# Copyright (C) 2009, 2010, 2013, 2014 Nicira Networks, Inc.

#

# Copying and distribution of this file, with or without modification,

# are permitted in any medium without royalty provided the copyright

# notice and this notice are preserved.  This file is offered as-is,

# without warranty of any kind.

#

# If tests have to be skipped while building, specify the '--without check'

# option. For example:

# rpmbuild -bb --without check rhel/openvswitch-fedora.spec

# This defines the base package name's version.

%define pkgname openvswitch2.15

%if 0%{?commit:1}

%global shortcommit %(c=%{commit}; echo ${c:0:7})

%endif

# Enable PIE, bz#955181

%global _hardened_build 1

# RHEL-7 doesn't define _rundir macro yet

# Fedora 15 onwards uses /run as _rundir

%if 0%{!?_rundir:1}

%define _rundir /run

%endif

# FIXME Test "STP - flush the fdb and mdb when topology changed" fails on s390x

# FIXME 2 tests fails on ppc64le. They will be hopefully fixed before official 2.11

%ifarch %{ix86} x86_64 aarch64

%bcond_without check

%else

%bcond_with check

%endif

# option to run kernel datapath tests, requires building as root!

%bcond_with check_datapath_kernel

# option to build with libcap-ng, needed for running OVS as regular user

%bcond_without libcapng

# option to build with ipsec support

%bcond_without ipsec

# Build python2 (that provides python) and python3 subpackages on Fedora

# Build only python3 (that provides python) subpackage on RHEL8

# Build only python subpackage on RHEL7

%if 0%{?rhel} > 7 || 0%{?fedora}

# On RHEL8 Sphinx is included in buildroot

%global external_sphinx 1

%else

# Don't use external sphinx (RHV doesn't have optional repositories enabled)

%global external_sphinx 0

%endif

Name: %{pkgname}

Summary: Open vSwitch

Group: System Environment/Daemons daemon/database/utilities

URL: http://www.openvswitch.org/

Version: 2.15.0

Release: 123%{?dist}

# Nearly all of openvswitch is ASL 2.0.  The bugtool is LGPLv2+, and the

# lib/sflow*.[ch] files are SISSL

# datapath/ is GPLv2 (although not built into any of the binary packages)

License: ASL 2.0 and LGPLv2+ and SISSL

%define dpdkver 20.11

%define dpdkdir dpdk

%define dpdksver %(echo %{dpdkver} | cut -d. -f-2)

# NOTE: DPDK does not currently build for s390x

# DPDK on aarch64 is not stable enough to be enabled in FDP

%if 0%{?rhel} > 7 || 0%{?fedora}

%define dpdkarches x86_64 ppc64le

%else

%define dpdkarches

%endif

%if 0%{?commit:1}

Source: https://github.com/openvswitch/ovs/archive/%{commit}.tar.gz#/openvswitch-%{commit}.tar.gz

%else

Source: https://github.com/openvswitch/ovs/archive/v%{version}.tar.gz#/openvswitch-%{version}.tar.gz

%endif

Source10: https://fast.dpdk.org/rel/dpdk-%{dpdkver}.tar.xz

%define docutilsver 0.12

%define pygmentsver 1.4

%define sphinxver   1.2.3

Source100: https://pypi.io/packages/source/d/docutils/docutils-%{docutilsver}.tar.gz

Source101: https://pypi.io/packages/source/P/Pygments/Pygments-%{pygmentsver}.tar.gz

