passt

mirrors/passt

Fork 0

mirror of https://passt.top/passt synced 2025-06-19 13:35:34 +02:00

Commit graph

0293c6f4a3 fedora: Hide restorecon(8) errors in post-transaction scriptlet master 2025_06_11.0293c6f Stefano Brivio 2025-06-10 17:06:43 +02:00
98da8a9469 fedora: Add container-selinux as dependency for passt-selinux Stefano Brivio 2025-06-10 16:51:46 +02:00
754c6d7286 flow, repair: Proper error handling for missing passt-repair helper on target 2025_06_06.754c6d7 Stefano Brivio 2025-06-04 18:23:13 +02:00
a2088fef36 fedora: Depend on SELinux tools and policy version, drop circular dependency Vit Mojzis 2025-05-30 16:37:46 +00:00
d21bcd9f7c fedora: Call %selinux_modules_* macros only once Petr Lautrbach 2025-05-30 08:09:14 +00:00
081df67d1f conf: flush stdout before early exit Jon Maloy 2025-05-29 13:08:58 -04:00
bcb5596005 passt-repair: Fix missing newlines in error messages Stefano Brivio 2025-05-23 15:10:06 +02:00
2c883498b5 Correct various function comment headers Laurent Vivier 2025-05-19 10:52:56 +02:00
515b5ee53a tap: Avoid bogus missingReturn cppcheck warning in tap_l2_max_len() Stefano Brivio 2025-05-15 18:05:01 +02:00
e019323538 fedora: Separately restore context for /run/user in %posttrans selinux Stefano Brivio 2025-05-22 23:04:15 +02:00
7aeda16a78 selinux: Transition to pasta_t in containers Max Chernoff 2025-05-24 01:16:57 -06:00
493ef8c59f conf: Debug build kubevirt_debug Stefano Brivio 2025-05-22 10:55:05 +02:00
3262c9b088 iov: Standardize function comment headers Laurent Vivier 2025-05-16 14:42:28 +02:00
b915375a42 virtio: Correct and align comment headers Laurent Vivier 2025-05-16 14:42:27 +02:00
2fd0944f21 vhost_user: Correct and align function comment headers Laurent Vivier 2025-05-16 14:42:26 +02:00
2046976866 codespell: Correct typos in comments and error message Laurent Vivier 2025-05-15 11:41:51 +02:00
4234ace84c test: Display count of skipped tests in status and summary Laurent Vivier 2025-05-14 15:45:09 +02:00
2d3d69c5c3 flow: Fix clang error (clang-analyzer-security.PointerSub) Laurent Vivier 2025-05-13 11:41:02 +02:00
0f7bf10b0a ndp: Fix Clang analyzer warning (clang-analyzer-security.PointerSub) Laurent Vivier 2025-05-13 11:41:01 +02:00
a6b9832e49 virtio: Fix Clang warning (bugprone-sizeof-expression, cert-arr39-c) Laurent Vivier 2025-05-13 11:41:00 +02:00
570e7b4454 dhcpv6: fix GCC error (unterminated-string-initialization) Laurent Vivier 2025-05-13 11:40:59 +02:00
8ec134109e flow: close socket fd on error 2025_05_12.8ec1341 Laurent Vivier 2025-05-12 18:47:00 +02:00
92d5d68013 flow: fix wrong macro name in comments Laurent Vivier 2025-05-06 16:13:25 +02:00
eea8a76caf flow: fix podman issue #26073 2025_05_07.eea8a76 Laurent Vivier 2025-05-07 14:36:34 +02:00
d299cf7646 Likely fix by Laurent podman_26073 Stefano Brivio 2025-05-07 11:33:38 +02:00
44bd27e6ae Additional debugging suggested by Laurent Stefano Brivio 2025-05-06 19:09:22 +02:00
da236e0fe9 Debugging changes for Podman issue #26073 Stefano Brivio 2025-05-06 17:07:52 +02:00
587980ca1e udp: Actually discard datagrams we can't forward 2025_05_03.587980c Stefano Brivio 2025-05-02 21:56:30 +02:00
f0021f9e1d fwd: fix doc typo Emanuel Valasiadis 2025-05-02 15:31:39 +02:00
93394f4ef0 selinux: Add getattr to class udp_socket Janne Grunau 2025-05-01 11:54:07 +02:00
11be695f5c flow: fix podman issue #25959 Laurent Vivier 2025-04-30 18:05:25 +02:00
6a96cd97a5 util: Fix typo, ASSSERTION -> ASSERTION Stefano Brivio 2025-04-30 16:59:13 +02:00
ea0a1240df passt-repair: Hide bogus gcc warning from -Og Stefano Brivio 2025-04-30 16:48:34 +02:00
