---
Makefile | 2 +-
debian/changelog | 185 +++++++++++++++++++++
debian/compat | 1 +
debian/control | 36 ++++
debian/copyright | 28 ++++
...ns-scripts-fix-ENV-for-interfaces-options.patch | 29 ++++
...2-netlink-IFLA_BRPORT_ARP_SUPPRESS-use-32.patch | 30 ++++
.../extra/0003-add-vxlan-physdev-support.patch | 162 ++++++++++++++++++
debian/patches/pve/0001-config-tuning.patch | 52 ++++++
.../pve/0002-manual-interfaces-set-link-up.patch | 58 +++++++
...e-tap-veth-fwpr-interfaces-from-bridge-on.patch | 27 +++
...0004-add-dummy-mtu-bridgevlanport-modules.patch | 85 ++++++++++
debian/patches/series | 7 +
debian/rules | 21 +++
14 files changed, 722 insertions(+), 1 deletion(-)
create mode 100644 debian/changelog
create mode 100644 debian/compat
create mode 100644 debian/control
create mode 100644 debian/copyright
create mode 100644
debian/patches/extra/0001-addons-scripts-fix-ENV-for-interfaces-options.patch
create mode 100644
debian/patches/extra/0002-netlink-IFLA_BRPORT_ARP_SUPPRESS-use-32.patch
create mode 100644 debian/patches/extra/0003-add-vxlan-physdev-support.patch
create mode 100644 debian/patches/pve/0001-config-tuning.patch
create mode 100644 debian/patches/pve/0002-manual-interfaces-set-link-up.patch
create mode 100644
debian/patches/pve/0003-don-t-remove-tap-veth-fwpr-interfaces-from-bridge-on.patch
create mode 100644
debian/patches/pve/0004-add-dummy-mtu-bridgevlanport-modules.patch
create mode 100644 debian/patches/series
create mode 100755 debian/rules
diff --git a/Makefile b/Makefile
index 142b44e..395ebae 100644
--- a/Makefile
+++ b/Makefile
@@ -1,6 +1,6 @@
PACKAGE=ifupdown2
VER=1.1
-PKGREL=cl3u18
+PKGREL=2.0
SRCDIR=ifupdown2
BUILDDIR=${SRCDIR}.tmp
diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 0000000..772b13c
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,185 @@
+ifupdown2 (2.0.0) UNRELEASED; urgency=medium
+
+ * Package architecture refactoring and cleanups
+ * Package can be build/install as debian, pip or rpm package
+ * Makefile to easily perform tasks (i.e.: install, build, test, upload..)
+ * New. Enabled: traditional bridge support for mstpctl attributes
+ (portautoedge, portrestrrole)
+
+ -- Julien Fortin <jul...@cumulusnetworks.com> Thu, 24 May 2018 15:42:42 +0200
+
+ifupdown2 (1.1.18) RELEASED; urgency=medium
+
+ * Fix: Link down does not work on SVI configured in a VRF
+ * Fix: ifreload causes MTU to drop on bridge SVIs
+ * Fix: addons: addressvirtual: check if SVI name is first in routing table
+ * Fix: ifreload error on deleting bond slaves from an already configured bond
+ * Fix: ifupdown2 error is confusing when netmask is specified for
vxlan-local-tunnelip
+ * Fix: ifupdown2 syntax check needed for vxlan interfaces
+ * Fix: vxlan-ageing default timer doesn't align with bridge-ageing
+ * Fix: Error with "ifreload -a -n" when MGMT VRF is not Applied
+ * Fix: using reserved VLAN range reports error but ifreload returns 0
+ * Fix: unable to set bridge-portmcrouter to "2"
+ * Fix: vxlan syntax-check warn on missing vxlan-local-tunnelip
+ * Fix: traditional bridge svi breaks when extra bridge added
+ * Fix: github #39: addons: vrf: fix vrf slave link kind
+ * New. Enabled: addons: vxlan: add support for vxlan-port attribute
+
+ -- Julien Fortin <jul...@cumulusnetworks.com> Thu, 12 Apr 2018 11:10:04 +0200
+
+ifupdown2 (1.1.17) RELEASED; urgency=medium
+
+ * Fix: ip[6]-forward attributes not set at boot
+
+ -- Julien Fortin <jul...@cumulusnetworks.com> Thu, 08 Feb 2018 09:48:37 +0100
+
+ifupdown2 (1.1.16) RELEASED; urgency=medium
+
+ * Fix: python exception on macvlans address dump
+ * Fix: eth0 doesn't acquire DHCP address when mgmt VRF is enabled
+
+ -- Julien Fortin <jul...@cumulusnetworks.com> Tue, 09 Jan 2018 02:02:58 +0100
+
+ifupdown2 (1.1.15) RELEASED; urgency=medium
+
+ * New. Enabled: bridge: add support for bridge-l2protocol-tunnel
+ * New. Enabled: bridge attributes, when removed reset to default
+ * New. Enabled: vxlan attributes, when removed reset to default
+ * New. Enabled: improve handling of optional resources (if missing
bridge-utils/ethtool)
+ * Fix: policy "iface_defaults" not supported for MTU
+ * Fix: address module: handling of ipv4 & ipv6 (add/remove)
+ * Fix: warning for vlan reserved range
+ * Fix: MTU handling on bridge SVIs
+
+ -- Julien Fortin <jul...@cumulusnetworks.com> Wed, 22 Nov 2017 19:07:43 +0100
