Commit graph

33160 commits

Author SHA1 Message Date
Yegor Yefremov 76fd8f6775 build: use only booleans in a set10 method
Fixes the following deprecation warning:

meson.build:585: DEPRECATION: configuration_data.set10
with number. the `set10` method should only be used with booleans
2024-03-20 17:27:16 +00:00
Fernando Fernandez Mancera 065e67286d merge: branch 'jv/deprecate-wired-blacklist'
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1890
2024-03-20 15:44:45 +01:00
Jan Vaclav 0e283a8917 all: use the new NMSettingWired mac-address-denylist property 2024-03-20 15:32:01 +01:00
Jan Vaclav f2d91b4a68 wired: deprecate NMSettingWired mac-address-blacklist property
To embrace inclusive language, deprecate the NMSettingWired
mac-address-blacklist property and introduce mac-address-denylist property.
2024-03-20 15:32:00 +01:00
Jan Vaclav da8b304c38 libnm/wired: replace mac_address_blacklist type GArray with NMValueStrv
This replaces the underlying type of mac_address_blacklist, which is currently GArray,
with a more re-usable NMValueStrv, which allows us to implement it as a direct property.
2024-03-20 15:31:35 +01:00
Jan Vaclav a9c4c1d84e libnm/wired: fix mac comparison in _remove_mac_blacklist_item_by_value
The comparison checking for MAC address equality had previously been flipped around.

Fixes: b084ad7f2b ('libnm-core: canonicalize hardware addresses in settings')
2024-03-20 15:31:35 +01:00
Jan Vaclav a810de57b6 libnm-core: drop _NM_DEPRECATED_INCLUSIVE_LANGUAGE_1_48 macro 2024-03-20 15:31:35 +01:00
Beniamino Galvani 6af2fb351c core, libnm: expose the reason for unmanaged devices
A common source for doubts and questions from users is about why
devices are unmanaged. Unfortunately NM doesn't expose that
information properly via D-Bus and so it's not available in nmcli.

The device D-Bus object has two properties that are strictly related:
"state" and "state-reason". The latter represents the reason for the
current state. Introduce new reasons to indicate the possible causes
for the unmanaged state. Note that a device can be unmanaged because
of multiple reasons at the same time, we only return one.

Before:

  $ nmcli -f GENERAL.DEVICE,GENERAL.TYPE,GENERAL.STATE,GENERAL.reason device show

  GENERAL.DEVICE:                         enp7s0
  GENERAL.TYPE:                           ethernet
  GENERAL.STATE:                          10 (unmanaged)
  GENERAL.REASON:                         0 (No reason given)

  GENERAL.DEVICE:                         tun0
  GENERAL.TYPE:                           tun
  GENERAL.STATE:                          10 (unmanaged)
  GENERAL.REASON:                         0 (No reason given)

  GENERAL.DEVICE:                         hwsim0
  GENERAL.TYPE:                           unknown
  GENERAL.STATE:                          10 (unmanaged)
  GENERAL.REASON:                         0 (No reason given)

After:

  $ nmcli -f GENERAL.DEVICE,GENERAL.TYPE,GENERAL.STATE,GENERAL.reason device show

  GENERAL.DEVICE:                         enp7s0
  GENERAL.TYPE:                           ethernet
  GENERAL.STATE:                          10 (unmanaged)
  GENERAL.REASON:                         76 (The device is unmanaged by user decision via settings plugin ("unmanaged-devices" for keyfile or "NM_CONTROLLED=no" for ifcfg-rh))

  GENERAL.DEVICE:                         tun0
  GENERAL.TYPE:                           tun
  GENERAL.STATE:                          10 (unmanaged)
  GENERAL.REASON:                         75 (The device is unmanaged by explicit user decision (e.g. 'nmcli device set $DEV managed no')

  GENERAL.DEVICE:                         hwsim0
  GENERAL.TYPE:                           unknown
  GENERAL.STATE:                          10 (unmanaged)
  GENERAL.REASON:                         69 (The device is unmanaged because the device type is unmanaged by default)

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1887
2024-03-20 15:25:09 +01:00
Beniamino Galvani 7d5b4d0b62 gitlab: add checklist item about updating NEWS file to the MR template
From now on, every commit should also update the NEWS file when
necessary. Update the merge request template in Gitlab to add an item
for that to the checklist.

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1896
2024-03-20 15:12:13 +01:00
Beniamino Galvani e5c2c5f1c2 nm-dispatcher: fix crash when parsing output dictionary
'stdout' is NULL when the script didn't write anything or failed.

Fixes the following crash detected by NMCI in test
'dispatcher_device_handler_dummy'.

  nm-dispatcher[936339]: g_strsplit: assertion 'string != NULL' failed

  build_result_options (nm-dispatcher)
  complete_request (nm-dispatcher)
  complete_script (nm-dispatcher)
  script_watch_cb (nm-dispatcher)
  g_child_watch_dispatch (libglib-2.0.so.0)
  g_main_dispatch (libglib-2.0.so.0)
  g_main_context_iterate (libglib-2.0.so.0)
  g_main_context_iteration (libglib-2.0.so.0)
  main (nm-dispatcher)
  __libc_start_main (libc.so.6)
  _start (nm-dispatcher)

Fixes: d72f26b875 ('dispatcher: read device-handler's stdout into a dictionary')

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1889
2024-03-20 09:31:44 +01:00
Jan Vaclav b699de9d4a libnm-core/wireless: fix memory leak in add_mac_denylist_item()
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1894

Fixes: fa215c6a69 ('wireless: deprecate NMSettingWireless mac-address-blacklist property')
2024-03-18 12:33:52 +01:00
Beniamino Galvani 6f1ed55dfc NEWS: update 2024-03-18 09:22:34 +01:00
Beniamino Galvani 209ab10fd9 merge: branch 'pr/1828'
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/1457
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1828
2024-03-18 09:09:32 +01:00
Tomas Ebenlendr d49e9a44c3 nmtui: 802.1x: add expert TLS settings
Allow user to edit openssl_strings and phase1_auth_flags using nmtui.
Hide these settings behind "Show expert TLS options" checkbox when
edited network uses default values for these options.
2024-03-16 21:30:36 +01:00
Tomas Ebenlendr d9e5c4e63a nmtui: 802.1x: make anonymous identity optional
Anonymous identity may be left blank. Identity (username) field is then used.
2024-03-16 21:30:36 +01:00
Tomas Ebenlendr edc2ba4991 802.1x: add openssl_ciphers setting
Setting for wpa_supplicant openssl_ciphers - openssl sometimes moves
ciphers among SECLEVELs. That is generaly a good thing, but some servers
are too old to support newer ciphers. Thus expert user should be allowed
to define openssl_ciphers per connection, so that they can connect to
old server, while not compromising security of other connections.
2024-03-16 21:30:34 +01:00
Wen Liang 15901a7489 device: use subnet when the applied connection has IPv6 method shared
We should use the IPv6 subnet when we have an applied connection
stored on the downlink device, and the IPv6 method should be "shared"
for that applied connection. It does not make sense to register l3cd
and set router config for ndisc instance when the downlink device is
already deactivated.

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1880
Resolves: https://issues.redhat.com/browse/RHEL-17350

Signed-off-by: Wen Liang <liangwen12year@gmail.com>
2024-03-15 10:02:13 -04:00
Gris Ge 8c4f8ecd08 merge: branch 'fix_ovs_same_name'
ovs: Do not allow OVS bridge and port to be parent

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1878
2024-03-15 08:39:42 +00:00
Gris Ge 7096f52a59 ovs: Do not allow OVS bridge and port to be parent
When creating VLAN over OVS internal interface which holding the same
name as its controller OVS bridge, NetworkManager will fail with error:

    Error: Connection activation failed: br0.101 failed to create
    resources: cannot retrieve ifindex of interface br0 (Open vSwitch
    Bridge)

Expanded the `find_device_by_iface()` with additional argument
`child: NmConnection *` which will validate whether candidate is
suitable to be parent device.

In `nm_device_check_parent_connection_compatible()`, we only not allow OVS
bridge and OVS port being parent.

