# Copyright (C) 2009, 2010, 2013, 2014 Nicira Networks, Inc.

#

# Copying and distribution of this file, with or without modification,

# are permitted in any medium without royalty provided the copyright

# notice and this notice are preserved.  This file is offered as-is,

# without warranty of any kind.

#

# If tests have to be skipped while building, specify the '--without check'

# option. For example:

# rpmbuild -bb --without check rhel/openvswitch-fedora.spec

# This defines the base package name's version.

%define pkgname openvswitch2.15

%if 0%{?commit:1}

%global shortcommit %(c=%{commit}; echo ${c:0:7})

%endif

# Enable PIE, bz#955181

%global _hardened_build 1

# RHEL-7 doesn't define _rundir macro yet

# Fedora 15 onwards uses /run as _rundir

%if 0%{!?_rundir:1}

%define _rundir /run

%endif

# FIXME Test "STP - flush the fdb and mdb when topology changed" fails on s390x

# FIXME 2 tests fails on ppc64le. They will be hopefully fixed before official 2.11

%ifarch %{ix86} x86_64 aarch64

%bcond_without check

%else

%bcond_with check

%endif

# option to run kernel datapath tests, requires building as root!

%bcond_with check_datapath_kernel

# option to build with libcap-ng, needed for running OVS as regular user

%bcond_without libcapng

# option to build with ipsec support

%bcond_without ipsec

# Build python2 (that provides python) and python3 subpackages on Fedora

# Build only python3 (that provides python) subpackage on RHEL8

# Build only python subpackage on RHEL7

%if 0%{?rhel} > 7 || 0%{?fedora}

# On RHEL8 Sphinx is included in buildroot

%global external_sphinx 1

%else

# Don't use external sphinx (RHV doesn't have optional repositories enabled)

%global external_sphinx 0

%endif

Name: %{pkgname}

Summary: Open vSwitch

Group: System Environment/Daemons daemon/database/utilities

URL: http://www.openvswitch.org/

Version: 2.15.0

Release: 118%{?dist}

# Nearly all of openvswitch is ASL 2.0.  The bugtool is LGPLv2+, and the

# lib/sflow*.[ch] files are SISSL

# datapath/ is GPLv2 (although not built into any of the binary packages)

License: ASL 2.0 and LGPLv2+ and SISSL

%define dpdkver 20.11

%define dpdkdir dpdk

%define dpdksver %(echo %{dpdkver} | cut -d. -f-2)

# NOTE: DPDK does not currently build for s390x

# DPDK on aarch64 is not stable enough to be enabled in FDP

%if 0%{?rhel} > 7 || 0%{?fedora}

%define dpdkarches x86_64 ppc64le

%else

%define dpdkarches

%endif

%if 0%{?commit:1}

Source: https://github.com/openvswitch/ovs/archive/%{commit}.tar.gz#/openvswitch-%{commit}.tar.gz

%else

Source: https://github.com/openvswitch/ovs/archive/v%{version}.tar.gz#/openvswitch-%{version}.tar.gz

%endif

Source10: https://fast.dpdk.org/rel/dpdk-%{dpdkver}.tar.xz

%define docutilsver 0.12

%define pygmentsver 1.4

%define sphinxver   1.2.3

Source100: https://pypi.io/packages/source/d/docutils/docutils-%{docutilsver}.tar.gz

Source101: https://pypi.io/packages/source/P/Pygments/Pygments-%{pygmentsver}.tar.gz

Source102: https://pypi.io/packages/source/S/Sphinx/Sphinx-%{sphinxver}.tar.gz

Patch:     openvswitch-%{version}.patch

# The DPDK is designed to optimize througput of network traffic using, among

# other techniques, carefully crafted assembly instructions.  As such it

# needs extensive work to port it to other architectures.

ExclusiveArch: x86_64 aarch64 ppc64le s390x

# Do not enable this otherwise YUM will break on any upgrade.

# Provides: openvswitch

Conflicts: openvswitch < 2.15

Conflicts: openvswitch-dpdk < 2.15

Conflicts: openvswitch2.10

Conflicts: openvswitch2.11

Conflicts: openvswitch2.12

Conflicts: openvswitch2.13

Conflicts: openvswitch2.14

# FIXME Sphinx is used to generate some manpages, unfortunately, on RHEL, it's

# in the -optional repository and so we can't require it directly since RHV

# doesn't have the -optional repository enabled and so TPS fails

%if %{external_sphinx}

BuildRequires: python3-sphinx

%else

# Sphinx dependencies

BuildRequires: python-devel

BuildRequires: python-setuptools

#BuildRequires: python2-docutils

BuildRequires: python-jinja2

BuildRequires: python-nose

#BuildRequires: python2-pygments

# docutils dependencies

BuildRequires: python-imaging

# pygments dependencies

BuildRequires: python-nose

%endif

BuildRequires: gcc gcc-c++ make

BuildRequires: autoconf automake libtool

BuildRequires: systemd-units openssl openssl-devel

BuildRequires: python3-devel python3-setuptools

BuildRequires: desktop-file-utils

BuildRequires: groff-base graphviz

BuildRequires: unbound-devel

BuildRequires: systemtap-sdt-devel

# make check dependencies

BuildRequires: procps-ng

%if 0%{?rhel} > 7 || 0%{?fedora}

BuildRequires: python3-pyOpenSSL

%endif

%if %{with check_datapath_kernel}

BuildRequires: nmap-ncat

# would be useful but not available in RHEL or EPEL

#BuildRequires: pyftpdlib

%endif

%if %{with libcapng}

BuildRequires: libcap-ng libcap-ng-devel

%endif

%ifarch %{dpdkarches}

BuildRequires: meson

# DPDK driver dependencies

BuildRequires: zlib-devel numactl-devel

%ifarch x86_64

BuildRequires: rdma-core-devel >= 15 libmnl-devel

%endif

# Required by packaging policy for the bundled DPDK

Provides: bundled(dpdk) = %{dpdkver}

%endif

Requires: openssl iproute module-init-tools

#Upstream kernel commit 4f647e0a3c37b8d5086214128614a136064110c3

#Requires: kernel >= 3.15.0-0

Requires: openvswitch-selinux-extra-policy

Requires(pre): shadow-utils

Requires(post): /bin/sed

Requires(post): /usr/sbin/usermod

Requires(post): /usr/sbin/groupadd

Requires(post): systemd-units

Requires(preun): systemd-units

Requires(postun): systemd-units

Obsoletes: openvswitch-controller <= 0:2.1.0-1

%description

Open vSwitch provides standard network bridging functions and

support for the OpenFlow protocol for remote per-flow control of

traffic.

%package -n python3-%{pkgname}

Summary: Open vSwitch python3 bindings

License: ASL 2.0

Requires: %{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

Provides: python-%{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

%description -n python3-%{pkgname}

Python bindings for the Open vSwitch database

%package test

Summary: Open vSwitch testing utilities

License: ASL 2.0

BuildArch: noarch

Requires: python3-%{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

Requires: tcpdump

%description test

Utilities that are useful to diagnose performance and connectivity

issues in Open vSwitch setup.

%package devel

Summary: Open vSwitch OpenFlow development package (library, headers)

License: ASL 2.0

Requires: %{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

%description devel

This provides shared library, libopenswitch.so and the openvswitch header

files needed to build an external application.

%if 0%{?rhel} > 7 || 0%{?fedora} > 28

%package -n network-scripts-%{name}

Summary: Open vSwitch legacy network service support

License: ASL 2.0

Requires: network-scripts

Supplements: (%{name} and network-scripts)

%description -n network-scripts-%{name}

This provides the ifup and ifdown scripts for use with the legacy network

service.

%endif

%if %{with ipsec}

%package ipsec

Summary: Open vSwitch IPsec tunneling support

License: ASL 2.0

Requires: python3-%{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

Requires: libreswan

%description ipsec

This package provides IPsec tunneling support for OVS tunnels.

%endif

%prep

%if 0%{?commit:1}

%setup -q -n ovs-%{commit} -a 10

%else

%setup -q -n ovs-%{version} -a 10

%endif

%if ! %{external_sphinx}

%if 0%{?commit:1}

%setup -n ovs-%{commit} -q -D -T -a 100 -a 101 -a 102

%else

%setup -n ovs-%{version} -q -D -T -a 100 -a 101 -a 102

%endif

%endif

mv dpdk-*/ %{dpdkdir}/

# FIXME should we propose a way to do that upstream?

sed -ri "/^subdir\('(usertools|app)'\)/d" %{dpdkdir}/meson.build

%patch -p1

%build

# Build Sphinx on RHEL

%if ! %{external_sphinx}

export PYTHONPATH="${PYTHONPATH:+$PYTHONPATH:}%{_builddir}/pytmp/lib/python"

for x in docutils-%{docutilsver} Pygments-%{pygmentsver} Sphinx-%{sphinxver}; do

    pushd "$x"

    python2 setup.py install --home %{_builddir}/pytmp

    popd

done

export PATH="$PATH:%{_builddir}/pytmp/bin"

