- Announce - libvirt List Archives

[Libvirt-announce] Entering freeze for libvirt-1.2.5
by Daniel Veillard 30 May '14

30 May '14

As planned I just tagged candidate release 1 in git and pushed the tarball, and signed rpms to the usual place: ftp://libvirt.org/libvirt/ I gave it a bit of testing, seems to work fine for me, I will probably provide an rc2 on Wed and aim for a release next week-end. In the meantime, please give it a try and report issues you may find ! thanks, Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 1

[Libvirt-announce] LSN-2014-0003: Unsafe parsing of XML documents allows arbitrary file read
by Daniel P. Berrange 06 May '14

06 May '14

Libvirt Security Notice: LSN-2014-0003 ====================================== Summary: Unsafe parsing of XML documents allows arbitrary file read Reported on: 20140411 Published on: 20140506 Fixed on: 20140506 Reported by: Daniel P. Berrange <berrange(a)redhat.com> Richard Jones <rjones(a)redhat.com> Patched by: Daniel P. Berrange <berrange(a)redhat.com> See also: CVE-2014-0179 Description ----------- When parsing XML documents, libvirt passes the XML_PARSE_NOENT flag to libxml2 which instructs it to expand all entities in the XML document during parsing. This can be used to insert the contents of host OS files in the resulting parsed content. Although the flaw was introduced in 0.0.5, it was dormant having no ill effects, since the APIs involved all required the user to authenticate with privileges equivalent to root. In version 0.7.5 or later the virConnectCompareCPU / virConnectBaselineCPU methods activate the dormant bug, allowing for denial of service. In version 1.0.0 or later, if the admin opts in to using the new fine grained access control feature, there is potential for unprivileged information disclosure. Impact ------ A malicious user can pass libvirt an XML document which contains an entity that points to an arbitrary file on the host. When libvirt parses this document, it will insert the contents of that host file, which could allow the user to read the contents of files that they otherwise do not have permission to view. It also has the potential to cause a denial of service / indefinite hang of libvirt, if the entity points to a named pipe with no writer connected or certain proc files. If the libvirt installation is not using fine grained access control then virConnectCompareCPU and virConnectBaselineCPU APIs can be used by a read-only user to inflict a denial of service attack. If the libvirt installation is using fine grained access control, then as well as the denial of service attack, one or more of the following APIs can be used for information disclosure of files: virDomainDefineXML, virNetworkCreateXML, virNetworkDefineXML, virStoragePoolCreateXML, virStoragePoolDefineXML, virStorageVolCreateXML, virDomainCreateXML, virNodeDeviceCreateXML, virInterfaceDefineXML, virStorageVolCreateXMLFrom, virConnectDomainXMLFromNative, virConnectDomainXMLToNative, virSecretDefineXML, virNWFilterDefineXML, virDomainSnapshotCreateXML, virDomainSaveImageDefineXML, virDomainCreateXMLWithFiles, virConnectCompareCPU, virConnectBaselineCPU. Workaround ---------- Stop use of the fine grained access control mechanism, and restrict access to all the libvirt TCP/UNIX sockets to only trusted authenticated users. Simply denying access to the affected APIs in the access control policy is insufficient to mitigate the bug, since the XML document typically needs to be parsed before the access control check is applied in order to extra the UUID/name of the object to check. Access to the readonly libvirt socket must also be revoked Affected product ---------------- Name: libvirt Repository: git://libvirt.org/git/libvirt.git http://libvirt.org/git/?p=libvirt.git Branch: master Broken in: v0.7.5 Broken in: v0.7.6 Broken in: v0.7.7 Broken in: v0.8.0 Broken in: v0.8.1 Broken in: v0.8.2 Broken in: v0.8.3 Broken in: v0.8.4 Broken in: v0.8.5 Broken in: v0.8.6 Broken in: v0.8.7 Broken in: v0.8.8 Broken in: v0.9.0 Broken in: v0.9.1 Broken in: v0.9.2 Broken in: v0.9.3 Broken in: v0.9.4 Broken in: v0.9.5 Broken in: v0.9.6 Broken in: v0.9.7 Broken in: v0.9.8 Broken in: v0.9.9 Broken in: v0.9.10 Broken in: v0.9.11 Broken in: v0.9.12 Broken in: v0.9.13 Broken in: v1.0.0 Broken in: v1.0.1 Broken in: v1.0.2 Broken in: v1.0.3 Broken in: v1.0.4 Broken in: v1.0.5 Broken in: v1.0.6 Broken in: v1.1.0 Broken in: v1.1.1 Broken in: v1.1.2 Broken in: v1.1.3 Broken in: v1.1.4 Broken in: v1.2.0 Broken in: v1.2.1 Broken in: v1.2.2 Broken in: v1.2.3 Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: d6b27d3e4c40946efa79e91d134616b41b1666c4 Branch: v0.9.6-maint Broken in: v0.9.6.1 Broken in: v0.9.6.2 Broken in: v0.9.6.3 Broken in: v0.9.6.4 Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Fixed by: be7a5de9d0c406f36efae3230e1743c613ad6945 Branch: v0.9.11-maint Broken in: v0.9.11.1 Broken in: v0.9.11.2 Broken in: v0.9.11.3 Broken in: v0.9.11.4 Broken in: v0.9.11.5 Broken in: v0.9.11.6 Broken in: v0.9.11.7 Broken in: v0.9.11.8 Broken in: v0.9.11.9 Broken in: v0.9.11.10 Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Branch: v0.9.12-maint Broken in: v0.9.12.1 Broken in: v0.9.12.2 Broken in: v0.9.12.3 Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Fixed by: 022b34cee73f86b01724b5279cf626df9cca245f Branch: v1.0.5-maint Broken in: v1.0.5.1 Broken in: v1.0.5.2 Broken in: v1.0.5.3 Broken in: v1.0.5.4 Broken in: v1.0.5.5 Broken in: v1.0.5.6 Broken in: v1.0.5.7 Broken in: v1.0.5.8 Broken in: v1.0.5.9 Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Fixed by: 4410a83e18c1b41f1f5d3f10a0b648fc9304bc35 Branch: v1.1.0-maint Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: 6f4eae73a0bf3e1c5e9597e4f9a8078cad69b1e3 Branch: v1.1.1-maint Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: cfc94140e5989c9f3cce0fdbb758730818cb2572 Branch: v1.1.2-maint Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: 8fd2005cc0594742dc6cfab07a62f9774798a56d Branch: v1.1.3-maint Broken in: v1.1.3.1 Broken in: v1.1.3.2 Broken in: v1.1.3.3 Broken in: v1.1.3.4 Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: 46de45d079ae2622660fe147cf237ee617cc461c Branch: v1.1.4-maint Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: e2b96d539f8a06e08cdf001627efe3f399db9c07 Branch: v1.2.0-maint Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: 9b1d09377492a4ce92498abb7cf830d693bc661c Branch: v1.2.1-maint Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: 877388678a77bacf802f97de429b2b350b02eb41 Branch: v1.2.2-maint Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: ab07ebeb22b1d724999dc6eabc33cd6266de496f Branch: v1.2.3-maint Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: a45368839fb898feb6b634df2bf337697155ea74 Branch: v1.2.4-maint Broken by: 77e8b6c62c48b6346bbdb2df3e0d925852c6bf3e Broken by: 387941fb626d9362835aa216b4a871e18268f649 Broken by: 0b7d2ae653f583825f6d83bfb0744673648a9833 Broken by: ed3bac713c3cfc055ef551cbfe92a061084382c3 Fixed by: a8480e2bc0d0b1c5cd98ff7424cace3e82db5ace Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|

