSO packets are dropped when using raw sockets.

Fixes: 29cf9c1b3b9c ("userspace: Add TCP Segmentation Offload support")
Reported-by: Yi Yang <yangyi01 at inspur.com>
Signed-off-by: Flavio Leitner <fbl at sysclose.org>
Signed-off-by: Ilya Maximets <i.maximets at ovn.org>


  Commit: 0287f840e8b7ab0947ba6f7397c310a652a831d8
      https://github.com/openvswitch/ovs/commit/0287f840e8b7ab0947ba6f7397c310a652a831d8
  Author: William Tu <u9012063 at gmail.com>
  Date:   2020-09-15 (Tue, 15 Sep 2020)

  Changed paths:
    M lib/classifier.c

  Log Message:
  -----------
  classifier: Fix use of uninitialized value.

Coverity reports use of uninitialized value of cursor.
This happens in cls_cursor_start(), when rule is false,
cursor.subtable is uninitialized. CID 279324.

Signed-off-by: William Tu <u9012063 at gmail.com>
Reviewed-by: Greg Rose <gvrose8192 at gmail.com>
Signed-off-by: Ilya Maximets <i.maximets at ovn.org>


  Commit: 9d15c02a8bf9cc732cce33012bd1577758260521
      https://github.com/openvswitch/ovs/commit/9d15c02a8bf9cc732cce33012bd1577758260521
  Author: Jaime Caamaño Ruiz <jcaamano at suse.com>
  Date:   2020-09-15 (Tue, 15 Sep 2020)

  Changed paths:
    M rhel/usr_lib_systemd_system_ovsdb-server.service

  Log Message:
  -----------
  rhel: Fix reload of OVS_USER_ID on startup.

OVS_USER_ID was being picked up from a previously existing
openvswitch.useropts rendering innefective any configuration change
through sysconfig.

There is no ordering between Exec* and Environment* stanzas of systemd,
full Enviroment* is always loaded before each Exec*. We make
sure that openvswitch.useropts is removed in a first Exec so that a
fresh OVS_USER_ID can be picked up from config in successive Exec*.

Fixes: 94e1e8b ("rhel: run ovn with the same user as ovs")
Signed-off-by: Jaime Caamaño Ruiz <jcaamano at suse.com>
Acked-by: Greg Rose <gvrose8192 at gmail.com>
Acked-by: Aaron Conole <aconole at redhat.com>
Signed-off-by: Ilya Maximets <i.maximets at ovn.org>


  Commit: db7041716bfe068ddd0cef05e830b65690ad5c8a
      https://github.com/openvswitch/ovs/commit/db7041716bfe068ddd0cef05e830b65690ad5c8a
  Author: Jaime Caamaño Ruiz <jcaamano at suse.com>
  Date:   2020-09-15 (Tue, 15 Sep 2020)

  Changed paths:
    M lib/netdev-dpdk.c

  Log Message:
  -----------
  netdev-dpdk: Don't set rx mq mode for net_virtio.

Since DPDK 19.11 [1], it is not allowed to set any RX mq mode for virtio
driver.

[1] https://github.com/DPDK/dpdk/commit/13b3137f3b7c8f866947a9b34e06a8aec0d084f7

Signed-off-by: Jaime Caamaño Ruiz <jcaamano at suse.com>
Acked-by: Flavio Leitner <fbl at sysclose.org>
Signed-off-by: Ilya Maximets <i.maximets at ovn.org>


  Commit: 27dc7adf66b1af88f238da46c6430e3d2eaa4da3
      https://github.com/openvswitch/ovs/commit/27dc7adf66b1af88f238da46c6430e3d2eaa4da3
  Author: Federico Paolinelli <fpaoline at redhat.com>
  Date:   2020-09-16 (Wed, 16 Sep 2020)

  Changed paths:
    M ovsdb/ovsdb-tool.c

  Log Message:
  -----------
  ovsdb-tool: Add a db consistency check to the ovsdb-tool check-cluster command.

There are some occurrences where the database ends up in an inconsistent
state. This happened in ovn-k8s and is described in [0].
Here we are adding a supported way to check that a given db is consistent,
which is less error prone than checking the logs.

Tested against both a valid db and a corrupted db attached to the
above bug [1]. Also, tested  with a fresh db that did not do a snapshot.

[0]: https://bugzilla.redhat.com/show_bug.cgi?id=1837953#c23
[1]: https://bugzilla.redhat.com/attachment.cgi?id=1697595

Signed-off-by: Federico Paolinelli <fpaoline at redhat.com>
Suggested-by: Dumitru Ceara <dceara at redhat.com>
Acked-by: Dumitru Ceara <dceara at redhat.com>
Signed-off-by: Ilya Maximets <i.maximets at ovn.org>


  Commit: 7024ddf3202646095adfbb1998904abd7b21f6e3
      https://github.com/openvswitch/ovs/commit/7024ddf3202646095adfbb1998904abd7b21f6e3
  Author: Dumitru Ceara <dceara at redhat.com>
  Date:   2020-09-16 (Wed, 16 Sep 2020)

  Changed paths:
    M NEWS
    M ovsdb/ovsdb-server.c
    M ovsdb/storage.c
    M ovsdb/storage.h

  Log Message:
  -----------
  ovsdb: Add unixctl command to show storage status.