%endif

./boot.sh

%ifarch %{dpdkarches}    # build dpdk

# Lets build DPDK first

cd %{dpdkdir}

ENABLED_DRIVERS=(

    bus/pci

    bus/vdev

    mempool/ring

    net/failsafe

    net/i40e

    net/ring

    net/vhost

    net/virtio

    net/tap

)

%ifarch x86_64

ENABLED_DRIVERS+=(

    bus/vmbus

    common/iavf

    common/mlx5

    net/bnxt

    net/enic

    net/iavf

    net/ice

    net/mlx4

    net/mlx5

    net/netvsc

    net/nfp

    net/qede

    net/vdev_netvsc

)

%endif

%ifarch aarch64 x86_64

ENABLED_DRIVERS+=(

    net/e1000

    net/ixgbe

)

%endif

# Since upstream doesn't have a way

for driver in drivers/*/*/; do

    driver=${driver#drivers/}

    driver=${driver%/}

    [[ " ${ENABLED_DRIVERS[@]} " == *" $driver "* ]] || \

        disable_drivers="${disable_drivers:+$disable_drivers,}"$driver

done

#CFLAGS="$(echo %{optflags} | sed -e 's:-Wall::g' -e 's:-march=[[:alnum:]]* ::g') -Wformat -fPIC %{_hardening_ldflags}" \

%set_build_flags

%__meson --prefix=%{_builddir}/dpdk-build \

         --buildtype=plain \

         -Ddisable_drivers="$disable_drivers" \

         -Dmachine=default \

         -Dmax_ethports=1024 \

         -Dmax_numa_nodes=8 \

         -Dtests=false \

         %{_vpath_builddir}

%meson_build

%__meson install -C %{_vpath_builddir} --no-rebuild

# FIXME currently with LTO enabled OVS tries to link with both static and shared libraries

rm -v %{_builddir}/dpdk-build/%{_lib}/*.so*

# Generate a list of supported drivers, its hard to tell otherwise.

cat << EOF > README.DPDK-PMDS

DPDK drivers included in this package:

EOF

for f in %{_builddir}/dpdk-build/%{_lib}/librte_net_*.a; do

    basename ${f} | cut -c12- | cut -d. -f1 | tr [:lower:] [:upper:]