1 0

[Libvirt-announce] Release of libvirt-1.2.4
by Daniel Veillard 04 May '14

04 May '14

As planned I tagged the release in git and pushed the tarball and signed rpms to the usual place: ftp://libvirt.org/libvirt/ I also generated those for python too even if the only change is a spec file update, they are in the python subdir. This is a smaller than average release, with most of the changes on code refactoring, portability and bug fixes, so no big features here but general improvements: Documentation: - Device{Attach,Detach}: Document S4 limitations (Michal Privoznik) - Add a new example to illustrate domain migration (Sahid Orentino Ferdjaoui) - update docs for setting the QEMU BIOS path (Chen Hanxiao) - document nmdm type console (Roman Bogorodskiy) - Fix typos in src/* (Nehal J Wani) - document that vfio is default for hostdev networks too (Laine Stump) - cpu: Add documentation for CPU driver APIs (Jiri Denemark) - virsh: Fix comment of vshCmdInfo (Li Yang) Portability: - Explicitly link virfirewalltest and virsystemdtest against dbus (Guido Günther) - qemuxml2argvtest: Don't use privileged mode upfront (Guido Günther) - tests: skip virfirewalltest on non-Linux systems (Roman Bogorodskiy) - tests: don't fail with newer gnutls (Martin Kletzander) - fix build with older gcc (Ján Tomko) - storage: reject negative indices (Eric Blake) - networkxml2firewalltest: fix build failure on freebsd (Pavel Hrdina) - virfirewall: fix build on freebsd (Pavel Hrdina) - Disable libvirtd by default when building on Win32 (Daniel P. Berrange) - Don't use SO_REUSEADDR on Win32 platforms (Daniel P. Berrange) - Conditionalize include of dlfcn.h in virmock.h (Daniel P. Berrange) - build: avoid 'index' as variable name (Eric Blake) - build: Don't use code with dbus_message_unref when built without dbus (Martin Kletzander) - tests: Fix systemd test with --without-driver-modules (Jiri Denemark) - Fix build on mingw32 (Ján Tomko) - build: avoid compiler warning on shadowed name (Jean-Baptiste Rouault) - tests: link against libxml2 (Guido Günther) - tests: build viridentitytest only WITH_ATTR. (Jincheng Miao) - maint: Correctly detect wether "gluster" cli tool is accessible (Peter Krempa) - libvirt-guests: avoid bashism (Guido Günther) - Use the force flag for mkfs -t xfs (Ján Tomko) Bug Fixes: - Restore skipping of setting capacity (John Ferlan) - qemu: fix crash when removing <filterref> from interface with update-device (Laine Stump) - storage: Clear all data allocated about backing store before reparsing (Peter Krempa) - nwfilter: Tear down temp. filters when tearing all filters (Stefan Berger) - Set mknod permission in device ACL for LXC USB devices (Daniel P. Berrange) - conf: avoid null deref during storage probe (Eric Blake) - qemu: properly quit migration with abort_on_error (Martin Kletzander) - qemu: don't call virFileExists() for network type disks (Martin Kletzander) - storage_backend_rbd: Correct argument order to rbd_create3 (Steven McDonald) - xen: ensure /usr/sbin/xend exists before checking status (Jim Fehlig) - Remove bogus ATTRIBUTE_NONNULL from virFirewallAddRuleFull (Daniel P. Berrange) - Make autostart of virtlockd actually work (Daniel P. Berrange) - Fix leak on OOM in virNWFilterVarValueCreateSimpleCopyValue (Daniel P. Berrange) - qemu: Avoid overflow when setting migration speed on inactive domains (Jiri Denemark) - qemu: don't check for backing chains for formats w/o snapshot support (Martin Kletzander) - Fix pci bus naming for PPC (Daniel P. Berrange) - Document behavior of setvcpus during guest boot (Ján Tomko) - Save domain status after cpu hotplug (Ján Tomko) - Fix error for out of range vcpu in qemuDomainPinVcpuFlags (Ján Tomko) - Properly free vcpupin info for unplugged CPUs (Ján Tomko) - Only set QEMU_CAPS_NO_HPET on x86 (Ján Tomko) - Fix Memory Leak in virStorageFileGetMetadataRecurse() (Nehal J Wani) - qemu: Unlock the NWFilter update lock by leaving via the cleanup label (Stefan Berger) - storage: netfs: Handle backend errors (John Ferlan) - conf: fix omission of <driver> in domain dumpxml (Eric Blake) - Fix virsystemdtest without SYSTEMD_DAEMON (Ján Tomko) - qemu: Avoid overflow when setting migration speed (Jiri Denemark) - bhyve: fix domain management (Wojciech Macek) - Check maximum startcpu value correctly (Ján Tomko) - storage: Don't update pool available/allocation if buildVol fails (John Ferlan) - LXC: Fix return code evaulation in lxcCheckNetNsSupport() (Richard Weinberger) - Fix incorrect values in redirdev ABI check error (Ján Tomko) - virNetDev{Replace,Restore}MacAddress: Fix memory leak (Wangrui K) - bhyveConnectGetCapabilities: Fix double caps unref (Michal Privoznik) - Simplify bhyveDriverGetCapabilities() (Michal Privoznik) - bhyve_capabilities: Add Semihalf to Copyright (Michal Privoznik) - tests: Don't crash when creating the config object fails (Guido Günther) - conf: avoid memleak on NULL path (Eric Blake) - lxc conf2xml: don't let current vcpus at 0: define won't like it (Cédric Bosdonnat) - QoS: make tc filters match all traffic (Antoni S. Puimedon) - NFS storage pool: Fix libvirtd crash due to refactor edit (John Ferlan) - Define CPUINFO_FILE_LEN and fix maxlen of cpuinfo file for all uses (Olivia Yin) - Fix Memory Leak in daemon/libvirtd.c (Nehal J Wani) - qemu: make sure agent returns error when required data are missing (Martin Kletzander) - Fix coverity-reported leak in virSecurityManagerGenLabel (Ján Tomko) - phyp: fix logic error on volume creation (Eric Blake) - qemu: cleanup error checking on agent replies (Martin Kletzander) Improvements - util: new stricter unsigned int parsing (Eric Blake) - util: fix uint parsing on 64-bit platforms (Eric Blake) - Misc error reporting bugs in QEMU cli builder (Daniel P. Berrange) - nwfilter: Validate rule after parsing (Stefan Berger) - Add support for QEMU migration to use SASL authentication (Sahid Orentino Ferdjaoui) - enforce sane readdir usage (Eric Blake) - network: use virDirRead in networkMigrateStateFiles (Laine Stump) - storage: use virDirRead API (Eric Blake) - drivers: use virDirRead API (Eric Blake) - util: use virDirRead API (Eric Blake) - conf: use virDirRead API (Eric Blake) - nodeinfo: use virDirRead API (Natanael Copa) - util: introduce virDirRead wrapper for readdir (Natanael Copa) - tests: remove hostdevmgr directory on cleanup (Martin Kletzander) - Use virFileFindResource to locate virtlockd daemon (Daniel P. Berrange) - Use virFileFindResource to locate libvirtd daemon (Daniel P. Berrange) - Recheck disk backing chains after snapshot (Jiri Denemark) - network: centralize check for active network during interface attach (Laine Stump) - network: set macvtap/hostdev networks active if their state file exists (Laine Stump) - network: change location of network state xml files (Laine Stump) - network: create statedir during driver initialization (Laine Stump) - network: fix virNetworkObjAssignDef and persistence (Laine Stump) - build: -avoid-version on libvirt_driver_nwfilter (Dwight Engen) - libxl: Support PV consoles (Ian Campbell) - build: add nwfilterxml2firewalldata to dist (Dwight Engen) - Add a test suite for nwfilter ebiptables tech driver (Daniel P. Berrange) - Remove last trace of direct firewall command exection (Daniel P. Berrange) - Convert ebiptablesDriverProbeStateMatch to virFirewall (Daniel P. Berrange) - Convert nwfilter ebiptablesApplyNewRules to virFirewall (Daniel P. Berrange) - Convert nwfilter ebtablesApplyDropAllRules to virFirewall (Daniel P. Berrange) - Convert nwfilter ebtablesApplyDHCPOnlyRules to virFirewall (Daniel P. Berrange) - Convert nwfilter ebtablesApplyBasicRules to virFirewall (Daniel P. Berrange) - Convert nwfilter ebiptablesTearNewRules to virFirewall (Daniel P. Berrange) - Convert nwfilter ebtablesRemoveBasicRules to virFirewall (Daniel P. Berrange) - Convert nwfilter ebiptablesTearOldRules to virFirewall (Daniel P. Berrange) - Convert nwfilter ebiptablesAllTeardown to virFirewall (Daniel P. Berrange) - Convert ebtables code over to use firewall APIs (Daniel P. Berrange) - Add test for converting network XML to iptables rules (Daniel P. Berrange) - Replace virNetworkObjPtr with virNetworkDefPtr in network platform APIs (Daniel P. Berrange) - Convert bridge driver over to use new firewall APIs (Daniel P. Berrange) - Introduce an object for managing firewall rulesets (Daniel P. Berrange) - Preserve error when tearing down nwfilter rules (Daniel P. Berrange) - Remove two-stage construction of commands in nwfilter (Daniel P. Berrange) - Merge nwfilter createRuleInstance driver into applyNewRules (Daniel P. Berrange) - Push virNWFilterRuleInstPtr out of (eb|ip)tablesCreateRuleInstance (Daniel P. Berrange) - Add helper methods for determining what protocol layer is used (Daniel P. Berrange) - Remove nwfilter tech driver 'displayRuleInstance' callback (Daniel P. Berrange) - Remove nwfilter tech driver 'removeRules' callback (Daniel P. Berrange) - Remove pointless storage of var names in virNWFilterHashTable (Daniel P. Berrange) - Remove virDomainNetType parameter from nwfilter drivers (Daniel P. Berrange) - Move virNWFilterTechDriver struct out of nwfilter_conf.h (Daniel P. Berrange) - Use virFileFindResource to locate CPU map XML (Daniel P. Berrange) - Use virFileFindResource to