Source102: https://pypi.io/packages/source/S/Sphinx/Sphinx-%{sphinxver}.tar.gz

Patch:     openvswitch-%{version}.patch

# The DPDK is designed to optimize througput of network traffic using, among

# other techniques, carefully crafted assembly instructions.  As such it

# needs extensive work to port it to other architectures.

ExclusiveArch: x86_64 aarch64 ppc64le s390x

# Do not enable this otherwise YUM will break on any upgrade.

# Provides: openvswitch

Conflicts: openvswitch < 2.15

Conflicts: openvswitch-dpdk < 2.15

Conflicts: openvswitch2.10

Conflicts: openvswitch2.11

Conflicts: openvswitch2.12

Conflicts: openvswitch2.13

Conflicts: openvswitch2.14

# FIXME Sphinx is used to generate some manpages, unfortunately, on RHEL, it's

# in the -optional repository and so we can't require it directly since RHV

# doesn't have the -optional repository enabled and so TPS fails

%if %{external_sphinx}

BuildRequires: python3-sphinx

%else

# Sphinx dependencies

BuildRequires: python-devel

BuildRequires: python-setuptools

#BuildRequires: python2-docutils

BuildRequires: python-jinja2

BuildRequires: python-nose

#BuildRequires: python2-pygments

# docutils dependencies

BuildRequires: python-imaging

# pygments dependencies

BuildRequires: python-nose

%endif

BuildRequires: gcc gcc-c++ make

BuildRequires: autoconf automake libtool

BuildRequires: systemd-units openssl openssl-devel

BuildRequires: python3-devel python3-setuptools

BuildRequires: desktop-file-utils

BuildRequires: groff-base graphviz

BuildRequires: unbound-devel

BuildRequires: systemtap-sdt-devel

# make check dependencies

BuildRequires: procps-ng

%if 0%{?rhel} > 7 || 0%{?fedora}

BuildRequires: python3-pyOpenSSL

%endif

%if %{with check_datapath_kernel}

BuildRequires: nmap-ncat

# would be useful but not available in RHEL or EPEL

#BuildRequires: pyftpdlib

%endif

%if %{with libcapng}

BuildRequires: libcap-ng libcap-ng-devel

%endif

%ifarch %{dpdkarches}

BuildRequires: meson

# DPDK driver dependencies

BuildRequires: zlib-devel numactl-devel

%ifarch x86_64

BuildRequires: rdma-core-devel >= 15 libmnl-devel

%endif

# Required by packaging policy for the bundled DPDK

Provides: bundled(dpdk) = %{dpdkver}

%endif

Requires: openssl iproute module-init-tools

#Upstream kernel commit 4f647e0a3c37b8d5086214128614a136064110c3

#Requires: kernel >= 3.15.0-0

Requires: openvswitch-selinux-extra-policy

Requires(pre): shadow-utils

Requires(post): /bin/sed

Requires(post): /usr/sbin/usermod

Requires(post): /usr/sbin/groupadd

Requires(post): systemd-units

Requires(preun): systemd-units

Requires(postun): systemd-units

Obsoletes: openvswitch-controller <= 0:2.1.0-1

%description

Open vSwitch provides standard network bridging functions and

support for the OpenFlow protocol for remote per-flow control of

traffic.

%package -n python3-%{pkgname}

Summary: Open vSwitch python3 bindings

License: ASL 2.0

Requires: %{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

Provides: python-%{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

%description -n python3-%{pkgname}

Python bindings for the Open vSwitch database

%package test

Summary: Open vSwitch testing utilities

License: ASL 2.0

BuildArch: noarch

Requires: python3-%{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

Requires: tcpdump

%description test

Utilities that are useful to diagnose performance and connectivity

issues in Open vSwitch setup.

%package devel

Summary: Open vSwitch OpenFlow development package (library, headers)

License: ASL 2.0

Requires: %{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

%description devel

This provides shared library, libopenswitch.so and the openvswitch header

files needed to build an external application.

%if 0%{?rhel} > 7 || 0%{?fedora} > 28

%package -n network-scripts-%{name}

Summary: Open vSwitch legacy network service support

License: ASL 2.0

Requires: network-scripts

Supplements: (%{name} and network-scripts)

%description -n network-scripts-%{name}

This provides the ifup and ifdown scripts for use with the legacy network

service.

%endif

%if %{with ipsec}

%package ipsec

Summary: Open vSwitch IPsec tunneling support

License: ASL 2.0

Requires: python3-%{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

Requires: libreswan

%description ipsec

This package provides IPsec tunneling support for OVS tunnels.

%endif

%prep

%if 0%{?commit:1}

%setup -q -n ovs-%{commit} -a 10

%else

%setup -q -n ovs-%{version} -a 10

%endif

%if ! %{external_sphinx}

%if 0%{?commit:1}

%setup -n ovs-%{commit} -q -D -T -a 100 -a 101 -a 102

%else

%setup -n ovs-%{version} -q -D -T -a 100 -a 101 -a 102

%endif

%endif

mv dpdk-*/ %{dpdkdir}/

# FIXME should we propose a way to do that upstream?

sed -ri "/^subdir\('(usertools|app)'\)/d" %{dpdkdir}/meson.build

%patch -p1

%build

# Build Sphinx on RHEL

%if ! %{external_sphinx}

export PYTHONPATH="${PYTHONPATH:+$PYTHONPATH:}%{_builddir}/pytmp/lib/python"

for x in docutils-%{docutilsver} Pygments-%{pygmentsver} Sphinx-%{sphinxver}; do

    pushd "$x"

    python2 setup.py install --home %{_builddir}/pytmp

    popd

done

export PATH="$PATH:%{_builddir}/pytmp/bin"

%endif

./boot.sh

%ifarch %{dpdkarches}    # build dpdk

# Lets build DPDK first

cd %{dpdkdir}

ENABLED_DRIVERS=(

    bus/pci

    bus/vdev

    mempool/ring

    net/failsafe

    net/i40e

    net/ring

    net/vhost

    net/virtio

    net/tap

)