done >> README.DPDK-PMDS

cat << EOF >> README.DPDK-PMDS

For further information about the drivers, see

http://dpdk.org/doc/guides-%{dpdksver}/nics/index.html

EOF

cd -

%endif    # build dpdk

# And now for OVS...

mkdir build-shared build-static

pushd build-shared

ln -s ../configure

%configure \

%if %{with libcapng}

        --enable-libcapng \

%else

        --disable-libcapng \

%endif

        --disable-static \

        --enable-shared \

        --enable-ssl \

        --with-pkidir=%{_sharedstatedir}/openvswitch/pki \

        --enable-usdt-probes

make %{?_smp_mflags}

popd

pushd build-static

ln -s ../configure

%ifarch %{dpdkarches}

PKG_CONFIG_PATH=%{_builddir}/dpdk-build/%{_lib}/pkgconfig \

%endif

%configure \

%if %{with libcapng}

        --enable-libcapng \

%else

        --disable-libcapng \

%endif

        --enable-ssl \

%ifarch %{dpdkarches}

        --with-dpdk=static \

%endif

        --with-pkidir=%{_sharedstatedir}/openvswitch/pki \

        --enable-usdt-probes

make %{?_smp_mflags}

popd

/usr/bin/python3 build-aux/dpdkstrip.py \

        --dpdk \

        < rhel/usr_lib_systemd_system_ovs-vswitchd.service.in \

        > rhel/usr_lib_systemd_system_ovs-vswitchd.service

%install

rm -rf $RPM_BUILD_ROOT

make -C build-shared install-libLTLIBRARIES DESTDIR=$RPM_BUILD_ROOT

make -C build-static install DESTDIR=$RPM_BUILD_ROOT

install -d -m 0755 $RPM_BUILD_ROOT%{_rundir}/openvswitch

install -d -m 0750 $RPM_BUILD_ROOT%{_localstatedir}/log/openvswitch

install -d -m 0755 $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch

install -p -D -m 0644 rhel/usr_lib_udev_rules.d_91-vfio.rules \

        $RPM_BUILD_ROOT%{_udevrulesdir}/91-vfio.rules

install -p -D -m 0644 \

        rhel/usr_share_openvswitch_scripts_systemd_sysconfig.template \

        $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/openvswitch

for service in openvswitch ovsdb-server ovs-vswitchd \

               ovs-delete-transient-ports; do

        install -p -D -m 0644 \

                        rhel/usr_lib_systemd_system_${service}.service \

                        $RPM_BUILD_ROOT%{_unitdir}/${service}.service

done

%if %{with ipsec}

install -p -D -m 0644 rhel/usr_lib_systemd_system_openvswitch-ipsec.service \

                      $RPM_BUILD_ROOT%{_unitdir}/openvswitch-ipsec.service

%endif

install -m 0755 rhel/etc_init.d_openvswitch \

        $RPM_BUILD_ROOT%{_datadir}/openvswitch/scripts/openvswitch.init

install -p -D -m 0644 rhel/etc_openvswitch_default.conf \

        $RPM_BUILD_ROOT/%{_sysconfdir}/openvswitch/default.conf

install -p -D -m 0644 rhel/etc_logrotate.d_openvswitch \

        $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d/openvswitch

install -m 0644 vswitchd/vswitch.ovsschema \

        $RPM_BUILD_ROOT/%{_datadir}/openvswitch/vswitch.ovsschema

install -d -m 0755 $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/network-scripts/

install -p -m 0755 rhel/etc_sysconfig_network-scripts_ifdown-ovs \

        $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/network-scripts/ifdown-ovs

install -p -m 0755 rhel/etc_sysconfig_network-scripts_ifup-ovs \

        $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/network-scripts/ifup-ovs

install -d -m 0755 $RPM_BUILD_ROOT%{python3_sitelib}

cp -a $RPM_BUILD_ROOT/%{_datadir}/openvswitch/python/ovstest \

        $RPM_BUILD_ROOT%{python3_sitelib}

# Build the JSON C extension for the Python lib (#1417738)

pushd python

(

export CPPFLAGS="-I ../include -I ../build-shared/include"

export LDFLAGS="%{__global_ldflags} -L $RPM_BUILD_ROOT%{_libdir}"

%py3_build

%py3_install

[ -f "$RPM_BUILD_ROOT/%{python3_sitearch}/ovs/_json$(python3-config --extension-suffix)" ]

)

popd

rm -rf $RPM_BUILD_ROOT/%{_datadir}/openvswitch/python/

install -d -m 0755 $RPM_BUILD_ROOT/%{_sharedstatedir}/openvswitch

install -d -m 0755 $RPM_BUILD_ROOT%{_prefix}/lib/firewalld/services/

install -p -D -m 0755 \

        rhel/usr_share_openvswitch_scripts_ovs-systemd-reload \

        $RPM_BUILD_ROOT%{_datadir}/openvswitch/scripts/ovs-systemd-reload

touch $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch/conf.db

# The db needs special permission as IPsec Pre-shared keys are stored in it.

chmod 0640 $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch/conf.db

touch $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch/system-id.conf

# remove unpackaged files

rm -f $RPM_BUILD_ROOT/%{_bindir}/ovs-benchmark \

        $RPM_BUILD_ROOT/%{_bindir}/ovs-docker \

        $RPM_BUILD_ROOT/%{_bindir}/ovs-parse-backtrace \

        $RPM_BUILD_ROOT/%{_bindir}/ovs-testcontroller \

        $RPM_BUILD_ROOT/%{_sbindir}/ovs-vlan-bug-workaround \

        $RPM_BUILD_ROOT/%{_mandir}/man1/ovs-benchmark.1* \

        $RPM_BUILD_ROOT/%{_mandir}/man8/ovs-testcontroller.* \

        $RPM_BUILD_ROOT/%{_mandir}/man8/ovs-vlan-bug-workaround.8*

%if ! %{with ipsec}

rm -f $RPM_BUILD_ROOT/%{_datadir}/openvswitch/scripts/ovs-monitor-ipsec

%endif

# remove ovn unpackages files

rm -f $RPM_BUILD_ROOT%{_bindir}/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man1/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man5/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man7/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man8/ovn*

