[Oraclevm-errata] OVMBA-2017-0138 Oracle VM 3.4 ovs-agent bug fix update

[Errata Announcements for Oracle VM]

Oracle VM Bug Fix Advisory OVMBA-2017-0138

The following updated rpms for Oracle VM 3.4 have been uploaded to the 
Unbreakable Linux Network:

x86_64:
ovs-agent-3.4.4-3.el6.x86_64.rpm


SRPMS:
http://oss.oracle.com/oraclevm/server/3.4/SRPMS-updates/ovs-agent-3.4.4-3.el6.src.rpm



Description of changes:

[3.4.4-3]
- scsi_id used by get_dev_info no longer support for NVMe
   device in new kernel, retrieve dev_info from sysfs instead.
   Signed-off-by: Adnan Misherfi <adnan.misherfi at oracle.com>
   Signed-off-by: Firas Azar <firas.azar at oracle.com> [bug 26356255]

[3.4.4-2]
- Added extra checks to NFS server configuration handling
   code to prevent code from making duplicate attempts in
   NFS server configuration.
   In newer 'nfs-utils' rpms  the 'exportfs' utility returns
   error on attempt to unexport path that was not previously
   exported.
   Signed-off-by: Sergei Garbuzov <sergei.garbuzov at oracle.com>
   Reviewed-by: Firas Azar <firas.azar at oracle.com> [bug 26244801]

[3.4.4-1]
- Update version for 3.4.4 errata

[3.4.3-13]
- Change VXLAN underlying interface name from bond2 to pca_tun to reduce 
conflict.
   This makes bond2.4090 pca_tun.4090. [bug 25767206]

[3.4.3-12]
- Add XML RPC API to add/delete VXLAN interfaces on top of 
physical,bonds,and VLAN interfaces.
   VXLAN interface names  created are of the form (vxlanX, like vxlan5, 
vxlan400 ...etc)
   Add network discovery for VXLAN. VXLAN interfaces show up in the 
discover as any
   other other interface but with names like ( <Device Name="vxlan5">).
   Network discovery does not return bond2.4090 because it the base line 
interface for PCA.
   Change the MTU to 1550 of the underlying interfaces so that the 
payload of the VXLAN is 1500.
   IF the MTU of the underlying interface is 9000, then the payload of 
the VXLAN is 1850. MTU > 9000
   is not supported by the interfaces. [bug 25767206]

[3.4.3-11]
- Make ovs-agent-rpc run with newer python and run anywhere
   From 2.7.9, python will do SSL host verification by default. Running
   ovs-agent-rpc with newer python will get error:
   $ ./ovs-agent-rpc -s https://oracle:oracle@ovs207:8899 discover_server
   Traceback (most recent call last):
   File "./ovs-agent-rpc", line 69, in <module>
   main()
   File "./ovs-agent-rpc", line 59, in main
   result = getattr(server, func)(*params)
   File "/usr/lib64/python2.7/xmlrpclib.py", line 1243, in __call__
   return self.__send(self.__name, args)
   File "/usr/lib64/python2.7/xmlrpclib.py", line 1602, in __request
   verbose=self.__verbose
   File "/usr/lib64/python2.7/xmlrpclib.py", line 1283, in request
   return self.single_request(host, handler, request_body, verbose)
   File "/usr/lib64/python2.7/xmlrpclib.py", line 1311, in single_request
   self.send_content(h, request_body)
   File "/usr/lib64/python2.7/xmlrpclib.py", line 1459, in send_content
   connection.endheaders(request_body)
   File "/usr/lib64/python2.7/httplib.py", line 1038, in endheaders
   self._send_output(message_body)
   File "/usr/lib64/python2.7/httplib.py", line 882, in _send_output
   self.send(msg)
   File "/usr/lib64/python2.7/httplib.py", line 844, in send
   self.connect()
   File "/usr/lib64/python2.7/httplib.py", line 1263, in connect
   server_hostname=server_hostname)
   File "/usr/lib64/python2.7/ssl.py", line 363, in wrap_socket
   _context=self)
   File "/usr/lib64/python2.7/ssl.py", line 611, in __init__
   self.do_handshake()
   File "/usr/lib64/python2.7/ssl.py", line 840, in do_handshake
   self._sslobj.do_handshake()
   ssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify 
failed (_ssl.c:661)
   Attached patch makes ovs-agent-rpc run with newer python. Also try to
   import system xmlrpclib if agent modified one is not available. This
   will enable ovs-agent running anywhere.
   Signed-off-by: Zhigang Wang <zhigang.x.wang at oracle.com>
   Reviewed-by: Adnan Misherfi <adnan.misherfi at oracle.com> [bug 26169643]

[3.4.3-10]
- For the sake of consistency in making NFS repo mounts on
   OVM server replicated code logic from 'osc-oracle-generic'
   rpm package. Thus both code paths involved in NFS repo mounts
   creation on the server will produce consistent results.
   Signed-off-by: Sergei Garbuzov <sergei.garbuzov at oracle.com>
   Reviewed-by: Firas Azar <firas.azar at oracle.com> [bug 25963268]

[3.4.3-9]
- The 'ioctl' system call truncates infiniband interface
   MAC address information to 6 bytes. To address the issue,
   new 'get_device_mac_addr' function is implemented, which
   retrieves MAC address information from 'sysfs' runtime
   data.
   Signed-off-by: Sergei Garbuzov <sergei.garbuzov at oracle.com>
   Reviewed-by: Adnan Misherfi <adnan.misherfi at oracle.com> [bug 23342144]

[3.4.3-8]
- Fix proxy override order
   Before this patch, if users have default proxy in 
/etc/ovs-agent/agent.ini:
   [network]
   proxy=http://192.168.140.4:8888
   and passing in a proxy at the same time, e.g.:
   import_template('0004fb00000300009b6c0ad10c5740d8',
   '0004fb000014000064451f7833aead04',
   ['http://example.com/file'],
   {'proxies': {'http': 'http://proxy.example.com:80'}})
   then the default proxy (http://192.168.140.4:8888) will be used, 
which is not correct.
   After this patch, the user passed in proxy 
(http://proxy.example.com:80) will be used.
   Signed-off-by: Zhigang Wang <zhigang.x.wang at oracle.com>
   Reviewed-by: Adnan Misherfi <adnan.misherfi at oracle.com>
   Reviewed-by: Jingjie Jiang <jingjie.jiang at oracle.com> [bug 25967596]