5
0
mirror of git://git.proxmox.com/git/pve-common.git synced 2025-01-10 09:17:37 +03:00
Commit Graph

1063 Commits

Author SHA1 Message Date
Alexandre Derumier
f82c73738d tests: unknown interfaces order: rename vlan interfaces to unknown
vlan(X) interfaces are not unknown anymore
use generic name instead

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2020-01-25 16:01:34 +01:00
Alexandre Derumier
bbe7d3edf3 INotify: improve vlan interface parsing
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2020-01-25 16:01:34 +01:00
Moayad
c3733145eb Add build dependency libtest-mockmodule-perl
Signed-off-by: Moayad Almalat <m.almalat@proxmox.com>
2020-01-20 16:02:37 +01:00
Thomas Lamprecht
83ef072e57 ACME: comment fixup some POST to GET-as-POST
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2020-01-15 14:28:51 +01:00
Wolfgang Link
b9ca506c37 ACME: Change authorization call
As Let's Encrypt will no more allow GET calls[0], we have to change
to GET-as-POST[1] requests.

[0]: https://community.letsencrypt.org/t/acme-v2-scheduled-deprecation-of-unauthenticated-resource-gets/74380/4
[1]: https://tools.ietf.org/html/rfc8555#section-6.3

Signed-off-by: Wolfgang Link <w.link@proxmox.com>
[ Thomas: Add ACME tag and reference GET-as-POST[1] ]
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2020-01-15 13:54:02 +01:00
Thomas Lamprecht
629dc37548 bump version to 6.0-10
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2020-01-13 17:52:07 +01:00
Thomas Lamprecht
0e4d81adb8 certs: generate_csr: allow to set CN explicit
Else, when used with ACME, the SAN is always sorted so we always get
the Subject Alternative Name sorting alphabetically first, which
doesn't necessarily has to be the "primary" domain. While this is
rather cosmetically (all SANs are equal) it could still result it
flapping CN when SANs and thus possibly the order changes, e.g., in
our CDN mirror pool. It also doesn't costs anything to allow control
over this, so why not..

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2020-01-13 17:38:08 +01:00
Thomas Lamprecht
055f076be5 followup code cleanup
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2020-01-11 16:15:02 +01:00
Thomas Lamprecht
6f830d1d24 followup trailing whitespace fixes
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2020-01-11 16:12:33 +01:00
Alexandre Derumier
2d1e9a02c3 INotify: network : add ovs_mtu option
This is also rewriting any "mtu" option on a ovs interface
to "ovs_mtu"

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2020-01-11 16:11:04 +01:00
Alexandre Derumier
b94d05ecc6 INotify: add bond-primary option
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2020-01-11 16:11:04 +01:00
Alexandre Derumier
c8ff0bdf3d INotify: allow vlan tagged bridge interface on non-vlanaware bridge
Seem that it's working too with non-vlanaware bridge

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2020-01-11 16:11:04 +01:00
Alexandre Derumier
f5d8be06b6 Inotify: forbid ip address on bridged interface.
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2020-01-11 16:11:04 +01:00
Alexandre Derumier
c86cfb8bbd INotify: remove allow-hotplug from /etc/network/interfaces
for user installing proxmox on top of debian,
debian install by default the first nic with allow-hotplug.

This is conflicting with "auto ...", but worst with ovs "allow-ovs ...".

User have reported race with ovs, where ovs vmbr was up before the nic.
https://forum.proxmox.com/threads/no-network-on-server-unless-i-ifdown-ifup-vmbr0.62733/

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2020-01-08 10:32:36 +01:00
Thomas Lamprecht
12349ad05f REST Handler: check for value defindness when untainting
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2020-01-08 10:32:12 +01:00
Thomas Lamprecht
f27d5e6b7a sort module usage + some newlines for readabilty
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2020-01-08 10:31:39 +01:00
Thomas Lamprecht
1f929ade0a grammar fix: s/does not exists/does not exist/g
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-12-13 12:05:54 +01:00
Thomas Lamprecht
0da8dc9d77 README.dev: drop apt-transport-https
since apt 1.5 this is not required anymore

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-12-04 10:19:16 +01:00
Thomas Lamprecht
f060024441 bump version to 6.0-9
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-11-23 16:15:14 +01:00
Thomas Lamprecht
2f98cd72a8 ProcFSTools: add kernel_version
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-11-23 12:15:59 +01:00
Thomas Lamprecht
510f865b5c tests: allow to make tests in parallel
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-11-23 12:14:19 +01:00
Thomas Lamprecht
69e15ccb47 be a bit more specific about not using this big list
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-11-23 10:30:22 +01:00
Thomas Lamprecht
77624d0219 remove corosync-dev from build deps
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-11-23 10:20:29 +01:00
Thomas Lamprecht
e2f2c2d026 CLIHandler: record missing JSONSchema usage
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-11-22 19:30:38 +01:00
Thomas Lamprecht
450d7efcd1 bump version to 6.0-8
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-11-20 18:43:15 +01:00
Dominik Csapak
882eaf6ad4 SysFSTools: do not assume pci domain 0000
but prepend '0000' to ids where no domain is given, to keep the ability
to use the shorthand syntax (e.g. 00:01.0 instead of 0000:00:01.0)

