# Copyright (C) 2009, 2010, 2013, 2014 Nicira Networks, Inc.

#

# Copying and distribution of this file, with or without modification,

# are permitted in any medium without royalty provided the copyright

# notice and this notice are preserved.  This file is offered as-is,

# without warranty of any kind.

#

# If tests have to be skipped while building, specify the '--without check'

# option. For example:

# rpmbuild -bb --without check rhel/openvswitch-fedora.spec

# This defines the base package name's version.

%define pkgname openvswitch2.15

%if 0%{?commit:1}

%global shortcommit %(c=%{commit}; echo ${c:0:7})

%endif

# Enable PIE, bz#955181

%global _hardened_build 1

# RHEL-7 doesn't define _rundir macro yet

# Fedora 15 onwards uses /run as _rundir

%if 0%{!?_rundir:1}

%define _rundir /run

%endif

# FIXME Test "STP - flush the fdb and mdb when topology changed" fails on s390x

# FIXME 2 tests fails on ppc64le. They will be hopefully fixed before official 2.11

%ifarch %{ix86} x86_64 aarch64

%bcond_without check

%else

%bcond_with check

%endif

# option to run kernel datapath tests, requires building as root!

%bcond_with check_datapath_kernel

# option to build with libcap-ng, needed for running OVS as regular user

%bcond_without libcapng

# option to build with ipsec support

%bcond_without ipsec

# Build python2 (that provides python) and python3 subpackages on Fedora

# Build only python3 (that provides python) subpackage on RHEL8

# Build only python subpackage on RHEL7

%if 0%{?rhel} > 7 || 0%{?fedora}

# On RHEL8 Sphinx is included in buildroot

%global external_sphinx 1

%else

# Don't use external sphinx (RHV doesn't have optional repositories enabled)

%global external_sphinx 0

%endif

Name: %{pkgname}

Summary: Open vSwitch

Group: System Environment/Daemons daemon/database/utilities

URL: http://www.openvswitch.org/

Version: 2.15.0

Release: 57%{?dist}

# Nearly all of openvswitch is ASL 2.0.  The bugtool is LGPLv2+, and the

# lib/sflow*.[ch] files are SISSL

# datapath/ is GPLv2 (although not built into any of the binary packages)

License: ASL 2.0 and LGPLv2+ and SISSL

%define dpdkver 20.11

%define dpdkdir dpdk

%define dpdksver %(echo %{dpdkver} | cut -d. -f-2)

# NOTE: DPDK does not currently build for s390x

# DPDK on aarch64 is not stable enough to be enabled in FDP

%if 0%{?rhel} > 7 || 0%{?fedora}

%define dpdkarches x86_64 ppc64le

%else

%define dpdkarches

%endif

%if 0%{?commit:1}

Source: https://github.com/openvswitch/ovs/archive/%{commit}.tar.gz#/openvswitch-%{commit}.tar.gz

%else

Source: https://github.com/openvswitch/ovs/archive/v%{version}.tar.gz#/openvswitch-%{version}.tar.gz

%endif

Source10: https://fast.dpdk.org/rel/dpdk-%{dpdkver}.tar.xz

%define docutilsver 0.12

%define pygmentsver 1.4

%define sphinxver   1.2.3

Source100: https://pypi.io/packages/source/d/docutils/docutils-%{docutilsver}.tar.gz

Source101: https://pypi.io/packages/source/P/Pygments/Pygments-%{pygmentsver}.tar.gz

