- user - passt

pasta behaviour with multiple NICs
by Ben Woods 25 Apr '25

25 Apr '25

Hi everyone, I'm struggling to understand how pasta will behave when the host has multiple network interfaces. I can't see this mentioned in the website or man page. I'm using pasta with podman if that makes a difference. Example Scenario - 2 interfaces - eth0 (with default route) and eth1 in a different subnet. When the podman container is created, inside the container there is a single interface shown that mimics the eth0 interface name, IP, gateway. If traffic is initiated from the container to an IP within the eth1 subnet - how does pasta make it appear to come from the eth1 IP address? Does it automatically apply NAT to achieve this? If the host has a static route for a subnet not directly connected to either eth0 or eth1, but the static route uses a next hop IP address within the eth1 subnet - will pasta apply NAT to the eth1 IP address, and the use the static route to send it via the next-hop router? Thanks in advance. -- From: Ben Woods

2 4

passt: new version 2025_04_15.2340bbf available
by Stefano Brivio 15 Apr '25

15 Apr '25

The new version with tag 2025_04_15.2340bbf includes the following changes: 2340bbf udp: Propagate errors on listening and brand new sockets cfc0ee1 udp: Minor re-organisation of udp_sock_recverr() f107a86 udp: Add udp_pktinfo() helper 0498457 udp: Deal with errors as we go in udp_sock_fwd() 3f99558 udp: Pass socket & flow information direction to error handling functions 1bb8145 udp: Be quieter about errors on UDP receive baf049f udp: Fix breakage of UDP error handling by PKTINFO support 5024908 conf: Honour --dns-forward for local resolver even with --no-map-gw bbff365 conf: Split add_dns_resolv() into separate IPv4 and IPv6 versions 59cc89f udp, udp_flow: Track our specific address on socket interfaces 695c623 inany: Improve ASSERT message for bad socket family f4b0dd8 udp: Use PKTINFO cmsgs to get destination address for received datagrams 6693fa1 tcp_splice: Don't clobber errno before checking for EAGAIN d3f33f3 tcp_splice: Don't double count bytes read on EINTR ffbef85 conf: Add missing return in conf_nat(), fix --map-guest-addr none 06ef64c udp_flow: Save 8 bytes in struct udp_flow on 64-bit architectures 9725e79 udp_flow: Don't discard packets that arrive between bind() and connect() 9eb5406 udp: Fold udp_splice_prepare and udp_splice_send into udp_sock_to_sock bd6a41e udp: Rework udp_listen_sock_data() into udp_sock_fwd() 159beef udp_flow: Take pif and port as explicit parameters to udp_flow_from_sock() fd844a9 udp: Move UDP_MAX_FRAMES to udp.c fc6ee68 udp: Merge vhost-user and "buf" listening socket paths 0304dd9 udp: Split spliced forwarding path from udp_buf_reply_sock_data() 5221e17 udp: Parameterize number of datagrams handled by udp_*_reply_sock_data() 3a0881d udp: Don't bother to batch datagrams from "listening" socket 84ab130 udp: Polish udp_vu_sock_info() and remove from vu specific code 1d7bbb1 udp: Make udp_sock_recv() take max number of frames as a parameter d74b5a7 udp: Use connect()ed sockets for initiating side a7775e9 udp: support traceroute in direction tap-socket 06784d7 passt-repair: Ensure that read buffer is NULL-terminated 684870a udp: Correct some seccomp filter annotations 76e554d udp: Simplify updates to UDP flow timestamp 8aa2d90 udp: Remove redundant udp_at_sidx() call in udp_tap_handler() 3d41e4d passt-repair: Correct off-by-one error verifying name dec3d73 migrate, tcp: bind() migrated sockets in repair mode 6bfc60b platform requirements: Add test for address conflicts with TCP_REPAIR 8e32881 platform requirements: Add attributes to die() function 2ed2d59 platform requirements: Fix clang-tidy warning 3de5af6 udp: Improve name of UDP related ICMP sending functions 025a3c2 udp: Don't attempt to forward ICMP socket errors to other sockets 42a854a pasta, passt-repair: Support multiple events per read() in inotify handlers 65cca54 udp: correct source address for ICMP messages 664c588 build: normalize arm targets 77883fb udp: Add helper function for creating connected UDP socket 37d78c9 udp: Always hash socket facing flowsides f67c488 udp: Better handling of failure to forward from reply socket 269cf6a udp: Share more logic between vu and non-vu reply socket paths d924b7d udp_vu: Factor things out of udp_vu_reply_sock_data() loop 5a977c2 udp: Simplify checking of epoll event bits 89b203b udp: Common invocation of udp_sock_errs() for vhost-user and "buf" paths cf4d3f0 packet: Upgrade severity of most packet errors 0857515 packet: ASSERT on signs of pool corruption 9153aca util: Add abort_with_msg() and ASSERT_WITH_MSG() helpers 38bcce9 packet: Rework packet_get() versus packet_get_try() 961aa6a packet: Move checks against PACKET_MAX_LEN to packet_check_range() 37d9f37 packet: Avoid integer overflows in packet_get_do() c48331c packet: Correct type of PACKET_MAX_LEN 9866d14 tap: Clarify calculation of TAP_MSGS a41d6d1 tap: Make size of pool_tap[46] purely a tuning parameter e43e007 packet: More cautious checks to avoid pointer arithmetic UB 4592719 vu_common: Tighten vu_packet_check_range() https://passt.top/passt/log/?qt=range&q=2025_03_20.32f6212..2025_04_15.2340… Packages: - Alpine Linux: https://pkgs.alpinelinux.org/packages?name=passt - Arch Linux: https://www.archlinux.org/packages/extra/x86_64/passt/ https://archlinuxarm.org/packages/aarch64/passt https://archlinuxarm.org/packages/armv7h/passt - Chimera: https://pkgs.chimera-linux.org/packages?name=passt - Clear Linux: https://github.com/clearlinux-pkgs/passt/ - Copr (CentOS Stream, EPEL, Fedora, Mageia): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/8907839/ permanent mirror: https://passt.top/builds/copr/0^20250415.g2340bbf/ - Debian tracker: https://tracker.debian.org/pkg/passt - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Gentoo versions: https://packages.gentoo.org/packages/net-misc/passt - GNU Guix: https://packages.guix.gnu.org/packages/passt/ - Homebrew: https://formulae.brew.sh/formula/passt - NixOS: https://github.com/NixOS/nixpkgs/tree/nixos-unstable/pkgs/by-name/pa/passt - openSUSE: https://software.opensuse.org/package/passt - OpenMandriva: https://github.com/OpenMandrivaAssociation/passt/tree/master - PLD Linux: https://git.pld-linux.org/cgi-bin/gitweb.cgi?p=packages/passt.git - Solus: https://github.com/getsolus/packages/tree/main/packages/p/passt - Ubuntu tracker: https://launchpad.net/ubuntu/+source/passt - Void Linux: https://voidlinux.org/packages/?q=passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-g2340bbf-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_2340bbf-1_all.deb -- Stefano