locate driver plugins (Daniel P. Berrange) - Use virFileFindResource to locate lock manager plugins (Daniel P. Berrange) - Use virFileFindResource to locate iohelper for fdstream (Nehal J Wani) - Use virFileFindResource to locate parthelper for storage backend (Nehal J Wani) - Use virFileFindResource to locate libvirt_lxc for capabilities (Nehal J Wani) - Use virFileFindResource to locate iohelper for virFileWrapperFdNew (Nehal J Wani) - Activate build dir overrides in libvirtd, virtlockd, virsh & tests (Daniel P. Berrange) - Add helpers for resolving path to resources in build tree (Daniel P. Berrange) - Add test suite for viralloc APIs (Daniel P. Berrange) - Add support for addressing backing stores by index (Jiri Denemark) - virStorageFileChainLookup: Return virStorageSourcePtr (Jiri Denemark) - qemuDomainBlockCommit: Track virStorageSourcePtr for base (Jiri Denemark) - qemuDomainBlockCommit: Don't track top_canon path separately (Jiri Denemark) - tests: Test backing store XML formatting and parsing (Jiri Denemark) - tests: More output options for xml2xml tests (Jiri Denemark) - conf: Format and parse backing chains in domain XML (Jiri Denemark) - conf: Output disk backing store details in domain XML (Jiri Denemark) - util: storage: Invert the way recursive metadata retrieval works (Peter Krempa) - util: virstoragefile: Don't mangle data stored about directories (Peter Krempa) - storage: Move disk->backingChain to the recursive disk->src.backingStore (Peter Krempa) - util: virstoragefile: Rename backingMeta to backingStore (Peter Krempa) - util: virstorage: Kill struct virStorageFileMetadata (Peter Krempa) - maint: Switch over from struct virStorageFileMetadata to virStorageSource (Peter Krempa) - util: storagefile: Add fields from virStorageMetadata to virStorageSource (Peter Krempa) - util: storagefile: Add function to free a virStorageSourcePtr (Peter Krempa) - virstoragefile: Kill "backingStore" field from virStorageFileMetadata (Peter Krempa) - util: virstoragefile: Don't use "backingStore" directly (Peter Krempa) - util: storagefile: Rename "canonPath" to "path" in virStorageFileMetadata (Peter Krempa) - util: storage: Rename "path" to "relPath" in virStorageFileMetadata (Peter Krempa) - storage: util: Clean up arguments of virStorageFileGetMetadataInternal (Peter Krempa) - util: storage: Move checking of the actual backing image to the worker (Peter Krempa) - util: storage: Remove obsolete argument virStorageFileGetMetadataInternal (Peter Krempa) - util: storagefile: Always store raw backing name in the metadata (Peter Krempa) - qemu: unexport qemuDiskChainCheckBroken (Peter Krempa) - bhyve: bhyveDomainDefineXML fixes (Roman Bogorodskiy) - PPC64 prefers to set pci-ohci controller as default USB controller (Li Zhang) - Make virDomainVcpuPinDel return void (Ján Tomko) - maint: update to latest gnulib (Eric Blake) - bhyve: domainCreateXML (Wojciech Macek) - Remove QEMU_CAPS_MACHINE_USB_OPT from ComputeCmdFlags (Ján Tomko) - conf: split <disk> schema into more pieces (Eric Blake) - conf: set up for per-grammar overrides in schemas (Eric Blake) - conf: restrict external snapshots to backing store formats (Eric Blake) - conf: move storage formats to common RNG file (Eric Blake) - conf: better <disk> interleaving in schema (Eric Blake) - conf: create common storage RNG grammar file (Eric Blake) - conf: delete internal directory field (Eric Blake) - conf: tweak chain lookup internals (Eric Blake) - conf: drop redundant parameter to chain lookup (Eric Blake) - conf: report error on chain lookup failure (Eric Blake) - util: new virFileRelLinkPointsTo function (Eric Blake) - conf: test backing chain lookup (Eric Blake) - Introduce --without-pm-utils to get rid of pm-is-supported dependency (Cédric Bosdonnat) - conf: delete useless backingStoreFormat field (Eric Blake) - conf: return backing information separately from metadata (Eric Blake) - conf: delete useless backingStoreIsFile field (Eric Blake) - conf: expose probe for non-local storage (Eric Blake) - conf: provide details on network backing store (Eric Blake) - conf: make virstoragetest debug easier (Eric Blake) - cpu: Properly check input parameters (Jiri Denemark) - Clean up virCgroupGetPercpuStats (Ján Tomko) - Rename id, max_id to need_cpus, total_cpus (Ján Tomko) - Extend virCgroupGetPercpuStats to fill in vcputime too (Ján Tomko) - Fix return value of virCgroupGetPercpuStats (Ján Tomko) - Don't require domain obj in qemuDomainGetPercpuStats (Ján Tomko) - conf: test for more fields (Eric Blake) - conf: start testing contents of the new backing chain fields (Eric Blake) - conf: track more fields in backing chain metadata (Eric Blake) - conf: rename some test fields (Eric Blake) - conf: earlier allocation during backing chain crawl (Eric Blake) - conf: track user vs. canonical name through full chain lookup (Eric Blake) - qemu: Unexport qemuBuildNetworkDriveURI() (Peter Krempa) - qemu: Refactor qemuGetDriveSourceString to take virStorageSourcePtr (Peter Krempa) - storage: Refactor location of metadata for storage drive access to files (Peter Krempa) - storage: Refactor storage file initialization to use virStorageSourcePtr (Peter Krempa) - conf: Refactor helpers to retrieve actual storage type (Peter Krempa) - tests: use virBhyveCapsBuild in bhyvexml2argv test (Roman Bogorodskiy) - conf: another refactor of virstoragetest (Eric Blake) - conf: interleave virstoragetest structs (Eric Blake) - conf: test for more scenarios (Eric Blake) - conf: fix detection of infinite backing loop (Eric Blake) - vmware: set the driver version (Jean-Baptiste Rouault) - tests: add bhyve xml2xml test (Roman Bogorodskiy) - bhyve: add domain metadata support (Roman Bogorodskiy) - bhyve: fix ATTRIBUTE_NONNULL usage (Roman Bogorodskiy) - Use a static initializer for static mutexes (Daniel P. Berrange) - Add syntax check to validate capitalization of abbreviations (Daniel P. Berrange) - Replace Pci with PCI throughout (Daniel P. Berrange) - Replace Usb with USB throughout (Daniel P. Berrange) - Replace Scsi with SCSI throughout (Daniel P. Berrange) - Switch systemd test to use generic dbus mock (Daniel P. Berrange) - Create a re-usable DBus LD_PRELOAD mock library (Daniel P. Berrange) - Introduce a new set of helper macros for mocking symbols (Daniel P. Berrange) - bhyve: connectCompareCPU support (Wojciech Macek) - bhyve: create capabilities submodule (Wojciech Macek) - bhyve: support for connectBaselineCPU (Wojciech Macek) - interface: dump inactive xml when interface isn't active (Laine Stump) - hash: add common utility functions (Eric Blake) - bhyve: add xml2argv tests for console (Roman Bogorodskiy) - bhyve: add console support through nmdm device (Roman Bogorodskiy) - bhyve: domain autostart support (David Shane Holden) - conf: track when storage type is still undetermined (Eric Blake) - tests: refactor virstoragetest for less stack space (Eric Blake) - tests: use C99 initialization for storage test (Eric Blake) - libxl: Set disk format for empty cdrom device (Stefan Bader) - libxl: Use id from virDomainObj inside the driver (Stefan Bader) - Add redirdevs to ABI stability check (Ján Tomko) - virsh: Make 'exit' action same as 'quit' (Li Yang) - Include PCI address in the error in virDomainNetFindIdx (Ján Tomko) - Move error reporting into virDomainNetFindIdx (Ján Tomko) - tests: simplify storage test cleanup (Eric Blake) - storage: Report error from VolOpen by default (Cole Robinson) - conf: modify tracking of encrypted images (Eric Blake) - conf: drop redundant parameters during probe (Eric Blake) - conf: track sizes directly in source struct (Eric Blake) - conf: use common struct in storage volumes (Eric Blake) - conf: move volume structs to util/ (Eric Blake) - conf: tweak volume target struct details (Eric Blake) - conf: manage disk source by struct instead of pieces (Eric Blake) - virsh: man: delete the unexpected character in snapshot-list (Shanzhi Yu) - maint: fix spelling errors in disk pools (Eric Blake) - conf: let snapshots share disk source struct (Eric Blake) - conf: move common disk source functions (Eric Blake) - util: don't support loopback and nbd when setuid (Eric Blake) - util: move detection of shared filesystems (Eric Blake) - conf: move storage source type to util/ (Eric Blake) - conf: move storage secret type to util/ (Eric Blake) - conf: move source pool type to util/ (Eric Blake) - conf: move storage encryption type to util/ (Eric Blake) - conf: move network disk protocol type to util/ (Eric Blake) - conf: move host disk type to util/ (Eric Blake) - conf: split network host structs to util/ (Eric Blake) - conf: split security label structs to util/ (Eric Blake) - maint: ensure src/ directory includes are clean (Eric Blake) - storage: gluster: Implement storage pool lookup (Peter Krempa) - storage: netfs: Support lookup of glusterfs pool sources (Peter Krempa) - storage: netfs: Split up and tidy up NFS storage pool source function (Peter Krempa) Cleanups: - tests: drop dead code from argv2xml and xml2xml (Eric Blake) - qemu: remove unneeded forward declaration (Martin Kletzander) Thanks everybody for your contributions to this release be it with ideas, report, patches, documentation or localizations ! Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 0

