[meta-virtualization][PATCH] openvswitch: 3.3.2

[meta-virtualization][PATCH] openvswitch: 3.3.2

[Xiangyu Chen]

From: Xiangyu Chen <xiangyu.chen@windriver.com>

Bumping ovs to version v3.3.2, which comprises the following commits:
dfe601bbc (tag: v3.3.2) Set release date for 3.3.2.
a097f4a39 docs: Fix argument formatting in ovs-appctl(8) man page.
1e6c69169 dp-packet: Correct IPv4 checksum calculation.
c1c70e083 netdev-linux: Fix unaligned access to rpl_rtnl_link_stats64.
b176cea4f route-table: Fix another UBsan warning about pointer type.
9fac5b970 netdev-linux: Do not offload IP checksum.
73c563efc tunnel, tests: Add test for mirroring over tunnels.
81e64f47d ofproto-dpif-xlate: Add a recursion limit to tunnel address lookup.
742812517 netdev-dpdk: Fix race condition in mempool information dump.
e0c0302d7 ovsdb: transaction: Remove incorrect transaction abort in pre-commit.
59d80787a netlink-notifier: Silence the UBsan's function pointer mismatch error.
bd133fcf6 Documentation: Update QEMU documentation URLs.
6738b680e match: Fix false-positive snprintf size warning.
5bf4c0f09 util: Add non-NULL format assertion to xvasprintf.
9cbd8804d docs: Define Read the Docs configuration for Sphinx HTML parameters.
6eca4d13c flow: Fix unaligned access to the ND target in miniflow_extract.
d2119feb0 dpif-netlink-rtnl: Fix netdev leak in out-of-tree tunnels probe.
9c439c23e dpctl: Fix netdev reference leak in "show" command.
15cbfb19f cirrus: Update to FreeBSD 14.1.
a3722ab1f ovs-monitor-ipsec: LibreSwan v5 support.
bd18a1373 ovs-monitor-ipsec: LibreSwan autodetect version.
504efbe92 netdev-dpdk: Check pending reset when adding device.
2393305d9 odp-execute: Check IPv4 checksum offload flag in AVX.
0aec0c2cc odp-execute: Set IPv6 traffic class in AVX implementation.
dd1aea7f8 ofp-prop: Fix unaligned 128 bit access.
830fd4823 dpdk: Check other_config:dpdk-extra for '--lcores'.
8499e9027 Prepare for 3.3.2.
2b87b844d (tag: v3.3.1) Set release date for 3.3.1.
81d2804fc python: ovs: flow: Fix nested check_pkt_len acts.
8c15b5c0f python: idl: Fix index not being updated on row modification.
80c935dba python: ovsdb-idl: Convert new_uuid insert() arg to UUID.
6b6d7f05d python: ovsdb-idl: Make IndexedRows mirror hmap.
479dd96e1 ci: Restore vhost-user unit tests in check-dpdk.
cc9962248 system-dpdk: Fix socket conflict when starting testpmd.
5bb95ad08 netdev-dpdk: Refactor tunnel checksum offloading.
a9248871a netdev-dpdk: Use guest TSO segmentation size hint.
55d2e6d3d netdev-dpdk: Refactor TSO request code.
2fe3ab83a netdev-dpdk: Fix inner checksum when outer is not supported.
537a6bcda netdev-dpdk: Disable outer UDP checksum for net/iavf.
2e03f5567 netdev-dpdk: Fallback to non tunnel checksum offloading.
7916a2417 nsh: Add support to compose-packet and use it in system tests.
310cf419e tests: Convert ND, MPLS and CT sendpkt tests to compose-packet.
96efed349 tests: sendpkt: Allow different input formats.
2e89ed994 ipf: Handle common case of ipf defragmentation.
69424e53b ipf: Only add fragments to batch of same dl_type.
5cfbc915d python: ovsdb-idl: Use monitor_cond for _Server DB.
84c83589b ovsdb-idl: Add C IDL test for "monitor" fallback.
79608c4fd tests: Fix non-portable plus match in python vlog test.
6688bff49 odp-execute: Fix AVX checksum calculation.
0ec55bbe9 dpdk: Use DPDK 23.11.1 release for OVS 3.3.
a3022b08a netdev-linux: Initialize link speed in error conditions.
216c2c1ff netdev-linux: Return an error if device feature names are empty.
1b78323a2 socket: Fix uninitialized values in inet_parse_ functions.
4ece94d2a dpctl: Fix uninitialized value when deleting flows.
7ee12c5ae netdev-native-tnl: Fix use of uninitialized offset on SRv6 header pop.
258bc1e0c netdev-linux: Fix ethtool_cmd is partly outside array bounds.
ffbce0c42 atlocal: Replace deprecated pkg_resources.
1f0423a4e atlocal: Fix setting HAVE_PYTEST on unexpected errors.
95baf295a srv6: Fix misaligned writes to segment list.
8d4ba3b5a compiler: Fix errors in Clang 17 ubsan checks.
d153eff60 table: Fix freeing global variable.
f02dc3cfe vlog: Destroy async_append first then close log_fd.
bf1b16364 conntrack: Fully initialize conn struct before insertion.
cf461fe28 conntrack: Do not use {0} to initialize unions.
20ed5491c ovsdb-client: Add missing arg to help for 'dump'.
4756bf4ba ofproto-dpif-trace: Fix access to an out-of-scope stack memory.
01eca18be hash, jhash: Fix unaligned access to the hash remainder.
4f61523c0 sparse: Add additional define for sparse on GCC >= 14.
9a5c24d70 sparse: Add immintrin.h header.
3528cc6f4 tc: Fix -Wgnu-variable-sized-type-not-at-end warning with Clang 18.
5814de568 tests: Fix build failure with Clang 18 due to -Wformat-truncation.
a6c3b5202 netdev-dpdk: Fix possible memory leak configuring VF MAC address.
42e685916 ovsdb: raft: Fix probe intervals after install snapshot request.
1c44cb596 ovsdb: raft: Fix inability to join a cluster with a large database.
5966c22b8 rhel/systemd: Set ovsdb-server timeout to 5 minutes.
f19448b86 github: Update python to 3.12.
b705fb8dd ovsdb-dot: Fix flake8 issues.
1ac823cb0 ovsdb-doc: Fix syntax warning with Python 3.12 and flake8 issues.
7e99dbd8a python: Remove hacking dependency and use recent flake8.
41055da76 cirrus: Update to FreeBSD 13.3.
6448c1b69 vlog: Log stack trace on vlog_abort.
a6852319b tests: Fix compatibility issue with Python 3.13 in vlog.at.
775507fe9 ofproto-dpif-upcall: Fix ukey installation failure logs and counters.
b26baf873 conntrack: Do not use icmp reverse helper for icmpv6.
b9f28c586 conntrack: Fix SNAT with exhaustion system test.
43db93787 ovsdb: raft: Fix inability to join after leadership change round trip.
2a2f162b5 ovsdb: raft: Fix assertion when 1-node cluster looses leadership.
a174a5ab8 ovsdb: raft: Fix permanent joining state on a cluster member.
5eac230f2 ovsdb: raft: Fix time intervals for multitasking while joining.
99fe661f0 ovsdb: raft: Avoid transferring leadership to unavailable servers.
c560f6ca3 ofproto-dpif-xlate: Fix continuations with associated metering.

