Blame SOURCES/bz2055016-1-IPsrcaddr-dhcp-warning.patch

811adb
From 6d2ed7615614ede093f097189876d0f08553a43e Mon Sep 17 00:00:00 2001
811adb
From: Reid Wahl <nrwahl@protonmail.com>
811adb
Date: Mon, 14 Feb 2022 22:23:39 -0800
811adb
Subject: [PATCH] IPsrcaddr: Add warning about DHCP
811adb
811adb
If DHCP is enabled for the interface that serves OCF_RESKEY_ipaddress,
811adb
then NetworkManager (and possibly dhclient in systems without NM;
811adb
unsure) may later re-add a route that the IPsrcaddr resource replaced.
811adb
This may cause the resource to fail or cause other unexpected behavior.
811adb
811adb
So far this has been observed with a default route, albeit with an edge
811adb
case of a configuration (OCF_RESKEY_ipaddress on a different subnet)
811adb
that may not be totally valid. There are likely to be other situations
811adb
as well where DHCP can cause conflicts with IPsrcaddr's manual updates
811adb
via iproute. The safest option is to use only static configuration for
811adb
the involved interface.
811adb
811adb
Resolves: RHBZ#1654862
811adb
811adb
Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
811adb
---
811adb
 heartbeat/IPsrcaddr | 6 ++++++
811adb
 1 file changed, 6 insertions(+)
811adb
811adb
diff --git a/heartbeat/IPsrcaddr b/heartbeat/IPsrcaddr
811adb
index ec868409f..fd7b6f68d 100755
811adb
--- a/heartbeat/IPsrcaddr
811adb
+++ b/heartbeat/IPsrcaddr
811adb
@@ -99,6 +99,12 @@ meta_data() {
811adb
 <longdesc lang="en">
811adb
 Resource script for IPsrcaddr. It manages the preferred source address
811adb
 modification. 
811adb
+
811adb
+Note: DHCP should not be enabled for the interface serving the preferred
811adb
+source address. Enabling DHCP may result in unexpected behavior, such as
811adb
+the automatic addition of duplicate or conflicting routes. This may
811adb
+cause the IPsrcaddr resource to fail, or it may produce undesired
811adb
+behavior while the resource continues to run.
811adb
 </longdesc>
811adb
 <shortdesc lang="en">Manages the preferred source address for outgoing IP packets</shortdesc>
811adb