%ifarch x86_64

ENABLED_DRIVERS+=(

    bus/vmbus

    common/iavf

    common/mlx5

    net/bnxt

    net/enic

    net/iavf

    net/ice

    net/mlx4

    net/mlx5

    net/netvsc

    net/nfp

    net/qede

    net/vdev_netvsc

)

%endif

%ifarch aarch64 x86_64

ENABLED_DRIVERS+=(

    net/e1000

    net/ixgbe

)

%endif

# Since upstream doesn't have a way

for driver in drivers/*/*/; do

    driver=${driver#drivers/}

    driver=${driver%/}

    [[ " ${ENABLED_DRIVERS[@]} " == *" $driver "* ]] || \

        disable_drivers="${disable_drivers:+$disable_drivers,}"$driver

done

#CFLAGS="$(echo %{optflags} | sed -e 's:-Wall::g' -e 's:-march=[[:alnum:]]* ::g') -Wformat -fPIC %{_hardening_ldflags}" \

%set_build_flags

%__meson --prefix=%{_builddir}/dpdk-build \

         --buildtype=plain \

         -Ddisable_drivers="$disable_drivers" \

         -Dmachine=default \

         -Dmax_ethports=1024 \

         -Dmax_numa_nodes=8 \

         -Dtests=false \

         %{_vpath_builddir}

%meson_build

%__meson install -C %{_vpath_builddir} --no-rebuild

# FIXME currently with LTO enabled OVS tries to link with both static and shared libraries

rm -v %{_builddir}/dpdk-build/%{_lib}/*.so*

# Generate a list of supported drivers, its hard to tell otherwise.

cat << EOF > README.DPDK-PMDS

DPDK drivers included in this package:

EOF

for f in %{_builddir}/dpdk-build/%{_lib}/librte_net_*.a; do

    basename ${f} | cut -c12- | cut -d. -f1 | tr [:lower:] [:upper:]

done >> README.DPDK-PMDS

cat << EOF >> README.DPDK-PMDS

For further information about the drivers, see

http://dpdk.org/doc/guides-%{dpdksver}/nics/index.html

EOF

cd -

%endif    # build dpdk

# And now for OVS...

mkdir build-shared build-static

pushd build-shared

ln -s ../configure

%configure \

%if %{with libcapng}

        --enable-libcapng \

%else

        --disable-libcapng \

%endif

        --disable-static \

        --enable-shared \

        --enable-ssl \

        --with-pkidir=%{_sharedstatedir}/openvswitch/pki \

        --enable-usdt-probes

make %{?_smp_mflags}

popd

pushd build-static

ln -s ../configure

%ifarch %{dpdkarches}

PKG_CONFIG_PATH=%{_builddir}/dpdk-build/%{_lib}/pkgconfig \

%endif

%configure \

%if %{with libcapng}

        --enable-libcapng \

%else

        --disable-libcapng \

%endif

        --enable-ssl \

%ifarch %{dpdkarches}

        --with-dpdk=static \

%endif

        --with-pkidir=%{_sharedstatedir}/openvswitch/pki \

        --enable-usdt-probes

make %{?_smp_mflags}

popd

/usr/bin/python3 build-aux/dpdkstrip.py \

        --dpdk \

        < rhel/usr_lib_systemd_system_ovs-vswitchd.service.in \

        > rhel/usr_lib_systemd_system_ovs-vswitchd.service

%install

rm -rf $RPM_BUILD_ROOT

make -C build-shared install-libLTLIBRARIES DESTDIR=$RPM_BUILD_ROOT

make -C build-static install DESTDIR=$RPM_BUILD_ROOT

install -d -m 0755 $RPM_BUILD_ROOT%{_rundir}/openvswitch

install -d -m 0750 $RPM_BUILD_ROOT%{_localstatedir}/log/openvswitch

install -d -m 0755 $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch

install -p -D -m 0644 rhel/usr_lib_udev_rules.d_91-vfio.rules \

        $RPM_BUILD_ROOT%{_udevrulesdir}/91-vfio.rules

install -p -D -m 0644 \

        rhel/usr_share_openvswitch_scripts_systemd_sysconfig.template \

        $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/openvswitch

for service in openvswitch ovsdb-server ovs-vswitchd \

               ovs-delete-transient-ports; do

        install -p -D -m 0644 \

                        rhel/usr_lib_systemd_system_${service}.service \

                        $RPM_BUILD_ROOT%{_unitdir}/${service}.service

done

%if %{with ipsec}

install -p -D -m 0644 rhel/usr_lib_systemd_system_openvswitch-ipsec.service \

                      $RPM_BUILD_ROOT%{_unitdir}/openvswitch-ipsec.service

%endif

install -m 0755 rhel/etc_init.d_openvswitch \

        $RPM_BUILD_ROOT%{_datadir}/openvswitch/scripts/openvswitch.init

install -p -D -m 0644 rhel/etc_openvswitch_default.conf \

        $RPM_BUILD_ROOT/%{_sysconfdir}/openvswitch/default.conf

install -p -D -m 0644 rhel/etc_logrotate.d_openvswitch \

        $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d/openvswitch

install -m 0644 vswitchd/vswitch.ovsschema \

        $RPM_BUILD_ROOT/%{_datadir}/openvswitch/vswitch.ovsschema

install -d -m 0755 $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/network-scripts/

install -p -m 0755 rhel/etc_sysconfig_network-scripts_ifdown-ovs \

        $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/network-scripts/ifdown-ovs

install -p -m 0755 rhel/etc_sysconfig_network-scripts_ifup-ovs \

        $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/network-scripts/ifup-ovs

install -d -m 0755 $RPM_BUILD_ROOT%{python3_sitelib}

cp -a $RPM_BUILD_ROOT/%{_datadir}/openvswitch/python/ovstest \

        $RPM_BUILD_ROOT%{python3_sitelib}

# Build the JSON C extension for the Python lib (#1417738)

pushd python

(

export CPPFLAGS="-I ../include -I ../build-shared/include"

export LDFLAGS="%{__global_ldflags} -L $RPM_BUILD_ROOT%{_libdir}"

%py3_build

%py3_install

[ -f "$RPM_BUILD_ROOT/%{python3_sitearch}/ovs/_json$(python3-config --extension-suffix)" ]

)

popd

rm -rf $RPM_BUILD_ROOT/%{_datadir}/openvswitch/python/

install -d -m 0755 $RPM_BUILD_ROOT/%{_sharedstatedir}/openvswitch

install -d -m 0755 $RPM_BUILD_ROOT%{_prefix}/lib/firewalld/services/

install -p -D -m 0755 \

        rhel/usr_share_openvswitch_scripts_ovs-systemd-reload \

        $RPM_BUILD_ROOT%{_datadir}/openvswitch/scripts/ovs-systemd-reload

touch $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch/conf.db

# The db needs special permission as IPsec Pre-shared keys are stored in it.

chmod 0640 $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch/conf.db

touch $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch/system-id.conf

# remove unpackaged files

rm -f $RPM_BUILD_ROOT/%{_bindir}/ovs-benchmark \

        $RPM_BUILD_ROOT/%{_bindir}/ovs-docker \

        $RPM_BUILD_ROOT/%{_bindir}/ovs-parse-backtrace \

        $RPM_BUILD_ROOT/%{_bindir}/ovs-testcontroller \

        $RPM_BUILD_ROOT/%{_sbindir}/ovs-vlan-bug-workaround \

        $RPM_BUILD_ROOT/%{_mandir}/man1/ovs-benchmark.1* \

        $RPM_BUILD_ROOT/%{_mandir}/man8/ovs-testcontroller.* \

        $RPM_BUILD_ROOT/%{_mandir}/man8/ovs-vlan-bug-workaround.8*

%if ! %{with ipsec}

rm -f $RPM_BUILD_ROOT/%{_datadir}/openvswitch/scripts/ovs-monitor-ipsec

%endif

# remove ovn unpackages files

rm -f $RPM_BUILD_ROOT%{_bindir}/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man1/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man5/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man7/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man8/ovn*

rm -f $RPM_BUILD_ROOT%{_datadir}/openvswitch/ovn*

rm -f $RPM_BUILD_ROOT%{_datadir}/openvswitch/scripts/ovn*

rm -f $RPM_BUILD_ROOT%{_includedir}/ovn/*

%check

%if %{with check}

    pushd build-static

    touch resolv.conf

    export OVS_RESOLV_CONF=$(pwd)/resolv.conf

    if make check TESTSUITEFLAGS='%{_smp_mflags}' ||

       make check TESTSUITEFLAGS='--recheck'; then :;

    else

        cat tests/testsuite.log

        exit 1

    fi

    popd

%endif

%if %{with check_datapath_kernel}

    pushd build-static

    if make check-kernel RECHECK=yes; then :;

    else

        cat tests/system-kmod-testsuite.log

        exit 1

    fi

    popd

%endif

%clean

rm -rf $RPM_BUILD_ROOT

%preun

%if 0%{?systemd_preun:1}

    %systemd_preun openvswitch.service

%else

    if [ $1 -eq 0 ] ; then

    # Package removal, not upgrade

        /bin/systemctl --no-reload disable openvswitch.service >/dev/null 2>&1 || :

