bump version to 3.2.0-1+pmx8

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

fix #5009: avoid waiting for stdout eof of /etc/network/ scripts

Previously, PVE (7 and 8) hosts would hang at boot if both ntpsec and
ntpsec-ntpdate are installed. The root cause for the hang is an
unfortunate interaction between ntpsec, ntpsec-ntpdate and the PVE
ifupdown2 package. The hang happens because ntpsec-ntpdate installs a
hook /etc/network/if-up.d/ntpsec-ntpdate that blocks until networking
is available if ntpsec is installed. Previously, ifupdown2 would wait
for the hook to terminate, so networking would never become available,
resulting in a deadlock. See the bug report [0] for more information.

With this patch, ifupdown2 runs the hook in the background and does
not wait for it to terminate, thus resolving the deadlock.

This patch was already applied upstream [1]. Backport it to make it
available before the next upstream release.

[0] https://bugzilla.proxmox.com/show_bug.cgi?id=5009
[1] https://github.com/CumulusNetworks/ifupdown2/pull/274

Signed-off-by: Friedrich Weber <f.weber@proxmox.com>

bump version to 3.2.0-1+pmx7

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

Fix vxlan addon trying to remove fdb entries on reload with evpn

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

fix patch 0008-lacp: replace else with if condition

The original patch removed the first branch of `if` condition, leaving the
`else` in which matched the `if` above.
The correct condition for this `else` is any bond mode that is not `lacp`
(4).

Signed-off-by: Mira Limbeck <m.limbeck@proxmox.com>

bump version to 3.2.0-1+pmx6

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

Revert "patch: fix bond mac address at boot."

causes odd issues, reported in the forum [0], so revert before we move
this along to the enterprise repository.

[0]: https://forum.proxmox.com/threads/136359/

Will be replaced by a systemd policy file [1].

[1]: https://lists.proxmox.com/pipermail/pve-devel/2023-September/059129.html

This reverts commit a1a0ee382869f52b66ab67b237138b0375183a9e.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 3.2.0-1+pmx5

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

patch: fix bond mac address at boot.

since systemd v241, like for bridge, the bond mac is setup randomly at
boot, instead inherit from first slave.

Then, on next ifreload, ifupdown2 was already fixing it, but with an
down/up of the bond (with potentials impact on the network).

This patch have been sent upstream:
https://github.com/CumulusNetworks/ifupdown2/pull/270

This patch is applying fine too for ifupdown2 for proxmox7

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 3.2.0-1+pmx4

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

patch: fix ipv6 slaac on bridge

reported on the forum
https://forum.proxmox.com/threads/hi-i-stumble-upon-ipv6-slaac-issue-after-updating-to-pve8-0-3.129553

the sysctl accept_ra|autoconf was not applied on bridge interfaces

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

bump version to 3.2.0-1+pmx3

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

d/patches: fix missing newline at end of series file

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

patch: add missing import traceback in scheduler

upstream: https://github.com/CumulusNetworks/ifupdown2/pull/267

if a script in /etc/network/ifup.d/ is segfaulting,

ifup is crashing with

info: executing2 /etc/network/if-up.d/postfix
debug: lo: up : running script /etc/network/if-up.d/resolved info: executing2 /etc/network/if-up.d/resolved
error: name 'traceback' is not defined
debug: saving state ..
info: exit status 1
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

patch: ethtool: add rx-vlan-filter support

to fix nic like mellanox && vlan-aware-bridge

upstream pull request:
https://github.com/CumulusNetworks/ifupdown2/pull/266

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

add ethtool as depend

some users need to disable some buggy features for their nic,
install ethtool by default

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 3.2.0-1+pmx2

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

ship again policy for setting the bridge MAC from its first port

Fixes: cf37f18 ("merge upstream debian packaging metadata with ours")
Reported-by: Mira Limbeck <m.limbeck@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

buildsys: derive upload dist automatically

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 3.2.0-1+pmx1

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
 [ T: merge and update changelog ]
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

lintian: fix/override some complaints

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

fix some outdated python interpreter shebang

luckily lintian complained, so fix it for two plugins we add in
patches and library module from upstream.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

buildsys: add sbuild target for convenience

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

d/control: raise standards version compliance to 4.6.2

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

buildsys: add dsc target

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

buildsys: use full DEB_VERSION

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

d/control: define compat level via build-depends and raise to 13

drop outdated systemd override fallback

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

merge in downstream packaging changes & drop patches

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

merge upstream and our changelog

with tabs removed from upstream entries due to not being valid in a
changelog

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

merge upstream debian packaging metadata with ours

as first step towards hosting the debian/packaging fully ourselves.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

