kubeovn / kube-ovn / 24893366936

25%

push

github

chore(deps): bump vishvananda/netlink to main (af2a3ea5) (#6679)

* chore(deps): bump vishvananda/netlink to af2a3ea5

Upstream has not tagged a release since v1.3.1 (Apr 2025) but its main
branch accumulated 54 commits. Several of them transparently improve
the daemon without any business code change:

- AddrList sets ifindex in RTM_GETADDR, so per-link queries no longer
  dump the whole address table and filter client-side.
- NetlinkRequest.Execute retries ErrDumpInterrupted automatically.
- RouteListFiltered preserves partial results on dump interruption.
- RuleListFiltered default-route Src/Dst matching bug fixed.
- SetExtAck is enabled by default, surfacing kernel error messages
  in daemon logs (requires kernel >= 4.12, silently skipped otherwise).
- XfrmStateFlush no longer sends SA_PCPU on get/delete, improving
  old-kernel compatibility.

Zero API breakage: the version range only appends optional fields
(Addr.Protocol, Route.Expires, Route.CacheInfo); all symbols in use
keep their signatures.

Signed-off-by: Mengxin Liu <liumengxinfly@gmail.com>

* feat(daemon): use strict-check netlink handle for per-link AddrList

netlink v1.3.1 (and even the newer v1.3.2 pseudo-version this branch bumps
to) still dumps the entire address table when AddrList is called on the
package-level handle: commit 72a8cd7e sets ifaddrmsg.Index, but the kernel
only honors that index when NETLINK_GET_STRICT_CHK is enabled on the
socket (Linux >= 4.20), and the package handle never sets that sockopt.

Mirror the approach ovn-kubernetes took in PR #6138: wrap per-link
AddrList in a helper that allocates a short-lived handle, enables strict
check, and falls back to the package-level AddrList if the sockopt is
rejected by an older kernel. The strict-check path does not affect any
other caller of the package handle.

Only per-link AddrList sites in pkg/daemon are migrated. The single
nil-link dump in pkg/daemon/config_linux.go (getIfaceByIP) is intentionally
a full namespace... (continued)

0 of 23 new or added lines in 3 files covered. (0.0%)

14071 of 56616 relevant lines covered (24.85%)

0.29 hits per line