baserev update by copy to link target

• Files Changed
• Browse Source

new upstream release 2024_05_10.7288448

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

Specify version for make_build so that passt reports its version correctly, fixes bsc#1223853

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

New upstream release 20240426.d03c4e2

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

Remove pointless %%check section

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

spec: Install separate apparmor profile for `pasta` (bsc#1221840)

• Files Changed
• Browse Source

spec: Override symlinks with hard links

• Files Changed
• Browse Source

new upstream release 20240405.954589b

• Files Changed
• Browse Source

initialized devel package after accepting 1158057

• Files Changed
• Browse Source

Switch macros to bcond_with/without for apparmor & selinux

• Files Changed
• Browse Source

Update to version 20240220.1e6f92b

• Files Changed
• Browse Source

- Update to version 0~git20230823:
  * pasta: Strip RTA_PREFSRC when copying routes to the namespace
  * netlink: Set IFA_ADDRESS, not just IFA_LOCAL, while adding IPv4 addresses
  * tcp: Remove broken pressure calculations for tcp_defer_handler()
  * inany: Add missing double include guard to inany.h
  * tcp: Move in_epoll flag out of common connection structure
  * tcp, udp: Don't pre-fill IPv4 destination address in headers
  * tcp, udp: Don't include destination address in partially precomputed csums
  * tcp: Consistent usage of ports in tcp_seq_init()
  * tcp: More precise terms for addresses and ports
  * tap: Pass source address to protocol handler functions
  * tap: Don't clobber source address in tap6_handler()
  * selinux: Fix domain transitions for typical commands pasta might run
  * selinux: Allow pasta_t to read nsfs entries
  * selinux: Add rules for sysctl and /proc/net accesses
  * selinux: Update policy to fix user/group settings
  * selinux: Fix user namespace creation after breaking kernel change
  * selinux: Use explicit paths for binaries in file context
  * fedora: Install pasta as hard link to ensure SELinux file context match
  * tap: Fix format specifier in tap4_is_fragment() warning
  * netlink: Don't propagate host address expiry to the container
  * netlink: Correctly calculate attribute length for address messages
  * netlink: Remove redundant check on nlmsg_type
  * conf: Demote overlapping port ranges error to a warning
  * epoll: Use different epoll types for passt and pasta tap fds
  * epoll: Split listening Unix domain socket into its own type
  * epoll: Split handling of listening TCP sockets into their own handler
  * epoll: Split handling of TCP timerfds into its own handler function
  * epoll: Tiny cleanup to udp_sock_handler()
  * epoll: Split handling of ICMP and ICMPv6 sockets

• Files Changed
• Browse Source

passt is an implementation of user-mode networking for qemu, focusing on security (no dynamic memory allocation, purpose-written codebase, strict seccomp policy), performance (packet and syscall batching, pre-cooked buffers, minimalistic TCP adaptation), network transparency: contrary to libslirp, NAT is not needed, as the guest inherits addressing and routing from the host via DHCP, NDP, DHCPv6.

The aim is to bring production readiness to user-mode networking with a simpler implementation, written with the specific goal in mind. passt is also being integrated inside the KubeVirt architecture, thanks to its superior (as compared to libslirp) performance and flexibility.

• Browse Source