If a database enters an error state, e.g., in case of RAFT when reading
the DB file contents if applying the RAFT records triggers constraint
violations, there's no way to determine this unless a client generates a
write transaction. Such write transactions would fail with "ovsdb-error:
inconsistent data".

This commit adds a new command to show the status of the storage that's
backing a database.

Example, on an inconsistent database:
$ ovs-appctl -t /tmp/test.ctl ovsdb-server/get-db-storage-status DB
status: ovsdb error: inconsistent data

Example, on a consistent database:
$ ovs-appctl -t /tmp/test.ctl ovsdb-server/get-db-storage-status DB
status: ok

Signed-off-by: Dumitru Ceara <dceara at redhat.com>
Acked-by: Han Zhou <hzhou at ovn.org>
Signed-off-by: Ilya Maximets <i.maximets at ovn.org>


  Commit: 32ae689274032eecc38d569d47576f191d746c5d
      https://github.com/openvswitch/ovs/commit/32ae689274032eecc38d569d47576f191d746c5d
  Author: Timothy Redaelli <tredaelli at redhat.com>
  Date:   2020-09-16 (Wed, 16 Sep 2020)

  Changed paths:
    M .gitignore
    M Makefile.am
    R manpages.mk

  Log Message:
  -----------
  Remove manpages.mk from git.

manpages.mk is generated at build-time using sodepends.py and so there is no
need to keep it in git.

Signed-off-by: Timothy Redaelli <tredaelli at redhat.com>
Acked-by: Flavio Leitner <fbl at sysclose.org>
Signed-off-by: Ilya Maximets <i.maximets at ovn.org>


  Commit: 8d56db08831af84a5a37e16f3df24e6e22901dcd
      https://github.com/openvswitch/ovs/commit/8d56db08831af84a5a37e16f3df24e6e22901dcd
  Author: Yi-Hung Wei <yihung.wei at gmail.com>
  Date:   2020-09-16 (Wed, 16 Sep 2020)

  Changed paths:
    M selinux/openvswitch-custom.te.in

  Log Message:
  -----------
  selinux: Add missing permissions for ovs-kmod-ctl.

On RHEL 8,  a SELinux policy is missing when ovs-kmod-ctl use modprobe
to load kernel modules.  This patch adds the missing permissions based
on /var/log/audit/audit.log

Example log of the AVC violations:
  type=AVC msg=audit(1599075387.136:65): avc:  denied  { read } for
  pid=1472 comm="modprobe" name="modules.alias.bin" dev="dm-0" ino=586629
  scontext=system_u:system_r:openvswitch_load_module_t:s0
  tcontext=system_u:object_r:modules_dep_t:s0 tclass=file permissive=0

  type=AVC msg=audit(1599085253.148:45): avc:  denied  { open } for pid=1355
  comm="modprobe" path="/usr/lib/modules/4.18.0-193.el8.x86_64/modules.dep.bin"
  dev="dm-0" ino=624258 scontext=system_u:system_r:openvswitch_load_module_t:s0
  tcontext=unconfined_u:object_r:modules_dep_t:s0 tclass=file permissive=0

VMWare-BZ: #2633569
Signed-off-by: Yi-Hung Wei <yihung.wei at gmail.com>
Acked-by: Greg Rose <gvrose8192 at gmail.com>
Acked-by: Ansis Atteka <aatteka at ovn.org>
Signed-off-by: Ilya Maximets <i.maximets at ovn.org>


  Commit: 8dc3911bb190f59276aac1e710b69b6411e00884
      https://github.com/openvswitch/ovs/commit/8dc3911bb190f59276aac1e710b69b6411e00884
  Author: Ilya Maximets <i.maximets at ovn.org>
  Date:   2020-09-16 (Wed, 16 Sep 2020)

  Changed paths:
    M .cirrus.yml

  Log Message:
  -----------
  cirrus: Use FreeBSD 11.4.

Support cycle of 11.3 ends in the end of September 2020,
so we need to upgrade.

Signed-off-by: Ilya Maximets <i.maximets at ovn.org>
Acked-by: Aaron Conole <aconole at redhat.com>


  Commit: b424becaac58d8cb08fb19ea839be6807d3ed57f
      https://github.com/openvswitch/ovs/commit/b424becaac58d8cb08fb19ea839be6807d3ed57f
  Author: Boleslaw Tokarski <boleslaw.tokarski at jollamobile.com>
  Date:   2020-09-16 (Wed, 16 Sep 2020)

  Changed paths:
    M ipsec/ovs-monitor-ipsec.in

  Log Message:
  -----------
  ipsec: Fix Strongswan configuration syntax.

Strongswan seems to have .opt files in the source tree with the dotted
option syntax. It seems that up until version 5.6, the syntax was also
accepted by Strongswan.

However, the .opt files are converted to .conf files during Strongswan
build, and the dotted syntax is no longer accepted by Strongswan (tested
on 5.8.2).

The effect was that the ovs ipsec monitor fails to start Strongswan,
since that complains with:
/etc/strongswan.d/ovs.conf:4: syntax error, unexpected ., expecting : or '{' or '=' [.]

This commit fixes the configuration file provided to Strongswan to .conf
syntax.

Signed-off-by: Boleslaw Tokarski <boleslaw.tokarski at jollamobile.com>
Signed-off-by: Ilya Maximets <i.maximets at ovn.org>


Compare: https://github.com/openvswitch/ovs/compare/5198e8a06928...b424becaac58


More information about the git mailing list