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
---
 recipes-networking/openvswitch/openvswitch_git.bb | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/recipes-networking/openvswitch/openvswitch_git.bb b/recipes-networking/openvswitch/openvswitch_git.bb
index b7d9b8dd..46b1e773 100644
--- a/recipes-networking/openvswitch/openvswitch_git.bb
+++ b/recipes-networking/openvswitch/openvswitch_git.bb
@@ -14,12 +14,12 @@ RDEPENDS:${PN}-ptest += "\
 	"
 
 S = "${WORKDIR}/git"
-PV = "3.3.0"
-CVE_VERSION = "3.3.0"
+PV = "3.3.2"
+CVE_VERSION = "3.3.2"
 
 FILESEXTRAPATHS:append := "${THISDIR}/${PN}-git:"
 
-SRCREV = "1c1f173ce8a8534e262083bc4db3ee15f05231c0"
+SRCREV = "dfe601bbc154c836e6ec3526a1eb331c1c09a06e"
 SRC_URI += "git://github.com/openvswitch/ovs.git;protocol=https;branch=branch-3.3 \
             file://openvswitch-add-ptest-71d553b995d0bd527d3ab1e9fbaf5a2ae34de2f3.patch \
             file://run-ptest \
-- 
2.35.5

[meta-virtualization][PATCH] lxc: don't allow named listening IPv6 address on lxcbrX network interface

[Xiangyu Chen]

From: Xiangyu Chen <xiangyu.chen@windriver.com>

lxc-net enabled the IPv6 by default since v6.0.0[1], when named enabled on
system, the lxc-net which based on dnsmasq would fail to bind the IPv6
address on lxcbrX interface, that cause lxc cannot work correctly.

Add the lxc-net default v6 address to named.conf.option to tell named don't
bind and listen that address.

[1] https://github.com/lxc/lxc/commit/e8888344

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
---
 recipes-core/bind/bind_virtualization.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/recipes-core/bind/bind_virtualization.inc b/recipes-core/bind/bind_virtualization.inc
index a6e39049..f942d7ad 100644
--- a/recipes-core/bind/bind_virtualization.inc
+++ b/recipes-core/bind/bind_virtualization.inc
@@ -1,4 +1,4 @@
 # Tell named not to bother listening on the IP address that lxc and libvirtd handles itself.
 do_install:append() {
-	sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would take care of this address itself\n\tlisten-on { ! 10.0.3.1; ! 192.168.122.1; any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
+	sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would take care of this address itself\n\tlisten-on { ! 10.0.3.1; ! 192.168.122.1; any;};\n\tlisten-on-v6 { ! fc11:4514:1919:810::1; any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
 }
-- 
2.35.5

Re: [meta-virtualization][PATCH] lxc: don't allow named listening IPv6 address on lxcbrX network interface

[Bruce Ashfield]

[-- Attachment #1: Type: text/plain, Size: 2411 bytes --]

Thanks for the patch.

I injured my hand (so I couldn't type) and then had to do some release
preparation, but will get to merging his shortly.

Bruce

On Mon, Oct 28, 2024 at 3:36 AM Xiangyu Chen via lists.yoctoproject.org
<xiangyu.chen=eng.windriver.com@lists.yoctoproject.org> wrote:

> From: Xiangyu Chen <xiangyu.chen@windriver.com>
>
> lxc-net enabled the IPv6 by default since v6.0.0[1], when named enabled on
> system, the lxc-net which based on dnsmasq would fail to bind the IPv6
> address on lxcbrX interface, that cause lxc cannot work correctly.
>
> Add the lxc-net default v6 address to named.conf.option to tell named don't
> bind and listen that address.
>
> [1] https://github.com/lxc/lxc/commit/e8888344
>
> Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
> ---
>  recipes-core/bind/bind_virtualization.inc | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/recipes-core/bind/bind_virtualization.inc
> b/recipes-core/bind/bind_virtualization.inc
> index a6e39049..f942d7ad 100644
> --- a/recipes-core/bind/bind_virtualization.inc
> +++ b/recipes-core/bind/bind_virtualization.inc
> @@ -1,4 +1,4 @@
>  # Tell named not to bother listening on the IP address that lxc and
> libvirtd handles itself.
>  do_install:append() {
> -       sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would
> take care of this address itself\n\tlisten-on { ! 10.0.3.1; !
> 192.168.122.1; any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
> +       sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would
> take care of this address itself\n\tlisten-on { ! 10.0.3.1; !
> 192.168.122.1; any;};\n\tlisten-on-v6 { ! fc11:4514:1919:810::1; any;};\n,'
> ${D}${sysconfdir}/bind/named.conf.options
>  }
> --
> 2.35.5
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#8938):
> https://lists.yoctoproject.org/g/meta-virtualization/message/8938
> Mute This Topic: https://lists.yoctoproject.org/mt/109253028/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [
> bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>