1 0

passt: new version 2025_03_20.32f6212 available
by Stefano Brivio 20 Mar '25

20 Mar '25

The new version with tag 2025_03_20.32f6212 includes the following changes: 32f6212 Makefile: Enable -Wformat-security 07c2d58 conf: Include libgen.h for basename(), fix build against musl ebdd463 tcp: Flush socket before checking for more data in active close state c250ffc migrate: Bump migration version number cfb3740 migrate, tcp: Migrate RFC 7323 timestamp 28772ee migrate, tcp: More careful marshalling of mss parameter during migration 51f3c07 passt-repair: Fix build with -Werror=format-security cb5b593 tcp, flow: Better use flow specific logging heleprs 96fe554 conf: Unify several paths in conf_ports() 78f1f0f test/perf: Simplify iperf3 server lifetime management 26df8a3 conf: Limit maximum MTU based on backend frame size 9d1a6b3 pcap: Correctly set snaplen based on tap backend type b6945e0 Simplify sizing of pkt_buf c4bfa33 tap: Use explicit defines for maximum length of L2 frame 1eda8de packet: Remove redundant TAP_BUF_BYTES define c43972a packet: Give explicit name to maximum packet size 74cd82a conf: Detect vhost-user mode earlier 4b17d04 conf: Move mode detection into helper function bb00a04 conf: Use the same optstring for passt and pasta modes c8b520c flow, repair: Wait for a short while for passt-repair to connect 0470170 passt-repair: Add directory watch 2b58b22 cppcheck: Add suppressions for "logically" exported functions a83c806 vhost_user: Don't export several functions 27395e6 tcp: Don't export tcp_update_csum() 12d5b36 checksum: Don't export various functions e36c35c log: Don't export passt_vsyslog() 57d2db3 treewide: Mark assorted functions static 68b0418 udp: create and send ICMPv6 to local peer when applicable 87e6a46 tap: break out building of udp header from tap_udp6_send function 55431f0 udp: create and send ICMPv4 to local peer when applicable 82a839b tap: break out building of udp header from tap_udp4_send function 1924e25 conf: Be more precise about minimum MTUs 672d786 tcp: Send RST in response to guest packets that match no connection 1f23681 tap: Consider IPv6 flow label when building packet sequences 0081756 ip: Helpers to access IPv6 flow label 52419a6 migrate, tcp: Don't flow_alloc_cancel() during incoming migration b270821 tcp: Unconditionally move to CLOSED state on tcp_rst() 56ce03e tcp: Correct error code handling from tcp_flow_repair_socket() 39f85bc migrate, flow: Don't attempt to migrate TCP flows without passt-repair 7b92f2e migrate, flow: Trivially succeed if migrating with no flows 8747173 selinux: Fixes/workarounds for passt and passt-repair, mostly for libvirt usage be86232 seccomp.sh: Silence stty errors ea69ca6 tap: always set the no_frag flag in IPv4 headers 4dac235 contrib/fedora: Actually install passt-repair SELinux policy file 16553c8 dhcp: Add option code byte in calculation for OPT_MAX boundary check 183bedf Makefile: Use mmap2() as alternative for mmap() in valgrind extra syscalls 1cc5d4c conf: Use 0 instead of -1 as "unassigned" mtu value 3dc7da6 conf: More thorough error checking when parsing --mtu option 65e317a flow: Clean up and generalise flow traversal macros b79a22d flow: Remove unneeded bound parameter from flow traversal macros 7ffca35 flow: Remove unneeded index from foreach_* macros adb46c1 flow: Add flow_perror() helper ba0823f tcp: Don't pass both flow pointer and flow index 854bc7b tcp: Remove spurious prototype for tcp_flow_migrate_shrink_window e56c803 tcp: More type safety for tcp_flow_migrate_target_ext() 5a07eb3 tcp_vu: head_cnt need not be global 6b40651 tap: Remove unused ETH_HDR_INIT() macro 354bc0b packet: Don't pass start and offset separately to packet_check_range() 0a51060 packet: Use flexible array member in struct pool bcc4908 dhcp: Remove option 255 length byte https://passt.top/passt/log/?qt=range&q=2025_02_17.a1e48a0..2025_03_20.32f6… Packages: - Alpine Linux: https://pkgs.alpinelinux.org/packages?name=passt - Arch Linux: https://www.archlinux.org/packages/extra/x86_64/passt/ https://archlinuxarm.org/packages/aarch64/passt https://archlinuxarm.org/packages/armv7h/passt - Chimera: https://pkgs.chimera-linux.org/packages?name=passt - Clear Linux: https://github.com/clearlinux-pkgs/passt/ - Copr (CentOS Stream, EPEL, Fedora, Mageia): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/8797676/ permanent mirror: https://passt.top/builds/copr/0^20250320.g32f6212/ - Debian tracker: https://tracker.debian.org/pkg/passt - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Gentoo versions: https://packages.gentoo.org/packages/net-misc/passt - GNU Guix: https://packages.guix.gnu.org/packages/passt/ - Homebrew: https://formulae.brew.sh/formula/passt - NixOS: https://github.com/NixOS/nixpkgs/tree/nixos-unstable/pkgs/by-name/pa/passt - openSUSE: https://software.opensuse.org/package/passt - OpenMandriva: https://github.com/OpenMandrivaAssociation/passt/tree/master - PLD Linux: https://git.pld-linux.org/cgi-bin/gitweb.cgi?p=packages/passt.git - Solus: https://github.com/getsolus/packages/tree/main/packages/p/passt - Ubuntu tracker: https://launchpad.net/ubuntu/+source/passt - Void Linux: https://voidlinux.org/packages/?q=passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-g32f6212-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_32f6212-1_all.deb -- Stefano

