summaryrefslogtreecommitdiff
path: root/debian
Commit message (Collapse)AuthorAgeFilesLines
* debian: Add SYSTEMCTL_SKIP_REDIRECT to init filesRaymond Burkholder2017-05-304-0/+4
| | | | | | | | | | Current versions of systemd in Debian Stretch use SYSTEMCTL_SKIP_REDIRECT instead of _SYSTEMCTL_SKIP_REDIRECT. Provide both variables in the .init files. Signed-off-by: Raymond Burkholder <ray@oneunified.net> Suggested-by: Guru Shetty <guru@ovn.org> Signed-off-by: Gurucharan Shetty <guru@ovn.org>
* debian, xenserver: Update logrotate config to match RHEL.Ben Pfaff2017-04-241-7/+7
| | | | | | | | | | | | | | | | | | | | | | | | | Commit 618a5b45ae8b ("rhel: Avoid logrotate error if /var/run/openvswitch does not exist") updated the RHEL logrotate configuration. This commit makes similar changes for Debian, by synchronizing with the RHEL version. In particular: - Indent to match logrotate.conf(5) examples. - Use "sharedscripts" flag, because the postrotate script only needs to run once regardless of the number of rotations. - Drop "delaycompress", because the postrotate script does make daemons reopen their log files. - Ignore errors calling vlog/reopen. Also make similar changes to the xenserver logrotate script. I confirmed via Twitter that the xenserver packaging still has users. CC: Timothy Redaelli <tredaelli@redhat.com> Signed-off-by: Ben Pfaff <blp@ovn.org> Acked-by: Gurucharan Shetty <guru@ovn.org>
* doc: Convert ovs-test to rSTStephen Finucane2017-04-211-1/+0
| | | | | Signed-off-by: Stephen Finucane <stephen@that.guru> Signed-off-by: Ben Pfaff <blp@ovn.org>
* doc: Convert ovs-vlan-test to rSTStephen Finucane2017-04-211-1/+0
| | | | | | | | | | | | | | | Let's start with a simple one that lets us focus on setting up most of the required "infrastructure" for building man pages using Sphinx. This changes the 'check-htmldocs' target to 'check-docs' as its now responsible for building man page docs too. Other than that, hurrah for (mostly) legible syntaxes. [1] http://www.tldp.org/HOWTO/Man-Page/q2.html Signed-off-by: Stephen Finucane <stephen@that.guru> Signed-off-by: Ben Pfaff <blp@ovn.org>
* debian; Avoid installing ovs-vswitchd.conf.db manpage as "db" language.Ben Pfaff2017-03-171-0/+3
| | | | | | | | | | | Usually, when the name of a manpage has a two-letter extension, it means that the manpage is written in the language designated by that language code. Reported-by: Michael Stapelberg <stapelberg@debian.org> Reported-at: https://bugs.debian.org/850631 Signed-off-by: Ben Pfaff <blp@ovn.org> Tested-by: nickcooper-zhangtonghao <nic@opencloud.tech>
* debian: Rewrite "ifconfig" to "ip" command.nickcooper-zhangtonghao2017-03-171-4/+4
| | | | | | | | | | Some debian distribution may not contain the ifconfig. We use the ip command instead of ifconfig in debian/ifupdown.sh Reported-at: https://mail.openvswitch.org/pipermail/ovs-dev/2017-March/329503.html CC: prochazka <prochazka@cortex.cz> Signed-off-by: nickcooper-zhangtonghao <nic@opencloud.tech> Signed-off-by: Ben Pfaff <blp@ovn.org>
* Set release date for 2.7.0.Justin Pettit2017-03-151-1/+1
| | | | | Signed-off-by: Justin Pettit <jpettit@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* ovn: Mention distributed NAT in NEWSMickey Spiegel2017-02-161-0/+10
| | | | | Signed-off-by: Mickey Spiegel <mickeys.dev@gmail.com> Signed-off-by: Russell Bryant <russell@ovn.org>
* Remove build-time generated files when "make clean" is run.Justin Pettit2017-02-131-1/+1
