]>
Commit | Line | Data |
---|---|---|
542cc9bb TG |
1 | How to Install Open vSwitch on Linux, FreeBSD and NetBSD |
2 | ======================================================== | |
4b11d5e8 BP |
3 | |
4 | This document describes how to build and install Open vSwitch on a | |
76d5beb9 YT |
5 | generic Linux, FreeBSD, or NetBSD host. For specifics around installation |
6 | on a specific platform, please see one of these files: | |
4b11d5e8 | 7 | |
9feb1017 TG |
8 | - [INSTALL.Debian.md] |
9 | - [INSTALL.Fedora.md] | |
10 | - [INSTALL.RHEL.md] | |
11 | - [INSTALL.XenServer.md] | |
12 | - [INSTALL.NetBSD.md] | |
620b1762 | 13 | - [INSTALL.Windows.md] |
9feb1017 | 14 | - [INSTALL.DPDK.md] |
4b11d5e8 BP |
15 | |
16 | Build Requirements | |
17 | ------------------ | |
18 | ||
19 | To compile the userspace programs in the Open vSwitch distribution, | |
20 | you will need the following software: | |
21 | ||
542cc9bb | 22 | - GNU make. |
4b11d5e8 | 23 | |
542cc9bb | 24 | - A C compiler, such as: |
8a6de510 | 25 | |
542cc9bb | 26 | * GCC 4.x. |
8a6de510 | 27 | |
542cc9bb TG |
28 | * Clang. Clang 3.4 and later provide useful static semantic |
29 | analysis and thread-safety checks. For Ubuntu, there are | |
30 | nightly built packages available on clang's website. | |
4b11d5e8 | 31 | |
620b1762 BP |
32 | * MSVC 2013. See [INSTALL.Windows] for additional Windows build |
33 | instructions. | |
34 | ||
542cc9bb TG |
35 | While OVS may be compatible with other compilers, optimal |
36 | support for atomic operations may be missing, making OVS very | |
37 | slow (see lib/ovs-atomic.h). | |
29d204ef | 38 | |
542cc9bb TG |
39 | - libssl, from OpenSSL, is optional but recommended if you plan to |
40 | connect the Open vSwitch to an OpenFlow controller. libssl is | |
41 | required to establish confidentiality and authenticity in the | |
42 | connections from an Open vSwitch to an OpenFlow controller. If | |
43 | libssl is installed, then Open vSwitch will automatically build | |
44 | with support for it. | |
4b11d5e8 | 45 | |
542cc9bb | 46 | - Python 2.x, for x >= 4. |
deb64473 | 47 | |
c6435221 BP |
48 | On Linux, you may choose to compile the kernel module that comes with |
49 | the Open vSwitch distribution or to use the kernel module built into | |
9feb1017 TG |
50 | the Linux kernel (version 3.3 or later). See the [FAQ.md] question |
51 | "What features are not available in the Open vSwitch kernel datapath that | |
c6435221 BP |
52 | ships as part of the upstream Linux kernel?" for more information on |
53 | this trade-off. You may also use the userspace-only implementation, | |
9feb1017 TG |
54 | at some cost in features and performance (see [INSTALL.userspace.md] |
55 | for details). To compile the kernel module on Linux, you must also | |
c6435221 | 56 | install the following: |
4b11d5e8 | 57 | |
9feb1017 | 58 | - A supported Linux kernel version. Please refer to [README.md] for a |
542cc9bb | 59 | list of supported versions. |
4b11d5e8 | 60 | |
542cc9bb TG |
61 | The Open vSwitch datapath requires bridging support |
62 | (CONFIG_BRIDGE) to be built as a kernel module. (This is common | |
63 | in kernels provided by Linux distributions.) The bridge module | |
64 | must not be loaded or in use. If the bridge module is running | |
65 | (check with "lsmod | grep bridge"), you must remove it ("rmmod | |
66 | bridge") before starting the datapath. | |
4b11d5e8 | 67 | |
542cc9bb TG |
68 | For optional support of ingress policing, you must enable kernel |
69 | configuration options NET_CLS_BASIC, NET_SCH_INGRESS, and | |
70 | NET_ACT_POLICE, either built-in or as modules. (NET_CLS_POLICE is | |
71 | obsolete and not needed.) | |
4b11d5e8 | 72 | |
542cc9bb TG |
73 | To use GRE tunneling on Linux 2.6.37 or newer, kernel support |
74 | for GRE demultiplexing (CONFIG_NET_IPGRE_DEMUX) must be compiled | |
75 | in or available as a module. Also, on kernels before 3.11, the | |
76 | ip_gre module, for GRE tunnels over IP (NET_IPGRE), must not be | |
77 | loaded or compiled in. | |
6f470982 | 78 | |
542cc9bb TG |
79 | To configure HTB or HFSC quality of service with Open vSwitch, |
80 | you must enable the respective configuration options. | |
c9d3af4e | 81 | |
542cc9bb TG |
82 | To use Open vSwitch support for TAP devices, you must enable |
83 | CONFIG_TUN. | |
26bb189d | 84 | |
542cc9bb TG |
85 | - To build a kernel module, you need the same version of GCC that |
86 | was used to build that kernel. | |
4b11d5e8 | 87 | |
