The new version with tag 2023_11_07.56d9f6d includes the following changes:
56d9f6d Revert "selinux: Drop user_namespace class rules for Fedora 37"
74e6f48 selinux: Allow passt to talk over unconfined_t UNIX domain socket for --fd
50bc25a log: Match implicit va_start() with va_end() in vlogmsg()
9494a51 port_fwd: Don't try to read bound ports from invalid file handles
b944622 netlink: Sequence numbers are actually 32 bits wide
53ff387 test/perf: Simplify calculation of "omit" time for TCP throughput
aa0bb9f test/perf: Remove unnecessary --pacing-timer options
498108a test/perf: "MTU" changes in passt_tcp host to guest aren't useful
f94adb1 test/perf: Explicitly control UDP packet length, instead of MTU
2926970 test/perf: Small MTUs for spliced TCP aren't interesting
e516809 test/perf: Start iperf3 server less often
f9ff667 test/perf: Get iperf3 stats from client side
8a41a8b test/perf: Remove stale iperf3c/iperf3s directives
de974f0 udp: Remove socket from udp_{tap,splice}_map when timed out
480aa4a udp: Consistently use -1 to indicate un-opened sockets in maps
c0426ff log: Add vlogmsg()
5972203 log: Enable format warnings
50d46ec log: Don't define logging function 4 times
0ad54e1 tcp: Remove remaining declaration of tcp_l2_mh
515db1e tcp_splice: Simplify selection of socket and pipe sides in socket handler
7486cd1 tcp_splice: Exploit side symmetry in tcp_splice_destroy()
69db3b3 tcp_splice: Exploit side symmetry in tcp_splice_connect_finish()
1b76257 tcp_splice: Exploit side symmetry in tcp_splice_timer()
8545058 tcp_splice: Rename sides of connection from a/b to 0/1
0e8e534 tcp_splice: Don't pool pipes in pairs
6357010 tcp_splice: Avoid awkward temporaries in tcp_splice_epoll_ctl()
409d3ca tcp_splice: Remove unnecessary forward declaration
5a79ba6 tcp_splice: Don't handle EPOLL_CTL_DEL as part of tcp_splice_epoll_ctl()
536acab tcp_splice: Correct error handling in tcp_splice_epoll_ctl()
d33cbc6 tcp_splice: Remove redundant tcp_splice_epoll_ctl()
f6d8dc2 pif: Pass originating pif to tap handler functions
732e249 pif: Record originating pif in listening socket refs
125c5e5 pif: Introduce notion of passt/pasta interface
0d73fa2 udp: Clean up ref initialisation in udp_sock_init()
c09d0d0 port_fwd: Simplify get_bound_ports_*() to port_fwd_scan_*()
dcf5c0e port_fwd: Move port scanning /proc fds into struct port_fwd
1a40d00 port_fwd: Split TCP and UDP cases for get_bound_ports()
180dbc9 port_fwd: Don't NS_CALL get_bound_ports()
5a04854 port_fwd: Pre-open /proc/net/* files rather than on-demand
4f0b9f9 util: Add open_in_ns() helper
17d40d1 port_fwd: Better parameterise procfs_scan_listen()
e90f277 port_fwd: Move automatic port forwarding code to port_fwd.[ch]
26d86f1 conf: Cleaner initialisation of default forwarding modes
3fb3f0f selinux: Drop user_namespace class rules for Fedora 37
https://passt.top/passt/log/?qt=range&q=2023_10_04.f851084..2023_11_07.56d9…
Packages:
- Arch Linux:
https://www.archlinux.org/packages/extra/x86_64/passt/https://archlinuxarm.org/packages/aarch64/passthttps://archlinuxarm.org/packages/armv7h/passt
- Debian tracker:
https://tracker.debian.org/pkg/passt
- Copr (CentOS Stream, EPEL, Fedora, Mageia, openSUSE):
https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/6607545/
permanent mirror: https://passt.top/builds/copr/0^20231107.g56d9f6d/
- Fedora updates:
https://bodhi.fedoraproject.org/updates/?packages=passt
- Ubuntu tracker:
https://launchpad.net/ubuntu/+source/passt
- Void Linux:
https://voidlinux.org/packages/?q=passt
- Static builds:
- Package for other RPM-based distributions, x86_64 only:
https://passt.top/builds/latest/x86_64/passt-g56d9f6d-1.x86_64.rpm
- x86_64 static binaries:
https://passt.top/builds/latest/x86_64/
- Debian package, from x86_64 static build:
https://passt.top/builds/latest/x86_64/passt_56d9f6d-1_all.deb
--
Stefano
The new version with tag 2023_08_18.0af928e includes the following changes:
0af928e selinux: Fix domain transitions for typical commands pasta might run
30817fd selinux: Allow pasta_t to read nsfs entries
9776521 selinux: Add rules for sysctl and /proc/net accesses
56b8633 selinux: Update policy to fix user/group settings
6205905 selinux: Fix user namespace creation after breaking kernel change
0c42326 selinux: Use explicit paths for binaries in file context
479a9e1 fedora: Install pasta as hard link to ensure SELinux file context match
5f1fcff tap: Fix format specifier in tap4_is_fragment() warning
da0aeb9 netlink: Don't propagate host address expiry to the container
b4f8ffd netlink: Correctly calculate attribute length for address messages
4b9f4c2 netlink: Remove redundant check on nlmsg_type
5ed4e03 conf: Demote overlapping port ranges error to a warning
ae5f6c8 epoll: Use different epoll types for passt and pasta tap fds
eda4f19 epoll: Split listening Unix domain socket into its own type
485b5fb epoll: Split handling of listening TCP sockets into their own handler
e6f81e5 epoll: Split handling of TCP timerfds into its own handler function
8271a2e epoll: Tiny cleanup to udp_sock_handler()
05f606a epoll: Split handling of ICMP and ICMPv6 sockets
d850caa epoll: Fold sock_handler into general switch on epoll event fd
6a6735e epoll: Always use epoll_ref for the epoll data variable
3401644 epoll: Generalize epoll_ref to cover things other than sockets
e26282b tap: Fold reset handling into tap_handler_passt()
0d870c5 tap: Fold reset handling into tap_handler_pasta()
548e05f tap: Clean up behaviour for errors on listening Unix socket
28877b0 tap: Clean up tap reset path
b2bea00 tap: fix seq->p.count limit
02b30e7 netlink: Propagate errors for "dup" operations
5103811 netlink: Propagate errors for "dump" operations
4d6e9d0 netlink: Always process all responses to a netlink request
8de9805 netlink: Propagate errors for "set" operations
a309318 netlink: Add nl_foreach_oftype to filter response message types
99ddd7c netlink: Split nl_req() to allow processing multiple response datagrams
8ec757d netlink: Clearer reasoning about the netlink response buffer size
9d4ab98 netlink: Add nl_do() helper for simple operations with error checking
282581b netlink: Fill in netlink header fields from nl_req()
f62600b netlink: Treat send() or recv() errors as fatal
0a568c8 netlink: Start sequence number from 1 instead of 0
dee7594 netlink: Make nl_*_dup() use a separate datagram for each request
576df71 netlink: Explicitly pass netlink sockets to operations
cfe7509 netlink: Use struct in_addr for IPv4 addresses, not bare uint32_t
257a6b0 netlink: Split nl_route() into separate operation functions
eff3bcb netlink: Split nl_addr() into separate operation functions
e96182e netlink: Split up functionality of nl_link()
0cf7bf3 tap: Remove unnecessary global tun_ns_fd
7bc9b66 tap: More detailed error reporting in tap_ns_tun()
6920add util: Make ns_enter() a void function and report setns() errors
b15ce5b Use static assertion to verify that union epoll_ref is the right size
8218d99 Use C11 anonymous members to make poll refs less verbose to use
649068a Allow C11 code, not just C99 code
023d684 Revert "MAKE: Fix parallel builds; .o files; .gitignore; new makedocs"
cc2a6be MAKE: Fix parallel builds; .o files; .gitignore; new makedocs
e01759e tap: Explicitly drop IPv4 fragments, and give a warning
4c98d3b conf: Correct length checking of interface names in conf_ports()
c4017cc conf: Fix size checking of -I interface name
https://passt.top/passt/log/?qt=range&q=2023_06_27.289301b..2023_08_18.0af9…
Packages:
- Arch Linux:
https://www.archlinux.org/packages/extra/x86_64/passt/https://archlinuxarm.org/packages/aarch64/passthttps://archlinuxarm.org/packages/armv7h/passt
- Debian tracker:
https://tracker.debian.org/pkg/passt
- Copr (CentOS Stream, EPEL, Fedora, Mageia, openSUSE):
https://copr.fedorainfracloud.org/coprs/sbrivio/passt/build/6317140/
permanent mirror: https://passt.top/builds/copr/0^20230818.g0af928e/
- Fedora updates:
https://bodhi.fedoraproject.org/updates/?packages=passt
- Ubuntu tracker:
https://packages.ubuntu.com/lunar/passt
- Void Linux:
https://voidlinux.org/packages/?q=passt
- Static builds:
- Package for other RPM-based distributions, x86_64 only:
https://passt.top/builds/latest/x86_64/passt-g0af928e-1.x86_64.rpm
- x86_64 static binaries:
https://passt.top/builds/latest/x86_64/
- Debian package, from x86_64 static build:
https://passt.top/builds/latest/x86_64/passt_0af928e-1_all.deb
--
Stefano