[Libvirt-announce] ANNOUNCE: libvirt 1.1.3.5 maintenance release
by Cole Robinson 03 May '14

03 May '14

libvirt 1.1.3.5 maintenance release is now available. This is libvirt 1.1.3 with additional bugfixes that have accumulated upstream since the initial release. This release can be downloaded at: http://libvirt.org/sources/stable_updates/libvirt-1.1.3.5.tar.gz Changes in this version: * qemu: Introduce qemuDomainDefCheckABIStability * interface: dump inactive xml when interface isn't active * interface: Introduce netcfInterfaceObjIsActive * Ignore additional fields in iscsiadm output * qemu: fix crash when removing <filterref> from interface with update- device * Only set QEMU_CAPS_NO_HPET on x86 * Fix journald PRIORITY values * qemu: make sure agent returns error when required data are missing * qemu: remove unneeded forward declaration * qemu: cleanup error checking on agent replies * Ignore char devices in storage pools by default * Ignore missing files on pool refresh * storage: reduce number of stat calls * Fix explicit usage of default video PCI slots * virNetClientSetTLSSession: Restore original signal mask * storage: use valid XML for awkward volume names * maint: fix comma style issues: conf * virNetServerRun: Notify systemd that we're accepting clients * libvirt-guests: Wait for libvirtd to initialize * virSystemdCreateMachine: Set dependencies for slices * Add Documentation fields to systemd service files * Add a mutex to serialize updates to firewall * virt-login-shell: also build virAtomic.h * Fix conflicting types of virInitctlSetRunLevel For info about past maintenance releases, see: http://wiki.libvirt.org/page/Maintenance_Releases Thanks, Cole

1 0

[Libvirt-announce] Entering freeze for libvirt-1.2.4
by Daniel Veillard 30 Apr '14

30 Apr '14

As planned on Friday, I tagged the tree earlier today for Release Candidate 1, the tarball and rpms are available from the usual place: ftp://libvirt.org/libvirt/ Seems to work fine in my limited testing, but distcheck failed with xsltproc being unable to access ../../ . I don't think anything changed there on my side so it smells like a new problem. Otherwise looks good to me so far, with a bit of luck we can push 1.2.4 end of Friday or sometime next week-end, Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 1

[Libvirt-announce] ANNOUNCE: Perl binding Sys-Virt release 1.2.3
by Daniel P. Berrange 07 Apr '14

07 Apr '14

I am pleased to announce that release 1.2.3 of Sys-Virt, the libvirt Perl API binding, is now available for download: http://search.cpan.org/CPAN/authors/id/D/DA/DANBERR/Sys-Virt-1.2.3.tar.gz Changed in the 1.2.3 release: - Add VIR_FROM_CRYPTO error constant - Add VIR_MIGRATE_AUTO_CONVERGE migration constant - Add virDomainCoreDumpWithFormat and its constants Further information, including online API documentation & previous release archives, is available from the CPAN home page http://search.cpan.org/dist/Sys-Virt/ Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|

1 0

[Libvirt-announce] Release of python bindings for libvirt 1.2.3
by Daniel Veillard 03 Apr '14

03 Apr '14

With a bit of delay due to a dependancy needing fixing, the python bindings update for 1.2.3 are available, tagged in the libvirt-python git module and for download at the usual place: ftp://libvirt.org/libvirt/python/ It carries a mix of improvements, bugs and portability fixes: Portability: - Fix nosetests usage with python3 (Daniel P. Berrange) - setup.py: Allow running --help or clean without pkg-config (Cole Robinson) Bug Fixes: - Fix potential crash when setting partial cpu/memory/numa/interface limits on domains (Brian Rak) - event: fix domain reference bugs (Eric Blake) - override: Return NULL on python failure in getCPUModelNames (Cole Robinson) - override: GetCPUModelNames should return None on failure (Cole Robinson) - setPyVirTypedParameter: free whole return variable on error (Michal Privoznik) Improvements: - setup.py: Make have_libvirt_lxc a function (Cole Robinson) - setup.py: Move module list building to its own function (Cole Robinson) - setup.py: Remove unused import (Cole Robinson) - qemu: support arbitrary monitor events (Eric Blake) - generator: Add virConnectDomainQemuMonitorEventCallback to skipped_types (Martin Kletzander) - maint: balance {} usage (Eric Blake) - maint: Add ctags configuration file and ignore the output (Peter Krempa) - maint: set up preferred emacs settings (Eric Blake) - maint: ignore .pyc files (Eric Blake) - Add test for setting scheduler parameters (Daniel P. Berrange) - Add support for running unit tests with nose (Daniel P. Berrange) - setPyVirTypedParameter: Copy full field name (Michal Privoznik) Thaks everybody for your contributions to this release ! Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 0

