# Copyright (C) 2009, 2010, 2013, 2014 Nicira Networks, Inc.

#

# Copying and distribution of this file, with or without modification,

# are permitted in any medium without royalty provided the copyright

# notice and this notice are preserved.  This file is offered as-is,

# without warranty of any kind.

#

# If tests have to be skipped while building, specify the '--without check'

# option. For example:

# rpmbuild -bb --without check rhel/openvswitch-fedora.spec

# This defines the base package name's version.

%define pkgname openvswitch2.15

%if 0%{?commit:1}

%global shortcommit %(c=%{commit}; echo ${c:0:7})

%endif

# Enable PIE, bz#955181

%global _hardened_build 1

# RHEL-7 doesn't define _rundir macro yet

# Fedora 15 onwards uses /run as _rundir

%if 0%{!?_rundir:1}

%define _rundir /run

%endif

# FIXME Test "STP - flush the fdb and mdb when topology changed" fails on s390x

# FIXME 2 tests fails on ppc64le. They will be hopefully fixed before official 2.11

%ifarch %{ix86} x86_64 aarch64

%bcond_without check

%else

%bcond_with check

%endif

# option to run kernel datapath tests, requires building as root!

%bcond_with check_datapath_kernel

# option to build with libcap-ng, needed for running OVS as regular user

%bcond_without libcapng

# option to build with ipsec support

%bcond_without ipsec

# Build python2 (that provides python) and python3 subpackages on Fedora

# Build only python3 (that provides python) subpackage on RHEL8

# Build only python subpackage on RHEL7

%if 0%{?rhel} > 7 || 0%{?fedora}

# On RHEL8 Sphinx is included in buildroot

%global external_sphinx 1

%else

# Don't use external sphinx (RHV doesn't have optional repositories enabled)

%global external_sphinx 0

%endif

Name: %{pkgname}

Summary: Open vSwitch

Group: System Environment/Daemons daemon/database/utilities

URL: http://www.openvswitch.org/

Version: 2.15.0

Release: 100%{?dist}

# Nearly all of openvswitch is ASL 2.0.  The bugtool is LGPLv2+, and the

# lib/sflow*.[ch] files are SISSL

# datapath/ is GPLv2 (although not built into any of the binary packages)

License: ASL 2.0 and LGPLv2+ and SISSL

%define dpdkver 20.11

%define dpdkdir dpdk

%define dpdksver %(echo %{dpdkver} | cut -d. -f-2)

# NOTE: DPDK does not currently build for s390x

# DPDK on aarch64 is not stable enough to be enabled in FDP

%if 0%{?rhel} > 7 || 0%{?fedora}

%define dpdkarches x86_64 ppc64le

%else

%define dpdkarches

%endif

%if 0%{?commit:1}

Source: https://github.com/openvswitch/ovs/archive/%{commit}.tar.gz#/openvswitch-%{commit}.tar.gz

%else

Source: https://github.com/openvswitch/ovs/archive/v%{version}.tar.gz#/openvswitch-%{version}.tar.gz

%endif

Source10: https://fast.dpdk.org/rel/dpdk-%{dpdkver}.tar.xz

%define docutilsver 0.12

%define pygmentsver 1.4

%define sphinxver   1.2.3

Source100: https://pypi.io/packages/source/d/docutils/docutils-%{docutilsver}.tar.gz

Source101: https://pypi.io/packages/source/P/Pygments/Pygments-%{pygmentsver}.tar.gz