9c23934536 Debugging changes for Podman issue #25959 podman_25959 Stefano Brivio 2025-04-29 17:47:15 +02:00
aa1cc89228 conf: allow --fd 0 Alyssa Ross 2025-04-26 10:44:25 +02:00
436afc3044 udp: Translate offender addresses for ICMP messages David Gibson 2025-04-17 11:55:43 +10:00
08e617ec2b udp: Rework offender address handling in udp_sock_recverr() David Gibson 2025-04-17 11:55:42 +10:00
4668e91378 treewide: Improve robustness against sockaddrs of unexpected family David Gibson 2025-04-17 11:55:41 +10:00
9128f6e8f4 fwd: Split out helpers for port-independent NAT David Gibson 2025-04-17 11:55:40 +10:00
2340bbf867 udp: Propagate errors on listening and brand new sockets 2025_04_15.2340bbf David Gibson 2025-04-15 17:16:24 +10:00
cfc0ee145a udp: Minor re-organisation of udp_sock_recverr() David Gibson 2025-04-15 17:16:23 +10:00
f107a86cc0 udp: Add udp_pktinfo() helper David Gibson 2025-04-15 17:16:22 +10:00
04984578b0 udp: Deal with errors as we go in udp_sock_fwd() David Gibson 2025-04-15 17:16:21 +10:00
3f995586b3 udp: Pass socket & flow information direction to error handling functions David Gibson 2025-04-15 17:16:20 +10:00
1bb8145c22 udp: Be quieter about errors on UDP receive David Gibson 2025-04-15 17:16:19 +10:00
baf049f8e0 udp: Fix breakage of UDP error handling by PKTINFO support David Gibson 2025-04-15 17:16:18 +10:00
50249086a9 conf: Honour --dns-forward for local resolver even with --no-map-gw Stefano Brivio 2025-04-11 10:50:00 +02:00
bbff3653d6 conf: Split add_dns_resolv() into separate IPv4 and IPv6 versions Stefano Brivio 2025-04-11 09:58:31 +02:00
59cc89f4cc udp, udp_flow: Track our specific address on socket interfaces David Gibson 2025-04-10 17:16:40 +10:00
695c62396e inany: Improve ASSERT message for bad socket family David Gibson 2025-04-10 17:16:39 +10:00
f4b0dd8b06 udp: Use PKTINFO cmsgs to get destination address for received datagrams David Gibson 2025-04-10 17:16:38 +10:00
6693fa1158 tcp_splice: Don't clobber errno before checking for EAGAIN David Gibson 2025-04-09 16:35:41 +10:00
d3f33f3b8e tcp_splice: Don't double count bytes read on EINTR David Gibson 2025-04-09 16:35:40 +10:00
ffbef85e97 conf: Add missing return in conf_nat(), fix --map-guest-addr none Stefano Brivio 2025-04-08 07:57:51 +02:00
06ef64cdb7 udp_flow: Save 8 bytes in struct udp_flow on 64-bit architectures Stefano Brivio 2025-04-08 07:49:55 +02:00
9725e79888 udp_flow: Don't discard packets that arrive between bind() and connect() David Gibson 2025-04-04 21:15:42 +11:00
9eb5406260 udp: Fold udp_splice_prepare and udp_splice_send into udp_sock_to_sock David Gibson 2025-04-04 21:15:41 +11:00
bd6a41ee76 udp: Rework udp_listen_sock_data() into udp_sock_fwd() David Gibson 2025-04-04 21:15:40 +11:00
159beefa36 udp_flow: Take pif and port as explicit parameters to udp_flow_from_sock() David Gibson 2025-04-04 21:15:39 +11:00
fd844a90bc udp: Move UDP_MAX_FRAMES to udp.c David Gibson 2025-04-04 21:15:38 +11:00
fc6ee68ad3 udp: Merge vhost-user and "buf" listening socket paths David Gibson 2025-04-04 21:15:37 +11:00
0304dd9c34 udp: Split spliced forwarding path from udp_buf_reply_sock_data() David Gibson 2025-04-04 21:15:36 +11:00
5221e177e1 udp: Parameterize number of datagrams handled by udp_*_reply_sock_data() David Gibson 2025-04-04 21:15:35 +11:00
3a0881dfd0 udp: Don't bother to batch datagrams from "listening" socket David Gibson 2025-04-04 21:15:34 +11:00
84ab1305fa udp: Polish udp_vu_sock_info() and remove from vu specific code David Gibson 2025-04-04 21:15:33 +11:00
1d7bbb101a udp: Make udp_sock_recv() take max number of frames as a parameter David Gibson 2025-04-04 21:15:32 +11:00
d74b5a7c10 udp: Use connect()ed sockets for initiating side David Gibson 2025-04-04 21:15:31 +11:00
a7775e9550 udp: support traceroute in direction tap-socket Jon Maloy 2025-04-05 15:21:26 -04:00
06784d7fc6 passt-repair: Ensure that read buffer is NULL-terminated Stefano Brivio 2025-04-03 19:01:02 +02:00
684870a766 udp: Correct some seccomp filter annotations David Gibson 2025-04-01 19:57:10 +11:00
76e554d9ec udp: Simplify updates to UDP flow timestamp David Gibson 2025-04-01 19:57:09 +11:00
8aa2d90c8d udp: Remove redundant udp_at_sidx() call in udp_tap_handler() David Gibson 2025-04-01 19:57:08 +11:00
3d41e4d838 passt-repair: Correct off-by-one error verifying name David Gibson 2025-04-02 15:43:40 +11:00
dec3d73e1e migrate, tcp: bind() migrated sockets in repair mode David Gibson 2025-04-02 14:13:19 +11:00
6bfc60b095 platform requirements: Add test for address conflicts with TCP_REPAIR David Gibson 2025-04-02 14:13:18 +11:00
8e32881ef1 platform requirements: Add attributes to die() function David Gibson 2025-04-02 14:13:17 +11:00
2ed2d59def platform requirements: Fix clang-tidy warning David Gibson 2025-04-02 14:13:16 +11:00
8fed562e63 passt-repair: Correct off-by-one error verifying name c9s David Gibson 2025-04-02 15:28:04 +11:00
dadf2aa269 migrate, tcp: bind() migrated sockets in repair mode David Gibson 2025-04-02 13:51:22 +11:00
d9a7f1b008 pasta, passt-repair: Support multiple events per read() in inotify handlers Stefano Brivio 2025-03-28 11:39:58 +11:00
37550961ea tcp: Flush socket before checking for more data in active close state Stefano Brivio 2025-03-19 17:57:45 +01:00
53f2ed715e migrate: Bump migration version number David Gibson 2025-03-19 16:14:23 +11:00
8c5727bd9b migrate, tcp: Migrate RFC 7323 timestamp David Gibson 2025-03-19 16:14:22 +11:00
4c6b69f359 flow: Add flow_perror() helper David Gibson 2025-02-18 19:59:24 +11:00
8a938c5a2c migrate, tcp: More careful marshalling of mss parameter during migration David Gibson 2025-03-19 16:14:21 +11:00
f45aac7aed passt-repair: Fix build with -Werror=format-security Stefano Brivio 2025-03-18 17:18:47 +01:00
283b18f6b1 flow, repair: Wait for a short while for passt-repair to connect Stefano Brivio 2025-03-06 20:00:51 +01:00
24117b65dc passt-repair: Add directory watch Stefano Brivio 2025-03-07 23:27:03 +01:00
b6eb6708cd selinux: Fixes/workarounds for passt and passt-repair, mostly for libvirt usage Stefano Brivio 2025-02-28 01:14:01 +01:00
228542ddc6 tcp: Send RST in response to guest packets that match no connection David Gibson 2025-03-05 15:32:30 +11:00
9d47c2ff3a tap: Consider IPv6 flow label when building packet sequences David Gibson 2025-03-05 15:32:29 +11:00
d4f8eb722f ip: Helpers to access IPv6 flow label David Gibson 2025-03-05 15:32:28 +11:00
154880ef09 migrate, tcp: Don't flow_alloc_cancel() during incoming migration David Gibson 2025-02-27 16:55:17 +11:00
44eed5c950 tcp: Unconditionally move to CLOSED state on tcp_rst() David Gibson 2025-02-27 16:55:16 +11:00
4b8660b3d5 tcp: Correct error code handling from tcp_flow_repair_socket() David Gibson 2025-02-27 16:55:15 +11:00
83f95ade5b migrate, flow: Don't attempt to migrate TCP flows without passt-repair David Gibson 2025-02-27 16:55:14 +11:00
2aa1b789b4 migrate, flow: Trivially succeed if migrating with no flows David Gibson 2025-02-27 16:55:13 +11:00
e5575743d9 selinux: Drop user_namespace create allow rules Stefano Brivio 2023-08-21 17:52:28 +02:00
3de5af6e41 udp: Improve name of UDP related ICMP sending functions David Gibson 2025-03-28 14:34:15 +11:00
025a3c2686 udp: Don't attempt to forward ICMP socket errors to other sockets David Gibson 2025-03-28 14:34:14 +11:00