[Libvirt-announce] Release of libvirt-1.2.3
by Daniel Veillard 01 Apr '14

01 Apr '14

So as scheduled, libvirt-1.2.3 release is ready, it is tagged in git and the tarball and rpms are available at the usual place: ftp://libvirt.org/libvirt/ This release is rather large in the number of commits (more than 400) but includes a lot of changes made to clean up the code base. there is still a fair amount of improvements and a few notable features, and as usual a number of bug fixes :) . To be noted the large improvements on the Xen driver and the bhyve driver for BSD ! Features: - add new virDomainCoreDumpWithFormat API (Qiao Nuohan) - conf: Introduce virDomainDeviceGetInfo API (Jiri Denemark) - more features and fixes on bhyve driver (Roman Bogorodskiy) - lot of cleanups and improvement on the Xen driver (Chunyan Liu, Jim Fehlig) Documentation: - virsh: man: Fix spelling of parameters for --memspec in snapshot-create-as (Shanzhi Yu) - util: fix a typo in virprocess.c and d (Hongwei Bi) - cgroups: fix typo about LXC cgroups (Jean-Baptiste Rouault) - daemon: Enhance documentation for changing NOFILE limit (Jiri Denemark) - domiftune: Reword bandwidth clearing paragraph (Michal Privoznik) - conf: consistent comments about disk enum usage (Eric Blake) - qemu.conf: Mention virtlockd in @lock_manager description (Michal Privoznik) - add VMmanager to web apps (Martin Kletzander) - storage: Explicitly state that it's possible to have non-unique key (Peter Krempa) - typo fix (Roman Bogorodskiy) Portability: - Prohibit Windows special chars in filenames (Matthias Bolte) - tests: Fix SCSI test data filenames for Windows (Matthias Bolte) - apparmor: Fix build after split of disk source metadata (Peter Krempa) - Fix build on mingw32 (Ján Tomko) - build: Fix build with old automake (Jiri Denemark) - Fix build with qemu driver disabled (Roman Bogorodskiy) - Fix type mismatch of virNetDev*NetConfig on non-Linux (Ján Tomko) - virIdentityGetSystem: don't fail if SELinux is disabled (Michael Chapman) Bug Fixes: - build: fix syntax-check for storage_backend (Martin Kletzander) - gluster: Fix "key" attribute for gluster volumes (Peter Krempa) - Fix Memory Leak in testMessageArrayRef() (Nehal J Wani) - virsh: fix 'help event' (Eric Blake) - bhyve: don't leak tap devices on failures (Roman Bogorodskiy) - storage: gluster: Fix crash when initialization of storage backend fails (Peter Krempa) - Fix virNodeDeviceListCaps always returns empty (Jincheng Miao) - Create hostdevmgr in UserRuntimeDirectory for session libvirt (Ján Tomko) - Remove double free in virHostdevManagerDispose (Ján Tomko) - Fix apparmor profile to make vfio pci passthrough work (Cédric Bosdonnat) - Fixed regression in apparmor profiles for qemu brought by 43c030f (Cédric Bosdonnat) - Fix Memory Leak in virQEMUCapsInitGuestFromBinary() (Nehal J Wani) - Fix memory leak in testGetCaps() (Nehal J Wani) - network: fix problems with SRV records (Laine Stump) - Free groups in case of a partial match (Ján Tomko) - qemuDomainAttachDeviceFlags: Parse device xml as inactive (Michal Privoznik) - Coverity: Resolve a RESOURCE_LEAK (John Ferlan) - Coverity: Resolve a FORWARD_NULL (John Ferlan) - Coverity: Resolve a CHECKED_RETURN message (John Ferlan) - bhyve: don't fail on busy tap devices (Roman Bogorodskiy) - libxl: Create log directory earlier (Stefan Bader) - sanlock: Forbid VIR_DOMAIN_LOCK_FAILURE_RESTART (Jiri Denemark) - sanlock: Forbid VIR_DOMAIN_LOCK_FAILURE_IGNORE (Jiri Denemark) - vmware: fix parse of disk source (Eric Blake) - qemuDomainGetImageIds: Skip <seclabel/> without label (Michal Privoznik) - cgroup: Fix start VMs coincidently failed (Wang Yufei) - Remove bogus call to dbus_set_error_from_message (Daniel P. Berrange) - Remove bogus unref in virDBusMessageRead (Daniel P. Berrange) - Check boot order on device attach (Jiri Denemark) - qemu: Return meaningful error when qemu dies early (Jiri Denemark) - Ignore missing files on pool refresh (Ján Tomko) - Ignore char devices in storage pools by default (Ján Tomko) - is_selinux_enabled() returns -1 on error, account for this. (Scott Sullivan) - Fix unitialized data in virSocketAddrMask (Daniel P. Berrange) - Fix virQEMUCapsLoadCache leaks (Ján Tomko) - virNetClientSetTLSSession: Restore original signal mask (Michal Privoznik) - nwfilter: Fix double free of pointer (Stefan Berger) - build: Make sure src/util/virprobe.h is distributed (Jiri Denemark) - qemuhotplugtest: Fix mem-leaking testcases (Nehal J Wani) - build: Fix make distcheck (Martin Kletzander) - virNetServerNewPostExecRestart: Initialize @max_anonymous_clients (Michal Privoznik) - Fix memory leak in virDomainChrSourceDefClear() (Nehal J Wani) - Fix memory leak in virDomainSnapshotDiskDefClear() (Nehal J Wani) - bhyve: allow to destroy only active domains (Roman Bogorodskiy) - Fix leak on OOM when creating nwfilter rule instances (Daniel P. Berrange) - Avoid warning message from libxl driver on non-Xen kernels (Daniel P. Berrange) - Fix mistakes in checking return values (Daniel P. Berrange) - Fix issue found by coverity and cleanup (Pavel Hrdina) - XMLToNative: Parse XML as INACTIVE (Cole Robinson) - qemu: XMLToNative: Don't open vhostfd (Cole Robinson) - qemu: XMLToNative: Don't show -S (Cole Robinson) - qemu: cleanup tap devices on FreeBSD (Roman Bogorodskiy) - openvzRegister: Check for error return (John Ferlan) - nwfilter: Fix rule priority problem (Stefan Berger) - hotplug:Fix log mistake in qemuMonitorAddNetdev (Wang Rui) - libxl: Check for control_d string to decide about dom0 (Stefan Bader) - vircrypto: fix Invalid write in virCryptoHashString() (Nehal J Wani) - Load CPU map from builddir when run uninstalled (Jiri Denemark) - nwfilter: Add missing goto err_exit in error path (Stefan Berger) - Fix sec label setup when attaching to QEMU processes (Daniel P. Berrange) - storage: Fix bugs in VIR_APPEND_ELEMENT series (John Ferlan) - Remove broken error reporting in QEMU mac filtering (Daniel P. Berrange) - BZ1072677: Avoid freeing of 0 file descriptor (Stefan Berger) - Add a mutex to serialize updates to firewall (Daniel P. Berrange) - Fix locking in virsh console (Roman Bogorodskiy) - qemu: Reject unsupported tuning in session mode (Martin Kletzander) - virt-login-shell: silence coverity warning (Eric Blake) - Fix missing char dev lock path case in configure (Roman Bogorodskiy) - storage: Error out when attempting to vol-upload into a remote pool (Peter Krempa) - build: fix cppi warning (Eric Blake) - nwfilter: Increase buffer size for libpcap (Stefan Berger) Improvements: - storage: Rename VolOpenCheckMode to VolOpen (Cole Robinson) - storage: move block format lookup to shared UpdateVolInfo (Cole Robinson) - storage: Rename UpdateVolInfoFlags to UpdateVolInfo (Cole Robinson) - util: storagefile: Don't pursue backing chain of NULL image (Peter Krempa) - storage: pool: Fix XML indentation in pool source lookup (Peter Krempa) - ESX: Add support for virtualHW version 10 (Dawid Zamirski) - Modify help information of virsh list command (Li Yang) - bhyve: add domainLookupByID (Wojciech Macek) - bhyve: add xml2args unittest (Roman Bogorodskiy) - Move virBhyveTapGetRealDeviceName to virnetdevtap (Roman Bogorodskiy) - Shift the for loop over matched vars by one (Ján Tomko) - Use VIR_STRNDUP instead of modifying the matched string (Ján Tomko) - Simplify the loop in virCommandRunRegex (Ján Tomko) - Remove useless 'maxReg' variable (Ján Tomko) - qemu: add unit tests for the capabilities xml (Francesco Romani) - qemu: extract guest capabilities initialization (Francesco Romani) - qemu: export disk snapshot support in capabilities (Francesco Romani) - Show the real cpu shares value in live XML (Ján Tomko) - Treat zero cpu shares as a valid value (Ján Tomko) - qemu: remove redundant virQEMUDriverGetConfig (Tomoki Sekiyama) - Add a rule for indenting labels (Ján Tomko) - Indent top-level labels by one space in tools/ (Ján Tomko) - Indent top-level labels by one space in tests/ (Ján Tomko) - Indent top-level labels by one space in the rest of src/ (Ján Tomko) - Indent top-level labels by one space in src/xen/ (Ján Tomko) - Indent top-level labels by one space in src/vbox/ (Ján Tomko) - Indent top-level labels by one space in src/util/ (Ján Tomko) - Indent top-level labels by one space in src/test/ (Ján Tomko) - Indent top-level labels by one space in src/storage/ (Ján Tomko) - Indent top-level labels by one space in src/rpc/ (Ján Tomko) - Indent top-level labels by one space in src/remote/ (Ján Tomko) - Indent top-level labels by one space in src/qemu/ (Ján Tomko) - Indent top-level labels by one space in src/parallels/ (Ján Tomko) - Indent top-level labels by one space in src/nwfilter/ (Ján Tomko) - Indent top-level labels by one space in src/network/ (Ján Tomko) - Indent top-level labels by one space in src/lxc/ (Ján Tomko) - Indent top-level labels by one space in src/locking/ (Ján Tomko) - Indent top-level labels by one space in libvirt.c (Ján Tomko) - Indent top-level labels by one space in src/libxl/ (Ján Tomko) - Indent top-level labels by one space in src/esx/ (Ján Tomko) - Indent top-level labels by one space in src/cpu/ (Ján Tomko) - Indent top-level labels by one space in src/conf/ (Ján Tomko) - Indent top-level labels by one space in examples/ (Ján Tomko) - Indent top-level labels by one space in daemon/ (Ján Tomko) - util: Sanitize ATTRIBUTE_NONNULL use in viriscsi.h (Peter Krempa) - maint: update to latest gnulib (Eric Blake) - allow "virsh dump --memory-only" specify dump format (Qiao Nuohan) - qemu: add support for virDomainCoreDumpWithFormat API (Qiao Nuohan) - qemu: add qemuMonitorGetDumpGuestMemoryCapability (Qiao Nuohan) - conf: prepare to track multiple host source files per <disk> (Eric Blake) - conf: use disk source accessors in xenxs/ (Eric Blake) - conf: use disk source accessors in xen/ (Eric Blake) - conf: use disk source accessors in vmx/ (Eric Blake) - conf: use disk source accessors in vmware/ (Eric Blake) - conf: use disk source accessors in vbox/ (Eric Blake) - conf: use disk source accessors in uml/ (Eric Blake) - conf: use disk source accessors in security/ (Eric Blake) - conf: use disk source accessors in qemu/ (Eric Blake) - conf: use disk source accessors in phyp/ (Eric Blake) - conf: use disk source accessors in parallels/ (Eric Blake) - conf: use disk source accessors in lxc/ (Eric Blake) - conf: use disk source accessors in locking/ (Eric Blake) - conf: use disk source accessors in libxl/ (Eric Blake) - conf: use disk source accessors in esx/ (Eric Blake) - conf: use disk source accessors in bhyve/ (Eric Blake) - conf: use disk source accessors in conf/ (Eric Blake) - conf: accessors for common source information (Eric Blake) - bhyve: add domainCreateWithFlags support (Roman Bogorodskiy) - bhyve: MAC address configuration (Wojciech Macek) - libxl_driver.c: cleanup code (Chunyan Liu) - Introduce virFDStreamOpenPTY (Roman Bogorodskiy) - Add stubs for virDBusCreateReply{,V} (Ján Tomko) - libvirt support to force convergence of live guest migration (Chegu Vinod) - Allow caller to handle DBus error messages (Daniel P. Berrange) - Introduce alternate way to encode/decode arrays in DBus messages (Daniel P. Berrange) - Add DBus helper methods for creating reply messages (Daniel P. Berrange) - Refactor dbus helper methods for method calls (Daniel P. Berrange) - virlog: Modify virLogParseDefaultPriority's comment of return value (Zhou Yimin) - Fix typo in configure.ac (Ján Tomko) - Define ISCSIADM unconditionally (Ján Tomko) - Pass action to virDomainDefCompatibleDevice (Jiri Denemark) - Fix usage of virDomainDefCompatibleDevice (Jiri Denemark) - tests: Set abs_*dir in a consistent way (Jiri Denemark) - qemu: allow filtering events by regex (Eric Blake) - qemu: enable monitor event filtering by name (Eric Blake) - qemu: enable monitor event reporting (Eric Blake) - qemu: wire up RPC for qemu monitor events (Eric Blake) - qemu: create object for qemu monitor events (Eric Blake) - qemu: virsh wrapper for qemu events (Eric Blake) - qemu: new API for tracking arbitrary monitor events (Eric Blake) - Fix indentation in iscsi storage backend (Ján Tomko) - Add test for virISCSIScanTargets (Ján Tomko) - Add test for virISCSIGetSession (Ján Tomko) - Move functions using iscsiadm to viriscsi.c (Ján Tomko) - Remove storage pool from the arguments of a few functions (Ján Tomko) - Don't create iscsiadm command line in ISCSIPool{Start,Stop} (Ján Tomko) - Switch virCommandRunRegex to use virStringSplit (Ján Tomko) - Move virStorageBackendRun to vircommand (Ján Tomko) - Sort includes in storage_backend_iscsi.c (Ján Tomko) - Require K&R styled curly braces around function bodies (Martin Kletzander) - Use K&R style for curly braces in remaining files (Martin Kletzander) - Use K&R style for curly braces in src/vbox/ (Martin Kletzander) - Use K&R style for curly braces in src/network/bridge_driver.c (Martin Kletzander) - Use K&R style for curly braces in src/lxc/lxc_driver.c (Martin Kletzander) - Use K&R style for curly braces in src/uml/ (Martin Kletzander) - Use K&R style for curly braces in src/test/test_driver.c (Martin Kletzander) - Use K&R style for curly braces in src/nwfilter/ (Martin Kletzander) - Use K&R style for curly braces in src/openvz/ (Martin Kletzander) - Use K&R style for curly braces in src/storage/ (Martin Kletzander) - Use K&R style for curly braces in src/qemu/ (Martin Kletzander) - Use K&R style for curly braces in src/conf/ (Martin Kletzander) - Use K&R style for curly braces in src/rpc/ (Martin Kletzander) - Use K&R style for curly braces in src/util/ (Martin Kletzander) - Use K&R style for curly braces in src/xen*/ (Martin Kletzander) - Use K&R style for curly braces in tests/ (Martin Kletzander) - bhyve: host API support (Wojciech Macek) - libxl: move domain event handler to libxl_domain (Jim Fehlig) - libxl: include a pointer to the driver in libxlDomainObjPrivate (Jim Fehlig) - libxl: move libxlVmStart to libxl_domain (Jim Fehlig) - libxl: move libxlFreeMem to libxl_domain (Jim Fehlig) - libxl: move libxlDomainSetVcpuAffinities to libxl_domain (Jim Fehlig) - libxl: move libxlDoNodeGetInfo to libxl_conf (Jim Fehlig) - libxl: move libxlDomainAutoCoreDump to libxl_domain (Jim Fehlig) - libxl: move libxlDomEventsRegister to libxl_domain (Jim Fehlig) - libxl: move libxlVmCleanup{,Job} to libxl_domain (Jim Fehlig) - libxl: move libxlSaveImageOpen to libxl_domain (Jim Fehlig) - libxl: move libxlDomainManagedSavePath to libxl_domain (Jim Fehlig) - libxl: move libxlDomainEventQueue to libxl_domain (Jim Fehlig) - Add ability to register callback for virCommand dry run (Daniel P. Berrange) - Change CMD_STOPONERR(1) to use true (Daniel P. Berrange) - Change 'int isTempChain' to bool in nwfilter (Daniel P. Berrange) - Remove pointless return values in nwfilter methods (Daniel P. Berrange) - Remove 'int stopOnError' parameters in nwfilter methods (Daniel P. Berrange) - Remove pointless brackets around boolean (Daniel P. Berrange) - Change 'int incoming' to 'bool incoming' in nwfilter code (Daniel P. Berrange) - virhostdev.h: remove ATTRIBUTE_NONNULL from oldStateDir (Chunyan Liu) - libxl: fix framebuffer port setting for HVM domains (Jim Fehlig) - maint: avoid unbalanced {} across vbox #ifdef (Eric Blake) - Remove global log buffer feature entirely (Daniel P. Berrange) - Switch to filtering based on log source name instead of filename (Daniel P. Berrange) - Add virLogSource variables to all source files (Daniel P. Berrange) - Turn virLogSource into a struct instead of an enum (Daniel P. Berrange) - Move dtrace probe macros into separate header file (Daniel P. Berrange) - Refactor code that skips logging of error messages (Daniel P. Berrange) - Reduce performance overhead of the global log buffer (Daniel P. Berrange) - qemuDomainSetInterfaceParameters: Allow bandwidth clear out (Michal Privoznik) - cfg.mk: Fix whitespaces (Martin Kletzander) - Remove double space in file name comment check (Ján Tomko) - Explicitly cast some switch parameters to enum (Martin Kletzander) - Require spaces around equality comparisons (Martin Kletzander) - Remove duplicate network model characters (Martin Kletzander) - tests: cleanup object-locking test (Martin Kletzander) - qemu: agent availability cleanup (Martin Kletzander) - virsh: Prohibit virConnectOpen* functions in virsh (Martin Kletzander) - virsh: Add keepalive in new vshConnect function (Martin Kletzander) - virt-aa-helper: handle 9pfs (Felix Geyer) - Give virNWFilterVarCombIterNext saner semantics (Daniel P. Berrange) - bhyve: fix hostbridge device command generation (Roman Bogorodskiy) - bhyve: add support for virtio block devices (Roman Bogorodskiy) - Enforce attribute check of the virRegister functions (Pavel Hrdina) - daemon: Introduce max_anonymous_clients (Michal Privoznik) - virNetServer: Introduce unauth clients counter (Michal Privoznik) - datatypes: Fix comments (Michael Chapman) - bhyve: implement nodeGetInfo() (Roman Bogorodskiy) - Add parameter to wait for lock in file locking APIs (Nehal J Wani) - spec: move some dirs into appropriate subpackages (Michael Chapman) - build: detect/prohibit hardcoded XML indent in syntax-check (Laine Stump) - conf: eliminate hardcoded indentation in all remaining xml (Laine Stump) - qemu: elminate hardcoded indent in capabilities cache XML (Laine Stump) - util: eliminate hardcoded indent in virConnectSysInfo formatting (Laine Stump) - qemu: eliminate hardcoded indent from migration cookie xml (Laine Stump) - virsh: eliminate hardcoded indentation in xml generated for commands (Laine Stump) - conf: eliminate hardcoded indent in volume/pool xml (Laine Stump) - conf: eliminate hardcoded indentation in node device xml (Laine Stump) - conf: eliminate hardcoded indentation in capabilities xml (Laine Stump) - conf: eliminate hardcoded indentation in nwfilter xml (Laine Stump) - conf: eliminate outmoded/odd indent method from interface xml (Laine Stump) - conf: eliminate hardcoded indent from network xml (Laine Stump) - conf: eliminate hardcoded indent from domain snapshot xml (Laine Stump) - conf: eliminate hardcoded indent from domain xml (Laine Stump) - nwfilter: Add ARP src/dst IP mask for ebtables ARP (Stefan Berger) - hostdev: add virObject field to virHostdevManager struct (Jim Fehlig) - Make ABI stability issue easier to debug (Jiri Denemark) - qemu: Forbid "sgio" support for SCSI generic host device (Osier Yang) - add pci passthrough to libxl driver (Chunyan Liu) - add hostdev pci backend type for xen (Chunyan Liu) - change lxc_hostdev.c to use virhostdev common library APIs (Chunyan Liu) - add unit test for new virhostdev common library (Chunyan Liu) - Add parameter checks/annotations to hostdev APIs (Chunyan Liu) - add 3 wrapper functions for prepare/reattach/update domain hostdevs (Chunyan Liu) - improve virHostdevUpdate* parameters to make it more widely used (Chunyan Liu) - Capitalize USB, PCI and SCSI in hostdev variables (Daniel P. Berrange) - Remove redundant duplicated 'Hostdev' string method names (Daniel P. Berrange) - Capitalize USB, PCI and SCSI in hostdev methods (Chunyan Liu) - Fixed const-ness of parameters in netdev/hostdev code (Daniel P. Berrange) - improve parameter name to let it more meaningful (Chunyan Liu) - move virHostdevNodeDevice* to virhostdev.c (Chunyan Liu) - extract general code of NodeDeviceReset (Chunyan Liu) - extract general code of NodeDeviceReAttach (Chunyan Liu) - extract general code of NodeDeviceDetach (Chunyan Liu) - move virHostdevReAttachHostScsiDevices to virhostdev.c (Chunyan Liu) - pass driver name as parameter to virHostdevReAttachScciHostdevs (Chunyan Liu) - extract general code from qemuDomainReAttachHostScsiDevices (Chunyan Liu) - move virHostdevReAttachUsbHostdevs to virhostdev.c (Chunyan Liu) - pass driver name as paramter to virHostdevReAttachUsbHostdevs (Chunyan Liu) - extract general code from qemuDomainReAttachHostUsbDevices (Chunyan Liu) - move virHostdevPrepareHostSCSIDevices to virhostdev.c (Chunyan Liu) - pass driver name as parameter to virHostdevPrepareSCSIDevices (Chunyan Liu) - extract general code from qemuPrepareHostSCSIDevices (Chunyan Liu) - move virHostdevPrepareHostUSBDevices to virhostdev.c (Chunyan Liu) - pass driver name to virHostdevPrepareUSBDevices (Chunyan Liu) - rename qemu*USBDevices to virHostdev*USBDevices (Chunyan Liu) - extract general code from qemuPrepareHostUSBDevices (Chunyan Liu) - move virHostdevUpdate* functions to virhostdev.c (Chunyan Liu) - pass driver_name as parameter of virHostdevUpdate*Hostdevs functions (Chunyan Liu) - extract general code from qemuUpdateActiveScsiHostdevs (Chunyan Liu) - extract general code from qemuUpdateActiveUsbHostdevs (Chunyan Liu) - extract general code from qemuUpdateActivePciHostdevs (Chunyan Liu) - move virHostdevPrepare(ReAttach)PCIDevices to virhostdev.c (Chunyan Liu) - rename qemuReAttachPciDevice to virHostdevReAttachPciDevice (Daniel P. Berrange) - Conditionally wait for kvm_assigned_device cleanup (Chunyan Liu) - pass driver name as a parameter to virHostdevReAttachPCIDevices (Chunyan Liu) - extract general code from qemuDomainReAttachHostdevDevices (Chunyan Liu) - pass driver name as a parameter to virHostdevPrepareHostdevPCIDevices (Chunyan Liu) - rename qemuGet*PciHostDeviceList to virHostdevGet*PciHostDeviceList (Chunyan Liu) - rename qemu*NetConfigRestore/Replace to virHostdevNetConfigRestore/Replace (Chunyan Liu) - extract general code from qemuPrepareHostdevPCIDevices (Chunyan Liu) - qemu_hostdev: move netconfig file location to virhostdev stateDir (Chunyan Liu) - qemu_hostdev: move ColdBoot as a flag (Chunyan Liu) - qemu_hostdev: move cfg->relaxedACS as a flag (Chunyan Liu) - lxc: use general virhostdev lists instead of its own (Chunyan Liu) - qemu: use general virhostdev lists instead of its own (Chunyan Liu) - qemu: remove functions used internally only from qemu_hostdev.h (Chunyan Liu) - qemu: reuse hostdev interfaces to avoid duplicate (Chunyan Liu) - update qemuPrepareHostUSBDevices parameters to keep consistency (Chunyan Liu) - virhostdev: use virObject to virHostdevManager to keep reference (Chunyan Liu) - Introduce vircommandpriv.h for functions used by tests (Ján Tomko) - Use size_t for ndevice in pool source definition (Ján Tomko) - Introduce virStoragePoolSourceDeviceClear (Ján Tomko) - Change virStorageBackendISCSISession 'probe' arg to bool (Ján Tomko) - qemu: don't munge user input during block commit (Eric Blake) - iptables: don't log command probe failures (Eric Blake) - libxl: support sexpr in native to XML conversion (Jim Fehlig) - Remove unused ebtablesRemoveForwardPolicyReject method (Daniel P. Berrange) - Remove worthless ebtRules data structure (Daniel P. Berrange) - Remove data structure holding list of ebtables rules (Daniel P. Berrange) - Remove unused variables from ebtablesContext (Daniel P. Berrange) - Make ebtablesForwardPolicyReject static (Daniel P. Berrange) - Remove decl of method which doesn't exist in virebtables.h (Daniel P. Berrange) - Remove many decls from bridge driver platform header (Daniel P. Berrange) - Cache result of QEMU capabilities extraction (Daniel P. Berrange) - Change QEMU capabilities cache to check ctime instead of mtime (Daniel P. Berrange) - Add helper APIs to track if libvirtd or loadable modules have changed (Daniel P. Berrange) - virSecurityDACSetSecurityImageLabel: Unmark @def as unused (Michal Privoznik) - tests: Distribute securityselinuxhelperdata (Jiri Denemark) - Convert lock driver plugins to use new crypto APIs (Daniel P. Berrange) - Add helper APIs for generating cryptographic hashes (Daniel P. Berrange) - Change file names in comments to match the files they are in (Ján Tomko) - Wildcard ignore tests/*test instead of listing every one (Daniel P. Berrange) - src/xenxs: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/xen: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/util: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/test: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/storage: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/rpc: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/qemu: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/phyp: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/parallels: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/openvz: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/nwfilter: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - src/lxc/: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - conf: Utilize more of VIR_(APPEND|INSERT|DELETE)_ELEMENT (Michal Privoznik) - virsh: Sort options alphabetically (Martin Kletzander) - tests: Fix SELinux tests in VPATH build (Jiri Denemark) - virscsi: Introduce virSCSIDeviceUsedByInfoFree (John Ferlan) - tests: Test virIdentityGetSystem (Michael Chapman) - tests: SELinux tests do not need to be skipped (Michael Chapman) - tests: Flesh out securityselinuxhelper (Michael Chapman) - spec: Let translations be properly updated (Jiri Denemark) - datatypes: update comments of Dispose functions (Michael Chapman) - qemu: monitor: Provide more information in generic block job error (Peter Krempa) - storage: Don't lie about path used to look up in error message (Peter Krempa) - storage: Avoid mangling paths of non-local filesystems when looking up (Peter Krempa) - storage: Use cleanup label instead of out (Peter Krempa) - virsh: volume: Fix lookup of volumes to provide better error messages (Peter Krempa) - add virhostdev files to maintain global state of host devices (Chunyan Liu) - add 'driver' info to used_by (Chunyan Liu) - apparmor: handle "none" type (Cédric Bosdonnat) - add support for apparmor in lxc-enter-namespace (Cédric Bosdonnat) - apparmor: add debug traces when changing profile. (Cédric Bosdonnat) - Make sure apparmor is started before libvirtd (Cédric Bosdonnat) - LXC driver: generate apparmor profiles for guests (Cédric Bosdonnat) - qemu: monitor: Fix error message and comment when getting cpu info (Peter Krempa) - qemu: snapshot: Use better check when reverting external snapshots (Peter Krempa) - qemuBuildNicDevStr: Adapt to new advisory on multiqueue (Michal Privoznik) - Check if systemd is running before creating machines (Ján Tomko) - Split out most of virDBusIsServiceEnabled (Ján Tomko) - Don't always skip virportallocatortest (Ján Tomko) - tests: Create privileged driver config in qemuxml2argvtest (Martin Kletzander) - build: Include sys/wait.h in commandtest.c (Ján Tomko) - nwfilter: Display the pcap errror message (Stefan Berger) - nwfilter: Cap the poll timeout in the DHCP Snooping code (Stefan Berger) - virsh: report exit status of failed lxc-enter-namespace (Eric Blake) - virt-login-shell: saner exit value (Eric Blake) - virt-login-shell: use single instead of double fork (Eric Blake) - virFork: simplify semantics (Eric Blake) - util: make it easier to grab only regular command exit (Eric Blake) - util: make it easier to grab only regular process exit (Eric Blake) - util: preserve exit status from mount namespace callback (Eric Blake) - util: make it easier to reflect child exit status (Eric Blake) - virFork: give specific status on failure prior to exec (Eric Blake) - nwfilter: make ignoring non-zero status easier to follow (Eric Blake) - qemu: Implement a stub cpuArchDriver.baseline() handler for arm (Oleg Strikov) - Fix indentation in virsystemdmock (Ján Tomko) - Replace space with a tab in the Makefile (Ján Tomko) - Add a test for virUSBDeviceList functions (Ján Tomko) - Add tests for virUSBDeviceFind functions (Ján Tomko) - Generate a unique journald log for QEMU capabilities failure (Daniel P. Berrange) - Bump version to 1.2.3 for new dev cycle (Michal Privoznik) Cleanups: - util: remove useless comment for virCgroupMoveTask in vircgroup.c (Hongwei Bi) - Don't leave empty first line in C source files (Martin Kletzander) Thanks everybody for contributing to this release, be it with bug reports, patches, ideas, code reviews and help on localization ! Enjoy ! Daniel P.S.: for those looking for the April Fool part, don't worry that corner of the internet is still sane even today :) -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 0

[Libvirt-announce] Entering freeze for libvirt-1.2.3
by Daniel Veillard 30 Mar '14

30 Mar '14

I'm one day late but i have tagged the tree and pushed a release candidate 1 tarball and associated rpms to the usual place: ftp://libvirt.org/libvirt/ Being optimistic maybe we can push it on April 1st but maybe it will be safer to wait for Wed for more feedback. I gave it a bit of testing, it looks fine with my limited check, but please give it a try :-) ! thanks, Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

1 1

[Libvirt-announce] Release of libvirt-1.2.2
by Daniel Veillard 06 Mar '14

06 Mar '14

As planned I have tagged libvirt-1.2.2 in git and it seem the git tree finally updated despite the horrible network I get in china ATM, the tarballs may finally arrive at some time too at the usual place after working around the local infrastructure flaws... : ftp://libvirt.org/libvirt/ I am also pushing a libvirt-python-1.2.2 update at: ftp://libvirt.org/libvirt/libvirt/ since fedpkg upload libvirt-1.2.2.tar.gz failed to progress further than 7% using eithe Cable or ADSL, i assume someone lese will push those to Fedora build system. This is a rather large release with a few new features including beginning of support for the BSD hypervisor, and a lot of significant improvements in various place like linux containers, network storage, Xen drivers, internals etc ... Also of note the fixes for the LXC security bug CVE-2013-6456: Features: - bhyve: add a basic driver (Roman Bogorodskiy) - add LXC from native conversion tool (Cédric Bosdonnat) - vbox: add support for v4.2.20+ and v4.3.4+ (Jean-Baptiste Rouault) - Introduce Libvirt Wireshark dissector (Yuto KAWAMURA) Security: - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC hotunplug code (Daniel P. Berrange) - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC chardev hostdev hotplug (Daniel P. Berrange) - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC block hostdev hotplug (Daniel P. Berrange) - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC USB hotplug (Daniel P. Berrange) - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC disk hotplug (Daniel P. Berrange) - CVE-2013-6456: Avoid unsafe use of /proc/$PID/root in LXC shutdown/reboot code (Eric Blake) Documentation: - bhyve: add basic documentation (Roman Bogorodskiy) - Add docs about use of systemd journal for logging (Daniel P. Berrange) - Auto-generate the table of contents in logging doc (Daniel P. Berrange) - Fix heading level in logging docs (Daniel P. Berrange) - Document the keyboard as a valid input type (Ján Tomko) - bandwidth: Adjust documentation (John Ferlan) - remove <auth> from secret XML format (Ján Tomko) - LXC: added some doc on domxml-from-native with mention of limitations (Cédric Bosdonnat) - libxl: fix libxlDoDomainSave documentation (Jim Fehlig) - grammar fixes in formatdomain (Chen Hanxiao) - maint: fix grammar in conf file (Eric Blake) - Fix minor typo in governance doc (Justin Clift) - Write up the project governance process (Daniel P. Berrange) - man: shm-merge-across-nodes is optional (Ján Tomko) - docs/page.xls: remove unnecessary namespace attribute (Pavel Hrdina) - add a permalink to html headers (Dan Kenigsberg) - storage: Add document for possible problem on volume detection (Osier Yang) - Add "note" for node-memory-tune (Osier Yang) - Improve the document for nodesuspend (Osier Yang) - refer to the correct event ID for DomainEventIOErrorReasonCallback (Claudio Bley) - Add sample output of Wireshark dissector (Yuto KAWAMURA) - Add missing space in <clock> documentation (Christophe Fergeau) Portability: - build: skip virportallocatortest on cygwin (Eric Blake) - build: ignore cygwin toolchain droppings (Eric Blake) - build: avoid ld_preload tests on mingw (Eric Blake) - build: fix cgroups on non-Linux (Eric Blake) - build: fix build on 32-bit hosts (Eric Blake) - maint: update to latest gnulib, for older autoconf (Eric Blake) - Fix build of portallocator on mingw (Ján Tomko) - lxc: Don't shadow global symbol "link" (Peter Krempa) - storage: Fix build with older compilers afeter gluster snapshot series (Peter Krempa) - spec: add missing dep of libvirt-daemon-config-network (Thierry Parmentelat) - spec: require libvirt-daemon-driver-interface only when built (Thierry Parmentelat) - Fixed build with clang. (Cédric Bosdonnat) - Rename 'index' in virCapabilitiesGetCpusForNode (Ján Tomko) - qemuxml2argvmock: Mock time() on non-linux platforms too (Michal Privoznik) - build: Fix 'make rpm' in VPATH with wireshark (Martin Kletzander) - Remove windows thread implementation in favour of pthreads (Daniel P. Berrange) - Fix pthread_sigmask check for mingw32 without winpthreads (Daniel P. Berrange) - Skip check-augeas-lockd when QEMU is disabled (Daniel P. Berrange) - maint: add configure checks for BSD CPU affinity (Roman Bogorodskiy) - BSD: implement virProcess{Get,Set}Affinity (Roman Bogorodskiy) - tests: Fix PCI test data filenames for Windows (Matthias Bolte) - wireshark: Fix VPATH build (Jiri Denemark) - Honour prefix in wireshark install dir (Daniel P. Berrange) - Use AC_PATH_PROG to search for dmidecode (Roman Bogorodskiy) Bug fixes: - bhyve: defined domains should be persistent (Roman Bogorodskiy) - Fix journald PRIORITY values (Daniel P. Berrange) - spec: Fix braces around macros (Peter Krempa) - spec: Use correct versions of libgfapi in RHEL builds (Peter Krempa) - network: unplug bandwidth and call networkRunHook only when appropriate (Laine Stump) - network: don't even call networkRunHook if there is no network (Laine Stump) - Fix memory leak in virSCSIDeviceListDel() (Nehal J Wani) - libxl: queue domain event earlier in shutdown handler (Jim Fehlig) - virsh: mark CPU usage field names as translatable (Ján Tomko) - virsh: initialize str to NULL to solve a build issue (Chen Hanxiao) - virsh: Don't leak buffer if GetFDs fails in cmdCreate (Ján Tomko) - libvirt-guests: Wait for libvirtd to initialize (Michal Privoznik) - virSystemdCreateMachine: Set dependencies for slices (Michal Privoznik) - Ignore additional fields in iscsiadm output (Ján Tomko) - libxl: always use libxlVmCleanupJob in shutdown thread (Jim Fehlig) - qemu: adjust maxmem/maxvcpu computation (Eric Blake) - Fix multiple bugs in LXC domainMemoryStats driver (Daniel P. Berrange) - Fix misspelled cpuacct.usage_percpu in cgroup mock. (Thorsten Behrens) - virsh: fix memleak when starting a guest with invalid fd (Jincheng Miao) - networkRunHook: Run hook only if possible (Michal Privoznik) - bridge_driver.h: Fix build --without-network (Michal Privoznik) - Fix conflicting types of virInitctlSetRunLevel (Ján Tomko) - Fix reset of cgroup when detaching USB device from LXC guests (Daniel P. Berrange) - Fix path used for USB device attach with LXC (Daniel P. Berrange) - Don't block use of USB with containers (Daniel P. Berrange) - storage: gluster: Don't leak private data when storage file init fails (Peter Krempa) - storage: handle NULL return from virGetStorageVol (Michael Chapman) - Fix leaks in vircapstest (Ján Tomko) - AppArmor: Fix the place where the template should be installed (Cédric Bosdonnat) - Libvirt lose sheepdogs volumes on pool refresh or restart. When restarting sheepdog pool, all volumes are missing. This patch add automatically all volume from the added pool. (Joel SIMOES) - maint: fix line numbers in check-aclrules reports (Yuri Myasoedov) - qemu: Use correct permissions when determining the image chain (Peter Krempa) - virpci: Resolve coverity issues (John Ferlan) - qemu: keep pre-migration domain state after failed migration (Martin Kletzander) - qemu: Fix crash in virDomainMemoryStats with old qemu (Jiri Denemark) - network: disallow <bandwidth>/<mac> for bridged/macvtap/hostdev networks (Laine Stump) - Honor blacklist for modprobe command (John Ferlan) - qemu: be sure we're using the updated value of backend during hotplug (Laine Stump) - Resolve Coverity dead_error_begin (John Ferlan) - qemu: Fix the error message for scsi host device's shareable checking (Osier Yang) - xen: fix parsing xend http response (Jim Fehlig) - storage: Fix the memory leak (Osier Yang) - Fix buffer size in linuxNodeGetCPUstats (Bing Bu Cao) - util: Correct the NUMA node range checking (Osier Yang) - qemu: Avoid crash in qemuDiskGetActualType (Peter Krempa) - linuxNodeGetCPUStats: Correctly handle cpu prefix (Bing Bu Cao) - qemu: snapshot: Forbid snapshots when backing is a scsi passthrough disk (Peter Krempa) - qemu: snapshot: Avoid libvirtd crash when qemu crashes while snapshotting (Peter Krempa) - lxc: Fix coverity (Martin Kletzander) - qemu: Don't detach devices if passthrough doesn't work (Jincheng Miao) - pci: Fix failure paths in detach (Jiri Denemark) - virSecuritySELinuxSetFileconHelper: Don't fail on read-only NFS (Michal Privoznik) - Fix possible memory leak in virsh-domain-monitor.c in cmdDomblklist (Pavel Hrdina) Improvements: - virsh: add --all flag to 'event' command (Eric Blake) - virsh: support remaining domain events (Eric Blake) - bhyve: support domain undefine (Roman Bogorodskiy) - Add comments describing the different log sources (Daniel P. Berrange) - Include error domain and code in log messages from errors (Daniel P. Berrange) - Send virLogMetadata fields onto the journal (Daniel P. Berrange) - qemu: Enable 'host-passthrough' cpu mode for arm (Oleg Strikov) - domblkstat: Produce error message that at least sounds like English (Michal Privoznik) - virDomainBlockStats(Flags): Produce saner error message on empty disk path (Michal Privoznik) - tests: avoid littering /tmp (Eric Blake) - sanlock: Truncate domain names longer than SANLK_NAME_LEN (Jiri Denemark) - maint: Fix minor typo (unkown) (Yuri Chornoivan) - libxl: Recognise ARM architectures (Ian Campbell) - virsh: Honour -q in domblklist, vcpupin and emulatorpin (Michal Privoznik) - spec: make systemd_daemon usage configurable (Eric Blake) - spec: require device-mapper-devel for storage-disk (Eric Blake) - spec: explicitly avoid bhyve on Linux (Eric Blake) - build: use --with-systemd-daemon as configure option (Eric Blake) - virNetDevVethCreate: Serialize callers (Michal Privoznik) - network: include plugged interface XML in "plugged" network hook (Laine Stump) - conf: output actual netdev status in <interface> XML (Laine Stump) - conf: new function virDomainActualNetDefContentsFormat (Laine Stump) - conf: re-situate <bandwidth> element in <interface> (Laine Stump) - conf: make virDomainNetDefFormat a public function (Laine Stump) - conf: handle null pointer in virNetDevVlanFormat (Laine Stump) - conf: clarify what is returned for actual bandwidth and vlan (Laine Stump) - rbd: Set timeout options for librados (Wido den Hollander) - rbd: Include return statuses from librados/librbd in logging (Wido den Hollander) - virsh: kill over-engineered asprintf failure recovery (Eric Blake) - virsh: use more compact VIR_ENUM_IMPL (Eric Blake) - libxl: handle on_crash coredump actions (Jim Fehlig) - libxl: add dump dir to libxlDriverConfig object (Jim Fehlig) - libxl: honor domain lifecycle event configuration (Jim Fehlig) - Ensure systemd cgroup ownership is delegated to container with userns (Richard Weinberger) - bhyve: implement node information reporting (Roman Bogorodskiy) - Add virStringReplace method for substring replacement (Daniel P. Berrange) - Add virStringSearch method for regex matching (Manuel VIVES) - virNetServerRun: Notify systemd that we're accepting clients (Michal Privoznik) - Add a stub for virCgroupGetDomainTotalCpuStats (Ján Tomko) - maint: update to latest gnulib (Eric Blake) - virsh: add net-event command (Eric Blake) - virsh: add event command, for lifecycle events (Eric Blake) - virsh: common code for waiting for an event (Eric Blake) - virsh: common code for parsing --seconds (Eric Blake) - libxl: queue shutdown event on domain shutdown (Jim Fehlig) - Rename virDomainGetRootFilesystem to virDomainGetFilesystemForTarget (Daniel P. Berrange) - Introduce new OOM testing support (Daniel P. Berrange) - Add unit test for virCgroupGetPercpuStats. (Thorsten Behrens) - Add unit test for virCgroupGetMemoryUsage. (Thorsten Behrens) - Add unit test for virCgroupGetBlkioIo*Serviced (Thorsten Behrens) - Widening API change - accept empty path for virDomainBlockStats (Thorsten Behrens) - Implement lxcDomainBlockStats* for lxc driver (Thorsten Behrens) - Implement domainGetCPUStats for lxc driver. (Thorsten Behrens) - Make qemuGetDomainTotalCPUStats a virCgroup function. (Thorsten Behrens) - Implement domainMemoryStats API slot for LXC driver. (Thorsten Behrens) - Add util virCgroupGetBlkioIo*Serviced methods. (Thorsten Behrens) - lxc: Add destroy support for suspended domains (Richard Weinberger) - libxl: use job functions in libxlDomainSetSchedulerParametersFlags (Jim Fehlig) - libxl: use job functions in libxlDomainSetAutostart (Jim Fehlig) - libxl: use job functions in device attach and detach functions (Jim Fehlig) - libxl: use job functions in vcpu set and pin functions (Jim Fehlig) - libxl: use job functions in libxlDomainCoreDump (Jim Fehlig) - libxl: use job functions in domain save operations (Jim Fehlig) - libxl: use job functions when cleaning up a domain (Jim Fehlig) - libxl: use job functions in libxlDomain{Suspend,Resume} (Jim Fehlig) - libxl: use job functions in libxlDomainSetMemoryFlags (Jim Fehlig) - libxl: use job functions in libxlVmStart (Jim Fehlig) - libxl: Add job support to libxl driver (Jim Fehlig) - libxl: remove libxlVmReap function (Jim Fehlig) - libxl: always set vm id to -1 on shutdown (Jim Fehlig) - qemu: Use virtio network device for aarch64/virt (Oleg Strikov) - Add a default USB keyboard and USB mouse for PPC64 (Li Zhang) - xen: format xen config for USB keyboard (Li Zhang) - qemu: format qemu command line for USB keyboard (Li Zhang) - qemu: Add USB keyboard capability (Li Zhang) - conf: Remove the implicit PS2 devices for non-X86 platforms (Li Zhang) - conf: Add keyboard input device type (Li Zhang) - conf: Add one interface to add default input devices (Li Zhang) - network: Taint networks that are using hook script (Michal Privoznik) - network: Introduce network hooks (Michal Privoznik) - network_conf: Expose virNetworkDefFormatInternal (Michal Privoznik) - Add helper for running code in separate namespaces (Daniel P. Berrange) - Add virFileMakeParentPath helper function (Daniel P. Berrange) - Move check for cgroup devices ACL upfront in LXC hotplug (Daniel P. Berrange) - Disks are always block devices, never character devices (Daniel P. Berrange) - Record hotplugged USB device in LXC live guest config (Daniel P. Berrange) - qemu: Implement VIR_DOMAIN_TAINT_HOOK (Michal Privoznik) - virDomainTaintFlags: Introduce VIR_DOMAIN_TAINT_HOOK (Michal Privoznik) - Add tests for secret XML parsing (Ján Tomko) - Forgot to add lxcconf2xmldata to dist. (Cédric Bosdonnat) - Support IPv6 in port allocator (Ján Tomko) - Split out bind() from virPortAllocatorAcquire (Ján Tomko) - qemu: snapshot: Add support for external active snapshots on gluster (Peter Krempa) - qemu: snapshot: Use new APIs to detect presence of existing storage files (Peter Krempa) - qemu: Switch snapshot deletion to the new API functions (Peter Krempa) - storage: Add storage file backends for gluster (Peter Krempa) - storage: add file functions for local and block files (Peter Krempa) - storage: Add file storage APIs in the default storage driver (Peter Krempa) - conf: Move qemuSnapshotDiskGetActualType to virDomainSnapshotDiskGetActualType (Peter Krempa) - conf: Move qemuDiskGetActualType to virDomainDiskGetActualType (Peter Krempa) - spec: add missing dep of libvirt-daemon-config-nwfilter (Eric Blake) - lxc from native: removed now remaining useless line (Cédric Bosdonnat) - Fix stream related spelling mistakes (Philipp Hahn) - LXC from native: convert blkio throttle config (Cédric Bosdonnat) - LXC from native: map vlan network type (Cédric Bosdonnat) - LXC from native: map block filesystems (Cédric Bosdonnat) - LXC from native: map lxc.arch to /domain/os/type@arch (Cédric Bosdonnat) - LXC from native: add lxc.cgroup.blkio.* mapping (Cédric Bosdonnat) - LXC from native: map lxc.cgroup.cpuset.* (Cédric Bosdonnat) - LXC from native: map lxc.cgroup.cpu.* (Cédric Bosdonnat) - LXC from native: migrate memory tuning (Cédric Bosdonnat) - LXC from native: convert lxc.id_map into <idmap> (Cédric Bosdonnat) - LXC from native: convert macvlan network configuration (Cédric Bosdonnat) - LXC from native: convert lxc.tty to console devices (Cédric Bosdonnat) - LXC from native: convert phys network types to net hostdev devices (Cédric Bosdonnat) - LXC from native: migrate veth network configuration (Cédric Bosdonnat) - LXC from native: implement no network conversion (Cédric Bosdonnat) - LXC from native: migrate fstab and lxc.mount.entry (Cédric Bosdonnat) - LXC from native: import rootfs (Cédric Bosdonnat) - LXC driver: started implementing connectDomainXMLFromNative (Cédric Bosdonnat) - Improve virConf parse to handle LXC config format (Cédric Bosdonnat) - event: pass reason for PM events (Eric Blake) - event: convert remaining domain events to new style (Eric Blake) - event: client RPC protocol tweaks for domain lifecycle events (Eric Blake) - event: prepare client to track domain callbackID (Eric Blake) - event: server RPC protocol tweaks for domain lifecycle events (Eric Blake) - event: dynamically manage server-side RPC domain events (Eric Blake) - qemu: Implement a stub cpuArchDriver.baseline() handler for aarch64 (Oleg Strikov) - libxl: register for domain events immediately after creation (Jim Fehlig) - libxl: rename libxlCreateDomEvents to libxlDomEventsRegister (Jim Fehlig) - vircapstest: Introduce virCapabilitiesGetCpusForNodemask test (Pradipta Kr. Banerjee) - Handle non-sequential NUMA node numbers (Pradipta Kr. Banerjee) - storage: gluster: Set volume metadata in a separate function (Peter Krempa) - qemu: introduce spiceport chardev backend (Martin Kletzander) - qemu: remove pointless condition (Martin Kletzander) - qemu: rework '-serial none' (Martin Kletzander) - conf: introduce spiceport chardev backend (Martin Kletzander) - rbd: Use rbd_create3 to create RBD format 2 images by default (Wido den Hollander) - build: correctly check for SOICGIFVLAN GET_VLAN_VID_CMD command (Laine Stump) - virNetworkLoadState: Disallow mangled 'floor' element (Michal Privoznik) - networkStartNetwork: Be more verbose (Michal Privoznik) - qemu: hyperv: Add support for timer enlightenments (Peter Krempa) - conf: Enforce supported options for certain timers (Peter Krempa) - schema: Fix guest timer specification schema according to the docs (Peter Krempa) - apparmor: Improve profiles (Felix Geyer) - Add glusterfs to VIR_CONNECT_LIST_STORAGE_POOLS_FILTERS_POOL_TYPE (Christophe Fergeau) - libxl: remove unneeded locking of driver when restoring (Jim Fehlig) - libxl: improve subprocess handling (Jim Fehlig) - libxl: handle domain shutdown events in a thread (Jim Fehlig) - libxl: remove list of timer registrations from libxlDomainObjPrivate (Jim Fehlig) - libxl: fix leaking libxlDomainObjPrivate (Jim Fehlig) - qemu_driver: Introduce <filesystem/> support in device attach/detach (Matthieu Coudron) - virDomainHostdev{Insert,Delete}: Replace VIR_REALLOC_N by VIR_{APPEND,DELETE}_ELEMENT (Matthieu Coudron) - qemuxml2argvtest: Set timezone (Michal Privoznik) - virsh: only report filled values in nodecpustats (Ján Tomko) - BSD: implement nodeGetCPUStats (Roman Bogorodskiy) - qemu: blockjob: Print correct file name in error message (Peter Krempa) - maint: Change the text of the NULLSTR() macro to "<null>" (Peter Krempa) - qemuxml2argvtest: Test localtime clock basis (Michal Privoznik) - qemuBuildClockArgStr: Allow localtime clock basis (Michal Privoznik) - Generate a valid imagelabel even for type 'none' (Ján Tomko) - event: move event filtering to daemon (regression fix) (Eric Blake) - rpm: create libvirt-wireshark sub-package (Eric Blake) - tests: Add test for new virkmod functions (John Ferlan) - utils: Introduce functions for kernel module manipulation (John Ferlan) - network: change default of forwardPlainNames to 'yes' (Laine Stump) - network: only prevent forwarding of DNS requests for unqualified names (Laine Stump) - virnetdevbandwidthtest: Link with libxml2 (Michal Privoznik) - spice: don't force user to specify spicevmc channel (Martin Kletzander) - virnetdevbandwidthtest: Introduce some more tests (Michal Privoznik) - virnetdevbandwidthtest: fix hard coded /sbin/tc (Cédric Bosdonnat) - Push nwfilter update locking up to top level (Daniel P. Berrange) - Add a read/write lock implementation (Daniel P. Berrange) - tests: Modify the scsi util tests (Osier Yang) - util: Accept test data path for scsi device's sg_path (Osier Yang) - tests: Add tests for scsi utils (Osier Yang) - util: Add one argument for several scsi utils (Osier Yang) - qemu: Don't fail if the SCSI host device is shareable between domains (Osier Yang) - virnetdevbandwidthtest: Introduce testVirNetDevBandwidthSet (Michal Privoznik) - virCommand: Introduce virCommandSetDryRun (Michal Privoznik) - snapshot: Add support for specifying snapshot disk backing type (Peter Krempa) - tests: Add more tests for virConnectBaselineCPU (Jiri Denemark) - cpu: Try to use source CPU model in virConnectBaselineCPU (Jiri Denemark) - cpu: Fix VIR_CONNECT_BASELINE_CPU_EXPAND_FEATURES (Jiri Denemark) - tests: Better support for VIR_CONNECT_BASELINE_CPU_EXPAND_FEATURES (Jiri Denemark) - Reword error message for oversized cpu time fields (Ján Tomko) - Simplify linuxNodeGetCPUStats (Ján Tomko) - Add hw random number generator (/dev/hwrng) to cgroup ACL (Pradipta Kr. Banerjee) - tests: Introduce virnetdevbandwidthtest (Michal Privoznik) - Add test for linuxNodeGetCPUStats (Ján Tomko) - Move test-local declarations to nodeinfopriv.h (Ján Tomko) - qemu: Enable 'host-passthrough' cpu mode for aarch64 (Oleg Strikov) - Block info query: Add check for transient domain (John Ferlan) - maint: update to latest gnulib, for mingw improvements (Eric Blake) - util: Add "shareable" field for virSCSIDevice struct (Osier Yang) - storage: Fix autostart of pool with "fc_host" type adapter (Osier Yang) - api: require write permission for guest agent interaction (Eric Blake) - virtlockd: make re-exec more robust (Michael Chapman) - build: add $(prefix) to SYSTEMD_UNIT_DIR (Laine Stump) - spice: expose the QEMU disable file transfer option (Francesco Romani) - spice: detect if qemu can disable file transfer (Francesco Romani) - lxc: allow to setup throttle blkio cgroup through virsh (Gao feng) - Add test for transient disk support in VMX files (Wout Mertens) - Make syntax check notice assignments w/o surrounding spaces. (Thorsten Behrens) - maint: align whitespaces with project conventions. (Thorsten Behrens) - virpcitest: Test virPCIDeviceDetach failure (Jiri Denemark) - virpcimock: Add PCI driver which always fails (Jiri Denemark) - virpcitest: More tests for device detach and reattach (Jiri Denemark) - virpcimock: Mock /sys/bus/pci/drivers_probe (Jiri Denemark) - pci: Publish some internal code for virpcitest (Jiri Denemark) - virpcitest: Show PCI device tested by each test (Jiri Denemark) - pci: Make reattach work for unbound devices (Jiri Denemark) - qemu: allow to setup throttle blkio cgroup through virsh (Gao feng) - virsh: add setting throttle blkio cgroup option to blkiotune (Gao feng) - blkio: Setting throttle blkio cgroup for domain (Gao feng) - domain: introduce xml elements for throttle blkio cgroup (Gao feng) - maint: replace remaining virLib*Error with better names (Eric Blake) - maint: simplify driver registration at startup (Eric Blake) - maint: clean up error reporting in migration (Eric Blake) - maint: don't lose error on canceled migration (Eric Blake) - maint: avoid nested use of virConnect{Ref,Close} (Eric Blake) - maint: don't leave garbage on early API exit (Eric Blake) - qemu: Change the default unix monitor timeout (Martin Kletzander) - storage: Sheepdog: Separate creating of the volume from building (Peter Krempa) - storage: RBD: Separate creating of the volume from building (Peter Krempa) - storage: Support deletion of volumes on gluster pools (Peter Krempa) - conf: Always use VIR_ERR_CONFIG_UNSUPPORTED on enumFromString() failures (Christophe Fergeau) Cleanups: - build-sys: Removed unused variable from configure.ac (Christophe Fergeau) - qemu: remove memset params array to zero in qemuDomainGetPercpuStats (Gao feng) - util: Fix the indention (Osier Yang) - virsh: Fix the string breaking style (Osier Yang) thanks everybody for the help with those release, be it with patches, bug reports, reviews, documentation, localizations, etc... Daniel -- Daniel Veillard | Open Source and Standards, Red Hat veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/ http://veillard.com/ | virtualization library http://libvirt.org/

2 1