        /bin/systemctl stop openvswitch.service >/dev/null 2>&1 || :

    fi

%endif

%pre

getent group openvswitch >/dev/null || groupadd -r openvswitch

getent passwd openvswitch >/dev/null || \

    useradd -r -g openvswitch -d / -s /sbin/nologin \

    -c "Open vSwitch Daemons" openvswitch

%ifarch %{dpdkarches}

    getent group hugetlbfs >/dev/null || groupadd hugetlbfs

    usermod -a -G hugetlbfs openvswitch

%endif

exit 0

%post

if [ $1 -eq 1 ]; then

    sed -i 's:^#OVS_USER_ID=:OVS_USER_ID=:' /etc/sysconfig/openvswitch

%ifarch %{dpdkarches}

    sed -i \

        's@OVS_USER_ID="openvswitch:openvswitch"@OVS_USER_ID="openvswitch:hugetlbfs"@'\

        /etc/sysconfig/openvswitch

%endif

fi

chown -R openvswitch:openvswitch /etc/openvswitch

%if 0%{?systemd_post:1}

    %systemd_post openvswitch.service

%else

    # Package install, not upgrade

    if [ $1 -eq 1 ]; then

        /bin/systemctl daemon-reload >dev/null || :

    fi

%endif

%postun

%if 0%{?systemd_postun:1}

    %systemd_postun openvswitch.service

%else

    /bin/systemctl daemon-reload >/dev/null 2>&1 || :

%endif

%triggerun -- openvswitch < 2.5.0-22.git20160727%{?dist}

# old rpm versions restart the service in postun, but

# due to systemd some preparation is needed.

if systemctl is-active openvswitch >/dev/null 2>&1 ; then

    /usr/share/openvswitch/scripts/ovs-ctl stop >/dev/null 2>&1 || :

    systemctl daemon-reload >/dev/null 2>&1 || :

    systemctl stop openvswitch ovsdb-server ovs-vswitchd >/dev/null 2>&1 || :

    systemctl start openvswitch >/dev/null 2>&1 || :

fi

exit 0

%files -n python3-%{pkgname}

%{python3_sitearch}/ovs

%{python3_sitearch}/ovs-*.egg-info

%doc LICENSE

%files test

%{_bindir}/ovs-pcap

%{_bindir}/ovs-tcpdump

%{_bindir}/ovs-tcpundump

%{_mandir}/man1/ovs-pcap.1*

%{_mandir}/man8/ovs-tcpdump.8*

%{_mandir}/man1/ovs-tcpundump.1*

%{_bindir}/ovs-test

%{_bindir}/ovs-vlan-test

%{_bindir}/ovs-l3ping

%{_mandir}/man8/ovs-test.8*

%{_mandir}/man8/ovs-vlan-test.8*

%{_mandir}/man8/ovs-l3ping.8*

%{python3_sitelib}/ovstest

%files devel

%{_libdir}/*.so

%{_libdir}/pkgconfig/*.pc

%{_includedir}/openvswitch/*

%{_includedir}/openflow/*

%exclude %{_libdir}/*.a

%exclude %{_libdir}/*.la

%if 0%{?rhel} > 7 || 0%{?fedora} > 28

%files -n network-scripts-%{name}

%{_sysconfdir}/sysconfig/network-scripts/ifup-ovs

%{_sysconfdir}/sysconfig/network-scripts/ifdown-ovs

%endif

%files

%defattr(-,openvswitch,openvswitch)

%dir %{_sysconfdir}/openvswitch

%{_sysconfdir}/openvswitch/default.conf

%config %ghost %verify(not owner group md5 size mtime) %{_sysconfdir}/openvswitch/conf.db

%ghost %attr(0600,-,-) %verify(not owner group md5 size mtime) %{_sysconfdir}/openvswitch/.conf.db.~lock~

%config %ghost %{_sysconfdir}/openvswitch/system-id.conf

%defattr(-,root,root)