-- 
- Thou shalt not follow the NULL pointer, for chaos and madness await thee
at its end
- "Use the force Harry" - Gandalf, Star Trek II

[-- Attachment #2: Type: text/html, Size: 4185 bytes --]

Re: [meta-virtualization][PATCH] lxc: don't allow named listening IPv6 address on lxcbrX network interface

[Bruce Ashfield]

merged to master (which will become styhead shortly)

Bruce

In message: [meta-virtualization][PATCH] lxc: don't allow named listening IPv6 address on lxcbrX network interface
on 28/10/2024 Xiangyu Chen via lists.yoctoproject.org wrote:

> From: Xiangyu Chen <xiangyu.chen@windriver.com>
> 
> lxc-net enabled the IPv6 by default since v6.0.0[1], when named enabled on
> system, the lxc-net which based on dnsmasq would fail to bind the IPv6
> address on lxcbrX interface, that cause lxc cannot work correctly.
> 
> Add the lxc-net default v6 address to named.conf.option to tell named don't
> bind and listen that address.
> 
> [1] https://github.com/lxc/lxc/commit/e8888344
> 
> Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
> ---
>  recipes-core/bind/bind_virtualization.inc | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/recipes-core/bind/bind_virtualization.inc b/recipes-core/bind/bind_virtualization.inc
> index a6e39049..f942d7ad 100644
> --- a/recipes-core/bind/bind_virtualization.inc
> +++ b/recipes-core/bind/bind_virtualization.inc
> @@ -1,4 +1,4 @@
>  # Tell named not to bother listening on the IP address that lxc and libvirtd handles itself.
>  do_install:append() {
> -	sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would take care of this address itself\n\tlisten-on { ! 10.0.3.1; ! 192.168.122.1; any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
> +	sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would take care of this address itself\n\tlisten-on { ! 10.0.3.1; ! 192.168.122.1; any;};\n\tlisten-on-v6 { ! fc11:4514:1919:810::1; any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
>  }
> -- 
> 2.35.5
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#8938): https://lists.yoctoproject.org/g/meta-virtualization/message/8938
> Mute This Topic: https://lists.yoctoproject.org/mt/109253028/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
> 

Re: [meta-virtualization][PATCH] openvswitch: 3.3.2

[Bruce Ashfield]

[-- Attachment #1: Type: text/plain, Size: 8257 bytes --]

Hi Xiangyu,

I'm not currently merging updates to packages, as I'm still completing work
to release meta-virtualization.

In about a month, I'll start my round of package updates and will look at
this then!

Bruce

On Mon, Oct 28, 2024 at 3:36 AM Xiangyu Chen via lists.yoctoproject.org
<xiangyu.chen=eng.windriver.com@lists.yoctoproject.org> wrote:

