Loading...

Type: Story
Resolution: Done-Errata
Priority: Undefined
Fix Version/s: rhel-9.4
Affects Version/s: rhel-9.4
Component/s: kernel / File Systems / NFS
Labels:

Fixed in Build:
kernel-5.14.0-397.el9
Severity:
None
Epic Link:
RHELPLAN-146588
Keywords:

ZStream, Rebase

Pool Team:

rhel-sst-filesystems
Sub-System Group:

ssg_filesystems_storage_and_HA

Dev Target Milestone:
10
Internal Target Milestone:
18
Story Points:
8
ACKs Check:

QE ack, Dev ack
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Product Documentation Required:
Yes
Sprint:
None
Release Blocker:
Approved Blocker

Test Plan:
https://gitlab.cee.redhat.com/kernel-qe/kernel/-/tree/master/filesystems/ltp-generic
Preliminary Testing:
Pass
Test Link:
https://pkgs.devel.redhat.com/cgit/tests/nfs-utils/tree/function/rpc-with-tls-local
Testable Builds:

Hide
The following Merge Request has pipeline job artifacts available:

Title: NFS/NFSD/SUNRPC backport up to v6.6 for RHEL9.4
MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/2909
MR Pipeline: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/pipelines/1093078516

The Repo URLs are *not* accessible from a web browser! They only function as a dnf or yum baseurl.

Artifacts expire six weeks after creation. If artifacts are needed after that time please rerun the pipeline by visiting the MR's 'Pipelines' tab and clicking the 'Run pipeline' button.

----------------------------------------

Downstream Pipeline Name: RHEL_COMPAT (c9s_rhel9_compat_merge_request)
Downstream Pipeline: https://gitlab.com/redhat/red-hat-ci-tools/kernel/cki-internal-pipelines/cki-internal-contributors/-/pipelines/1093078534
Repo URL: https://s3.upshift.redhat.com/DH-PROD-CKI/internal/1093078534/$basearch/5.14.0-394.2909_1093078516.el9.$basearch
Debug Repo URL: https://s3.upshift.redhat.com/DH-PROD-CKI/internal/1093078534/$basearch-debug/5.14.0-394.2909_1093078516.el9.$basearch

5.14.0-394.2909_1093078516.el9.s390x:
Artifacts (RPMs): https://s3.upshift.redhat.com/DH-PROD-CKI/index.html?prefix=internal-artifacts/1093078534/publish_s390x/5666870583/artifacts/repo/5.14.0-394.2909_1093078516.el9.s390x/

5.14.0-394.2909_1093078516.el9.aarch64:
Artifacts (RPMs): https://s3.upshift.redhat.com/DH-PROD-CKI/index.html?prefix=internal-artifacts/1093078534/publish_aarch64/5666870582/artifacts/repo/5.14.0-394.2909_1093078516.el9.aarch64/

5.14.0-394.2909_1093078516.el9.ppc64le:
Artifacts (RPMs): https://s3.upshift.redhat.com/DH-PROD-CKI/index.html?prefix=internal-artifacts/1093078534/publish_ppc64le/5666870580/artifacts/repo/5.14.0-394.2909_1093078516.el9.ppc64le/

5.14.0-394.2909_1093078516.el9.x86_64-debug:
Artifacts (RPMs): https://s3.upshift.redhat.com/DH-PROD-CKI/index.html?prefix=internal-artifacts/1093078534/publish_x86_64_debug/5666870577/artifacts/repo/5.14.0-394.2909_1093078516.el9.x86_64/

5.14.0-394.2909_1093078516.el9.x86_64:
Artifacts (RPMs): https://s3.upshift.redhat.com/DH-PROD-CKI/index.html?prefix=internal-artifacts/1093078534/publish_x86_64/5666870574/artifacts/repo/5.14.0-394.2909_1093078516.el9.x86_64/

----------------------------------------

Downstream Pipeline Name: REALTIME (c9s_rt_merge_request)
Downstream Pipeline: https://gitlab.com/redhat/red-hat-ci-tools/kernel/cki-internal-pipelines/cki-trusted-contributors/-/pipelines/1093078533

5.14.0-394.2909_1093078516.el9.x86_64-debug:
Artifacts (RPMs): https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/index.html?prefix=trusted-artifacts/1093078533/publish_x86_64_debug/5666870524/artifacts/repo/5.14.0-394.2909_1093078516.el9.x86_64/
Repo URL: https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/trusted-artifacts/1093078533/publish_x86_64_debug/5666870524/artifacts/repo/5.14.0-394.2909_1093078516.el9.x86_64/

