From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: passt.top; dmarc=pass (p=quarantine dis=none) header.from=redhat.com Authentication-Results: passt.top; dkim=pass (1024-bit key; unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256 header.s=mimecast20190719 header.b=OjvoT/hb; dkim-atps=neutral Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by passt.top (Postfix) with ESMTPS id A0D2B5A0265 for ; Sun, 22 Feb 2026 18:45:04 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1771782303; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=HxXnntuNhjGtbXGwP2p3Vyk9V6kUzIuWty5mUUG2Fms=; b=OjvoT/hbSl8vGdGeqRswWd2fncoyAwDYtPQO4GzKIGMQ5uRFbRcOSvY6ZaxKdSYHm5hLqf PjlHb1G4BWR2iM+eWG1jXA0x4Ox5Av10B0J8DJZRSQ8QakzqzHsvZdq46dICih8gh11fkx SM7ImyqYaC9R5FspbVNahVz2fYqw1uQ= Received: from mx-prod-mc-01.mail-002.prod.us-west-2.aws.redhat.com (ec2-54-186-198-63.us-west-2.compute.amazonaws.com [54.186.198.63]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-449-sfDfX_axMNmN0ztbAVg2Pg-1; Sun, 22 Feb 2026 12:45:00 -0500 X-MC-Unique: sfDfX_axMNmN0ztbAVg2Pg-1 X-Mimecast-MFC-AGG-ID: sfDfX_axMNmN0ztbAVg2Pg_1771782299 Received: from mx-prod-int-06.mail-002.prod.us-west-2.aws.redhat.com (mx-prod-int-06.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.93]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mx-prod-mc-01.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS id 29AC319560A5; Sun, 22 Feb 2026 17:44:59 +0000 (UTC) Received: from jmaloy-thinkpadp16vgen1.rmtcaqc.csb (unknown [10.22.64.49]) by mx-prod-int-06.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTP id 1CEAC1800370; Sun, 22 Feb 2026 17:44:57 +0000 (UTC) From: Jon Maloy To: sbrivio@redhat.com, dgibson@redhat.com, david@gibson.dropbear.id.au, jmaloy@redhat.com, passt-dev@passt.top Subject: [PATCH v5 06/13] conf: Allow multiple -a/--address options per address family Date: Sun, 22 Feb 2026 12:44:38 -0500 Message-ID: <20260222174445.743845-7-jmaloy@redhat.com> In-Reply-To: <20260222174445.743845-1-jmaloy@redhat.com> References: <20260222174445.743845-1-jmaloy@redhat.com> MIME-Version: 1.0 X-Scanned-By: MIMEDefang 3.4.1 on 10.30.177.93 X-Mimecast-Spam-Score: 0 X-Mimecast-MFC-PROC-ID: V81zRrg8iHJNlgiaY-Zv_u_irGqRzu4KA371InafRgg_1771782299 X-Mimecast-Originator: redhat.com Content-Transfer-Encoding: 8bit content-type: text/plain; charset="US-ASCII"; x-default=true Message-ID-Hash: N5WD2KPQZBUHPXLEKLRY2J2IQPZLXTSN X-Message-ID-Hash: N5WD2KPQZBUHPXLEKLRY2J2IQPZLXTSN X-MailFrom: jmaloy@redhat.com X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.8 Precedence: list List-Id: Development discussion and patches for passt Archived-At: Archived-At: List-Archive: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: Allow specifying multiple addresses per family with -a/--address. The first address of each family is used for DHCP/DHCPv6 assignment. Signed-off-by: Jon Maloy --- v2: - Adapted to previous code changes v3: - Adapted to single-array strategy - Changes according to feedback from S. Brivio and G Gibson. v4: - Stripped down and adapted