[pve-devel] [RFC common/docs/firewall/manager/network/proxmox{-ve-rs, -firewall} v3 0/9] NIC renaming mitigations
Stefan Hanreich
s.hanreich at proxmox.com
Wed Jul 16 18:39:02 CEST 2025
This patch series contains the following features:
* transparent altname support for {pve, proxmox}-firewall and pve-network
* proxmox-network-interface-pinning tool for pinning NIC names
Both are improvements aimed at mitigating the fallout caused from changing
network interface names.
For more information on the pinning tool, see the respective commit that
explains the usage - a short tl;dr:
* Pin network interfaces via proxmox-network-interface-pinning generate
* reboot to apply the changes to the network configuration
I also introduce two new one-shot services, that are executed on boot, for
applying pending network configuration changes.
Changes from RFC v2:
* add documentation patch
Changes from RFC:
* renamed pin -> generate
* removed unpinning feature (will be implemented in a follow-up)
* configuration now gets generated into pending files, instead of directly
rewriting configuration
* created SDN and FW pendants to pvenetcommit for auto-comitting changes on
reboot
pve-common:
Stefan Hanreich (2):
network: add ip link and altname helpers
network: add nic prefix to physical nic regex
src/PVE/Network.pm | 47 +++++++++++++++++++++++++++++++++++++++++++++-
1 file changed, 46 insertions(+), 1 deletion(-)
proxmox-ve-rs:
Stefan Hanreich (1):
config: ip link struct
proxmox-ve-config/src/host/mod.rs | 1 +
proxmox-ve-config/src/host/network.rs | 35 +++++++++++++++++++++++++++
2 files changed, 36 insertions(+)
create mode 100644 proxmox-ve-config/src/host/network.rs
proxmox-firewall:
Stefan Hanreich (1):
firewall: add altname support for firewall rules
proxmox-firewall/src/config.rs | 29 +++++++++++++++++++++
proxmox-firewall/src/rule.rs | 6 ++++-
proxmox-firewall/tests/integration_tests.rs | 7 +++++
3 files changed, 41 insertions(+), 1 deletion(-)
pve-firewall:
Stefan Hanreich (1):
firewall: add altname support
src/PVE/Firewall.pm | 7 +++++--
1 file changed, 5 insertions(+), 2 deletions(-)
pve-network:
Stefan Hanreich (1):
controllers: isis: add altname support
src/PVE/Network/SDN/Controllers/IsisPlugin.pm | 5 ++++-
1 file changed, 4 insertions(+), 1 deletion(-)
pve-manager:
Stefan Hanreich (2):
cli: add proxmox-network-interface-pinning tool
services: add pvesdncommit and pvefirewallcommit
PVE/CLI/Makefile | 1 +
PVE/CLI/proxmox_network_interface_pinning.pm | 396 +++++++++++++++++++
bin/Makefile | 21 +-
bin/proxmox-network-interface-pinning | 8 +
bin/pvefirewallcommit | 14 +
bin/pvesdncommit | 14 +
debian/postinst | 2 +-
services/Makefile | 4 +-
services/pvefirewallcommit.service | 13 +
services/pvesdncommit.service | 13 +
10 files changed, 483 insertions(+), 3 deletions(-)
create mode 100644 PVE/CLI/proxmox_network_interface_pinning.pm
create mode 100644 bin/proxmox-network-interface-pinning
create mode 100644 bin/pvefirewallcommit
create mode 100644 bin/pvesdncommit
create mode 100644 services/pvefirewallcommit.service
create mode 100644 services/pvesdncommit.service
pve-docs:
Stefan Hanreich (1):
network: add documentation for proxmox-network-interface-pinning
pve-network.adoc | 42 ++++++++++++++++++++++++++++++++++++++++++
1 file changed, 42 insertions(+)
Summary over all repositories:
19 files changed, 657 insertions(+), 8 deletions(-)
--
Generated by git-murpp 0.8.0
More information about the pve-devel
mailing list