# Copyright (C) 2009, 2010, 2013, 2014 Nicira Networks, Inc.

#

# Copying and distribution of this file, with or without modification,

# are permitted in any medium without royalty provided the copyright

# notice and this notice are preserved.  This file is offered as-is,

# without warranty of any kind.

#

# If tests have to be skipped while building, specify the '--without check'

# option. For example:

# rpmbuild -bb --without check rhel/openvswitch-fedora.spec

# This defines the base package name's version.

%define pkgname openvswitch3.3

%if 0%{?commit:1}

%global shortcommit %(c=%{commit}; echo ${c:0:7})

%endif

# Enable PIE, bz#955181

%global _hardened_build 1

# RHEL-7 doesn't define _rundir macro yet

# Fedora 15 onwards uses /run as _rundir

%if 0%{!?_rundir:1}

%define _rundir /run

%endif

# FIXME Test "STP - flush the fdb and mdb when topology changed" fails on s390x

# FIXME 2 tests fails on ppc64le. They will be hopefully fixed before official 2.11

%ifarch %{ix86} x86_64 aarch64

%bcond_without check

%else

%bcond_with check

%endif

# option to run kernel datapath tests, requires building as root!

%bcond_with check_datapath_kernel

# option to build with libcap-ng, needed for running OVS as regular user

%bcond_without libcapng

# option to build with ipsec support

%bcond_without ipsec

# Build python2 (that provides python) and python3 subpackages on Fedora

# Build only python3 (that provides python) subpackage on RHEL8

# Build only python subpackage on RHEL7

%if 0%{?rhel} > 7 || 0%{?fedora}

# On RHEL8 Sphinx is included in buildroot

%global external_sphinx 1

%else

# Don't use external sphinx (RHV doesn't have optional repositories enabled)

%global external_sphinx 0

%endif

Name: %{pkgname}

Summary: Open vSwitch

Group: System Environment/Daemons daemon/database/utilities

URL: http://www.openvswitch.org/

Version: 3.3.0

Release: 20%{?dist}

# Nearly all of openvswitch is ASL 2.0.  The bugtool is LGPLv2+, and the

# lib/sflow*.[ch] files are SISSL

# datapath/ is GPLv2 (although not built into any of the binary packages)

License: ASL 2.0 and LGPLv2+ and SISSL

%define dpdkver 23.11

%define dpdkdir dpdk

%define dpdksver %(echo %{dpdkver} | cut -d. -f-2)

# NOTE: DPDK does not currently build for s390x

# DPDK on aarch64 is not stable enough to be enabled in FDP

%if 0%{?rhel} > 7 || 0%{?fedora}

%define dpdkarches x86_64 ppc64le

%else

%define dpdkarches

%endif

%if 0%{?commit:1}

Source: https://github.com/openvswitch/ovs/archive/%{commit}.tar.gz#/openvswitch-%{commit}.tar.gz

%else

Source: https://github.com/openvswitch/ovs/archive/v%{version}.tar.gz#/openvswitch-%{version}.tar.gz

%endif

Source2: openvswitch.sysusers

Source3: openvswitch-hugetlbfs.sysusers

Source10: https://fast.dpdk.org/rel/dpdk-%{dpdkver}.tar.xz

%define docutilsver 0.12

%define pygmentsver 1.4

%define sphinxver   1.2.3

%define pyelftoolsver 0.27

Source100: https://pypi.io/packages/source/d/docutils/docutils-%{docutilsver}.tar.gz

Source101: https://pypi.io/packages/source/P/Pygments/Pygments-%{pygmentsver}.tar.gz

Source102: https://pypi.io/packages/source/S/Sphinx/Sphinx-%{sphinxver}.tar.gz

Source103: https://pypi.io/packages/source/p/pyelftools/pyelftools-%{pyelftoolsver}.tar.gz

%define apply_patch %(test -s %{_sourcedir}/openvswitch-%{version}.patch && echo 1 || echo 0)

