Blame SOURCES/bz2064342-1-IPsrcaddr-dhcp-warning.patch

e87a70
From 6d2ed7615614ede093f097189876d0f08553a43e Mon Sep 17 00:00:00 2001
e87a70
From: Reid Wahl <nrwahl@protonmail.com>
e87a70
Date: Mon, 14 Feb 2022 22:23:39 -0800
e87a70
Subject: [PATCH] IPsrcaddr: Add warning about DHCP
e87a70
e87a70
If DHCP is enabled for the interface that serves OCF_RESKEY_ipaddress,
e87a70
then NetworkManager (and possibly dhclient in systems without NM;
e87a70
unsure) may later re-add a route that the IPsrcaddr resource replaced.
e87a70
This may cause the resource to fail or cause other unexpected behavior.
e87a70
e87a70
So far this has been observed with a default route, albeit with an edge
e87a70
case of a configuration (OCF_RESKEY_ipaddress on a different subnet)
e87a70
that may not be totally valid. There are likely to be other situations
e87a70
as well where DHCP can cause conflicts with IPsrcaddr's manual updates
e87a70
via iproute. The safest option is to use only static configuration for
e87a70
the involved interface.
e87a70
e87a70
Resolves: RHBZ#1654862
e87a70
e87a70
Signed-off-by: Reid Wahl <nrwahl@protonmail.com>
e87a70
---
e87a70
 heartbeat/IPsrcaddr | 6 ++++++
e87a70
 1 file changed, 6 insertions(+)
e87a70
e87a70
diff --git a/heartbeat/IPsrcaddr b/heartbeat/IPsrcaddr
e87a70
index ec868409f..fd7b6f68d 100755
e87a70
--- a/heartbeat/IPsrcaddr
e87a70
+++ b/heartbeat/IPsrcaddr
e87a70
@@ -99,6 +99,12 @@ meta_data() {
e87a70
 <longdesc lang="en">
e87a70
 Resource script for IPsrcaddr. It manages the preferred source address
e87a70
 modification. 
e87a70
+
e87a70
+Note: DHCP should not be enabled for the interface serving the preferred
e87a70
+source address. Enabling DHCP may result in unexpected behavior, such as
e87a70
+the automatic addition of duplicate or conflicting routes. This may
e87a70
+cause the IPsrcaddr resource to fail, or it may produce undesired
e87a70
+behavior while the resource continues to run.
e87a70
 </longdesc>
e87a70
 <shortdesc lang="en">Manages the preferred source address for outgoing IP packets</shortdesc>
e87a70