1 0

passt: new version 2025_02_17.a1e48a0 available
by Stefano Brivio 17 Feb '25

17 Feb '25

The new version with tag 2025_02_17.a1e48a0 includes the following changes: a1e48a0 test: Add migration tests 89ecf2f migrate: Migrate TCP flows 3e903bb repair, passt-repair: Build and warning fixes for musl 01b6a16 tcp_splice: A typo three years ago and SO_RCVLOWAT is gone 667caa0 tcp_splice: Don't wake up on input data if we can't write it anywhere 7c33b12 vhost_user: Clear ring address on GET_VRING_BASE 71249ef tcp, tcp_splice: Don't set SO_SNDBUF and SO_RCVBUF to maximum values 30f1e08 tcp: Keep updating window and checking for socket data after FIN from guest 98d474c contrib/selinux: Enable mapping guest memory for libvirt guests 9a84df4 selinux: Add rules needed to run tests a301158 rampstream: Add utility to test for corruption of data streams 6f122f0 tcp: Get bound address for connected inbound sockets too f3fe795 vhost_user: Make source quit after reporting migration state b899141 Add interfaces and configuration bits for passt-repair 155cd0c migrate: Migrate guest observed addresses 5911e08 migrate: Skeleton of live migration logic 836fe21 passt-repair: Fix off-by-one in check for number of file descriptors def7de4 tcp_vu: Fix off-by one in header count array adjustment 90f91fe tcp: Implement conservative zero-window probe on ACK timeout 472e2e9 tcp: Don't discard window information on keep-alive segments 31e8109 dhcp, dhcpv6: Add hostname and client fqdn ops a3d142a conf: Don't map DNS traffic to host, if host gateway is a resolver 864be47 passt-repair: Send one confirmation *per command*, not *per socket* fe8b6a7 dhcp: Don't re-use request message for reply b7b70ba passt-repair: Dodge "structurally unreachable code" warning from Coverity 0f009ea passt-repair: Fix calculation of payload length from cmsg_len a0b7f56 passt-repair: Don't use perror(), accept ECONNRESET as termination a5cca99 conf, passt.1: Un-deprecate --host-lo-to-ns-lo 0da87b3 debug: Add tcpdump to mbuto.img f66769c apparmor: Workaround for unconfined libvirtd when triggered by unprivileged user 593be32 passt-repair.1: Fix indication of TCP_REPAIR constants 9215f68 passt-repair: Build fixes for musl a9d63f9 passt-repair: use _exit() over return d0006fa treewide: use _exit() over exit() 745c163 tcp: Simplify handling of getsockname() b4a7b5d migrate: Fix several errors with passt-repair dcf014b doc: Add mock of migration source and target 52e57f9 tcp: Get socket port and address using getsockname() when connecting from guest 8c24301 Introduce passt-repair e894d9a vhost_user: Turn some vhost-user message reports to trace() e25a930 util: Add read_remainder() and read_all_buf() 71fa736 tcp_splice, udp_flow: fcntl64() support on PPC64 depends on glibc version b75ad15 vhost_user: On 32-bit ARM, mmap() is not available, mmap2() is used instead 722d347 tcp: Don't reset outbound connection on SYN retries bf28608 pasta.te: fix demo.sh and remove one duplicate rule dcd6d81 tcp: Add HOSTSIDE(x), HOSTFLOW(x) macros 0349cf6 util: Rename and make global vu_remove_watch() 10c4a9e tcp: Always pass NULL event with EPOLL_CTL_DEL dd6a685 vhost-user: Implement an empty VHOST_USER_SEND_RARP command d477a1f netlink: Skip loopback interface while looking for a template https://passt.top/passt/log/?qt=range&q=2025_01_21.4f2c8e7..2025_02_17.a1e4… Packages: - Alpine Linux: https://pkgs.alpinelinux.org/packages?name=passt - Arch Linux: https://www.archlinux.org/packages/extra/x86_64/passt/ https://archlinuxarm.org/packages/aarch64/passt https://archlinuxarm.org/packages/armv7h/passt - Chimera: https://pkgs.chimera-linux.org/packages?name=passt - Clear Linux: https://github.com/clearlinux-pkgs/passt/ - Copr (CentOS Stream, EPEL, Fedora, Mageia): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/8663104/ permanent mirror: https://passt.top/builds/copr/0^20250217.ga1e48a0/ - Debian tracker: https://tracker.debian.org/pkg/passt - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Gentoo versions: https://packages.gentoo.org/packages/net-misc/passt - GNU Guix: https://packages.guix.gnu.org/packages/passt/ - Homebrew: https://formulae.brew.sh/formula/passt - NixOS: https://github.com/NixOS/nixpkgs/tree/nixos-unstable/pkgs/by-name/pa/passt - openSUSE: https://software.opensuse.org/package/passt - OpenMandriva: https://github.com/OpenMandrivaAssociation/passt/tree/master - PLD Linux: https://git.pld-linux.org/cgi-bin/gitweb.cgi?p=packages/passt.git - Solus: https://github.com/getsolus/packages/tree/main/packages/p/passt - Ubuntu tracker: https://launchpad.net/ubuntu/+source/passt - Void Linux: https://voidlinux.org/packages/?q=passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-ga1e48a0-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_0a1e48a0-1_all.deb -- Stefano