%if %{apply_patch}

Patch0:    openvswitch-%{version}.patch

%endif

# The DPDK is designed to optimize througput of network traffic using, among

# other techniques, carefully crafted assembly instructions.  As such it

# needs extensive work to port it to other architectures.

ExclusiveArch: x86_64 aarch64 ppc64le s390x

# Do not enable this otherwise YUM will break on any upgrade.

# Provides: openvswitch

Conflicts: openvswitch < 3.3

Conflicts: openvswitch-dpdk < 3.3

Conflicts: openvswitch2.10

Conflicts: openvswitch2.11

Conflicts: openvswitch2.12

Conflicts: openvswitch2.13

Conflicts: openvswitch2.14

Conflicts: openvswitch2.15

Conflicts: openvswitch2.16

Conflicts: openvswitch2.17

Conflicts: openvswitch3.0

Conflicts: openvswitch3.1

Conflicts: openvswitch3.2

# FIXME Sphinx is used to generate some manpages, unfortunately, on RHEL, it's

# in the -optional repository and so we can't require it directly since RHV

# doesn't have the -optional repository enabled and so TPS fails

%if %{external_sphinx}

BuildRequires: python3-sphinx

%else

# Sphinx dependencies

BuildRequires: python-devel

BuildRequires: python-setuptools

#BuildRequires: python2-docutils

BuildRequires: python-jinja2

BuildRequires: python-nose

#BuildRequires: python2-pygments

# docutils dependencies

BuildRequires: python-imaging

# pygments dependencies

BuildRequires: python-nose

%endif

BuildRequires: gcc gcc-c++ make

BuildRequires: autoconf automake libtool

BuildRequires: systemd-units systemd-rpm-macros openssl openssl-devel

BuildRequires: python3-devel python3-setuptools

BuildRequires: desktop-file-utils

BuildRequires: groff-base graphviz

BuildRequires: unbound-devel

BuildRequires: systemtap-sdt-devel

# make check dependencies

BuildRequires: procps-ng

%if %{with check_datapath_kernel}

BuildRequires: nmap-ncat

# would be useful but not available in RHEL or EPEL

#BuildRequires: pyftpdlib

%endif

%if %{with libcapng}

BuildRequires: libcap-ng libcap-ng-devel

%endif

%ifarch %{dpdkarches}

BuildRequires: meson

%if 0%{?rhel} > 8 || 0%{?fedora}

BuildRequires: python3-pyelftools

%endif

# DPDK driver dependencies

BuildRequires: zlib-devel numactl-devel libarchive-devel

# libarchive static dependencies

BuildRequires: bzip2-devel libacl-devel libxml2-devel libzstd-devel lz4-devel xz-devel

%ifarch x86_64

BuildRequires: rdma-core-devel >= 15 libmnl-devel

%endif

# Required by packaging policy for the bundled DPDK

Provides: bundled(dpdk) = %{dpdkver}

%endif

Requires: openssl iproute module-init-tools

#Upstream kernel commit 4f647e0a3c37b8d5086214128614a136064110c3

#Requires: kernel >= 3.15.0-0

Requires: openvswitch-selinux-extra-policy

%{?sysusers_requires_compat}

Requires(post): /bin/sed

Requires(post): systemd-units

Requires(preun): systemd-units

Requires(postun): systemd-units

Obsoletes: openvswitch-controller <= 0:2.1.0-1

%if 0%{?rhel}

# sortedcontainers are not packaged on RHEL yet, but ovs includes it

%global __requires_exclude ^python%{python3_version}dist\\(sortedcontainers\\)$

%endif

%description

Open vSwitch provides standard network bridging functions and

support for the OpenFlow protocol for remote per-flow control of

traffic.

%package -n python3-%{pkgname}

Summary: Open vSwitch python3 bindings

License: ASL 2.0

Requires: %{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

Provides: python-%{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

%description -n python3-%{pkgname}

Python bindings for the Open vSwitch database

%package test

Summary: Open vSwitch testing utilities

License: ASL 2.0

BuildArch: noarch

Requires: python3-%{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

Requires: tcpdump

%description test

Utilities that are useful to diagnose performance and connectivity

issues in Open vSwitch setup.

%package devel

Summary: Open vSwitch OpenFlow development package (library, headers)

License: ASL 2.0

Requires: %{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

%description devel

This provides shared library, libopenswitch.so and the openvswitch header

files needed to build an external application.

%if 0%{?rhel} == 8 || 0%{?fedora} > 28

%package -n network-scripts-%{name}

Summary: Open vSwitch legacy network service support

License: ASL 2.0

Requires: network-scripts

Supplements: (%{name} and network-scripts)

%description -n network-scripts-%{name}

This provides the ifup and ifdown scripts for use with the legacy network

service.

%endif

%if %{with ipsec}

%package ipsec

Summary: Open vSwitch IPsec tunneling support

License: ASL 2.0

Requires: python3-%{pkgname} = %{?epoch:%{epoch}:}%{version}-%{release}

Requires: libreswan

%description ipsec

This package provides IPsec tunneling support for OVS tunnels.

