summaryrefslogtreecommitdiff
path: root/debian
Commit message (Collapse)AuthorAgeFilesLines
* DNS: Add basic support for asynchronous DNS resolvingYifeng Sun2018-07-061-1/+3
| | | | | | | | | | | | | | | | | | | | | | This patch is a simple implementation for the proposal discussed in https://mail.openvswitch.org/pipermail/ovs-dev/2017-August/337038.html and https://mail.openvswitch.org/pipermail/ovs-dev/2017-October/340013.html. It enables ovs-vswitchd and other utilities to use DNS names when specifying OpenFlow and OVSDB remotes. Below are some of the features and limitations of this patch: - Resolving is asynchornous in daemon context, avoiding blocking main loop; - Resolving is synchronous in general utility context; - Both IPv4 and IPv6 are supported; - The resolving API is thread-safe; - Depends on the unbound library; - When multiple ip addresses are returned, only the first one is used; - /etc/nsswitch.conf isn't respected as unbound library doesn't look at it; - For async-resolving, caller need to retry later; there is no callback. Signed-off-by: Yifeng Sun <pkusunyifeng@gmail.com> Signed-off-by: Ben Pfaff <blp@ovn.org>
* ovs-kmod-ctl: introduce a kernel module load scriptAaron Conole2018-06-172-0/+2
| | | | | | | | | | | | | | | | Currently, Open vSwitch on linux embeds the logic of loading and unloading kernel modules into the ovs-ctl and ovs-lib script files. This works, but it means that there is no way to leverage extended filesystem attributes to grant fine grain permissions relating to module loading. The split out utility 'ovs-kmod-ctl' will be used in an upcoming commit for RHEL-based distributions to have a separate transition domain that will allow module loading to be given to a separate selinux domain from the openvswitch_t domain. Acked-by: Ansis Atteka <aatteka@ovn.org> Acked-by: Timothy Redaelli <tredaelli@redhat.com> Signed-off-by: Aaron Conole <aconole@redhat.com>
* treewide: Convert leading tabs to spaces.Ben Pfaff2018-06-116-126/+126
| | | | | | | | | It's always been OVS coding style to use spaces rather than tabs for indentation, but some tabs have snuck in over time. This commit converts them to spaces. Signed-off-by: Ben Pfaff <blp@ovn.org> Acked-by: Justin Pettit <jpettit@ovn.org>
* Edit Open vSwitch license info so that GitHub recognizes it.Andrea Kao2018-04-161-2/+1
| | | | | | | | | | | | | | | | | | | GitHub uses a library called Licensee to identify a project's license type. It shows this information in the status bar and via the API if it can unambiguously identify the license. This commit creates a LICENSE file that stores the full text of the Apache license. It also removes the COPYING file and transfers its contents to a new "License" section in the README. Collectively, these changes allow Licensee to successfully identify the license type of Open vSwitch's codebase as Apache. Submitted-at: https://github.com/openvswitch/ovs/pull/224 Signed-off-by: Andrea Kao <eirinikos@gmail.com> [blp@ovn.org removed references to COPYING and updated Makefile.am] Signed-off-by: Ben Pfaff <blp@ovn.org> Acked-by: Aaron Conole <aconole@redhat.com>
* ovsdb-server: Add support for a built-in _Server database.Ben Pfaff2018-03-241-0/+1
