March 2023 - user

passt: new version 2023_03_29.b10b983 available
by Stefano Brivio 30 Mar '23

30 Mar '23

The new version with tag 2023_03_29.b10b983 includes the following changes: b10b983 fedora: Adjust path for SELinux policy and interface file to latest guidelines 387f4ac fedora: Don't install useless SELinux interface file for pasta dafd92d selinux: Drop useless interface file for pasta 98a9a7d conf: Allow binding to ports on an interface without a specific address 33d88f7 tcp: Clear ACK_FROM_TAP_DUE also on unchanged ACK sequence from peer 4e73e9b tcp: Don't special case the handling of the ack of a syn 085672f tcp: Clarify allowed state for tcp_data_from_tap() https://passt.top/passt/log/?qt=range&q=2023_03_21.1ee2f7c..2023_03_29.b10b… Packages: - Debian tracker: https://tracker.debian.org/pkg/passt - Copr (CentOS Stream, EPEL, Fedora, Mageia, openSUSE): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/5727640/ permanent mirror: https://passt.top/builds/copr/0^20230329.gb10b983/ - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Ubuntu tracker: https://packages.ubuntu.com/lunar/passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-g02130bb-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_02130bb-1_all.deb -- Stefano

1 0

Failed to open tun socket in namespace
by Gianluca Stivan 27 Mar '23

27 Mar '23

Hi, Thank you so much for this project! I'm running a rootless container using pasta. Everything works great but after a while (anything from minutes to hours) I see the error "Failed to open tun socket in namespace" in my systemd logs, and my container loses access to the internet. Do you happen to have any idea how I would go about debugging this? Thanks a lot in advance :) PS: I'm running pasta from podman with arguments --map-gw,--dns,<my-dns>,-i,wlan0,--outbound-if4,wireguard0,--outbound-if6,wireguard0,--config-net

2 4

passt: new version 2023_03_21.1ee2f7c available
by Stefano Brivio 22 Mar '23

22 Mar '23

The new version with tag 2023_03_21.1ee2f7c includes the following changes: 1ee2f7c tcp: Don't reset ACK_TO_TAP_DUE on any ACK, reschedule timer as needed 9ffccf7 tcp: When a connection flag it set, don't negate it for debug print 89d1494 Fix false positive if cppcheck doesn't give a false positive 34ade90 Work around weird false positives with cppcheck-2.9.1 ccf6d2a udp: Actually bind detected namespace ports in init namespace 418f75a pasta: fix tcp port forwarding in auto mode https://passt.top/passt/log/?qt=range&q=2023_03_17.dd23496..2023_03_21.1ee2… Packages: - Debian tracker: https://tracker.debian.org/pkg/passt - Copr (CentOS Stream, EPEL, Fedora, Mageia, openSUSE): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/5694155/ permanent mirror: https://passt.top/builds/copr/0^20230321.g1ee2f7c/ - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Ubuntu tracker: https://packages.ubuntu.com/lunar/passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-g1ee2f7c-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_1ee2f7c-1_all.deb -- Stefano

1 0

passt: new version 2023_03_17.dd23496 available
by Stefano Brivio 17 Mar '23

17 Mar '23

The new version with tag 2023_03_17.dd23496 includes the following changes: dd23496 fedora: Refresh SELinux labels in scriptlets, require -selinux package 87a6550 Makefile: Enable external override for TARGET 7727804 passt.1: Fix description of --mtu option 4e6178f log: Avoid time_t/__syscall_slong_t format mismatch with long int on X32 ABI https://passt.top/passt/log/?qt=range&q=2023_03_10.70c0765..2023_03_17.dd23… Packages: - Debian tracker: https://tracker.debian.org/pkg/passt - Copr (CentOS Stream, EPEL, Fedora, Mageia, openSUSE): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/5653690/ permanent mirror: https://passt.top/builds/copr/0^20230317.gdd23496/ - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Ubuntu tracker: https://packages.ubuntu.com/lunar/passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-gdd23496-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_0dd23496-1_all.deb -- Stefano

1 0

passt: new version 2023_03_09.7c7625d available
by Stefano Brivio 09 Mar '23

09 Mar '23

The new version with tag 2023_03_09.7c7625d includes the following changes: 7c7625d README: Update Features section, plus minor improvements 294d6dc contrib: Drop libvirt out-of-tree patch, integration mostly works in 9.1.0 42fb625 contrib: Drop QEMU out-of-tree patches f3cd0f9 contrib: Drop Podman out-of-tree patch, integration is upstream now d7272f1 tcp: Clamp MSS value when queueing data to tap, also for pasta bb2b67c conf: Terminate on EMFILE or ENFILE on sockets for port mapping 5aea2f8 tcp, udp: Fix partial success return codes in {tcp,udp}_sock_init() 73992c4 tcp, udp, util: Pass socket creation errors all the way up 5068761 util: Carry own definition of __bswap_constant{16,32} 89e38f5 treewide: Fix header includes to build with musl 5c58fea conf, passt: Rename stderr to force_stderr fde8004 netlink: Use 8 KiB * netlink message header size as response buffer a9c59dd conf, icmp, tcp, udp: Add options to bind to outbound address and interface 70148ce conf, passt.h: Rename "outbound" interface to "template" interface d361fe6 contrib/selinux: Let interface users set paths for log, PID, socket files de9b0cb contrib/selinux: Allow binding and connecting to all UDP and TCP ports 41bc669 contrib/selinux: Let passt write to stdout and stderr when it starts 009af75 contrib/selinux: Drop duplicate init_daemon_domain() rule 8323621 udp: Fix signedness warning on 32-bits architectures f6b6b66 Makefile: Fix SuperH 4 builds: it's AUDIT_ARCH_SH, not AUDIT_ARCH_SH4 0d8c114 Makefile, seccomp.sh: Fix cross-builds, adjust syscalls list to compiler https://passt.top/passt/log/?qt=range&q=2023_02_27.c538ee8..2023_03_09.7c76… Packages: - Debian tracker: https://tracker.debian.org/pkg/passt - Copr (CentOS Stream, EPEL, Fedora, Mageia, openSUSE): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/5617634/ permanent mirror: https://passt.top/builds/copr/0^20230309.g7c7625d/ - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Ubuntu tracker: https://packages.ubuntu.com/lunar/passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-g7c7625d-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_7c7625d-1_all.deb -- Stefano

1 0