%endif

%prep

%if 0%{?commit:1}

%setup -q -n ovs-%{commit} -a 10

%else

%setup -q -n ovs-%{version} -a 10

%endif

%if ! %{external_sphinx}

%if 0%{?commit:1}

%setup -n ovs-%{commit} -q -D -T -a 100 -a 101 -a 102

%else

%setup -n ovs-%{version} -q -D -T -a 100 -a 101 -a 102

%endif

%endif

%if 0%{?rhel} && 0%{?rhel} < 9

%if 0%{?commit:1}

%setup -n ovs-%{commit} -q -D -T -a 103

%else

%setup -n ovs-%{version} -q -D -T -a 103

%endif

%endif

mv dpdk-*/ %{dpdkdir}/

%if %{apply_patch}

%patch0 -p1

%endif

%build

%if 0%{?rhel} && 0%{?rhel} < 9

export PYTHONPATH="${PWD}/pyelftools-%{pyelftoolsver}"

%endif

# Build Sphinx on RHEL

%if ! %{external_sphinx}

export PYTHONPATH="${PYTHONPATH:+$PYTHONPATH:}%{_builddir}/pytmp/lib/python"

for x in docutils-%{docutilsver} Pygments-%{pygmentsver} Sphinx-%{sphinxver}; do

    pushd "$x"

    python2 setup.py install --home %{_builddir}/pytmp

    popd

done

export PATH="$PATH:%{_builddir}/pytmp/bin"

%endif

./boot.sh

%ifarch %{dpdkarches}    # build dpdk

# Lets build DPDK first

cd %{dpdkdir}

ENABLED_DRIVERS=(

    bus/pci

    bus/vdev

    mempool/ring

    net/failsafe

    net/i40e

    net/ring

    net/vhost

    net/virtio

    net/tap

)

%ifarch x86_64

ENABLED_DRIVERS+=(

    baseband/acc

    bus/auxiliary

    bus/vmbus

    common/iavf

    common/mlx5

    common/nfp

    net/bnxt

    net/enic

    net/iavf

    net/ice

    net/mlx5

    net/netvsc

    net/nfp

    net/qede

    net/vdev_netvsc

)

%endif

%ifarch aarch64 x86_64

ENABLED_DRIVERS+=(

    net/e1000

    net/ixgbe

)

%endif

for driver in "${ENABLED_DRIVERS[@]}"; do

    enable_drivers="${enable_drivers:+$enable_drivers,}"$driver

done

# If doing any updates, this must be aligned with:

# https://access.redhat.com/articles/3538141

ENABLED_LIBS=(

    bbdev

    bitratestats

    bpf

    cmdline

    cryptodev

    dmadev

    gro

    gso

    hash

    ip_frag

    latencystats

    member

    meter

    metrics

    pcapng

    pdump

    security

    stack

    vhost

)

for lib in "${ENABLED_LIBS[@]}"; do

    enable_libs="${enable_libs:+$enable_libs,}"$lib

done

%set_build_flags

%__meson --prefix=%{_builddir}/dpdk-build \

         --buildtype=plain \

         -Denable_libs="$enable_libs" \

         -Ddisable_apps="*" \

         -Denable_drivers="$enable_drivers" \

         -Dplatform=generic \

         -Dmax_ethports=1024 \

         -Dmax_numa_nodes=8 \

         -Dtests=false \

         %{_vpath_builddir}

%meson_build

%__meson install -C %{_vpath_builddir} --no-rebuild

# FIXME currently with LTO enabled OVS tries to link with both static and shared libraries

rm -v %{_builddir}/dpdk-build/%{_lib}/*.so*

# Generate a list of supported drivers, its hard to tell otherwise.

cat << EOF > README.DPDK-PMDS

DPDK drivers included in this package:

EOF

for f in %{_builddir}/dpdk-build/%{_lib}/librte_net_*.a; do

    basename ${f} | cut -c12- | cut -d. -f1 | tr [:lower:] [:upper:]

done >> README.DPDK-PMDS

cat << EOF >> README.DPDK-PMDS

For further information about the drivers, see

http://dpdk.org/doc/guides-%{dpdksver}/nics/index.html

EOF

cd -

%endif    # build dpdk

# And now for OVS...

mkdir build-shared build-static

pushd build-shared

ln -s ../configure

%configure \

%if %{with libcapng}

        --enable-libcapng \

%else

        --disable-libcapng \

%endif

        --disable-static \

        --enable-shared \

        --enable-ssl \

        --with-pkidir=%{_sharedstatedir}/openvswitch/pki \

        --enable-usdt-probes \

        --disable-afxdp \

        --with-version-suffix=-%{release}

make %{?_smp_mflags}

popd

pushd build-static

ln -s ../configure

%ifarch %{dpdkarches}

PKG_CONFIG_PATH=%{_builddir}/dpdk-build/%{_lib}/pkgconfig \

%endif

%configure \

%if %{with libcapng}

        --enable-libcapng \

%else

        --disable-libcapng \

%endif

        --enable-ssl \

%ifarch %{dpdkarches}

        --with-dpdk=static \

%endif

        --with-pkidir=%{_sharedstatedir}/openvswitch/pki \

        --enable-usdt-probes \

        --disable-afxdp \

        --with-version-suffix=-%{release}

make %{?_smp_mflags}

popd

/usr/bin/python3 build-aux/dpdkstrip.py \

        --dpdk \

        < rhel/usr_lib_systemd_system_ovs-vswitchd.service.in \

        > rhel/usr_lib_systemd_system_ovs-vswitchd.service

%install

rm -rf $RPM_BUILD_ROOT

make -C build-shared install sbin_PROGRAMS=ovsdb/ovsdb-server DESTDIR=$RPM_BUILD_ROOT

make -C build-static install bin_PROGRAMS= sbin_PROGRAMS=vswitchd/ovs-vswitchd DESTDIR=$RPM_BUILD_ROOT

install -d -m 0755 $RPM_BUILD_ROOT%{_rundir}/openvswitch

install -d -m 0750 $RPM_BUILD_ROOT%{_localstatedir}/log/openvswitch

install -d -m 0755 $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch

install -p -D -m 0644 %{SOURCE2} $RPM_BUILD_ROOT%{_sysusersdir}/openvswitch.conf

%ifarch %{dpdkarches}

install -p -D -m 0644 %{SOURCE3} $RPM_BUILD_ROOT%{_sysusersdir}/openvswitch-hugetlbfs.conf

%endif

install -p -D -m 0644 rhel/usr_lib_udev_rules.d_91-vfio.rules \

        $RPM_BUILD_ROOT%{_udevrulesdir}/91-vfio.rules

install -p -D -m 0644 \

        rhel/usr_share_openvswitch_scripts_systemd_sysconfig.template \

        $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/openvswitch

for service in openvswitch ovsdb-server ovs-vswitchd \

               ovs-delete-transient-ports; do

        install -p -D -m 0644 \

                        rhel/usr_lib_systemd_system_${service}.service \

                        $RPM_BUILD_ROOT%{_unitdir}/${service}.service

done

%if %{with ipsec}

install -p -D -m 0644 rhel/usr_lib_systemd_system_openvswitch-ipsec.service \

                      $RPM_BUILD_ROOT%{_unitdir}/openvswitch-ipsec.service

%endif

install -m 0755 rhel/etc_init.d_openvswitch \

        $RPM_BUILD_ROOT%{_datadir}/openvswitch/scripts/openvswitch.init

install -p -D -m 0644 rhel/etc_openvswitch_default.conf \

        $RPM_BUILD_ROOT/%{_sysconfdir}/openvswitch/default.conf

install -p -D -m 0644 rhel/etc_logrotate.d_openvswitch \

        $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d/openvswitch

install -m 0644 vswitchd/vswitch.ovsschema \

        $RPM_BUILD_ROOT/%{_datadir}/openvswitch/vswitch.ovsschema

%if 0%{?rhel} < 9

install -d -m 0755 $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/network-scripts/

install -p -m 0755 rhel/etc_sysconfig_network-scripts_ifdown-ovs \

        $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/network-scripts/ifdown-ovs

install -p -m 0755 rhel/etc_sysconfig_network-scripts_ifup-ovs \

        $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/network-scripts/ifup-ovs

%endif

install -d -m 0755 $RPM_BUILD_ROOT%{python3_sitelib}

cp -a $RPM_BUILD_ROOT/%{_datadir}/openvswitch/python/ovstest \

        $RPM_BUILD_ROOT%{python3_sitelib}

# Build the JSON C extension for the Python lib (#1417738)

pushd python

(

export CPPFLAGS="-I ../include -I ../build-shared/include"

export LDFLAGS="%{__global_ldflags} -L $RPM_BUILD_ROOT%{_libdir}"

