# Spec file for Open Virtual Network (OVN).

# Copyright (C) 2020 Red Hat, Inc.

#

# Copying and distribution of this file, with or without modification,

# are permitted in any medium without royalty provided the copyright

# notice and this notice are preserved.  This file is offered as-is,

# without warranty of any kind.

#

# If tests have to be skipped while building, specify the '--without check'

# option. For example:

#     rpmbuild -bb --without check rhel/ovn-fedora.spec

#

# This defines the base package name's version.

%define pkgver 2.13

%define pkgname ovn%{pkgver}

%define upstreamver 20.12

#%%global commit0 7886ac9ed807d6ff942edde624a3f9331da7332a

#%%global date 20200217

#%%global shortcommit0 %(c=%{commit0}; echo ${c:0:7})

# openvswitch commit

#%%global commit1 8ae6a5f98c3ad57d10220596054f6a0c4d6ea358

#%%global shortcommit1 %(c=%{commit1}; echo ${c:0:7})

# If libcap-ng isn't available and there is no need for running OVS

# as regular user, specify the '--without libcapng'

%bcond_without libcapng

# Enable PIE, bz#955181

%global _hardened_build 1

# some distros (e.g: RHEL-7) don't define _rundir macro yet

# Fedora 15 onwards uses /run as _rundir

%if 0%{!?_rundir:1}

%define _rundir /run

%endif

%if 0%{?rhel} > 7 || 0%{?fedora}

# On RHEL8 Sphinx is included in buildroot

%global external_sphinx 1

%else

# Don't use external sphinx (RHV doesn't have optional repositories enabled)

%global external_sphinx 0

%endif

# We would see rpmlinit error - E: hardcoded-library-path in '% {_prefix}/lib'.

# But there is no solution to fix this. Using {_lib} macro will solve the

# rpmlink error, but will install the files in /usr/lib64/.

# OVN pacemaker ocf script file is copied in /usr/lib/ocf/resource.d/ovn/

# and we are not sure if pacemaker looks into this path to find the

# OVN resource agent script.

%global ovnlibdir %{_prefix}/lib

Name: %{pkgname}

Summary: Open Virtual Network support

Group: System Environment/Daemons

URL: http://www.openvswitch.org/

Version: %{upstreamver}.0

Release: 1%{?commit0:.%{date}git%{shortcommit0}}%{?dist}

Provides: openvswitch%{pkgver}-ovn-common = %{?epoch:%{epoch}:}%{version}-%{release}

Obsoletes: openvswitch%{pkgver}-ovn-common < 2.11.0-1

# Nearly all of openvswitch is ASL 2.0.  The bugtool is LGPLv2+, and the

# lib/sflow*.[ch] files are SISSL

License: ASL 2.0 and LGPLv2+ and SISSL

%if 0%{?commit0:1}

Source: https://github.com/ovn-org/ovn/archive/%{commit0}.tar.gz#/ovn-%{shortcommit0}.tar.gz

%else

# Upstream version is called 20.03, not 2.13. Once we switch to using the

# same versioning scheme for RH, we can reference %{version} here.

# XXX Are OVN releases listed on openvswitch.org?

Source: https://www.openvswitch.org/releases/ovn-%{version}.tar.gz

%endif

#%define ovsver %{pkgver}.0

%define ovsver 2.14.90

%if 0%{?commit1:1}

Source10: https://github.com/openvswitch/ovs/archive/%{commit1}.tar.gz#/openvswitch-%{shortcommit1}.tar.gz

%define ovsdir ovs-%{commit1}

%else

Source10: https://openvswitch.org/releases/openvswitch-%{ovsver}.tar.gz

%define ovsdir openvswitch-%{ovsver}

%endif

%define docutilsver 0.12

%define pygmentsver 1.4

%define sphinxver   1.1.3

Source100: https://pypi.io/packages/source/d/docutils/docutils-%{docutilsver}.tar.gz

Source101: https://pypi.io/packages/source/P/Pygments/Pygments-%{pygmentsver}.tar.gz

