2 # Copyright (C) 2014 Nicira, Inc.
4 # Licensed under the Apache License, Version 2.0 (the "License");
5 # you may not use this file except in compliance with the License.
6 # You may obtain a copy of the License at:
8 # http://www.apache.org/licenses/LICENSE-2.0
10 # Unless required by applicable law or agreed to in writing, software
11 # distributed under the License is distributed on an "AS IS" BASIS,
12 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 # See the License for the specific language governing permissions and
14 # limitations under the License.
16 check_command_avail () {
17 while [ $# -ne 0 ]; do
18 if ("$1" --version) > /dev/null 2>&1; then :; else
19 echo >&2 "$UTIL: missing $1, cannot proceed"
27 ovs-vsctl --timeout=60 "$@"
30 create_netns_link () {
31 mkdir -p /var/run/netns
32 if [ ! -e /var/run/netns/"$PID" ]; then
33 ln -s /proc/"$PID"/ns/net /var/run/netns/"$PID"
34 trap 'delete_netns_link' 0
35 for signal in 1 2 3 13 14 15; do
36 trap 'delete_netns_link; trap - $signal; kill -$signal $$' $signal
41 delete_netns_link () {
42 rm -f /var/run/netns/"$PID"
51 if [ "$#" -lt 3 ]; then
56 if ovs_vsctl --may-exist add-br "$BRIDGE"; then :; else
57 echo >&2 "$UTIL: Failed to create bridge $BRIDGE"
61 if PID=`docker inspect -f '{{.State.Pid}}' "$CONTAINER"`; then :; else
62 echo >&2 "$UTIL: Failed to get the PID of the container"
69 ID=`uuidgen | sed 's/-//g'`
71 ip link add "${PORTNAME}_l" type veth peer name "${PORTNAME}_c"
73 # Add one end of veth to OVS bridge.
74 if ovs_vsctl --may-exist add-port "$BRIDGE" "${PORTNAME}_l" \
75 -- set interface "${PORTNAME}_l" \
76 external_ids:container_id="$CONTAINER" \
77 external_ids:container_iface="$INTERFACE"; then :; else
78 echo >&2 "$UTIL: Failed to add "${PORTNAME}_l" port to bridge $BRIDGE"
79 ip link delete "${PORTNAME}_l"
83 ip link set "${PORTNAME}_l" up
85 # Move "${PORTNAME}_c" inside the container and changes its name.
86 ip link set "${PORTNAME}_c" netns "$PID"
87 ip netns exec "$PID" ip link set dev "${PORTNAME}_c" name "$INTERFACE"
88 ip netns exec "$PID" ip link set "$INTERFACE" up
90 if [ -n "$ADDRESS" ]; then
91 ip netns exec "$PID" ip addr add "$ADDRESS" dev "$INTERFACE"
100 if [ "$#" -lt 3 ]; then
105 PORT=`ovs_vsctl --data=bare --no-heading --columns=name find interface \
106 external_ids:container_id="$CONTAINER" \
107 external_ids:container_iface="$INTERFACE"`
108 if [ -z "$PORT" ]; then
109 echo >&2 "$UTIL: Failed to find any attached port in $BRIDGE" \
110 "for CONTAINER=$CONTAINER and INTERFACE=$INTERFACE"
114 ovs_vsctl --if-exists del-port "$PORT"
116 ip link delete "$PORT"
122 if [ "$#" -lt 2 ]; then
127 PORTS=`ovs_vsctl --data=bare --no-heading --columns=name find interface \
128 external_ids:container_id="$CONTAINER"`
129 if [ -z "$PORTS" ]; then
133 for PORT in $PORTS; do
134 ovs_vsctl --if-exists del-port "$PORT"
135 ip link delete "$PORT"
141 ${UTIL}: Performs integration of Open vSwitch with Docker.
142 usage: ${UTIL} COMMAND
145 add-port BRIDGE INTERFACE CONTAINER [ADDRESS]
146 Adds INTERFACE inside CONTAINER and connects it as a port
147 in Open vSwitch BRIDGE. Optionally, sets ADDRESS on
148 INTERFACE. ADDRESS can include a '/' to represent network
150 ${UTIL} add-port br-int eth1 c474a0e2830e 192.168.1.2/24
151 del-port BRIDGE INTERFACE CONTAINER
152 Deletes INTERFACE inside CONTAINER and removes its
153 connection to Open vSwitch BRIDGE. e.g.:
154 ${UTIL} del-port br-int eth1 c474a0e2830e
155 del-ports BRIDGE CONTAINER
156 Removes all Open vSwitch interfaces from CONTAINER. e.g.:
157 ${UTIL} del-ports br-int c474a0e2830e
159 -h, --help display this help message.
164 check_command_avail ovs-vsctl docker uuidgen
166 if (ip netns) > /dev/null 2>&1; then :; else
167 echo >&2 "$UTIL: ip utility not found (or it does not support netns),"\
172 if [ $# -eq 0 ]; then
198 echo >&2 "$UTIL: unknown command \"$1\" (use --help for help)"