%py3_build

%py3_install

[ -f "$RPM_BUILD_ROOT/%{python3_sitearch}/ovs/_json$(python3-config --extension-suffix)" ]

)

popd

rm -rf $RPM_BUILD_ROOT/%{_datadir}/openvswitch/python/

install -d -m 0755 $RPM_BUILD_ROOT/%{_sharedstatedir}/openvswitch

install -d -m 0755 $RPM_BUILD_ROOT%{_prefix}/lib/firewalld/services/

install -p -D -m 0755 \

        rhel/usr_share_openvswitch_scripts_ovs-systemd-reload \

        $RPM_BUILD_ROOT%{_datadir}/openvswitch/scripts/ovs-systemd-reload

touch $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch/conf.db

# The db needs special permission as IPsec Pre-shared keys are stored in it.

chmod 0640 $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch/conf.db

touch $RPM_BUILD_ROOT%{_sysconfdir}/openvswitch/system-id.conf

# remove unpackaged files

rm -f $RPM_BUILD_ROOT/%{_bindir}/ovs-benchmark \

        $RPM_BUILD_ROOT/%{_bindir}/ovs-docker \

        $RPM_BUILD_ROOT/%{_bindir}/ovs-parse-backtrace \

        $RPM_BUILD_ROOT/%{_bindir}/ovs-testcontroller \

        $RPM_BUILD_ROOT/%{_sbindir}/ovs-vlan-bug-workaround \

        $RPM_BUILD_ROOT/%{_mandir}/man1/ovs-benchmark.1* \

        $RPM_BUILD_ROOT/%{_mandir}/man8/ovs-testcontroller.* \

        $RPM_BUILD_ROOT/%{_mandir}/man8/ovs-vlan-bug-workaround.8*

%if ! %{with ipsec}

rm -f $RPM_BUILD_ROOT/%{_datadir}/openvswitch/scripts/ovs-monitor-ipsec

%endif

# remove ovn unpackages files

rm -f $RPM_BUILD_ROOT%{_bindir}/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man1/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man5/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man7/ovn*

rm -f $RPM_BUILD_ROOT%{_mandir}/man8/ovn*

rm -f $RPM_BUILD_ROOT%{_datadir}/openvswitch/ovn*

rm -f $RPM_BUILD_ROOT%{_datadir}/openvswitch/scripts/ovn*

rm -f $RPM_BUILD_ROOT%{_includedir}/ovn/*

%check

%if %{with check}

    pushd build-static

    touch resolv.conf

    export OVS_RESOLV_CONF=$(pwd)/resolv.conf

    if make check TESTSUITEFLAGS='%{_smp_mflags}' ||

       make check TESTSUITEFLAGS='--recheck'; then :;

    else

        cat tests/testsuite.log

        exit 1

    fi

    popd

%endif

%if %{with check_datapath_kernel}

    pushd build-static

    if make check-kernel RECHECK=yes; then :;

    else

        cat tests/system-kmod-testsuite.log

        exit 1

    fi

    popd

%endif

%clean

rm -rf $RPM_BUILD_ROOT

%preun

%if 0%{?systemd_preun:1}

    %systemd_preun openvswitch.service

%else

    if [ $1 -eq 0 ] ; then

    # Package removal, not upgrade

        /bin/systemctl --no-reload disable openvswitch.service >/dev/null 2>&1 || :

        /bin/systemctl stop openvswitch.service >/dev/null 2>&1 || :

    fi

%endif

%pre

%sysusers_create_compat %{SOURCE2}

%ifarch %{dpdkarches}

%sysusers_create_compat %{SOURCE3}

%endif

%post

if [ $1 -eq 1 ]; then

    sed -i 's:^#OVS_USER_ID=:OVS_USER_ID=:' /etc/sysconfig/openvswitch

%ifarch %{dpdkarches}

    sed -i \

        's@OVS_USER_ID="openvswitch:openvswitch"@OVS_USER_ID="openvswitch:hugetlbfs"@'\

        /etc/sysconfig/openvswitch

%endif

fi

chown -R openvswitch:openvswitch /etc/openvswitch

%if 0%{?systemd_post:1}

    %systemd_post openvswitch.service

%else

    # Package install, not upgrade

    if [ $1 -eq 1 ]; then

        /bin/systemctl daemon-reload >dev/null || :

    fi

%endif

%postun

%if 0%{?systemd_postun:1}

    %systemd_postun openvswitch.service

%else

    /bin/systemctl daemon-reload >/dev/null 2>&1 || :