542cc9bb TG |
88 | - A kernel build directory corresponding to the Linux kernel image |
89 | the module is to run on. Under Debian and Ubuntu, for example, | |
90 | each linux-image package containing a kernel binary has a | |
91 | corresponding linux-headers package with the required build | |
92 | infrastructure. | |
4b11d5e8 BP |
93 | |
94 | If you are working from a Git tree or snapshot (instead of from a | |
c9d3af4e BP |
95 | distribution tarball), or if you modify the Open vSwitch build system |
96 | or the database schema, you will also need the following software: | |
4b11d5e8 | 97 | |
542cc9bb | 98 | - Autoconf version 2.63 or later. |
4b11d5e8 | 99 | |
542cc9bb | 100 | - Automake version 1.10 or later. |
4b11d5e8 | 101 | |
542cc9bb | 102 | - libtool version 2.4 or later. (Older versions might work too.) |
195b5c35 | 103 | |
c9d3af4e BP |
104 | To run the unit tests, you also need: |
105 | ||
542cc9bb TG |
106 | - Perl. Version 5.10.1 is known to work. Earlier versions should |
107 | also work. | |
c9d3af4e | 108 | |
a5ae88ff AA |
109 | The ovs-vswitchd.conf.db(5) manpage will include an E-R diagram, in |
110 | formats other than plain text, only if you have the following: | |
f8d739a9 | 111 | |
542cc9bb | 112 | - "dot" from graphviz (http://www.graphviz.org/). |
f8d739a9 | 113 | |
542cc9bb TG |
114 | - Perl. Version 5.10.1 is known to work. Earlier versions should |
115 | also work. | |
c9d3af4e | 116 | |
542cc9bb | 117 | - Python 2.x, for x >= 4. |
c9d3af4e | 118 | |
f8f26e98 BP |
119 | If you are going to extensively modify Open vSwitch, please consider |
120 | installing the following to obtain better warnings: | |
121 | ||
542cc9bb TG |
122 | - "sparse" version 0.4.4 or later |
123 | (http://www.kernel.org/pub/software/devel/sparse/dist/). | |
f8f26e98 | 124 | |
542cc9bb | 125 | - GNU make. |
f8f26e98 | 126 | |
542cc9bb | 127 | - clang, version 3.4 or later |
97be1538 | 128 | |
fef5244f EJ |
129 | Also, you may find the ovs-dev script found in utilities/ovs-dev.py useful. |
130 | ||
4b11d5e8 BP |
131 | Installation Requirements |
132 | ------------------------- | |
133 | ||
134 | The machine on which Open vSwitch is to be installed must have the | |
135 | following software: | |
136 | ||
542cc9bb | 137 | - libc compatible with the libc used for build. |
4b11d5e8 | 138 | |
542cc9bb TG |
139 | - libssl compatible with the libssl used for build, if OpenSSL was |
140 | used for the build. | |
4b11d5e8 | 141 | |
542cc9bb | 142 | - On Linux, the same kernel version configured as part of the build. |
4b11d5e8 | 143 | |
542cc9bb TG |
144 | - For optional support of ingress policing on Linux, the "tc" program |
145 | from iproute2 (part of all major distributions and available at | |
146 | http://www.linux-foundation.org/en/Net:Iproute2). | |
4b11d5e8 | 147 | |
f6eb6b20 GL |
148 | On Linux you should ensure that /dev/urandom exists. To support TAP |
149 | devices, you must also ensure that /dev/net/tun exists. | |
6e8e271c | 150 | |
76d5beb9 YT |
151 | Building and Installing Open vSwitch for Linux, FreeBSD or NetBSD |
152 | ================================================================= | |
4b11d5e8 | 153 | |
e9e85443 FL |
154 | Once you have installed all the prerequisites listed above in the |
155 | Base Prerequisites section, follow the procedures below to bootstrap, | |
156 | to configure and to build the code. | |
4b11d5e8 | 157 | |
e9e85443 FL |
158 | Bootstrapping the Sources |
159 | ------------------------- | |
160 | ||
161 | This step is not needed if you have downloaded a released tarball. | |
162 | If you pulled the sources directly from an Open vSwitch Git tree or | |
163 | got a Git tree snapshot, then run boot.sh in the top source directory | |
164 | to build the "configure" script. | |
30746a1b | 165 | |
542cc9bb | 166 | `% ./boot.sh` |
30746a1b | 167 | |
e9e85443 FL |
168 | |
169 | Configuring the Sources | |
170 | ----------------------- | |
171 | ||
172 | Configure the package by running the configure script. You can | |
173 | usually invoke configure without any arguments. For example: | |
4b11d5e8 | 174 | |
542cc9bb | 175 | `% ./configure` |
4b11d5e8 | 176 | |
e9e85443 FL |
177 | By default all files are installed under /usr/local. If you want |
178 | to install into, e.g., /usr and /var instead of /usr/local and | |
179 | /usr/local/var, add options as shown here: | |
4b11d5e8 | 180 | |
542cc9bb | 181 | `% ./configure --prefix=/usr --localstatedir=/var` |
4b11d5e8 | 182 | |