%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/sysconfig/openvswitch

%{_sysconfdir}/bash_completion.d/ovs-appctl-bashcomp.bash

%{_sysconfdir}/bash_completion.d/ovs-vsctl-bashcomp.bash

%config(noreplace) %{_sysconfdir}/logrotate.d/openvswitch

%{_unitdir}/openvswitch.service

%{_unitdir}/ovsdb-server.service

%{_unitdir}/ovs-vswitchd.service

%{_unitdir}/ovs-delete-transient-ports.service

%{_datadir}/openvswitch/scripts/openvswitch.init

%{_datadir}/openvswitch/scripts/ovs-check-dead-ifs

%{_datadir}/openvswitch/scripts/ovs-lib

%{_datadir}/openvswitch/scripts/ovs-save

%{_datadir}/openvswitch/scripts/ovs-vtep

%{_datadir}/openvswitch/scripts/ovs-ctl

%{_datadir}/openvswitch/scripts/ovs-kmod-ctl

%{_datadir}/openvswitch/scripts/ovs-systemd-reload

%config %{_datadir}/openvswitch/vswitch.ovsschema

%config %{_datadir}/openvswitch/vtep.ovsschema

%{_bindir}/ovs-appctl

%{_bindir}/ovs-dpctl

%{_bindir}/ovs-ofctl

%{_bindir}/ovs-vsctl

%{_bindir}/ovsdb-client

%{_bindir}/ovsdb-tool

%{_bindir}/ovs-pki

%{_bindir}/vtep-ctl

%{_libdir}/*.so.*

%{_sbindir}/ovs-vswitchd

%{_sbindir}/ovsdb-server

%{_mandir}/man1/ovsdb-client.1*

%{_mandir}/man1/ovsdb-server.1*

%{_mandir}/man1/ovsdb-tool.1*

%{_mandir}/man5/ovsdb.5*

%{_mandir}/man5/ovsdb-server.5.*

%{_mandir}/man5/ovs-vswitchd.conf.db.5*

%{_mandir}/man5/vtep.5*

%{_mandir}/man7/ovsdb-server.7*

%{_mandir}/man7/ovsdb.7*

%{_mandir}/man7/ovs-actions.7*

%{_mandir}/man7/ovs-fields.7*

%{_mandir}/man8/vtep-ctl.8*

%{_mandir}/man8/ovs-appctl.8*

%{_mandir}/man8/ovs-ctl.8*

%{_mandir}/man8/ovs-dpctl.8*

%{_mandir}/man8/ovs-kmod-ctl.8.*

%{_mandir}/man8/ovs-ofctl.8*

%{_mandir}/man8/ovs-pki.8*

%{_mandir}/man8/ovs-vsctl.8*

%{_mandir}/man8/ovs-vswitchd.8*

%{_mandir}/man8/ovs-parse-backtrace.8*

%{_udevrulesdir}/91-vfio.rules

%doc LICENSE NOTICE README.rst NEWS rhel/README.RHEL.rst

%ifarch %{dpdkarches}

%doc %{dpdkdir}/README.DPDK-PMDS

%attr(750,openvswitch,hugetlbfs) %verify(not owner group) /var/log/openvswitch

%else

%attr(750,openvswitch,openvswitch) %verify(not owner group) /var/log/openvswitch

%endif

/var/lib/openvswitch

%ghost %attr(755,root,root) %verify(not owner group) %{_rundir}/openvswitch

%{_datadir}/openvswitch/bugtool-plugins/

%{_datadir}/openvswitch/scripts/ovs-bugtool-*

%{_bindir}/ovs-dpctl-top

%{_sbindir}/ovs-bugtool

%{_mandir}/man8/ovs-dpctl-top.8*

%{_mandir}/man8/ovs-bugtool.8*

%if (0%{?rhel} && 0%{?rhel} <= 7) || (0%{?fedora} && 0%{?fedora} < 29)

%{_sysconfdir}/sysconfig/network-scripts/ifup-ovs

%{_sysconfdir}/sysconfig/network-scripts/ifdown-ovs

%endif

%if %{with ipsec}

%files ipsec

%{_datadir}/openvswitch/scripts/ovs-monitor-ipsec

%{_unitdir}/openvswitch-ipsec.service

%endif

%changelog

* Mon Oct 03 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-123

- Merging upstream branch-2.15 [RH git: 73cc21866f]

    Commit list:

    30b846ab1b dpdk: Use DPDK 20.11.6 release.

* Wed Sep 21 2022 Timothy Redaelli <tredaelli@redhat.com> - 2.15.0-122

- vhost: fix virtqueue use after free on NUMA reallocation [RH git: ce74a8c364]

    [ upstream commit 0b2a2ca35037d6a5168f0832c11d9858b8ae946a ]

    translate_ring_addresses (via numa_realloc) may change a virtio device and

    virtio queue.

    The virtqueue object must be refreshed before accessing the lock.

    Fixes: 04c27cb673b9 ("vhost: fix unsafe vring addresses modifications")

    Signed-off-by: David Marchand <david.marchand@redhat.com>

    Reviewed-by: Maxime Coquelin <maxime.coquelin@redhat.com>

* Mon Sep 19 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-121

- Merging upstream branch-2.15 [RH git: 6af245093e]

    Commit list:

    fcc8774005 python: idl: Fix idl.Row.__str__ method.

* Mon Sep 19 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-120

- Merging upstream branch-2.15 [RH git: 64fdb5d43f]

    Commit list:

    60b1db0e22 bond: Avoid deadlock while updating post recirculation rules.

    fb46fd5643 ofproto-dpif-upcall: Add debug commands to pause/resume revalidators.

    88a936a57c test-list: Fix false-positive build failure with GCC 12.