Resolves: https://issues.redhat.com/browse/RHEL-26753

Signed-off-by: Gris Ge <fge@redhat.com>
2024-03-15 16:12:37 +08:00
Fernando Fernandez Mancera b40e2eb721 gitlab-ci: drop unsupported systems from the pipeline
Drop Fedora 30-37, Ubuntu 18.04 LTS and Debian 9 from the pipeline.

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1892
2024-03-14 14:50:04 +01:00
Fernando Fernandez Mancera 170e128215 core: deprecate master in NMActiveConnection internal API
PROP_INT_MASTER_READY and PROP_INT_MASTER are internal API only, that
means we can replace it right away. In addition, replace the functions
related to the properties.

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1885
2024-03-13 18:24:47 +01:00
Fernando Fernandez Mancera 1f05526ed7 core: drop NMDevice master and introduce controller
The master property for NMDevice is internal only therefore we can
replace it directly with controller. In addition, I have adapted related
functions to use controller instead of master.

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1881
2024-03-13 18:00:40 +01:00
Till Maas e1a1f0de89 merge: branch 'meson-fix-double-header'
build: remove a header defined twice

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1891
2024-03-13 16:53:35 +00:00
Yegor Yefremov ecfd564161 build: remove a header defined twice
Fixes the following warning:

src/libnm-client-impl/meson.build:139: WARNING: Keyword argument "header" defined multiple times.
WARNING: This will be an error in future Meson releases.
2024-03-13 15:56:10 +01:00
Gris Ge f805114a91 merge: branch 'dns_checkpoint'
Allow rollback on internal global DNS

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1875
2024-03-13 13:16:48 +00:00
Gris Ge 86d67da28d checkpoint: Allow rollback on internal global DNS
With `NM_CHECKPOINT_CREATE_FLAG_TRACK_INTERNAL_GLOBAL_DNS` flag set on
checkpoint creation, the checkpoint rollback will restore the
global DNS in internal configure file
`/var/lib/NetworkManager/NetworkManager-intern.conf`.

If user has set global DNS in /etc folder, this flag will not take any
effect.

Resolves: https://issues.redhat.com/browse/RHEL-23446

Signed-off-by: Gris Ge <fge@redhat.com>
2024-03-13 20:52:37 +08:00
Beniamino Galvani b185d21c95 l3cfg: fix handling of ipv6 hop limit
Fixes: 5c48c5d5d6 ('l3cfg: set IPv6 sysctls during NML3Cfg commit')

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/1497

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1883
2024-03-12 09:58:28 +01:00
Wen Liang db5b92fa03 libnm: use nm_setting_connection_get_controller() where possible
To enforce conscious language support, use
`nm_setting_connection_get_controller()` where possible and replace
`nm_setting_connection_get_master()`.

https://issues.redhat.com/browse/RHEL-28623

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1882
2024-03-12 09:54:31 +01:00
Fernando Fernandez Mancera 3cb9065305 Revert "build: workaround -Wno-calloc-transposed-args warning in systemd code"
Upstream systemd code was re-imported and therefore the issue is now
solved. Enable the warning again.

This reverts commit b1016e3be8.