5.14.0-394.2909_1093078516.el9.x86_64:
Artifacts (RPMs): https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/index.html?prefix=trusted-artifacts/1093078533/publish_x86_64/5666870522/artifacts/repo/5.14.0-394.2909_1093078516.el9.x86_64/
Repo URL: https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/trusted-artifacts/1093078533/publish_x86_64/5666870522/artifacts/repo/5.14.0-394.2909_1093078516.el9.x86_64/

----------------------------------------

Downstream Pipeline Name: AUTOMOTIVE (c9s_automotive_check_merge_request)
Downstream Pipeline: https://gitlab.com/redhat/red-hat-ci-tools/kernel/cki-internal-pipelines/cki-trusted-contributors/-/pipelines/1093078535

5.14.0-394.348.2909_1093078516.el9iv.aarch64:
Artifacts (RPMs): https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/index.html?prefix=trusted-artifacts/1093078535/publish_aarch64/5666870537/artifacts/repo/5.14.0-394.348.2909_1093078516.el9iv.aarch64/
Repo URL: https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/trusted-artifacts/1093078535/publish_aarch64/5666870537/artifacts/repo/5.14.0-394.348.2909_1093078516.el9iv.aarch64/

5.14.0-394.348.2909_1093078516.el9iv.x86_64-debug:
Artifacts (RPMs): https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/index.html?prefix=trusted-artifacts/1093078535/publish_x86_64_debug/5666870536/artifacts/repo/5.14.0-394.348.2909_1093078516.el9iv.x86_64/
Repo URL: https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/trusted-artifacts/1093078535/publish_x86_64_debug/5666870536/artifacts/repo/5.14.0-394.348.2909_1093078516.el9iv.x86_64/

5.14.0-394.348.2909_1093078516.el9iv.x86_64:
Artifacts (RPMs): https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/index.html?prefix=trusted-artifacts/1093078535/publish_x86_64/5666870532/artifacts/repo/5.14.0-394.348.2909_1093078516.el9iv.x86_64/
Repo URL: https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/trusted-artifacts/1093078535/publish_x86_64/5666870532/artifacts/repo/5.14.0-394.348.2909_1093078516.el9iv.x86_64/

----------------------------------------

Downstream Pipeline Name: 64K (c9s_64k_merge_request)
Downstream Pipeline: https://gitlab.com/redhat/red-hat-ci-tools/kernel/cki-internal-pipelines/cki-trusted-contributors/-/pipelines/1093078545

5.14.0-394.2909_1093078516.el9.aarch64:
Artifacts (RPMs): https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/index.html?prefix=trusted-artifacts/1093078545/publish_aarch64/5666870668/artifacts/repo/5.14.0-394.2909_1093078516.el9.aarch64/
Repo URL: https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/trusted-artifacts/1093078545/publish_aarch64/5666870668/artifacts/repo/5.14.0-394.2909_1093078516.el9.aarch64/

----------------------------------------

Updated 2023-12-02 12:30 UTC by buglinker:
- KWF FAQ: https://red.ht/kernel_workflow_doc
- Slack #team-kernel-workflow: https://redhat-internal.slack.com/archives/C04LRUPMJQ5
- Source: https://gitlab.com/cki-project/kernel-workflow/-/blob/main/webhook/buglinker.py
- Documentation: https://gitlab.com/cki-project/kernel-workflow/-/blob/main/docs/README.buglinker.md
- Report an issue: https://gitlab.com/cki-project/kernel-workflow/-/issues/new?issue%5Btitle%5D=buglinker%20webhook%20issue