    7461f82acc cirrus: Upgrade to FreeBSD 13.1 image.

* Tue Sep 06 2022 Timothy Redaelli <tredaelli@redhat.com> - 2.15.0-119

- Merging 73655c64149 version: 20.11.6 [RH git: d8e8db8377]

    Commit list:

    73655c64149 version: 20.11.6

    ef311075d21 net/mlx5: fix Rx queue recovery mechanism

    089e01b375e vhost: fix header spanned across more than two descriptors

    8fff8520f35 vhost: discard too small descriptor chains

    28596f9ebca vhost: prevent async register

    ff7d483aaa6 ethdev: fix RSS update when RSS is disabled

    5a6aadbeec6 kni: fix build

    01609d56cb2 net/virtio-user: fix socket non-blocking mode

    c5dc4f6eb57 version: 20.11.6-rc1

    3e61bd97d9a doc: add more instructions for running as non-root

    aebfd0d7467 net/mlx5: fix MPRQ pool registration

    ca78fec981b net/hns3: support backplane media type

    9a7f5c16d0a net/mlx5: destroy indirect actions on port stop

    4a35f74c8a3 net/mlx5/linux: fix missed Rx packet stats

    153cef1fbf7 net/mlx5: handle MPRQ incompatibility with external buffers

    38f1f47db17 vdpa/mlx5: workaround var offset within page

    55942e4c4da vdpa/mlx5: fix maximum number of virtqs

    d702d0a0bd5 examples/link_status_interrupt: fix stats refresh rate

    20f57bfbd74 gro: fix identifying fragmented packets

    da29560252d service: fix lingering active status

    edc80cd334d net/igc: support multi-process

    dcf55291452 vhost: add some trailing newline in log messages

    ecb55969296 net/vhost: fix deadlock on vring state change

    e29fe1799c7 doc: fix readability in vhost guide

    9d474a9565a net/netvsc: fix vmbus device reference in multi-process

    04e6368ccdc app/testpmd: fix supported RSS offload display

    d3b24b9ea23 eventdev/eth_tx: fix queue delete

    e00e29a3ef4 doc: fix grammar and parameters in l2fwd-crypto guide

    d2384ccb959 doc: fix grammar and formatting in compressdev guide

    0e387937c4e crypto/qat: fix DOCSIS crash

    c24e3146091 examples/fips_validation: handle empty payload

    4985a6b0519 baseband/acc100: remove prefix of internal file

    85c979edf5e test/crypto: fix SNOW3G vector IV format

    c263e1d0476 test/crypto: fix ZUC vector IV format

    c2688091924 test/crypto: fix authentication IV for ZUC SGL

    21f394a60df net/bnxt: fix setting forced speed

    97229297562 net/bnxt: allow Tx only or Rx only

    71234d08d23 net/bnxt: fix switch domain allocation

    3f6c57b6a39 examples/distributor: fix distributor on Rx core

    a035314c1ed net/hns3: fix descriptors check with SVE

    4fef76f744c test: check memory allocation for CRC

    ef31c19b768 app/procinfo: show all non-owned ports

    67350d412d9 test/hash: fix out of bound access

    ed1bd718de3 rib: fix references for IPv6 implementation

    eb88adfe309 raw/ioat: fix build when ioat dmadev enabled

    40538d0b04c net/mlx5: fix stack buffer overflow in drop action

    f371572a767 net/mlx5: fix RSS expansion for patterns with ICMP item

    06375d5c71a net/mlx5: fix build with clang 14

    35ab757a023 net/qede: fix build with GCC 12

    d26e0087571 net/ice/base: fix build with GCC 12

    b9db1042c38 net/qede: fix build with GCC 13

    ac50182289f net/octeontx: fix port close

    c9f6c89d9aa ci: enable C++ check for Arm and PPC

    45eb4af4562 config: fix C++ cross compiler for Arm and PPC

    dbbdee4c12f malloc: fix allocation of almost hugepage size

    a0f0c7d9c51 vhost/crypto: fix descriptor processing

    8aa20e45c65 vhost/crypto: fix build with GCC 12

    338b9cbeb49 vhost: fix missing enqueue pseudo-header calculation

    bbba8ef0cd9 app/testpmd: revert MAC update in checksum forwarding

    9b4779bface net/txgbe: fix register polling

    50c6ddd6423 app/testpmd: fix bonding slave devices not released

    35768b682bc net/hns3: fix return value for unsupported tuple

    ecb5bc37dd3 net/hns3: remove duplicate definition

    5b5935a922e net/hns3: fix an unreasonable memset

    1adbdac76c2 test/bonding: fix RSS test when disable RSS

    da86d09eacf net/bonding: fix RSS inconsistency between ports

    a6ae86b161d eventdev/eth_tx: fix adapter creation

    b39e829bace test/ipsec: fix performance test

    8d49e2f6d19 test/crypto: fix cipher offset for ZUC

    cb03983da4a crypto/scheduler: fix queue pair in scheduler failover

    df7022dae82 test/ipsec: fix build with GCC 12

    5dbe3a6dad4 common/cpt: fix build with GCC 12

    0af3e2fef90 baseband/acc100: remove RTE prefix for internal macros

    437389abd91 baseband/acc100: add protection for some negative scenario

    34d98de156c baseband/acc100: update companion PF configure function

    10cdabfc105 eal/x86: drop export of internal alignment macro

    a6388c75952 trace: fix init with long file prefix

    3582b40156d app/flow-perf: fix build with GCC 12

    b089558de0e vdpa/ifc: fix build with GCC 12

    03197727fa5 net/ice: fix build with GCC 12

    cd10d48dcc5 net/mlx5: fix LRO validation in Rx setup

    c352cf12f32 app/testpmd: fix port status of bonding slave device

    93ca5fcf948 crypto/dpaa2_sec: fix crypto operation pointer

    40b12a05613 net/mlx5: fix RSS hash types adjustment

    145c5b453d8 net/bnxt: fix tunnel stateless offloads

    ee29f5fa6b1 vhost: fix async access

    c9a4ddc1e84 raw/ifpga: remove virtual devices on close

    3590f931372 kni: use dedicated function to set MAC address

    628b8d88c48 kni: use dedicated function to set random MAC address

    59d08006aa2 app/testpmd: fix multicast address pool leak

    9c1410c9b0a app/testpmd: fix packet segment allocation

    641e8b889ef doc: fix formatting and link in BPF library guide

    8f68d6fdc62 bus/fslmc: fix VFIO setup

    30c0b36a019 raw/ifpga: unregister interrupt on close

    14a27263310 examples/dma: fix Tx drop statistics

    6c17d926977 net/iavf: increase reset complete wait count

    4d11ba721d1 net/ice: fix outer L4 checksum in scalar Rx

    2d9b2c21900 doc: update matching versions in i40e guide

    789223ef41e net/iavf: fix Rx queue interrupt setting

    7ec8629367d net/iavf: fix mbuf release in multi-process

    755ea301dba net/iavf: fix queue start exception handling

    5b55b9b1ea7 net/i40e: fix max frame size config at port level

    d731c37a84e net/ice: fix MTU info for DCF

    e2660944da2 net/ice/base: fix getting sched node from ID type

    43eac062d11 net/ixgbe: add option for link up check on pin SDP3

    e0658c31961 net/iavf: fix data path selection

    133ec0ce1cf kni: fix build with Linux 5.18

    8048354bb7f net/mlx5: fix Tx recovery

    27dda79b5d2 examples/vhost: fix crash when no VMDq

    63005df100f vhost: fix deadlock when message handling failed

    4daae0ccb80 doc: fix vhost multi-queue reconnection

    ff874e673ad net/bnxt: fix compatibility with some old firmwares

    fa4da49c814 ethdev: fix port close in secondary process

    ac86ba961eb net/nfp: fix disabling VLAN stripping

    ef9b3014214 net/txgbe: fix max number of queues for SR-IOV

    d096c590dee ethdev: fix port state when stop

    89f54969e74 net/memif: fix overwriting of head segment

    711575cd7f7 net/bonding: fix mbuf fast free usage

    bdf2967cd5c app/testpmd: do not poll stopped queues

    f6060b16895 ethdev: prohibit polling stopped queue

    b4f13e0fdb0 app/testpmd: fix metering and policing command for RFC4115

    070f2b2b8a0 app/testpmd: replace hardcoded min mbuf number with macro

    fe09e56cb54 ethdev: fix possible null pointer access

    7386b532205 ethdev: fix memory leak in xstats telemetry

    7d17ff9a817 net/axgbe: fix xstats get return if xstats is null

    2b88b790c13 net/mvpp2: fix xstats get return if xstats is null

    007dfe41028 net/ipn3ke: fix xstats get return if xstats is null

    17467579f79 net/hns3: fix xstats get return if xstats is null

    eb7b05b5de5 ethdev: clarify null location case in xstats get

    cf28773c938 app/testpmd: remove useless pointer checks

    9463f695d7c app/testpmd: perform SW IP checksum for GRO/GSO packets

    3b918bc7112 doc: add missing auth algo for IPsec example

    5e4a008e4e1 drivers/crypto: fix warnings for OpenSSL version

    387d4b3ca78 test/crypto: fix null check for ZUC authentication

    b9b994dcf2d examples/ipsec-secgw: fix promiscuous mode option

    78059ea5a5f examples/ipsec-secgw: fix uninitialized memory access