[Devel] [PATCH hci-8.1] ve/proc/net: fix tcp6 and udp6 missing from /proc/net in containers

[no-reply at sashiko.virtuozzo.com]

> From: Denis V. Lunev <den at openvz.org>
> 
> A container sees /proc/net/tcp and udp but gets ENOENT on tcp6 and udp6,
> both at /proc/net and at /proc/<pid>/net. Applications that parse these
> tables, like the .NET startup script in JE-76965, fail although IPv6
> works and ss lists the sockets over netlink.
> 
> In vz7 all of tcp, tcp6, udp, udp6, udplite and udplite6 were created by
> tcp_proc_register() and udp_proc_register(), which used the VE helper,
> so one call covered every family. Upstream commit 37d849bb4294
> ("ipv{4,6}/tcp: simplify procfs registration") and commit a3d2599b2446
> ("ipv{4,6}/udp{,lite}: simplify proc registration") moved each family to
> its own proc_create_net_data() call, and the port of the VE patch
> converted only the IPv4 tcp and udp ones. udplite and udplite6 are
> hidden the same way. icmp6 did not exist in vz7 and was never converted,
> while its IPv4 twin icmp is visible.
> 
> Register the five entries with the VE helpers. They are per-netns and
> their seq iterators skip sockets of other namespaces, so a container
> lists only its own sockets.
> 
> https://virtuozzo.atlassian.net/browse/VSTOR-153793
> 
> Fixes: 68eae6367fdc ("ve/proc/net: virtualize all the network proc entries")
> Reported-by: Andrii Mozharovskyi <andrii.mozharovskyi at virtuozzo.com>
> Feature: procfs: virtualize /proc/net/* entries
> Signed-off-by: Denis V. Lunev <den at openvz.org>

Sashiko has reviewed this patch and found no issues. It looks great!

-- 
Sashiko AI review · https://sashiko.vzint.dev/#/patchset/20261106121957.3696406-1-den@openvz.org?part=1