https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1886
2024-03-12 09:47:06 +01:00
Fernando Fernandez Mancera 534e199484 merge: branch 'jv/deprecate-mac-blacklist'
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1741
2024-03-11 11:43:18 +01:00
Jan Vaclav f9397a5740 test/client: set 802-11-wireless.mac-address-denylist 2024-03-11 11:42:19 +01:00
Jan Vaclav 5672757ac4 test/networkmanager-service: simulate behavior of aliased/deprecated properties
Previously, the mock server did not behave as expected when given an aliased property
and the test results were not matching that of actual NM daemon behavior.
2024-03-11 11:42:19 +01:00
Jan Vaclav fda0f8435d all: use the new NMSettingWireless mac-address-denylist property 2024-03-11 11:42:19 +01:00
Jan Vaclav fa215c6a69 wireless: deprecate NMSettingWireless mac-address-blacklist property
To embrace inclusive language, deprecate the NMSettingWireless
mac-address-blacklist property and introduce mac-address-denylist property.
2024-03-11 11:42:19 +01:00
Jan Vaclav ec91aa3c70 libnm: add property_type argument to _nm_setting_property_define_direct_strv
The purpose of this is to allow overriding to_dbus_fcn and from_dbus_fcn when
necessary (such as for special behavior regarding a deprecated/aliased properties).
2024-03-11 11:42:19 +01:00
Jan Vaclav 8f9ed29e2c libnm: allow _nm_setting_property_define_direct_strv() to be used as expression
This is so that the resulting index can be used for aliasing properties.
2024-03-11 11:42:19 +01:00
Jan Vaclav 1bb73bd552 libnm: add _NM_DEPRECATED_INCLUSIVE_LANGUAGE_1_48 2024-03-11 11:42:19 +01:00
Íñigo Huguet f3f2f49580 release: bump version to 1.47.2 (development) 2024-03-08 10:31:14 +01:00
Fernando Fernandez Mancera a1492cc53d merge: branch 'ff/dhcp_release'
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1852
2024-03-06 11:17:54 +01:00
Fernando Fernandez Mancera ac4e63ddda ip: support dhcp-send-release in NMSettingIpConfig
Introduce a new option to NMSettingIpConfig. The new option is ternary
type being the default value set to disabled. When enabled,
NetworkManager will instruct the DHCP client to send RELEASE message
when IP addresses are being removed.
2024-03-06 11:14:16 +01:00
Fernando Fernandez Mancera 243cc433fb n-dhcp4: add new client probe function to send RELEASE message
The new function uses the client probe connection to send a RELEASE
message. Returns zero if successful otherwise returns non-zero value.
2024-03-06 11:14:16 +01:00
Fernando Fernandez Mancera 0f0f1bbf8a n-dhcp4: set xid value of the DHCP header for RELEASE and DECLINE message
The `xid` of the DHCP header must be initialized for RELEASE and DECLINE
messages [1].

[1] https://datatracker.ietf.org/doc/html/rfc2131#section-4.4.1
2024-03-06 11:14:16 +01:00
Fernando Fernandez Mancera 3be44c0aa8 device: rename _dev_ipdhcpx_cleanup() "release" argument
The argument might imply that when set to FALSE, the dhcp client won't
send a RELEASE message. This won't be true with the new
dhcp-send-release option that is going to be introduced.

Instead, change the name to "force_release", when set to TRUE it means
we are sending a RELEASE message even if not indicated by the user. When
set to FALSE, it will be up to the user.
2024-03-06 11:14:16 +01:00
Fernando Fernandez Mancera 32b20fbc8c merge: branch 'ff/fix_systemd'
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1877
2024-03-06 11:03:38 +01:00
Fernando Fernandez Mancera d3086e8c79 merge: branch 'ff/down_on_shutdown'
https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/1858
2024-03-05 11:42:21 +01:00
Fernando Fernandez Mancera bd38a19832 connection: add support to down-on-poweroff
The new option at NMSettingConnection allow the user to specify if the
connection needs to be down when powering off the system. This is useful
for IP address removal prior powering off. In order to accomplish that,
we listen on "Shutdown" systemd DBus signal.

The option is set to FALSE by default, it can be specified globally on
configuration file or per profile.
2024-03-04 18:16:54 +00:00
Fernando Fernandez Mancera c8cf02e6b8 manager: abstract code from do_sleep_wake() to reuse it
The code that is adding the devices to the sleeping list and taking them
down should be moved to a separated function. This way we can reuse it
and we avoid duplicating code.
2024-03-04 18:29:07 +01:00
Fernando Fernandez Mancera 05ef682bb5 power: remove monitoring of upower signals
UPower "Sleeping" and "Resuming" signals were dropped long ago [1].
Therefore we are also dropping the support of it.

[1] https://lists.freedesktop.org/archives/devkit-devel/2014-March/001575.html
2024-03-04 18:29:07 +01:00
Fernando Fernandez Mancera 5ab87886f3 power: rename NMSleepMonitor to NMPowerMonitor
In order to provide the NMSleepMonitor a more generic usage, let's
rename the whole module to NMPowerMonitor. Nothing is exposed to the API
so it is a trivial renaming.
2024-03-04 18:29:07 +01:00
Fernando Fernandez Mancera e7ad3d93ab merge: branch 'systemd' into ff/fix_systemd
Disabled unused code and adapted Makefile and meson files.
2024-03-04 18:19:25 +01:00