WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-devel

Re: [Xen-devel] Prevent vif-bridge from adding user-created tap interfac

To: Ian Jackson <Ian.Jackson@xxxxxxxxxxxxx>
Subject: Re: [Xen-devel] Prevent vif-bridge from adding user-created tap interfaces to a bridge
From: Ian Campbell <Ian.Campbell@xxxxxxxxxx>
Date: Thu, 27 Oct 2011 16:35:14 +0100
Cc: Jim Fehlig <jfehlig@xxxxxxxx>, xen-devel <xen-devel@xxxxxxxxxxxxxxxxxxx>
Delivery-date: Thu, 27 Oct 2011 08:42:26 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <20137.29945.290531.658615@xxxxxxxxxxxxxxxxxxxxxxxx>
List-help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-id: Xen developer discussion <xen-devel.lists.xensource.com>
List-post: <mailto:xen-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
Organization: Citrix Systems, Inc.
References: <4EA7396D.30103@xxxxxxxx> <20137.29945.290531.658615@xxxxxxxxxxxxxxxxxxxxxxxx>
Sender: xen-devel-bounces@xxxxxxxxxxxxxxxxxxx
On Thu, 2011-10-27 at 16:12 +0100, Ian Jackson wrote:
> Jim Fehlig writes ("[Xen-devel] Prevent vif-bridge from adding user-created 
> tap interfaces to a bridge"):
> > I received a report that vif-bridge adds any tap interface to a bridge,
> > regardless if xen is running and who created the tap interface.  E.g.
> > 
> > # tunctl -p -t tap42
> > 
> > will cause vif-bridge to be executed as per the following rule in
> > xen-backend.rules
> > 
> > SUBSYSTEM=="net", KERNEL=="tap*", ACTION=="add",
> > RUN+="/etc/xen/scripts/vif-setup $env{ACTION} type_if=tap"
> 
> Urgh.  What a mess.
> 
> > I'm not sure how to improve the rule to prevent execution of vif-setup
> > in this case.  But it seems better to handle it in vif-bridge anyhow, by
> > not connecting the interface to a bridge if there is no corresponding
> > info in xenstore.  Something along the lines of the attached quick
> > patch.  Comments?
> 
> Aren't tap devices like this created by Xen's qemu ?  And as such we
> should be letting qemu run the script, and not have any hotplug
> script called by udev.

We explicitly changed away from that scheme not so long ago. The issue
is that each tap has a vif counterpart which is somewhat logically the
same device and should be setup the same way, hence via the same
mechanisms.

Ian.



_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel