> From: Denis V. Lunev <[email protected]> > > A container sees /proc/net/tcp and udp but gets ENOENT on tcp6 and udp6, > both at /proc/net and at /proc/<pid>/net. Applications that parse these > tables, like the .NET startup script in JE-76965, fail although IPv6 > works and ss lists the sockets over netlink. > > In vz7 all of tcp, tcp6, udp, udp6, udplite and udplite6 were created by > tcp_proc_register() and udp_proc_register(), which used the VE helper, > so one call covered every family. Upstream commit 37d849bb4294 > ("ipv{4,6}/tcp: simplify procfs registration") and commit a3d2599b2446 > ("ipv{4,6}/udp{,lite}: simplify proc registration") moved each family to > its own proc_create_net_data() call, and the port of the VE patch > converted only the IPv4 tcp and udp ones. udplite and udplite6 are > hidden the same way. icmp6 did not exist in vz7 and was never converted, > while its IPv4 twin icmp is visible. > > Register the five entries with the VE helpers. They are per-netns and > their seq iterators skip sockets of other namespaces, so a container > lists only its own sockets. > > https://virtuozzo.atlassian.net/browse/VSTOR-153793 > > Fixes: 68eae6367fdc ("ve/proc/net: virtualize all the network proc entries") > Reported-by: Andrii Mozharovskyi <[email protected]> > Feature: procfs: virtualize /proc/net/* entries > Signed-off-by: Denis V. Lunev <[email protected]>
Sashiko has reviewed this patch and found no issues. It looks great! -- Sashiko AI review ยท https://sashiko.vzint.dev/#/patchset/[email protected]?part=1 _______________________________________________ Devel mailing list [email protected] https://lists.openvz.org/mailman/listinfo/devel