| | | | | | | | | | | | "make clean" should remove all files generated by building a program, while "make distclean" should also remove files generated by configuring the program. Previously some generated files during the build process, such as man pages, were left behind when "make clean" was run. This commit only leaves configuration files after "make clean" is run, and removes all other generated files. Signed-off-by: Justin Pettit <jpettit@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* doc: Remove experimental warning for DPDK.Ian Stokes2017-02-061-0/+1
| | | | | | | | | Remove the experimental warning tag in documentation regarding OVS deployed with DPDK. Signed-off-by: Ian Stokes <ian.stokes@intel.com> Acked-by: Kevin Traynor <ktraynor@redhat.com> Signed-off-by: Daniele Di Proietto <diproiettod@vmware.com>
* Prepare for post-2.7.0 (2.7.90).Justin Pettit2017-01-311-2/+80
| | | | Signed-off-by: Justin Pettit <jpettit@ovn.org>
* debian: Also restrict ovn-docker package to Linux.Ben Pfaff2016-12-231-1/+1
| | | | | | | | | | | | | The Debian packages for OVS have only supported Linux so far, but the ovn-docker package was mistakenly marked as Architecture: any instead of linux-any, which caused build failures. This fixes the problem. (Perhaps OVS packaging for Debian should also support BSD, but that would be a bigger change.) Reported-at: https://buildd.debian.org/status/fetch.php?pkg=openvswitch&arch=kfreebsd-amd64&ver=2.6.2%7Epre%2Bgit20161223-1&stamp=1482518318&file=log Signed-off-by: Ben Pfaff <blp@ovn.org> Acked-by: Justin Pettit <jpettit@ovn.org>
* openvswitch: FTBFS with dpkg-buildpackage.nickcooper-zhangtonghao2016-12-231-1/+4
| | | | | | | | | | | | | | | | The debian packages are ready. This patch fixes the bug #831924 reported at debian bug tracking system. With this patch, openvswitch-2.6.1 will be upload to the Debian archive. If we build the packages with "dpkg-buildpackage --target binary-indep", an error state arises. debian/rules should be modified so that the build-indep and binary-indep target generates the architecture independent packages. If there are things not be handled properly，let me know. Reported-at: https://people.debian.org/~lucas/logs/2016/07/20/openvswitch_2.5.1~pre+git20160626-2_unstable_archallonly.log Signed-off-by: nickcooper-zhangtonghao <nic@opencloud.tech> Signed-off-by: Ben Pfaff <blp@ovn.org>
* doc: Remove documentation from distdoc targetStephen Finucane2016-12-121-1/+1
| | | | | | | | Basic Sphinx integration is now complete. Remove the documentation aspects of the 'dist-docs' target in favor of the htmldocs target. Signed-off-by: Stephen Finucane <stephen@that.guru> Signed-off-by: Ben Pfaff <blp@ovn.org>
* doc: Populate 'faq' sectionStephen Finucane2016-12-121-1/+0
| | | | | | | | This is mostly the exact same contents, albeit broken up into multiple files. Signed-off-by: Stephen Finucane <stephen@that.guru> Signed-off-by: Ben Pfaff <blp@ovn.org>
* doc: Populate 'install', 'howto' sectionsStephen Finucane2016-12-121-2/+0
| | | | | | | | | This is a dumb move of all 'INSTALL*' docs, with very little refactoring (mostly updating links and making the titles a little more consistent. Additional refactoring will be done in subsequent changes. Signed-off-by: Stephen Finucane <stephen@that.guru> Signed-off-by: Ben Pfaff <blp@ovn.org>
* doc: Convert AUTHORS to rSTStephen Finucane2016-11-301-3/+3
| | | | | Signed-off-by: Stephen Finucane <stephen@that.guru> Signed-off-by: Russell Bryant <russell@ovn.org>
* ovn: Add ovndb servers ocf script in debian packagerBabu Shanmugam2016-11-184-0/+50
| | | | | | | | | | | | The OCF script will be present in the ovn-common package and installed in the openvswitch scripts folder and a symbolic link to this file will be created in the OCF resources folder. The OCF resource agent name for this resource is ocf:ovn:ovndb-servers Signed-off-by: Babu Shanmugam <bschanmu@redhat.com> Acked-by: Andy Zhou <azhou@ovn.org> Signed-off-by: Andy Zhou <azhou@ovn.org>
