Branch: refs/heads/master
Home: https://github.com/fabbione/kronosnet
Commit: b1794141d9cfedb01c6679bbf35189a7be9f4479
https://github.com/fabbione/kronosnet/commit/b1794141d9cfedb01c6679bbf35189…
Author: Jan Pokorný <jpokorny(a)redhat.com>
Date: 2017-07-28 (Fri, 28 Jul 2017)
Changed paths:
M build-aux/release.mk
Log Message:
-----------
[build] release.mk: simplify/generalize GPG signing rule
...especially in case we want to easily switch to signing also
particular archives, which may be a reasonable expectation from some
downstream/distro maintainers (as demonstrated with the libqb's
example[1] where this changeset was picked from a followup PR[2],
respectively its adaptation for fence-agents[3]).
Since this commit, such a change is a matter of only swapping
a prerequisities specification for "sign" target per the commented
out suggestion.
For that to work reliably even after such a change, for the complete
dependency backtrack, though, a pre-existing issue with parallelized
work on the prerequisites needs to be fixed first. The (currently
hypothetical) problem is "tarballs" (phony) target missing in the
linearized supply chain for the signed tarballs, as opposed to supply
chain for the checksums file that can be worked on in an (unordered!)
interleave with the work on these signed tarballs. Hence fix this
(currently hypothetical) race condition by stretching "tarballs" target
as progress barrier (using it as a prerequisite) uniformly for all
the deliverables that are going to be signed (as opposed to the
currently only "sha256" target). And when at it, make "deliverables"
variable list them conveniently (along with reformatting definitions
of other variables for uniformity).
[1] https://github.com/ClusterLabs/libqb/issues/145#issuecomment-306640694
[2] https://github.com/ClusterLabs/libqb/pull/260
[3] https://github.com/ClusterLabs/fence-agents/pull/123
Signed-off-by: Jan Pokorný <jpokorny(a)redhat.com>
Commit: 56f470871c4f54f278dd154d86a74abfeb3cf1fc
https://github.com/fabbione/kronosnet/commit/56f470871c4f54f278dd154d86a74a…
Author: Jan Pokorný <jpokorny(a)redhat.com>
Date: 2017-07-28 (Fri, 28 Jul 2017)
Changed paths:
M .gitignore
M build-aux/release.mk
Log Message:
-----------
[build] release.mk: fix no-release conflict (implied-required version)
Previously, generating custom versioned tarballs without requiring
a "release" (which comprises also tagging hence in turn making the
implied version match the required one as desired) would not allow
to test the release routines thoroughly incl. GPG signing.
Unfortunately, allowing for a temporary tag is prone to accidentally
slipping it to the distributed tree, so that should rather be avoided
Now it can.
Another step to blur the boundaries between whether "release" is
specified or not is to make checksums file generated unconditionally.
Also both pre-existing and the newly created (per the above scenario)
"overhead" files arising from make/release.mk are git-ignored properly.
Signed-off-by: Jan Pokorný <jpokorny(a)redhat.com>
Commit: 9d62b36f092d0a1d312e65e1f3a8d585390022e6
https://github.com/fabbione/kronosnet/commit/9d62b36f092d0a1d312e65e1f3a8d5…
Author: Jan Pokorný <jpokorny(a)redhat.com>
Date: 2017-07-28 (Fri, 28 Jul 2017)
Changed paths:
M build-aux/release.mk
Log Message:
-----------
[build] release.mk: move soft guard for no GPG key up the supply chain
It also means the missing key specification is now a hard error when
ASCII armored files are to be created (directly or by other rules).
Leveraging the previous commit, it is now unnecessary to guard against
release mode not being requested, so this guard is dropped completely
in the transition, allowing for the full-fledged (incl. GPG signing)
release delivery testing without mangling with in-tree tags.
To allow "sign" target to (possibly eventually) become the implicit goal
even if "gpgsignkey" variable is explicitly unspecified, make it depend
on $(deliverables).
Signed-off-by: Jan Pokorný <jpokorny(a)redhat.com>
Commit: 4b683cd9d181aa4d4dcb3fb07eacc547bdf416d0
https://github.com/fabbione/kronosnet/commit/4b683cd9d181aa4d4dcb3fb07eacc5…
Author: Jan Pokorný <jpokorny(a)redhat.com>
Date: 2017-07-28 (Fri, 28 Jul 2017)
Changed paths:
M build-aux/release.mk
Log Message:
-----------
[build] release.mk: simplify the default goal, declare .PHONY targets
The default goal line now serves mainly the documentation purpose,
otherwise it could be squashed down to "sign" target.
