Investigate better ways to get a raw socket for chewie

faucetsdn / faucet

FAUCET is an OpenFlow controller for multi table OpenFlow 1.3 switches, that implements layer 2 switching, VLANs, ACLs, and layer 3 IPv4 and IPv6 routing.

http://faucet.nz

Apache License 2.0

555 stars 190 forks source link

Investigate better ways to get a raw socket for chewie #2854

Open gizmoguy opened 5 years ago

gizmoguy commented 5 years ago

Currently when 8021x is in use (via chewie helper) we need to run faucet as root to bind to a raw NFV socket.

Some potential fixes:

Investigate a framework for running separate NFV helper applications along side faucet
Use linux capabilities to grant chewie CAP_NET_RAW

gizmoguy commented 5 years ago

This also impacts the ability to run our faucet unit tests as a non-root user.

Looks like the chewie unit tests when run as standard user will emit errors that they couldn't get a raw socket.