update submodule to 3.2.0-pmx1

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

patch: remove lacp bond min-links=0 warning

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

patch: add ipv6 slaac support upstream patch

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

patch: reorder patches

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

patch: remove old upstreamed patches

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

patch: patch5: fix code nit

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

makefile: convert to use simple parenthesis

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 3.1.0-1+pmx4

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

patch: add vlan interface ifdown/ifup when changes on reload, like for vxlan

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

patch : vlan: fix vlan-protocol query check

upstream:
https://github.com/CumulusNetworks/ifupdown2/pull/258
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

add ovs support for fakebridge.

This was request by a proxmox user on ifupdown2 github issues.

https://github.com/CumulusNetworks/ifupdown2/issues/245

It was possible to do it with ifupdown1, but not ifupdown2.

The patch is already applied upstream
https://github.com/CumulusNetworks/ifupdown2/pull/246

example to define a fake ovs bridge with vlan10:

auto vmbr0
iface vmbr0 inet manual
        ovs_type OVSBridge

auto vmbr0v10
iface vmbr0v10 inet manual
        ovs_type OVSBridge
        ovs_bridge vmbr0
        ovs_options vmbr0 10

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

bump version to 3.1.0-1+pmx3

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

patch: fix 3.1 pointopoint regression

user have reported a bug with pointopoint in 3.1

https://forum.proxmox.com/threads/hetzner-pve-7-0-problems-after-reboot-maybe-ifupdown2.92935/

it's coming from a change in
https://github.com/CumulusNetworks/ifupdown2/commit/ba5437b9ecf9aa1401ac985ebf97009cc3114481

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

bump version to 3.1.0-1+pmx2

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

do not trigger ifreload in installer

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

buildsys: change upload dist to bullseye and add pmg and pbs

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 3.1.0-1+pmx1

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

ship policy for setting the bridge MAC from its first port

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

update submodule to what will be 3.1.0

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

update patches for 3.1.0

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

bump version to 3.0.0-1+pve6

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

add patch to reload after first install

when installing for the first time we want to reload the network config,
since sometimes the network will not be configured, e.g. when
coming from ifupdown. this would break installing ifupdown2 over
the network (e.g. ssh)

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>

bump version to 3.0.0-1+pve5

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

d/rules: add dh_installsystemd override for compat >= 12

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 3.0.0-1+pve4

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

debian: update comapt level to 12 and drop dh-systemd B-D

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 3.0.0-1+pve3

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

update ifupdown2 submodule

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

update patch10: only rewrite config on first ifupdown2

we don't want to update config at each upgrade.

postinst can't detect upgrade vs install, it need to be done in preinst.

so I create a tmp file in preinst for first install, and detect this file
in postinst.
(as we need to have ifupdown2 installed first, to have the config rewrite working)

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

patch: allow vlan tag inside vxlan tunnel

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

remove patch 0009-address-don-t-process_mtu-if-ovs-mtu-is-defined.patch

upstream : https://github.com/CumulusNetworks/ifupdown2/commit/8994bdd39af6014c6de02cb0d9eb15535af2123e#diff-1481ea1b5d4c5d73242f448fc8412b21
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

add patch 0009-address-don-t-process_mtu-if-ovs-mtu-is-defined.patch

https://github.com/CumulusNetworks/ifupdown2/pull/166

Openvswitch already manage mtu if ovs-mtu is defined.
(Ovs manage mtu in userland, and sync mtu for some interfaces in kernel).

If mtu is changed by address module, before the ovs userland mtu,
this give packets drop.

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 3.0.0-1+pve1

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

update to master to avoid extra patches

All upstreamed by Alexandre and the master at time of writing is
besides one patch just that, so use it directly.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

add patch 0008-openvswitch-ovs-ports-condone-regex-exclude-tap-veth.patch

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

control: update python3

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

add extra patch: 0004-fix-start-networking-permission.patch

https://github.com/CumulusNetworks/ifupdown2/commit/5cbe13d17a28e1ce4a411092f0bd659360406572
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

add extra patch: 0003-ovs-multiple-ovsport.patch

https://github.com/CumulusNetworks/ifupdown2/pull/164
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

add extra patch: 0002-nllistener-increase-buffer.patch

https://github.com/CumulusNetworks/ifupdown2/commit/523b347ad49234efb7787f6f084070034de7e977
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

remove 0008-add-openvswitch-addon.patch

openvswitch is now upstream

add extra-patch for ovs-ports-condone-regex
https://github.com/CumulusNetworks/ifupdown2/pull/157

