Bug 7331 - Ports can't be automatically unbound on systems with new versions of iproute (RHEL8)
Summary: Ports can't be automatically unbound on systems with new versions of iproute ...
Status: CLOSED FIXED
Alias: None
Product: ThinLinc
Classification: Unclassified
Component: Server OS (show other bugs)
Version: trunk
Hardware: PC Unknown
: P2 Normal
Target Milestone: 4.10.1
Assignee: Pierre Ossman
URL:
Keywords: prosaic, samuel_tester
Depends on:
Blocks: 7328
  Show dependency tree / graph
 
Reported: 2019-04-10 10:28 CEST by Peter Åstrand
Modified: 2019-11-07 15:39 CET (History)
1 user (show)

See Also:
Acceptance Criteria:

Attachments
Hotfix for RHEL 8 (1020.00 KB, application/x-tar)
2019-10-04 13:28 CEST, Samuel Mannehed 		Details
View All Add an attachment (proposed patch, testcase, etc.)

Description Peter Åstrand cendio 2019-04-10 10:28:06 CEST 
This is bug 7221, but for RHEL8. The problem is present in Beta 1. Problem was fixed upstream 2018-08-15:

https://git.kernel.org/pub/scm/network/iproute2/iproute2.git/commit/misc/ssfilter.y?id=38d209ecf2ae966b9b25de4acb60cdffb0e06ced

However, RHEL8 beta 1 has:

iproute-4.18.0-3.el8.x86_64

Version 4.18 was released 2018-08-13:

https://mirrors.edge.kernel.org/pub/linux/utils/net/iproute2/

From comment 7221:

>This bug doesn't only cause spam in the vsmagent.log, it also prevents the
>agent from automatically freeing any ports it needs.

Unfortunately, it seems this bug can also prevent logins.
Comment 1 Peter Åstrand cendio 2019-04-10 12:15:34 CEST 
https://bugzilla.redhat.com/show_bug.cgi?id=1698401
Comment 2 Pierre Ossman cendio 2019-05-09 13:02:01 CEST 
iproute got some patches for RHEL 8 GA, but this bug remains. I've poked upstream again. Let's see how they react.
Comment 6 Pierre Ossman cendio 2019-08-20 10:30:14 CEST 
(In reply to comment #0)
> 
> Unfortunately, it seems this bug can also prevent logins.

Not sure when. I've been connecting just fine. So perhaps the consequences of this bug isn't as severe as we first thought.
Comment 7 Pierre Ossman cendio 2019-08-20 10:56:28 CEST 
I've added a platform specific note referencing the upstream bug.
Comment 8 Pierre Ossman cendio 2019-08-22 10:21:04 CEST 
We'll go ahead and release with just the platform specific notes for now as Red Hat is saying they need three more months to deploy a fix.
Comment 9 Samuel Mannehed cendio 2019-08-22 11:11:28 CEST 
PSN looks good.
Comment 10 Samuel Mannehed cendio 2019-10-04 13:28:12 CEST 
Created attachment 916 [details]
Hotfix for RHEL 8

We got a hotfix from Red Hat for the iproute package that includes ss.
Comment 11 Samuel Mannehed cendio 2019-11-07 15:38:50 CET 
To reproduce the problem easily, you can run: 

 ss 'sport = 22 or ( dport = 22 )'
Comment 12 Samuel Mannehed cendio 2019-11-07 15:39:04 CET 
The fix is now available in the public RHEL8 repos with iproute-4.18.0-15.el8.
Note You need to log in before you can comment on or make changes to this bug.