+
+ifupdown2 (1.1.14) RELEASED; urgency=medium
+
+ * New. Enabled: default policy for bridge MAC address
+ * Fix: ethtool: don't set link speed and duplex if autoneg is on
+
+ -- Julien Fortin <jul...@cumulusnetworks.com> Wed, 25 Oct 2017 23:12:27 +0200
+
+ifupdown2 (1.1.13) RELEASED; urgency=medium
+
+ * Fix: VRF: ssh session not killed on ifreload
+
+ -- Julien Fortin <jul...@cumulusnetworks.com> Fri, 15 Sep 2017 22:43:12 +0200
+
+ifupdown2 (1.1.12) RELEASED; urgency=medium
+
+ * New. Enabled: mpls-enable attribute
+ * New. Enabled: bond and bridge module moved to netlink configuration
+ * New. Enabled: handle a mix of auto and specified vrf table ids
+ * Fix: igmp attribute reset to defaults when removed from config
+
+ -- Julien Fortin <jul...@cumulusnetworks.com> Mon, 07 Aug 2017 22:14:03 +0200
+
+ifupdown2 (1.1.11) RELEASED; urgency=medium
+
+ * Fix: link-down attribute not applied on slave ports
+ * Fix: bug that prevented config of mtu below 1280
+
+ -- Julien Fortin <jul...@cumulusnetworks.com> Thu, 18 May 2017 12:45:21 -0700
+
+ifupdown2 (1.1.10) RELEASED; urgency=medium
+
+ * New. Enabled: drop the dependency to pkg_resources, hardcode version
number (closes: #855401)
+ * New. Enabled: adjust allow-hotplug behavior to ifupdown (closes: #855598)
+ * New. Enabled: bond-lacp-rate support slow/fast argument
+ * New. Enabled: ifquery --syntax-help: add support for json output
+ * New. Enabled: vlan: add new attribute 'vlan-protocol'
+ * New. Enabled: address: add new attribute 'ip6-forward'
+ * New. Enabled: bridge: add new attribute 'bridge-mcstats'
+ * New. Enabled: bridge: add new attribute 'bridge-vlan-stats'
+ * New. Enabled: bridge: add new attribute 'bridge-vlan-protocol'
+ * New. Enabled: bridge: add new attribute 'bridge-arp-nd-suppress'
+ * Fix: bond: add attribute bond-(up|down)delay
+ * Fix: bridge-vids: --syntax-check accepts legacy syntax
+
+ -- Julien Fortin <jul...@cumulusnetworks.com> Mon, 17 Apr 2017 06:18:04 +0200
+
+ifupdown2 (1.1.9) RELEASED; urgency=medium
+
+ * New. Enabled: support for bridge-learning attribute
+
+ -- Julien Fortin <jul...@cumulusnetworks.com> Mon, 06 Feb 2017 13:22:51 -0800
+
+ifupdown2 (1.1.8) RELEASED; urgency=medium
+
+ * New. Enabled: update link-speed values: add 25G and 50G
+ * New. Enabled: new 'link-down' [yes|no] attribute to keep link down
+
+ -- Julien Fortin <jul...@cumulusnetworks.com> Tue, 17 Jan 2017 08:39:29 +0100
+
+ifupdown2 (1.1.7) RELEASED; urgency=medium
+
+ * New. Enabled: fix for inet and inet6 dhcp on the same interface
+ * New. Enabled: syntax check to warn on common configuration mistakes
+ * New. Enabled: addons: bridge: disable ip fwding on a bridge with no ip
+ and no upperifaces
+ * Fix: fixes for MTU handling
+ * Fix: dhcpv6 fails if interface doesn't have link-local addr
+
+ -- Julien Fortin <jul...@cumulusnetworks.com> Wed, 07 Dec 2016 05:48:45 +0100
+
+ifupdown2 (1.1.6) RELEASED; urgency=medium
+
+ * Closes: github #14. add environment variables passed to user scripts
+ * New. Enabled: addons may provide a list of ifupdown scripts to ignore
+
+ -- Julien Fortin <jul...@cumulusnetworks.com> Mon, 19 Sep 2016 16:37:36 -0700
+
+ifupdown2 (1.1.5) RELEASED; urgency=medium
+
+ * Fix: handling of EXISTS errors on address add
+ * Fix: handling of mtu on addressvirtual macvlan devices
+ * Fix: mako namespace handling
+
+ -- Julien Fortin <jul...@cumulusnetworks.com> Fri, 16 Sep 2016 12:48:04 -0700
+
+ifupdown2 (1.1.4) RELEASED; urgency=medium
+
+ * Performance improvements
+ * New. Enabled: sbin: start-networking: support hotplug class from init
script
+ * New. Enabled: support for classical numerical bond modes
+ * New. Enabled: extend ifquery support for mstpctl addons
+ * New. Enabled: each addon may perform semantic and syntax checks by
+ implementing a custom method
+ * Fix: Support for address-virtual lines under a vrf slave
+ * Fix: Defaults for link attributes were not applied
+ * Fix: Disable IPv6 duplicate address detection on VRR interfaces
+ * Fix: ifquery to extract vlan-id from iface if not preset
+ * Fix: ifquery -c bridge pvid error on a valid config
+
+ -- Julien Fortin <jul...@cumulusnetworks.com> Fri, 29 Jul 2016 08:55:50 -0700
+
+ifupdown2 (1.1.3) RELEASED; urgency=medium
+
+ * Fix: Interface configuration parsing error when keyword vlan
+ is the interface name.