rm -f $RPM_BUILD_ROOT%{_datadir}/openvswitch/ovn*

rm -f $RPM_BUILD_ROOT%{_datadir}/openvswitch/scripts/ovn*

rm -f $RPM_BUILD_ROOT%{_includedir}/ovn/*

%check

%if %{with check}

    pushd build-static

    touch resolv.conf

    export OVS_RESOLV_CONF=$(pwd)/resolv.conf

    if make check TESTSUITEFLAGS='%{_smp_mflags}' ||

       make check TESTSUITEFLAGS='--recheck'; then :;

    else

        cat tests/testsuite.log

        exit 1

    fi

    popd

%endif

%if %{with check_datapath_kernel}

    pushd build-static

    if make check-kernel RECHECK=yes; then :;

    else

        cat tests/system-kmod-testsuite.log

        exit 1

    fi

    popd

%endif

%clean

rm -rf $RPM_BUILD_ROOT

%preun

%if 0%{?systemd_preun:1}

    %systemd_preun openvswitch.service

%else

    if [ $1 -eq 0 ] ; then

    # Package removal, not upgrade

        /bin/systemctl --no-reload disable openvswitch.service >/dev/null 2>&1 || :

        /bin/systemctl stop openvswitch.service >/dev/null 2>&1 || :

    fi

%endif

%pre

getent group openvswitch >/dev/null || groupadd -r openvswitch

getent passwd openvswitch >/dev/null || \

    useradd -r -g openvswitch -d / -s /sbin/nologin \

    -c "Open vSwitch Daemons" openvswitch

%ifarch %{dpdkarches}

    getent group hugetlbfs >/dev/null || groupadd hugetlbfs

    usermod -a -G hugetlbfs openvswitch

%endif

exit 0

%post

if [ $1 -eq 1 ]; then

    sed -i 's:^#OVS_USER_ID=:OVS_USER_ID=:' /etc/sysconfig/openvswitch

%ifarch %{dpdkarches}

    sed -i \

        's@OVS_USER_ID="openvswitch:openvswitch"@OVS_USER_ID="openvswitch:hugetlbfs"@'\

        /etc/sysconfig/openvswitch

%endif

fi

chown -R openvswitch:openvswitch /etc/openvswitch

%if 0%{?systemd_post:1}

    %systemd_post openvswitch.service

%else

    # Package install, not upgrade

    if [ $1 -eq 1 ]; then

        /bin/systemctl daemon-reload >dev/null || :

    fi

%endif

%postun

%if 0%{?systemd_postun:1}

    %systemd_postun openvswitch.service

%else

    /bin/systemctl daemon-reload >/dev/null 2>&1 || :

%endif

%triggerun -- openvswitch < 2.5.0-22.git20160727%{?dist}

# old rpm versions restart the service in postun, but

# due to systemd some preparation is needed.

if systemctl is-active openvswitch >/dev/null 2>&1 ; then

    /usr/share/openvswitch/scripts/ovs-ctl stop >/dev/null 2>&1 || :

    systemctl daemon-reload >/dev/null 2>&1 || :

    systemctl stop openvswitch ovsdb-server ovs-vswitchd >/dev/null 2>&1 || :

    systemctl start openvswitch >/dev/null 2>&1 || :

fi

exit 0

%files -n python3-%{pkgname}

%{python3_sitearch}/ovs

%{python3_sitearch}/ovs-*.egg-info

%doc LICENSE

%files test

%{_bindir}/ovs-pcap

%{_bindir}/ovs-tcpdump

%{_bindir}/ovs-tcpundump

%{_mandir}/man1/ovs-pcap.1*

%{_mandir}/man8/ovs-tcpdump.8*

%{_mandir}/man1/ovs-tcpundump.1*

%{_bindir}/ovs-test

%{_bindir}/ovs-vlan-test

%{_bindir}/ovs-l3ping

%{_mandir}/man8/ovs-test.8*

%{_mandir}/man8/ovs-vlan-test.8*

%{_mandir}/man8/ovs-l3ping.8*

%{python3_sitelib}/ovstest

%files devel

%{_libdir}/*.so

%{_libdir}/pkgconfig/*.pc

%{_includedir}/openvswitch/*

%{_includedir}/openflow/*

%exclude %{_libdir}/*.a

%exclude %{_libdir}/*.la

%if 0%{?rhel} > 7 || 0%{?fedora} > 28

%files -n network-scripts-%{name}

%{_sysconfdir}/sysconfig/network-scripts/ifup-ovs

%{_sysconfdir}/sysconfig/network-scripts/ifdown-ovs

%endif

%files

%defattr(-,openvswitch,openvswitch)

