Properly decode the IFLA_INET6_CONF array in IFLA_AF_SPEC by matching up the array indices as defined in the Linux UAPI. This makes decoding a lot more robust by not silently relying on a "magic" sequence of attributes. Also enables easily decoding additional attributes in the future as needed.
Signed-off-by: Christoph Heiss <c.he...@proxmox.com> --- debian/patches/series | 2 +- ...ac-support-inet6-auto-and-accept_ra.patch} | 140 +++++++++++++----- 2 files changed, 107 insertions(+), 35 deletions(-) rename debian/patches/upstream/{0001-add-ipv6-slaac-support-inet6-auto-accept_ra.patch => 0001-add-ipv6-slaac-support-inet6-auto-and-accept_ra.patch} (82%) diff --git a/debian/patches/series b/debian/patches/series index 1945ba9..743e05e 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -11,5 +11,5 @@ pve/0010-main-ignore-dpkg-files-when-running-hook-scripts.patch pve/0011-nlmanager-addons-add-transparent-support-interface-a.patch pve/0012-addons-nlcache-set-interface-mtu-through-netlink-ins.patch pve/0013-addons-nlcache-set-interface-alias-through-netlink-i.patch -upstream/0001-add-ipv6-slaac-support-inet6-auto-accept_ra.patch +upstream/0001-add-ipv6-slaac-support-inet6-auto-and-accept_ra.patch upstream/0001-use-raw-strings-for-regex-to-fix-backslash-interpret.patch diff --git a/debian/patches/upstream/0001-add-ipv6-slaac-support-inet6-auto-accept_ra.patch b/debian/patches/upstream/0001-add-ipv6-slaac-support-inet6-auto-and-accept_ra.patch similarity index 82% rename from debian/patches/upstream/0001-add-ipv6-slaac-support-inet6-auto-accept_ra.patch rename to debian/patches/upstream/0001-add-ipv6-slaac-support-inet6-auto-and-accept_ra.patch index 4d5dbff..5a78d46 100644 --- a/debian/patches/upstream/0001-add-ipv6-slaac-support-inet6-auto-accept_ra.patch +++ b/debian/patches/upstream/0001-add-ipv6-slaac-support-inet6-auto-and-accept_ra.patch @@ -1,17 +1,17 @@ -From 38dadc7048726671b8e1bf6c63a3313720afeaf9 Mon Sep 17 00:00:00 2001 +From fbaf352df432f66429fd3d3144733b22e8317356 Mon Sep 17 00:00:00 2001 From: Alexandre Derumier <aderum...@odiso.com> Date: Tue, 9 May 2023 17:48:14 +0200 -Subject: [PATCH] add ipv6 slaac support (inet6 auto && accept_ra) +Subject: [PATCH] add ipv6 slaac support (inet6 auto and accept_ra) + +First, properly decode the IFLA_INET6_CONF array in IFLA_AF_SPEC by +matching up the array indices as defined in the Linux UAPI. This should fix a lot of users request in the forum, and also fix upgrade from ifupdown1 to ifupdown2 if user have "inet6 auto" in configuration. (default on stock debian install, this break pbs install on top of stock debian) -upstream pull request: - -https://github.com/CumulusNetworks/ifupdown2/pull/259 -Signed-off-by: Alexandre Derumier <aderum...@odiso.com> -Signed-off-by: Thomas Lamprecht <t.lampre...@proxmox.com> +Upstream-PR: https://github.com/CumulusNetworks/ifupdown2/pull/325 +Co-Authored-By: Alexandre Derumier <aderum...@odiso.com> Signed-off-by: Christoph Heiss <c.he...@proxmox.com> --- etc/network/ifupdown2/addons.conf | 2 + @@ -22,8 +22,8 @@ Signed-off-by: Christoph Heiss <c.he...