+
+ -- Julien Fortin <jul...@cumulusnetworks.com> Sun, 05 Jun 2016 08:55:50 -0700
+
+ifupdown2 (1.1.2) RELEASED; urgency=medium
+
+ * Fix: checks for invalid address-virtual attributes
+ * New. Deprecated: `mstpctl-stp` attribute
+ * New. Deprecated: lacp parameters: bond-ad-sys-priority,
bond-ad-sys-mac-addr
+ * New. Enabled: addon module for configuring vrf
+ * New. Enabled: bridge: display warning when (in vlan unware bridge)
+ an untagged bridge is not configured
+ * New. Enabled: adjusting MTU for vlan devices depending on lower device mtu
+ * New. Enabled: introduce checks for reserved vrf table names
+ * New. Enabled: ifquery: new option '--with-defaults' to include default
+ attributes
+ * New. Enabled: bridge: disabling ipv6 on bridge if any VXLAN port
+ * New. Enabled: vrf awareness in dhcp addon module
+
+ -- Julien Fortin <jul...@cumulusnetworks.com> Tue, 3 May 2016 14:42:42 -0700
+
+ifupdown2 (1.1.0) unstable; urgency=low
+
+ * Initial release.
+
+ -- Roopa Prabhu <ro...@cumulusnetworks.com> Thu, 20 Aug 2015 06:14:24 -0700
diff --git a/debian/compat b/debian/compat
new file mode 100644
index 0000000..ec63514
--- /dev/null
+++ b/debian/compat
@@ -0,0 +1 @@
+9
diff --git a/debian/control b/debian/control
new file mode 100644
index 0000000..a6178e4
--- /dev/null
+++ b/debian/control
@@ -0,0 +1,36 @@
+Source: ifupdown2
+Section: admin
+Priority: optional
+Maintainer: Julien Fortin <jul...@cumulusnetworks.com>
+Build-Depends: debhelper (>=9),
+ dh-systemd,
+ dh-python,
+ python-all,
+ python-setuptools,
+ python-docutils
+Standards-Version: 3.9.8
+Homepage: https://github.com/cumulusnetworks/ifupdown2
+X-Python-Version: >= 2.7
+
+Package: ifupdown2
+Architecture: all
+Provides: ifupdown
+Conflicts: ifupdown
+Replaces: ifupdown
+Depends: ${python:Depends}, ${misc:Depends}, iproute2, python-argcomplete,
python-ipaddr
+Suggests: isc-dhcp-client, bridge-utils, ethtool, python-gvgen, python-mako
+Description: Network Interface Management tool similar to ifupdown
+ ifupdown2 is ifupdown re-written in Python. It replaces ifupdown and provides
+ the same user interface as ifupdown for network interface configuration.
+ Like ifupdown, ifupdown2 is a high level tool to configure (or, respectively
+ deconfigure) network interfaces based on interface definitions in
+ /etc/network/interfaces. It is capable of detecting network interface
+ dependencies and comes with several new features which are available as
+ new command options to ifup/ifdown/ifquery commands. It also comes with a new
+ command ifreload to reload interface configuration with minimum
+ disruption. Most commands are also capable of input and output in JSON format.
+ It is backward compatible with ifupdown /etc/network/interfaces format and
+ supports newer simplified format. It also supports interface templates with
+ python-mako for large scale interface deployments. See
+ /usr/share/doc/ifupdown2/README.rst for details about ifupdown2. Examples
+ are available under /usr/share/doc/ifupdown2/examples.
diff --git a/debian/copyright b/debian/copyright
new file mode 100644
index 0000000..51d5604
--- /dev/null
+++ b/debian/copyright
@@ -0,0 +1,28 @@
+Format: http://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: ifupdown2
+Upstream-Contact: Julien Fortin <jul...@cumulusnetworks.com>
+Source: https://github.com/cumulusnetworks/ifupdown2
+
+Files: *
+Copyright: 2014,2015,2016,2017,2018 Cumulus Networks, Inc.
+License: GPL-2
+
+Files: debian/*
+Copyright: 2014,2015,2016,2017,2018 Cumulus Networks, Inc.