Source102: https://pypi.io/packages/source/S/Sphinx/Sphinx-%{sphinxver}.tar.gz

Patch:     openvswitch-%{version}.patch

# The DPDK is designed to optimize througput of network traffic using, among

# other techniques, carefully crafted assembly instructions.  As such it

# needs extensive work to port it to other architectures.

ExclusiveArch: x86_64 aarch64 ppc64le s390x

# Do not enable this otherwise YUM will break on any upgrade.

# Provides: openvswitch

Conflicts: openvswitch < 2.15

Conflicts: openvswitch-dpdk < 2.15

Conflicts: openvswitch2.10

Conflicts: openvswitch2.11

Conflicts: openvswitch2.12

Conflicts: openvswitch2.13

Conflicts: openvswitch2.14

# FIXME Sphinx is used to generate some manpages, unfortunately, on RHEL, it's

# in the -optional repository and so we can't require it directly since RHV

# doesn't have the -optional repository enabled and so TPS fails

%if %{external_sphinx}

BuildRequires: python3-sphinx

%else

# Sphinx dependencies

BuildRequires: python-devel

BuildRequires: python-setuptools

#BuildRequires: python2-docutils

BuildRequires: python-jinja2

BuildRequires: python-nose

#BuildRequires: python2-pygments

# docutils dependencies

BuildRequires: python-imaging

# pygments dependencies

BuildRequires: python-nose

%endif

BuildRequires: gcc gcc-c++ make

BuildRequires: autoconf automake libtool

BuildRequires: systemd-units openssl openssl-devel

BuildRequires: python3-devel python3-setuptools

BuildRequires: desktop-file-utils

BuildRequires: groff-base graphviz

BuildRequires: unbound-devel

# make check dependencies

BuildRequires: procps-ng

%if 0%{?rhel} > 7 || 0%{?fedora}

BuildRequires: python3-pyOpenSSL

%endif

%if %{with check_datapath_kernel}

BuildRequires: nmap-ncat

# would be useful but not available in RHEL or EPEL

#BuildRequires: pyftpdlib

%endif

%if %{with libcapng}

BuildRequires: libcap-ng libcap-ng-devel

%endif

%ifarch %{dpdkarches}

BuildRequires: meson

# DPDK driver dependencies

BuildRequires: zlib-devel numactl-devel

%ifarch x86_64

BuildRequires: rdma-core-devel >= 15 libmnl-devel

%endif

# Required by packaging policy for the bundled DPDK

Provides: bundled(dpdk) = %{dpdkver}

%endif

Requires: openssl iproute module-init-tools

#Upstream kernel commit 4f647e0a3c37b8d5086214128614a136064110c3

#Requires: kernel >= 3.15.0-0

Requires: openvswitch-selinux-extra-policy

Requires(pre): shadow-utils

Requires(post): /bin/sed

Requires(post): /usr/sbin/usermod

Requires(post): /usr/sbin/groupadd

Requires(post): systemd-units

Requires(preun): systemd-units

Requires(postun): systemd-units

Obsoletes: openvswitch-controller <= 0:2.1.0-1

%description

Open vSwitch provides standard network bridging functions and

support for the OpenFlow protocol for remote per-flow control of

traffic.

%package -n python3-%{pkgname}

Summary: Open vSwitch python3 bindings

License: ASL 2.0

Requires: %{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

Provides: python-%{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

%description -n python3-%{pkgname}

Python bindings for the Open vSwitch database

%package test

Summary: Open vSwitch testing utilities

License: ASL 2.0

BuildArch: noarch

Requires: python3-%{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

Requires: tcpdump

%description test

Utilities that are useful to diagnose performance and connectivity

issues in Open vSwitch setup.

%package devel

Summary: Open vSwitch OpenFlow development package (library, headers)

License: ASL 2.0

Requires: %{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

%description devel

This provides shared library, libopenswitch.so and the openvswitch header

files needed to build an external application.

%if 0%{?rhel} > 7 || 0%{?fedora} > 28

%package -n network-scripts-%{name}

Summary: Open vSwitch legacy network service support

License: ASL 2.0

Requires: network-scripts

Supplements: (%{name} and network-scripts)

%description -n network-scripts-%{name}

This provides the ifup and ifdown scripts for use with the legacy network

service.

%endif

%if %{with ipsec}

%package ipsec

Summary: Open vSwitch IPsec tunneling support

License: ASL 2.0

Requires: python3-%{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

Requires: libreswan

%description ipsec

This package provides IPsec tunneling support for OVS tunnels.

%endif

%prep

%if 0%{?commit:1}

%setup -q -n ovs-%{commit} -a 10

%else

%setup -q -n ovs-%{version} -a 10

%endif

%if ! %{external_sphinx}

%if 0%{?commit:1}

%setup -n ovs-%{commit} -q -D -T -a 100 -a 101 -a 102

%else

%setup -n ovs-%{version} -q -D -T -a 100 -a 101 -a 102

%endif

%endif

mv dpdk-*/ %{dpdkdir}/

# FIXME should we propose a way to do that upstream?

sed -ri "/^subdir\('(usertools|app)'\)/d" %{dpdkdir}/meson.build

%patch -p1

%build

# Build Sphinx on RHEL

%if ! %{external_sphinx}

export PYTHONPATH="${PYTHONPATH:+$PYTHONPATH:}%{_builddir}/pytmp/lib/python"

for x in docutils-%{docutilsver} Pygments-%{pygmentsver} Sphinx-%{sphinxver}; do

    pushd "$x"

    python2 setup.py install --home %{_builddir}/pytmp

    popd

done

export PATH="$PATH:%{_builddir}/pytmp/bin"