Source102: https://pypi.io/packages/source/S/Sphinx/Sphinx-%{sphinxver}.tar.gz

Source500: configlib.sh

Source501: gen_config_group.sh

Source502: set_config.sh

# Important: source503 is used as the actual copy file

# @TODO: this causes a warning - fix it?

Source504: arm64-armv8a-linuxapp-gcc-config

Source505: ppc_64-power8-linuxapp-gcc-config

Source506: x86_64-native-linuxapp-gcc-config

# ovn-patches

# OVN backports (0 - 799)

# Bug 1883957

# Bug 1881826

Patch01: 0001-northd-add-reject-action-for-lb-with-no-backends.patch

Patch02: 0002-nbctl-Cache-to-which-switch-or-router-particular-por.patch

Patch03: 0003-nbctl-Use-partial-set-updates-instead-of-re-setting-.patch

Patch04: 0004-nbctl-Remove-column-verification-for-partial-updates.patch

Patch05: 0005-northd-Add-ECMP-support-to-router-policies.patch

Patch06: 0006-osx-Fix-compilation-error.patch

Patch07: 0007-tests-Make-ovn-ovn-controller-incremental-processing.patch

# OpenvSwitch backports (800-) if required.

# FIXME Sphinx is used to generate some manpages, unfortunately, on RHEL, it's

# in the -optional repository and so we can't require it directly since RHV

# doesn't have the -optional repository enabled and so TPS fails

%if %{external_sphinx}

BuildRequires: python3-sphinx

%else

# Sphinx dependencies

BuildRequires: python-devel

BuildRequires: python-setuptools

#BuildRequires: python2-docutils

BuildRequires: python-jinja2

BuildRequires: python-nose

#BuildRequires: python2-pygments

# docutils dependencies

BuildRequires: python-imaging

# pygments dependencies

BuildRequires: python-nose

%endif

BuildRequires: gcc gcc-c++ make

BuildRequires: autoconf automake libtool

BuildRequires: systemd-units openssl openssl-devel

BuildRequires: python3-devel python3-setuptools

BuildRequires: desktop-file-utils

BuildRequires: groff-base graphviz

BuildRequires: unbound-devel

# make check dependencies

BuildRequires: procps-ng

%if 0%{?rhel} > 7 || 0%{?fedora}

BuildRequires: python3-pyOpenSSL

%endif

%if %{with libcapng}

BuildRequires: libcap-ng libcap-ng-devel

%endif

Requires: hostname openssl iproute module-init-tools

Requires(post): systemd-units

Requires(preun): systemd-units

Requires(postun): systemd-units

# to skip running checks, pass --without check

# Disable Tests due to https://bugs.centos.org/view.php?id=16969, tests failing

# as build is running on CentOS7 builder, once builders are CentOS8 based tests can

# be re enabled.

%bcond_with check

%description

OVN, the Open Virtual Network, is a system to support virtual network

abstraction.  OVN complements the existing capabilities of OVS to add

native support for virtual network abstractions, such as virtual L2 and L3

overlays and security groups.

%package central

Summary: Open Virtual Network support

License: ASL 2.0

Requires: %{pkgname}

Requires: firewalld-filesystem

Provides: openvswitch%{pkgver}-ovn-central = %{?epoch:%{epoch}:}%{version}-%{release}

Obsoletes: openvswitch%{pkgver}-ovn-central < 2.11.0-1

%description central

OVN DB servers and ovn-northd running on a central node.

%package host

Summary: Open Virtual Network support

License: ASL 2.0

Requires: %{pkgname}

Requires: firewalld-filesystem

Provides: openvswitch%{pkgver}-ovn-host = %{?epoch:%{epoch}:}%{version}-%{release}

Obsoletes: openvswitch%{pkgver}-ovn-host < 2.11.0-1

%description host

OVN controller running on each host.

%package vtep

Summary: Open Virtual Network support

License: ASL 2.0

Requires: %{pkgname}

Provides: openvswitch%{pkgver}-ovn-vtep = %{?epoch:%{epoch}:}%{version}-%{release}

Obsoletes: openvswitch%{pkgver}-ovn-vtep < 2.11.0-1

%description vtep

OVN vtep controller

%prep

%if 0%{?commit0:1}

%autosetup -n ovn-%{commit0} -a 10 -p 1

%else

%autosetup -n ovn-%{version} -a 10 -p 1

%endif

%build

%if 0%{?commit0:1}

# fix the snapshot unreleased version to be the released one.

sed -i.old -e "s/^AC_INIT(openvswitch,.*,/AC_INIT(openvswitch, %{version},/" configure.ac

%endif

./boot.sh

# OVN source code is now separate.

# Build openvswitch first.

# XXX Current openvswitch2.13 doesn't

# use "2.13.0" for version. It's a commit hash

pushd %{ovsdir}

./boot.sh

%configure \

%if %{with libcapng}

        --enable-libcapng \

%else

        --disable-libcapng \

%endif

        --enable-ssl \

        --with-pkidir=%{_sharedstatedir}/openvswitch/pki

make %{?_smp_mflags}

popd

# Build OVN.

# XXX OVS version needs to be updated when ovs2.13 is updated.

%configure \

        --with-ovs-source=$PWD/%{ovsdir} \

%if %{with libcapng}

        --enable-libcapng \

%else

        --disable-libcapng \

%endif

        --enable-ssl \

        --with-pkidir=%{_sharedstatedir}/openvswitch/pki

make %{?_smp_mflags}

%install

%make_install

install -p -D -m 0644 \

        rhel/usr_share_ovn_scripts_systemd_sysconfig.template \

        $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/ovn

for service in ovn-controller ovn-controller-vtep ovn-northd; do

        install -p -D -m 0644 \

                        rhel/usr_lib_systemd_system_${service}.service \

                        $RPM_BUILD_ROOT%{_unitdir}/${service}.service

done

install -d -m 0755 $RPM_BUILD_ROOT/%{_sharedstatedir}/ovn

install -d $RPM_BUILD_ROOT%{ovnlibdir}/firewalld/services/

install -p -m 0644 rhel/usr_lib_firewalld_services_ovn-central-firewall-service.xml \

        $RPM_BUILD_ROOT%{ovnlibdir}/firewalld/services/ovn-central-firewall-service.xml

install -p -m 0644 rhel/usr_lib_firewalld_services_ovn-host-firewall-service.xml \