%endif

%triggerun -- openvswitch < 2.5.0-22.git20160727%{?dist}

# old rpm versions restart the service in postun, but

# due to systemd some preparation is needed.

if systemctl is-active openvswitch >/dev/null 2>&1 ; then

    /usr/share/openvswitch/scripts/ovs-ctl stop >/dev/null 2>&1 || :

    systemctl daemon-reload >/dev/null 2>&1 || :

    systemctl stop openvswitch ovsdb-server ovs-vswitchd >/dev/null 2>&1 || :

    systemctl start openvswitch >/dev/null 2>&1 || :

fi

exit 0

%files -n python3-%{pkgname}

%{python3_sitearch}/ovs

%{python3_sitearch}/ovs-*.egg-info

%doc LICENSE

%files test

%{_bindir}/ovs-pcap

%{_bindir}/ovs-tcpdump

%{_bindir}/ovs-tcpundump

%{_datadir}/openvswitch/scripts/usdt/*

%{_mandir}/man1/ovs-pcap.1*

%{_mandir}/man8/ovs-tcpdump.8*

%{_mandir}/man1/ovs-tcpundump.1*

%{_bindir}/ovs-test

%{_bindir}/ovs-vlan-test

%{_bindir}/ovs-l3ping

%{_mandir}/man8/ovs-test.8*

%{_mandir}/man8/ovs-vlan-test.8*

%{_mandir}/man8/ovs-l3ping.8*

%{python3_sitelib}/ovstest

%files devel

%{_libdir}/*.so

%{_libdir}/pkgconfig/*.pc

%{_includedir}/openvswitch/*

%{_includedir}/openflow/*

%exclude %{_libdir}/*.a

%exclude %{_libdir}/*.la

%if 0%{?rhel} == 8 || 0%{?fedora} > 28

%files -n network-scripts-%{name}

%{_sysconfdir}/sysconfig/network-scripts/ifup-ovs

%{_sysconfdir}/sysconfig/network-scripts/ifdown-ovs

%endif

%files

%defattr(-,openvswitch,openvswitch)

%dir %{_sysconfdir}/openvswitch

%{_sysconfdir}/openvswitch/default.conf

%config %ghost %verify(not owner group md5 size mtime) %{_sysconfdir}/openvswitch/conf.db

%ghost %attr(0600,-,-) %verify(not owner group md5 size mtime) %{_sysconfdir}/openvswitch/.conf.db.~lock~

%config %ghost %{_sysconfdir}/openvswitch/system-id.conf

%defattr(-,root,root)

