vpp: T8080: Fix handling of configuration system lock after vpp commit failure

Author: natali-rs1985

src/conf_mode/vpp.py

@@ -39,6 +39,7 @@
 from vyos.utils.kernel import unload_kmod
 from vyos.utils.kernel import list_loaded_modules
 from vyos.utils.process import call
+from vyos.utils.process import is_systemd_service_active
 
 from vyos.vpp import VPPControl
 from vyos.vpp import control_host
@@ -771,10 +772,12 @@ def apply(config):
 
     if 'settings' in config and 'interface' in config.get('settings'):
         # connect to VPP
-        # must be performed multiple attempts because API is not available
-        # immediately after the service restart
         try:
-            vpp_control = VPPControl(attempts=20, interval=500)
+            # Bail out early if VPP service is not running
+            if not is_systemd_service_active(f'{service_name}.service'):
+                raise RuntimeError('VPP service is not running or failed to start')
+
+            vpp_control = VPPControl()
 
             # preconfigure LCP plugin
             if 'ignore_kernel_routes' in config.get('settings', {}).get('lcp', {}):
@@ -877,7 +880,7 @@ def apply(config):
                         bitmask |= 1 << wid
                 vpp_control.set_nat_workers(bitmask)
 
-        except (VPPIOError, VPPValueError) as e:
+        except (VPPIOError, VPPValueError, RuntimeError) as e:
             # if cannot connect to VPP or an error occurred then
             # we need to stop vpp service and initialize interfaces
             call(f'systemctl stop {service_name}.service')

src/helpers/reset_section.py

@@ -26,6 +26,7 @@
 from vyos.config import Config
 from vyos.configdiff import get_config_diff
 from vyos.xml_ref import is_leaf
+from vyos.utils.commit import wait_for_commit_lock
 
 
 CFG_GROUP = 'vyattacfg'
@@ -100,6 +101,8 @@ def type_str_to_list(value):
 os.setgid(cfg_group.gr_gid)
 os.umask(0o002)
 
+wait_for_commit_lock()
+
 shared = not bool(reload)
 
 session = ConfigSession(session_id, shared=shared)