e9e85443 FL |
183 | By default, static libraries are built and linked against. If you |
184 | want to use shared libraries instead: | |
7748423a TG |
185 | |
186 | % ./configure --enable-shared | |
187 | ||
e9e85443 FL |
188 | To use a specific C compiler for compiling Open vSwitch user |
189 | programs, also specify it on the configure command line, like so: | |
4b11d5e8 | 190 | |
542cc9bb | 191 | `% ./configure CC=gcc-4.2` |
4b11d5e8 | 192 | |
e9e85443 | 193 | To use 'clang' compiler: |
97be1538 | 194 | |
542cc9bb | 195 | `% ./configure CC=clang` |
97be1538 | 196 | |
73c33892 BP |
197 | To supply special flags to the C compiler, specify them as CFLAGS on |
198 | the configure command line. If you want the default CFLAGS, which | |
199 | include "-g" to build debug symbols and "-O2" to enable optimizations, | |
200 | you must include them yourself. For example, to build with the | |
201 | default CFLAGS plus "-mssse3", you might run configure as follows: | |
202 | ||
203 | `% ./configure CFLAGS="-g -O2 -mssse3"` | |
204 | ||
4f7e5c27 RB |
205 | Note that these CFLAGS are not applied when building the Linux |
206 | kernel module. Custom CFLAGS for the kernel module are supplied | |
207 | using the EXTRA_CFLAGS variable when running make. So, for example: | |
208 | ||
209 | `% make EXTRA_CFLAGS="-Wno-error=date-time" | |
210 | ||
e9e85443 FL |
211 | To build the Linux kernel module, so that you can run the |
212 | kernel-based switch, pass the location of the kernel build | |
213 | directory on --with-linux. For example, to build for a running | |
214 | instance of Linux: | |
4b11d5e8 | 215 | |
542cc9bb | 216 | `% ./configure --with-linux=/lib/modules/`uname -r`/build` |
4b11d5e8 | 217 | |
e9e85443 FL |
218 | If --with-linux requests building for an unsupported version of |
219 | Linux, then "configure" will fail with an error message. Please | |
220 | refer to the [FAQ.md] for advice in that case. | |
a7ae9380 | 221 | |
e9e85443 FL |
222 | If you wish to build the kernel module for an architecture other |
223 | than the architecture of the machine used for the build, you may | |
224 | specify the kernel architecture string using the KARCH variable | |
225 | when invoking the configure script. For example, to build for MIPS | |
226 | with Linux: | |
4b11d5e8 | 227 | |
542cc9bb | 228 | `% ./configure --with-linux=/path/to/linux KARCH=mips` |
4b11d5e8 | 229 | |
e9e85443 FL |
230 | If you plan to do much Open vSwitch development, you might want to |
231 | add --enable-Werror, which adds the -Werror option to the compiler | |
232 | command line, turning warnings into errors. That makes it | |
233 | impossible to miss warnings generated by the build. | |
ad367b28 | 234 | |
e9e85443 FL |
235 | To build with gcov code coverage support, add --enable-coverage, |
236 | e.g.: | |
e3c7ed29 | 237 | |
542cc9bb | 238 | `% ./configure --enable-coverage` |
e3c7ed29 | 239 | |
e9e85443 FL |
240 | The configure script accepts a number of other options and honors |
241 | additional environment variables. For a full list, invoke | |
242 | configure with the --help option. | |
4b11d5e8 | 243 | |
e9e85443 FL |
244 | You can also run configure from a separate build directory. This |
245 | is helpful if you want to build Open vSwitch in more than one way | |
246 | from a single source directory, e.g. to try out both GCC and Clang | |
247 | builds, or to build kernel modules for more than one Linux version. | |
248 | Here is an example: | |
ef7889b4 | 249 | |
542cc9bb TG |
250 | `% mkdir _gcc && (cd _gcc && ../configure CC=gcc)` |
251 | `% mkdir _clang && (cd _clang && ../configure CC=clang)` | |
ef7889b4 | 252 | |
e9e85443 FL |
253 | |
254 | Building the Sources | |
255 | -------------------- | |
256 | ||
257 | 1. Run GNU make in the build directory, e.g.: | |
4b11d5e8 | 258 | |
542cc9bb | 259 | `% make` |
4b11d5e8 | 260 | |
380b39f7 BP |
261 | or if GNU make is installed as "gmake": |
262 | ||
542cc9bb | 263 | `% gmake` |
f6eb6b20 | 264 | |
ef7889b4 BP |
265 | If you used a separate build directory, run make or gmake from that |
266 | directory, e.g.: | |
267 | ||
542cc9bb TG |
268 | `% make -C _gcc` |
269 | `% make -C _clang` | |
ef7889b4 | 270 | |
e9e85443 FL |
271 | For improved warnings if you installed "sparse" (see "Prerequisites"), |
272 | add C=1 to the command line. | |
f8f26e98 | 273 | |
86b3f7e1 BP |
274 | Some versions of Clang and ccache are not completely compatible. |
275 | If you see unusual warnings when you use both together, consider | |
276 | disabling ccache for use with Clang. | |
277 | ||
e9e85443 | 278 | 2. Consider running the testsuite. Refer to "Running the Testsuite" |
875ef81b | 279 | below, for instructions. |
4b11d5e8 | 280 | |
e9e85443 | 281 | 3. Become root by running "su" or another program. |
875ef81b | 282 | |
e9e85443 | 283 | 4. Run "make install" to install the executables and manpages into the |
4b11d5e8 BP |
284 | running system, by default under /usr/local. |
285 | ||
e9e85443 | 286 | 5. If you built kernel modules, you may install and load them, e.g.: |
4b11d5e8 | 287 | |
542cc9bb TG |
288 | `% make modules_install` |
289 | `% /sbin/modprobe openvswitch` | |
4b11d5e8 | 290 | |
4b11d5e8 | 291 | To verify that the modules have been loaded, run "/sbin/lsmod" and |
9b80f761 | 292 | check that openvswitch is listed. |
4b11d5e8 | 293 | |
542cc9bb TG |
294 | If the `modprobe` operation fails, look at the last few kernel log |
295 | messages (e.g. with `dmesg | tail`): | |
dd2d79ce | 296 | |
9b80f761 | 297 | - The message "openvswitch: exports duplicate symbol |
dd2d79ce | 298 | br_should_route_hook (owned by bridge)" means that the bridge |
542cc9bb | 299 | module is loaded. Run `/sbin/rmmod bridge` to remove it. |
dd2d79ce | 300 | |
542cc9bb | 301 | If `/sbin/rmmod bridge` fails with "ERROR: Module bridge does |
dd2d79ce BP |
302 | not exist in /proc/modules", then the bridge is compiled into |
303 | the kernel, rather than as a module. Open vSwitch does not | |
304 | support this configuration (see "Build Requirements", above). | |
305 | ||
9b80f761 | 306 | - The message "openvswitch: exports duplicate symbol |
dd2d79ce BP |
307 | dp_ioctl_hook (owned by ofdatapath)" means that the ofdatapath |
308 | module from the OpenFlow reference implementation is loaded. | |
542cc9bb | 309 | Run `/sbin/rmmod ofdatapath` to remove it. (You might have to |
dd2d79ce BP |
310 | delete any existing datapaths beforehand, using the "dpctl" |
311 | program included with the OpenFlow reference implementation. | |
312 | "ovs-dpctl" will not work.) | |
313 | ||
314 | - Otherwise, the most likely problem is that Open vSwitch was | |
315 | built for a kernel different from the one into which you are | |
542cc9bb | 316 | trying to load it. Run `modinfo` on openvswitch.ko and on |
dd2d79ce BP |
317 | a module built for the running kernel, e.g.: |
318 | ||
542cc9bb | 319 | ``` |
9b80f761 | 320 | % /sbin/modinfo openvswitch.ko |
dd2d79ce | 321 | % /sbin/modinfo /lib/modules/`uname -r`/kernel/net/bridge/bridge.ko |
542cc9bb | 322 | ``` |
dd2d79ce BP |
323 | |
324 | Compare the "vermagic" lines output by the two commands. If | |
325 | they differ, then Open vSwitch was built for the wrong kernel. | |
326 | ||
327 | - If you decide to report a bug or ask a question related to | |
542cc9bb TG |
328 | module loading, please include the output from the `dmesg` and |
329 | `modinfo` commands mentioned above. | |
dd2d79ce | 330 | |
e9e85443 FL |
331 | There is an optional module parameter to openvswitch.ko called |
332 | vlan_tso that enables TCP segmentation offload over VLANs on NICs | |
333 | that support it. Many drivers do not expose support for TSO on VLANs | |
334 | in a way that Open vSwitch can use but there is no way to detect | |
335 | whether this is the case. If you know that your particular driver can | |
336 | handle it (for example by testing sending large TCP packets over VLANs) | |
337 | then passing in a value of 1 may improve performance. Modules built for | |
338 | Linux kernels 2.6.37 and later, as well as specially patched versions | |
339 | of earlier kernels, do not need this and do not have this parameter. If | |
340 | you do not understand what this means or do not know if your driver | |
341 | will work, do not set this. | |
3f6256af | 342 | |
e9e85443 | 343 | 6. Initialize the configuration database using ovsdb-tool, e.g.: |
4b11d5e8 | 344 | |
542cc9bb TG |
345 | `% mkdir -p /usr/local/etc/openvswitch` |
346 | `% ovsdb-tool create /usr/local/etc/openvswitch/conf.db vswitchd/vswitch.ovsschema` | |
4b11d5e8 | 347 | |
3b12adda BP |
348 | Startup |
349 | ======= | |
4b11d5e8 | 350 | |
3b12adda | 351 | Before starting ovs-vswitchd itself, you need to start its |
cb8141b2 BP |
352 | configuration database, ovsdb-server. Each machine on which Open |
353 | vSwitch is installed should run its own copy of ovsdb-server. | |
566b8c8d BP |
354 | Configure it to use the database you created during installation (as |