1 0

passt: new version 2025_01_21.4f2c8e7 available
by Stefano Brivio 21 Jan '25

21 Jan '25

The new version with tag 2025_01_21.4f2c8e7 includes the following changes: 4f2c8e7 vhost_user: Drop packet with unsupported iovec array ec5c4d9 tcp: Set PSH flag for last incoming packets in a batch db2c91a tcp: Set ACK flag on *all* RST segments, even for client in SYN-SENT state 54bb972 tcp: Disable Nagle's algorithm (set TCP_NODELAY) on all sockets 8757834 tcp: Buffer sizes are *not* inherited on accept()/accept4() c96a88d vhost_user: remove ASSERT() on iovec number 412ed4f vhost-user: Report to front-end we support VHOST_USER_PROTOCOL_F_DEVICE_STATE 31d7002 vhost-user: add VHOST_USER_SET_DEVICE_STATE_FD command 878e163 vhost-user: add VHOST_USER_CHECK_DEVICE_STATE command 78c73e9 vhost-user: Report to front-end we support VHOST_USER_PROTOCOL_F_LOG_SHMFD 3c1d91b vhost-user: add VHOST_USER_SET_LOG_BASE command 538312a vhost-user: Pass vu_dev to more virtio functions b04195c vhost-user: add VHOST_USER_SET_LOG_FD command 6016e04 vhost-user: update protocol features and commands list a8f4fc4 tcp: Mask EPOLLIN altogether if we're blocked waiting on an ACK from the guest b8f573c tcp: Set EPOLLET when when reading from a socket fails with EAGAIN 22cf08b tcp: Don't subscribe to EPOLLOUT events on STALLED 707f77b tcp: Fix ACK sequence getting out of sync on EPOLLOUT wake-up 1b95bd6 vhost_user: fix multibuffer from linux f04b483 test/pasta_podman: Run Podman tests on a single CPU thread 2c174f1 checksum: fix checksum with odd base address 725acd1 tcp_splice: Set (again) TCP_NODELAY on both sides 3876fc7 seccomp: Unconditionally allow accept(2) even if accept4(2) is present 898e853 virtio: Use const pointer for vu_dev 324233b udp_flow: Don't block multicast and broadcast messages 2385b69 Makefile: Report error and stop if we can't set TARGET e5ba8ad README: Mark vhost-user as supported https://passt.top/passt/log/?qt=range&q=2024_12_11.09478d5..2025_01_21.4f2c… Packages: - Alpine Linux: https://pkgs.alpinelinux.org/packages?name=passt - Arch Linux: https://www.archlinux.org/packages/extra/x86_64/passt/ https://archlinuxarm.org/packages/aarch64/passt https://archlinuxarm.org/packages/armv7h/passt - Chimera: https://pkgs.chimera-linux.org/packages?name=passt - Clear Linux: https://github.com/clearlinux-pkgs/passt/ - Copr (CentOS Stream, EPEL, Fedora, Mageia): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/8556325/ permanent mirror: https://passt.top/builds/copr/0^20250121.g4f2c8e7/ - Debian tracker: https://tracker.debian.org/pkg/passt - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Gentoo versions: https://packages.gentoo.org/packages/net-misc/passt - GNU Guix: https://packages.guix.gnu.org/packages/passt/ - Homebrew: https://formulae.brew.sh/formula/passt - NixOS: https://github.com/NixOS/nixpkgs/tree/nixos-unstable/pkgs/by-name/pa/passt - openSUSE: https://software.opensuse.org/package/passt - OpenMandriva: https://github.com/OpenMandrivaAssociation/passt/tree/master - PLD Linux: https://git.pld-linux.org/cgi-bin/gitweb.cgi?p=packages/passt.git - Solus: https://github.com/getsolus/packages/tree/main/packages/p/passt - Ubuntu tracker: https://launchpad.net/ubuntu/+source/passt - Void Linux: https://voidlinux.org/packages/?q=passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-g4f2c8e7-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_4f2c8e7-1_all.deb -- Stefano