| | | | | | | | | | | | | | | | | | | | | The _Server database is valuable primarily because it provides database clients a way to find out the details of changes to databases, schemas, etc. in a granular, natural way. Until now, the only way that the server could notify clients about these kinds of changes was to close the session; when the client reconnects, it is expected to reassess the server's state. One way to provide this kind of granular information would be to add specific JSON-RPC requests to obtain notifications for different kinds of changes, but since ovsdb-server already provides granular and flexible notification support for databases, using a database for the purpose is convenient and avoids duplicating functionality. Initially this database only reports databases' names and schemas, but when clustering support is added in a later commit it will also report important aspects of clustering and cluster status. Thus, this database also reduces the need to add JSON-RPC calls to retrieve information about new features. Signed-off-by: Ben Pfaff <blp@ovn.org>
* Set release dates for 2.9.0.Justin Pettit2018-02-191-1/+1
| | | | Signed-off-by: Justin Pettit <jpettit@ovn.org>
* debian: Do not modify pre-existing defaults fileFrode Nordahl2018-02-011-8/+0
| | | | | | | | | | | | | | | | | | | | | | | | | Currently, on installation or upgrade the openvswitch-switch deb package will in some circumstances modify a pre-existing /etc/default/openvswitch-switch configuration file. This does not play well with modeling and configuration management tools and may lead to unnecessary restarts of the openvswitch-switch service after the initial restart done as part of the package upgrade. As restarting the openvswitch-switch affects the datapath this is something we should try to avoid. I also believe the current behaviour to be in conflict with best practices set out in the config files section of the [Debian Policy](https://www.debian.org/doc/debian-policy/#s-config-files). This commit addresses this by removing the part of the postinst script that attempts to append missing documentation parts of the template and leaves the installed defaults file alone when it exists. Fixes: 0aaa379d99f4 ("Debian packaging: Add several new settings to /etc/default/openflow-switch.") Signed-off-by: Frode Nordahl <frode.nordahl@gmail.com> Reported-at: https://github.com/openvswitch/ovs-issues/issues/137 Signed-off-by: Ben Pfaff <blp@ovn.org>
* Prepare for post-2.9.0 (2.9.90).Justin Pettit2018-01-171-0/+6
| | | | Signed-off-by: Justin Pettit <jpettit@ovn.org>
* Prepare for 2.9.0.Justin Pettit2018-01-171-3/+3
| | | | Signed-off-by: Justin Pettit <jpettit@ovn.org>
* OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logsNuman Siddique2017-11-261-3/+3
| | | | | | | | | | | | | Presently, logrotate script, searches for the pid files in /var/log/openvswitch and passes the pid file name (without .pid) as target to ovs-appctl. This approach doesn't work for OVN DB servers since the ctl files are generated as "ovnnb_db.ctl" and "ovnsb_db.ctl". So search for the .ctl files instead and use them as target to ovs-appctl. Suggested-by: Ben Pfaff <blp@ovn.org> Signed-off-by: Numan Siddique <nusiddiq@redhat.com> Signed-off-by: Ben Pfaff <blp@ovn.org> Acked-by: Mark Michelson <mmichels@redhat.com>
* Set release date for 2.8.0.Ben Pfaff2017-10-131-2/+1
| | | | | Signed-off-by: Ben Pfaff <blp@ovn.org> Signed-off-by: Justin Pettit <jpettit@ovn.org>
* Debian: Update package dependencyYi-Hung Wei2017-09-241-3/+3
| | | | | | | | | | | | | | | | Given that it is libopenvswitch-dev not libopenvswitch that depends on libssl-dev, this patch updates debian/control file to reflect that libopenvswitch-dev depends on libssl-dev, and libopenvswitch depends on openssl. Tested on Ubuntu 16.04 and 14.04. VMWare-BZ: #1953215 CC: Ben Warren <ben@skyportsystems.com> Fixes: c33e9122dbc3 ("Debian: Rework libopenvswitch packages") Signed-off-by: Yi-Hung Wei <yihung.wei@gmail.com> Acked-by: Ben Warren <ben@skyportsystems.com> Signed-off-by: Gurucharan Shetty <guru@ovn.org>
* debian: Add note on interfaces in "auto" section.Gurucharan Shetty2017-08-071-1/+12