* debian: Include ovn-trace in ovn-common packageFlavio Fernandes2016-11-012-0/+2
| | | | | | | | | Include the ovn-trace binary and it's man page in ovn-common package Fixes: 4acd1e87a8bf ("ovn-trace: New utility.") Fixes: f448e5a4bb1f ("rhel: Include ovn-trace in ovn-common package") Signed-off-by: Flavio Fernandes <flavio@flaviof.com> Signed-off-by: Ben Pfaff <blp@ovn.org>
* doc: Convert FAQ to rSTStephen Finucane2016-10-291-1/+1
| | | | | Signed-off-by: Stephen Finucane <stephen@that.guru> Signed-off-by: Russell Bryant <russell@ovn.org>
* doc: Convert README-native-tunneling to rSTStephen Finucane2016-10-281-1/+1
| | | | | Signed-off-by: Stephen Finucane <stephen@that.guru> Signed-off-by: Russell Bryant <russell@ovn.org>
* doc: Convert INSTALL.DPDK to rSTStephen Finucane2016-10-181-1/+1
| | | | | Signed-off-by: Stephen Finucane <stephen@that.guru> Signed-off-by: Russell Bryant <russell@ovn.org>
* openvswitch: Allow external IPsec tunnel management.Pravin B Shelar2016-09-276-743/+0
| | | | | | | | | | | | | | | | | | OVS GRE IPsec tunnel support has multiple issues, Therefore it was deprecated in OVS 2.6. Following patch removes support for GRE IPsec and allows external IPsec tunnel management for any type of tunnel not just GRE. e.g. user can encrypt Geneve or VxLan traffic. It can be done by using openflow pipeline to set skb-mark and using IPsec keying daemons to implement IPsec tunnels. This packet can be matched for the skb-mark to encrypt selective tunnel traffic. VMware-BZ: 1710701 Signed-off-by: Pravin B Shelar <pshelar@ovn.org> Acked-by: Ansis Atteka <aatteka@ovn.org>
* openvswitch: deprecates support for IPsec tunnel port.Pravin B Shelar2016-09-242-0/+2
| | | | | | | | | | | | | OVS IPsec tunnel support has issues: 1. It only works for GRE. 2. only works on Debian. 3. It does not allow user to match on packet-mark on packet received on tunnel ports. This patch deprecates support for IPsec tunnel port. Signed-off-by: Pravin B Shelar <pshelar@ovn.org> Acked-by: Ansis Atteka <aatteka@ovn.org>
* Add OpenFlow command to flush conntrack table entries.Justin Pettit2016-09-231-0/+10
| | | | | Signed-off-by: Justin Pettit <jpettit@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* ovs-monitor-ipsec: Fix Python style.Amitabha Biswas2016-08-311-1/+1
| | | | | | | | | Found by flake8. Fixes: 19cd0a87827e ("ipsec: Do not allow ipsec_gre tunnel traffic to exit unencrypted") Signed-off-by: Amitabha Biswas <abiswas@us.ibm.com> Acked-by: Numan Siddique <nusiddiq@redhat.com> Signed-off-by: Ben Pfaff <blp@ovn.org>
* ipsec: Do not allow ipsec_gre tunnel traffic to exit unencryptedAnsis Atteka2016-08-302-2/+15
| | | | | | | | | | | | | | | | | | | | | | | If ipsec_gre tunnel configuration is changed in OVSDB, then GRE packets may sometimes exit unencrypted until per-tunnel IPsec policies are installed by ovs-monitor-ipsec daemon. This patch fixes this issue by installing single, low priority IPsec block policy that drops all GRE packets coming out from ipsec_gre tunnels that do not have yet their own IPsec policies installed. This patch depends on to two other recently committed patches: 1. 574ff4aa (tunneling: get skb marking to work properly with tunnels) 2. ca3574d5 (IPsec: refactor out some code in OVS_MONITOR_IPSEC_START macro) Signed-off-by: Ansis Atteka <aatteka@ovn.org> Reported-by: Steffen Birkeland <Steffefb@stud.ntnu.no> Acked-by: Jesse Gross <jesse@kernel.org>
* Prepare for post-2.6.0 (2.6.90).Justin Pettit2016-08-061-0/+7
| | | | | Signed-off-by: Justin Pettit <jpettit@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* Prepare for 2.6.0.Justin Pettit2016-08-061-4/+112