@proxmox.com> ifupdown2/ifupdown/networkinterfaces.py | 2 +- ifupdown2/lib/nlcache.py | 63 ++++++++- ifupdown2/man/interfaces.5.rst | 9 ++ - ifupdown2/nlmanager/nlpacket.py | 24 +++- - 9 files changed, 372 insertions(+), 26 deletions(-) + ifupdown2/nlmanager/nlpacket.py | 89 ++++++++++++- + 9 files changed, 437 insertions(+), 26 deletions(-) create mode 100644 ifupdown2/addons/auto.py diff --git a/etc/network/ifupdown2/addons.conf b/etc/network/ifupdown2/addons.conf @@ -47,7 +47,7 @@ index a8f2317..5a3964d 100644 down,address down,usercmds diff --git a/ifupdown2/addons/address.py b/ifupdown2/addons/address.py -index c19b138..3ab8309 100644 +index d158c44..3196a5e 100644 --- a/ifupdown2/addons/address.py +++ b/ifupdown2/addons/address.py @@ -193,6 +193,18 @@ class address(AddonWithIpBlackList, moduleBase): @@ -197,7 +197,7 @@ index c19b138..3ab8309 100644 return if not user_configured_ipv6_addrgen: -@@ -1269,7 +1343,7 @@ class address(AddonWithIpBlackList, moduleBase): +@@ -1271,7 +1345,7 @@ class address(AddonWithIpBlackList, moduleBase): if not self.cache.link_exists(ifaceobj.name): return addr_method = ifaceobj.addr_method @@ -206,7 +206,7 @@ index c19b138..3ab8309 100644 if ifaceobj.get_attr_value_first('address-purge')=='no': addrlist = ifaceobj.get_attr_value('address') for addr in addrlist or []: -@@ -1382,6 +1456,22 @@ class address(AddonWithIpBlackList, moduleBase): +@@ -1384,6 +1458,22 @@ class address(AddonWithIpBlackList, moduleBase): ifaceobjcurr.update_config_with_status('mpls-enable', running_mpls_enable, mpls_enable != running_mpls_enable) @@ -229,7 +229,7 @@ index c19b138..3ab8309 100644 return def query_check_ipv6_addrgen(self, ifaceobj, ifaceobjcurr): -@@ -1452,7 +1542,7 @@ class address(AddonWithIpBlackList, moduleBase): +@@ -1454,7 +1544,7 @@ class address(AddonWithIpBlackList, moduleBase): def _query_check_address(self, ifaceobj, ifaceobjcurr, ifaceobj_getfunc): """ ifquery-check: attribute: "address" """ @@ -592,41 +592,113 @@ index 262d726..ca461ea 100644 source /etc/network/interfaces.d/* diff --git a/ifupdown2/nlmanager/nlpacket.py b/ifupdown2/nlmanager/nlpacket.py -index efc4c4e..95d59dc 100644 +index efc4c4e..6a0fef2 100644 --- a/ifupdown2/nlmanager/nlpacket.py +++ b/ifupdown2/nlmanager/nlpacket.py -@@ -1818,6 +1818,15 @@ class AttributeIFLA_AF_SPEC(Attribute): +@@ -1691,6 +1691,71 @@ class AttributeIFLA_AF_SPEC(Attribute): + Link.IFLA_BRIDGE_VLAN_INFO: (vflags, vlanid) + } + """ ++ ++ # from /usr/include/linux/ipv6.h ++ # index values for entries in Link.IFLA_INET6_CONF values ++ IPV6_DEVCONF_FORWARDING = 0 ++ IPV6_DEVCONF_HOPLIMIT = 1 ++ IPV6_DEVCONF_MTU6 = 2 ++ IPV6_DEVCONF_ACCEPT_RA = 3 ++ IPV6_DEVCONF_ACCEPT_REDIRECTS = 4 ++ IPV6_DEVCONF_AUTOCONF = 5 ++ IPV6_DEVCONF_DAD_TRANSMITS = 6 ++ IPV6_DEVCONF_RTR_SOLICITS = 7 ++ IPV6_DEVCONF_RTR_SOLICIT_INTERVAL = 8 ++ IPV6_DEVCONF_RTR_SOLICIT_DELAY = 9 ++ IPV6_DEVCONF_USE_TEMPADDR = 10 ++ IPV6_DEVCONF_TEMP_VALID_LFT = 11 ++ IPV6_DEVCONF_TEMP_PREFERED_LFT = 12 ++ IPV6_DEVCONF_REGEN_MAX_RETRY = 13 ++ IPV6_DEVCONF_MAX_DESYNC_FACTOR = 14 ++ IPV6_DEVCONF_MAX_ADDRESSES = 15 ++ IPV6_DEVCONF_FORCE_MLD_VERSION = 16 ++ IPV6_DEVCONF_ACCEPT_RA_DEFRTR = 17 ++ IPV6_DEVCONF_ACCEPT_RA_PINFO = 18 ++ IPV6_DEVCONF_ACCEPT_RA_RTR_PREF = 19 ++ IPV6_DEVCONF_RTR_PROBE_INTERVAL = 20 ++ IPV6_DEVCONF_ACCEPT_RA_RT_INFO_MAX_PLEN = 21 ++ IPV6_DEVCONF_PROXY_NDP = 22 ++ IPV6_DEVCONF_OPTIMISTIC_DAD = 23 ++ IPV6_DEVCONF_ACCEPT_SOURCE_ROUTE = 24 ++ IPV6_DEVCONF_MC_FORWARDING = 25 ++ IPV6_DEVCONF_DISABLE_IPV6 = 26 ++ IPV6_DEVCONF_ACCEPT_DAD = 27 ++ IPV6_DEVCONF_FORCE_TLLAO = 28 ++ IPV6_DEVCONF_NDISC_NOTIFY = 29 ++ IPV6_DEVCONF_MLDV1_UNSOLICITED_REPORT_INTERVAL = 30 ++ IPV6_DEVCONF_MLDV2_UNSOLICITED_REPORT_INTERVAL = 31 ++ IPV6_DEVCONF_SUPPRESS_FRAG_NDISC = 32 ++ IPV6_DEVCONF_ACCEPT_RA_FROM_LOCAL = 33 ++ IPV6_DEVCONF_USE_OPTIMISTIC = 34 ++ IPV6_DEVCONF_ACCEPT_RA_MTU = 35 ++ IPV6_DEVCONF_STABLE_SECRET = 36 ++ IPV6_DEVCONF_USE_OIF_ADDRS_ONLY = 37 ++ IPV6_DEVCONF_ACCEPT_RA_MIN_HOP_LIMIT = 38 ++ IPV6_DEVCONF_IGNORE_ROUTES_WITH_LINKDOWN = 39 ++ IPV6_DEVCONF_DROP_UNICAST_IN_L2_MULTICAST = 40 ++ IPV6_DEVCONF_DROP_UNSOLICITED_NA = 41 ++ IPV6_DEVCONF_KEEP_ADDR_ON_DOWN = 42 ++ IPV6_DEVCONF_RTR_SOLICIT_MAX_INTERVAL = 43 ++ IPV6_DEVCONF_SEG6_ENABLED = 44 ++ IPV6_DEVCONF_SEG6_REQUIRE_HMAC = 45 ++ IPV6_DEVCONF_ENHANCED_DAD = 46 ++ IPV6_DEVCONF_ADDR_GEN_MODE = 47 ++ IPV6_DEVCONF_DISABLE_POLICY = 48 ++ IPV6_DEVCONF_ACCEPT_RA_RT_INFO_MIN_PLEN = 49 ++ IPV6_DEVCONF_NDISC_TCLASS = 50 ++ IPV6_DEVCONF_RPL_SEG_ENABLED = 51 ++ IPV6_DEVCONF_RA_DEFRTR_METRIC = 52 ++ IPV6_DEVCONF_IOAM6_ENABLED = 53 ++ IPV6_DEVCONF_IOAM6_ID = 54 ++ IPV6_DEVCONF_IOAM6_ID_WIDE = 55 ++ IPV6_DEVCONF_NDISC_EVICT_NOCARRIER = 56 ++ IPV6_DEVCONF_ACCEPT_UNTRACKED_NA = 57 ++ IPV6_DEVCONF_ACCEPT_RA_MIN_LFT = 58 ++ IPV6_DEVCONF_FORCE_FORWARDING = 59 ++ ++ + def __init__(self, atype, string, family, logger): + Attribute.__init__(self, atype, string, logger) + self.family = family +@@ -1818,6 +1883,17 @@ class AttributeIFLA_AF_SPEC(Attribute): */ """ -+ #only first attributes used in any kernel. -+ ipv6_devconf = ['forwarding', -+ 'hop_limit', -+ 'mtu6', -+ 'accept_ra', -+ 'accept_redirects', -+ 'autoconf', -+ ] ++ ++ # maps IFLA_INET6_CONF index to key name in result ++ ipv6_devconf_map = { ++ self.IPV6_DEVCONF_FORWARDING: 'forwarding', ++ self.IPV6_DEVCONF_HOPLIMIT: 'hop_limit', ++ self.IPV6_DEVCONF_MTU6: 'mtu6', ++ self.IPV6_DEVCONF_ACCEPT_RA: 'accept_ra', ++ self.IPV6_DEVCONF_ACCEPT_REDIRECTS: 'accept_redirects', ++ self.IPV6_DEVCONF_AUTOCONF: 'autoconf', ++ } + self.decode_length_type(data) self.value = {} -@@ -1896,8 +1905,21 @@ class AttributeIFLA_AF_SPEC(Attribute): +@@ -1896,8 +1972,19 @@ class AttributeIFLA_AF_SPEC(Attribute): (inet6_attr_length, inet6_attr_type) = unpack('=HH', sub_attr_data[:4]) inet6_attr_end = padded_length(inet6_attr_length) + if inet6_attr_type == Link.IFLA_INET6_CONF: + inet6conf_data = sub_attr_data[4:inet6_attr_end] -+ index = 0 + result = {} -+ while inet6conf_data: -+ (value, undef) = unpack('=HH', inet6conf_data[:4]) -+ result[ipv6_devconf[index]] = value -+ inet6conf_data = inet6conf_data[4:] -+ index = index + 1 -+ if index >= len(ipv6_devconf): -+ inet6_attr[inet6_attr_type] = result -+ break ++ ++ for index in ipv6_devconf_map: ++ offset = index * 4 ++ (value, undef) = unpack('=HH', inet6conf_data[offset:offset + 4]) ++ result[ipv6_devconf_map[index]] = value ++ ++ inet6_attr[inet6_attr_type] = result + # 1 byte attr - if inet6_attr_type == Link.IFLA_INET6_ADDR_GEN_MODE: @@ -635,5 +707,5 @@ index efc4c4e..95d59dc 100644 # nlmanager doesn't support multiple kernel version -- -2.49.0 +2.50.1 -- 2.50.1 _______________________________________________ pve-devel mailing list pve-devel@lists.proxmox.com https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel