From 7e7536f986a0d8eb0a8909c81dc92f9a0498d403 Mon Sep 17 00:00:00 2001
From: Mark Goddard <mark@stackhpc.com>
Date: Thu, 18 Jun 2020 14:03:53 +0100
Subject: [PATCH] Trust receive filters of baremetal nodes

By default libvirt does not allow traffic destined for other MAC
addresses to reach VMs when using a macvtap interface. This prevents
multicast from working.

This change fixes the issue by setting libvirt_vm_trust_guest_rx_filters
to true.

Depends-On: https://review.opendev.org/736249

Change-Id: I71a2051d8acd63379bd70bc1287a059d4a7f6387
(cherry picked from commit a3518d980a30edbdb8a4eee5da35baeaed102876)
---
 ansible/group_vars/libvirt | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/ansible/group_vars/libvirt b/ansible/group_vars/libvirt
index 1002a1a..304863c 100644
--- a/ansible/group_vars/libvirt
+++ b/ansible/group_vars/libvirt
@@ -30,3 +30,7 @@ libvirt_local_uri: >-
   {%- if libvirt_custom_socket_path -%}
   qemu+unix:///system?socket={{ libvirt_custom_socket_path }}/libvirt-sock
   {%- endif %}
+
+# Whether to trust the receive filters of Tenks VMs. This gets mapped to the
+# trustGuestRxFilters' attribute of VM interfaces.
+libvirt_vm_trust_guest_rx_filters: true