Source102: https://pypi.io/packages/source/S/Sphinx/Sphinx-%{sphinxver}.tar.gz

Patch:     openvswitch-%{version}.patch

# The DPDK is designed to optimize througput of network traffic using, among

# other techniques, carefully crafted assembly instructions.  As such it

# needs extensive work to port it to other architectures.

ExclusiveArch: x86_64 aarch64 ppc64le s390x

# Do not enable this otherwise YUM will break on any upgrade.

# Provides: openvswitch

Conflicts: openvswitch < 2.15

Conflicts: openvswitch-dpdk < 2.15

Conflicts: openvswitch2.10

Conflicts: openvswitch2.11

Conflicts: openvswitch2.12

Conflicts: openvswitch2.13

Conflicts: openvswitch2.14

# FIXME Sphinx is used to generate some manpages, unfortunately, on RHEL, it's

# in the -optional repository and so we can't require it directly since RHV

# doesn't have the -optional repository enabled and so TPS fails

%if %{external_sphinx}

BuildRequires: python3-sphinx

%else

# Sphinx dependencies

BuildRequires: python-devel

BuildRequires: python-setuptools

#BuildRequires: python2-docutils

BuildRequires: python-jinja2

BuildRequires: python-nose

#BuildRequires: python2-pygments

# docutils dependencies

BuildRequires: python-imaging

# pygments dependencies

BuildRequires: python-nose

%endif

BuildRequires: gcc gcc-c++ make

BuildRequires: autoconf automake libtool

BuildRequires: systemd-units openssl openssl-devel

BuildRequires: python3-devel python3-setuptools

BuildRequires: desktop-file-utils

BuildRequires: groff-base graphviz

BuildRequires: unbound-devel

BuildRequires: systemtap-sdt-devel

# make check dependencies

BuildRequires: procps-ng

%if 0%{?rhel} > 7 || 0%{?fedora}

BuildRequires: python3-pyOpenSSL

%endif

%if %{with check_datapath_kernel}

BuildRequires: nmap-ncat

# would be useful but not available in RHEL or EPEL

#BuildRequires: pyftpdlib

%endif

%if %{with libcapng}

BuildRequires: libcap-ng libcap-ng-devel

%endif

%ifarch %{dpdkarches}

BuildRequires: meson

# DPDK driver dependencies

BuildRequires: zlib-devel numactl-devel

%ifarch x86_64

BuildRequires: rdma-core-devel >= 15 libmnl-devel

%endif

# Required by packaging policy for the bundled DPDK

Provides: bundled(dpdk) = %{dpdkver}

%endif

Requires: openssl iproute module-init-tools

#Upstream kernel commit 4f647e0a3c37b8d5086214128614a136064110c3

#Requires: kernel >= 3.15.0-0

Requires: openvswitch-selinux-extra-policy

Requires(pre): shadow-utils

Requires(post): /bin/sed

Requires(post): /usr/sbin/usermod

Requires(post): /usr/sbin/groupadd

Requires(post): systemd-units

Requires(preun): systemd-units

Requires(postun): systemd-units

Obsoletes: openvswitch-controller <= 0:2.1.0-1

%description

Open vSwitch provides standard network bridging functions and

support for the OpenFlow protocol for remote per-flow control of

traffic.

%package -n python3-%{pkgname}

Summary: Open vSwitch python3 bindings

License: ASL 2.0

Requires: %{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

Provides: python-%{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

%description -n python3-%{pkgname}

Python bindings for the Open vSwitch database

%package test

Summary: Open vSwitch testing utilities

License: ASL 2.0

BuildArch: noarch

Requires: python3-%{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

Requires: tcpdump

%description test

Utilities that are useful to diagnose performance and connectivity

issues in Open vSwitch setup.

%package devel

Summary: Open vSwitch OpenFlow development package (library, headers)

License: ASL 2.0

Requires: %{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

%description devel

This provides shared library, libopenswitch.so and the openvswitch header

files needed to build an external application.

%if 0%{?rhel} > 7 || 0%{?fedora} > 28

%package -n network-scripts-%{name}

Summary: Open vSwitch legacy network service support

License: ASL 2.0

Requires: network-scripts

Supplements: (%{name} and network-scripts)

%description -n network-scripts-%{name}

This provides the ifup and ifdown scripts for use with the legacy network

service.

%endif

%if %{with ipsec}

%package ipsec

Summary: Open vSwitch IPsec tunneling support

License: ASL 2.0

Requires: python3-%{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

Requires: libreswan

%description ipsec

This package provides IPsec tunneling support for OVS tunnels.

%endif

%prep

%if 0%{?commit:1}

%setup -q -n ovs-%{commit} -a 10

%else

%setup -q -n ovs-%{version} -a 10

%endif

%if ! %{external_sphinx}

%if 0%{?commit:1}

%setup -n ovs-%{commit} -q -D -T -a 100 -a 101 -a 102

%else

%setup -n ovs-%{version} -q -D -T -a 100 -a 101 -a 102

%endif

%endif

mv dpdk-*/ %{dpdkdir}/

# FIXME should we propose a way to do that upstream?

sed -ri "/^subdir\('(usertools|app)'\)/d" %{dpdkdir}/meson.build

%patch -p1

%build

# Build Sphinx on RHEL

%if ! %{external_sphinx}

export PYTHONPATH="${PYTHONPATH:+$PYTHONPATH:}%{_builddir}/pytmp/lib/python"

for x in docutils-%{docutilsver} Pygments-%{pygmentsver} Sphinx-%{sphinxver}; do

    pushd "$x"

    python2 setup.py install --home %{_builddir}/pytmp

    popd

done

export PATH="$PATH:%{_builddir}/pytmp/bin"

