mirror of
https://passt.top/passt
synced 2025-06-11 01:55:34 +02:00
0470170247
It might not be feasible for users to start passt-repair after passt is started, on a migration target, but before the migration process starts. For instance, with libvirt, the guest domain (and, hence, passt) is started on the target as part of the migration process. At least for the moment being, there's no hook a libvirt user (including KubeVirt) can use to start passt-repair before the migration starts. Add a directory watch using inotify: if PATH is a directory, instead of connecting to it, we'll watch for a .repair socket file to appear in it, and then attempt to connect to that socket. Signed-off-by: Stefano Brivio <sbrivio@redhat.com> Reviewed-by: David Gibson <david@gibson.dropbear.id.au>
74 lines
2.5 KiB
Groff
74 lines
2.5 KiB
Groff
.\" SPDX-License-Identifier: GPL-2.0-or-later
|
|
.\" Copyright (c) 2025 Red Hat GmbH
|
|
.\" Author: Stefano Brivio <sbrivio@redhat.com>
|
|
.TH passt-repair 1
|
|
|
|
.SH NAME
|
|
.B passt-repair
|
|
\- Helper setting TCP_REPAIR socket options for \fBpasst\fR(1)
|
|
|
|
.SH SYNOPSIS
|
|
.B passt-repair
|
|
\fIPATH\fR
|
|
|
|
.SH DESCRIPTION
|
|
|
|
.B passt-repair
|
|
is a privileged helper setting and clearing repair mode on TCP sockets on behalf
|
|
of \fBpasst\fR(1), as instructed via single-byte commands over a UNIX domain
|
|
socket.
|
|
|
|
It can be used to migrate TCP connections between guests without granting
|
|
additional capabilities to \fBpasst\fR(1) itself: to migrate TCP connections,
|
|
\fBpasst\fR(1) leverages repair mode, which needs the \fBCAP_NET_ADMIN\fR
|
|
capability (see \fBcapabilities\fR(7)) to be set or cleared.
|
|
|
|
If \fIPATH\fR represents a UNIX domain socket, \fBpasst-repair\fR(1) attempts to
|
|
connect to it. If it is a directory, \fBpasst-repair\fR(1) waits until a file
|
|
ending with \fI.repair\fR appears in it, and then attempts to connect to it.
|
|
|
|
.SH PROTOCOL
|
|
|
|
\fBpasst-repair\fR(1) connects to \fBpasst\fR(1) using the socket specified via
|
|
\fI--repair-path\fR option in \fBpasst\fR(1) itself. By default, the name is the
|
|
same as the UNIX domain socket used for guest communication, suffixed by
|
|
\fI.repair\fR.
|
|
|
|
The messages consist of one 8-bit signed integer that can be \fITCP_REPAIR_ON\fR
|
|
(1), \fITCP_REPAIR_OFF\fR (0), or \fITCP_REPAIR_OFF_NO_WP\fR (-1), as defined by
|
|
the Linux kernel user API, and one to SCM_MAX_FD (253) sockets as SCM_RIGHTS
|
|
(see \fBunix\fR(7)) ancillary message, sent by the server, \fBpasst\fR(1).
|
|
|
|
The client, \fBpasst-repair\fR(1), replies with the same byte (and no ancillary
|
|
message) to indicate success, and closes the connection on failure.
|
|
|
|
The server closes the connection on error or completion.
|
|
|
|
.SH NOTES
|
|
|
|
\fBpasst-repair\fR(1) can be granted the \fBCAP_NET_ADMIN\fR capability
|
|
(preferred, as it limits privileges to the strictly necessary ones), or it can
|
|
be run as root.
|
|
|
|
.SH AUTHOR
|
|
|
|
Stefano Brivio <sbrivio@redhat.com>.
|
|
|
|
.SH REPORTING BUGS
|
|
|
|
Please report issues on the bug tracker at https://bugs.passt.top/, or
|
|
send a message to the passt-user@passt.top mailing list, see
|
|
https://lists.passt.top/.
|
|
|
|
.SH COPYRIGHT
|
|
|
|
Copyright (c) 2025 Red Hat GmbH.
|
|
|
|
\fBpasst-repair\fR is free software: you can redistribute them and/or modify
|
|
them under the terms of the GNU General Public License as published by the Free
|
|
Software Foundation, either version 2 of the License, or (at your option) any
|
|
later version.
|
|
|
|
.SH SEE ALSO
|
|
|
|
\fBpasst\fR(1), \fBqemu\fR(1), \fBcapabilities\fR(7), \fBunix\fR(7).
|