Signed-off-by: Jan Pokorný <jpokorny(a)redhat.com>
Commit: c9f1b40a7200f0a713b07b556d58964a9bc5de27
https://github.com/fabbione/kronosnet/commit/c9f1b40a7200f0a713b07b556d5896…
Author: Jan Pokorný <jpokorny(a)redhat.com>
Date: 2017-07-28 (Fri, 28 Jul 2017)
Changed paths:
M build-aux/release.mk
Log Message:
-----------
[build] release.mk: reflect current release publishing practice
Core author(s) had previous affiliation with project hosting on
fedorahosted.org, but since the sunset of that hosting[1], it's no
longer an option.
Unfortunately, publish-by-scp convenience of fedorahosted.org won't fly
with GitHub that insists on the (primarily REST) API to get things
automated, so update "publish" recipe to that effect, providing some
hints on possible adaption of the process.
Also, turn "git push --tags" to a bit safer "git push --follow-tags"
for good measure.
[1] https://lists.fedoraproject.org/archives/list/announce@lists.fedoraproject.…
Signed-off-by: Jan Pokorný <jpokorny(a)redhat.com>
Commit: 28260ba89d58a5fde1b9ff7f0b37f97b7aae52c6
https://github.com/fabbione/kronosnet/commit/28260ba89d58a5fde1b9ff7f0b37f9…
Author: Fabio M. Di Nitto <fdinitto(a)redhat.com>
Date: 2017-07-28 (Fri, 28 Jul 2017)
Changed paths:
M .gitignore
M build-aux/release.mk
Log Message:
-----------
Merge pull request #46 from jnpkrn/build-release.mk
[build] release.mk: adapt recent changes from libqb (fence-agents)
Compare: https://github.com/fabbione/kronosnet/compare/b0c82f3e7640...28260ba89d58
Branch: refs/heads/master
Home: https://github.com/fabbione/kronosnet
Commit: b5180f8827bbf407dfead27ce6ad17da395d926e
https://github.com/fabbione/kronosnet/commit/b5180f8827bbf407dfead27ce6ad17…
Author: Christine Caulfield <ccaulfie(a)redhat.com>
Date: 2017-07-18 (Tue, 18 Jul 2017)
Changed paths:
M libknet/libknet.h
Log Message:
-----------
libknet.h: change some status values from bitfield to uint8_t
Bitfields are a pain and you can't take the address of them
which makes it hard for cosoync stats to deal with the values
Signed-off-by: Christine Caulfield <ccaulfie(a)redhat.com>
Reviewed-by: Fabio M. Di Nitto <fdinitto(a)redhat.com>
Branch: refs/heads/master
Home: https://github.com/fabbione/kronosnet
Commit: 7fa85bf66835c7e08ed727dd514ee01ef46b6bec
https://github.com/fabbione/kronosnet/commit/7fa85bf66835c7e08ed727dd514ee0…
Author: Fabio M. Di Nitto <fdinitto(a)redhat.com>
Date: 2017-07-12 (Wed, 12 Jul 2017)
Changed paths:
M libknet/nsscrypto.c
Log Message:
-----------
[nss] expand error reporting with proper error strings
thanks Honza for adding some of them in the previous commits
Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com>
Branch: refs/heads/master
Home: https://github.com/fabbione/kronosnet
Commit: 88274a866302f96bef89c1edbe54fcd75747eeb3
https://github.com/fabbione/kronosnet/commit/88274a866302f96bef89c1edbe54fc…
Author: Fabio M. Di Nitto <fdinitto(a)redhat.com>
Date: 2017-07-12 (Wed, 12 Jul 2017)
Changed paths:
M libknet/nsscrypto.c
Log Message:
-----------
[crypto] set default case for key_type and avoid build warnings
when key_type is unknown, gcc complains that cipher can be used
uninitialized.