after feedback from David G. --- conf.c | 41 ++++++++++++++++++++++++----------------- pasta.c | 17 ++++++++++------- 2 files changed, 34 insertions(+), 24 deletions(-) diff --git a/conf.c b/conf.c index eb967c7..35ef994 100644 --- a/conf.c +++ b/conf.c @@ -915,9 +915,10 @@ static void usage(const char *name, FILE *f, int status) " default: 65520: maximum 802.3 MTU minus 802.3 header\n" " length, rounded to 32 bits (IPv4 words)\n" " -a, --address ADDR Assign IPv4 or IPv6 address ADDR[/PREFIXLEN]\n" - " can be specified zero to two times (for IPv4 and IPv6)\n" + " can be specified up to a maximum of 32 times\n" " default: use addresses from interface with default route\n" - " -n, --netmask MASK Assign IPv4 MASK, dot-decimal or bits\n" + " -n, --netmask MASK Assign IPv4 MASK, dot-decimal or bits\n"); + FPRINTF(f, " default: netmask from matching address on the host\n" " -M, --mac-addr ADDR Use source MAC address ADDR\n" " default: 9a:55:9a:55:9a:55 (locally administered)\n" @@ -1874,32 +1875,38 @@ void conf(struct ctx *c, int argc, char **argv) IN6_IS_ADDR_V4COMPAT(&addr.a6)) die("Invalid address: %s", optarg); - /* Legacy behaviour: overwrite existing address if any */ - if (inany_v4(&addr)) { - e = first_v4(c); - if (!e) - e = &c->addrs[c->addr_count++]; - if (c->mode == MODE_PASTA) - c->ip4.no_copy_addrs = true; - } else { - e = first_v6(c); - if (!e) - e = &c->addrs[c->addr_count++]; - if (c->mode == MODE_PASTA) - c->ip6.no_copy_addrs = true; - } + for_each_addr(e, c, AF_UNSPEC) + if (inany_equals(&addr, &e->addr)) + die("Address exists: %s", optarg); + + if (c->addr_count >= INANY_MAX_ADDRS) + die("Max addresses is %d", INANY_MAX_ADDRS); + + e = &c->addrs[c->addr_count++]; e->prefix_len = prefix_len; e->addr = addr; e->flags = CONF_ADDR_USER; + + if (c->mode != MODE_PASTA) + break; + + if (inany_v4(&addr)) + c->ip4.no_copy_addrs = true; + else + c->ip6.no_copy_addrs = true; break; } case 'n': { struct inany_addr_entry *e; - int plen; + int plen, i = 0; if (addr_has_prefix_len) die("Redundant prefix length specification"); + for_each_addr(e, c, AF_INET) + if (++i > 1) + die("Use -n only when one address"); + plen = conf_ip4_prefix(optarg); if (plen < 0) die("Invalid prefix length: %s", optarg); diff --git a/pasta.c b/pasta.c index 54010de..7a081e7 100644 --- a/pasta.c +++ b/pasta.c @@ -342,12 +342,14 @@ void pasta_ns_conf(struct ctx *c) if (c->ifi4) { if (c->ip4.no_copy_addrs) { - e = first_v4(c); - if (e) + for_each_addr(e, c, AF_INET) { rc = nl_addr_set(nl_sock_ns, c->pasta_ifi, AF_INET, inany_v4(&e->addr), - e->prefix_len - 96); + inany_prefix4(e)); + if (rc < 0) + break; + } } else { rc = nl_addr_dup(nl_sock, c->ifi4, nl_sock_ns, c->pasta_ifi, @@ -400,13 +402,14 @@ ipv4_done: 0, IFF_NOARP); if (c->ip6.no_copy_addrs) { - e = first_v6(c); - if (e) + for_each_addr(e, c, AF_INET6) { rc = nl_addr_set(nl_sock_ns, c->pasta_ifi, - AF_INET6, - &e->addr.a6, + AF_INET6, &e->addr.a6, e->prefix_len); + if (rc < 0) + break; + } } else { rc = nl_addr_dup(nl_sock, c->ifi6, nl_sock_ns, c->pasta_ifi, -- 2.52.0