Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#58737 - [openssh] tun/tap forwarding not working with 7.7p1-1

Attached to Project: Arch Linux
Opened by Cristian Bradiceanu (cbredi) - Saturday, 26 May 2018, 15:59 GMT
Last edited by Gaetan Bisson (vesath) - Monday, 18 June 2018, 21:01 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Gaetan Bisson (vesath)
Architecture x86_64
Severity Medium
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

After upgrading to openssh 7.7p1-1, tun/tap forwarding stopped working, in both client and server mode.

Additional info:
core/openssh 7.7p1-1

Steps to reproduce:

# ssh -V
OpenSSH_7.7p1, OpenSSL 1.1.0h 27 Mar 2018
# ssh -o "Tunnel ethernet" -w 3:4 remote_host (used to work with openssh < 7.7)
Tunnel device open failed.
Could not request tunnel forwarding.

log:
May 26 18:50:12 systemd-networkd[345]: tap3: Failed
May 26 18:50:12 systemd-networkd[345]: Could not add new link, ignoring: No such device
May 26 18:50:12 systemd-udevd[11685]: link_config: autonegotiation is unset or enabled, the speed and duplex are not writable.
May 26 18:50:12 systemd-udevd[11685]: link_config: could not get ethtool features for tap3
May 26 18:50:12 systemd-udevd[11685]: Could not set offload features of tap3: No such device

# ssh -o "Tunnel yes" -w 3:4 remote_host (used to work with openssh < 7.7)
Tunnel device open failed.
Could not request tunnel forwarding.

log:
May 26 18:51:41 systemd-networkd[345]: tun3: Failed
May 26 18:51:41 charon[613]: 11[KNL] interface tun3 deleted
May 26 18:51:41 systemd-networkd[345]: Could not add new link, ignoring: No such device
May 26 18:51:41 systemd-udevd[11704]: link_config: autonegotiation is unset or enabled, the speed and duplex are not writable.
May 26 18:51:41 systemd-udevd[11704]: link_config: could not get ethtool features for tun3
May 26 18:51:41 systemd-udevd[11704]: Could not set offload features of tun3: No such device

(connection from a remote system)
# ssh -V
OpenSSH_5.3p1, OpenSSL 1.0.1e-fips 11 Feb 2013
# ssh -o "Tunnel ethernet" -w 3:4 remote_host
channel 0: open failed: connect failed: open failed

log:
May 26 18:55:41 systemd-networkd[345]: tap4: Could not find udev device: No such device
May 26 18:55:41 systemd-networkd[345]: tap4: Failed
May 26 18:55:41 systemd-networkd[345]: Could not add new link, ignoring: No such device
May 26 18:55:41 systemd-udevd[11785]: link_config: autonegotiation is unset or enabled, the speed and duplex are not writable.
May 26 18:55:41 systemd-udevd[11785]: link_config: could not get ethtool features for tap4
May 26 18:55:41 systemd-udevd[11785]: Could not set offload features of tap4: No such device

Downgrading to openssh 7.6p1-2 fixes this issue.

openssh 7.7 changelog (https://www.openssh.com/txt/release-7.7) related to tun/tap forwarding:
* ssh(1): Expose device allocated for tun/tap forwarding via a new
%T expansion for LocalCommand. This allows LocalCommand to be used
to prepare the interface.

* sshd(8): Expose the device allocated for tun/tap forwarding via a
new SSH_TUNNEL environment variable. This allows automatic setup of
the interface and surrounding network configuration automatically on
the server.
This task depends upon

Closed by  Gaetan Bisson (vesath)
Monday, 18 June 2018, 21:01 GMT
Reason for closing:  Fixed
Additional comments about closing:  openssh-7.7p1-2 in [testing]
Comment by Gaetan Bisson (vesath) - Monday, 28 May 2018, 22:58 GMT
There has been no packaging change as we updated to version 7.7p1. Could you try to bisect the fauly upstream commit? The git repo is located at:

https://anongit.mindrot.org/openssh.git/

Cheers.
Comment by hamelg (hamelg) - Friday, 15 June 2018, 21:06 GMT Comment by Gaetan Bisson (vesath) - Saturday, 16 June 2018, 01:42 GMT
Cristian, can you backport this commit and confirms it fixes your issue?
Comment by Cristian Bradiceanu (cbredi) - Sunday, 17 June 2018, 20:55 GMT
cfb1d9bc76734681e3dea532a1504fcd466fbe91 fixes the tun/tap forwarding issues, thank you

Loading...