        $RPM_BUILD_ROOT%{ovnlibdir}/firewalld/services/ovn-host-firewall-service.xml

install -d -m 0755 $RPM_BUILD_ROOT%{ovnlibdir}/ocf/resource.d/ovn

ln -s %{_datadir}/ovn/scripts/ovndb-servers.ocf \

      $RPM_BUILD_ROOT%{ovnlibdir}/ocf/resource.d/ovn/ovndb-servers

install -p -D -m 0644 rhel/etc_logrotate.d_ovn \

        $RPM_BUILD_ROOT/%{_sysconfdir}/logrotate.d/ovn

# remove unneeded files.

rm -f $RPM_BUILD_ROOT%{_bindir}/ovs*

rm -f $RPM_BUILD_ROOT%{_bindir}/vtep-ctl

rm -f $RPM_BUILD_ROOT%{_sbindir}/ovs*

rm -f $RPM_BUILD_ROOT%{_mandir}/man1/ovs*

rm -f $RPM_BUILD_ROOT%{_mandir}/man5/ovs*

rm -f $RPM_BUILD_ROOT%{_mandir}/man5/vtep*

rm -f $RPM_BUILD_ROOT%{_mandir}/man7/ovs*

rm -f $RPM_BUILD_ROOT%{_mandir}/man8/ovs*

rm -f $RPM_BUILD_ROOT%{_mandir}/man8/vtep*

rm -rf $RPM_BUILD_ROOT%{_datadir}/ovn/python

rm -f $RPM_BUILD_ROOT%{_datadir}/ovn/scripts/ovs*

rm -rf $RPM_BUILD_ROOT%{_datadir}/ovn/bugtool-plugins

rm -f $RPM_BUILD_ROOT%{_libdir}/*.a

rm -f $RPM_BUILD_ROOT%{_libdir}/*.la

rm -f $RPM_BUILD_ROOT%{_libdir}/pkgconfig/*.pc

rm -f $RPM_BUILD_ROOT%{_includedir}/ovn/*

rm -f $RPM_BUILD_ROOT%{_sysconfdir}/bash_completion.d/ovs-appctl-bashcomp.bash

rm -f $RPM_BUILD_ROOT%{_sysconfdir}/bash_completion.d/ovs-vsctl-bashcomp.bash

rm -rf $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/openvswitch

rm -f $RPM_BUILD_ROOT%{_datadir}/ovn/scripts/ovn-bugtool*

rm -f $RPM_BUILD_ROOT/%{_bindir}/ovn-docker-overlay-driver \

        $RPM_BUILD_ROOT/%{_bindir}/ovn-docker-underlay-driver

%check

%if %{with check}

    touch resolv.conf

    export OVS_RESOLV_CONF=$(pwd)/resolv.conf

    if ! make check TESTSUITEFLAGS='%{_smp_mflags} -k ovn'; then

        cat tests/testsuite.log

        if ! make check TESTSUITEFLAGS='--recheck'; then

            cat tests/testsuite.log

            # Presently a test case - "2796: ovn -- ovn-controller incremental processing"

            # is failing on aarch64 arch. Let's not exit for this arch

            # until we figure out why it is failing.

            # Test case 93: ovn.at:12105       ovn -- ACLs on Port Groups is failing

            # repeatedly on s390x. This needs to be investigated.

            %ifnarch aarch64

            %ifnarch ppc64le

            %ifnarch s390x

                exit 1

            %endif

            %endif

            %endif

        fi

    fi

%endif

%clean

rm -rf $RPM_BUILD_ROOT

%pre central

if [ $1 -eq 1 ] ; then

    # Package install.

    /bin/systemctl status ovn-northd.service >/dev/null

    ovn_status=$?

    rpm -ql openvswitch-ovn-central > /dev/null

    if [[ "$?" = "0" && "$ovn_status" = "0" ]]; then

        # ovn-northd service is running which means old openvswitch-ovn-central

        # is already installed and it will be cleaned up. So start ovn-northd

        # service when posttrans central is called.

        touch %{_localstatedir}/lib/rpm-state/ovn-northd

    fi

fi

%pre host

if [ $1 -eq 1 ] ; then

    # Package install.

    /bin/systemctl status ovn-controller.service >/dev/null

    ovn_status=$?

    rpm -ql openvswitch-ovn-host > /dev/null

    if [[ "$?" = "0" && "$ovn_status" = "0" ]]; then

        # ovn-controller service is running which means old

        # openvswitch-ovn-host is installed and it will be cleaned up. So

        # start ovn-controller service when posttrans host is called.

        touch %{_localstatedir}/lib/rpm-state/ovn-controller

    fi

fi

%pre vtep

if [ $1 -eq 1 ] ; then

    # Package install.

    /bin/systemctl status ovn-controller-vtep.service >/dev/null

    ovn_status=$?

    rpm -ql openvswitch-ovn-vtep > /dev/null

    if [[ "$?" = "0" && "$ovn_status" = "0" ]]; then

        # ovn-controller-vtep service is running which means old

        # openvswitch-ovn-vtep is installed and it will be cleaned up. So

        # start ovn-controller-vtep service when posttrans host is called.

        touch %{_localstatedir}/lib/rpm-state/ovn-controller-vtep

    fi

fi

%preun central

%if 0%{?systemd_preun:1}

    %systemd_preun ovn-northd.service

%else

    if [ $1 -eq 0 ] ; then

        # Package removal, not upgrade

        /bin/systemctl --no-reload disable ovn-northd.service >/dev/null 2>&1 || :

        /bin/systemctl stop ovn-northd.service >/dev/null 2>&1 || :

    fi

%endif

%preun host

%if 0%{?systemd_preun:1}

    %systemd_preun ovn-controller.service

%else

    if [ $1 -eq 0 ] ; then

        # Package removal, not upgrade

        /bin/systemctl --no-reload disable ovn-controller.service >/dev/null 2>&1 || :

        /bin/systemctl stop ovn-controller.service >/dev/null 2>&1 || :

    fi

%endif

%preun vtep

%if 0%{?systemd_preun:1}

    %systemd_preun ovn-controller-vtep.service

%else

    if [ $1 -eq 0 ] ; then

        # Package removal, not upgrade

        /bin/systemctl --no-reload disable ovn-controller-vtep.service >/dev/null 2>&1 || :