> From: Xiangyu Chen <xiangyu.chen@windriver.com>
>
> Bumping ovs to version v3.3.2, which comprises the following commits:
> dfe601bbc (tag: v3.3.2) Set release date for 3.3.2.
> a097f4a39 docs: Fix argument formatting in ovs-appctl(8) man page.
> 1e6c69169 dp-packet: Correct IPv4 checksum calculation.
> c1c70e083 netdev-linux: Fix unaligned access to rpl_rtnl_link_stats64.
> b176cea4f route-table: Fix another UBsan warning about pointer type.
> 9fac5b970 netdev-linux: Do not offload IP checksum.
> 73c563efc tunnel, tests: Add test for mirroring over tunnels.
> 81e64f47d ofproto-dpif-xlate: Add a recursion limit to tunnel address
> lookup.
> 742812517 netdev-dpdk: Fix race condition in mempool information dump.
> e0c0302d7 ovsdb: transaction: Remove incorrect transaction abort in
> pre-commit.
> 59d80787a netlink-notifier: Silence the UBsan's function pointer mismatch
> error.
> bd133fcf6 Documentation: Update QEMU documentation URLs.
> 6738b680e match: Fix false-positive snprintf size warning.
> 5bf4c0f09 util: Add non-NULL format assertion to xvasprintf.
> 9cbd8804d docs: Define Read the Docs configuration for Sphinx HTML
> parameters.
> 6eca4d13c flow: Fix unaligned access to the ND target in miniflow_extract.
> d2119feb0 dpif-netlink-rtnl: Fix netdev leak in out-of-tree tunnels probe.
> 9c439c23e dpctl: Fix netdev reference leak in "show" command.
> 15cbfb19f cirrus: Update to FreeBSD 14.1.
> a3722ab1f ovs-monitor-ipsec: LibreSwan v5 support.
> bd18a1373 ovs-monitor-ipsec: LibreSwan autodetect version.
> 504efbe92 netdev-dpdk: Check pending reset when adding device.
> 2393305d9 odp-execute: Check IPv4 checksum offload flag in AVX.
> 0aec0c2cc odp-execute: Set IPv6 traffic class in AVX implementation.
> dd1aea7f8 ofp-prop: Fix unaligned 128 bit access.
> 830fd4823 dpdk: Check other_config:dpdk-extra for '--lcores'.
> 8499e9027 Prepare for 3.3.2.
> 2b87b844d (tag: v3.3.1) Set release date for 3.3.1.
> 81d2804fc python: ovs: flow: Fix nested check_pkt_len acts.
> 8c15b5c0f python: idl: Fix index not being updated on row modification.
> 80c935dba python: ovsdb-idl: Convert new_uuid insert() arg to UUID.
> 6b6d7f05d python: ovsdb-idl: Make IndexedRows mirror hmap.
> 479dd96e1 ci: Restore vhost-user unit tests in check-dpdk.
> cc9962248 system-dpdk: Fix socket conflict when starting testpmd.
> 5bb95ad08 netdev-dpdk: Refactor tunnel checksum offloading.
> a9248871a netdev-dpdk: Use guest TSO segmentation size hint.
> 55d2e6d3d netdev-dpdk: Refactor TSO request code.
> 2fe3ab83a netdev-dpdk: Fix inner checksum when outer is not supported.
> 537a6bcda netdev-dpdk: Disable outer UDP checksum for net/iavf.
> 2e03f5567 netdev-dpdk: Fallback to non tunnel checksum offloading.
> 7916a2417 nsh: Add support to compose-packet and use it in system tests.
> 310cf419e tests: Convert ND, MPLS and CT sendpkt tests to compose-packet.
> 96efed349 tests: sendpkt: Allow different input formats.
> 2e89ed994 ipf: Handle common case of ipf defragmentation.
> 69424e53b ipf: Only add fragments to batch of same dl_type.
> 5cfbc915d python: ovsdb-idl: Use monitor_cond for _Server DB.
> 84c83589b ovsdb-idl: Add C IDL test for "monitor" fallback.
> 79608c4fd tests: Fix non-portable plus match in python vlog test.
> 6688bff49 odp-execute: Fix AVX checksum calculation.
> 0ec55bbe9 dpdk: Use DPDK 23.11.1 release for OVS 3.3.
> a3022b08a netdev-linux: Initialize link speed in error conditions.
> 216c2c1ff netdev-linux: Return an error if device feature names are empty.
> 1b78323a2 socket: Fix uninitialized values in inet_parse_ functions.
> 4ece94d2a dpctl: Fix uninitialized value when deleting flows.
> 7ee12c5ae netdev-native-tnl: Fix use of uninitialized offset on SRv6
> header pop.