%endif

./boot.sh

%ifarch %{dpdkarches}    # build dpdk

# Lets build DPDK first

cd %{dpdkdir}

ENABLED_DRIVERS=(

    bus/pci

    bus/vdev

    mempool/ring

    net/failsafe

    net/i40e

    net/ring

    net/vhost

    net/virtio

    net/tap

)

%ifarch x86_64

ENABLED_DRIVERS+=(

    bus/vmbus

    common/iavf

    common/mlx5

    net/bnxt

    net/enic

    net/iavf

    net/ice

    net/mlx4

    net/mlx5

    net/netvsc

    net/nfp

    net/qede

    net/vdev_netvsc

)

%endif

%ifarch aarch64 x86_64

ENABLED_DRIVERS+=(

    net/e1000

    net/ixgbe

)

%endif

# Since upstream doesn't have a way

for driver in drivers/*/*/; do

    driver=${driver#drivers/}

    driver=${driver%/}

    [[ " ${ENABLED_DRIVERS[@]} " == *" $driver "* ]] || \

        disable_drivers="${disable_drivers:+$disable_drivers,}"$driver

done

#CFLAGS="$(echo %{optflags} | sed -e 's:-Wall::g' -e 's:-march=[[:alnum:]]* ::g') -Wformat -fPIC %{_hardening_ldflags}" \

%set_build_flags

%__meson --prefix=%{_builddir}/dpdk-build \

         --buildtype=plain \

         -Ddisable_drivers="$disable_drivers" \

         -Dmachine=default \

         -Dmax_ethports=1024 \

         -Dmax_numa_nodes=8 \

         -Dtests=false \

         %{_vpath_builddir}

%meson_build

%__meson install -C %{_vpath_builddir} --no-rebuild

# FIXME currently with LTO enabled OVS tries to link with both static and shared libraries

rm -v %{_builddir}/dpdk-build/%{_lib}/*.so*

# Generate a list of supported drivers, its hard to tell otherwise.

cat << EOF > README.DPDK-PMDS

DPDK drivers included in this package:

EOF

for f in %{_builddir}/dpdk-build/%{_lib}/librte_net_*.a; do

    basename ${f} | cut -c12- | cut -d. -f1 | tr [:lower:] [:upper:]