%endif

./boot.sh

%ifarch %{dpdkarches}    # build dpdk

# Lets build DPDK first

cd %{dpdkdir}

ENABLED_DRIVERS=(

    bus/pci

    bus/vdev

    mempool/ring

    net/failsafe

    net/i40e

    net/ring

    net/vhost

    net/virtio

    net/tap

)

%ifarch x86_64

ENABLED_DRIVERS+=(

    bus/vmbus

    common/iavf

    common/mlx5

    net/bnxt

    net/enic

    net/iavf

    net/ice

    net/mlx4

    net/mlx5

    net/netvsc

    net/nfp

    net/qede

    net/vdev_netvsc

)

%endif

%ifarch aarch64 x86_64

ENABLED_DRIVERS+=(

    net/e1000

    net/ixgbe

)

%endif

# Since upstream doesn't have a way

for driver in drivers/*/*/; do

    driver=${driver#drivers/}

    driver=${driver%/}

    [[ " ${ENABLED_DRIVERS[@]} " == *" $driver "* ]] || \

        disable_drivers="${disable_drivers:+$disable_drivers,}"$driver

done

#CFLAGS="$(echo %{optflags} | sed -e 's:-Wall::g' -e 's:-march=[[:alnum:]]* ::g') -Wformat -fPIC %{_hardening_ldflags}" \

%set_build_flags

%__meson --prefix=%{_builddir}/dpdk-build \

         --buildtype=plain \

         -Ddisable_drivers="$disable_drivers" \

         -Dmachine=default \

         -Dmax_ethports=128 \

         -Dmax_numa_nodes=8 \

         -Dtests=false \

         %{_vpath_builddir}

%meson_build

%__meson install -C %{_vpath_builddir} --no-rebuild

# FIXME currently with LTO enabled OVS tries to link with both static and shared libraries

rm -v %{_builddir}/dpdk-build/%{_lib}/*.so*

# Generate a list of supported drivers, its hard to tell otherwise.

cat << EOF > README.DPDK-PMDS

DPDK drivers included in this package:

EOF

for f in %{_builddir}/dpdk-build/%{_lib}/librte_net_*.a; do

    basename ${f} | cut -c12- | cut -d. -f1 | tr [:lower:] [:upper:]