> 258bc1e0c netdev-linux: Fix ethtool_cmd is partly outside array bounds.
> ffbce0c42 atlocal: Replace deprecated pkg_resources.
> 1f0423a4e atlocal: Fix setting HAVE_PYTEST on unexpected errors.
> 95baf295a srv6: Fix misaligned writes to segment list.
> 8d4ba3b5a compiler: Fix errors in Clang 17 ubsan checks.
> d153eff60 table: Fix freeing global variable.
> f02dc3cfe vlog: Destroy async_append first then close log_fd.
> bf1b16364 conntrack: Fully initialize conn struct before insertion.
> cf461fe28 conntrack: Do not use {0} to initialize unions.
> 20ed5491c ovsdb-client: Add missing arg to help for 'dump'.
> 4756bf4ba ofproto-dpif-trace: Fix access to an out-of-scope stack memory.
> 01eca18be hash, jhash: Fix unaligned access to the hash remainder.
> 4f61523c0 sparse: Add additional define for sparse on GCC >= 14.
> 9a5c24d70 sparse: Add immintrin.h header.
> 3528cc6f4 tc: Fix -Wgnu-variable-sized-type-not-at-end warning with Clang
> 18.
> 5814de568 tests: Fix build failure with Clang 18 due to
> -Wformat-truncation.
> a6c3b5202 netdev-dpdk: Fix possible memory leak configuring VF MAC address.
> 42e685916 ovsdb: raft: Fix probe intervals after install snapshot request.
> 1c44cb596 ovsdb: raft: Fix inability to join a cluster with a large
> database.
> 5966c22b8 rhel/systemd: Set ovsdb-server timeout to 5 minutes.
> f19448b86 github: Update python to 3.12.
> b705fb8dd ovsdb-dot: Fix flake8 issues.
> 1ac823cb0 ovsdb-doc: Fix syntax warning with Python 3.12 and flake8 issues.
> 7e99dbd8a python: Remove hacking dependency and use recent flake8.
> 41055da76 cirrus: Update to FreeBSD 13.3.
> 6448c1b69 vlog: Log stack trace on vlog_abort.
> a6852319b tests: Fix compatibility issue with Python 3.13 in vlog.at.
> 775507fe9 ofproto-dpif-upcall: Fix ukey installation failure logs and
> counters.
> b26baf873 conntrack: Do not use icmp reverse helper for icmpv6.
> b9f28c586 conntrack: Fix SNAT with exhaustion system test.
> 43db93787 ovsdb: raft: Fix inability to join after leadership change round
> trip.
> 2a2f162b5 ovsdb: raft: Fix assertion when 1-node cluster looses leadership.
> a174a5ab8 ovsdb: raft: Fix permanent joining state on a cluster member.
> 5eac230f2 ovsdb: raft: Fix time intervals for multitasking while joining.
> 99fe661f0 ovsdb: raft: Avoid transferring leadership to unavailable
> servers.
> c560f6ca3 ofproto-dpif-xlate: Fix continuations with associated metering.
>
> Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
> ---
>  recipes-networking/openvswitch/openvswitch_git.bb | 6 +++---
>  1 file changed, 3 insertions(+), 3 deletions(-)
>
> diff --git a/recipes-networking/openvswitch/openvswitch_git.bb
> b/recipes-networking/openvswitch/openvswitch_git.bb
> index b7d9b8dd..46b1e773 100644
> --- a/recipes-networking/openvswitch/openvswitch_git.bb
> +++ b/recipes-networking/openvswitch/openvswitch_git.bb
> @@ -14,12 +14,12 @@ RDEPENDS:${PN}-ptest += "\
>         "
>
>  S = "${WORKDIR}/git"
> -PV = "3.3.0"
> -CVE_VERSION = "3.3.0"
> +PV = "3.3.2"
> +CVE_VERSION = "3.3.2"
>
>  FILESEXTRAPATHS:append := "${THISDIR}/${PN}-git:"
>
> -SRCREV = "1c1f173ce8a8534e262083bc4db3ee15f05231c0"
> +SRCREV = "dfe601bbc154c836e6ec3526a1eb331c1c09a06e"
>  SRC_URI += "git://
> github.com/openvswitch/ovs.git;protocol=https;branch=branch-3.3 \
>
>  file://openvswitch-add-ptest-71d553b995d0bd527d3ab1e9fbaf5a2ae34de2f3.patch
> \
>              file://run-ptest \
> --
> 2.35.5
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#8937):
> https://lists.yoctoproject.org/g/meta-virtualization/message/8937
> Mute This Topic: https://lists.yoctoproject.org/mt/109253027/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [
> bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>