done >> README.DPDK-PMDS

cat << EOF >> README.DPDK-PMDS

For further information about the drivers, see

http://dpdk.org/doc/guides-%{dpdksver}/nics/index.html

EOF

cd -

%endif    # build dpdk

# And now for OVS...

mkdir build-shared build-static

pushd build-shared

ln -s ../configure

%configure \

%if %{with libcapng}

        --enable-libcapng \

%else

        --disable-libcapng \

%endif

        --disable-static \

        --enable-shared \

        --enable-ssl \

        --with-pkidir=%{_sharedstatedir}/openvswitch/pki \

        --enable-usdt-probes

make %{?_smp_mflags}

popd

pushd build-static

ln -s ../configure

%ifarch %{dpdkarches}

PKG_CONFIG_PATH=%{_builddir}/dpdk-build/%{_lib}/pkgconfig \

%endif

%configure \

%if %{with libcapng}

        --enable-libcapng \

%else

        --disable-libcapng \

%endif

        --enable-ssl \

%ifarch %{dpdkarches}

        --with-dpdk=static \

%endif

        --with-pkidir=%{_sharedstatedir}/openvswitch/pki \

        --enable-usdt-probes

make %{?_smp_mflags}

popd

/usr/bin/python3 build-aux/dpdkstrip.py \

        --dpdk \

        < rhel/usr_lib_systemd_system_ovs-vswitchd.service.in \

        > rhel/usr_lib_systemd_system_ovs-vswitchd.service

%install

rm -rf $RPM_BUILD_ROOT

make -C build-shared install-libLTLIBRARIES DESTDIR=$RPM_BUILD_ROOT

make -C build-static install DESTDIR=$RPM_BUILD_ROOT

install -d -m 0755 $RPM_BUILD_ROOT%{_rundir}/openvswitch

install -d -m 0750 $RPM_BUILD_ROOT%{_localstatedir}/log/openvswitch

install -d -m 0755 $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch

install -p -D -m 0644 rhel/usr_lib_udev_rules.d_91-vfio.rules \

        $RPM_BUILD_ROOT%{_udevrulesdir}/91-vfio.rules

install -p -D -m 0644 \

        rhel/usr_share_openvswitch_scripts_systemd_sysconfig.template \

        $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/openvswitch

for service in openvswitch ovsdb-server ovs-vswitchd \

               ovs-delete-transient-ports; do

        install -p -D -m 0644 \

                        rhel/usr_lib_systemd_system_${service}.service \

                        $RPM_BUILD_ROOT%{_unitdir}/${service}.service

done

%if %{with ipsec}

install -p -D -m 0644 rhel/usr_lib_systemd_system_openvswitch-ipsec.service \

                      $RPM_BUILD_ROOT%{_unitdir}/openvswitch-ipsec.service

%endif

install -m 0755 rhel/etc_init.d_openvswitch \

        $RPM_BUILD_ROOT%{_datadir}/openvswitch/scripts/openvswitch.init

install -p -D -m 0644 rhel/etc_openvswitch_default.conf \

        $RPM_BUILD_ROOT/%{_sysconfdir}/openvswitch/default.conf

install -p -D -m 0644 rhel/etc_logrotate.d_openvswitch \

        $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d/openvswitch

install -m 0644 vswitchd/vswitch.ovsschema \

        $RPM_BUILD_ROOT/%{_datadir}/openvswitch/vswitch.ovsschema

install -d -m 0755 $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/network-scripts/

install -p -m 0755 rhel/etc_sysconfig_network-scripts_ifdown-ovs \

        $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/network-scripts/ifdown-ovs

install -p -m 0755 rhel/etc_sysconfig_network-scripts_ifup-ovs \

        $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/network-scripts/ifup-ovs

install -d -m 0755 $RPM_BUILD_ROOT%{python3_sitelib}

cp -a $RPM_BUILD_ROOT/%{_datadir}/openvswitch/python/ovstest \

        $RPM_BUILD_ROOT%{python3_sitelib}

# Build the JSON C extension for the Python lib (#1417738)

pushd python

(

export CPPFLAGS="-I ../include -I ../build-shared/include"

export LDFLAGS="%{__global_ldflags} -L $RPM_BUILD_ROOT%{_libdir}"

%py3_build

%py3_install

[ -f "$RPM_BUILD_ROOT/%{python3_sitearch}/ovs/_json$(python3-config --extension-suffix)" ]

)

popd

rm -rf $RPM_BUILD_ROOT/%{_datadir}/openvswitch/python/

install -d -m 0755 $RPM_BUILD_ROOT/%{_sharedstatedir}/openvswitch

install -d -m 0755 $RPM_BUILD_ROOT%{_prefix}/lib/firewalld/services/

install -p -D -m 0755 \

        rhel/usr_share_openvswitch_scripts_ovs-systemd-reload \

        $RPM_BUILD_ROOT%{_datadir}/openvswitch/scripts/ovs-systemd-reload

touch $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch/conf.db

# The db needs special permission as IPsec Pre-shared keys are stored in it.

chmod 0640 $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch/conf.db

touch $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch/system-id.conf

# remove unpackaged files

rm -f $RPM_BUILD_ROOT/%{_bindir}/ovs-benchmark \

        $RPM_BUILD_ROOT/%{_bindir}/ovs-docker \

        $RPM_BUILD_ROOT/%{_bindir}/ovs-parse-backtrace \

        $RPM_BUILD_ROOT/%{_bindir}/ovs-testcontroller \

        $RPM_BUILD_ROOT/%{_sbindir}/ovs-vlan-bug-workaround \

        $RPM_BUILD_ROOT/%{_mandir}/man1/ovs-benchmark.1* \

        $RPM_BUILD_ROOT/%{_mandir}/man8/ovs-testcontroller.* \

        $RPM_BUILD_ROOT/%{_mandir}/man8/ovs-vlan-bug-workaround.8*

%if ! %{with ipsec}

rm -f $RPM_BUILD_ROOT/%{_datadir}/openvswitch/scripts/ovs-monitor-ipsec

%endif

# remove ovn unpackages files

rm -f $RPM_BUILD_ROOT%{_bindir}/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man1/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man5/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man7/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man8/ovn*

