re-enable Ubuntu FAN in the Noble kernel
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
iproute2 (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Noble |
Invalid
|
Undecided
|
Unassigned | ||
Oracular |
Fix Released
|
Undecided
|
Unassigned | ||
linux (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Noble |
Fix Released
|
Medium
|
Unassigned | ||
Oracular |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
[Impact]
In LP: #2063298, we have opted to deprecate Ubuntu FAN support because of the maintenance overhead and the possibility of regressions / conflicts with the new networking eBPF APIs in kernels >= 6.8.
However, we cannot disable this feature in HWE/backport kernels, so it seems safer to adjust the Ubuntu FAN kernel patch set to ensure proper co-existence with the updated vxlan policy requirements in newer 6.8 kernels.
The re-introduction of Ubuntu FAN should be considered as a temporary measure, aimed at facilitating a smooth transition during its deprecation without disrupting existing users (specifically Juju), and enabling the backporting of 6.8 kernels to older releases.
The main plan is still to deprecate Ubuntu FAN at some point in the future.
[Test case]
Rely on the specific Ubuntu FAN regression test to validate the proper kernel support of this feature:
[Fix]
Re-apply the Ubuntu FAN patch set to the latest Noble kernel 6.8 and integrate the IFLA_VXLAN_FAN_MAP attribute type in vxlan_policy to satisfy the strict length validation check.
[Regression potential]
We may experience regressions with eBPF vxlan capabilities and potentially specific use cases of the Ubuntu FAN technology (Juju installations).
CVE References
Changed in linux (Ubuntu Noble): | |
importance: | Undecided → Medium |
Changed in linux (Ubuntu): | |
status: | New → Invalid |
Changed in linux (Ubuntu Noble): | |
status: | New → In Progress |
Changed in linux (Ubuntu Noble): | |
status: | In Progress → Fix Committed |
Changed in linux (Ubuntu): | |
status: | Invalid → Triaged |
status: | Triaged → In Progress |
description: | updated |
Changed in iproute2 (Ubuntu Noble): | |
status: | New → Invalid |
Changed in iproute2 (Ubuntu Oracular): | |
status: | New → In Progress |
tags: |
added: verification-done-oracular-linux removed: verification-needed-oracular-linux |
Changed in linux (Ubuntu): | |
status: | In Progress → Invalid |
Patch set to re-enable Ubuntu FAN in the 6.8 Noble kernel: /lists. ubuntu. com/archives/ kernel- team/2024- May/150684. html
https:/