%dir %{_sysconfdir}/openvswitch

%{_sysconfdir}/openvswitch/default.conf

%config %ghost %verify(not owner group md5 size mtime) %{_sysconfdir}/openvswitch/conf.db

%ghost %attr(0600,-,-) %verify(not owner group md5 size mtime) %{_sysconfdir}/openvswitch/.conf.db.~lock~

%config %ghost %{_sysconfdir}/openvswitch/system-id.conf

%defattr(-,root,root)

%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/sysconfig/openvswitch

%{_sysconfdir}/bash_completion.d/ovs-appctl-bashcomp.bash

%{_sysconfdir}/bash_completion.d/ovs-vsctl-bashcomp.bash

%config(noreplace) %{_sysconfdir}/logrotate.d/openvswitch

%{_unitdir}/openvswitch.service

%{_unitdir}/ovsdb-server.service

%{_unitdir}/ovs-vswitchd.service

%{_unitdir}/ovs-delete-transient-ports.service

%{_datadir}/openvswitch/scripts/openvswitch.init

%{_datadir}/openvswitch/scripts/ovs-check-dead-ifs

%{_datadir}/openvswitch/scripts/ovs-lib

%{_datadir}/openvswitch/scripts/ovs-save

%{_datadir}/openvswitch/scripts/ovs-vtep

%{_datadir}/openvswitch/scripts/ovs-ctl

%{_datadir}/openvswitch/scripts/ovs-kmod-ctl

%{_datadir}/openvswitch/scripts/ovs-systemd-reload

%config %{_datadir}/openvswitch/vswitch.ovsschema

%config %{_datadir}/openvswitch/vtep.ovsschema

%{_bindir}/ovs-appctl

%{_bindir}/ovs-dpctl

%{_bindir}/ovs-ofctl

%{_bindir}/ovs-vsctl

%{_bindir}/ovsdb-client

%{_bindir}/ovsdb-tool

%{_bindir}/ovs-pki

%{_bindir}/vtep-ctl

%{_libdir}/*.so.*

%{_sbindir}/ovs-vswitchd

%{_sbindir}/ovsdb-server

%{_mandir}/man1/ovsdb-client.1*

%{_mandir}/man1/ovsdb-server.1*

%{_mandir}/man1/ovsdb-tool.1*

%{_mandir}/man5/ovsdb.5*

%{_mandir}/man5/ovsdb-server.5.*

%{_mandir}/man5/ovs-vswitchd.conf.db.5*

%{_mandir}/man5/vtep.5*

%{_mandir}/man7/ovsdb-server.7*

%{_mandir}/man7/ovsdb.7*

%{_mandir}/man7/ovs-actions.7*

%{_mandir}/man7/ovs-fields.7*

%{_mandir}/man8/vtep-ctl.8*

%{_mandir}/man8/ovs-appctl.8*

%{_mandir}/man8/ovs-ctl.8*

%{_mandir}/man8/ovs-dpctl.8*

%{_mandir}/man8/ovs-kmod-ctl.8.*

%{_mandir}/man8/ovs-ofctl.8*

%{_mandir}/man8/ovs-pki.8*

%{_mandir}/man8/ovs-vsctl.8*

%{_mandir}/man8/ovs-vswitchd.8*

%{_mandir}/man8/ovs-parse-backtrace.8*

%{_udevrulesdir}/91-vfio.rules

%doc LICENSE NOTICE README.rst NEWS rhel/README.RHEL.rst

%ifarch %{dpdkarches}

%doc %{dpdkdir}/README.DPDK-PMDS

%attr(750,openvswitch,hugetlbfs) %verify(not owner group) /var/log/openvswitch

%else

%attr(750,openvswitch,openvswitch) %verify(not owner group) /var/log/openvswitch

%endif

/var/lib/openvswitch

%ghost %attr(755,root,root) %verify(not owner group) %{_rundir}/openvswitch

%{_datadir}/openvswitch/bugtool-plugins/

%{_datadir}/openvswitch/scripts/ovs-bugtool-*

%{_bindir}/ovs-dpctl-top

%{_sbindir}/ovs-bugtool

%{_mandir}/man8/ovs-dpctl-top.8*

%{_mandir}/man8/ovs-bugtool.8*

%if (0%{?rhel} && 0%{?rhel} <= 7) || (0%{?fedora} && 0%{?fedora} < 29)