rm -f $RPM_BUILD_ROOT%{_datadir}/openvswitch/ovn*

rm -f $RPM_BUILD_ROOT%{_datadir}/openvswitch/scripts/ovn*

rm -f $RPM_BUILD_ROOT%{_includedir}/ovn/*

%check

%if %{with check}

    pushd build-static

    touch resolv.conf

    export OVS_RESOLV_CONF=$(pwd)/resolv.conf

    if make check TESTSUITEFLAGS='%{_smp_mflags}' ||

       make check TESTSUITEFLAGS='--recheck'; then :;

    else

        cat tests/testsuite.log

        exit 1

    fi

    popd

%endif

%if %{with check_datapath_kernel}

    pushd build-static

    if make check-kernel RECHECK=yes; then :;

    else

        cat tests/system-kmod-testsuite.log

        exit 1

    fi

    popd

%endif

%clean

rm -rf $RPM_BUILD_ROOT

%preun

%if 0%{?systemd_preun:1}

    %systemd_preun openvswitch.service

%else

    if [ $1 -eq 0 ] ; then

    # Package removal, not upgrade

        /bin/systemctl --no-reload disable openvswitch.service >/dev/null 2>&1 || :

        /bin/systemctl stop openvswitch.service >/dev/null 2>&1 || :

    fi

%endif

%pre

getent group openvswitch >/dev/null || groupadd -r openvswitch

getent passwd openvswitch >/dev/null || \

    useradd -r -g openvswitch -d / -s /sbin/nologin \

    -c "Open vSwitch Daemons" openvswitch

%ifarch %{dpdkarches}

    getent group hugetlbfs >/dev/null || groupadd hugetlbfs

    usermod -a -G hugetlbfs openvswitch

%endif

exit 0

%post

if [ $1 -eq 1 ]; then

    sed -i 's:^#OVS_USER_ID=:OVS_USER_ID=:' /etc/sysconfig/openvswitch

%ifarch %{dpdkarches}

    sed -i \

        's@OVS_USER_ID="openvswitch:openvswitch"@OVS_USER_ID="openvswitch:hugetlbfs"@'\

        /etc/sysconfig/openvswitch

%endif

fi

chown -R openvswitch:openvswitch /etc/openvswitch

%if 0%{?systemd_post:1}

    %systemd_post openvswitch.service

%else

    # Package install, not upgrade

    if [ $1 -eq 1 ]; then

        /bin/systemctl daemon-reload >dev/null || :

    fi

%endif

%postun

%if 0%{?systemd_postun:1}

    %systemd_postun openvswitch.service

%else

    /bin/systemctl daemon-reload >/dev/null 2>&1 || :

%endif

%triggerun -- openvswitch < 2.5.0-22.git20160727%{?dist}

# old rpm versions restart the service in postun, but

# due to systemd some preparation is needed.

if systemctl is-active openvswitch >/dev/null 2>&1 ; then

    /usr/share/openvswitch/scripts/ovs-ctl stop >/dev/null 2>&1 || :

    systemctl daemon-reload >/dev/null 2>&1 || :

    systemctl stop openvswitch ovsdb-server ovs-vswitchd >/dev/null 2>&1 || :

    systemctl start openvswitch >/dev/null 2>&1 || :

fi

exit 0

%files -n python3-%{pkgname}

%{python3_sitearch}/ovs

%{python3_sitearch}/ovs-*.egg-info

%doc LICENSE

%files test

%{_bindir}/ovs-pcap

%{_bindir}/ovs-tcpdump

%{_bindir}/ovs-tcpundump

%{_mandir}/man1/ovs-pcap.1*

%{_mandir}/man8/ovs-tcpdump.8*

%{_mandir}/man1/ovs-tcpundump.1*

%{_bindir}/ovs-test

%{_bindir}/ovs-vlan-test

%{_bindir}/ovs-l3ping

%{_mandir}/man8/ovs-test.8*

%{_mandir}/man8/ovs-vlan-test.8*

%{_mandir}/man8/ovs-l3ping.8*

%{python3_sitelib}/ovstest

%files devel

%{_libdir}/*.so

%{_libdir}/pkgconfig/*.pc

%{_includedir}/openvswitch/*

%{_includedir}/openflow/*

%exclude %{_libdir}/*.a

%exclude %{_libdir}/*.la

%if 0%{?rhel} > 7 || 0%{?fedora} > 28

%files -n network-scripts-%{name}

%{_sysconfdir}/sysconfig/network-scripts/ifup-ovs

%{_sysconfdir}/sysconfig/network-scripts/ifdown-ovs

%endif

%files

%defattr(-,openvswitch,openvswitch)