+License: GPL-2
+
+License: GPL-2
+ This package is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; version 2 of the License
+ .
+ This package is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+ .
+ You should have received a copy of the GNU General Public License
+ along with this program. If not, see <http://www.gnu.org/licenses/>
+ .
+ On Debian systems, the complete text of the GNU General
+ Public License version 2 can be found in "/usr/share/common-licenses/GPL-2".
diff --git
a/debian/patches/extra/0001-addons-scripts-fix-ENV-for-interfaces-options.patch
b/debian/patches/extra/0001-addons-scripts-fix-ENV-for-interfaces-options.patch
new file mode 100644
index 0000000..2d42b7a
--- /dev/null
+++
b/debian/patches/extra/0001-addons-scripts-fix-ENV-for-interfaces-options.patch
@@ -0,0 +1,29 @@
+From 9c3dcc88df68adc1acda3faa2118917b038574c5 Mon Sep 17 00:00:00 2001
+From: Alexandre Derumier <aderum...@odiso.com>
+Date: Mon, 14 May 2018 16:27:22 +0200
+Subject: [PATCH 2/4] addons scripts : fix ENV for interfaces options
+
+This is a bug currently, where env vars with interfaces options
+were not reset between interfaces
+
+https://github.com/CumulusNetworks/ifupdown2/issues/49
+---
+ ifupdown2/ifupdown/ifupdownmain.py | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/ifupdown2/ifupdown/ifupdownmain.py
b/ifupdown2/ifupdown/ifupdownmain.py
+index 3c72429..e818880 100644
+--- a/ifupdown2/ifupdown/ifupdownmain.py
++++ b/ifupdown2/ifupdown/ifupdownmain.py
+@@ -1556,7 +1556,7 @@ class ifupdownMain(ifupdownBase):
+ cenv = None
+ iface_env = ifaceobj.get_env()
+ if iface_env:
+- cenv = os.environ
++ cenv = dict(os.environ)
+ if cenv:
+ cenv.update(iface_env)
+ else:
+--
+2.11.0
+
diff --git
a/debian/patches/extra/0002-netlink-IFLA_BRPORT_ARP_SUPPRESS-use-32.patch
b/debian/patches/extra/0002-netlink-IFLA_BRPORT_ARP_SUPPRESS-use-32.patch
new file mode 100644
index 0000000..90f737b
--- /dev/null
+++ b/debian/patches/extra/0002-netlink-IFLA_BRPORT_ARP_SUPPRESS-use-32.patch
@@ -0,0 +1,30 @@
+From 8fc842ad6a75fe0af3a2b8d4937b16e3967fca3c Mon Sep 17 00:00:00 2001
+From: Alexandre Derumier <aderum...@odiso.com>
+Date: Wed, 16 May 2018 02:16:42 +0200
+Subject: [PATCH] netlink : IFLA_BRPORT_ARP_SUPPRESS : use 32
+
+this has been upstreamed recently in linux kernel, with
IFLA_BRPORT_NEIGH_SUPPRESS.
+cumulus was using a temp 152 number.
+It's need for vxlan + anycast gateway
+---
+ ifupdown2/nlmanager/nlpacket.py | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/ifupdown2/nlmanager/nlpacket.py b/ifupdown2/nlmanager/nlpacket.py
+index bd6addf..358c06c 100644
+--- a/ifupdown2/nlmanager/nlpacket.py
++++ b/ifupdown2/nlmanager/nlpacket.py
+@@ -3247,9 +3247,9 @@ class Link(NetlinkPacket):
+ IFLA_BRPORT_VLAN_TUNNEL = 29
+ IFLA_BRPORT_BCAST_FLOOD = 30
+ IFLA_BRPORT_GROUP_FWD_MASK = 31
++ IFLA_BRPORT_ARP_SUPPRESS = 32
+ IFLA_BRPORT_PEER_LINK = 150
+ IFLA_BRPORT_DUAL_LINK = 151
+- IFLA_BRPORT_ARP_SUPPRESS = 152
+ IFLA_BRPORT_GROUP_FWD_MASKHI = 153
+
+ ifla_brport_to_string = {
+--
+2.11.0
+
diff --git a/debian/patches/extra/0003-add-vxlan-physdev-support.patch
b/debian/patches/extra/0003-add-vxlan-physdev-support.patch
new file mode 100644
index 0000000..337dfd7
--- /dev/null
+++ b/debian/patches/extra/0003-add-vxlan-physdev-support.patch
@@ -0,0 +1,162 @@
+From 813b7bc0da9f4c9df65936d10aa9dc18d857d0a5 Mon Sep 17 00:00:00 2001
+From: Alexandre Derumier <aderum...@odiso.com>
+Date: Wed, 16 May 2018 09:58:45 +0200
+Subject: [PATCH] add vxlan-physdev support
+
+backported from master branch
+https://github.com/CumulusNetworks/ifupdown2/pull/19
+---
+ ifupdown2/addons/vxlan.py | 19 ++++++++++++++++++-
+ ifupdown2/ifupdown/netlink.py | 8 ++++++--
+ ifupdown2/ifupdownaddons/LinkUtils.py | 5 ++++-
+ ifupdown2/nlmanager/nlmanager.py | 4 +++-
+
+ 4 files changed, 31 insertions(+), 5 deletions(-)
+
+diff --git a/ifupdown2/addons/vxlan.py b/ifupdown2/addons/vxlan.py
+index 3148e44..2aedbfc 100644
+--- a/ifupdown2/addons/vxlan.py
++++ b/ifupdown2/addons/vxlan.py
+@@ -54,6 +54,9 @@ class vxlan(moduleBase):
+ 'validvals' : ['<ipv4>'],
+ 'example': ['vxlan-remoteip 172.16.22.127'],
+ 'multiline': True},
++ 'vxlan-physdev' :
++ {'help' : 'vxlan physical device',
++ 'example': ['vxlan-physdev eth1']},
+ 'vxlan-learning' :
+ {'help' : 'vxlan learning yes/no',
+ 'validvals' : ['yes', 'no', 'on', 'off'],
+@@ -123,6 +126,13 @@ class vxlan(moduleBase):
+ vxlan._clagd_vxlan_anycast_ip = clagd_vxlan_list[0]
+
+ self._set_global_local_ip(ifaceobj)
++
++ # If we should use a specific underlay device for the VXLAN
++ # tunnel make sure this device is set up before the VXLAN iface.