done >> README.DPDK-PMDS

cat << EOF >> README.DPDK-PMDS

For further information about the drivers, see

http://dpdk.org/doc/guides-%{dpdksver}/nics/index.html

EOF

cd -

%endif    # build dpdk

# And now for OVS...

mkdir build-shared build-static

pushd build-shared

ln -s ../configure

%configure \

%if %{with libcapng}

        --enable-libcapng \

%else

        --disable-libcapng \

%endif

        --disable-static \

        --enable-shared \

        --enable-ssl \

        --with-pkidir=%{_sharedstatedir}/openvswitch/pki

make %{?_smp_mflags}

popd

pushd build-static

ln -s ../configure

%ifarch %{dpdkarches}

PKG_CONFIG_PATH=%{_builddir}/dpdk-build/%{_lib}/pkgconfig \

%endif

%configure \

%if %{with libcapng}

        --enable-libcapng \

%else

        --disable-libcapng \

%endif

        --enable-ssl \

%ifarch %{dpdkarches}

        --with-dpdk=static \

%endif

        --with-pkidir=%{_sharedstatedir}/openvswitch/pki

make %{?_smp_mflags}

popd

/usr/bin/python3 build-aux/dpdkstrip.py \

        --dpdk \

        < rhel/usr_lib_systemd_system_ovs-vswitchd.service.in \

        > rhel/usr_lib_systemd_system_ovs-vswitchd.service

%install

rm -rf $RPM_BUILD_ROOT

make -C build-shared install-libLTLIBRARIES DESTDIR=$RPM_BUILD_ROOT

make -C build-static install DESTDIR=$RPM_BUILD_ROOT

install -d -m 0755 $RPM_BUILD_ROOT%{_rundir}/openvswitch

install -d -m 0750 $RPM_BUILD_ROOT%{_localstatedir}/log/openvswitch

install -d -m 0755 $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch

install -p -D -m 0644 rhel/usr_lib_udev_rules.d_91-vfio.rules \

        $RPM_BUILD_ROOT%{_udevrulesdir}/91-vfio.rules

install -p -D -m 0644 \

        rhel/usr_share_openvswitch_scripts_systemd_sysconfig.template \

        $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/openvswitch

for service in openvswitch ovsdb-server ovs-vswitchd \

               ovs-delete-transient-ports; do

        install -p -D -m 0644 \

                        rhel/usr_lib_systemd_system_${service}.service \

                        $RPM_BUILD_ROOT%{_unitdir}/${service}.service

done

%if %{with ipsec}

install -p -D -m 0644 rhel/usr_lib_systemd_system_openvswitch-ipsec.service \

                      $RPM_BUILD_ROOT%{_unitdir}/openvswitch-ipsec.service

%endif

install -m 0755 rhel/etc_init.d_openvswitch \

        $RPM_BUILD_ROOT%{_datadir}/openvswitch/scripts/openvswitch.init

install -p -D -m 0644 rhel/etc_openvswitch_default.conf \

        $RPM_BUILD_ROOT/%{_sysconfdir}/openvswitch/default.conf

install -p -D -m 0644 rhel/etc_logrotate.d_openvswitch \

        $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d/openvswitch

install -m 0644 vswitchd/vswitch.ovsschema \

        $RPM_BUILD_ROOT/%{_datadir}/openvswitch/vswitch.ovsschema

install -d -m 0755 $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/network-scripts/

install -p -m 0755 rhel/etc_sysconfig_network-scripts_ifdown-ovs \

        $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/network-scripts/ifdown-ovs

install -p -m 0755 rhel/etc_sysconfig_network-scripts_ifup-ovs \

        $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/network-scripts/ifup-ovs

install -d -m 0755 $RPM_BUILD_ROOT%{python3_sitelib}

cp -a $RPM_BUILD_ROOT/%{_datadir}/openvswitch/python/ovstest \

        $RPM_BUILD_ROOT%{python3_sitelib}

# Build the JSON C extension for the Python lib (#1417738)

pushd python

(

export CPPFLAGS="-I ../include -I ../build-shared/include"

export LDFLAGS="%{__global_ldflags} -L $RPM_BUILD_ROOT%{_libdir}"

%py3_build

%py3_install

[ -f "$RPM_BUILD_ROOT/%{python3_sitearch}/ovs/_json$(python3-config --extension-suffix)" ]

)

popd

rm -rf $RPM_BUILD_ROOT/%{_datadir}/openvswitch/python/

install -d -m 0755 $RPM_BUILD_ROOT/%{_sharedstatedir}/openvswitch

install -d -m 0755 $RPM_BUILD_ROOT%{_prefix}/lib/firewalld/services/

install -p -D -m 0755 \

        rhel/usr_share_openvswitch_scripts_ovs-systemd-reload \

        $RPM_BUILD_ROOT%{_datadir}/openvswitch/scripts/ovs-systemd-reload

touch $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch/conf.db

# The db needs special permission as IPsec Pre-shared keys are stored in it.

chmod 0640 $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch/conf.db

touch $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch/system-id.conf

# remove unpackaged files

rm -f $RPM_BUILD_ROOT/%{_bindir}/ovs-benchmark \

        $RPM_BUILD_ROOT/%{_bindir}/ovs-docker \

        $RPM_BUILD_ROOT/%{_bindir}/ovs-parse-backtrace \

        $RPM_BUILD_ROOT/%{_bindir}/ovs-testcontroller \

        $RPM_BUILD_ROOT/%{_sbindir}/ovs-vlan-bug-workaround \

        $RPM_BUILD_ROOT/%{_mandir}/man1/ovs-benchmark.1* \

        $RPM_BUILD_ROOT/%{_mandir}/man8/ovs-testcontroller.* \

        $RPM_BUILD_ROOT/%{_mandir}/man8/ovs-vlan-bug-workaround.8*

%if ! %{with ipsec}

rm -f $RPM_BUILD_ROOT/%{_datadir}/openvswitch/scripts/ovs-monitor-ipsec

%endif

# remove ovn unpackages files

rm -f $RPM_BUILD_ROOT%{_bindir}/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man1/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man5/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man7/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man8/ovn*

rm -f $RPM_BUILD_ROOT%{_datadir}/openvswitch/ovn*

rm -f $RPM_BUILD_ROOT%{_datadir}/openvswitch/scripts/ovn*

rm -f $RPM_BUILD_ROOT%{_includedir}/ovn/*

%check

%if %{with check}

    pushd build-static

    touch resolv.conf

    export OVS_RESOLV_CONF=$(pwd)/resolv.conf

    if make check TESTSUITEFLAGS='%{_smp_mflags}' ||

       make check TESTSUITEFLAGS='--recheck'; then :;

    else

        cat tests/testsuite.log

        exit 1

    fi

    popd

%endif

%if %{with check_datapath_kernel}

    pushd build-static

    if make check-kernel RECHECK=yes; then :;

    else

        cat tests/system-kmod-testsuite.log

        exit 1

    fi

    popd

%endif

%clean

rm -rf $RPM_BUILD_ROOT

%preun

%if 0%{?systemd_preun:1}

    %systemd_preun openvswitch.service

%else

    if [ $1 -eq 0 ] ; then

    # Package removal, not upgrade

        /bin/systemctl --no-reload disable openvswitch.service >/dev/null 2>&1 || :

        /bin/systemctl stop openvswitch.service >/dev/null 2>&1 || :

    fi

%endif

%pre

getent group openvswitch >/dev/null || groupadd -r openvswitch

getent passwd openvswitch >/dev/null || \

    useradd -r -g openvswitch -d / -s /sbin/nologin \

    -c "Open vSwitch Daemons" openvswitch

%ifarch %{dpdkarches}

    getent group hugetlbfs >/dev/null || groupadd hugetlbfs

    usermod -a -G hugetlbfs openvswitch

%endif

exit 0

%post

if [ $1 -eq 1 ]; then

    sed -i 's:^#OVS_USER_ID=:OVS_USER_ID=:' /etc/sysconfig/openvswitch

%ifarch %{dpdkarches}

    sed -i \

        's@OVS_USER_ID="openvswitch:openvswitch"@OVS_USER_ID="openvswitch:hugetlbfs"@'\

        /etc/sysconfig/openvswitch

%endif

fi

chown -R openvswitch:openvswitch /etc/openvswitch

%if 0%{?systemd_post:1}

    %systemd_post openvswitch.service

%else

    # Package install, not upgrade

    if [ $1 -eq 1 ]; then

        /bin/systemctl daemon-reload >dev/null || :

    fi

%endif

%postun

%if 0%{?systemd_postun:1}

    %systemd_postun openvswitch.service

%else

    /bin/systemctl daemon-reload >/dev/null 2>&1 || :

%endif

%triggerun -- openvswitch < 2.5.0-22.git20160727%{?dist}

# old rpm versions restart the service in postun, but

# due to systemd some preparation is needed.

if systemctl is-active openvswitch >/dev/null 2>&1 ; then

    /usr/share/openvswitch/scripts/ovs-ctl stop >/dev/null 2>&1 || :

    systemctl daemon-reload >/dev/null 2>&1 || :

    systemctl stop openvswitch ovsdb-server ovs-vswitchd >/dev/null 2>&1 || :

    systemctl start openvswitch >/dev/null 2>&1 || :

fi

exit 0

%files -n python3-%{pkgname}

%{python3_sitearch}/ovs

%{python3_sitearch}/ovs-*.egg-info

%doc LICENSE

%files test

%{_bindir}/ovs-pcap

%{_bindir}/ovs-tcpdump

%{_bindir}/ovs-tcpundump

%{_mandir}/man1/ovs-pcap.1*

%{_mandir}/man8/ovs-tcpdump.8*

%{_mandir}/man1/ovs-tcpundump.1*

%{_bindir}/ovs-test

%{_bindir}/ovs-vlan-test

%{_bindir}/ovs-l3ping

%{_mandir}/man8/ovs-test.8*

%{_mandir}/man8/ovs-vlan-test.8*

%{_mandir}/man8/ovs-l3ping.8*

%{python3_sitelib}/ovstest

%files devel

%{_libdir}/*.so

%{_libdir}/pkgconfig/*.pc

%{_includedir}/openvswitch/*

%{_includedir}/openflow/*

%exclude %{_libdir}/*.a

%exclude %{_libdir}/*.la

%if 0%{?rhel} > 7 || 0%{?fedora} > 28

%files -n network-scripts-%{name}

%{_sysconfdir}/sysconfig/network-scripts/ifup-ovs

%{_sysconfdir}/sysconfig/network-scripts/ifdown-ovs

%endif

%files

%defattr(-,openvswitch,openvswitch)

%dir %{_sysconfdir}/openvswitch

%{_sysconfdir}/openvswitch/default.conf

%config %ghost %verify(not owner group md5 size mtime) %{_sysconfdir}/openvswitch/conf.db

%ghost %attr(0600,-,-) %verify(not owner group md5 size mtime) %{_sysconfdir}/openvswitch/.conf.db.~lock~

%config %ghost %{_sysconfdir}/openvswitch/system-id.conf

%defattr(-,root,root)

%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/sysconfig/openvswitch

%{_sysconfdir}/bash_completion.d/ovs-appctl-bashcomp.bash

%{_sysconfdir}/bash_completion.d/ovs-vsctl-bashcomp.bash

%config(noreplace) %{_sysconfdir}/logrotate.d/openvswitch

%{_unitdir}/openvswitch.service

%{_unitdir}/ovsdb-server.service

%{_unitdir}/ovs-vswitchd.service

%{_unitdir}/ovs-delete-transient-ports.service

%{_datadir}/openvswitch/scripts/openvswitch.init

%{_datadir}/openvswitch/scripts/ovs-check-dead-ifs

%{_datadir}/openvswitch/scripts/ovs-lib

%{_datadir}/openvswitch/scripts/ovs-save

%{_datadir}/openvswitch/scripts/ovs-vtep

%{_datadir}/openvswitch/scripts/ovs-ctl

%{_datadir}/openvswitch/scripts/ovs-kmod-ctl

%{_datadir}/openvswitch/scripts/ovs-systemd-reload

%config %{_datadir}/openvswitch/vswitch.ovsschema

%config %{_datadir}/openvswitch/vtep.ovsschema

%{_bindir}/ovs-appctl

%{_bindir}/ovs-dpctl

%{_bindir}/ovs-ofctl

%{_bindir}/ovs-vsctl

%{_bindir}/ovsdb-client

%{_bindir}/ovsdb-tool

%{_bindir}/ovs-pki

%{_bindir}/vtep-ctl

%{_libdir}/*.so.*

%{_sbindir}/ovs-vswitchd

%{_sbindir}/ovsdb-server

%{_mandir}/man1/ovsdb-client.1*

%{_mandir}/man1/ovsdb-server.1*

%{_mandir}/man1/ovsdb-tool.1*

%{_mandir}/man5/ovsdb.5*

%{_mandir}/man5/ovsdb-server.5.*

%{_mandir}/man5/ovs-vswitchd.conf.db.5*

%{_mandir}/man5/vtep.5*

%{_mandir}/man7/ovsdb-server.7*

%{_mandir}/man7/ovsdb.7*

%{_mandir}/man7/ovs-actions.7*

%{_mandir}/man7/ovs-fields.7*

%{_mandir}/man8/vtep-ctl.8*

%{_mandir}/man8/ovs-appctl.8*

%{_mandir}/man8/ovs-ctl.8*

%{_mandir}/man8/ovs-dpctl.8*

%{_mandir}/man8/ovs-kmod-ctl.8.*

%{_mandir}/man8/ovs-ofctl.8*

%{_mandir}/man8/ovs-pki.8*

%{_mandir}/man8/ovs-vsctl.8*

%{_mandir}/man8/ovs-vswitchd.8*

%{_mandir}/man8/ovs-parse-backtrace.8*

%{_udevrulesdir}/91-vfio.rules

%doc LICENSE NOTICE README.rst NEWS rhel/README.RHEL.rst

%ifarch %{dpdkarches}

%doc %{dpdkdir}/README.DPDK-PMDS

%attr(750,openvswitch,hugetlbfs) %verify(not owner group) /var/log/openvswitch

%else

%attr(750,openvswitch,openvswitch) %verify(not owner group) /var/log/openvswitch

%endif

/var/lib/openvswitch

%ghost %attr(755,root,root) %verify(not owner group) %{_rundir}/openvswitch

%{_datadir}/openvswitch/bugtool-plugins/

%{_datadir}/openvswitch/scripts/ovs-bugtool-*

%{_bindir}/ovs-dpctl-top

%{_sbindir}/ovs-bugtool

%{_mandir}/man8/ovs-dpctl-top.8*

%{_mandir}/man8/ovs-bugtool.8*

%if (0%{?rhel} && 0%{?rhel} <= 7) || (0%{?fedora} && 0%{?fedora} < 29)