%dir %{_sysconfdir}/openvswitch

%{_sysconfdir}/openvswitch/default.conf

%config %ghost %verify(not owner group md5 size mtime) %{_sysconfdir}/openvswitch/conf.db

%ghost %attr(0600,-,-) %verify(not owner group md5 size mtime) %{_sysconfdir}/openvswitch/.conf.db.~lock~

%config %ghost %{_sysconfdir}/openvswitch/system-id.conf

%defattr(-,root,root)

%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/sysconfig/openvswitch

%{_sysconfdir}/bash_completion.d/ovs-appctl-bashcomp.bash

%{_sysconfdir}/bash_completion.d/ovs-vsctl-bashcomp.bash

%config(noreplace) %{_sysconfdir}/logrotate.d/openvswitch

%{_unitdir}/openvswitch.service

%{_unitdir}/ovsdb-server.service

%{_unitdir}/ovs-vswitchd.service

%{_unitdir}/ovs-delete-transient-ports.service

%{_datadir}/openvswitch/scripts/openvswitch.init

%{_datadir}/openvswitch/scripts/ovs-check-dead-ifs

%{_datadir}/openvswitch/scripts/ovs-lib

%{_datadir}/openvswitch/scripts/ovs-save

%{_datadir}/openvswitch/scripts/ovs-vtep

%{_datadir}/openvswitch/scripts/ovs-ctl

%{_datadir}/openvswitch/scripts/ovs-kmod-ctl

%{_datadir}/openvswitch/scripts/ovs-systemd-reload

%config %{_datadir}/openvswitch/vswitch.ovsschema

%config %{_datadir}/openvswitch/vtep.ovsschema

%{_bindir}/ovs-appctl

%{_bindir}/ovs-dpctl

%{_bindir}/ovs-ofctl

%{_bindir}/ovs-vsctl

%{_bindir}/ovsdb-client

%{_bindir}/ovsdb-tool

%{_bindir}/ovs-pki

%{_bindir}/vtep-ctl

%{_libdir}/*.so.*

%{_sbindir}/ovs-vswitchd

%{_sbindir}/ovsdb-server

%{_mandir}/man1/ovsdb-client.1*

%{_mandir}/man1/ovsdb-server.1*

%{_mandir}/man1/ovsdb-tool.1*

%{_mandir}/man5/ovsdb.5*

%{_mandir}/man5/ovsdb-server.5.*

%{_mandir}/man5/ovs-vswitchd.conf.db.5*

%{_mandir}/man5/vtep.5*

%{_mandir}/man7/ovsdb-server.7*

%{_mandir}/man7/ovsdb.7*

%{_mandir}/man7/ovs-actions.7*

%{_mandir}/man7/ovs-fields.7*

%{_mandir}/man8/vtep-ctl.8*

%{_mandir}/man8/ovs-appctl.8*

%{_mandir}/man8/ovs-ctl.8*

%{_mandir}/man8/ovs-dpctl.8*

%{_mandir}/man8/ovs-kmod-ctl.8.*

%{_mandir}/man8/ovs-ofctl.8*

%{_mandir}/man8/ovs-pki.8*

%{_mandir}/man8/ovs-vsctl.8*

%{_mandir}/man8/ovs-vswitchd.8*

%{_mandir}/man8/ovs-parse-backtrace.8*

%{_udevrulesdir}/91-vfio.rules

%doc LICENSE NOTICE README.rst NEWS rhel/README.RHEL.rst

%ifarch %{dpdkarches}

%doc %{dpdkdir}/README.DPDK-PMDS

%attr(750,openvswitch,hugetlbfs) %verify(not owner group) /var/log/openvswitch

%else

%attr(750,openvswitch,openvswitch) %verify(not owner group) /var/log/openvswitch

%endif

/var/lib/openvswitch

%ghost %attr(755,root,root) %verify(not owner group) %{_rundir}/openvswitch

%{_datadir}/openvswitch/bugtool-plugins/

%{_datadir}/openvswitch/scripts/ovs-bugtool-*

%{_bindir}/ovs-dpctl-top

%{_sbindir}/ovs-bugtool

%{_mandir}/man8/ovs-dpctl-top.8*

%{_mandir}/man8/ovs-bugtool.8*

%if (0%{?rhel} && 0%{?rhel} <= 7) || (0%{?fedora} && 0%{?fedora} < 29)