355 | explained above), to listen on a Unix domain socket, to connect to any | |
356 | managers specified in the database itself, and to use the SSL | |
8084a280 BP |
357 | configuration in the database: |
358 | ||
29701194 | 359 | % ovsdb-server --remote=punix:/usr/local/var/run/openvswitch/db.sock \ |
6faab099 JP |
360 | --remote=db:Open_vSwitch,Open_vSwitch,manager_options \ |
361 | --private-key=db:Open_vSwitch,SSL,private_key \ | |
362 | --certificate=db:Open_vSwitch,SSL,certificate \ | |
363 | --bootstrap-ca-cert=db:Open_vSwitch,SSL,ca_cert \ | |
29701194 | 364 | --pidfile --detach |
3b12adda | 365 | |
d3e3fb58 BP |
366 | (If you built Open vSwitch without SSL support, then omit |
367 | --private-key, --certificate, and --bootstrap-ca-cert.) | |
368 | ||
de4f3c10 | 369 | Then initialize the database using ovs-vsctl. This is only |
332b4e09 BP |
370 | necessary the first time after you create the database with |
371 | ovsdb-tool (but running it at any time is harmless): | |
372 | ||
de4f3c10 | 373 | % ovs-vsctl --no-wait init |
332b4e09 | 374 | |
3b12adda BP |
375 | Then start the main Open vSwitch daemon, telling it to connect to the |
376 | same Unix domain socket: | |
377 | ||
80df177a | 378 | % ovs-vswitchd --pidfile --detach |
3b12adda BP |
379 | |
380 | Now you may use ovs-vsctl to set up bridges and other Open vSwitch | |
381 | features. For example, to create a bridge named br0 and add ports | |
382 | eth0 and vif1.0 to it: | |
383 | ||
384 | % ovs-vsctl add-br br0 | |
385 | % ovs-vsctl add-port br0 eth0 | |
386 | % ovs-vsctl add-port br0 vif1.0 | |
387 | ||
388 | Please refer to ovs-vsctl(8) for more details. | |
4b11d5e8 | 389 | |
8b055d92 BP |
390 | Upgrading |
391 | ========= | |
392 | ||
393 | When you upgrade Open vSwitch from one version to another, you should | |
394 | also upgrade the database schema: | |
395 | ||
396 | 1. Stop the Open vSwitch daemons, e.g.: | |
397 | ||
542cc9bb | 398 | ``` |
012f5c4b | 399 | % kill `cd /usr/local/var/run/openvswitch && cat ovsdb-server.pid ovs-vswitchd.pid` |
542cc9bb | 400 | ``` |
8b055d92 BP |
401 | |
402 | 2. Install the new Open vSwitch release. | |
403 | ||
404 | 3. Upgrade the database, in one of the following two ways: | |
405 | ||
406 | - If there is no important data in your database, then you may | |
407 | delete the database file and recreate it with ovsdb-tool, | |
408 | following the instructions under "Building and Installing Open | |
76d5beb9 | 409 | vSwitch for Linux, FreeBSD or NetBSD". |
8b055d92 BP |
410 | |
411 | - If you want to preserve the contents of your database, back it | |
412 | up first, then use "ovsdb-tool convert" to upgrade it, e.g.: | |
413 | ||
542cc9bb | 414 | `% ovsdb-tool convert /usr/local/etc/openvswitch/conf.db vswitchd/vswitch.ovsschema` |
8b055d92 BP |
415 | |
416 | 4. Start the Open vSwitch daemons as described under "Building and | |
76d5beb9 | 417 | Installing Open vSwitch for Linux, FreeBSD or NetBSD" above. |
8b055d92 | 418 | |
4e375050 GS |
419 | Hot Upgrading |
420 | ============= | |
421 | Upgrading Open vSwitch from one version to the next version with minimum | |
422 | disruption of traffic going through the system that is using that Open vSwitch | |
423 | needs some considerations: | |
424 | ||
425 | 1. If the upgrade only involves upgrading the userspace utilities and daemons | |
426 | of Open vSwitch, make sure that the new userspace version is compatible with | |
427 | the previously loaded kernel module. | |
428 | ||
429 | 2. An upgrade of userspace daemons means that they have to be restarted. | |
ea274df9 | 430 | Restarting the daemons means that the OpenFlow flows in the ovs-vswitchd daemon |
4e375050 GS |
431 | will be lost. One way to restore the flows is to let the controller |
432 | re-populate it. Another way is to save the previous flows using a utility | |
433 | like ovs-ofctl and then re-add them after the restart. Restoring the old flows | |
434 | is accurate only if the new Open vSwitch interfaces retain the old 'ofport' | |
435 | values. | |
436 | ||
437 | 3. When the new userspace daemons get restarted, they automatically flush | |
438 | the old flows setup in the kernel. This can be expensive if there are hundreds | |
439 | of new flows that are entering the kernel but userspace daemons are busy | |
440 | setting up new userspace flows from either the controller or an utility like | |
441 | ovs-ofctl. Open vSwitch database provides an option to solve this problem | |