Show
The following Merge Request has pipeline job artifacts available: Title: NFS/NFSD/SUNRPC backport up to v6.6 for RHEL9.4 MR: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/merge_requests/2909 MR Pipeline: https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-9/-/pipelines/1093078516 The Repo URLs are *not* accessible from a web browser! They only function as a dnf or yum baseurl. Artifacts expire six weeks after creation. If artifacts are needed after that time please rerun the pipeline by visiting the MR's 'Pipelines' tab and clicking the 'Run pipeline' button. ---------------------------------------- Downstream Pipeline Name: RHEL_COMPAT (c9s_rhel9_compat_merge_request) Downstream Pipeline: https://gitlab.com/redhat/red-hat-ci-tools/kernel/cki-internal-pipelines/cki-internal-contributors/-/pipelines/1093078534 Repo URL: https://s3.upshift.redhat.com/DH-PROD-CKI/internal/1093078534/$basearch/5.14.0-394.2909_1093078516.el9.$basearch Debug Repo URL: https://s3.upshift.redhat.com/DH-PROD-CKI/internal/1093078534/$basearch-debug/5.14.0-394.2909_1093078516.el9.$basearch 5.14.0-394.2909_1093078516.el9.s390x: Artifacts (RPMs): https://s3.upshift.redhat.com/DH-PROD-CKI/index.html?prefix=internal-artifacts/1093078534/publish_s390x/5666870583/artifacts/repo/5.14.0-394.2909_1093078516.el9.s390x/ 5.14.0-394.2909_1093078516.el9.aarch64: Artifacts (RPMs): https://s3.upshift.redhat.com/DH-PROD-CKI/index.html?prefix=internal-artifacts/1093078534/publish_aarch64/5666870582/artifacts/repo/5.14.0-394.2909_1093078516.el9.aarch64/ 5.14.0-394.2909_1093078516.el9.ppc64le: Artifacts (RPMs): https://s3.upshift.redhat.com/DH-PROD-CKI/index.html?prefix=internal-artifacts/1093078534/publish_ppc64le/5666870580/artifacts/repo/5.14.0-394.2909_1093078516.el9.ppc64le/ 5.14.0-394.2909_1093078516.el9.x86_64-debug: Artifacts (RPMs): https://s3.upshift.redhat.com/DH-PROD-CKI/index.html?prefix=internal-artifacts/1093078534/publish_x86_64_debug/5666870577/artifacts/repo/5.14.0-394.2909_1093078516.el9.x86_64/ 5.14.0-394.2909_1093078516.el9.x86_64: Artifacts (RPMs): https://s3.upshift.redhat.com/DH-PROD-CKI/index.html?prefix=internal-artifacts/1093078534/publish_x86_64/5666870574/artifacts/repo/5.14.0-394.2909_1093078516.el9.x86_64/ ---------------------------------------- Downstream Pipeline Name: REALTIME (c9s_rt_merge_request) Downstream Pipeline: https://gitlab.com/redhat/red-hat-ci-tools/kernel/cki-internal-pipelines/cki-trusted-contributors/-/pipelines/1093078533 5.14.0-394.2909_1093078516.el9.x86_64-debug: Artifacts (RPMs): https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/index.html?prefix=trusted-artifacts/1093078533/publish_x86_64_debug/5666870524/artifacts/repo/5.14.0-394.2909_1093078516.el9.x86_64/ Repo URL: https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/trusted-artifacts/1093078533/publish_x86_64_debug/5666870524/artifacts/repo/5.14.0-394.2909_1093078516.el9.x86_64/ 5.14.0-394.2909_1093078516.el9.x86_64: Artifacts (RPMs): https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/index.html?prefix=trusted-artifacts/1093078533/publish_x86_64/5666870522/artifacts/repo/5.14.0-394.2909_1093078516.el9.x86_64/ Repo URL: https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/trusted-artifacts/1093078533/publish_x86_64/5666870522/artifacts/repo/5.14.0-394.2909_1093078516.el9.x86_64/ ---------------------------------------- Downstream Pipeline Name: AUTOMOTIVE (c9s_automotive_check_merge_request) Downstream Pipeline: https://gitlab.com/redhat/red-hat-ci-tools/kernel/cki-internal-pipelines/cki-trusted-contributors/-/pipelines/1093078535 5.14.0-394.348.2909_1093078516.el9iv.aarch64: Artifacts (RPMs): https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/index.html?prefix=trusted-artifacts/1093078535/publish_aarch64/5666870537/artifacts/repo/5.14.0-394.348.2909_1093078516.el9iv.aarch64/ Repo URL: https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/trusted-artifacts/1093078535/publish_aarch64/5666870537/artifacts/repo/5.14.0-394.348.2909_1093078516.el9iv.aarch64/ 5.14.0-394.348.2909_1093078516.el9iv.x86_64-debug: Artifacts (RPMs): https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/index.html?prefix=trusted-artifacts/1093078535/publish_x86_64_debug/5666870536/artifacts/repo/5.14.0-394.348.2909_1093078516.el9iv.x86_64/ Repo URL: https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/trusted-artifacts/1093078535/publish_x86_64_debug/5666870536/artifacts/repo/5.14.0-394.348.2909_1093078516.el9iv.x86_64/ 5.14.0-394.348.2909_1093078516.el9iv.x86_64: Artifacts (RPMs): https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/index.html?prefix=trusted-artifacts/1093078535/publish_x86_64/5666870532/artifacts/repo/5.14.0-394.348.2909_1093078516.el9iv.x86_64/ Repo URL: https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/trusted-artifacts/1093078535/publish_x86_64/5666870532/artifacts/repo/5.14.0-394.348.2909_1093078516.el9iv.x86_64/ ---------------------------------------- Downstream Pipeline Name: 64K (c9s_64k_merge_request) Downstream Pipeline: https://gitlab.com/redhat/red-hat-ci-tools/kernel/cki-internal-pipelines/cki-trusted-contributors/-/pipelines/1093078545 5.14.0-394.2909_1093078516.el9.aarch64: Artifacts (RPMs): https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/index.html?prefix=trusted-artifacts/1093078545/publish_aarch64/5666870668/artifacts/repo/5.14.0-394.2909_1093078516.el9.aarch64/ Repo URL: https://s3.amazonaws.com/arr-cki-prod-trusted-artifacts/trusted-artifacts/1093078545/publish_aarch64/5666870668/artifacts/repo/5.14.0-394.2909_1093078516.el9.aarch64/ ---------------------------------------- Updated 2023-12-02 12:30 UTC by buglinker: - KWF FAQ: https://red.ht/kernel_workflow_doc - Slack #team-kernel-workflow: https://redhat-internal.slack.com/archives/C04LRUPMJQ5 - Source: https://gitlab.com/cki-project/kernel-workflow/-/blob/main/webhook/buglinker.py - Documentation: https://gitlab.com/cki-project/kernel-workflow/-/blob/main/docs/README.buglinker.md - Report an issue: https://gitlab.com/cki-project/kernel-workflow/-/issues/new?issue%5Btitle%5D=buglinker%20webhook%20issue
Test Coverage:

Automated

Release Note Type:
Technology Preview
Release Note Text:

Hide
.NFS with TLS is now available as a Technology Preview

An implementation of RFC 9289 for NFS, which secures NFS Remote Procedure Call (RPC) traffic with Transport Layer Security (TLS) is now available as a Technology Preview. This feature enhances the security of NFS by enabling TLS for RPC traffic, ensuring encrypted communication between clients and servers.

Show
.NFS with TLS is now available as a Technology Preview An implementation of RFC 9289 for NFS, which secures NFS Remote Procedure Call (RPC) traffic with Transport Layer Security (TLS) is now available as a Technology Preview. This feature enhances the security of NFS by enabling TLS for RPC traffic, ensuring encrypted communication between clients and servers.
Release Note Status:
Done

Experience:
Architecture:

Unspecified
Bugzilla Bug:
RHBZ: 2178799

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

Planning:
None

Description of problem:

Targeted for 6.4 kernel release is a feature that adds implementation of RFC 9289 which is securing RPC traffic with TLS.

There will be kernel patches that span SUNRPC, NFS, and NET kernel components as well as a user land deamon piece that does the TLS handshake.

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1.
2.
3.

Actual results:

Expected results:

Additional info:

is depended on by

RHEL-51152 Introduce kTLS and utils for NFS

In Progress

is duplicated by

RHEL-7983 [xfstests/nfs generic/650] kernel BUG at fs/nfsd/xdr4.h:780!

Closed

RHEL-7995 NFSv4.1 client sends a zero valued file handle in a GETATTR after an OPEN compound with an unsuccessful GETATTR

Closed

RHEL-7996 NFSv4.1 client doesn't mark connection the DS server with USE_PNFS_DS flag in EXCHANGE_ID

Closed

relates to

RHEL-14754 nfs-utils update to support for the NFS RPC-with-TLS

Closed

external trackers

Red Hat Issue Tracker RHELPLAN-151991

links to

Merge Request: NFS/NFSD/SUNRPC backport up to v6.6 for RHEL9.4

RHSA-2023:120102 kernel bug fix and enhancement update

mentioned on

Merge request - kernel-5.14.0-397.el9

(1 external trackers, 2 links to, 1 mentioned on)

Details

Description

Attachments

Issue Links

Easy Agile Planning Poker

Activity

People

Dates