%{_sysconfdir}/sysconfig/network-scripts/ifup-ovs

%{_sysconfdir}/sysconfig/network-scripts/ifdown-ovs

%endif

%if %{with ipsec}

%files ipsec

%{_datadir}/openvswitch/scripts/ovs-monitor-ipsec

%{_unitdir}/openvswitch-ipsec.service

%endif

%changelog

* Wed May 04 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-100

- Merging upstream branch-2.15 [RH git: 5fb6b64894]

    Commit list:

    3d77799747 ofproto-dpif-xlate: Remove mirror assert.

    ac49e21b6d netdev-dpdk: Fix tx drops statistic for a down netdev.

* Thu Apr 28 2022 Timothy Redaelli <tredaelli@redhat.com> - 2.15.0-99

- vhost: fix queue number check when setting inflight FD [RH git: ba1bcead43]

    [ upstream commit 6442c329b9d2ded0f44b27d2016aaba8ba5844c5 ]

    In function vhost_user_set_inflight_fd, queue number in inflight

    message is used to access virtqueue. However, queue number could

    be larger than VHOST_MAX_VRING and cause write OOB as this number

    will be used to write inflight info in virtqueue structure. This

    patch checks the queue number to avoid the issue and also make

    sure virtqueues are allocated before setting inflight information.

    Fixes: ad0a4ae491fe ("vhost: checkout resubmit inflight information")

    Reported-by: Wenxiang Qian <leonwxqian@gmail.com>

    Signed-off-by: Chenbo Xia <chenbo.xia@intel.com>

    Reviewed-by: Maxime Coquelin <maxime.coquelin@redhat.com>

* Thu Apr 28 2022 Timothy Redaelli <tredaelli@redhat.com> - 2.15.0-98

- vhost: fix FD leak with inflight messages [RH git: 9d20e2fe62]

    [ upstream commit af74f7db384ed149fe42b21dbd7975f8a54ef227 ]

    Even if unlikely, a buggy vhost-user master might attach fds to inflight

    messages. Add checks like for other types of vhost-user messages.

    Fixes: d87f1a1cb7b6 ("vhost: support inflight info sharing")

    Signed-off-by: David Marchand <david.marchand@redhat.com>

    Reviewed-by: Maxime Coquelin <maxime.coquelin@redhat.com>

* Wed Apr 27 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-97

- Merging upstream branch-2.15 [RH git: 885e0d0ad5]

    Commit list:

    cbed56773f ofproto-dpif-xlate: Clear out vlan flow fields while processing native tunnel. (#393566

    2060552)

* Tue Apr 26 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-96

- Merging upstream branch-2.15 [RH git: 87fde112ca]

    Commit list:

    09759f9957 ofproto-xlate: Fix crash when forwarding packet between legacy_l3 tunnels.

    dd6e5983a8 system-traffic: Fix fragment reassembly with L3 L4 protocol information.

* Thu Apr 21 2022 Timothy Redaelli <tredaelli@redhat.com> - 2.15.0-95

- Really set RTE_ETH_MAXPORTS to 1024 [RH git: 4c53699c3e]

    Fixes: cbe02d895f52 ("Change RTE_ETH_MAXPORTS to 1024")

* Mon Apr 18 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-94

- Merging upstream branch-2.15 [RH git: c55ba17247]

    Commit list:

    3da1b0c456 cirrus: Update FreeBSD versions.

* Fri Apr 08 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-93

- Merging upstream branch-2.15 [RH git: c8842bbbf9]

    Commit list:

    27a2daad0e Prepare for 2.15.5.

    c281f01dd3 Set release date for 2.15.4.

* Fri Apr 08 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-92

- Merging upstream branch-2.15 [RH git: 74dde447f6]

    Commit list:

    d848639d27 NEWS: Highlight libopenvswitch API change caused by UB fixes.

