- Update to version 0~git20230823:
* pasta: Strip RTA_PREFSRC when copying routes to the namespace
* netlink: Set IFA_ADDRESS, not just IFA_LOCAL, while adding IPv4 addresses
* tcp: Remove broken pressure calculations for tcp_defer_handler()
* inany: Add missing double include guard to inany.h
* tcp: Move in_epoll flag out of common connection structure
* tcp, udp: Don't pre-fill IPv4 destination address in headers
* tcp, udp: Don't include destination address in partially precomputed csums
* tcp: Consistent usage of ports in tcp_seq_init()
* tcp: More precise terms for addresses and ports
* tap: Pass source address to protocol handler functions
* tap: Don't clobber source address in tap6_handler()
* selinux: Fix domain transitions for typical commands pasta might run
* selinux: Allow pasta_t to read nsfs entries
* selinux: Add rules for sysctl and /proc/net accesses
* selinux: Update policy to fix user/group settings
* selinux: Fix user namespace creation after breaking kernel change
* selinux: Use explicit paths for binaries in file context
* fedora: Install pasta as hard link to ensure SELinux file context match
* tap: Fix format specifier in tap4_is_fragment() warning
* netlink: Don't propagate host address expiry to the container
* netlink: Correctly calculate attribute length for address messages
* netlink: Remove redundant check on nlmsg_type
* conf: Demote overlapping port ranges error to a warning
* epoll: Use different epoll types for passt and pasta tap fds
* epoll: Split listening Unix domain socket into its own type
* epoll: Split handling of listening TCP sockets into their own handler
* epoll: Split handling of TCP timerfds into its own handler function
* epoll: Tiny cleanup to udp_sock_handler()
* epoll: Split handling of ICMP and ICMPv6 sockets
OBS-URL: https://build.opensuse.org/request/show/1107867
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/passt?expand=0&rev=2
passt is an implementation of user-mode networking for qemu, focusing on security (no dynamic memory allocation, purpose-written codebase, strict seccomp policy), performance (packet and syscall batching, pre-cooked buffers, minimalistic TCP adaptation), network transparency: contrary to libslirp, NAT is not needed, as the guest inherits addressing and routing from the host via DHCP, NDP, DHCPv6.
The aim is to bring production readiness to user-mode networking with a simpler implementation, written with the specific goal in mind. passt is also being integrated inside the KubeVirt architecture, thanks to its superior (as compared to libslirp) performance and flexibility.
OBS-URL: https://build.opensuse.org/request/show/1005591
OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/passt?expand=0&rev=1
