- user - passt

passt: new version 2023_11_19.4f1709d available
by Stefano Brivio 19 Nov '23

19 Nov '23

The new version with tag 2023_11_19.4f1709d includes the following changes: 4f1709d valgrind: Don't disable optimizations for valgrind builds f772464 valgrind: Adjust suppression for MSG_TRUNC with NULL buffer 457ff12 udp,pasta: Periodically scan for ports to automatically forward 4ccdeec tcp: Simplify away tcp_port_rebind() 1776e7a tcp: Use common helper for rebinding inbound and outbound ports 3be9e00 clang-tidy: Suppress silly misc-include-cleaner warnings https://passt.top/passt/log/?qt=range&q=2023_11_10.5ec3634..2023_11_19.4f17… Packages: - Arch Linux: https://www.archlinux.org/packages/extra/x86_64/passt/ https://archlinuxarm.org/packages/aarch64/passt https://archlinuxarm.org/packages/armv7h/passt - Debian tracker: https://tracker.debian.org/pkg/passt - Copr (CentOS Stream, EPEL, Fedora, Mageia, openSUSE): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/6668324/ permanent mirror: https://passt.top/builds/copr/0^20231119.g4f1709d/ - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Ubuntu tracker: https://launchpad.net/ubuntu/+source/passt - Void Linux: https://voidlinux.org/packages/?q=passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-g4f1709d-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_4f1709d-1_all.deb -- Stefano

1 0

passt: new version 2023_11_10.5ec3634 available
by Stefano Brivio 12 Nov '23

12 Nov '23

The new version with tag 2023_11_10.5ec3634 includes the following changes: 5ec3634 tap, pasta: Handle short writes to /dev/tap f0776ea tap, pasta: Handle incomplete tap sends for pasta too cf3eeba tcp: Don't use TCP_WINDOW_CLAMP 930bc3b tcp: Rename and small cleanup to tcp_clamp_window() 2c1554c test/lib/perf_report: Fix up table highlight for pasta's local flows https://passt.top/passt/log/?qt=range&q=2023_11_07.56d9f6d..2023_11_10.5ec3… Packages: - Arch Linux: https://www.archlinux.org/packages/extra/x86_64/passt/ https://archlinuxarm.org/packages/aarch64/passt https://archlinuxarm.org/packages/armv7h/passt - Debian tracker: https://tracker.debian.org/pkg/passt - Copr (CentOS Stream, EPEL, Fedora, Mageia, openSUSE): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/6619714/ permanent mirror: https://passt.top/builds/copr/0^20231110.g5ec3634/ - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Ubuntu tracker: https://launchpad.net/ubuntu/+source/passt - Void Linux: https://voidlinux.org/packages/?q=passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-g5ec3634-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_5ec3634-1_all.deb -- Stefano

1 0

passt: new version 2023_11_07.56d9f6d available
by Stefano Brivio 07 Nov '23

07 Nov '23

The new version with tag 2023_11_07.56d9f6d includes the following changes: 56d9f6d Revert "selinux: Drop user_namespace class rules for Fedora 37" 74e6f48 selinux: Allow passt to talk over unconfined_t UNIX domain socket for --fd 50bc25a log: Match implicit va_start() with va_end() in vlogmsg() 9494a51 port_fwd: Don't try to read bound ports from invalid file handles b944622 netlink: Sequence numbers are actually 32 bits wide 53ff387 test/perf: Simplify calculation of "omit" time for TCP throughput aa0bb9f test/perf: Remove unnecessary --pacing-timer options 498108a test/perf: "MTU" changes in passt_tcp host to guest aren't useful f94adb1 test/perf: Explicitly control UDP packet length, instead of MTU 2926970 test/perf: Small MTUs for spliced TCP aren't interesting e516809 test/perf: Start iperf3 server less often f9ff667 test/perf: Get iperf3 stats from client side 8a41a8b test/perf: Remove stale iperf3c/iperf3s directives de974f0 udp: Remove socket from udp_{tap,splice}_map when timed out 480aa4a udp: Consistently use -1 to indicate un-opened sockets in maps c0426ff log: Add vlogmsg() 5972203 log: Enable format warnings 50d46ec log: Don't define logging function 4 times 0ad54e1 tcp: Remove remaining declaration of tcp_l2_mh 515db1e tcp_splice: Simplify selection of socket and pipe sides in socket handler 7486cd1 tcp_splice: Exploit side symmetry in tcp_splice_destroy() 69db3b3 tcp_splice: Exploit side symmetry in tcp_splice_connect_finish() 1b76257 tcp_splice: Exploit side symmetry in tcp_splice_timer() 8545058 tcp_splice: Rename sides of connection from a/b to 0/1 0e8e534 tcp_splice: Don't pool pipes in pairs 6357010 tcp_splice: Avoid awkward temporaries in tcp_splice_epoll_ctl() 409d3ca tcp_splice: Remove unnecessary forward declaration 5a79ba6 tcp_splice: Don't handle EPOLL_CTL_DEL as part of tcp_splice_epoll_ctl() 536acab tcp_splice: Correct error handling in tcp_splice_epoll_ctl() d33cbc6 tcp_splice: Remove redundant tcp_splice_epoll_ctl() f6d8dc2 pif: Pass originating pif to tap handler functions 732e249 pif: Record originating pif in listening socket refs 125c5e5 pif: Introduce notion of passt/pasta interface 0d73fa2 udp: Clean up ref initialisation in udp_sock_init() c09d0d0 port_fwd: Simplify get_bound_ports_*() to port_fwd_scan_*() dcf5c0e port_fwd: Move port scanning /proc fds into struct port_fwd 1a40d00 port_fwd: Split TCP and UDP cases for get_bound_ports() 180dbc9 port_fwd: Don't NS_CALL get_bound_ports() 5a04854 port_fwd: Pre-open /proc/net/* files rather than on-demand 4f0b9f9 util: Add open_in_ns() helper 17d40d1 port_fwd: Better parameterise procfs_scan_listen() e90f277 port_fwd: Move automatic port forwarding code to port_fwd.[ch] 26d86f1 conf: Cleaner initialisation of default forwarding modes 3fb3f0f selinux: Drop user_namespace class rules for Fedora 37 https://passt.top/passt/log/?qt=range&q=2023_10_04.f851084..2023_11_07.56d9… Packages: - Arch Linux: https://www.archlinux.org/packages/extra/x86_64/passt/ https://archlinuxarm.org/packages/aarch64/passt https://archlinuxarm.org/packages/armv7h/passt - Debian tracker: https://tracker.debian.org/pkg/passt - Copr (CentOS Stream, EPEL, Fedora, Mageia, openSUSE): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/6607545/ permanent mirror: https://passt.top/builds/copr/0^20231107.g56d9f6d/ - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Ubuntu tracker: https://launchpad.net/ubuntu/+source/passt - Void Linux: https://voidlinux.org/packages/?q=passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-g56d9f6d-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_56d9f6d-1_all.deb -- Stefano

1 0

passt: new version 2023_10_04.f851084 available
by Stefano Brivio 10 Oct '23

10 Oct '23

The new version with tag 2023_10_04.f851084 includes the following changes: f851084 dhcp: put option 53 at the beginning a469fc3 tcp, tap: Don't increase tap-side sequence counter for dropped frames d3192f6 tcp: Force TCP_WINDOW_CLAMP before resetting STALLED flag feaeb49 tcp: Fix comment to tcp_sock_consume() 117b474 cppcheck: Work around bug in cppcheck 2.12.0 8640d62 cppcheck: Use "exhaustive" level checking when available c0efa4e conf: Remove overly cryptic selection of forward table 6471c7d cppcheck: Make many pointers const fc8f0f8 siphash: Use incremental rather than all-at-once siphash functions 04b10a8 siphash, checksum: Move TBAA explanation to checksum.c ceae842 siphash: Make internal helpers public cbc84df siphash: Use specific structure for internal state fcec3f6 siphash: Use more hygienic state initialiser 5cc8435 siphash: Fix bug in state initialisation 831067f siphash: Clean up hash finalisation with posthash_final() function 7a3153c siphash: Add siphash_feed() helper f7b2be2 siphash: Make sip round calculations an inline function rather than macro ca6e947 siphash: Make siphash functions consistently return 64-bit results c1d2a07 util: Consolidate and improve workarounds for clang-tidy issue 58992 5b6c68c Avoid shadowing index(3) 9178a9e tcp: Always send an ACK segment once the handshake is completed c090692 dhcp: Actually note down the length of options received by the client 8b8537d dhcpv6: Properly separate domain names in search list https://passt.top/passt/log/?qt=range&q=2023_09_08.05627dc..2023_10_04.f851… Packages: - Arch Linux: https://www.archlinux.org/packages/extra/x86_64/passt/ https://archlinuxarm.org/packages/aarch64/passt https://archlinuxarm.org/packages/armv7h/passt - Debian tracker: https://tracker.debian.org/pkg/passt - Copr (CentOS Stream, EPEL, Fedora, Mageia, openSUSE): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/6497040/ permanent mirror: https://passt.top/builds/copr/0^20231004.gf851084/ - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Ubuntu tracker: https://launchpad.net/ubuntu/+source/passt - Void Linux: https://voidlinux.org/packages/?q=passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-gf851084-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_0f851084-1_all.deb -- Stefano

1 0

passt: new version 2023_09_08.05627dc available
by Stefano Brivio 08 Sep '23

08 Sep '23

The new version with tag 2023_09_08.05627dc includes the following changes: 05627dc util: Fix licensing information display in --version 46f915d tcp: Correct handling of FIN,ACK followed by SYN b3f2210 tcp: Consolidate paths where we initiate reset on tap interface f984003 tcp: Correctly handle RST followed rapidly by SYN 60d3915 tcp: Return consumed packet count from tcp_data_from_tap() 5fb376d tcp: Never hash match closed connections 805dd10 tcp: Remove some redundant packet_get() operations 7b56117 udp, tap: Correctly advance through packets in udp_tap_handler() 043a70b tcp, tap: Correctly advance through packets in tcp_tap_handler() https://passt.top/passt/log/?qt=range&q=2023_09_07.ee58f37..2023_09_08.0562… Packages: - Arch Linux: https://www.archlinux.org/packages/extra/x86_64/passt/ https://archlinuxarm.org/packages/aarch64/passt https://archlinuxarm.org/packages/armv7h/passt - Debian tracker: https://tracker.debian.org/pkg/passt - Copr (CentOS Stream, EPEL, Fedora, Mageia, openSUSE): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/6387922/ permanent mirror: https://passt.top/builds/copr/0^20230908.g05627dc/ - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Ubuntu tracker: https://packages.ubuntu.com/lunar/passt - Void Linux: https://voidlinux.org/packages/?q=passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-g46f915d-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_46f915d-1_all.deb -- Stefano

1 0

passt: new version 2023_09_07.ee58f37 available
by Stefano Brivio 07 Sep '23

07 Sep '23

The new version with tag 2023_09_07.ee58f37 includes the following changes: ee58f37 test: Add Podman system test with bats for pasta 1f24d3e dhcp: support BOOTP clients d8c4f23 tap: fix uses of l3_len in tap4_handler() a405d0c fedora: Replace pasta hard links by separate builds 63a8302 apparmor: Add pasta's own profile abf5ef6 apparmor: Allow pasta to remount /proc, access entries under its own copy e2ad420 apparmor: Allow read-only access to uid_map b686afa apparmor: Explicitly pass options we use while remounting root filesystem 6d3e426 apparmor: Use abstractions/nameservice to deal with symlinked resolv.conf https://passt.top/passt/log/?qt=range&q=2023_08_23.a7e4bfb..2023_09_07.ee58… Packages: - Arch Linux: https://www.archlinux.org/packages/extra/x86_64/passt/ https://archlinuxarm.org/packages/aarch64/passt https://archlinuxarm.org/packages/armv7h/passt - Debian tracker: https://tracker.debian.org/pkg/passt - Copr (CentOS Stream, EPEL, Fedora, Mageia, openSUSE): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/6383446/ permanent mirror: https://passt.top/builds/copr/0^20230907.gee58f37/ - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Ubuntu tracker: https://packages.ubuntu.com/lunar/passt - Void Linux: https://voidlinux.org/packages/?q=passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-gee58f37-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_0ee58f37-1_all.deb -- Stefano

1 0

passt: new version 2023_08_23.a7e4bfb available
by Stefano Brivio 23 Aug '23

23 Aug '23

The new version with tag 2023_08_23.a7e4bfb includes the following changes: a7e4bfb pasta: Strip RTA_PREFSRC when copying routes to the namespace 5e4f7b9 netlink: Set IFA_ADDRESS, not just IFA_LOCAL, while adding IPv4 addresses 69303ca tcp: Remove broken pressure calculations for tcp_defer_handler() eb8fbdb inany: Add missing double include guard to inany.h b60fa33 tcp: Move in_epoll flag out of common connection structure 955dd32 tcp, udp: Don't pre-fill IPv4 destination address in headers 5bf200a tcp, udp: Don't include destination address in partially precomputed csums 8aa3200 tcp: Consistent usage of ports in tcp_seq_init() bccfbff tcp: More precise terms for addresses and ports cee4a2d tap: Pass source address to protocol handler functions 673bde1 tap: Don't clobber source address in tap6_handler() https://passt.top/passt/log/?qt=range&q=2023_08_18.0af928e..2023_08_23.a7e4… Packages: - Arch Linux: https://www.archlinux.org/packages/extra/x86_64/passt/ https://archlinuxarm.org/packages/aarch64/passt https://archlinuxarm.org/packages/armv7h/passt - Debian tracker: https://tracker.debian.org/pkg/passt - Copr (CentOS Stream, EPEL, Fedora, Mageia, openSUSE): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/6338167/ permanent mirror: https://passt.top/builds/copr/0^20230823.ga7e4bfb/ - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Ubuntu tracker: https://packages.ubuntu.com/lunar/passt - Void Linux: https://voidlinux.org/packages/?q=passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-ga7e4bfb-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_0a7e4bfb-1_all.deb -- Stefano

1 0

passt: new version 2023_08_18.0af928e available
by Stefano Brivio 20 Aug '23

20 Aug '23

The new version with tag 2023_08_18.0af928e includes the following changes: 0af928e selinux: Fix domain transitions for typical commands pasta might run 30817fd selinux: Allow pasta_t to read nsfs entries 9776521 selinux: Add rules for sysctl and /proc/net accesses 56b8633 selinux: Update policy to fix user/group settings 6205905 selinux: Fix user namespace creation after breaking kernel change 0c42326 selinux: Use explicit paths for binaries in file context 479a9e1 fedora: Install pasta as hard link to ensure SELinux file context match 5f1fcff tap: Fix format specifier in tap4_is_fragment() warning da0aeb9 netlink: Don't propagate host address expiry to the container b4f8ffd netlink: Correctly calculate attribute length for address messages 4b9f4c2 netlink: Remove redundant check on nlmsg_type 5ed4e03 conf: Demote overlapping port ranges error to a warning ae5f6c8 epoll: Use different epoll types for passt and pasta tap fds eda4f19 epoll: Split listening Unix domain socket into its own type 485b5fb epoll: Split handling of listening TCP sockets into their own handler e6f81e5 epoll: Split handling of TCP timerfds into its own handler function 8271a2e epoll: Tiny cleanup to udp_sock_handler() 05f606a epoll: Split handling of ICMP and ICMPv6 sockets d850caa epoll: Fold sock_handler into general switch on epoll event fd 6a6735e epoll: Always use epoll_ref for the epoll data variable 3401644 epoll: Generalize epoll_ref to cover things other than sockets e26282b tap: Fold reset handling into tap_handler_passt() 0d870c5 tap: Fold reset handling into tap_handler_pasta() 548e05f tap: Clean up behaviour for errors on listening Unix socket 28877b0 tap: Clean up tap reset path b2bea00 tap: fix seq->p.count limit 02b30e7 netlink: Propagate errors for "dup" operations 5103811 netlink: Propagate errors for "dump" operations 4d6e9d0 netlink: Always process all responses to a netlink request 8de9805 netlink: Propagate errors for "set" operations a309318 netlink: Add nl_foreach_oftype to filter response message types 99ddd7c netlink: Split nl_req() to allow processing multiple response datagrams 8ec757d netlink: Clearer reasoning about the netlink response buffer size 9d4ab98 netlink: Add nl_do() helper for simple operations with error checking 282581b netlink: Fill in netlink header fields from nl_req() f62600b netlink: Treat send() or recv() errors as fatal 0a568c8 netlink: Start sequence number from 1 instead of 0 dee7594 netlink: Make nl_*_dup() use a separate datagram for each request 576df71 netlink: Explicitly pass netlink sockets to operations cfe7509 netlink: Use struct in_addr for IPv4 addresses, not bare uint32_t 257a6b0 netlink: Split nl_route() into separate operation functions eff3bcb netlink: Split nl_addr() into separate operation functions e96182e netlink: Split up functionality of nl_link() 0cf7bf3 tap: Remove unnecessary global tun_ns_fd 7bc9b66 tap: More detailed error reporting in tap_ns_tun() 6920add util: Make ns_enter() a void function and report setns() errors b15ce5b Use static assertion to verify that union epoll_ref is the right size 8218d99 Use C11 anonymous members to make poll refs less verbose to use 649068a Allow C11 code, not just C99 code 023d684 Revert "MAKE: Fix parallel builds; .o files; .gitignore; new makedocs" cc2a6be MAKE: Fix parallel builds; .o files; .gitignore; new makedocs e01759e tap: Explicitly drop IPv4 fragments, and give a warning 4c98d3b conf: Correct length checking of interface names in conf_ports() c4017cc conf: Fix size checking of -I interface name https://passt.top/passt/log/?qt=range&q=2023_06_27.289301b..2023_08_18.0af9… Packages: - Arch Linux: https://www.archlinux.org/packages/extra/x86_64/passt/ https://archlinuxarm.org/packages/aarch64/passt https://archlinuxarm.org/packages/armv7h/passt - Debian tracker: https://tracker.debian.org/pkg/passt - Copr (CentOS Stream, EPEL, Fedora, Mageia, openSUSE): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/6317140/ permanent mirror: https://passt.top/builds/copr/0^20230818.g0af928e/ - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Ubuntu tracker: https://packages.ubuntu.com/lunar/passt - Void Linux: https://voidlinux.org/packages/?q=passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-g0af928e-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_0af928e-1_all.deb -- Stefano

1 0

Pasta-networked rootless Podman container gets Connection Refused with the host's public IP
by jklaiho＠iki.fi 28 Jun '23

28 Jun '23

Hi; I previously asked this on the Podman mailing list, but I'm not sure if the issue in question is a feature of Podman or Passt (or both), and I got no replies from the Podman list, so I figured I'd try here as well. We're running some rootless Podman containers set up to use Pasta 2023_03_29.b10b983 for networking. One of the containers needs to access the host machine port 443 with its public IP address, but this causes a Connection Refused error. Any other public IP is accessible normally. This is specific to the containers; the host has no problem accessing itself with the public IP. The containers are set up with systemd generators (quadlet), with networking configured very simply: "Network=pasta:-t,auto,-T,auto" Podman has a --map-gw option useable with Pasta that seemed like it might help, but it didn't. "Network=pasta:--map-gw,-t,auto,-T,auto" fails like this at container startup: Error: failed to start pasta: Port forwarding mode 'none' conflicts with previous mode "Network=pasta:-t,auto,-T,auto,--map-gw" started the container fine, but did not fix the Connection Refused error. Apparently --map-gw just isn't the right option here. I don't know if the inability to contact the public IP is a feature of Podman or Pasta, but I'm hoping you're able to at least narrow it down for me. Is there a workaround on the Pasta side? Thanks in advance! - JK Laiho

3 2

passt: new version 2023_06_27.289301b available
by Stefano Brivio 27 Jun '23

27 Jun '23

The new version with tag 2023_06_27.289301b includes the following change: 289301b netlink: Use correct interface index in NL_SET mode https://passt.top/passt/log/?qt=range&q=2023_06_25.32660ce..2023_06_27.2893… Packages: - Arch Linux: https://www.archlinux.org/packages/extra/x86_64/passt/ https://archlinuxarm.org/packages/aarch64/passt https://archlinuxarm.org/packages/armv7h/passt - Debian tracker: https://tracker.debian.org/pkg/passt - Copr (CentOS Stream, EPEL, Fedora, Mageia, openSUSE): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/6119154/ permanent mirror: https://passt.top/builds/copr/0^20230627.g289301b/ - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Ubuntu tracker: https://packages.ubuntu.com/lunar/passt - Void Linux: https://voidlinux.org/packages/?q=passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-g289301b-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_289301b-1_all.deb -- Stefano

1 0