* Wed Apr 06 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-91

- Merging upstream branch-2.15 [RH git: 09b0ffda32]

    Commit list:

    3719bdafc4 netdev-offload-tc: Check for ct_state flag combinations that are not offloadable.

* Tue Apr 05 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-90

- Merging upstream branch-2.15 [RH git: 9e3e8cde3c]

    Commit list:

    80b57ee01f dpif-netdev: Fix dp_netdev_get_pmd() function getting correct core_id.

    c1bbb1ec6d ofproto-dpif-xlate: Fix NULL pointer dereference in xlate_normal().

* Wed Mar 30 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-89

- Merging upstream branch-2.15 [RH git: c42b42c1dc]

    Commit list:

    beaea86825 sparse: bump recommended version and include headers.

    4744b939c1 rculist: use multi-variable helpers for loop macros.

    ab4f0e6fd3 hindex: use multi-variable iterators.

    b1c7d8a278 cmap: use multi-variable iterators.

    fa11ec93e1 hmap: implement UB-safe hmap pop iterator.

    5f70b45cd7 hmap: use multi-variable helpers for hmap loops.

    2cbb77724e list: use multi-variable helpers for list loops.

    e345d7bf2a util: add helpers to overload SAFE macro.

    842d7f6814 util: add safe multi-variable iterators.

    f1625aa4d3 util: add multi-variable loop iterator macros.

* Wed Mar 30 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-88

- Merging upstream branch-2.15 [RH git: a03b5c62e4]

    Commit list:

    0a3867a9a9 ovsdb: raft: Fix inability to read the database with DNS host names. (#2055097)

* Mon Mar 28 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-87

- Merging upstream branch-2.15 [RH git: bba298f05e]

    Commit list:

    572ea8e0ef system-traffic.at: Fix flaky DNAT load balancing test.

* Wed Mar 23 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-86

- Merging upstream branch-2.15 [RH git: 68ea3ca4b4]

    Commit list:

    25dab05c39 tests: Fix incorrect usage of OVS_WAIT_UNTIL.

* Mon Mar 21 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-85

- Merging upstream branch-2.15 [RH git: 7b1d494b1f]

    Commit list:

    c804df6e11 odp-util: Fix output for tc to be equal to kernel.

    92207b062a netdev-offload-tc: Fix IP and port ranges in flower returns.

    743974a961 netdev-offload-tc: Always include conntrack information to tc.

    0ea2fa78e3 netdev-offload-tc: Check for valid netdev ifindex in flow_put.

    e832fa9b12 netdev-offload-tc: Set the correct VLAN_VID and VLAN_PCP masks.

    7dace029e8 netdev-offload-tc: Add debug logs on tc rule verify failures.

    56ee5f7070 tc: Keep header rewrite actions order.

* Fri Mar 18 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-84

- Merging upstream branch-2.15 [RH git: 137641442f]

    Commit list:

    fd8b2511db ofproto-dpif-xlate: Avoid successive ct_clear datapath actions.

* Mon Mar 14 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-83

- Merging upstream branch-2.15 [RH git: d2abb6b2f3]

    Commit list:

    45e10d84d7 dpdk: Use DPDK 20.11.4 release

* Fri Mar 11 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-82

- Merging upstream branch-2.15 [RH git: 7bb43bfb9f]

    Commit list:

    deeec60597 ofp-prop: Silence the 'may be uninitialized' warning.

    fa26f1f847 ovsdb-cluster.at: Avoid test failures due to different hashing.

* Mon Mar 07 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-81

- Merging upstream branch-2.15 [RH git: a735607890]

    Commit list:

    8a58897b56 ofproto: Use xlate map for uuid lookups.

    c091911e13 ofproto: Add refcount to ofproto to fix ofproto use-after-free.

* Sat Mar 05 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-80

- Merging upstream branch-2.15 [RH git: 729a55e204]

    Commit list:

    08d77484f6 ofproto-dpif: Trigger revalidation when ipfix config set.

    bc3b88c8ad system-tso: Skip encap tests when userspace TSO is enabled.

* Fri Mar 04 2022 Open vSwitch CI <ovs-ci@redhat.com> - 2.15.0-79

- Merging upstream branch-2.15 [RH git: 82cbd329f0]

    Commit list:

    e05105f1e6 tc: Fix stats byte count on fragmented packets.

    81aa8c8073 compat: Add gen_stats include to define tc hw stats.