%{_sysconfdir}/sysconfig/network-scripts/ifup-ovs

%{_sysconfdir}/sysconfig/network-scripts/ifdown-ovs

%endif

%if %{with ipsec}

%files ipsec

%{_datadir}/openvswitch/scripts/ovs-monitor-ipsec

%{_unitdir}/openvswitch-ipsec.service

%endif

%changelog

* Wed Aug 31 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-118

- Merging upstream branch-2.15 [RH git: f73b3f1931]

    Commit list:

    93e88f39e1 raft: Fix unnecessary periodic compactions.

* Tue Aug 09 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-117

- Merging upstream branch-2.15 [RH git: 671f431f8e]

    Commit list:

    f1a14e9600 github: Move CI to ubuntu 20.04 base image.

    176298d066 netdev-offload-dpdk: Fix vxlan vni cast-align warnings.

* Mon Aug 08 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-116

- Merging upstream branch-2.15 [RH git: 12c6518299]

    Commit list:

    e3909a40ae netdev-offload-tc: Disable offload of IPv6 fragments.

* Mon Aug 08 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-115

- Merging upstream branch-2.15 [RH git: f0a32c6c60]

    Commit list:

    173769badf system-traffic: Fix IPv4 fragmentation test sequence for check-kernel.

    3e9debe5be system-traffic: Fix incorrect neigh entry in ipv6 header modification test.

    8ec1752be7 system-traffic: Don't run IPv6 header modification test on kernels < 5.19.

* Thu Aug 04 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-114

- Merging upstream branch-2.15 [RH git: 61c9b3f738]

    Commit list:

    8c0a187ea5 python: Fix E275 missing whitespace after keyword.

    84b05f4397 dpif-netlink: Fix incorrect bit shift in compat mode.

    506b9a7a22 packets: Re-calculate IPv6 checksum only for first frag upon modify.

* Fri Jul 29 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-113

- Merging upstream branch-2.15 [RH git: d3374dc711]

    Commit list:

    f2024c9ef9 libopenvswitch.pc: Add missing libs for a static build.

    a8e6816ab2 rhel: Stop installing internal headers.

* Tue Jul 26 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-112

- Merging upstream branch-2.15 [RH git: 14ed491a9f]

    Commit list:

    ac90500da4 netdev-linux: Do not touch LAG members if master is not attached to OVS.

    dbfe371cdc netdev: Clear auto_classified if netdev reopened with the type specified.

* Mon Jul 25 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-111

- Merging upstream branch-2.15 [RH git: bc54a123ad]

    Commit list:

    eb3484a398 system-traffic: Properly stop dangling ping after geneve test.

    0f639878cb conntrack: Fix conntrack multiple new state.

* Thu Jul 14 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-110

- Merging upstream branch-2.15 [RH git: b75a6f236b]

    Commit list:

    8c7f759b19 tc: Fix misaligned access while creating pedit actions.

* Wed Jun 29 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-109

- Merging upstream branch-2.15 [RH git: 566da17c56]

    Commit list:

    e8c27d116d dpif-netdev: Refactor AVX512 runtime checks. (#2100393)

* Tue Jun 28 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-108

- Merging upstream branch-2.15 [RH git: 4fe2b46365]

    Commit list:

    8fa98aa7c9 ovsdb: Fix memory leak on error path in ovsdb_file_read__().

    61689d0c3b odp-util: Ignore unknown attributes in parse_key_and_mask_to_match(). (#2089331)

    3d33ff315e lldp: Fix lldp memory leak.

    ef42afed6c ipfix: Trigger revalidation if ipfix options changes.

* Mon Jun 27 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-107

- Merging upstream branch-2.15 [RH git: 9bc851aa76]

    Commit list:

    386f0af8f5 conntrack: Fix incorrect bit shift while hashing nat range.

    7ecfaf9562 odp-util: Fix unaligned access to tunnel id.

    019df265ae ofpbuf: Fix offsetting a NULL pointer in ofpbuf_reserve.

    aeac1a781a drop-stats.at: Fix frequent failures of the recursion too deep test.

* Wed Jun 15 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-106

- Merging upstream branch-2.15 [RH git: ab1d6faf99]

    Commit list:

    4c36bab380 Prepare for 2.15.6.

    b12608cc2e Set release date for 2.15.5.

* Tue Jun 07 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-105

- Merging upstream branch-2.15 [RH git: c904e84c3e]

    Commit list:

    3ddf43cfdd ofproto-dpif-xlate: Fix internal CT state for non-recirc traffic.

    bb5dac3ce7 classifier: Adjust segment boundary to execute prerequisite processing. (#2081773)

* Wed Jun 01 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-104

- Merging upstream branch-2.15 [RH git: 873c041417]

    Commit list:

    22ccbc1dba ofproto-dpif: Fix meter use-after-free.

    ffc10739a2 ovs-rcu: Add ovsrcu_barrier.

* Thu May 26 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-103

- Merging upstream branch-2.15 [RH git: d93e08b22f]

    Commit list:

    18a8b7d5d8 classifier: Make find_match_wc() prototype and definition match.

    cc783da5d9 ovsdb: raft: Fix transaction double commit due to lost leadership. (#2046340)

    292e018e27 Revert "odp-util: Always report ODP_FIT_TOO_LITTLE for IGMP."

    ecfd0b783f ofproto-dpif: Trigger revalidation if ct tp changes.

* Wed May 25 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-102

- Merging upstream branch-2.15 [RH git: 08671b1f53]

    Commit list:

    21b537549c Carefully release NBL in Windows

* Wed May 18 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-101

- Merging upstream branch-2.15 [RH git: 93d7ccfb1f]

    Commit list:

    beac697b4b tests: Properly kill ovsdb test processes.

    1f7a349be8 netdev-linux: Properly access 32-bit aligned rtnl_link_stats64 structs.

* Wed May 04 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-100

- Merging upstream branch-2.15 [RH git: 5fb6b64894]

    Commit list:

    3d77799747 ofproto-dpif-xlate: Remove mirror assert.

    ac49e21b6d netdev-dpdk: Fix tx drops statistic for a down netdev.

* Thu Apr 28 2022 Timothy Redaelli <tredaelli@redhat.com> - 2.15.0-99

- vhost: fix queue number check when setting inflight FD [RH git: ba1bcead43]

    [ upstream commit 6442c329b9d2ded0f44b27d2016aaba8ba5844c5 ]

    In function vhost_user_set_inflight_fd, queue number in inflight

    message is used to access virtqueue. However, queue number could

    be larger than VHOST_MAX_VRING and cause write OOB as this number

    will be used to write inflight info in virtqueue structure. This

    patch checks the queue number to avoid the issue and also make

    sure virtqueues are allocated before setting inflight information.

    Fixes: ad0a4ae491fe ("vhost: checkout resubmit inflight information")

    Reported-by: Wenxiang Qian <leonwxqian@gmail.com>

    Signed-off-by: Chenbo Xia <chenbo.xia@intel.com>

    Reviewed-by: Maxime Coquelin <maxime.coquelin@redhat.com>

* Thu Apr 28 2022 Timothy Redaelli <tredaelli@redhat.com> - 2.15.0-98

- vhost: fix FD leak with inflight messages [RH git: 9d20e2fe62]

    [ upstream commit af74f7db384ed149fe42b21dbd7975f8a54ef227 ]

    Even if unlikely, a buggy vhost-user master might attach fds to inflight

    messages. Add checks like for other types of vhost-user messages.

    Fixes: d87f1a1cb7b6 ("vhost: support inflight info sharing")

    Signed-off-by: David Marchand <david.marchand@redhat.com>

    Reviewed-by: Maxime Coquelin <maxime.coquelin@redhat.com>

* Wed Apr 27 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-97

- Merging upstream branch-2.15 [RH git: 885e0d0ad5]

    Commit list:

    cbed56773f ofproto-dpif-xlate: Clear out vlan flow fields while processing native tunnel. (#393566

    2060552)