        /bin/systemctl stop ovn-controller-vtep.service >/dev/null 2>&1 || :

    fi

%endif

%post

%if %{with libcapng}

if [ $1 -eq 1 ]; then

    sed -i 's:^#OVN_USER_ID=:OVN_USER_ID=:' %{_sysconfdir}/sysconfig/ovn

    sed -i 's:\(.*su\).*:\1 openvswitch openvswitch:' %{_sysconfdir}/logrotate.d/ovn

fi

%endif

%post central

%if 0%{?systemd_post:1}

    %systemd_post ovn-northd.service

%else

    # Package install, not upgrade

    if [ $1 -eq 1 ]; then

        /bin/systemctl daemon-reload >dev/null || :

    fi

%endif

%post host

%if 0%{?systemd_post:1}

    %systemd_post ovn-controller.service

%else

    # Package install, not upgrade

    if [ $1 -eq 1 ]; then

        /bin/systemctl daemon-reload >dev/null || :

    fi

%endif

%post vtep

%if 0%{?systemd_post:1}

    %systemd_post ovn-controller-vtep.service

%else

    # Package install, not upgrade

    if [ $1 -eq 1 ]; then

        /bin/systemctl daemon-reload >dev/null || :

    fi

%endif

%postun

%postun central

%if 0%{?systemd_postun_with_restart:1}

    %systemd_postun_with_restart ovn-northd.service

%else

    /bin/systemctl daemon-reload >/dev/null 2>&1 || :

    if [ "$1" -ge "1" ] ; then

    # Package upgrade, not uninstall

        /bin/systemctl try-restart ovn-northd.service >/dev/null 2>&1 || :

    fi

%endif

%postun host

%if 0%{?systemd_postun_with_restart:1}

    %systemd_postun_with_restart ovn-controller.service

%else

    /bin/systemctl daemon-reload >/dev/null 2>&1 || :

    if [ "$1" -ge "1" ] ; then

        # Package upgrade, not uninstall

        /bin/systemctl try-restart ovn-controller.service >/dev/null 2>&1 || :

    fi

%endif

%postun vtep

%if 0%{?systemd_postun_with_restart:1}

    %systemd_postun_with_restart ovn-controller-vtep.service

%else

    /bin/systemctl daemon-reload >/dev/null 2>&1 || :

    if [ "$1" -ge "1" ] ; then

        # Package upgrade, not uninstall

        /bin/systemctl try-restart ovn-controller-vtep.service >/dev/null 2>&1 || :

    fi

%endif

%posttrans central

if [ $1 -eq 1 ]; then

    # Package install, not upgrade

    if [ -e %{_localstatedir}/lib/rpm-state/ovn-northd ]; then

        rm %{_localstatedir}/lib/rpm-state/ovn-northd

        /bin/systemctl start ovn-northd.service >/dev/null 2>&1 || :

    fi

fi

%posttrans host

if [ $1 -eq 1 ]; then

    # Package install, not upgrade

    if [ -e %{_localstatedir}/lib/rpm-state/ovn-controller ]; then

        rm %{_localstatedir}/lib/rpm-state/ovn-controller

        /bin/systemctl start ovn-controller.service >/dev/null 2>&1 || :

    fi

fi

%posttrans vtep

if [ $1 -eq 1 ]; then

    # Package install, not upgrade

    if [ -e %{_localstatedir}/lib/rpm-state/ovn-controller-vtep ]; then

        rm %{_localstatedir}/lib/rpm-state/ovn-controller-vtep

        /bin/systemctl start ovn-controller-vtep.service >/dev/null 2>&1 || :