++ physdev = ifaceobj.get_attr_value_first('vxlan-physdev')
++ if physdev:
++ return [ physdev ]
++
+ return None
+
+ def _set_global_local_ip(self, ifaceobj):
+@@ -184,6 +194,7 @@ class vxlan(moduleBase):
+ self.syntax_check_localip_anycastip_equal(ifname, local,
anycastip)
+ # if both local-ip and anycast-ip are identical the function
prints a warning
+
++ physdev = ifaceobj.get_attr_value_first('vxlan-physdev')
+ ageing = ifaceobj.get_attr_value_first('vxlan-ageing')
+ vxlan_port = ifaceobj.get_attr_value_first('vxlan-port')
+ purge_remotes = self._get_purge_remotes(ifaceobj)
+@@ -291,7 +302,8 @@ class vxlan(moduleBase):
+ learning=learning,
+ ageing=ageing,
+ group=group,
+- dstport=vxlan_port)
++ dstport=vxlan_port,
++ physdev=physdev)
+ except Exception as e_netlink:
+ self.logger.debug('%s: vxlan netlink: %s' % (ifname,
str(e_netlink)))
+ try:
+@@ -463,6 +475,11 @@ class vxlan(moduleBase):
+ self._query_check_n_update(ifaceobj, ifaceobjcurr, 'vxlan-ageing',
+ ageing, vxlanattrs.get('ageing'))
+
++ physdev = ifaceobj.get_attr_value_first('vxlan-physdev')
++ if physdev:
++ self._query_check_n_update(ifaceobj, ifaceobjcurr,
'vxlan-physdev',
++ physdev, vxlanattrs.get('physdev'))
++
+ def _query_running(self, ifaceobjrunning):
+ vxlanattrs = self.ipcmd.get_vxlandev_attrs(ifaceobjrunning.name)
+ if not vxlanattrs:
+diff --git a/ifupdown2/ifupdown/netlink.py b/ifupdown2/ifupdown/netlink.py
+index 17672c2..516d39c 100644
+--- a/ifupdown2/ifupdown/netlink.py
++++ b/ifupdown2/ifupdown/netlink.py
+@@ -252,7 +252,7 @@ class Netlink(utilsBase):
+ % (ifacename, vlanid, str(e)))
+
+ def link_add_vxlan(self, ifacename, vxlanid, local=None,
dstport=VXLAN_UDP_PORT,
+- group=None, learning=True, ageing=None):
++ group=None, learning=True, ageing=None, physdev=None):
+ cmd = 'ip link add %s type vxlan id %s dstport %s' % (ifacename,
+ vxlanid,
+ dstport)
+@@ -260,16 +260,20 @@ class Netlink(utilsBase):
+ cmd += ' ageing %s' % ageing if ageing else ''
+ cmd += ' remote %s' % group if group else ' noremote'
+ cmd += ' nolearning' if not learning else ''
++ cmd += ' dev %s' % physdev if physdev else ''
+ self.logger.info('%s: netlink: %s' % (ifacename, cmd))
+ if ifupdownflags.flags.DRYRUN: return
+ try:
++ if physdev:
++ physdev = self.get_iface_index (physdev)
+ return self._nlmanager_api.link_add_vxlan(ifacename,
+ vxlanid,
+ dstport=dstport,
+ local=local,
+ group=group,
+ learning=learning,
+- ageing=ageing)
++ ageing=ageing,
++ physdev=physdev)
+ except Exception as e:
+ raise Exception('netlink: %s: cannot create vxlan %s: %s'
+ % (ifacename, vxlanid, str(e)))
+
+diff --git a/ifupdown2/ifupdownaddons/LinkUtils.py
b/ifupdown2/ifupdownaddons/LinkUtils.py
+index ae541e9..8605704 100644
+--- a/ifupdown2/ifupdownaddons/LinkUtils.py
++++ b/ifupdown2/ifupdownaddons/LinkUtils.py
+@@ -507,18 +507,21 @@ class LinkUtils(utilsBase):
+ linkattrs['kind'] = 'vxlan'
+ vattrs = {'vxlanid': citems[i + 2],
+ 'svcnode': None,
++ 'physdev': None,
+ 'remote': [],
+ 'ageing': citems[i + 2],
+ 'learning': 'on'}
+ for j in range(i + 2, len(citems)):
+ if citems[j] == 'local':
+ vattrs['local'] = citems[j + 1]
+- elif citems[j] == 'remote':
++ elif citems[j] == 'group':
+ vattrs['svcnode'] = citems[j + 1]
+ elif citems[j] == 'ageing':
+ vattrs['ageing'] = citems[j + 1]
+ elif citems[j] == 'nolearning':
+ vattrs['learning'] = 'off'
++ elif citems[j] == 'dev':
++ vattrs['physdev'] = citems[j + 1]
+ linkattrs['linkinfo'] = vattrs
+ break
+ elif citems[i] == 'vrf' and citems[i + 1] == 'table':
+diff --git a/ifupdown2/nlmanager/nlmanager.py
b/ifupdown2/nlmanager/nlmanager.py
+index e4a5892..14f7066 100644
+--- a/ifupdown2/nlmanager/nlmanager.py
++++ b/ifupdown2/nlmanager/nlmanager.py
+@@ -969,7 +969,7 @@ class NetlinkManager(object):
+ return self.tx_nlpacket_get_response(nbr)
+
+ def link_add_vxlan(self, ifname, vxlanid, dstport=None, local=None,
+- group=None, learning=True, ageing=None):
++ group=None, learning=True, ageing=None, physdev=None):
+
+ debug = RTM_NEWLINK in self.debug
+
+@@ -980,6 +980,8 @@ class NetlinkManager(object):
+ info_data[Link.IFLA_VXLAN_LOCAL] = local
+ if group:
+ info_data[Link.IFLA_VXLAN_GROUP] = group
++ if physdev:
++ info_data[Link.IFLA_VXLAN_LINK] = int (physdev)
+
+ info_data[Link.IFLA_VXLAN_LEARNING] = int(learning)
+
+
+--
+2.11.0
+
diff --git a/debian/patches/pve/0001-config-tuning.patch
b/debian/patches/pve/0001-config-tuning.patch
new file mode 100644
index 0000000..f0e72fb
--- /dev/null
+++ b/debian/patches/pve/0001-config-tuning.patch
@@ -0,0 +1,52 @@
+From 849e8213baa8483604a0de6a59695fd3dd98b248 Mon Sep 17 00:00:00 2001
+From: Alexandre Derumier <aderum...@odiso.com>
+Date: Mon, 14 May 2018 16:36:58 +0200
+Subject: [PATCH 3/4] config tuning
+
+allow ovs_... options:
+ addon_syntax_check=0
+
+allow custom addons scripts:
+ addon_scripts_support=1
+
+ multiple_vlan_aware_bridge_support=1
+
+don't shutdown tap, veth, vmbrvX, fwbr on reload
+(as they are not defined in /etc/network/interfaces)
+
+ ifreload_down_changed=1
+---
+ etc/network/ifupdown2/ifupdown2.conf | 8 ++++----
+ 1 file changed, 4 insertions(+), 4 deletions(-)
+
+diff --git a/etc/network/ifupdown2/ifupdown2.conf
b/etc/network/ifupdown2/ifupdown2.conf
+index 906fdea..aa7f120 100644
+--- a/etc/network/ifupdown2/ifupdown2.conf
++++ b/etc/network/ifupdown2/ifupdown2.conf
+@@ -29,12 +29,12 @@ disable_cli_interfacesfile=0
+ # are used. But when a mix of scripts and modules are used (which is the
+ # default case), you may get false warnings for attributes supported
+ # by scripts
+-addon_syntax_check=1
++addon_syntax_check=0
+
+ # Support executing of ifupdown style scripts.
+ # Note that by default python addon modules override scripts with the same
+ # name
+-addon_scripts_support=0
++addon_scripts_support=1
+
+ # enable python addons
+ addon_python_modules_support=1
+@@ -42,7 +42,7 @@ addon_python_modules_support=1
+ # By default ifupdown2 only supports a single vlan filtering bridge
+ # on the system. Set this flag to 1 to support multiple vlan
+ # filtering bridges
+-multiple_vlan_aware_bridge_support=0
++multiple_vlan_aware_bridge_support=1
+
+ # ifquery check status strings.
+ # By default `ifquery --check` prints the check and
+--
+2.11.0
+
diff --git a/debian/patches/pve/0002-manual-interfaces-set-link-up.patch
b/debian/patches/pve/0002-manual-interfaces-set-link-up.patch
new file mode 100644
index 0000000..b61f3c9
--- /dev/null
+++ b/debian/patches/pve/0002-manual-interfaces-set-link-up.patch
@@ -0,0 +1,58 @@
+From 8ae199ef085b051038427f47fba0c719deda4a30 Mon Sep 17 00:00:00 2001
+From: Alexandre Derumier <aderum...@odiso.com>
+Date: Mon, 14 May 2018 17:06:52 +0200
+Subject: [PATCH] manual interfaces : set link up
+
+by default ifdown2 don't set link up for manual interfaces.
+
+classic ifupdown set link up for manual interfaces.
+I think this has change with jessie and systemd.
+
+https://github.com/CumulusNetworks/ifupdown2/issues/4
+---
+ ifupdown2/ifupdown/ifupdownmain.py | 15 +--------------
+ 1 file changed, 1 insertion(+), 14 deletions(-)
+
+diff --git a/ifupdown2/ifupdown/ifupdownmain.py
b/ifupdown2/ifupdown/ifupdownmain.py
+index 3c72429..f1cd2fd 100644
+--- a/ifupdown2/ifupdown/ifupdownmain.py
++++ b/ifupdown2/ifupdown/ifupdownmain.py
+@@ -90,11 +90,6 @@ class ifupdownMain(ifupdownBase):
+ (ifaceobj.link_privflags & ifaceLinkPrivFlags.VRF_SLAVE)):
+ self._keep_link_down(ifaceobj)
+ return
+- # if not a logical interface and addr method is manual,
+- # ignore link admin state changes
+- if (ifaceobj.addr_method == 'manual' and
+- not ifaceobj.link_kind):
+- return
+ if self._delay_admin_state:
+ self._delay_admin_state_iface_queue.append(ifaceobj.name)
+ return
+@@ -127,11 +122,6 @@ class ifupdownMain(ifupdownBase):
+ # there is no real interface behind it
+ if ifaceobj.type == ifaceType.BRIDGE_VLAN:
+ return
+- # if not a logical interface and addr method is manual,
+- # ignore link admin state changes
+- if (ifaceobj.addr_method == 'manual' and
+- not ifaceobj.link_kind):
+- return
+ if self._delay_admin_state:
+ self._delay_admin_state_iface_queue.append(ifaceobj.name)
+ return
+@@ -520,10 +510,7 @@ class ifupdownMain(ifupdownBase):
+ def _set_iface_role_n_kind(self, ifaceobj, upperifaceobj):
+
+ # If addr_method is set and link is not a logical interface,
+- # set flag KEEP_LINK_DOWN. addr_method == 'manual' only applies to
+- # logical interfaces.
+- if (ifaceobj.addr_method == 'manual' and not ifaceobj.link_kind):
+- ifaceobj.link_privflags |= ifaceLinkPrivFlags.KEEP_LINK_DOWN
++ # set flag KEEP_LINK_DOWN.
+
+ if (upperifaceobj.link_kind & ifaceLinkKind.BOND):
+ self._set_iface_role(ifaceobj, ifaceRole.SLAVE, upperifaceobj)
+--
+2.11.0
+
diff --git
a/debian/patches/pve/0003-don-t-remove-tap-veth-fwpr-interfaces-from-bridge-on.patch
b/debian/patches/pve/0003-don-t-remove-tap-veth-fwpr-interfaces-from-bridge-on.patch
new file mode 100644
index 0000000..7ded409
--- /dev/null
+++
b/debian/patches/pve/0003-don-t-remove-tap-veth-fwpr-interfaces-from-bridge-on.patch
@@ -0,0 +1,27 @@
+From fc168d1897cefd4781722af58f856b2686074d0d Mon Sep 17 00:00:00 2001
+From: Alexandre Derumier <aderum...@odiso.com>
+Date: Wed, 16 May 2018 02:11:45 +0200
+Subject: [PATCH] don't remove (tap|veth|fwpr) interfaces from bridge on ifup
+ bridge
+
+as proxmox don't defined them in /etc/network/interfaces
+---
+ ifupdown2/addons/bridge.py | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/ifupdown2/addons/bridge.py b/ifupdown2/addons/bridge.py
+index 7c582e9..e294c95 100644
+--- a/ifupdown2/addons/bridge.py
++++ b/ifupdown2/addons/bridge.py
+@@ -944,7 +944,7 @@ class bridge(moduleBase):
+ runningbridgeports = self.brctlcmd.get_bridge_ports(ifaceobj.name)
+ if runningbridgeports:
+ for bport in runningbridgeports:
+- if not bridgeports or bport not in bridgeports:
++ if ( not bridgeports or bport not in bridgeports ) and
not re.match('^(tap|veth|fwpr)',bport):
+ self.ipcmd.link_set(bport, 'nomaster')
+ # set admin DOWN on all removed ports
+ # that don't have config outside bridge
+--
+2.11.0
+
diff --git a/debian/patches/pve/0004-add-dummy-mtu-bridgevlanport-modules.patch
b/debian/patches/pve/0004-add-dummy-mtu-bridgevlanport-modules.patch
new file mode 100644
index 0000000..8ecb4a8
--- /dev/null
+++ b/debian/patches/pve/0004-add-dummy-mtu-bridgevlanport-modules.patch
@@ -0,0 +1,85 @@
+From c77ca88f7d08789bddc4b43bafa23b38c0bd2d64 Mon Sep 17 00:00:00 2001
+From: Alexandre Derumier <aderum...@odiso.com>
+Date: Fri, 15 Jun 2018 00:36:03 +0200
+Subject: [PATCH] add dummy mtu, bridgevlanport modules
+
+As pve-manager package still provide ifupdown custom bridgevlanport && mtu
script,
+we can override them with ifupdown2 addon scripts, doing nothing.
+
+(ifupdown2 don't launch an ifdown script, if an ifupdown2 addon script
+ exist with same name)
+---
+ etc/network/ifupdown2/addons.conf | 3 +++
+ ifupdown2/addons/bridgevlanport.py | 17 +++++++++++++++++
+ ifupdown2/addons/mtu.py | 17 +++++++++++++++++
+ 3 files changed, 37 insertions(+)
+ create mode 100644 ifupdown2/addons/bridgevlanport.py
+ create mode 100644 ifupdown2/addons/mtu.py
+
+diff --git a/etc/network/ifupdown2/addons.conf
b/etc/network/ifupdown2/addons.conf
+index c0d1ce9..955b7d5 100644
+--- a/etc/network/ifupdown2/addons.conf
++++ b/etc/network/ifupdown2/addons.conf
+@@ -13,6 +13,8 @@ up,dhcp
+ up,address
+ up,addressvirtual
+ up,usercmds
++up,mtu
++up,bridgevlanport
+ post-up,usercmds
+ post-up,clagd
+ post-up,vxrd
+@@ -33,3 +35,4 @@ post-down,vlan
+ post-down,bond
+ post-down,usercmds
+ post-down,link
++
+diff --git a/ifupdown2/addons/bridgevlanport.py
b/ifupdown2/addons/bridgevlanport.py
+new file mode 100644
+index 0000000..ab6a680
+--- /dev/null
++++ b/ifupdown2/addons/bridgevlanport.py
+@@ -0,0 +1,17 @@
++#!/usr/bin/python
++#
++
++import os
++
++try:
++ from ifupdown2.ifupdown.utils import utils
++
++ from ifupdown2.ifupdownaddons.modulebase import moduleBase
++except ImportError:
++ from ifupdown.utils import utils
++
++ from ifupdownaddons.modulebase import moduleBase
++
++class bridgevlanport(moduleBase):
++
++ _modinfo = {'mhelp' : 'dummy package to override proxmox script'}
+diff --git a/ifupdown2/addons/mtu.py b/ifupdown2/addons/mtu.py
+new file mode 100644
+index 0000000..efdf569
+--- /dev/null
++++ b/ifupdown2/addons/mtu.py
+@@ -0,0 +1,17 @@
++#!/usr/bin/python
++#
++
++import os
++
++try:
++ from ifupdown2.ifupdown.utils import utils
++
++ from ifupdown2.ifupdownaddons.modulebase import moduleBase
++except ImportError:
++ from ifupdown.utils import utils
++
++ from ifupdownaddons.modulebase import moduleBase
++
++class mtu(moduleBase):
++
++ _modinfo = {'mhelp' : 'dummy package to override proxmox script'}
+--
+2.11.0
+
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 0000000..f1346b0
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1,7 @@
+extra/0001-addons-scripts-fix-ENV-for-interfaces-options.patch
+extra/0002-netlink-IFLA_BRPORT_ARP_SUPPRESS-use-32.patch
+extra/0003-add-vxlan-physdev-support.patch
+pve/0001-config-tuning.patch
+pve/0002-manual-interfaces-set-link-up.patch
+pve/0003-don-t-remove-tap-veth-fwpr-interfaces-from-bridge-on.patch
+pve/0004-add-dummy-mtu-bridgevlanport-modules.patch
diff --git a/debian/rules b/debian/rules
new file mode 100755
index 0000000..7f8667a
--- /dev/null
+++ b/debian/rules
@@ -0,0 +1,21 @@
+#!/usr/bin/make -f
+
+#export DH_VERBOSE=1
+export PYBUILD_NAME=ifupdown2
+export PYBUILD_INSTALL_ARGS=--install-lib=/usr/share/
--install-scripts=/usr/share/
+
+%:
+ dh $@ --with python2 --with systemd --buildsystem=pybuild --with quilt
+
+override_dh_installman:
+ ./ifupdown2/man/genmanpages.sh ./ifupdown2/man ./man
+ dh_installman
+
+override_dh_systemd_start:
+ dh_systemd_start --name=networking --no-start
+
+override_dh_systemd_enable:
+ dh_systemd_enable --name=networking
+
+override_dh_compress:
+ dh_compress -X.py
--
2.11.0
_______________________________________________
pve-devel mailing list
pve-devel@pve.proxmox.com
https://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