| | | | | | | | | | | We had a note about the issues with adding OVS interfaces in the "auto" section. This commit clarifies what an "auto" section is and also adds another note about how adding OVS bridges in the "auto" section can cause race conditions with systemd. Signed-off-by: Gurucharan Shetty <guru@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* Prepare for post-2.8.0 (2.8.90).Ben Pfaff2017-08-041-0/+6
| | | | Signed-off-by: Ben Pfaff <blp@ovn.org>
* Prepare for 2.8.0.Ben Pfaff2017-08-041-2/+2
| | | | Signed-off-by: Ben Pfaff <blp@ovn.org>
* openvswitch-switch.postinst: Remove upstart files.Gurucharan Shetty2017-07-121-0/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | For a while, ubuntu used upstart scripts as an alternative for sysv scripts. For e.g popular releases like ubuntu12.04 and ubuntu14.04 have upstart infrastructure. From Ubuntu16.04, they have moved to systemd. Ubuntu maintainers have a fork of openvswitch packages with upstart scripts. When a user installs openvswitch-switch package on a ubuntu 14.04 with 'apt-get install openvswitch-switch', two upstart files are added to /etc/init directory. Now, when the same user builds debian packages from this repo and then installs them, the older upstart files don't get deleted. What this means is that a command like 'invoke-rc.d openvswitch-switch restart' calls initctl scripts instead of sysv script that this repo provides. In our sysv scripts we have logic to carefully upgrade kernel module and save openflow flows. This breaks the intent of the package from this repo. This commit deletes any stale upstart files that have remained in the system. Signed-off-by: Gurucharan Shetty <guru@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* openvswitch-switch.postinst: Replace tabs by spacesGurucharan Shetty2017-07-121-13/+13
| | | | | | | | There was some inconsistency with some tabs and some spaces used. Signed-off-by: Gurucharan Shetty <guru@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* debian: Use debhelper for DEB_UPSTREAM_VERSIONClint Byrum2017-07-072-8/+11
| | | | | | | | debhelper provides helpers to get parts of the version number, including this part which was until now figured out in an open-coded way. Signed-off-by: Clint Byrum <clint@fewbar.com> Signed-off-by: Ben Pfaff <blp@ovn.org>
* Debian: Provide multi-arch supportBen Warren2017-06-144-5/+8
| | | | | | | | This puts all libraries and pkg-config files in architecture-specific directories for easier cross-compiling. Signed-off-by: Ben Warren <ben@skyportsystems.com> Signed-off-by: Ben Pfaff <blp@ovn.org>
* Debian: Rework libopenvswitch packagesBen Warren2017-06-146-5/+27
| | | | | | | | | | | | | | | | The 'openvswitch-common' package did not work well with cross-compiling since it required Python. This package is broken into two packages as follows: - libopenvwitch: contains library files (.a, .so) - openvswitch-common: depends on libopenvswitch, contains command-line tools such as ovs-ofctl, ovs-appctl etc. In addition, this 'openvswitch-dev' library is renamed to 'libopenvswitch-dev' to align more closely with Debian policy. It depends on libopenvswitch. Signed-off-by: Ben Warren <ben@skyportsystems.com> Signed-off-by: Ben Pfaff <blp@ovn.org>
* debian: Add SYSTEMCTL_SKIP_REDIRECT to init filesRaymond Burkholder2017-05-304-0/+4
| | | | | | | | | | Current versions of systemd in Debian Stretch use SYSTEMCTL_SKIP_REDIRECT instead of _SYSTEMCTL_SKIP_REDIRECT. Provide both variables in the .init files. Signed-off-by: Raymond Burkholder <ray@oneunified.net> Suggested-by: Guru Shetty <guru@ovn.org> Signed-off-by: Gurucharan Shetty <guru@ovn.org>
* debian, xenserver: Update logrotate config to match RHEL.Ben Pfaff2017-04-241-7/+7
| | | | | | | | | | | | | | | | | | | | | | | | | Commit 618a5b45ae8b ("rhel: Avoid logrotate error if /var/run/openvswitch does not exist") updated the RHEL logrotate configuration. This commit makes similar changes for Debian, by synchronizing with the RHEL version. In particular: - Indent to match logrotate.conf(5) examples. - Use "sharedscripts" flag, because the postrotate script only needs to run once regardless of the number of rotations. - Drop "delaycompress", because the postrotate script does make daemons reopen their log files. - Ignore errors calling vlog/reopen. Also make similar changes to the xenserver logrotate script. I confirmed via Twitter that the xenserver packaging still has users. CC: Timothy Redaelli <tredaelli@redhat.com> Signed-off-by: Ben Pfaff <blp@ovn.org> Acked-by: Gurucharan Shetty <guru@ovn.org>
* doc: Convert ovs-test to rSTStephen Finucane2017-04-211-1/+0
| | | | | Signed-off-by: Stephen Finucane <stephen@that.guru> Signed-off-by: Ben Pfaff <blp@ovn.org>
* doc: Convert ovs-vlan-test to rSTStephen Finucane2017-04-211-1/+0
| | | | | | | | | | | | | | | Let's start with a simple one that lets us focus on setting up most of the required "infrastructure" for building man pages using Sphinx. This changes the 'check-htmldocs' target to 'check-docs' as its now responsible for building man page docs too. Other than that, hurrah for (mostly) legible syntaxes. [1] http://www.tldp.org/HOWTO/Man-Page/q2.html Signed-off-by: Stephen Finucane <stephen@that.guru> Signed-off-by: Ben Pfaff <blp@ovn.org>
* debian; Avoid installing ovs-vswitchd.conf.db manpage as "db" language.Ben Pfaff2017-03-171-0/+3
| | | | | | | | | | | Usually, when the name of a manpage has a two-letter extension, it means that the manpage is written in the language designated by that language code. Reported-by: Michael Stapelberg <stapelberg@debian.org> Reported-at: https://bugs.debian.org/850631 Signed-off-by: Ben Pfaff <blp@ovn.org> Tested-by: nickcooper-zhangtonghao <nic@opencloud.tech>
* debian: Rewrite "ifconfig" to "ip" command.nickcooper-zhangtonghao2017-03-171-4/+4
| | | | | | | | | | Some debian distribution may not contain the ifconfig. We use the ip command instead of ifconfig in debian/ifupdown.sh Reported-at: https://mail.openvswitch.org/pipermail/ovs-dev/2017-March/329503.html CC: prochazka <prochazka@cortex.cz> Signed-off-by: nickcooper-zhangtonghao <nic@opencloud.tech> Signed-off-by: Ben Pfaff <blp@ovn.org>
* Set release date for 2.7.0.Justin Pettit2017-03-151-1/+1
| | | | | Signed-off-by: Justin Pettit <jpettit@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* ovn: Mention distributed NAT in NEWSMickey Spiegel2017-02-161-0/+10
| | | | | Signed-off-by: Mickey Spiegel <mickeys.dev@gmail.com> Signed-off-by: Russell Bryant <russell@ovn.org>
* Remove build-time generated files when "make clean" is run.Justin Pettit2017-02-131-1/+1
| | | | | | | | | | | | "make clean" should remove all files generated by building a program, while "make distclean" should also remove files generated by configuring the program. Previously some generated files during the build process, such as man pages, were left behind when "make clean" was run. This commit only leaves configuration files after "make clean" is run, and removes all other generated files. Signed-off-by: Justin Pettit <jpettit@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* doc: Remove experimental warning for DPDK.Ian Stokes2017-02-061-0/+1
| | | | | | | | | Remove the experimental warning tag in documentation regarding OVS deployed with DPDK. Signed-off-by: Ian Stokes <ian.stokes@intel.com> Acked-by: Kevin Traynor <ktraynor@redhat.com> Signed-off-by: Daniele Di Proietto <diproiettod@vmware.com>
* Prepare for post-2.7.0 (2.7.90).Justin Pettit2017-01-311-2/+80
| | | | Signed-off-by: Justin Pettit <jpettit@ovn.org>
* debian: Also restrict ovn-docker package to Linux.Ben Pfaff2016-12-231-1/+1
| | | | | | | | | | | | | The Debian packages for OVS have only supported Linux so far, but the ovn-docker package was mistakenly marked as Architecture: any instead of linux-any, which caused build failures. This fixes the problem. (Perhaps OVS packaging for Debian should also support BSD, but that would be a bigger change.) Reported-at: https://buildd.debian.org/status/fetch.php?pkg=openvswitch&arch=kfreebsd-amd64&ver=2.6.2%7Epre%2Bgit20161223-1&stamp=1482518318&file=log Signed-off-by: Ben Pfaff <blp@ovn.org> Acked-by: Justin Pettit <jpettit@ovn.org>
* openvswitch: FTBFS with dpkg-buildpackage.nickcooper-zhangtonghao2016-12-231-1/+4
| | | | | | | | | | | | | | | | The debian packages are ready. This patch fixes the bug #831924 reported at debian bug tracking system. With this patch, openvswitch-2.6.1 will be upload to the Debian archive. If we build the packages with "dpkg-buildpackage --target binary-indep", an error state arises. debian/rules should be modified so that the build-indep and binary-indep target generates the architecture independent packages. If there are things not be handled properly，let me know. Reported-at: https://people.debian.org/~lucas/logs/2016/07/20/openvswitch_2.5.1~pre+git20160626-2_unstable_archallonly.log Signed-off-by: nickcooper-zhangtonghao <nic@opencloud.tech> Signed-off-by: Ben Pfaff <blp@ovn.org>
* doc: Remove documentation from distdoc targetStephen Finucane2016-12-121-1/+1
| | | | | | | | Basic Sphinx integration is now complete. Remove the documentation aspects of the 'dist-docs' target in favor of the htmldocs target. Signed-off-by: Stephen Finucane <stephen@that.guru> Signed-off-by: Ben Pfaff <blp@ovn.org>
* doc: Populate 'faq' sectionStephen Finucane2016-12-121-1/+0
| | | | | | | | This is mostly the exact same contents, albeit broken up into multiple files. Signed-off-by: Stephen Finucane <stephen@that.guru> Signed-off-by: Ben Pfaff <blp@ovn.org>
* doc: Populate 'install', 'howto' sectionsStephen Finucane2016-12-121-2/+0
| | | | | | | | | This is a dumb move of all 'INSTALL*' docs, with very little refactoring (mostly updating links and making the titles a little more consistent. Additional refactoring will be done in subsequent changes. Signed-off-by: Stephen Finucane <stephen@that.guru> Signed-off-by: Ben Pfaff <blp@ovn.org>
* doc: Convert AUTHORS to rSTStephen Finucane2016-11-301-3/+3
| | | | | Signed-off-by: Stephen Finucane <stephen@that.guru> Signed-off-by: Russell Bryant <russell@ovn.org>
* ovn: Add ovndb servers ocf script in debian packagerBabu Shanmugam2016-11-184-0/+50
| | | | | | | | | | | | The OCF script will be present in the ovn-common package and installed in the openvswitch scripts folder and a symbolic link to this file will be created in the OCF resources folder. The OCF resource agent name for this resource is ocf:ovn:ovndb-servers Signed-off-by: Babu Shanmugam <bschanmu@redhat.com> Acked-by: Andy Zhou <azhou@ovn.org> Signed-off-by: Andy Zhou <azhou@ovn.org>
* debian: Include ovn-trace in ovn-common packageFlavio Fernandes2016-11-012-0/+2
| | | | | | | | | Include the ovn-trace binary and it's man page in ovn-common package Fixes: 4acd1e87a8bf ("ovn-trace: New utility.") Fixes: f448e5a4bb1f ("rhel: Include ovn-trace in ovn-common package") Signed-off-by: Flavio Fernandes <flavio@flaviof.com> Signed-off-by: Ben Pfaff <blp@ovn.org>
* doc: Convert FAQ to rSTStephen Finucane2016-10-291-1/+1
| | | | | Signed-off-by: Stephen Finucane <stephen@that.guru> Signed-off-by: Russell Bryant <russell@ovn.org>
* doc: Convert README-native-tunneling to rSTStephen Finucane2016-10-281-1/+1
| | | | | Signed-off-by: Stephen Finucane <stephen@that.guru> Signed-off-by: Russell Bryant <russell@ovn.org>
* doc: Convert INSTALL.DPDK to rSTStephen Finucane2016-10-181-1/+1
| | | | | Signed-off-by: Stephen Finucane <stephen@that.guru> Signed-off-by: Russell Bryant <russell@ovn.org>
* openvswitch: Allow external IPsec tunnel management.Pravin B Shelar2016-09-276-743/+0
| | | | | | | | | | | | | | | | | | OVS GRE IPsec tunnel support has multiple issues, Therefore it was deprecated in OVS 2.6. Following patch removes support for GRE IPsec and allows external IPsec tunnel management for any type of tunnel not just GRE. e.g. user can encrypt Geneve or VxLan traffic. It can be done by using openflow pipeline to set skb-mark and using IPsec keying daemons to implement IPsec tunnels. This packet can be matched for the skb-mark to encrypt selective tunnel traffic. VMware-BZ: 1710701 Signed-off-by: Pravin B Shelar <pshelar@ovn.org> Acked-by: Ansis Atteka <aatteka@ovn.org>
* openvswitch: deprecates support for IPsec tunnel port.Pravin B Shelar2016-09-242-0/+2
| | | | | | | | | | | | | OVS IPsec tunnel support has issues: 1. It only works for GRE. 2. only works on Debian. 3. It does not allow user to match on packet-mark on packet received on tunnel ports. This patch deprecates support for IPsec tunnel port. Signed-off-by: Pravin B Shelar <pshelar@ovn.org> Acked-by: Ansis Atteka <aatteka@ovn.org>
* Add OpenFlow command to flush conntrack table entries.Justin Pettit2016-09-231-0/+10
| | | | | Signed-off-by: Justin Pettit <jpettit@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* ovs-monitor-ipsec: Fix Python style.Amitabha Biswas2016-08-311-1/+1
| | | | | | | | | Found by flake8. Fixes: 19cd0a87827e ("ipsec: Do not allow ipsec_gre tunnel traffic to exit unencrypted") Signed-off-by: Amitabha Biswas <abiswas@us.ibm.com> Acked-by: Numan Siddique <nusiddiq@redhat.com> Signed-off-by: Ben Pfaff <blp@ovn.org>
* ipsec: Do not allow ipsec_gre tunnel traffic to exit unencryptedAnsis Atteka2016-08-302-2/+15
| | | | | | | | | | | | | | | | | | | | | | | If ipsec_gre tunnel configuration is changed in OVSDB, then GRE packets may sometimes exit unencrypted until per-tunnel IPsec policies are installed by ovs-monitor-ipsec daemon. This patch fixes this issue by installing single, low priority IPsec block policy that drops all GRE packets coming out from ipsec_gre tunnels that do not have yet their own IPsec policies installed. This patch depends on to two other recently committed patches: 1. 574ff4aa (tunneling: get skb marking to work properly with tunnels) 2. ca3574d5 (IPsec: refactor out some code in OVS_MONITOR_IPSEC_START macro) Signed-off-by: Ansis Atteka <aatteka@ovn.org> Reported-by: Steffen Birkeland <Steffefb@stud.ntnu.no> Acked-by: Jesse Gross <jesse@kernel.org>
* Prepare for post-2.6.0 (2.6.90).Justin Pettit2016-08-061-0/+7
| | | | | Signed-off-by: Justin Pettit <jpettit@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* Prepare for 2.6.0.Justin Pettit2016-08-061-4/+112
| | | | | Signed-off-by: Justin Pettit <jpettit@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* ovn: Add ovn-controller-vtep debian packageRyan Moats2016-07-285-1/+74
| | | | | | | | | | | Having a separate debian package for deploying the ovn-controller-vtep binary enables the ability to assign specific nodes the role of communicating with VTEP enabled TORs. Change-Id: Ia36aea7d89bd011a57918820b2a9f6e3469b3e04 Signed-off-by: Ryan Moats <rmoats@us.ibm.com> Signed-off-by: Ben Pfaff <blp@ovn.org>
View Lorry Controller Status