    fi

fi

%files

%{_bindir}/ovn-nbctl

%{_bindir}/ovn-sbctl

%{_bindir}/ovn-trace

%{_bindir}/ovn-detrace

%{_bindir}/ovn-appctl

%{_bindir}/ovn-ic-nbctl

%{_bindir}/ovn-ic-sbctl

%dir %{_datadir}/ovn/

%dir %{_datadir}/ovn/scripts/

%{_datadir}/ovn/scripts/ovn-ctl

%{_datadir}/ovn/scripts/ovn-lib

%{_datadir}/ovn/scripts/ovndb-servers.ocf

%{_mandir}/man8/ovn-ctl.8*

%{_mandir}/man8/ovn-appctl.8*

%{_mandir}/man8/ovn-nbctl.8*

%{_mandir}/man8/ovn-ic-nbctl.8*

%{_mandir}/man8/ovn-trace.8*

%{_mandir}/man1/ovn-detrace.1*

%{_mandir}/man7/ovn-architecture.7*

%{_mandir}/man8/ovn-sbctl.8*

%{_mandir}/man8/ovn-ic-sbctl.8*

%{_mandir}/man5/ovn-nb.5*

%{_mandir}/man5/ovn-ic-nb.5*

%{_mandir}/man5/ovn-sb.5*

%{_mandir}/man5/ovn-ic-sb.5*

%dir %{ovnlibdir}/ocf/resource.d/ovn/

%{ovnlibdir}/ocf/resource.d/ovn/ovndb-servers

%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/logrotate.d/ovn

%config(noreplace) %verify(not md5 size mtime) %{_sysconfdir}/sysconfig/ovn

%files central

%{_bindir}/ovn-northd

%{_bindir}/ovn-ic

%{_mandir}/man8/ovn-northd.8*

%{_mandir}/man8/ovn-ic.8*

%{_datadir}/ovn/ovn-nb.ovsschema

%{_datadir}/ovn/ovn-ic-nb.ovsschema

%{_datadir}/ovn/ovn-sb.ovsschema

%{_datadir}/ovn/ovn-ic-sb.ovsschema

%{_unitdir}/ovn-northd.service

%{ovnlibdir}/firewalld/services/ovn-central-firewall-service.xml

%files host

%{_bindir}/ovn-controller

%{_mandir}/man8/ovn-controller.8*

%{_unitdir}/ovn-controller.service

%{ovnlibdir}/firewalld/services/ovn-host-firewall-service.xml

%files vtep

%{_bindir}/ovn-controller-vtep

%{_mandir}/man8/ovn-controller-vtep.8*

%{_unitdir}/ovn-controller-vtep.service

%changelog

* Fri Dec 18 2020 Numan Siddique <nusiddiq@redhat.com> - 20.12.0-1

- Rebase to OVN v20.12.0.

- Re-backport patches for #1883957 and #1881826 as there are not in v20.12.0.

- Use ovs sources from master commit - 252e1e576443("dpdk: Update to use DPDK v20.11.").

* Tue Dec 15 2020 Numan Siddique <nusiddiq@redhat.com> - 20.09.0-23

- Backport "northd: Add ECMP support to router policies." (#1881826)

- Backport "Add missing documentation for router policy and ecmp sym reply stage." (#1881826)

* Mon Dec 14 2020 Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 20.09.0-22

- Backport "northd: add reject action for lb with no backends" (#1883957)

* Tue Dec 8 2020 Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 20.09.0-21

- Backport "northd: Fix iteration over vip backends." (#1904489)

* Tue Dec 1 2020 Dumitru Ceara <dceara@redhat.com> - 20.09.0-20

- Backport "pinctrl: Honor always_learn_from_arp_request for self created MAC_Bindings." (#1903199)

* Mon Nov 30 2020 Mark Michelson <mmichels@redhat.com> - 20.09.0-19

- Backport "Allow explicit setting of the SNAT zone on a gateway router" (#1892311)

- Backport "Clear port binding flows when datapath CT zone changes."

* Thu Nov 26 2020 Dumitru Ceara <dceara@redhat.com> - 20.09.0-18

* Backport "pinctrl: Fix segfault seen when creating mac_binding for local GARPs." (#1901880)

* Mon Nov 23 2020 Numan Siddique <nusiddiq@redhat.com> - 20.09.0-17

- Backport "Fix OVN update issue when ovn-controller is updated first from 20.06 to 20.09. (#1900484)

* Mon Nov 23 2020 Numan Siddique <nusiddiq@redhat.com> - 20.09.0-16

- Backport "controller: Allow pinctrl thread to handle packet-ins when version mismatch with northd." (#1899936)

- Backport memory leak fix patches.