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

rebase 0007-networking.service-fix-dependencies-and-ordering.patch

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

rebase 0001-don-t-remove-tap-veth-fwpr-interfaces-from-bridge-on.patch

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

remove extra patches

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

update submodule for 3.0.0 tag

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 2.0.1-1+pve10

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

postinst/postrm: only update network config on pve-common using systems

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 2.0.1-1+pve9

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

openvswitch: don't remove tap|veth interfaces when adding an internal ovs port

Currently, tap|veth interfaces are removed if user add a new ovs internal port and reload.

add ovs-ports-condone-regex option, like for bridge (to have the patch upstream).
default options to "tap|veth|fwpr"

to avoid to remove theses interfaces

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

bump version to 2.0.1-1+pve8

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

drop now outdated allow=ovs service ExecStart/Stop

we now have a real OVS plugin which can handle this.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 2.0.1-1+pve7

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

post* compat rewrite: do not print changes to stdout

It can contain unicode stuff which gets us warnings and could also be
quite long, so avoid printing that out for now but add some newlines
to make the message stand out more.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

netowrking-pre: fix udevadm path for non usr-merged systems

udevadm ships actually a full executable copy in /bin and /sbin, so
go for the path systemd-udev-settle.service is using too - but it
shouldn't matter

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 2.0.1-1+pve6

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

drop breaks on ovs

it seems the OVS plugin can handle older versions still fine

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 2.0.1-1+pve5

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

d/control: record break for pve-common and ovs

while we not actively break that we really want to ensure that those
or newer versions are used

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

install/purge compat change, graceful exit

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

patch : postinst/postrm : convert network config for compatibility

add openvswitch addon

This reimplement the ifupdown1 script with same options,

with reloading included !

remove patch 0008-execute-addons-scripts-before-modules.patch

This was a workaround for openvswitch

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

add patch to ifup/ifdown allow=ovs on start/stop

This is fixing possible race condition with ovs 2.12

ans also cleanly remove ovs interfaces on networking service stop

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

add ifupdown2-pre.service service

ifupdown1 have a service to launch "udevadm settle",
to be sure that networking devices are correctly setup
before networking service is started.

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=920623
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

patch: don't change interface forwarding value if not defined

Seem that my previous patch was forgot in the 2.0
https://github.com/CumulusNetworks/ifupdown2/pull/101

Without this, user with routed setup with sysctl fordwarding enable,
is removed when interface is up

User have reported the bug here:
https://forum.proxmox.com/threads/no-internet-on-all-vms-after-update.64404/#post-296540

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>

bump version to 2.0.1-1+pve4

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

patch: config_tuning: state_dir=/run/network/

we don't want state_dir persistent across reboot.
I have add some ifreload hanging after a crash, with non existing old interfaces

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

patch: execute addons scripts before modules

ifupdown2.0 now setup address in pre-up, but ovs script also
create in pre-up, but after address module.

This patch execute addons scripts before ifupdown modules

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

followup: restore service ordering state as previous

commit 214bc505acdeaa33c9b9b14b75e16f292f8d95f3 removed this by
mistake. While I fix it before detecting that (thank Wolfgang!) lets
restore it more like the state it was.

Add missing ordering:
  After=network-pre.target
    See systemd.special(7)'s description of this target
  After=systemd-sysctl.service
    ifupdown does the same - we want net.*.conf.default.*
    sysctl keys to apply to newly created interfaces
  After=systemd-modules-load.service
    ifupdown does the same, though this should be mostly
    optional as modules should be autoloaded anyway
  Before=network.target
    This is required to prevent services which require
    network to be started too early and listen on wrong
    addresses (iow. only on loopback or ipv4-only).
  Before=network-online.target
    See systemd.special(7)'s description. We are the
    provider of this target.
  Before=shutdown.target
    ifupdown does it this way, it also makes more sense
    given the Conflict entry, compared to the previous
    WantedBy entry in [Install]

Changed install section:
  WantedBy=multi-user.target
    I wasn't sure about this. ifupdown does this.
    basic.target didn't seem useful since we actually want:
  WantedBy=network-online.target
    We provide this, so we should be installed into it.
  removed WantedBy=network.target
    We strictly want to be ordered before this and instead
    are required by multi-user.target already.
  removed WantedBy=shutdown.target
    I didn't see the point.

Originally-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

bump version to 2.0.1-1+pve3

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>

fix networking.service ordering

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>