%{_sysconfdir}/sysconfig/network-scripts/ifup-ovs

%{_sysconfdir}/sysconfig/network-scripts/ifdown-ovs

%endif

%if %{with ipsec}

%files ipsec

%{_datadir}/openvswitch/scripts/ovs-monitor-ipsec

%{_unitdir}/openvswitch-ipsec.service

%endif

%changelog

* Mon Jan 17 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-57

- Merging upstream branch-2.15 [RH git: 228a38c3dc]

    Commit list:

    a7dc6af0fc ofproto-dpif: Fix memory leak in dpif/show-dp-features appctl.

* Sat Dec 18 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-56

- Merging upstream branch-2.15 [RH git: 9504acc03d]

    Commit list:

    31288dc725 Prepare for 2.15.4.

    e4d2df62e6 Set release date for 2.15.3.

    b8baa11416 python: Add cooperative_yield() API method to Idl.

    7834abc669 ofproto-dpif-xlate: Snoop ingress packets and update neigh cache if needed.

    833c02daab tnl-neigh-cache: Do not refresh the entry while revalidating.

    e2182eca88 tnl-neigh-cache: Include expected array sizes in prototypes.

    566fe43721 tnl-neigh-cache: Read/write expires atomically.

* Thu Dec 09 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-55

- Merging upstream branch-2.15 [RH git: a1abf356d3]

    Commit list:

    d477f60008 compat: handle NF_REPEAT error on nf_conntrack_in.

* Mon Dec 06 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-54

- Merging upstream branch-2.15 [RH git: d4f13fd840]

    Commit list:

    0590e88387 flow: Consider dataofs when parsing TCP packets.

    7266042d84 tests/flowgen: Fix packet data endianness.

    d2e0632dbe ofproto: Fix resource usage explosion due to removal of large number of flows.

    0a7e66e37f ofproto: Fix resource usage explosion while processing bundled FLOW_MOD.

    68466efed9 tests/flowgen: Fix length field of 802.2 data link header.

    2a2185f9e6 ovs-lib: Backup and remove existing DB when joining cluster.

    fcbc29c6f0 docs/dpdk: Fix install doc.

    a5d97d4202 ovs-save: Save igmp flows in ofp_parse syntax.

    1cbd1f0f56 faq: Update OVS/DPDK version table for OVS 2.13/2.14.

* Thu Nov 18 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-53

- Merging upstream branch-2.15 [RH git: 9221a2233d]

    Commit list:

    01bc910e57 ofproto-dpif-xlate: Fix check_pkt_larger incomplete translation.

* Mon Nov 15 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-52

- Merging upstream branch-2.15 [RH git: 001ae577c6]

    Commit list:

    08a270dda1 datapath-windows: Reset flow key after Ipv4 fragments are reassembled

* Thu Oct 28 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-51

- Merging upstream branch-2.15 [RH git: a134a530c9]

    Commit list:

    eca2d50d40 datapath-windows:Reset PseudoChecksum value only for TX direction offload case

* Wed Oct 27 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-50

- Merging upstream branch-2.15 [RH git: 16dad85706]

    Commit list:

    031cf67e09 netdev-offload-tc: Verify the flower rule installed.

* Wed Oct 27 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-49

- Merging upstream branch-2.15 [RH git: 2502ca29b0]

    Commit list:

    952e851506 ci: Make linux-prepare trust system installs.

* Mon Oct 25 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-48

- Merging upstream branch-2.15 [RH git: 7cf784736e]

    Commit list:

    2cf63851a5 Prepare for 2.15.3.

    63f9a7c5d8 Set release date for 2.15.2.

* Tue Oct 19 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-47

- Merging upstream branch-2.15 [RH git: 01110b9088]

    Commit list:

    b7d9c491ec datapath-windows: add layers when adding the deferred actions

* Thu Oct 14 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-46

- Merging upstream branch-2.15 [RH git: f8619036c9]

    Commit list:

    3f718857e7 ofproto-dpif-xlate: Fix zone set from non-frozen-metadata fields.