* Sat Nov 21 2020 Numan Siddique <nusiddiq@redhat.com> - 20.09.0-15

- Backport "Provide the option to pin ovn-controller and ovn-northd to a specific version." (#1899936)

* Fri Nov 20 2020 Numan Siddique <nusiddiq@redhat.com> - 20.09.0-14

- Backport Load balancer hairpin improvement patches. (#1833373)

* Thu Nov 12 2020 Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 20.09.0-13

- Backport "northd: Fix lb_action when there are no active backends for lb health_check" (#1888445)

* Wed Nov 11 2020 Ihar Hrachyshka <ihrachys@redhat.com> - 20.09.0-12

- Backport "Allow VLAN traffic when LS:vlan-passthru=true" (#1846018)

* Wed Nov 11 2020 Numan Siddique <nusiddiq@redhat.com> - 20.09.0-11

- Backport "northd: Don't poll ovsdb before the connection is fully established" (#1896671)

* Thu Nov 5 2020 Dumitru Ceara <dceara@redhat.com> - 20.09.0-10

- Backport "pinctrl: Directly update MAC_Bindings created by self originated GARPs." (#1894478)

- Backport "ovn-northd: Limit self originated ARP/ND broadcast domain." (#1894478)

* Fri Oct 30 2020 Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 20.09.0-9

- Backport "dhcp: add iPXE support to OVN" (#1765506)

* Fri Oct 30 2020 Dumitru Ceara <dceara@redhat.com> - 20.09.0-8

- Backport "ovn-detrace: Only decode br-int OVS interfaces." (#1890803)

- Backport "ovn-detrace: Improve DB connection error messages." (#1890803)

* Fri Oct 23 2020 Dumitru Ceara <dceara@redhat.com> - 20.09.0-7

- Backport "ovn-northd: Handle IPv6 addresses with prefixes for port security." (#1856898)

* Tue Oct 20 2020 Numan Siddique <nusiddiq@redhat.com> - 20.09.0-6

- Backport "northd: Use 'enum ovn_stage' for the table value in the 'next' OVN action." (#1876990)

- Backport "ovn-trace: Don't assert for next(stage=ingress,..) (#1876990)

- Backport "actions: Add a new OVN action - reject {}." (#1876990)

- Backport "ovn-northd: Optimize logical flow generation for reject ACLs." (#1876990)

- Backport "ovn-trace: Handle IPv6 packets for tcp_reset action." (#1876990)

* Mon Oct 19 2020 Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 20.09.0-5

- Backport "controller: IPv6 Prefix-Delegation: introduce RENEW/REBIND msg support" (#1826686)

* Mon Oct 19 2020 Dumitru Ceara <dceara@redhat.com> - 20.09.0-4

- Backport "ofctrl.c: Fix duplicated flow handling in I-P while" (#1871931)

- Backport "ofctrl.c: Avoid repeatedly linking an installed flow and" (#1871931)

- Backport "ofctrl.c: Only merge actions for conjunctive flows." (#1871931)

- Backport "ofctrl.c: Do not change flow ordering when merging" (#1871931)

- Backport "ofctrl.c: Simplify active desired flow selection." (#1871931)

- Backport "ofctrl.c: Always log the most recent flow changes." (#1871931)

- Backport "ofctrl.c: Add a predictable resolution for conflicting" (#1871931)

* Fri Oct 9 2020 Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 20.09.0-3

- Backport "northd: properly reconfigure ipam when subnet is changed" (#1865866)

* Fri Oct 9 2020 Dumitru Ceara <dceara@redhat.com> - 20.09.0-2

- Backport "ovn-northd: Add localnet ports to Multicast_Groups created by IGMP_Group." (#1886314)

* Tue Sep 29 2020 Numan Siddique <nusiddiq@redhat.com> - 20.09.0-1

- Rebase to upstream v20.09.0.

* Mon Sep 28 2020 Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 20.06.2-15

- Backport "binding: Rely on qos_map for consider_localnet_lport" (#1878943)

- Backport "binding: fix localnet QoS configuration after I-P" (#1878943)

* Mon Sep 28 2020 Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 20.06.2-14

- Backport "ovn-nbctl: add --may-exist/--if-exists options for policy routing" (#1845109)

* Mon Sep 21 2020 Numan Siddique <nusiddiq@redhat.com> - 20.06.2-13

- Backport "ovn-ctl: Handle cluster db upgrades for run_(nb/sb)_ovsdb" (#1868392)

- Backport "northd: Add lflows to send all pkts to conntrack if LB is configured on a lswitch." (#1870359)

- Backport "ovn-northd: Fix router policy pkt mark over flow if the value is greater than signed int." (#1878248)

* Tue Sep 15 2020 Numan Siddique <nusiddiq@redhat.com> - 20.06.2-12

- Fixed the date typo in changelog.

* Tue Sep 15 2020 Numan Siddique <nusiddiq@redhat.com> - 20.06.2-11

- Backport "ovn-controller: Persist the conjunction ids allocated for conjuctive matches." (#1858878)

- Backport "I-P engine: Provide the option to store client data in engine ctx." (#1858878)

* Mon Sep 14 2020 Numan Siddique <nusiddiq@redhat.com> - 20.06.2-10

- Backport "ovn-northd: Fix multiple ARP replies for SNAT entries configured on a distributed router." (#1878451)

* Tue Sep 8 2020 Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 20.06.2-9

- Backport "ovn-ctl: introduce ovsdb-{n, s}b-wrapper options" (#1831558)

* Tue Sep 8 2020 Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 20.06.2-8

- Backport "Introduce DHCPDECLINE msg support to OVN DHCP server" (#1857563)

* Mon Sep 7 2020 Lorenzo Bianconi <lorenzo.bianconi@redhat.com> - 20.06.2-7

- Backport "northd: fix empty_lb_backends controller_event for IPv6" (#1875337)

* Fri Sep 4 2020 Dumitru Ceara <dceara@redhat.com> - 20.06.2-6

- Backport "chassis: Fix the way encaps are updated for a chassis record." (#1873032)

- Backport "chassis: Fix chassis_private record updates when the system-id changes." (#1873032)

* Fri Sep 4 2020 Dumitru Ceara <dceara@redhat.com> - 20.06.2-5

- Backport "lex: Allow unmasked bits in value/mask tokens." (#1812820)

- Backport "ovn-nbctl: Deal with nb_cfg overflows." (#1873455)

- Backport "pinctrl: Fix incorrect warning message for multicast querier." (#1875727)

* Wed Sep 2 2020 Dumitru Ceara <dceara@redhat.com> - 20.06.2-4

- Backport "ovn-northd: Rate limit missing chassis log." (#1874745)

* Mon Aug 31 2020 Dumitru Ceara <dceara@redhat.com> - 20.06.2-3

- Backport "ovn-controller: Fix incremental processing of Port_Binding deletes." (#1871961)

* Wed Aug 26 2020 Numan Siddique <nusiddiq@redhat.com> - 20.06.2-2

- Backport "Fix ovn-controller crash when a lport of type 'virtual' is deleted." (#1872681)

* Sat Aug 22 2020 Numan Siddique <nusiddiq@redhat.com> - 20.06.2-1

- Sync the OVN sources with the upstream v20.06.2 release and reorder

  the other patches.

* Fri Aug 21 2020 Numan Siddique <nusiddiq@redhat.com> - 20.06.1-18

- Backport "Avoid nb_cfg update notification flooding" (#1871054)

* Fri Aug 21 2020 Numan Siddique <nusiddiq@redhat.com> - 20.06.1-17

- Backport "Fix the data type for DHCP option tftp_server (66)" (#1871056)

- Backport "Add support for DHCP domain search option (119)" (#1871056)

* Thu Aug 20 2020 Numan Siddique <nusiddiq@redhat.com> - 20.06.1-16

- Backport "ovsdb-idl: Add function to reset min_index." (#1829109)

- Backport "Add northd and ovn-controller cluster status reset commands." (#1829109)

- Backport "Fix compilation error when configured with --enable-sparse." (#1829109)