1 0

passt: new version 2024_12_11.09478d5 available
by Stefano Brivio 12 Dec '24

12 Dec '24

The new version with tag 2024_12_11.09478d5 includes the following changes: 09478d5 treewide: Dodge dynamic memory allocation in strerror() from glibc > 2.40 e24f026 pasta: make it possible to disable socket splicing 947f5cd tap: Call vu_init() with --fd 2139ad3 tap: Use a common function to start a new connection 8996d18 udp_vu: update segment size 1908297 flow: Remove over-zealous sanity checks in flow_sidx_hash() 1db4f77 udp: Improve detail of UDP endpoint sanity checking 966fdc8 perf/passt_vu_tcp: Make it shine 020c8b7 tcp_vu: Compute IPv4 header checksum if dlen changes d9c0f8e Makefile: Use make internal string functions b6e79ef tcp_vu: Remove unnecessary tcp_vu_update_check() function a6348ca tcp: Merge tcp_fill_headers[46]() with each other 2abf5ab tcp: Merge tcp_update_check_tcp[46]() 08ea3cc tcp: Pass TCP header and payload separately to tcp_fill_headers[46]() 2ee0769 tcp: Pass TCP header and payload separately to tcp_update_check_tcp[46]() 6715109 iov, checksum: Replace csum_iov() with csum_iov_tail() f931103 iov: iov tail helpers 804a7ce tcp_vu: Change 'dlen' to ssize_t in tcp_vu_data_from_sock() 00cc230 Fix build on 32bit target 6fae899 virtio: check if avail ring is configured 7e131e9 tcp: Move tcp_l2_buf_fill_headers() to tcp_buf.c 676bf54 test: Add tests for passt in vhost-user mode 28997fc vhost-user: add vhost-user b2e62f7 passt: rename tap_sock_init() to tap_backend_init() b7c292b tcp: Export headers functions 5a8b33c udp: Prepare udp.c to be shared with vhost-user 31117b2 vhost-user: introduce vhost-user API 7d1cd4d vhost-user: introduce virtio API dd143e3 packet: replace struct desc by struct iovec https://passt.top/passt/log/?qt=range&q=2024_11_27.c0fbc7e..2024_12_11.0947… Packages: - Alpine Linux: https://pkgs.alpinelinux.org/packages?name=passt - Arch Linux: https://www.archlinux.org/packages/extra/x86_64/passt/ https://archlinuxarm.org/packages/aarch64/passt https://archlinuxarm.org/packages/armv7h/passt - Chimera: https://pkgs.chimera-linux.org/packages?name=passt - Clear Linux: https://github.com/clearlinux-pkgs/passt/ - Copr (CentOS Stream, EPEL, Fedora, Mageia): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/8382137/ permanent mirror: https://passt.top/builds/copr/0^20241211.g09478d5/ - Debian tracker: https://tracker.debian.org/pkg/passt - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Gentoo versions: https://packages.gentoo.org/packages/net-misc/passt - GNU Guix: https://packages.guix.gnu.org/packages/passt/ - Homebrew: https://formulae.brew.sh/formula/passt - NixOS: https://github.com/NixOS/nixpkgs/tree/nixos-unstable/pkgs/by-name/pa/passt - openSUSE: https://software.opensuse.org/package/passt - OpenMandriva: https://github.com/OpenMandrivaAssociation/passt/tree/master - PLD Linux: https://git.pld-linux.org/cgi-bin/gitweb.cgi?p=packages/passt.git - Solus: https://github.com/getsolus/packages/tree/main/packages/p/passt - Ubuntu tracker: https://launchpad.net/ubuntu/+source/passt - Void Linux: https://voidlinux.org/packages/?q=passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-g09478d5-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_09478d5-1_all.deb -- Stefano

1 0

passt: new version 2024_11_27.c0fbc7e available
by Stefano Brivio 27 Nov '24

27 Nov '24

The new version with tag 2024_11_27.c0fbc7e includes the following changes: c0fbc7e dhcp: Honour broadcast flag (RFC 2131, 4.1) 9da2038 dhcp: Introduce support for Rapid Commit (option 80, RFC 4039) d6e9e24 dhcp: Use -1 as "missing option" length instead of 0 14b84a7 treewide: Introduce 'local mode' for disconnected setups c6e6106 test: Improve logic for waiting for SLAAC & DAD to complete in NDP tests cda7f16 ndp: Don't send first periodic router advertisement right after guest connects 2bf8ffc test/perf: Select a single IPv6 namespace address in pasta tests 6819b2e conf, passt.1: Update --mac-addr default in usage() and man page b61be84 passt.1: Fix "default" note about --map-guest-addr https://passt.top/passt/log/?qt=range&q=2024_11_21.238c69f..2024_11_27.c0fb… Packages: - Alpine Linux: https://pkgs.alpinelinux.org/packages?name=passt - Arch Linux: https://www.archlinux.org/packages/extra/x86_64/passt/ https://archlinuxarm.org/packages/aarch64/passt https://archlinuxarm.org/packages/armv7h/passt - Chimera: https://pkgs.chimera-linux.org/packages?name=passt - Clear Linux: https://github.com/clearlinux-pkgs/passt/ - Copr (CentOS Stream, EPEL, Fedora, Mageia): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/8318673/ permanent mirror: https://passt.top/builds/copr/0^20241127.gc0fbc7e/ - Debian tracker: https://tracker.debian.org/pkg/passt - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Gentoo versions: https://packages.gentoo.org/packages/net-misc/passt - GNU Guix: https://packages.guix.gnu.org/packages/passt/ - Homebrew: https://formulae.brew.sh/formula/passt - NixOS: https://github.com/NixOS/nixpkgs/tree/nixos-unstable/pkgs/by-name/pa/passt - openSUSE: https://software.opensuse.org/package/passt - OpenMandriva: https://github.com/OpenMandrivaAssociation/passt/tree/master - PLD Linux: https://git.pld-linux.org/cgi-bin/gitweb.cgi?p=packages/passt.git - Solus: https://github.com/getsolus/packages/tree/main/packages/p/passt - Ubuntu tracker: https://launchpad.net/ubuntu/+source/passt - Void Linux: https://voidlinux.org/packages/?q=passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-gc0fbc7e-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_0c0fbc7e-1_all.deb -- Stefano

1 0

passt: new version 2024_11_21.238c69f available
by Stefano Brivio 21 Nov '24

21 Nov '24

The new version with tag 2024_11_21.238c69f includes the following changes: 238c69f tcp: Acknowledge keep-alive segments, ignore them for the rest af464c4 tcp: Reset ACK_TO_TAP_DUE flag whenever an ACK isn't needed anymore 5ae2184 ndp: Don't send unsolicited RAs if NDP is disabled bf94927 ndp: Don't send unsolicited router advertisement if we can't, yet 5e24466 selinux: Use auth_read_passwd() interface for all our getpwnam() needs 6e1e442 ndp: Send unsolicited Router Advertisements b39760c passt: Seed libc's pseudo random number generator 71d5dee util: Add general low-level random bytes helper a60703e ndp: Make route lifetime a #define 36c070e ndp: Use struct assignment in preference to memcpy() for IPv6 addresses cbc83e1 ndp: Split out helpers for sending specific NDP message types 4e47167 ndp: Add ndp_send() helper 71f228d ndp: Remove redundant update to addr_seen 0588163 cppcheck: Don't check the system headers 14dd70e linux_dep: Fix CLOSE_RANGE_UNSHARE availability handling d64f257 linux_dep: Move close_range() conditional handling to linux_dep.h b84cd05 log: Only check for FALLOC_FL_COLLAPSE_RANGE availability at runtime 58fa550 tap, tcp, util: Add some