442 | through the other_config:flow-restore-wait column of the Open_vSwitch table. | |
443 | Refer to the ovs-vswitchd.conf.db(5) manpage for details. | |
444 | ||
445 | 4. If the upgrade also involves upgrading the kernel module, the old kernel | |
446 | module needs to be unloaded and the new kernel module should be loaded. This | |
447 | means that the kernel network devices belonging to Open vSwitch is recreated | |
448 | and the kernel flows are lost. The downtime of the traffic can be reduced | |
449 | if the userspace daemons are restarted immediately and the userspace flows | |
450 | are restored as soon as possible. | |
451 | ||
452 | The ovs-ctl utility's "restart" function only restarts the userspace daemons, | |
453 | makes sure that the 'ofport' values remain consistent across restarts, restores | |
454 | userspace flows using the ovs-ofctl utility and also uses the | |
455 | other_config:flow-restore-wait column to keep the traffic downtime to the | |
456 | minimum. The ovs-ctl utility's "force-reload-kmod" function does all of the | |
457 | above, but also replaces the old kernel module with the new one. Open vSwitch | |
458 | startup scripts for Debian, XenServer and RHEL use ovs-ctl's functions and it | |
459 | is recommended that these functions be used for other software platforms too. | |
460 | ||
e3c7ed29 BP |
461 | Testsuites |
462 | ========== | |
463 | ||
464 | This section describe Open vSwitch's built-in support for various test | |
e9e85443 | 465 | suites. You must bootstrap, configure and build Open vSwitch (steps are |
e3c7ed29 BP |
466 | in "Building and Installing Open vSwitch for Linux, FreeBSD or NetBSD" |
467 | above) before you run the tests described here. You do not need to | |
468 | install Open vSwitch or to build or load the kernel module to run | |
469 | these test suites. You do not need supervisor privilege to run these | |
470 | test suites. | |
875ef81b | 471 | |
e3c7ed29 BP |
472 | Self-Tests |
473 | ---------- | |
474 | ||
475 | Open vSwitch includes a suite of self-tests. Before you submit patches | |
875ef81b KM |
476 | upstream, we advise that you run the tests and ensure that they pass. |
477 | If you add new features to Open vSwitch, then adding tests for those | |
478 | features will ensure your features don't break as developers modify | |
479 | other areas of Open vSwitch. | |
480 | ||
e3c7ed29 | 481 | Refer to "Testsuites" above for prerequisites. |
875ef81b KM |
482 | |
483 | To run all the unit tests in Open vSwitch, one at a time: | |
542cc9bb | 484 | `make check` |
875ef81b KM |
485 | This takes under 5 minutes on a modern desktop system. |
486 | ||
487 | To run all the unit tests in Open vSwitch, up to 8 in parallel: | |
542cc9bb | 488 | `make check TESTSUITEFLAGS=-j8` |
875ef81b KM |
489 | This takes under a minute on a modern 4-core desktop system. |
490 | ||
491 | To see a list of all the available tests, run: | |
542cc9bb | 492 | `make check TESTSUITEFLAGS=--list` |
875ef81b KM |
493 | |
494 | To run only a subset of tests, e.g. test 123 and tests 477 through 484: | |
542cc9bb | 495 | `make check TESTSUITEFLAGS='123 477-484'` |
875ef81b KM |
496 | (Tests do not have inter-dependencies, so you may run any subset.) |
497 | ||
498 | To run tests matching a keyword, e.g. "ovsdb": | |
542cc9bb | 499 | `make check TESTSUITEFLAGS='-k ovsdb'` |
875ef81b KM |
500 | |
501 | To see a complete list of test options: | |
542cc9bb | 502 | `make check TESTSUITEFLAGS=--help` |
875ef81b KM |
503 | |
504 | The results of a testing run are reported in tests/testsuite.log. | |
505 | Please report test failures as bugs and include the testsuite.log in | |
506 | your report. | |
507 | ||
508 | If you have "valgrind" installed, then you can also run the testsuite | |
509 | under valgrind by using "make check-valgrind" in place of "make | |
510 | check". All the same options are available via TESTSUITEFLAGS. When | |
542cc9bb TG |
511 | you do this, the "valgrind" results for test `<N>` are reported in files |
512 | named `tests/testsuite.dir/<N>/valgrind.*`. You may find that the | |
875ef81b | 513 | valgrind results are easier to interpret if you put "-q" in |
447fe5cf | 514 | ~/.valgrindrc, since that reduces the amount of output. |
875ef81b KM |
515 | |
516 | Sometimes a few tests may fail on some runs but not others. This is | |
517 | usually a bug in the testsuite, not a bug in Open vSwitch itself. If | |