* Wed Oct 13 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-45

- Merging upstream branch-2.15 [RH git: e273e307d1]

    Commit list:

    ea2ca0af16 dpif-netdev: Fix use-after-free on PACKET_OUT of IP fragments.

    9f964354e3 tunnel-push-pop.at: Mask source port in tunnel header.

* Tue Oct 12 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-44

- Merging upstream branch-2.15 [RH git: 3050e5222d]

    Commit list:

    58397f222b dpdk-stub: Change the ERR log to DBG.

    2a963fc314 python: idl: Avoid sending transactions when the DB is not synced up.

* Tue Oct 12 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-43

- Merging upstream branch-2.15 [RH git: 09e3ab3630]

    Commit list:

    9efa2ea619 ipf: release unhandled packets from the batch

* Thu Sep 30 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-42

- Merging upstream branch-2.15 [RH git: 2a86017f3f]

    Commit list:

    f8274b78c3 datapath-windows:adjust Offset when processing packet in POP_VLAN action

* Mon Sep 27 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-41

- Merging upstream branch-2.15 [RH git: 8f2e30f011]

    Commit list:

    a2f860aa2e cirrus: Reduce memory requirements for FreeBSD VMs.

* Thu Sep 23 2021 Timothy Redaelli <tredaelli@redhat.com> - 2.15.0-40

- redhat: use hugetlbfs group for /var/log/openvswitch when dpdk is enabled [RH git: 5ccf239b51] (#2007290)

    Resolves: #2007290

* Thu Sep 16 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-39

- Merging upstream branch-2.15 [RH git: c6bdfa8cc1]

    Commit list:

    7788f15798 netdev-linux: Fix a null pointer dereference in netdev_linux_notify_sock().

    dd32deba6e pcap-file: Fix memory leak in ovs_pcap_open().

    9f2f66c8ea odp-util: Fix a null pointer dereference in odp_flow_format().

    02b0c265c4 odp-util: Fix a null pointer dereference in odp_nsh_key_from_attr__().

    031eff4563 netdev-dpdk: Fix RSS configuration for virtio.

    09cd9570d2 ipf: Fix only nat the first fragment in the reass process.

* Wed Sep 15 2021 Timothy Redaelli <tredaelli@redhat.com> - 2.15.0-38

- ofproto-dpif-xlate: Avoid successive ct_clear datapath actions. [RH git: f9a9ac7608] (#1941027)

    Due to flow lookup optimizations, especially in the resubmit/clone cases,

    we might end up with multiple ct_clear actions, which are not necessary.

    This patch only adds the ct_clear action to the datapath if any ct state

    is tracked.

    Resolves: #1941027

    Signed-off-by: Eelco Chaudron <echaudro@redhat.com>

    Acked-by: Timothy Redaelli <tredaelli@redhat.com>

    Signed-off-by: Ilya Maximets <i.maximets@ovn.org>

    (cherry picked from commit 355fef6f2ccbcf78797b938421cb4cef9b59af13)

* Wed Sep 08 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-37

- Merging upstream branch-2.15 [RH git: b36eb7e529]

    Commit list:

    ef8ca3e190 dpif-netdev: Fix crash when PACKET_OUT is metered.

* Tue Aug 17 2021 Michael Santana <msantana@redhat.com> - 2.15.0-36

- Migrate openvswitch to gitlab [RH git: 93147e2cda]

    Signed-off-by: Michael Santana <msantana@redhat.com>

* Mon Aug 16 2021 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-35

- Merging upstream branch-2.15 [RH git: 11bcf52d03]

    Commit list:

    d3ff41d609 tc: Set action flags for tunnel_key release.

    079a4de723 netlink-socket: Replace error with txn->error when logging nacked transactions.

    f8cc5aa35c dynamic-string: Fix a crash in ds_clone().

* Mon Aug 16 2021 Michael Santana <msantana@redhat.com> - 2.15.0-34

- pkgtool: Swap bugzilla id and RH git [RH git: c2e6243d60]

    Having the bugzilla ID not at the end of the line breakes another script

    that parses for said ID. This patch fixes that by putting the ID next to

    the new line

    Fixes: f6b2db4dd33e ("Make changelog in spec file more informative")