36673774ee
This commit updates iproute from 5.9 to 5.12, iptables from 1.4.21 to 1.8.4, and libnftnl from 1.0.8 to 1.1.5: - iproute 5.9 does not make use of libbpf, which causes the 'tc' utility (provided by iproute-tc) to report BTF debugging symbol-related warnings when eBPF programs are used with tc by the kernel's eBPF sample test programs, even though the programs appear to work: "BTF debug data section '.BTF' rejected: Invalid argument (22)!". - iptables 1.4.21 does not support the --object-pinned option, which is required to be able to use eBPF programs to match packets. - libnftnl >= 1.1.5 is a dependency for recent versions of iptables, and the version of libnftnl in StarlingX's CentOS 7 is 1.0.8. The versions which are used by this commit are the latest versions in CentOS 8-Stream as of this writing. Notes: - iptables software package bundles a version of ebtables different than the legacy version already included in StarlingX. The legacy version supports the broute table and the BROUTING chain and string matching, whereas the iptables version does not. The legacy version is deprecated by this commit based on feedback received from colleagues, mainly to avoid unexpected incompatibilities between ebtables-legacy and iptables' netfilter/nft-based versions. Verification: - All-in-One simplex installation and bootstrap was carried out successfully. - Installation and bootstrap was successful on two separate systems: One system consisting of 2 controller hosts, 4 compute hosts and 2 storage hosts, and another system consisting of 2 controller hosts and 2 compute hosts. - Configuration of aggregated links (after using ifenslave manually) and configuration of virtual function (VF) interfaces (also manually set up) were carried out with the iproute tools successfully as basic sanity tests. - The results of basic ebtables commands (insertion and removal of DROP rules) were observed in "ebtables -L" output and confirmed to take effect in a test bed consisting of two network namespaces connected by bridged interfaces, as a basic sanity test. - Sample eBPF test programs and scripts shipped with the v5.10 kernel were executed successfully, with the caveat that there is a need to install a recent version of LLVM to compile the eBPF test programs. (I built LLVM-13.0 from scratch.) Partial-Bug: #1949217 Depends-On: I24bb7c60e353643add5e63ae7ea7c6516d07c7bf Depends-On: I12d20797db91fecdac409b0535632ac97bd6ad47 Depends-On: If95c2d24c98cb2add5e24548bc45f505c94b4b79 Signed-off-by: M. Vefa Bicakci <vefa.bicakci@windriver.com> Change-Id: I63d557112c653d59b88ac3a4798dee0e89246612 |
||
|---|---|---|
| base | ||
| bmc/Redfishtool | ||
| ceph/ceph | ||
| config | ||
| database | ||
| devstack | ||
| doc | ||
| docker/python-docker/centos | ||
| filesystem | ||
| gpu/gpu-operator | ||
| grub | ||
| kubernetes | ||
| ldap | ||
| logging/logrotate/centos | ||
| networking | ||
| python | ||
| releasenotes | ||
| requests-toolbelt | ||
| security | ||
| storage-drivers | ||
| tools | ||
| virt | ||
| .gitignore | ||
| .gitreview | ||
| .yamllint | ||
| .zuul.yaml | ||
| CONTRIBUTORS.wrs | ||
| LICENSE | ||
| README.rst | ||
| bindep.txt | ||
| centos_build_layer.cfg | ||
| centos_extra_downloads.lst | ||
| centos_guest_image.inc | ||
| centos_guest_image_rt.inc | ||
| centos_iso_image.inc | ||
| centos_pkg_dirs | ||
| centos_pkg_dirs_installer | ||
| centos_pkg_dirs_rt | ||
| centos_srpms_3rdparties.lst | ||
| centos_srpms_centos.lst | ||
| centos_stable_docker_images.inc | ||
| centos_stable_wheels.inc | ||
| centos_tarball-dl.lst | ||
| debian_build_layer.cfg | ||
| debian_pkg_dirs | ||
| distroless_stable_docker_images.inc | ||
| pylint.rc | ||
| test-requirements.txt | ||
| tox.ini | ||
README.rst
integ
StarlingX Integration