%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/sysconfig/openvswitch

%{_sysconfdir}/bash_completion.d/ovs-appctl-bashcomp.bash

%{_sysconfdir}/bash_completion.d/ovs-vsctl-bashcomp.bash

%config(noreplace) %{_sysconfdir}/logrotate.d/openvswitch

%{_unitdir}/openvswitch.service

%{_unitdir}/ovsdb-server.service

%{_unitdir}/ovs-vswitchd.service

%{_unitdir}/ovs-delete-transient-ports.service

%{_datadir}/openvswitch/scripts/openvswitch.init

%{_datadir}/openvswitch/scripts/ovs-check-dead-ifs

%{_datadir}/openvswitch/scripts/ovs-lib

%{_datadir}/openvswitch/scripts/ovs-save

%{_datadir}/openvswitch/scripts/ovs-vtep

%{_datadir}/openvswitch/scripts/ovs-ctl

%{_datadir}/openvswitch/scripts/ovs-kmod-ctl

%{_datadir}/openvswitch/scripts/ovs-systemd-reload

%config %{_datadir}/openvswitch/local-config.ovsschema

%config %{_datadir}/openvswitch/vswitch.ovsschema

%config %{_datadir}/openvswitch/vtep.ovsschema

%{_bindir}/ovs-appctl

%{_bindir}/ovs-dpctl

%{_bindir}/ovs-ofctl

%{_bindir}/ovs-vsctl

%{_bindir}/ovsdb-client

%{_bindir}/ovsdb-tool

%{_bindir}/ovs-pki

%{_bindir}/vtep-ctl

%{_libdir}/*.so.*

%{_sbindir}/ovs-vswitchd

%{_sbindir}/ovsdb-server

%{_mandir}/man1/ovsdb-client.1*

%{_mandir}/man1/ovsdb-server.1*

%{_mandir}/man1/ovsdb-tool.1*

%{_mandir}/man5/ovsdb.5*

%{_mandir}/man5/ovsdb.local-config.5*

%{_mandir}/man5/ovsdb-server.5.*

%{_mandir}/man5/ovs-vswitchd.conf.db.5*

%{_mandir}/man5/vtep.5*

%{_mandir}/man7/ovsdb-server.7*

%{_mandir}/man7/ovsdb.7*

%{_mandir}/man7/ovs-actions.7*

%{_mandir}/man7/ovs-fields.7*

%{_mandir}/man8/vtep-ctl.8*

%{_mandir}/man8/ovs-appctl.8*

%{_mandir}/man8/ovs-ctl.8*

%{_mandir}/man8/ovs-dpctl.8*

%{_mandir}/man8/ovs-kmod-ctl.8.*

%{_mandir}/man8/ovs-ofctl.8*

%{_mandir}/man8/ovs-pki.8*

%{_mandir}/man8/ovs-vsctl.8*

%{_mandir}/man8/ovs-vswitchd.8*

%{_mandir}/man8/ovs-parse-backtrace.8*

%{_udevrulesdir}/91-vfio.rules

%doc LICENSE NOTICE README.rst NEWS rhel/README.RHEL.rst

%ifarch %{dpdkarches}

%doc %{dpdkdir}/README.DPDK-PMDS

%attr(750,openvswitch,hugetlbfs) %verify(not owner group) /var/log/openvswitch

%else

%attr(750,openvswitch,openvswitch) %verify(not owner group) /var/log/openvswitch

%endif

/var/lib/openvswitch

%ghost %attr(755,root,root) %verify(not owner group) %{_rundir}/openvswitch

%{_datadir}/openvswitch/bugtool-plugins/

%{_datadir}/openvswitch/scripts/ovs-bugtool-*

%{_bindir}/ovs-dpctl-top

%{_sbindir}/ovs-bugtool

%{_mandir}/man8/ovs-dpctl-top.8*

%{_mandir}/man8/ovs-bugtool.8*

%if (0%{?rhel} && 0%{?rhel} <= 7) || (0%{?fedora} && 0%{?fedora} < 29)

%{_sysconfdir}/sysconfig/network-scripts/ifup-ovs

%{_sysconfdir}/sysconfig/network-scripts/ifdown-ovs

%endif

%{_sysusersdir}/openvswitch.conf

%ifarch %{dpdkarches}

%{_sysusersdir}/openvswitch-hugetlbfs.conf

%endif

%if %{with ipsec}

%files ipsec

%{_datadir}/openvswitch/scripts/ovs-monitor-ipsec

%{_unitdir}/openvswitch-ipsec.service

%endif

%changelog

* Mon Dec 02 2024 Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-20

- Merging upstream branch-3.3 [RH git: 9f1f2517c8]

    Commit list:

    283bfbad24 netdev: Always clear struct ifreq before ioctl.

    27f9795a74 netdev-native-tnl: Fix use of uninitialized RSS hash.

    ee440713cd tests: Use OVS_CHECK_XT6 for all applicable IPv6 tests.

    ed8db7aaf3 tests: Use OVS_CHECK_XT for all applicable IPv4 tests.

    6629327049 classifier: Fix the fieldspec comment in the prefix tracking section.

    30c5962fc6 tests: Handle marks using nft if available.

    98c143755d tests: Add nft support to ADD_EXTERNAL_CT.

    ef3ce35b47 tests: Add nft accept support.

    2395d33155 ovs-macros.at: Correctly delete iptables rule on_exit.

    3a9accee14 system-traffic: Do not rely on conncount for already tracked packets. (FDP-708)

* Mon Dec 02 2024 Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-19

- Merging upstream branch-3.3 [RH git: 5ad6725907]

    Commit list:

    23a76e2db1 system-traffic: Fix syntax errors in FTP and IPv6 curl calls.

* Fri Nov 29 2024 Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-18

- Merging upstream branch-3.3 [RH git: 39fe512e30]

    Commit list:

    bb01225094 ovsdb-idl: Fix use of uninitialized datum for graph consistency check.

    0a8cce4cf8 db-ctl-base: Fix uninitialized datum fields while checking conditions.

    ddf40869b7 ovsdb-types: Fix use of uninitialized reference type.

    c078d89c22 ofproto-dpif-upcall: Fix use of uninitialized missed dumps counter.

    e8a835dfdb ovs-vsctl, vtep-ctl: Silence memory sanitizer warning for longindex.

    9e35252f7d tests: multipath: Fix use of uninitialized wildcards.

    ef73816480 stream: replay: Fix potential NULL dereference on write failure.

    98cace4471 ofp-actions: Fix use of uninitialized padding in set-field.

* Fri Nov 29 2024 Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-17

- Merging upstream branch-3.3 [RH git: 87a57cfed4]

    Commit list:

    8155bbd1d3 system-traffic: Standardize by replacing all wget instances with curl.

    c41e9f5ec5 system-traffic: Replace wget with curl for negative and ftp tests.

* Wed Nov 27 2024 Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-16

- Merging upstream branch-3.3 [RH git: 68822af9c4]

    Commit list:

    6fed6a7d31 classifier: Increase the maximum number of prefixes (tries).

    634bce05b9 Revert "github: Skip FTP SNAT orig tuple tests due to broken Ubuntu kernel."

* Mon Nov 18 2024 Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-15

- Merging dpdk subtree [RH git: edff947ee5]

    Commit list:

    78610a5530 net/iavf: delay VF reset command (FDP-957)

* Sat Nov 16 2024 Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-14

- Merging upstream branch-3.3 [RH git: 1acada6b7f]

    Commit list:

    bca8b7cdd8 Prepare for 3.3.4.

    81d0329204 Set release date for 3.3.3.

* Fri Nov 15 2024 Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-13

- Merging upstream branch-3.3 [RH git: 3c4a9a67c6]

    Commit list:

    989b85be8f tests: Fix transient failure in ping6 header modify. ()

    2139157fa7 github: Build Libreswan v5.1 from sources.

* Mon Nov 11 2024 Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-12

- Merging upstream branch-3.3 [RH git: 3b0e3b25f5]

    Commit list:

    c51063b552 ci: Update GitHub actions runner from Ubuntu 22.04 to 24.04.

    9944e864ea dpdk: Fix dpdk logs being split over multiple lines.

* Sun Nov 03 2024 Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-11

- Merging upstream branch-3.3 [RH git: 7bd8af7541]

    Commit list:

    f872d79c9d ipsec: libreswan: Reduce chances for crossing streams.

    d7f5090848 tests: ipsec: Check that nodes can ping each other in the NxN test.

    6e2cfd3add tests: ipsec: Add NxN + reconciliation test.

    641cba7027 system-tests: Verbose cleanup of ports and namespaces.

    63a753b758 ipsec: Make command timeout configurable.

    ace5640c9f ipsec: libreswan: Avoid monitor hanging on stuck ipsec commands. (FDP-846)

    461a3247e6 ipsec: libreswan: Try to bring non-active connections up.

    d8856e9c14 ipsec: libreswan: Reconcile missing connections periodically.

    6df9627305 ipsec: libreswan: Fix regexp for connections waiting on child SA.

    eb30c1bbee ipsec: Add a helper function to run commands from the monitor.

* Thu Oct 31 2024 Open vSwitch CI <ovs-ci@redhat.com> - 3.3.0-10

- Merging upstream branch-3.3 [RH git: abdbdd9326]

    Commit list:

    f1b70cb48d meta-flow: Fix nw_frag mask while parsing from string.

    1fbb050141 ci: Remove dependency on libpcap.

    a9db0f3177 github: Remove ASLR entropy workaround.

    4f7c8c2592 bond: Always revalidate unbalanced bonds when active member changes. (FDP-845)

    a9e40e3227 ofproto-dpif-upcall: Fix redundant mirror on metadata modification. (FDP-699)

    5d6842f424 dpdk: Use DPDK 23.11.2 release for OVS 3.3.

    618944a79f ofproto-dpif: Improve load balancing in dp_hash select groups. (FDP-826)

    5802dd8ba7 Revert "ci: Use sarif-tools v3.0.1 due to issues in earlier versions."

    3974c52339 ci: Use sarif-tools v3.0.1 due to issues in earlier versions.

    c4a5a2f7ee AUTHORS: Add Jun Wang.

    034145ea5e netdev-dpdk: Disable outer udp checksum offload for txgbe driver.

    5f5c3d9229 selinux: Update policy file.

    2d14266cb9 ofproto-dpif-mirror: Always revalidate on mirror update. (FDP-788)

    049d00f683 github: Skip FTP SNAT orig tuple tests due to broken Ubuntu kernel.