-- 
- Thou shalt not follow the NULL pointer, for chaos and madness await thee
at its end
- "Use the force Harry" - Gandalf, Star Trek II

[-- Attachment #2: Type: text/html, Size: 10686 bytes --]

[meta-virtualization][PATCH] lxc: don't allow named listening IPv6 address on lxcbrX network interface

[Xiangyu Chen]

From: Xiangyu Chen <xiangyu.chen@windriver.com>

lxc-net enabled the IPv6 by default since v6.0.0[1], when named enabled on
system, the lxc-net which based on dnsmasq would fail to bind the IPv6
address on lxcbrX interface, that cause lxc cannot work correctly.

LXC upstream changed the default v6 address again[2], we need to line up with
upstream. Updated the lxc-net default v6 address to named.conf.option to tell
named don't bind and listen that address.

Ref:

[1] https://github.com/lxc/lxc/commit/e8888344
[2] https://github.com/lxc/lxc/commit/31012d49

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
---
 recipes-core/bind/bind_virtualization.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/recipes-core/bind/bind_virtualization.inc b/recipes-core/bind/bind_virtualization.inc
index f942d7ad..bb4e22b2 100644
--- a/recipes-core/bind/bind_virtualization.inc
+++ b/recipes-core/bind/bind_virtualization.inc
@@ -1,4 +1,4 @@
 # Tell named not to bother listening on the IP address that lxc and libvirtd handles itself.
 do_install:append() {
-	sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would take care of this address itself\n\tlisten-on { ! 10.0.3.1; ! 192.168.122.1; any;};\n\tlisten-on-v6 { ! fc11:4514:1919:810::1; any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
+	sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would take care of this address itself\n\tlisten-on { ! 10.0.3.1; ! 192.168.122.1; any;};\n\tlisten-on-v6 { ! fc42:5009:ba4b:5ab0::1; any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
 }
-- 
2.34.1

Re: [meta-virtualization][PATCH] lxc: don't allow named listening IPv6 address on lxcbrX network interface

[Bruce Ashfield]

merged.

Bruce

In message: [meta-virtualization][PATCH] lxc: don't allow named listening IPv6 address on lxcbrX network interface
on 06/06/2025 Xiangyu Chen via lists.yoctoproject.org wrote:

> From: Xiangyu Chen <xiangyu.chen@windriver.com>
> 
> lxc-net enabled the IPv6 by default since v6.0.0[1], when named enabled on
> system, the lxc-net which based on dnsmasq would fail to bind the IPv6
> address on lxcbrX interface, that cause lxc cannot work correctly.
> 
> LXC upstream changed the default v6 address again[2], we need to line up with
> upstream. Updated the lxc-net default v6 address to named.conf.option to tell
> named don't bind and listen that address.
> 
> Ref:
> 
> [1] https://github.com/lxc/lxc/commit/e8888344
> [2] https://github.com/lxc/lxc/commit/31012d49
> 
> Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
> ---
>  recipes-core/bind/bind_virtualization.inc | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/recipes-core/bind/bind_virtualization.inc b/recipes-core/bind/bind_virtualization.inc
> index f942d7ad..bb4e22b2 100644
> --- a/recipes-core/bind/bind_virtualization.inc
> +++ b/recipes-core/bind/bind_virtualization.inc
> @@ -1,4 +1,4 @@
>  # Tell named not to bother listening on the IP address that lxc and libvirtd handles itself.
>  do_install:append() {
> -	sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would take care of this address itself\n\tlisten-on { ! 10.0.3.1; ! 192.168.122.1; any;};\n\tlisten-on-v6 { ! fc11:4514:1919:810::1; any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
> +	sed -i -e 's,^\( *options *{\)$,\1\n\t// lxc and libvirtd would take care of this address itself\n\tlisten-on { ! 10.0.3.1; ! 192.168.122.1; any;};\n\tlisten-on-v6 { ! fc42:5009:ba4b:5ab0::1; any;};\n,' ${D}${sysconfdir}/bind/named.conf.options
>  }
> -- 
> 2.34.1
> 

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#9273): https://lists.yoctoproject.org/g/meta-virtualization/message/9273
> Mute This Topic: https://lists.yoctoproject.org/mt/113498088/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>