add default case to catch wrong callers and avoid build warning
Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com>
Branch: refs/heads/master
Home: https://github.com/fabbione/kronosnet
Commit: f96d170e28ac12717d834fe7bd45c223bf22c443
https://github.com/fabbione/kronosnet/commit/f96d170e28ac12717d834fe7bd45c2…
Author: Jan Friesse <jfriesse(a)redhat.com>
Date: 2017-07-11 (Tue, 11 Jul 2017)
Changed paths:
M libknet/nsscrypto.c
Log Message:
-----------
[nsscrypto] Refactor symmetric key importing
Signed-off-by: Jan Friesse <jfriesse(a)redhat.com>
Commit: fb5a4b41a3a4738f2b9957d826ced80a662eb4f3
https://github.com/fabbione/kronosnet/commit/fb5a4b41a3a4738f2b9957d826ced8…
Author: Jan Friesse <jfriesse(a)redhat.com>
Date: 2017-07-11 (Tue, 11 Jul 2017)
Changed paths:
M libknet/nsscrypto.c
Log Message:
-----------
[nsscrypto] Use different method to import key
PK11_ImportSymKey doesn't work when FIPS is enabled because NSS is
targeting to FIPS Level 2 where loading of unencrypted symmetric
key is prohibited.
FIPS Level 2 is hard to achieve without breaking compatibility so patch
implements "workaround" to make NSS behave like FIPS Level 1
(where is allowed to load unencrypted symmetric key).
Workaround is about using temporal key to encrypt corosync authkey in
memory and then to unwrap it into valid NSS key.
Also when FIPS is enabled, it's not currently (nss 3.30.2) possible to
unwrap key larger than 256 bytes.
Signed-off-by: Jan Friesse <jfriesse(a)redhat.com>
Commit: 895209627154c6744a6f00954e3c305788779321
https://github.com/fabbione/kronosnet/commit/895209627154c6744a6f00954e3c30…
Author: Jan Friesse <jfriesse(a)redhat.com>
Date: 2017-07-11 (Tue, 11 Jul 2017)
Changed paths:
M libknet/libknet.h
Log Message:
-----------
[knet.h] Reduce KNET_MIN_KEY_LEN
By reducing KNET_MIN_KEY_LEN we allow FIPS enabled system using NSS to
import (unwrap) the key.
Signed-off-by: Jan Friesse <jfriesse(a)redhat.com>
Commit: 103975181770aa5ee0e698ab92661de5bd5f1e46
https://github.com/fabbione/kronosnet/commit/103975181770aa5ee0e698ab92661d…
Author: Fabio M. Di Nitto <fdinitto(a)redhat.com>
Date: 2017-07-12 (Wed, 12 Jul 2017)
Changed paths:
M libknet/libknet.h
M libknet/nsscrypto.c
Log Message:
-----------
Merge pull request #44 from jfriesse/fips-enable
Fips enable
Compare: https://github.com/fabbione/kronosnet/compare/d419549ffae5...103975181770
Branch: refs/heads/master
Home: https://github.com/fabbione/kronosnet
Commit: b0c959ae7d2083c822e396ea72d41811962f821c
https://github.com/fabbione/kronosnet/commit/b0c959ae7d2083c822e396ea72d418…
Author: Fabio M. Di Nitto <fdinitto(a)redhat.com>
Date: 2017-06-24 (Sat, 24 Jun 2017)
Changed paths:
M libknet/link.c
Log Message:
-----------
[link] switch link_get_status to write lock
previous to the introduction of detailed link stats, the values
contained in the status structure would hardly change over time
making a rdlock more than enough to get the right data.
Now that the values are updated constantly, we need to remove
the window of thread X writing values and thread Y to read them
while being written.
Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com>
Branch: refs/heads/master
Home: https://github.com/fabbione/kronosnet
Commit: d7e63ac8fd2c58e9eb9bc2a685be3052a9281c64
https://github.com/fabbione/kronosnet/commit/d7e63ac8fd2c58e9eb9bc2a685be30…
Author: Chrissie Caulfield <ccaulfie(a)redhat.com>
Date: 2017-06-20 (Tue, 20 Jun 2017)
Changed paths:
M kronosnetd/vty_cli_cmds.c
M libknet/host.c
M libknet/libknet.h
M libknet/link.c
M libknet/tests/api_knet_link_get_status.c
M libknet/tests/api_knet_link_set_config.c
M libknet/tests/api_knet_send.c
M libknet/tests/test-common.c
M libknet/threads_heartbeat.c
M libknet/threads_pmtud.c
M libknet/threads_rx.c
M libknet/threads_tx.c
Log Message:
-----------
libknet: Add link stats (#43)
* libknet: Add link stats
This patch also includes an ABI change to knet_link_get_status()
(as well as returning a load of stats) that should allow us to
add more stats at a later stage without ballooning memory use
with pads or crashing earlier-linked programs with structure
overwrites.
kronosnetd compiles but has not been tested...