518 | you find that a test fails intermittently, please report it, since the | |
519 | developers may not have noticed. | |
520 | ||
e3c7ed29 BP |
521 | OFTest |
522 | ------ | |
523 | ||
524 | OFTest is an OpenFlow protocol testing suite. Open vSwitch includes a | |
525 | Makefile target to run OFTest with Open vSwitch in "dummy mode". In | |
526 | this mode of testing, no packets travel across physical or virtual | |
527 | networks. Instead, Unix domain sockets stand in as simulated | |
528 | networks. This simulation is imperfect, but it is much easier to set | |
529 | up, does not require extra physical or virtual hardware, and does not | |
530 | require supervisor privileges. | |
531 | ||
532 | To run OFTest with Open vSwitch, first read and follow the | |
533 | instructions under "Testsuites" above. Second, obtain a copy of | |
534 | OFTest and install its prerequisites. You need a copy of OFTest that | |
535 | includes commit 406614846c5 (make ovs-dummy platform work again). | |
536 | This commit was merged into the OFTest repository on Feb 1, 2013, so | |
537 | any copy of OFTest more recent than that should work. Testing OVS in | |
538 | dummy mode does not require root privilege, so you may ignore that | |
539 | requirement. | |
540 | ||
541 | Optionally, add the top-level OFTest directory (containing the "oft" | |
542 | program) to your $PATH. This slightly simplifies running OFTest later. | |
543 | ||
544 | To run OFTest in dummy mode, run the following command from your Open | |
545 | vSwitch build directory: | |
542cc9bb TG |
546 | `make check-oftest OFT=<oft-binary>` |
547 | where `<oft-binary>` is the absolute path to the "oft" program in | |
e3c7ed29 BP |
548 | OFTest. |
549 | ||
550 | If you added "oft" to your $PATH, you may omit the OFT variable | |
551 | assignment: | |
542cc9bb | 552 | `make check-oftest` |
e3c7ed29 BP |
553 | By default, "check-oftest" passes "oft" just enough options to enable |
554 | dummy mode. You can use OFTFLAGS to pass additional options. For | |
555 | example, to run just the basic.Echo test instead of all tests (the | |
556 | default) and enable verbose logging: | |
542cc9bb | 557 | `make check-oftest OFT=<oft-binary> OFTFLAGS='--verbose -T basic.Echo'` |
e3c7ed29 BP |
558 | |
559 | If you use OFTest that does not include commit 4d1f3eb2c792 (oft: | |
560 | change default port to 6653), merged into the OFTest repository in | |
561 | October 2013, then you need to add an option to use the IETF-assigned | |
562 | controller port: | |
542cc9bb | 563 | `make check-oftest OFT=<oft-binary> OFTFLAGS='--port=6653'` |
e3c7ed29 BP |
564 | |
565 | Please interpret OFTest results cautiously. Open vSwitch can fail a | |
566 | given test in OFTest for many reasons, including bugs in Open vSwitch, | |
567 | bugs in OFTest, bugs in the "dummy mode" integration, and differing | |
568 | interpretations of the OpenFlow standard and other standards. | |
569 | ||
570 | Open vSwitch has not been validated against OFTest. Please do report | |
571 | test failures that you believe to represent bugs in Open vSwitch. | |
572 | Include the precise versions of Open vSwitch and OFTest in your bug | |
573 | report, plus any other information needed to reproduce the problem. | |
574 | ||
575 | Ryu | |
576 | --- | |
577 | ||
578 | Ryu is an OpenFlow controller written in Python that includes an | |
579 | extensive OpenFlow testsuite. Open vSwitch includes a Makefile target | |
580 | to run Ryu in "dummy mode". See "OFTest" above for an explanation of | |
581 | dummy mode. | |
582 | ||
583 | To run Ryu tests with Open vSwitch, first read and follow the | |
584 | instructions under "Testsuites" above. Second, obtain a copy of Ryu, | |
585 | install its prerequisites, and build it. You do not need to install | |
586 | Ryu (some of the tests do not get installed, so it does not help). | |
587 | ||
588 | To run Ryu tests, run the following command from your Open vSwitch | |
589 | build directory: | |
542cc9bb TG |
590 | `make check-ryu RYUDIR=<ryu-source-dir>` |
591 | where `<ryu-source-dir>` is the absolute path to the root of the Ryu | |
592 | source distribution. The default `<ryu-source-dir>` is `$srcdir/../ryu` | |
e3c7ed29 | 593 | where $srcdir is your Open vSwitch source directory, so if this |
542cc9bb | 594 | default is correct then you make simply run `make check-ryu`. |
e3c7ed29 BP |
595 | |
596 | Open vSwitch has not been validated against Ryu. Please do report | |