missing SOCK_CLOEXEC flags 71869e2 passt: Use NOLINT clang-tidy block instead of NOLINTNEXTLINE d4f09c9 util: Define small and big thresholds for socket buffers as unsigned long long 87940f9 tap: Cast TAP_BUF_BYTES - ETH_MAX_MTU to ssize_t, not TAP_BUF_BYTES 1feb90f dhcpv6: Turn some option headers pointers to const 5f5e814 dhcpv6: Use for loop instead of goto to avoid false positive cppcheck warning 78da088 tcp: unify payload and flags l2 frames array 9a0e544 test: Improve test for NDP assigned prefix 910f4f9 test: Don't require 64-bit prefixes in perf tests 1699083 test: Make nstool hold robust against interruptions to control clients b456ee1 test: Rename propagating signal handler 867db07 util: Work around cppcheck bug 6936 6f913b3 udp: Don't dereference uflow before NULL check in udp_reply_sock_handler() d8e05a3 ndp: Use const pointer for ndp_ns packet 0d7b820 linux_dep: Generalise tcp_info.h to handling Linux extension compatibility c5f4e4d fwd: Squash different-signedness comparison warning 1e76a19 util: Remove unused ffsl() function 1d7cff3 clang: Add rudimentary clangd configuration c560e2f Makefile: Don't attempt to auto-detect stack size 13fc6d5 Makefile: Use -DARCH for qrap only 7917159 seccomp: Simplify handling of AUDIT_ARCH 93bce40 Makefile: Move NETNS_RUN_DIR definition to C code c938d8a netlink: RTA_PAYLOAD() returns int, not size_t f6b546c flow: Correct type of flowside_at_sidx() 30b4f88 arch: Avoid explicit access to 'environ' b78e72d clang: Move clang-tidy configuration from Makefile to .clang-tidy 8346216 Makefile: Simplify exclusion of qrap from static checks 8f1b6a0 clang: Add .clang-format file 5e93bcd test: Adjust misplaced sleeps in two_guests code 9afce0b tap: Explicitly cast TUNSETIFF to fix build warning with musl on ppc64le d165d36 tcp: Fix build against musl, __sum16 comes from linux/types.h https://passt.top/passt/log/?qt=range&q=2024_10_30.ee7d0b6..2024_11_21.238c… Packages: - Alpine Linux: https://pkgs.alpinelinux.org/packages?name=passt - Arch Linux: https://www.archlinux.org/packages/extra/x86_64/passt/ https://archlinuxarm.org/packages/aarch64/passt https://archlinuxarm.org/packages/armv7h/passt - Chimera: https://pkgs.chimera-linux.org/packages?name=passt - Clear Linux: https://github.com/clearlinux-pkgs/passt/ - Debian tracker: https://tracker.debian.org/pkg/passt - Copr (CentOS Stream, EPEL, Fedora, Mageia): https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/8293460/ permanent mirror: https://passt.top/builds/copr/0^20241121.g238c69f/ - Fedora updates: https://bodhi.fedoraproject.org/updates/?packages=passt - Gentoo versions: https://packages.gentoo.org/packages/net-misc/passt - GNU Guix: https://packages.guix.gnu.org/packages/passt/ - Homebrew: https://formulae.brew.sh/formula/passt - NixOS: https://github.com/NixOS/nixpkgs/tree/nixos-unstable/pkgs/by-name/pa/passt - openSUSE: https://software.opensuse.org/package/passt - OpenMandriva: https://github.com/OpenMandrivaAssociation/passt/tree/master - PLD Linux: https://git.pld-linux.org/cgi-bin/gitweb.cgi?p=packages/passt.git - Solus: https://github.com/getsolus/packages/tree/main/packages/p/passt - Ubuntu tracker: https://launchpad.net/ubuntu/+source/passt - Void Linux: https://voidlinux.org/packages/?q=passt - Static builds: - Package for other RPM-based distributions, x86_64 only: https://passt.top/builds/latest/x86_64/passt-g238c69f-1.x86_64.rpm - x86_64 static binaries: https://passt.top/builds/latest/x86_64/ - Debian package, from x86_64 static build: https://passt.top/builds/latest/x86_64/passt_238c69f-1_all.deb -- Stefano