| | | | | Signed-off-by: Justin Pettit <jpettit@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* ovn: Add ovn-controller-vtep debian packageRyan Moats2016-07-285-1/+74
| | | | | | | | | | | Having a separate debian package for deploying the ovn-controller-vtep binary enables the ability to assign specific nodes the role of communicating with VTEP enabled TORs. Change-Id: Ia36aea7d89bd011a57918820b2a9f6e3469b3e04 Signed-off-by: Ryan Moats <rmoats@us.ibm.com> Signed-off-by: Ben Pfaff <blp@ovn.org>
* conntrack: New userspace connection tracker.Daniele Di Proietto2016-07-271-0/+4
| | | | | | | | | | | | | | | | | | | | | | This commit adds the conntrack module. It is a connection tracker that resides entirely in userspace. Its primary user will be the dpif-netdev datapath. The module main goal is to provide conntrack_execute(), which offers a convenient interface to implement the datapath ct() action. The conntrack module uses two submodules to deal with the l4 protocol details (conntrack-other for UDP and ICMP, conntrack-tcp for TCP). The conntrack-tcp submodule implementation is adapted from FreeBSD's pf subsystem, therefore it's BSD licensed. It has been slightly altered to match the OVS coding style and to allow the pickup of already established connections. Signed-off-by: Daniele Di Proietto <diproiettod@vmware.com> Acked-by: Antonio Fischetti <antonio.fischetti@intel.com> Acked-by: Joe Stringer <joe@ovn.org>
* debian: Add six dependency to python-openvswitch.Joe Stringer2016-07-271-1/+1
| | | | | | | | | | python-openvswitch uses the python "six" library, add a dependency for this to the debian package. VMware-BZ: #1700259 Reported-by: Devang Doshi <ddoshi@vmware.com> Signed-off-by: Joe Stringer <joe@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* debian: Fix OVS upgrade dependencies.Joe Stringer2016-07-211-0/+2
| | | | | | | | | | | | | | | | | | | | | | | Commit 0dcc739e7a28 ("debian: Move ovs-lib to openvswitch-common.") shifted a file between debian packages, but didn't update the destination package annotations to indicate that it replaces a file from earlier versions of the source package. As a result, if one installs openvswitch-switch-2.5* (or earlier) and then tries to upgrade to openvswitch-{switch,common}-2.5.90+, the install of openvswitch-common will fail like the following: dpkg: error processing archive /tmp/openvswitch-common_2.5.90-1_amd64.deb (--install): trying to overwrite '/usr/share/openvswitch/scripts/ovs-lib', which is also in package openvswitch-switch 2.5.0-1 Fix the issue by adding "Replaces" and "Breaks" tags to the new openvswitch-common section of debian/control. Fixes: 0dcc739e7a28 ("debian: Move ovs-lib to openvswitch-common.") Signed-off-by: Joe Stringer <joe@ovn.org> Acked-by: Daniele Di Proietto <diproiettod@vmware.com>
* packaging: Remove PyQt4 dependency.Joe Stringer2016-07-151-1/+0
| | | | | | | | This doesn't seem to have been necessary since ovsdbmonitor was removed in commit 7868fbc6c97c ("ovsdbmonitor: Remove."). Drop the dependency. Signed-off-by: Joe Stringer <joe@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* gitignore: Update for Debian build artifacts.Aaron Rosen2016-07-021-0/+3
| | | | | | | | | After running: `fakeroot debian/rules binary`. These files are left uncommitted to the source tree and should be ignored. Signed-off-by: Aaron Rosen <aaronorosen@gmail.com> Signed-off-by: Ben Pfaff <blp@ovn.org>
* debian: Add the tcpdump utility to the debian packageAaron Conole2016-06-232-0/+2
| | | | | | | | Add ovs-tcpdump to the debian build. Signed-off-by: Aaron Conole <aconole@redhat.com> Signed-off-by: Ben Pfaff <blp@ovn.org> Acked-by: Christian Ehrhardt <christian.ehrhardt@canonical.com>
* debian, rhel: Ship ovs shared libraries and header filesEdwin Chiu2016-06-075-1/+32
| | | | | | | | | | Compile and package ovs shared libraries and create new header package for debian (openvswitch-dev) and rhel (openvswitch-devel). VMware-BZ: #1556299 Signed-off-by: Edwin Chiu <echiu@vmware.com> Co-authored-by: Harold Lim <haroldl@vmware.com> Signed-off-by: Ben Pfaff <blp@ovn.org>
* debian: Fix treatment of upstream version that contains hyphens.Simon Horman2016-04-221-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | The Debian Policy Manual (https://www.debian.org/doc/debian-policy/ch-controlfields.html#s-f-Version) says that the upstream_version may contain only alphanumerics and the characters . + - : ~ (full stop, plus, hyphen, colon, tilde) and should start with a digit. Currently, the upstream_version is defined in the debian/rules file: DEB_UPSTREAM_VERSION=$(shell dpkg-parsechangelog | sed -rne 's,^Version: ([0-9]:)*([^-]+).*,\2,p') The version number is taken from the dpkg-parsechangelog printout then the first part of the version number which does not contain hyphen is filtered out with sed. However the Debian Policy Manual says that hyphen is allowed in the upstream_version. This is not a problem with current vanilla OVS debian version. But, if a postfix string including a hyphen is added to the upstream_version then installation of datapath-dkms package will fail. Reported-by: Zoltán Balogh <zoltan.balogh@ericsson.com> Tested-by: Zoltán Balogh <zoltan.balogh@ericsson.com> Signed-off-by: Ben Pfaff <blp@ovn.org>
* datapath-windows: Add Connection Tracking SupportSairam Venugopal2016-04-141-0/+1
| | | | | | | | | | | | | | | | | | | | Enable support for Stateful Firewall in Hyper-V by adding a Connection Tracking module. The module has been ported over from the userspace implementation patch of a similar name. The current version of the module supports ct - zone, mark and label for TCP packets. Support for other packet formats will be added in subsequent patches. The conntrack-tcp module is adapted from FreeBSD's pf subsystem and hence the BSD license. It has been ported over to match OVS Hyper-V coding style. Signed-off-by: Sairam Venugopal <vsairam@vmware.com> Signed-off-by: Daniele Di Proietto <diproiettod@vmware.com> Co-Authored-by: Daniele Di Proietto <diproiettod@vmware.com> Acked-by: Nithin Raju <nithin@vmware.com> Signed-off-by: Ben Pfaff <blp@ovn.org>
* debian: Ship ovn-[ns]b man pages in ovn-common.Russell Bryant2016-03-292-2/+2
| | | | | | | | | | Move ovn-nb and ovn-sb man pages to ovn-common so that the man pages for these DB schemas are always available with the corresponding command line utilities, ovn-nbctl and ovn-sbctl. Signed-off-by: Russell Bryant <russell@ovn.org> Tested-by: Simon Horman <simon.horman@netronome.com> Acked-by: Gurucharan Shetty <guru@ovn.org>
* Separating OVN NB and SB database processesRYAN D. MOATS2016-03-231-1/+7
| | | | | | | | | | | | OVN NB & SB DB's should be run in separate ovsdb-server processes and should run with ovn-ctl start_northd / stop_northd. This patch includes changes to unit tests, tutorial and debian scripts to remain self-consistent. Signed-off-by: RYAN D. MOATS <rmoats@us.ibm.com> Signed-off-by: Michael Arnaldi <arnaldimichael@gmail.com> Co-authored-by: Michael Arnaldi <arnaldimichael@gmail.com> Signed-off-by: Russell Bryant <russell@ovn.org>
* ovs-ctl: Remove code for upgrading from Open vSwitch 1.6 and earlier.Ben Pfaff2016-03-162-7/+2
| | | | | | | | | | | | | | OVS 1.7 was released in July 2012, so by the time current OVS is released, it will be almost four years old. I think that this is long enough to remove special upgrade code. It's almost impossible to do this upgrade in any case since there is no overlap in the base kernel versions supported by the out of tree modules in the two versions (the only possibility is running the new version of OVS on the upstream module from Linux 3.3). Signed-off-by: Ben Pfaff <blp@ovn.org> Acked-by: Jesse Gross <jesse@kernel.org>
* tests: Add ability to automatically rerun failed tests.Ben Pfaff2016-02-241-2/+1
| | | | | | | | A lot of packaging was doing this already, so this simplifies their implementation. Signed-off-by: Ben Pfaff <blp@ovn.org> Acked-by: Andy Zhou <azhou@ovn.org>
* ovs-benchmark: Remove.Ben Pfaff2016-02-052-2/+0
| | | | | | | | This utility was completely broken and no one noticed for the time of a full release, so I think that's a safe sign that we should remove it. Signed-off-by: Ben Pfaff <blp@ovn.org> Acked-by: Jarno Rajahalme <jarno@ovn.org>
* python: Remove old style classes.Russell Bryant2016-01-221-2/+2
| | | | | | | | | | Python 3 removed support for "old-style classes". Classes should always inherit from object to get consistent behavior between Python 2 and 3. Enable a flake8 warning to help prevent regressions in the future. Signed-off-by: Russell Bryant <russell@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* python: Convert dict iterators.Russell Bryant2016-01-211-6/+7
| | | | | | | | | | | | | | | | In Python 2, dict.items(), dict.keys(), and dict.values() returned a list. dict.iteritems(), dict.iterkeys(), and dict.itervalues() returned an iterator. As of Python 3, dict.iteritems(), dict.itervalues(), and dict.iterkeys() are gone. items(), keys(), and values() now return an iterator. In the case where we want an iterator, we now use the six.iter*() helpers. If we want a list, we explicitly create a list from the iterator. Signed-off-by: Russell Bryant <russell@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* python: Fix octal compatibility.Russell Bryant2016-01-201-1/+1
| | | | | | | | Octal constants must be written as 0o077 instead of 0077 to be compatible with both Python 2 and 3. Signed-off-by: Russell Bryant <russell@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* python: Stop using xrange().Russell Bryant2016-01-201-0/+1
| | | | | | | | | | | | Python 2 had range() and xrange(). xrange() is more efficient, but behaves differently so range() was retained for compatibility. Python 3 only has range() and it behaves like Python 2's xrange(). Remove explicit use of xrange() and use six.moves.range() to make sure we're using xrange() from Python 2 or range() from Python 3. Signed-off-by: Russell Bryant <russell@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* python: Fix xmlrpclib imports.Russell Bryant2016-01-201-3/+4
| | | | | | | | | | | | | | Fix imports of xmlrpclib to be compatible with Python 3. Python 2 had xmlrpclib (client) and SimpleXMLRPCServer (server). In Python 3, these have been renamed to xmlrpc.client and xmlrpc.server. The solution implemented here is to use the six library. It may seem excessive for this particular issue, but the six library provides helpers for Python 2 and 3 compatibility for many different issues. This is just the first of many uses of the six library. Signed-off-by: Russell Bryant <russell@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
* python: Fix exception handler compatibility.Russell Bryant2016-01-121-1/+1
| | | | | | | | | | | | | | | | | Python 3 dropped exception handlers of the deprecated form: except Exception, e: You must use the newer syntax of: except Exception as e: This patch also enables a flake8 warning for this. H231 Python 3.x incompatible 'except x,y:' construct Signed-off-by: Russell Bryant <russell@ovn.org> Acked-by: Ben Pfaff <blp@ovn.org>
View Lorry Controller Status