597 | test failures that you believe to represent bugs in Open vSwitch. | |
598 | Include the precise versions of Open vSwitch and Ryu in your bug | |
599 | report, plus any other information needed to reproduce the problem. | |
600 | ||
1ce96d2a TG |
601 | Vagrant |
602 | ------- | |
603 | ||
b56b2566 | 604 | Requires: Vagrant (version 1.7.0 or later) and a compatible hypervisor |
1ce96d2a | 605 | |
e9e85443 FL |
606 | You must bootstrap and configure the sources (steps are in "Building |
607 | and Installing Open vSwitch for Linux, FreeBSD or NetBSD" above) before | |
608 | you run the steps described here. | |
609 | ||
1ce96d2a TG |
610 | A Vagrantfile is provided allowing to compile and provision the source |
611 | tree as found locally in a virtual machine using the following commands: | |
612 | ||
613 | vagrant up | |
614 | vagrant ssh | |
615 | ||
616 | This will bring up w Fedora 20 VM by default, alternatively the | |
b56b2566 AZ |
617 | `Vagrantfile` can be modified to use a different distribution box as |
618 | base. Also, the VM can be reprovisioned at any time: | |
1ce96d2a TG |
619 | |
620 | vagrant provision | |
621 | ||
b56b2566 AZ |
622 | OVS out-of-tree compilation environment can be set up with: |
623 | ||
624 | ./boot.sh | |
625 | vagrant provision --provision-with configure_ovs,build_ovs | |
626 | ||
627 | This will set up an out-of-tree build environment in /home/vagrant/build. | |
628 | The source code can be found in /vagrant. Out-of-tree build is preferred | |
629 | to work around limitations of the sync file systems. | |
630 | ||
631 | To recompile and reinstall OVS using RPM: | |
632 | ||
633 | ./boot.sh | |
634 | vagrant provision --provision-with configure_ovs,install_rpm | |
635 | ||
8187f55b TG |
636 | Continuous Integration with Travis-CI |
637 | ------------------------------------- | |
638 | ||
639 | A .travis.yml file is provided to automatically build Open vSwitch with | |
640 | various build configurations and run the testsuite using travis-ci. | |
641 | Builds will be performed with gcc, sparse and clang with the -Werror | |
642 | compiler flag included, therefore the build will fail if a new warning | |
643 | has been introduced. | |
644 | ||
645 | The CI build is triggered via git push (regardless of the specific | |
646 | branch) or pull request against any Open vSwitch GitHub repository that | |
647 | is linked to travis-ci. | |
648 | ||
649 | Instructions to setup travis-ci for your GitHub repository: | |
650 | ||
35ab726f | 651 | 1. Go to http://travis-ci.org/ and sign in using your GitHub ID. |
8187f55b TG |
652 | 2. Go to the "Repositories" tab and enable the ovs repository. You |
653 | may disable builds for pushes or pull requests. | |
654 | 3. In order to avoid forks sending build failures to the upstream | |
655 | mailing list, the notification email recipient is encrypted. If you | |
656 | want to receive email notification for build failures, replace the | |
657 | the encrypted string: | |
658 | 3.1) Install the travis-ci CLI (Requires ruby >=2.0): | |
659 | gem install travis | |
660 | 3.2) In your Open vSwitch repository: | |
661 | travis encrypt mylist@mydomain.org | |
662 | 3.3) Add/replace the notifications section in .travis.yml and fill | |
663 | in the secure string as returned by travis encrypt: | |
664 | ||
665 | notifications: | |
666 | email: | |
667 | recipients: | |
668 | - secure: "....." | |
669 | ||
670 | (You may remove/omit the notifications section to fall back to | |
671 | default notification behaviour which is to send an email directly | |
672 | to the author and committer of the failing commit. Note that the | |
673 | email is only sent if the author/committer have commit rights for | |
674 | the particular GitHub repository). | |
675 | ||
676 | 4. Pushing a commit to the repository which breaks the build or the | |
677 | testsuite will now trigger a email sent to mylist@mydomain.org | |
678 | ||
4b11d5e8 | 679 | Bug Reporting |
e3c7ed29 | 680 | ============= |
4b11d5e8 | 681 | |
37ea6436 | 682 | Please report problems to bugs@openvswitch.org. |
9feb1017 TG |
683 | |
684 | [README.md]:README.md | |
685 | [INSTALL.Debian.md]:INSTALL.Debian.md | |
686 | [INSTALL.Fedora.md]:INSTALL.Fedora.md | |
687 | [INSTALL.RHEL.md]:INSTALL.RHEL.md | |
688 | [INSTALL.XenServer.md]:INSTALL.XenServer.md | |
689 | [INSTALL.NetBSD.md]:INSTALL.NetBSD.md | |
690 | [INSTALL.DPDK.md]:INSTALL.DPDK.md | |
691 | [INSTALL.userspace.md]:INSTALL.userspace.md | |
692 | [FAQ.md]:FAQ.md |