passt/contrib, branch 2022_07_20.9af2e5d

Don't abbreviate ip(8) arguments in examples and tests

2022-06-15T07:38:10+00:00

ip(8)'s ability to take abbreviated arguments (e.g. "li sh" instead of
"link show") is very handy when using it interactively, but it doesn't make
for very readable scripts and examples when shown that way.

Signed-off-by: David Gibson

contrib/fedora: Use pre-processing macros in spec file

2022-06-08T07:43:48+00:00

...they seem to be supported by COPR now and make things simpler.

Signed-off-by: Stefano Brivio

contrib/fedora: Drop dashes from version

2022-06-07T15:06:09+00:00

COPR doesn't like them, and I'm trying to build packages there now.

Signed-off-by: Stefano Brivio

contrib: podman: Add bound address configuration, update port specifications

2022-05-02T19:46:13+00:00

Rebase the patch for Podman on top of current upstream, and:

- add support for configuration of specific addresses for forwarded
  ports

- by default, disable port forwarding, and reflect this in the man
  page changes

- adjust processing to a new, incompatible format for port storage,
  which I couldn't actually track down to a specific commit, but
  that resulted in https://github.com/containers/podman/issues/13643
  and commit eedaaf33cdbf ("fix slirp4netns port forwarding with
  ranges")

Signed-off-by: Stefano Brivio

contrib: Add example of Debian package files

2022-03-30T03:52:39+00:00

...using dh_apparmor to ship and apply AppArmor profiles. Tried on
current Debian testing (Bookworm, 12).

Signed-off-by: Stefano Brivio

contrib: Add example spec file for Fedora

2022-03-30T03:52:39+00:00

...with SELinux package, too. Tested on Fedora 35, but it should
work on pretty much any version.

Signed-off-by: Stefano Brivio

passt, pasta: Add examples of SELinux policy modules

2022-03-29T13:35:38+00:00

These should cover any reasonably common use case in distributions.

Signed-off-by: Stefano Brivio

passt, pasta: Add examples of AppArmor policies

2022-03-29T13:35:38+00:00

These should cover any reasonably common use case in distributions.

Signed-off-by: Stefano Brivio

contrib: Add patch for Podman integration

2022-02-21T12:41:13+00:00

The patch introduces a "pasta" networking mode for rootless
container, similar to the existing slirp4netns mode. Notable
differences are described in the commit message.

Signed-off-by: Stefano Brivio

contrib: Introduce PoC for Kata Containers with user-mode networking

2022-01-28T17:51:50+00:00

passt can be used to implement user-mode networking for the Kata
Containers runtime, so that networking setup doesn't need elevated
privileges or capabilities.

This commit adds the patch for Kata Containers runtime and agent
to support passt as networking model and endpoint, and some basic
documentation.

See contrib/kata-containers/README.md for more details and setup
steps.

Signed-off-by: Stefano Brivio