* Change URL for isc-dhcp source repository
* Port upstream patches to isc-dhcp-relay to support upstream/downstream interfaces
* Modify supervisor conf to generate dhcrelay commands with '-id' and '-iu' options
* Comments; Also clean up jinja2 syntax
* Patch relay to open one socket per interface and send to all servers on all upstream interfaces
* Patch relay agent to properly forward BOOTREQUEST only on appropriate interfaace if it is a directed broadcast
* Update patch to properly support interfaces with multiple IP addresses assigned
* Pass --enable-use-sockets to configure instead of uncommenting USE_SOCKETS directly
* Switch the nss look up order as "compat" followed by "tacplus".
This helps use the legacy passwd file for user info and go to tacacs only if not found.
This means, we never contact tacacs for local users like "admin".
This isolates local users from any issues with tacacs servers.
W/o this fix, the sudo commands by local users could take <count of servers> * <tacacs timeout> seconds, if the tacacs servers are unreachable.
* Skip tacacs server access for local non-tacacs users.
Revert the order of 'compat tacplus' to original 'tacplus compat' as tacplus
access is required for all tacacs users, who also get created locally.
Downport of
54f137c105
According to 6.4.15 of IEEE 802.1AX-2014, Figure 6-22, the state that the
port is selected moves MUX state from DETACHED to ATTACHED.
But ATTACHED state does not mean that the port can send and receive user
frames. COLLECTING_DISTRIBUTION state is the state that the port can send
and receive user frames. To move MUX state from ATTACHED to
COLLECTING_DISTRIBUTION, the partner state should be sync as well as the
port selected.
In function lacp_port_actor_update(), only INFO_STATE_SYNCHRONIZATION
should be set to the actor.state when the port is selected.
INFO_STATE_COLLECTING and INFO_STATE_DISTRIBUTING should be set to false
with ATTACHED mode and set to true when INFO_STATE_SYNCHRONIZATION of
partner.state is set.
In function lacp_port_should_be_{enabled, disabled}(), we also need to
check the INFO_STATE_SYNCHRONIZATION bit of partner.state.
Signed-off-by: Hangbin Liu <liuhangbin@gmail.com>
Signed-off-by: Jiri Pirko <jiri@mellanox.com>
* [201803][apt] Point to archive.debian.org for jessie-backports; remove jessie-updates
* Add no-check-valid-until for apt in base image
* Add no-check-valid-until for apt in docker-base
* [sonic-slave] Remove jessie-backports, as it is unused in the slave container
This driver should be loaded by sonic service. If kernel tries to load
it, the driver would be loaded with default parameters, which is not
right for sonic.
Signed-off-by: Ying Xie <ying.xie@microsoft.com>
* Add process exit listeners to syncd containers so that containers stop upon unexpected critical process exit
* swss.service unit file now starts both swss and syncd containers as ExecStartPre steps, and for ExecStart, it indefinitely checks that the containers are running
* Add 'docker-wait-any' script, use it to wait for containers to exit
* [service] Restart SwSS Docker container if orchagent exits unexpectedly
* [dhcp_relay] Use STATE_DB to determine whether interfaces are ready
* Supervisor now autorestarts rsyslogd upon unexpected exit
* Add other critical processes to event listener
* Make supervisor-proc-exit-listener script global, have it read from 'critical_processes' file inside container
* Add SwSS to 'WantedBy=' option of services which should be started along with SwSS
seen issues to build dockers using aufs in ubuntu 18.04
Immedidate dockers are exported to docker file and then
imported into sonic image. Thus, whether using vfs or aufs
as the storage driver does not matter for the immediate build.
Signed-off-by: Guohan Lu <gulv@microsoft.com>
Need to build NTP 4.2.6 locally due to a Bug in NTP 4.2.6.
Changes:
1.) Remove 'apt-get ntp' step from build_debian.sh.
2.) Add NTP package as part of base image in slave.mk.
3.) NTP Makefile for Sonic Build System rules/ntp.mk.
4.) NTP Source Makefile src/ntp/Makefile.
5.) Patch to fix the issure src/ntp/patch.
Signed-off-by: Praveen Chaudhary<pchaudhary@linkedin.com>
* [src/ntp/Makefile]: DSC file URL points to sonic storage.
Signed-off-by: Praveen Chaudhary<pchaudhary@linkedin.com>
* [src/ntp/Makefile]: Changes to build with sonic blob.
518ff41 2019-01-28 | Revert "Fix the ipv6 address lost issue with current config CLI (#331)" (HEAD, origin/201803) [Guohan Lu]
Signed-off-by: Guohan Lu <gulv@microsoft.com>