1 0

Re: Failed to pivot_root() into empty tmpfs
by Stefano Brivio 20 Nov '24

20 Nov '24

On Tue, 19 Nov 2024 07:55:59 +0000 Piotr Bzdręga via user <passt-user(a)passt.top> wrote: > Hei guys, > I cannot register account on https://passt.top/passt/bugs. > I was trying with few e-mails. > I wanted to report bug regarding using pivot_root() in tmpfs. > > [08:47][selkie@buildroot][~] $ podman run -it 88b748efcbb3 > Error: pasta failed with exit code 1: > Couldn't get any nameserver address > Failed to pivot_root() into empty tmpfs: Invalid argument > Failed to sandbox process, exiting > > I saw that pivot_root() can be replace by chroot e.g. done in crun : > https://github.com/containers/crun/blob/83998014c5e8dee84432f6ece34363dbd1c… By the way, this is now tracked at: https://bugs.passt.top/show_bug.cgi?id=104 thanks Piotr! -- Stefano

1 0

Failed to pivot_root() into empty tmpfs
by Piotr Bzdręga 19 Nov '24

19 Nov '24

Hei guys, I cannot register account on https://passt.top/passt/bugs. I was trying with few e-mails. I wanted to report bug regarding using pivot_root() in tmpfs. [08:47][selkie@buildroot][~] $ podman run -it 88b748efcbb3 Error: pasta failed with exit code 1: Couldn't get any nameserver address Failed to pivot_root() into empty tmpfs: Invalid argument Failed to sandbox process, exiting I saw that pivot_root() can be replace by chroot e.g. done in crun : https://github.com/containers/crun/blob/83998014c5e8dee84432f6ece34363dbd1c… Piotr Bzdręga

1 0