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
2019-11-19 15:54:13 +01:00
Wolfgang Bumiller
0dd5686aef avoid cyclic reference in closure
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-11-19 09:49:10 +01:00
Thomas Lamprecht
848231afd2 section config: remove Data::Dumper usage
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-11-18 15:39:02 +01:00
Thomas Lamprecht
8bc99fda82 followup: avoid very long line through comment moval
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-11-12 14:16:01 +01:00
Dominik Csapak
c1d62a9d54 fix Tools::df for big storage usage values
if the size/avail of a mount is bigger than a certain amount,
json_encode writes the number in scientific format, which was not
matched by our \d+ regex.

This then resulted in 'undef' values for the result hash and
subsequently led to errors and warnings.

Extend the regex to also match scientific formatted numbers,
perl can then use them as is, no need for any conversion.

https://forum.proxmox.com/threads/bug-in-pve-tools-df-when-adding-petabyte-scale-storage.60090/#post-277050

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-11-12 14:12:02 +01:00
Wolfgang Bumiller
76c5fee814 Tools: add new mount api wrappers
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-11-11 17:09:56 +01:00
Wolfgang Bumiller
88c2babd16 add missing 1; at the end of Syscall.pm
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-11-11 17:09:56 +01:00
Wolfgang Bumiller
5569cc1634 PVE::Syscall: add new mount api constants
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-11-11 17:09:56 +01:00
Wolfgang Bumiller
1b0bc6c0ab tools: add AT_FDCWD and extend exports
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-11-11 17:09:56 +01:00
Wolfgang Bumiller
34fe939242 ProcFSTools: include ppid in read_proc_pid_stat
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-11-11 17:09:56 +01:00
Thomas Lamprecht
9862aca278 bump version to 6.0-7
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-11-08 12:48:36 +01:00
Fabian Grünbichler
4e91db0ae8 cert: add fingerprint helper
for usage in pve-cluster's certificate cache.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2019-11-08 12:47:42 +01:00
Thomas Lamprecht
b15e50dda1 network: cleanup get_local_ip_from_cidr
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-11-08 12:47:16 +01:00
Dominik Csapak
484b6b398b JSONSchema: add pve-tag format
this will be used for vm/ct tag-lists, so that (config) management systems
or similar add additional information that does not reside in the
description

putting it here, since we want to eventually have it also for
nodes,storages,etc.

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
2019-10-30 08:43:43 +01:00
Thomas Lamprecht
e1d864ebdf bump version to 6.0-6
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-10-29 08:07:34 +01:00
Thomas Lamprecht
9b0220b55d d/control: record breaks of pve-container (<< 3.0-9)
As we drop the arch translation part used by pve-container packages
in version 3.0-8 or older we need to break them, to avoid broken
newly created containers.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-10-29 07:29:02 +01:00
Thomas Lamprecht
b8faece385 followup: drop get_host_arch prototype
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-10-29 07:16:38 +01:00
Stefan Reiter
ce007e99ff tools: get_host_arch: return raw uname machine entry
The current version had only one user in LXC, so move the LXC-specific
code there to reuse this in QemuServer.

Also cache, since the host's architecture can't change during runtime.

Signed-off-by: Stefan Reiter <s.reiter@proxmox.com>
2019-10-29 07:13:54 +01:00
Wolfgang Bumiller
a79f03d9a6 OTP: support v2 secret format
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-10-29 06:27:39 +01:00
Wolfgang Bumiller
6e2343254e JSONSchema: add TFA-secret format; support longer secrets
The old format used 16 base32 chars or 40 hex digits. Since they have
a common subset it's hard to distinguish them without the our
previous length constraints, so prefix a 'v2-' of the format to
support arbitrary lengths properly.

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-10-29 06:26:55 +01:00
Thomas Lamprecht
4074d3722c bump version to 6.0-5
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-09-20 16:39:38 +02:00
Alexandre Derumier
f48815f8b6 etc_network_interfaces : handle autostart for ovs
Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2019-09-20 16:39:38 +02:00
Thomas Lamprecht
bd9cc42d82 network: followup code cleanup
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-09-20 09:43:29 +02:00
Alexandre Derumier
4ac94c72a2 network_interfaces: use allow-ovs for OVSBridge
new openvswitch-switch service use "ifup --allow-ovs",
and this race with "auto ..." used by networking service

bug reported here:
https://forum.proxmox.com/threads/so-is-openvswitch-bonding-just-broken-on-pve-6-whats-going-on.58020/

This is also fixing ovs with ifupdown2

Openvswitch github have a note about this:
e0dfd67b45 (diff-555e6da95251766b76e83867900bd8fe)

Signed-off-by: Alexandre Derumier <aderumier@odiso.com>
2019-09-20 09:06:47 +02:00
Thomas Lamprecht
9bbc4e174c tree wide trailing whitespace cleanup
generated with:
 # find . -name '*.pm' -exec sed -i 's/\s\+$//' {} \;

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-09-09 16:42:12 +02:00